diff --git a/debian/changelog b/debian/changelog index 5c2d36875..db81f26f7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -12,216 +12,104 @@ linux (4.0.2-1~exp1) UNRELEASED; urgency=medium (CVE-2015-3339) * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2 - - ip_forward: Drop frames with attached skb->sk - - net: add skb_checksum_complete_unset - - ppp: call skb_checksum_complete_unset in ppp_receive_frame - tcp: fix possible deadlock in tcp_send_fin() - - tcp: avoid looping in tcp_send_fin() + - tcp: avoid looping in tcp_send_fin() (regression in 4.0) - net: do not deplete pfmemalloc reserve - net: fix crash in build_skb() - - net: rfs: fix crash in get_rps_cpus() - - net/mlx4_en: Prevent setting invalid RSS hash function - - md: fix md io stats accounting broken - - [x86] asm/decoder: Fix and enforce max instruction size in the insn - decoder - - [x86] kvm: Revert "remove sched notifier for cross-cpu migrations" - - [x86] vdso: fix pvclock races with task migration - - [x86] sched/idle: Restore mwait_idle() to fix boot hangs, to improve power - savings and to improve performance - - [x86] sched/idle: Optimize unnecessary mwait_idle() resched IPIs + - net: rfs: fix crash in get_rps_cpus() (regression in 4.0) + - md: fix md io stats accounting broken (regression in 3.19) - [x86] perf/intel: Fix Core2,Atom,NHM,WSM cycles:pp events + (regression in 3.19) - [x86] fix special __probe_kernel_write() tail zeroing case - - [x86] KVM: Fix MSR_IA32_BNDCFGS in msrs_to_save + (regression in 4.0) - Btrfs: fix log tree corruption when fs mounted with -o discard - btrfs: don't accept bare namespace as a valid xattr - Btrfs: fix inode eviction infinite loop after cloning into it - Btrfs: fix inode eviction infinite loop after extent_same ioctl - - mm/hugetlb: use pmd_page() in follow_huge_pmd() - - powerpc/hugetlb: Call mm_dec_nr_pmds() in hugetlb_free_pmd_range() - - usb: gadget: printer: enqueue printer's response for setup request + - mm/hugetlb: use pmd_page() in follow_huge_pmd() (regression in 4.0) + - [powerpc] hugetlb: Call mm_dec_nr_pmds() in hugetlb_free_pmd_range() + (regression in 4.0) - [s390x] KVM: fix handling of write errors in the tpi handler - [s390x] KVM: reinjection of irqs can fail in the tpi handler - - [s390x] KVM: Zero out current VMDB of STSI before including level3 data. - - [s390x] KVM: fix get_all_floating_irqs + - [s390x] KVM: fix get_all_floating_irqs (regression in 3.15) - [s390x] hibernate: fix save and restore of kernel text section - KVM: use slowpath for cross page cached accesses - [arm*] KVM: check IRQ number on userland injection - [x86] KVM: VMX: Preserve host CR4.MCE value while in guest mode. - - [mips*] lose_fpu(): Disable FPU when MSA enabled - - [mips*] Malta: Detect and fix bad memsize values - - [mips*] asm: asm-eva: Introduce kernel load/store variants - - [mips*] unaligned: Prevent EVA instructions on kernel unaligned accesses - - [mips*] unaligned: Surround load/store macros in do {} while statements - - [mips*] unaligned: Fix regular load/store instruction emulation for EVA - [mips*el] Loongson-3: Add IRQF_NO_SUSPEND to Cascade irqaction + (regression in 3.19) - [mips*] Hibernate: flush TLB entries earlier - - staging: vt6655: use ieee80211_tx_info to select packet type. - md/raid0: fix bug with chunksize not a power of 2. - - megaraid_sas: use raw_smp_processor_id() - - drivers/base: cacheinfo: validate device node for all the caches - - cdc-wdm: fix endianness bug in debug statements - - mmc: tmio: Remove bogus un-initialization in tmio_mmc_host_free() - - [armhf] mmc: sunxi: Use devm_reset_control_get_optional() for reset - control - [armhf] spi: imx: read back the RX/TX watermark levels earlier - - spi: spidev: fix possible arithmetic overflow for multi-transfer message - - [x86] compal-laptop: Fix leaking hwmon device - - [x86] compal-laptop: Check return value of power_supply_register + (regression in 3.18) - ring-buffer: Replace this_cpu_*() with __this_cpu_*() - - power_supply: twl4030_madc: Check return value of power_supply_register - - power_supply: lp8788-charger: Fix leaked power supply on probe fail - - power_supply: ipaq_micro_battery: Fix leaking workqueue - - power_supply: ipaq_micro_battery: Check return values in probe - - HID: add HP OEM mouse to quirk ALWAYS_POLL - - HID: add quirk for PIXART OEM mouse used by HP - NFS: fix BUG() crash in notify_change() with patch to chown_common() - - [armel,armhf] fix broken hibernation + - [armhf] fix broken hibernation (regression in 3.16) - [armel,armhf] 8320/1: fix integer overflow in ELF_ET_DYN_BASE - - [armel,armhf] mvebu: Disable CPU Idle on Armada 38x - - [armel,armhf] S3C64XX: Use fixed IRQ bases to avoid conflicts on - Cragganmore - - [armel,armhf] at91/dt: sama5d3 xplained: add phy address for macb1 - - [armel,armhf] dts: dove: Fix uart[23] reg property - - [armel,armhf] dts: fix mmc node updates for exynos5250-spring - - usb: musb: core: fix TX/RX endpoint order - - usb: phy: Find the right match in devm_usb_phy_match - - usb: define a generic USB_RESUME_TIMEOUT macro - - usb: musb: use new USB_RESUME_TIMEOUT - - usb: host: oxu210hp: use new USB_RESUME_TIMEOUT - - usb: host: fusbh200: use new USB_RESUME_TIMEOUT - - usb: host: uhci: use new USB_RESUME_TIMEOUT - - usb: host: fotg210: use new USB_RESUME_TIMEOUT - - usb: host: r8a66597: use new USB_RESUME_TIMEOUT - - usb: host: isp116x: use new USB_RESUME_TIMEOUT - - usb: host: xhci: use new USB_RESUME_TIMEOUT - - usb: host: ehci: use new USB_RESUME_TIMEOUT - - usb: host: sl811: use new USB_RESUME_TIMEOUT - - usb: dwc2: hcd: use new USB_RESUME_TIMEOUT - - usb: isp1760: hcd: use new USB_RESUME_TIMEOUT - - usb: core: hub: use new USB_RESUME_TIMEOUT - - ALSA: hda - Add dock support for ThinkPad X250 (17aa:2226) - - ALSA: usb-audio: Don't attempt to get Microsoft Lifecam Cinema sample rate - ALSA: emu10k1: don't deadlock in proc-functions - - ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T450 - - ALSA: hda - fix "num_steps = 0" error on ALC256 - - ALSA: hda/realtek - Fix Headphone Mic doesn't recording for ALC256 - - ALSA: hda - fix headset mic detection problem for one more machine - - Input: elantech - fix absolute mode setting on some ASUS laptops - Input: alps - fix touchpad buttons getting stuck when used with trackpoint - - mfd: core: Fix platform-device name collisions + (regression in 4.0) + - mfd: core: Fix platform-device name collisions (regression in 3.19) - fs/binfmt_elf.c: fix bug in loading of PIE binaries - ptrace: fix race between ptrace_resume() and wait_task_stopped() - - [x86] intel_idle: Update support for Silvermont Core in Baytrail SOC - - net/macb: fix the peripheral version test - - NFC: st21nfcb: Retry i2c_master_send if it returns a negative value - - rtlwifi: rtl8192cu: Add new USB ID - - rtlwifi: rtl8192cu: Add new device ID - ext4: make fsync to sync parent dir in no-journal for real this time - - mnt: Improve the umount_tree flags - - mnt: Don't propagate umounts in __detach_mounts - - mnt: In umount_tree reuse mnt_list instead of mnt_hash - - mnt: Add MNT_UMOUNT flag - - mnt: Delay removal from the mount hash. - - mnt: On an unmount propagate clearing of MNT_LOCKED - - mnt: Don't propagate unmounts to locked mounts - - mnt: Factor out unhash_mnt from detach_mnt and umount_tree - - mnt: Factor umount_mnt from umount_tree - - mnt: Honor MNT_LOCKED when detaching mounts - - mnt: Fix the error check in __detach_mounts - - mnt: Update detach_mounts to leave mounts connected - - tpm: fix: sanitized code paths in tpm_chip_register() - - [powerpc*] perf: Cap 64bit userspace backtraces to PERF_MAX_STACK_DEPTH + - mnt: Prevent circumvention of locked mounts using umount(MNT_DETACH) + (CVE-2014-9717) + - tpm: fix: sanitized code paths in tpm_chip_register() (regression in 4.0) + - [powerpc/powerpc64,ppc64*] perf: Cap 64bit userspace backtraces to + PERF_MAX_STACK_DEPTH - UBI: account for bitflips in both the VID header and data - UBI: fix out of bounds write - - UBI: initialize LEB number variable - UBI: fix check for "too many bytes" - - scsi: storvsc: Fix a bug in copy_from_bounce_buffer() - - iscsi-target: Convert iscsi_thread_set usage to kthread.h - target: Fix COMPARE_AND_WRITE with SG_TO_MEM_NOALLOC handling - - target/file: Fix BUG() when CONFIG_DEBUG_SG=y and DIF protection enabled - - target/file: Fix UNMAP with DIF protection support - target/file: Fix SG table for prot_buf initialization - - iser-target: Fix session hang in case of an rdma read DIF error - - iser-target: Fix possible deadlock in RDMA_CM connection error - - Bluetooth: ath3k: Add support Atheros AR5B195 combo Mini PCIe card - - arm64: fix midr range for Cortex-A57 erratum 832075 - - arm64: head.S: ensure visibility of page tables - - arm64: Adjust EFI libstub object include logic - - arm64: apply alternatives for !SMP kernels - - arm64: errata: add workaround for cortex-a53 erratum #845719 - - [powerpc*] powernv: Don't map M64 segments using M32DT - - powerpc: Fix missing L2 cache size in /sys/devices/system/cpu - - [powerpc*] cell: Fix crash in iic_setup_cpu() after per_cpu changes - - [powerpc*] cell: Fix cell iommu after it_page_shift changes - - ASoC: cs4271: Increase delay time after reset - - ASoC: wm8741: Fix rates constraints values - - ASoC: davinci-evm: drop un-necessary remove function - - ASoC: pcm512x: Add 'Analogue' prefix to analogue volume controls - - ASoC: pcm512x: Fix divide by zero issue - - ACPICA: Utilities: split IO address types from data type models. - - ACPICA: Tables: Don't release ACPI_MTX_TABLES in - acpi_tb_install_standard_table(). - - ACPICA: Store GPE register enable masks upfront - - ACPI / scan: Annotate physical_node_lock in acpi_scan_is_offline() - - gpio: mvebu: Fix mask/unmask managment per irq chip type - - clk: samsung: exynos4: Disable ARMCLK down feature on Exynos4210 SoC - - clk: tegra: Register the proper number of resets - - clk: tegra: Use the proper parent for plld_dsi - - clk: qcom: Fix i2c frequency table - - clk: qcom: Properly change rates for ahbix clock - - clk: qcom: fix RCG M/N counter configuration - - clk: qcom: Fix ipq806x LCC frequency tables - - dm crypt: fix deadlock when async crypto algorithm returns -EBUSY - - serial: 8250_dw: add support for AMD SOC Carrizo - - serial: imx: Fix clearing of receiver overrun flag - - serial: 8250: Check UART_SCR is writable - - sd: Unregister integrity profile - - sd: Fix missing ATO tag check - - Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open() - - mvsas: fix panic on expander attached SATA devices - - rc: img-ir: fix error in parameters passed to irq_free() - - stk1160: Make sure current buffer is released + - [arm64] head.S: ensure visibility of page tables (regression in 3.15) + - [arm64] errata: add workaround for cortex-a53 erratum #845719 + - [powerpc/powerpc64,ppc64*] powernv: Don't map M64 segments using M32DT + (regression in 3.17) + - [powerpc/powerpc64,ppc64] cell: Fix crash in iic_setup_cpu() after per_cpu + changes (regression in 3.19) + - [powerpc/powerpc64,ppc64] cell: Fix cell iommu after it_page_shift changes + - [i386/686-pae] ACPICA: Utilities: split IO address types from data type + models. + - ACPICA: Store GPE register enable masks upfront (regression in 3.19) + - [armhf] clk: samsung: exynos4: Disable ARMCLK down feature on Exynos4210 + SoC (regression in 3.17) + - [armhf] clk: tegra: Use the proper parent for plld_dsi (regression in 4.0) + - [armhf] serial: imx: Fix clearing of receiver overrun flag + - serial: 8250: Check UART_SCR is writable (regression in 4.0) + - sd: Unregister integrity profile (regression in 3.18) + - sd: Fix missing ATO tag check (regression in 3.18) + - [x86] Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open() - IB/core: disallow registering 0-sized memory region - - IB/core: don't disallow registering region starting at 0x0 - - IB/mlx4: Fix WQE LSO segment calculation - IB/iser: Fix wrong calculation of protection buffer length - - tracing: Handle ftrace_dump() atomic context in graph_trace_open() - - tracing: Fix incorrect enabling of trace events by boot cmdline - - i2c: mux: use proper dev when removing "channel-X" symlinks - - i2c: rk3x: report number of messages transmitted - - i2c: Mark adapter devices with pm_runtime_no_callbacks - - i2c: core: Export bus recovery functions - - drm/radeon: fix doublescan modes (v2) + (regression in 3.16) + - i2c: Mark adapter devices with pm_runtime_no_callbacks (regression in 4.0) - [armhf] drm/exynos: Enable DP clock to fix display on Exynos5250 and other - - [x86] drm/i915: Dont enable CS_PARSER_ERROR interrupts at all - - drm: adv7511: Fix DDC error interrupt handling - - drm: adv7511: Fix nested sleep when reading EDID + (regression in 4.0) - [x86] drm/i915: vlv: fix save/restore of GFX_MAX_REQ_COUNT reg + (regression in 3.16) - [x86] drm/i915: cope with large i2c transfers - - RCU pathwalk breakage when running into a symlink overmounting something + - vfs: RCU pathwalk breakage when running into a symlink overmounting + something - Revert "nfs: replace nfs_add_stats with nfs_inc_stats when add one" - - nfsd4: disallow ALLOCATE with special stateids - - nfsd4: fix READ permission checking - - nfsd4: disallow SEEK with special stateids - - nfsd: eliminate NFSD_DEBUG - - nfsd: fix nsfd startup race triggering BUG_ON + (regression in 3.19) + - nfsd4: disallow ALLOCATE with special stateids (regression in 3.19) + - nfsd4: fix READ permission checking (regression in 3.16) + - nfsd4: disallow SEEK with special stateids (regression in 3.18) + - nfsd: eliminate NFSD_DEBUG (regression of linux-libc-dev in 3.19) - nfs: fix high load average due to callback thread sleeping - - nfs: fix DIO good bytes calculation + (regression in 4.0) + - nfs: fix DIO good bytes calculation (regression in 4.0) - nfs: remove WARN_ON_ONCE from nfs_direct_good_bytes - - NFS: Add a stub for GETDEVICELIST + - NFS: Add a stub for GETDEVICELIST (regression in 3.18) - sched/deadline: Always enqueue on previous rq when dl_task_timer() fires - - e1000: add dummy allocator to fix race condition between mtu change and - netpoll - - mac80211: send AP probe as unicast again - - ebpf: verifier: check that call reg with ARG_ANYTHING is initialized - - mm, thp: really limit transparent hugepage allocation to local node + (regression in 4.0) + - mac80211: send AP probe as unicast again (regression in 3.19) - lib: memzero_explicit: use barrier instead of OPTIMIZER_HIDE_VAR - - wl18xx: show rx_frames_per_rates as an array as it really is - [armhf] crypto: omap-aes - Fix support for unequal lengths - memstick: mspro_block: add missing curly braces - - drivers: platform: parse IRQ flags from resources - - driver core: bus: Goto appropriate labels on failure in bus_add_device - - netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING + - drivers: platform: parse IRQ flags from resources (regression in 3.18) [ Ben Hutchings ] * debian.py,gencontrol.py: Fix the version sanity checks for backports and