Oleg Vinichenko Posted December 22, 2016 Report Share Posted December 22, 2016 new release with many fixes: linux (4.8.15-1) unstable; urgency=medium New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12 [x86] iommu/vt-d: Fix PASID table allocation [x86] iommu/vt-d: Fix IOMMU lookup for SR-IOV Virtual Functions [x86] KVM: fix out-of-bounds access in lapic [x86] KVM: x86: drop error recovery in em_jmp_far and em_ret_far (CVE-2016-9756) [x86] KVM: fix out-of-bounds accesses of rtc_eoi map (CVE-2016-9777) [x86] KVM: check for pic and ioapic presence before use [arm64, armhf] usb: chipidea: move the lock initialization to core file USB: serial: cp210x: add ID for the Zone DPMX USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad scsi: mpt3sas: Fix secure erase premature termination cfg80211: limit scan results cache size apparmor: fix change_hat not finding hat after policy replacement NFSv4.x: hide array-bounds warning [x86] fpu: Fix invalid FPU ptrace state after execve() [x86] traps: Ignore high word of regs->cs in early_fixup_exception() perf/core: Fix address filter parser perf/x86/intel: Cure bogus unwind from PEBS entries [x86] thermal/powerclamp: add back module device table [hppa/parisc] Fix races in parisc_setup_cache_timing() [hppa/parisc] Switch to generic sched_clock implementation [hppa/parisc] Fix race in pci-dma.c [hppa/parisc] Also flush data TLB in flush_icache_page_asm mpi: Fix NULL ptr dereference in mpi_powm() X.509: Fix double free in x509_cert_parse() xc2028: Fix use-after-free bug properly [powerpc] Set missing wakeup bit in LPCR on POWER9 [powerpc] mm: Fixup kernel read only mapping [powerpc] boot: Fix the early OPAL console wrappers can: bcm: fix support for CAN FD frames mm, oom: stop pre-mature high-order OOM killer invocations flow_dissect: call init_default_flow_dissectors() earlier scsi: mpt3sas: Unblock device after controller reset https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.13 libata-scsi: Fixup ata_gen_passthru_sense() scsi: hpsa: use bus '3' for legacy HBA devices scsi: libfc: fix seconds_since_last_reset miscalculation mm, thp: propagation of conditional compilation in khugepaged.c thp: fix corner case of munlock() of PTE-mapped THPs zram: fix unbalanced idr management at hot removal mm: fix false-positive WARN_ON() in truncate/invalidate for hugetlb ovl: fix d_real() for stacked fs Input: change KEY_DATA from 0x275 to 0x277 Input: psmouse - disable automatic probing of BYD touchpads rcu: Fix soft lockup for rcu_nocb_kthread mm: workingset: fix NULL ptr in count_shadow_nodes PCI: Export pcie_find_root_port PCI: Set Read Completion Boundary to 128 iff Root Port supports it (_HPX) mwifiex: printk() overflow with 32-byte SSIDs [arm64] KVM: vgic: Don't notify EOI for non-SPIs [x86] drm/i915: Don't touch NULL sg on i915_gem_object_get_pages_gtt() error [x86] drm/i915: drop the struct_mutex when wedged or trying to reset [x86] drm/amdgpu: fix power state when port pm is unavailable drm/radeon: fix power state when port pm is unavailable [x86] drm/amdgpu: fix check for port PM availability drm/radeon: fix check for port PM availability [arm64] dts: juno: fix cluster sleep state entry latency on all SoC versions KVM: use after free in kvm_ioctl_create_device() pwm: Fix device reference leak [x86] perf: Restore TASK_SIZE check on frame pointer [armhf] clk: sunxi: Fix M factor computation for APB1 batman-adv: Detect missing primaryif during tp_send as error [arm64] cpufeature: Schedule enable() calls instead of calling them via IPI [arm64] mm: Set PSTATE.PAN from the cpu_enable_pan() call [arm64] suspend: Reconfigure PSTATE after resume from idle https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14 gro_cells: mark napi struct as not busy poll candidates virtio-net: add a missing synchronize_net() [armhf] net: dsa: b53: Fix VLAN usage and how we treat CPU port net: check dead netns for peernet2id_alloc() ip6_tunnel: disable caching when the traffic class is inherited net: sky2: Fix shutdown crash af_unix: conditionally use freezable blocking calls in read rtnetlink: fix FDB size computation l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() rtnl: fix the loop index update error in rtnl_dump_ifinfo() ipv6: bump genid when the IFA_F_TENTATIVE flag is clear udplite: call proper backlog handlers [armhf] net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link change net, sched: respect rcu grace period on cls destruction [armhf] net: dsa: fix unbalanced dsa_switch_tree reference counting net/sched: pedit: make sure that offset is valid netlink: Call cb->done from a worker thread netlink: Do not schedule work from sk_destruct net/dccp: fix use-after-free in dccp_invalid_packet GSO: Reload iph after pskb_may_pull packet: fix race condition in packet_set_ring (CVE-2016-8655) ip6_offload: check segs for NULL in ipv6_gso_segment. cdc_ether: Fix handling connection notification tipc: check minimum bearer MTU (CVE-2016-8632) geneve: avoid use-after-free of skb->data net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793) net: ping: check minimum size on ICMP header length (CVE-2016-8399) ipv4: Restore fib_trie_flush_external function and fix call ordering ipv4: Fix memory leak in exception case for splitting tries ipv4: Drop leaf from suffix pull/push functions ipv4: Drop suffix update from resize code [sparc64] Fix find_node warning if numa node cannot be found [sparc64] fix compile warning section mismatch in find_node() [sparc] Fix inverted invalid_frame_pointer checks on sigreturns constify iov_iter_count() and iter_is_iovec() Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576) ipv6: Set skb->protocol properly for local output ipv4: Set skb->protocol properly for local output Revert: "ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit()" flowcache: Increase threshold for refusing new allocations esp4: Fix integrity verification when ESN are used esp6: Fix integrity verification when ESN are used https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15 [powerpc] eeh: Fix deadlock when PE frozen state can't be cleared [powerpc] mm: Fix lazy icache flush on pre-POWER5 [powerpc] boot: Fix build failure in 32-bit boot wrapper fuse: fix clearing suid, sgid for chown() [hppa/parisc] Purge TLB before setting PTE [hppa/parisc] Remove unnecessary TLB purges from flush_dcache_page_asm and flush_icache_page_asm [hppa/parisc] Fix TLB related boot crash on SMP machines zram: restrict add/remove attributes to root only locking/rtmutex: Prevent dequeue vs. unlock race locking/rtmutex: Use READ_ONCE() in rt_mutex_owner() device-dax: fix private mapping restriction, permit read-only scsi: lpfc: fix oops/BUG in lpfc_sli_ringtxcmpl_put() sched/autogroup: Fix 64-bit kernel nice level adjustment [x86] perf: Fix full width counter, counter overflow acpi, nfit: fix extended status translations for ACPI DSMs acpi, nfit, libnvdimm: fix / harden ars_status output length handling acpi, nfit: validate ars_status output buffer size acpi, nfit: fix bus vs dimm confusion in xlat_status [armel, armhf] crypto: marvell - Don't copy hash operation twice into the SRAM crypto: caam - fix pointer size for AArch64 boot loader, AArch32 kernel [armel, armhf] crypto: marvell - Don't corrupt state of an STD req for re-stepped ahash can: raw: raw_setsockopt: limit number of can_filter that can be set can: peak: fix bad memory access and free sequence [armel] dts: orion5x: fix number of sata port for linkstation ls-gl (Closes: #845611) ceph: don't set req->r_locked_dir in ceph_d_revalidate [m68k] Fix ndelay() macro batman-adv: Check for alloc errors when preparing TT local data hotplug: Make register and unregister notifier API symmetric [ Uwe Kleine-K?nig ] [armhf] dts: armada-385: add support for Turris Omnia [ Salvatore Bonaccorso ] Add ABI reference for 4.8.0-2 Ignore ABI changes in KVM net: handle no dst on skb in icmp6_send (CVE-2016-9919) [rt] Update to 4.8.11-rt7 [rt] Update to 4.8.14-rt9 netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755) Ignore ABI changes in libnvdimm docs: sphinx-extensions: make rstFlatTable work with docutils 0.13. Thanks to Dmitry Shachnev mitya57@debian.org (Closes: #848349) [ Ben Hutchings ] [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE. There are still binaries in stable that use vsyscall (via dietlibc). (Closes: #847154) debian/rules.real: Exclude *.pyc from featureset diffs debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign debian/rules: Use dpkg-parsechangelog -S option to select fields debian/rules: Tighten binNMU version matching, consistent with linux-latest AdiosKid 1 Link to comment Share on other sites More sharing options...
Recommended Posts