Jump to content


debian-sources-4.8.15 update

- - - - -

No replies to this topic

Oleg Vinichenko

Oleg Vinichenko


  • Moderators
  • 362 posts

new release with many fixes:

linux (4.8.15-1) unstable; urgency=medium

  • New upstream stable update: https://www.kernel.o...hangeLog-4.8.12

    • [x86] iommu/vt-d: Fix PASID table allocation
    • [x86] iommu/vt-d: Fix IOMMU lookup for SR-IOV Virtual Functions
    • [x86] KVM: fix out-of-bounds access in lapic
    • [x86] KVM: x86: drop error recovery in em_jmp_far and em_ret_far (CVE-2016-9756)
    • [x86] KVM: fix out-of-bounds accesses of rtc_eoi map (CVE-2016-9777)
    • [x86] KVM: check for pic and ioapic presence before use
    • [arm64, armhf] usb: chipidea: move the lock initialization to core file
    • USB: serial: cp210x: add ID for the Zone DPMX
    • USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad
    • scsi: mpt3sas: Fix secure erase premature termination
    • cfg80211: limit scan results cache size
    • apparmor: fix change_hat not finding hat after policy replacement
    • NFSv4.x: hide array-bounds warning
    • [x86] fpu: Fix invalid FPU ptrace state after execve()
    • [x86] traps: Ignore high word of regs->cs in early_fixup_exception()
    • perf/core: Fix address filter parser
    • perf/x86/intel: Cure bogus unwind from PEBS entries
    • [x86] thermal/powerclamp: add back module device table
    • [hppa/parisc] Fix races in parisc_setup_cache_timing()
    • [hppa/parisc] Switch to generic sched_clock implementation
    • [hppa/parisc] Fix race in pci-dma.c
    • [hppa/parisc] Also flush data TLB in flush_icache_page_asm
    • mpi: Fix NULL ptr dereference in mpi_powm()
    • X.509: Fix double free in x509_cert_parse()
    • xc2028: Fix use-after-free bug properly
    • [powerpc] Set missing wakeup bit in LPCR on POWER9
    • [powerpc] mm: Fixup kernel read only mapping
    • [powerpc] boot: Fix the early OPAL console wrappers
    • can: bcm: fix support for CAN FD frames
    • mm, oom: stop pre-mature high-order OOM killer invocations
    • flow_dissect: call init_default_flow_dissectors() earlier
    • scsi: mpt3sas: Unblock device after controller reset https://www.kernel.o...hangeLog-4.8.13
    • libata-scsi: Fixup ata_gen_passthru_sense()
    • scsi: hpsa: use bus '3' for legacy HBA devices
    • scsi: libfc: fix seconds_since_last_reset miscalculation
    • mm, thp: propagation of conditional compilation in khugepaged.c
    • thp: fix corner case of munlock() of PTE-mapped THPs
    • zram: fix unbalanced idr management at hot removal
    • mm: fix false-positive WARN_ON() in truncate/invalidate for hugetlb
    • ovl: fix d_real() for stacked fs
    • Input: change KEY_DATA from 0x275 to 0x277
    • Input: psmouse - disable automatic probing of BYD touchpads
    • rcu: Fix soft lockup for rcu_nocb_kthread
    • mm: workingset: fix NULL ptr in count_shadow_nodes
    • PCI: Export pcie_find_root_port
    • PCI: Set Read Completion Boundary to 128 iff Root Port supports it (_HPX)
    • mwifiex: printk() overflow with 32-byte SSIDs
    • [arm64] KVM: vgic: Don't notify EOI for non-SPIs
    • [x86] drm/i915: Don't touch NULL sg on i915_gem_object_get_pages_gtt() error
    • [x86] drm/i915: drop the struct_mutex when wedged or trying to reset
    • [x86] drm/amdgpu: fix power state when port pm is unavailable
    • drm/radeon: fix power state when port pm is unavailable
    • [x86] drm/amdgpu: fix check for port PM availability
    • drm/radeon: fix check for port PM availability
    • [arm64] dts: juno: fix cluster sleep state entry latency on all SoC versions
    • KVM: use after free in kvm_ioctl_create_device()
    • pwm: Fix device reference leak
    • [x86] perf: Restore TASK_SIZE check on frame pointer
    • [armhf] clk: sunxi: Fix M factor computation for APB1
    • batman-adv: Detect missing primaryif during tp_send as error
    • [arm64] cpufeature: Schedule enable() calls instead of calling them via IPI
    • [arm64] mm: Set PSTATE.PAN from the cpu_enable_pan() call
    • [arm64] suspend: Reconfigure PSTATE after resume from idle https://www.kernel.o...hangeLog-4.8.14
    • gro_cells: mark napi struct as not busy poll candidates
    • virtio-net: add a missing synchronize_net()
    • [armhf] net: dsa: b53: Fix VLAN usage and how we treat CPU port
    • net: check dead netns for peernet2id_alloc()
    • ip6_tunnel: disable caching when the traffic class is inherited
    • net: sky2: Fix shutdown crash
    • af_unix: conditionally use freezable blocking calls in read
    • rtnetlink: fix FDB size computation
    • l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind()
    • rtnl: fix the loop index update error in rtnl_dump_ifinfo()
    • ipv6: bump genid when the IFA_F_TENTATIVE flag is clear
    • udplite: call proper backlog handlers
    • [armhf] net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link change
    • net, sched: respect rcu grace period on cls destruction
    • [armhf] net: dsa: fix unbalanced dsa_switch_tree reference counting
    • net/sched: pedit: make sure that offset is valid
    • netlink: Call cb->done from a worker thread
    • netlink: Do not schedule work from sk_destruct
    • net/dccp: fix use-after-free in dccp_invalid_packet
    • GSO: Reload iph after pskb_may_pull
    • packet: fix race condition in packet_set_ring (CVE-2016-8655)
    • ip6_offload: check segs for NULL in ipv6_gso_segment.
    • cdc_ether: Fix handling connection notification
    • tipc: check minimum bearer MTU (CVE-2016-8632)
    • geneve: avoid use-after-free of skb->data
    • net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
    • net: ping: check minimum size on ICMP header length (CVE-2016-8399)
    • ipv4: Restore fib_trie_flush_external function and fix call ordering
    • ipv4: Fix memory leak in exception case for splitting tries
    • ipv4: Drop leaf from suffix pull/push functions
    • ipv4: Drop suffix update from resize code
    • [sparc64] Fix find_node warning if numa node cannot be found
    • [sparc64] fix compile warning section mismatch in find_node()
    • [sparc] Fix inverted invalid_frame_pointer checks on sigreturns
    • constify iov_iter_count() and iter_is_iovec()
    • Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576)
    • ipv6: Set skb->protocol properly for local output
    • ipv4: Set skb->protocol properly for local output
    • Revert: "ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit()"
    • flowcache: Increase threshold for refusing new allocations
    • esp4: Fix integrity verification when ESN are used
    • esp6: Fix integrity verification when ESN are used https://www.kernel.o...hangeLog-4.8.15
    • [powerpc] eeh: Fix deadlock when PE frozen state can't be cleared
    • [powerpc] mm: Fix lazy icache flush on pre-POWER5
    • [powerpc] boot: Fix build failure in 32-bit boot wrapper
    • fuse: fix clearing suid, sgid for chown()
    • [hppa/parisc] Purge TLB before setting PTE
    • [hppa/parisc] Remove unnecessary TLB purges from flush_dcache_page_asm and flush_icache_page_asm
    • [hppa/parisc] Fix TLB related boot crash on SMP machines
    • zram: restrict add/remove attributes to root only
    • locking/rtmutex: Prevent dequeue vs. unlock race
    • locking/rtmutex: Use READ_ONCE() in rt_mutex_owner()
    • device-dax: fix private mapping restriction, permit read-only
    • scsi: lpfc: fix oops/BUG in lpfc_sli_ringtxcmpl_put()
    • sched/autogroup: Fix 64-bit kernel nice level adjustment
    • [x86] perf: Fix full width counter, counter overflow
    • acpi, nfit: fix extended status translations for ACPI DSMs
    • acpi, nfit, libnvdimm: fix / harden ars_status output length handling
    • acpi, nfit: validate ars_status output buffer size
    • acpi, nfit: fix bus vs dimm confusion in xlat_status
    • [armel, armhf] crypto: marvell - Don't copy hash operation twice into the SRAM
    • crypto: caam - fix pointer size for AArch64 boot loader, AArch32 kernel
    • [armel, armhf] crypto: marvell - Don't corrupt state of an STD req for re-stepped ahash
    • can: raw: raw_setsockopt: limit number of can_filter that can be set
    • can: peak: fix bad memory access and free sequence
    • [armel] dts: orion5x: fix number of sata port for linkstation ls-gl (Closes: #845611)
    • ceph: don't set req->r_locked_dir in ceph_d_revalidate
    • [m68k] Fix ndelay() macro
    • batman-adv: Check for alloc errors when preparing TT local data
    • hotplug: Make register and unregister notifier API symmetric

    [ Uwe Kleine-K├Ânig ]

  • [armhf] dts: armada-385: add support for Turris Omnia

    [ Salvatore Bonaccorso ]

  • Add ABI reference for 4.8.0-2

  • Ignore ABI changes in KVM

  • net: handle no dst on skb in icmp6_send (CVE-2016-9919)

  • [rt] Update to 4.8.11-rt7

  • [rt] Update to 4.8.14-rt9

  • netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755)

  • Ignore ABI changes in libnvdimm

  • docs: sphinx-extensions: make rstFlatTable work with docutils 0.13. Thanks to Dmitry Shachnev mitya57@debian.org (Closes: #848349)

    [ Ben Hutchings ]

  • [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE. There are still binaries in stable that use vsyscall (via dietlibc). (Closes: #847154)

  • debian/rules.real: Exclude *.pyc from featureset diffs

  • debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign

  • debian/rules: Use dpkg-parsechangelog -S option to select fields

  • debian/rules: Tighten binNMU version matching, consistent with linux-latest

  • Otakku likes this

Reply to this topic


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users