[ubuntu/vivid-security] linux 3.19.0-61.69 (Accepted)

Adam Conrad adconrad at 0c3.net
Thu Jun 9 21:57:03 UTC 2016 

linux (3.19.0-61.69) vivid; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-1583 (LP: #1588871)
    - ecryptfs: fix handling of directory opening
    - SAUCE: proc: prevent stacking filesystems on top
    - SAUCE: ecryptfs: forbid opening files without mmap handler
    - SAUCE: sched: panic on corrupted stack end

linux (3.19.0-60.67) vivid; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1582780

  [ Kamal Mostafa ]

  * [Config] Drop ozwpan from the ABI

  [ Luis Henriques ]

  * [Config] CONFIG_USB_WPAN_HCD=n
    - LP: #1463740
    - CVE-2015-4004

  [ Prarit Bhargava ]

  * SAUCE: (no-up) ACPICA: Dispatcher: Update thread ID for recursive
    method calls
    - LP: #1577898

  [ Upstream Kernel Changes ]

  * usbnet: cleanup after bind() in probe()
    - LP: #1567191
    - CVE-2016-3951
  * USB: usbip: fix potential out-of-bounds write
    - LP: #1572666
    - CVE-2016-3955
  * x86/mm/32: Enable full randomization on i386 and X86_32
    - LP: #1568523
    - CVE-2016-3672
  * Input: gtco - fix crash on detecting device without endpoints
    - LP: #1575706
    - CVE-2016-2187
  * tunnel: Clear IPCB(skb)->opt before dst_link_failure called
    - LP: #1576839
  * net: jme: fix suspend/resume on JMC260
    - LP: #1576839
  * net: qca_spi: clear IFF_TX_SKB_SHARING
    - LP: #1576839
  * sctp: lack the check for ports in sctp_v6_cmp_addr
    - LP: #1576839
  * qmi_wwan: add Sierra Wireless EM74xx device ID
    - LP: #1576839
  * cdc_ncm: toggle altsetting to force reset before setup
    - LP: #1576839
  * udp6: fix UDP/IPv6 encap resubmit path
    - LP: #1576839
  * net: validate variable length ll headers
    - LP: #1576839
  * sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
    - LP: #1576839
  * macvtap: always pass ethernet header in linear
    - LP: #1576839
  * farsync: fix off-by-one bug in fst_add_one
    - LP: #1576839
  * qlge: Fix receive packets drop.
    - LP: #1576839
  * bonding: fix bond_get_stats()
    - LP: #1576839
  * xfrm: Fix crash observed during device unregistration and decryption
    - LP: #1576839
  * qmi_wwan: add "D-Link DWM-221 B1" device id
    - LP: #1576839
  * rtnl: fix msg size calculation in if_nlmsg_size()
    - LP: #1576839
  * ipv4: l2tp: fix a potential issue in l2tp_ip_recv
    - LP: #1576839
  * ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
    - LP: #1576839
  * HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
    - LP: #1576839
  * ARM: OMAP2+: hwmod: Fix updating of sysconfig register
    - LP: #1576839
  * drm/qxl: fix cursor position with non-zero hotspot
    - LP: #1576839
  * assoc_array: don't call compare_object() on a node
    - LP: #1576839
  * ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
    - LP: #1576839
  * nl80211: check netlink protocol in socket release notification
    - LP: #1576839
  * ALSA: hda - Fix regression of monitor_present flag in eld proc file
    - LP: #1576839
  * dmaengine: dw: fix master selection
    - LP: #1576839
  * lib: lz4: fixed zram with lz4 on big endian machines
    - LP: #1576839
  * usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
    - LP: #1576839
  * xhci: resume USB 3 roothub first
    - LP: #1576839
  * usb: host: xhci: add a new quirk XHCI_NO_64BIT_SUPPORT
    - LP: #1576839
  * usb: xhci: fix wild pointers in xhci_mem_cleanup
    - LP: #1576839
  * usb: xhci: fix xhci locking up during hcd remove
    - LP: #1576839
  * xhci: fix 10 second timeout on removal of PCI hotpluggable xhci
    controllers
    - LP: #1576839
  * USB: uas: Add a new NO_REPORT_LUNS quirk
    - LP: #1576839
  * usb: hcd: out of bounds access in for_each_companion
    - LP: #1576839
  * crypto: sha1-mb - use corrcet pointer while completing jobs
    - LP: #1576839
  * crypto: ccp - Prevent information leakage on export
    - LP: #1576839
  * video: ARM CLCD: runtime check for Versatile
    - LP: #1576839
  * ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
    - LP: #1576839
  * powerpc: scan_features() updates incorrect bits for REAL_LE
    - LP: #1576839
  * powerpc: Update cpu_user_features2 in scan_features()
    - LP: #1576839
  * drm/radeon: add a quirk for a XFX R9 270X
    - LP: #1576839
  * futex: Handle unlock_pi race gracefully
    - LP: #1576839
  * futex: Acknowledge a new waiter in counter before plist
    - LP: #1576839
  * ALSA: pcxhr: Fix missing mutex unlock
    - LP: #1576839
  * drm/dp/mst: Validate port in drm_dp_payload_send_msg()
    - LP: #1576839
  * drm/radeon: forbid mapping of userptr bo through radeon device file
    - LP: #1576839
  * drm: Loongson-3 doesn't fully support wc memory
    - LP: #1576839
  * mm: hugetlb: allow hugepages_supported to be architecture specific
    - LP: #1576839
  * x86/mm/xen: Suppress hugetlbfs in PV guests
    - LP: #1576839
  * x86 EDAC, sb_edac.c: Repair damage introduced when "fixing" channel
    address
    - LP: #1576839
  * x86 EDAC, sb_edac.c: Take account of channel hashing when needed
    - LP: #1576839
  * s390/scm_blk: fix deadlock for requests != REQ_TYPE_FS
    - LP: #1576839
  * packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
    - LP: #1576839
  * net: sched: do not requeue a NULL skb
    - LP: #1576839
  * bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
    - LP: #1576839
  * pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than
    ffs
    - LP: #1576839
  * s390/spinlock: avoid yield to non existent cpu
    - LP: #1576839
  * net: bcmgenet: device stats are unsigned long
    - LP: #1576839
  * Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
    - LP: #1576839
  * net: ethernet: davinci_emac: Fix Unbalanced pm_runtime_enable
    - LP: #1576839
  * net: ethernet: davinci_emac: Fix platform_data overwrite
    - LP: #1576839
  * atl2: Disable unimplemented scatter/gather feature
    - LP: #1576839
  * Linux 3.19.8-ckt20
    - LP: #1576839
  * PNP: Add Broadwell to Intel MCH size workaround
    - LP: #1577748
  * PNP: Add Haswell-ULT to Intel MCH size workaround
    - LP: #1577748
  * fs/pnode.c: treat zero mnt_group_id-s as unequal
    - LP: #1572316
  * propogate_mnt: Handle the first propogated copy being a slave
    - LP: #1572316
  * drm: Balance error path for GEM handle allocation
    - LP: #1579610
  * powerpc/tm: Abort syscalls in active transactions
    - LP: #1572624
  * net: fix infoleak in llc
    - LP: #1578496
    - CVE-2016-4485
  * net: fix infoleak in rtnetlink
    - LP: #1578497
    - CVE-2016-4486
  * [3.19-stable-only] fix backport "KVM: s390: avoid memory overwrites on
    emergency signal injection"
    - LP: #1582771
  * ASoC: rt5640: Correct the digital interface data select
    - LP: #1582771
  * ASoC: dapm: Make sure we have a card when displaying component widgets
    - LP: #1582771
  * iio: ak8975: Fix NULL pointer exception on early interrupt
    - LP: #1582771
  * i2c: cpm: Fix build break due to incompatible pointer types
    - LP: #1582771
  * i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared
    - LP: #1582771
  * efi: Fix out-of-bounds read in variable_matches()
    - LP: #1582771
  * USB: serial: cp210x: add ID for Link ECU
    - LP: #1582771
  * USB: serial: cp210x: add Straizona Focusers device ids
    - LP: #1582771
  * ALSA: hda - Add dock support for ThinkPad X260
    - LP: #1582771
  * workqueue: fix ghost PENDING flag while doing MQ IO
    - LP: #1582771
  * drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
    - LP: #1582771
  * cxl: Keep IRQ mappings on context teardown
    - LP: #1582771
  * drm/i915: Fix system resume if PCI device remained enabled
    - LP: #1582771
  * drm/i915/ddi: Fix eDP VDD handling during booting and suspend/resume
    - LP: #1582771
  * ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel
    - LP: #1582771
  * IB/security: Restrict use of the write() interface
    - LP: #1582771
  * mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
    - LP: #1582771
  * mm: vmscan: reclaim highmem zone if buffer_heads is over limit
    - LP: #1582771
  * EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder
    callback
    - LP: #1582771
  * powerpc: Fix bad inline asm constraint in create_zero_mask()
    - LP: #1582771
  * Minimal fix-up of bad hashing behavior of hash_64()
    - LP: #1582771
  * tracing: Don't display trigger file for events that can't be enabled
    - LP: #1582771
  * drm/radeon: make sure vertical front porch is at least 1
    - LP: #1582771
  * MAINTAINERS: Remove asterisk from EFI directory names
    - LP: #1582771
  * x86/sysfb_efi: Fix valid BAR address range check
    - LP: #1582771
  * mm, cma: prevent nr_isolated_* counters from going negative
    - LP: #1582771
  * x86/tsc: Read all ratio bits from MSR_PLATFORM_INFO
    - LP: #1582771
  * parisc: fix a bug when syscall number of tracee is __NR_Linux_syscalls
    - LP: #1582771
  * jme: Do not enable NIC WoL functions on S0
    - LP: #1582771
  * jme: Fix device PM wakeup API usage
    - LP: #1582771
  * batman-adv: Check skb size before using encapsulated ETH+VLAN header
    - LP: #1582771
  * batman-adv: Reduce refcnt of removed router when updating route
    - LP: #1582771
  * batman-adv: Fix broadcast/ogm queue limit on a removed interface
    - LP: #1582771
  * cxgbi: fix uninitialized flowi6
    - LP: #1582771
  * net/mlx4_en: fix spurious timestamping callbacks
    - LP: #1582771
  * Linux 3.19.8-ckt21
    - LP: #1582771

Date: 2016-06-08 21:33:14.717299+00:00
Changed-By: Andy Whitcroft <apw at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/+source/linux/3.19.0-61.69
-------------- next part --------------
Sorry, changesfile not available.

More information about the Vivid-changes mailing list