linux-lts-wily (4.2.0-22.27~14.04.1) trusty; urgency=low
[ Kamal Mostafa ]
* Release Tracking Bug
- LP: #1527538
[ Jann Horn ]
* ptrace: being capable wrt a process requires mapped uids/gids
- LP: #1527374
linux (4.2.0-22.26) wily; urgency=low
[ Upstream Kernel Changes ]
* xen: Add RING_COPY_REQUEST()
- CVE-2015-8550
* xen-netback: don't use last request to determine minimum Tx credit
- CVE-2015-8550
* xen-netback: use RING_COPY_REQUEST() throughout
- CVE-2015-8550
* xen-blkback: only read request operation from shared ring once
- CVE-2015-8550
* xen-blkback: read from indirect descriptors only once
- CVE-2015-8550
* xen-scsiback: safely copy requests
- CVE-2015-8550
* xen/pciback: Save xen_pci_op commands before processing it
- CVE-2015-8550
* xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI
or MSI-X enabled
- CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
* xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI
or MSI-X enabled
- CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
* xen/pciback: Do not install an IRQ handler for MSI interrupts.
- CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
* xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has
MSI(X) enabled.
- CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
* xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set.
- CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
linux (4.2.0-21.25) wily; urgency=low
[ Luis Henriques ]
* Release Tracking Bug
- LP: #1522108
[ Upstream Kernel Changes ]
* staging/dgnc: fix info leak in ioctl
- LP: #1509565
- CVE-2015-7885
* [media] media/vivid-osd: fix info leak in ioctl
- LP: #1509564
- CVE-2015-7884
* KEYS: Fix race between key destruction and finding a keyring by name
- LP: #1508856
- CVE-2015-7872
* KEYS: Fix crash when attempt to garbage collect an uninstantiated
keyring
- LP: #1508856
- CVE-2015-7872
* KEYS: Don't permit request_key() to construct a new keyring
- LP: #1508856
- CVE-2015-7872
* isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
- LP: #1508329
- CVE-2015-7799
* ppp, slip: Validate VJ compression slot parameters completely
- LP: #1508329
- CVE-2015-7799
Date: 2015-12-18 10:54:15.784327+00:00
Changed-By: Luis Henriques <luis.henriques at canonical.com>
Signed-By: Chris J Arges <chris.j.arges at canonical.com>
https://launchpad.net/ubuntu/+source/linux-lts-wily/4.2.0-22.27~14.04.1
-------------- next part --------------
Sorry, changesfile not available.