[ubuntu/vivid-updates] linux 3.19.0-91.99 (Accepted)

[Andy Whitcroft]

linux (3.19.0-91.99) vivid; urgency=low

  * CVE-2017-1000112
    - ipv4: Should use consistent conditional judgement for ip fragment in
      __ip_append_data and ip_finish_output
    - ipv6: Don't use ufo handling on later transformed packets
    - udp: avoid ufo handling on IP payload compression packets
    - ipv6: Should use consistent conditional judgement for ip6 fragment between
      __ip6_append_data and ip6_finish_output
    - net: account for current skb length when deciding about UFO
    - udp: consistently apply ufo or fragmentation

  * CVE-2017-1000111
    - net-packet: fix race in packet_set_ring on PACKET_RESERVE

linux (3.19.0-90.98) vivid; urgency=low

  * CVE-2017-7533
    - dentry name snapshots

linux (3.19.0-89.97) vivid; urgency=low

  * linux: 3.19.0-89.97 -proposed tracker (LP: #1705003)

  * CVE-2017-1000364
    - mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack
    - mm/mmap.c: expand_downwards: don't require the gap if !vm_prev

linux (3.19.0-88.96) vivid; urgency=low

  * linux: 3.19.0-88.96 -proposed tracker (LP: #1700553)

  * CVE-2017-1000364
    - Revert "mm: do not collapse stack gap into THP"
    - Revert "mm: enlarge stack guard gap"
    - mm: vma_adjust: remove superfluous confusing update in remove_next == 1 case
    - mm: larger stack guard gap, between vmas
    - mm: fix new crash in unmapped_area_topdown()
    - Allow stack to grow up to address space limit

  * CVE-2017-7294
    - drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

  * move aufs.ko from -extra to linux-image package (LP: #1673498)
    - [config] aufs.ko moved to linux-image package

linux (3.19.0-87.95) vivid; urgency=low

  * CVE-2017-1000364
    - mm: enlarge stack guard gap
    - mm: do not collapse stack gap into THP

linux (3.19.0-85.93) vivid; urgency=low

  * linux: 3.19.0-85.93 -proposed tracker (LP: #1678055)

  * Fix CVE-2017-7308 (LP: #1678009)
    - net/packet: fix overflow in check for priv area size
    - net/packet: fix overflow in check for tp_frame_nr
    - net/packet: fix overflow in check for tp_reserve

Date: 2017-08-08 11:38:14.148761+00:00
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux/3.19.0-91.99
-------------- next part --------------
Sorry, changesfile not available.