Back to linux-4.9 PTS page

Accepted linux-4.9 4.9.189-3~deb8u1 (all source) into oldoldstable, oldoldstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 13 Aug 2019 19:47:06 +0100
Binary: linux-doc-4.9 linux-headers-4.9.0-0.bpo.11-common linux-headers-4.9.0-0.bpo.11-common-rt linux-manual-4.9 linux-source-4.9 linux-support-4.9.0-0.bpo.11
Source: linux-4.9
Architecture: all source
Version: 4.9.189-3~deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Closes: 866122 904385 930904 935134
Description: 
 linux-doc-4.9 - Linux kernel specific documentation for version 4.9
 linux-headers-4.9.0-0.bpo.11-common - Common header files for Linux 4.9.0-0.bpo.11
 linux-headers-4.9.0-0.bpo.11-common-rt - Common header files for Linux 4.9.0-0.bpo.11-rt
 linux-manual-4.9 - Linux kernel API manual pages for version 4.9
 linux-source-4.9 - Linux kernel source for version 4.9 with Debian patches
 linux-support-4.9.0-0.bpo.11 - Support files for Linux 4.9
Changes:
 linux-4.9 (4.9.189-3~deb8u1) jessie-security; urgency=medium
 .
   * Backport to jessie:
     - Change ABI number to 0.bpo.11
 .
 linux (4.9.189-3) stretch; urgency=medium
 .
   * tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue
 .
 linux (4.9.189-2) stretch; urgency=medium
 .
   [ Salvatore Bonaccorso ]
   * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
     (CVE-2019-15538)
 .
   [ Ben Hutchings ]
   * [s390x] Revert "perf test 6: Fix missing kvm module load for s390"
     (fixes FTBFS)
 .
 linux (4.9.189-1) stretch; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.186
     - [x86] Input: elantech - enable middle button support on 2 ThinkPads
     - mac80211: mesh: fix RCU warning
     - mac80211: free peer keys before vif down in mesh
     - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
     - netfilter: ipv6: nf_defrag: accept duplicate fragments again
     - [armhf] Input: imx_keypad - make sure keyboard can always wake up system
     - [arm64] KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
     - mac80211: only warn once on chanctx_conf being NULL
     - md: fix for divide error in status_resync
     - bnx2x: Check if transceiver implements DDM before access
     - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
     - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
     - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
     - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
     - [x86] tls: Fix possible spectre-v1 in do_get_thread_area()
     - fscrypt: don't set policy for a dead directory
     - USB: serial: ftdi_sio: add ID for isodebug v1
     - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
     - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
     - p54usb: Fix race between disconnect and firmware loading
       (CVE-2019-15220)
     - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
     - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt
     - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt
     - carl9170: fix misuse of device driver API
     - [x86] VMCI: Fix integer overflow in VMCI handle arrays
     - Revert "e1000e: fix cyclic resets at link up with active tx"
     - e1000e: start network tx queue only when link is up
     - [arm64] crypto: remove accidentally backported files
     - perf/core: Fix perf_sample_regs_user() mm check
     - [armhf] omap2: remove incorrect __init annotation
     - be2net: fix link failure after ethtool offline test
     - ppp: mppe: Add softdep to arc4
     - sis900: fix TX completion
     - dm verity: use message limit for data block corruption message
     - [s390x] fix stfle zero padding
     - [s390x] qdio: (re-)initialize tiqdio list entries
     - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues()
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.187
     - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly
     - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path
     - ath10k: Do not send probe response template for mesh
     - ath9k: Check for errors when reading SREV register
     - ath6kl: add some bounds checking
     - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
     - batman-adv: fix for leaked TVLV handler.
     - media: dvb: usb: fix use after free in dvb_usb_device_exit
     - media: marvell-ccic: fix DMA s/g desc number calculation
     - media: media_device_enum_links32: clean a reserved field
     - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries
     - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries
     - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
     - af_key: fix leaks in key_pol_get_resp and dump_sp.
     - xfrm: Fix xfrm sel prefix length validation
     - media: mc-device.c: don't memset __user pointer contents
     - net: phy: Check against net_device being NULL
     - tua6100: Avoid build warnings.
     - [armhf] media: wl128x: Fix some error handling in
       fm_v4l2_init_video_device()
     - cpupower : frequency-set -r option misses the last cpu in related cpu
       list
     - [s390x] qdio: handle PENDING state for QEBSM devices
     - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
     - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4
     - [armhf] gpio: omap: ensure irq is enabled before wakeup
     - regmap: fix bulk writes on paged registers
     - bpf: silence warning messages in core
     - rcu: Force inlining of rcu_read_lock()
     - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
       arbitration
     - xfrm: fix sa selector validation
     - perf evsel: Make perf_evsel__name() accept a NULL argument
     - vhost_net: disable zerocopy by default
     - ipoib: correcly show a VF hardware address
     - EDAC/sysfs: Fix memory leak when creating a csrow object
     - ipsec: select crypto ciphers for xfrm_algo
     - media: i2c: fix warning same module names
     - ntp: Limit TAI-UTC offset
     - timer_list: Guard procfs specific code
     - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0
     - mt7601u: do not schedule rx_tasklet when the device has been disconnected
     - mt7601u: fix possible memory leak when the device is disconnected
     - ath10k: fix PCIE device wake up failed
     - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
     - libata: don't request sense data on !ZAC ATA devices
     - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch
       timer
     - rslib: Fix decoding of shortened codes
     - rslib: Fix handling of of caller provided syndrome
     - ixgbe: Check DDM existence in transceiver before access
     - crypto: asymmetric_keys - select CRYPTO_HASH where needed
     - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
     - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
     - iwlwifi: mvm: Drop large non sta frames
     - net: usb: asix: init MAC address buffers
     - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
     - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
     - Bluetooth: 6lowpan: search for destination address in all peers
     - Bluetooth: Check state in l2cap_disconnect_rsp
     - Bluetooth: validate BLE connection interval updates
     - gtp: fix Illegal context switch in RCU read-side critical section.
     - gtp: fix use-after-free in gtp_newlink()
     - crypto: ghash - fix unaligned memory access in ghash_setkey()
     - [arm64] crypto: sha1-ce - correct digest for empty data in finup
     - [arm64] crypto: sha2-ce - correct digest for empty data in finup
     - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
     - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages
     - [arm64] tegra: Update Jetson TX1 GPU regulator timings
     - iwlwifi: pcie: don't service an interrupt that was masked
     - tracing/snapshot: Resize spare buffer if size changed
     - NFSv4: Handle the special Linux file open access mode
     - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
       PAGE_SIZE
     - ALSA: seq: Break too long mutex context in the write loop
     - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
     - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
     - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed
     - [arm64] tegra: Fix AGIC register range
     - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
       inodes.
     - drm/nouveau/i2c: Enable i2c pads & busses during preinit
     - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
     - 9p/virtio: Add cleanup path in p9_virtio_init
     - PCI: Do not poll for PME if the device is in D3cold
     - Btrfs: add missing inode version, ctime and mtime updates when punching
       hole
     - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
     - take floppy compat ioctls to floppy.c
     - [x86] crypto: ccp - Validate the the error value used to index error
       messages
     - [x86] PCI: hv: Delete the device earlier from hbus->children for hot-
       remove
     - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
     - [ppc64el] watchpoint: Restore NV GPRs while returning from exception
     - eCryptfs: fix a couple type promotion bugs
     - [x86] intel_th: msu: Fix single mode with disabled IOMMU
     - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
     - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
     - dm bufio: fix deadlock with loop device
     - compiler.h: Add read_word_at_a_time() function.
     - ext4: allow directory holes
     - bnx2x: Prevent load reordering in tx completion processing
     - bnx2x: Prevent ptp_task to be rescheduled indefinitely
     - igmp: fix memory leak in igmpv3_del_delrec()
     - ipv4: don't set IPv6 only flags to IPv4 addresses
     - [armhf] net: dsa: mv88e6xxx: wait after reset deactivation
     - net: neigh: fix multiple neigh timer scheduling
     - net: openvswitch: fix csum updates for MPLS actions
     - nfc: fix potential illegal memory access
     - rxrpc: Fix send on a connected, but unbound socket
     - [x86] sky2: Disable MSI on ASUS P6T
     - vrf: make sure skb->data contains ip header to make routing
     - macsec: fix use-after-free of skb during RX
     - macsec: fix checksumming after decryption
     - netrom: fix a memory leak in nr_rx_frame()
     - netrom: hold sock when setting skb->destructor
     - bonding: validate ip header before check IPPROTO_IGMP
     - tcp: Reset bytes_acked and bytes_received when disconnecting
     - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
     - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
     - net: bridge: stp: don't cache eth dest pointer before skb pull
     - [x86] perf/amd/uncore: Rename 'L2' to 'LLC'
     - [x86] perf/amd/uncore: Get correct number of cores sharing last level
       cache
     - [x86] perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined
       cpu_llc_id
     - NFSv4: Fix open create exclusive when the server reboots
     - nfsd: give out fewer session slots as limit approaches
     - nfsd: fix performance-limiting session calculation
     - nfsd: Fix overflow causing non-working mounts on 1 TB machines
     - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe
     - usb: core: hub: Disable hub-initiated U1/U2
     - [armhf] pinctrl: rockchip: fix leaked of_node references
     - memstick: Fix error cleanup path of memstick_init
     - [arm64] tty: serial: msm_serial: avoid system lockup condition
     - serial: 8250: Fix TX interrupt handling condition
     - drm/virtio: Add memory barriers for capset cache.
     - phy: renesas: rcar-gen2: Fix memory leak at error paths
     - [armhf] drm/rockchip: Properly adjust to a true clock in adjusted_mode
     - tty: serial_core: Set port active bit in uart_port_activate
     - usb: gadget: Zero ffs_io_data
     - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs
     - PCI: sysfs: Ignore lockdep for remove attribute
     - iio: iio-utils: Fix possible incorrect mask calculation
     - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc
     - mfd: core: Set fwnode for created devices
     - [arm64] mfd: hi655x-pmic: Fix missing return value check for
       devm_regmap_init_mmio_clk
     - RDMA/i40iw: Set queue pair state when being queried
     - perf test mmap-thread-lookup: Initialize variable to suppress memory
       sanitizer warning
     - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
     - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h
     - f2fs: avoid out-of-range memory access
     - mailbox: handle failed named mailbox channel request
     - [ppc64el] eeh: Handle hugepages in ioremap space
     - 9p: pass the correct prototype to read_cache_page
     - mm/mmu_notifier: use hlist_add_head_rcu()
     - usb: wusbcore: fix unbalanced get/put cluster_id
     - [x86] usb: pci-quirks: Correct AMD PLL quirk detection
     - [x86] sysfb_efi: Add quirks for some devices with swapped width and
       height
     - [x86] speculation/mds: Apply more accurate check on hypervisor platform
     - [x86] hpet: Fix division by zero in hpet_time_div()
     - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
     - ALSA: hda - Add a conexant codec entry to let mute led work
     - access: avoid the RCU grace period for the temporary subjective
       credentials
     - [arm64] dts: marvell: Fix A37xx UART0 register size
     - i2c: qup: fixed releasing dma without flush operation completion
     - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ
       (Closes: #904385)
     - ISDN: hfcsusb: checking idx of ep configuration
     - media: au0828: fix null dereference in error path
     - media: cpia2_usb: first wake up, then free in disconnect
     - media: radio-raremono: change devm_k*alloc to k*alloc
     - sched/fair: Don't free p->numa_faults with concurrent readers
     - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
     - ceph: hold i_ceph_lock when removing caps for freeing inode
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.188
     - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
     - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
     - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
     - ftrace: Enable trampoline when rec count returns back to one
     - kernel/module.c: Only return -EEXIST for modules that have finished
       loading
     - fs/adfs: super: fix use-after-free bug
     - btrfs: fix minimum number of chunk errors for DUP
     - ceph: fix improper use of smp_mb__before_atomic()
     - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
     - [s390x] scsi: zfcp: fix GCC compiler warning emitted with
       -Wmaybe-uninitialized
     - ACPI: fix false-positive -Wuninitialized warning
     - be2net: Signal that the device cannot transmit during reconfiguration
     - [x86] apic: Silence -Wtype-limits compiler warnings
     - mm/cma.c: fail if fixed declaration can't be honored
     - coda: add error handling for fget
     - coda: fix build using bare-metal toolchain
     - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
       headers
     - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
     - ipc/mqueue.c: only perform resource calculation if user valid
     - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
     - [x86] boot: Remove multiple copy of static function
       sanitize_boot_params()
     - Btrfs: fix incremental send failure after deduplication
     - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
     - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
     - selinux: fix memory leak in policydb_init()
     - [s390x] dasd: fix endless loop after read unit address configuration
     - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier
     - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
     - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
     - infiniband: fix race condition between infiniband mlx4, mlx5 driver and
       core dumping
     - coredump: fix race condition between collapse_huge_page() and core dumping
     - eeprom: at24: make spd world-readable again
     - Backport minimal compiler_attributes.h to support GCC 9
     - include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
     - objtool: Support GCC 9 cold subfunction naming scheme
     - [x86] mm, gup: prevent get_page() race with munmap in paravirt guest
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.189
     - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
     - [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV
     - [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo
     - [armhf] dts: logicpd-som-lv: Fix Audio Mute
     - [arm64] cpufeature: Fix CTR_EL0 field definitions
     - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
     - tcp: be more careful in tcp_fragment()
     - HID: wacom: fix bit shift for Cintiq Companion 2
     - HID: Add quirk for HP X1200 PIXART OEM mouse
     - RDMA: Directly cast the sockaddr union to sockaddr
     - IB: directly cast the sockaddr union to aockaddr
     - objtool: Add machine_real_restart() to the noreturn list
     - objtool: Add rewind_stack_do_exit() to the noreturn list
     - libceph: use kbasename() and kill ceph_file_part()
     - atm: iphase: Fix Spectre v1 vulnerability
     - net: bridge: delete local fdb on device init failure
     - net: bridge: mcast: don't delete permanent entries when fast leave is
       enabled
     - net: fix ifindex collision during namespace removal
     - net/mlx5: Use reversed order when unregister devices
     - net: sched: Fix a possible null-pointer dereference in dequeue_func()
     - tipc: compat: allow tipc commands without arguments
     - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
     - ip6_tunnel: fix possible use-after-free on xmit
     - ife: error out when nla attributes are empty
     - bnx2x: Disable multi-cos feature.
     - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
 .
   [ Ben Hutchings ]
   * Bump ABI to 11
   * siphash: implement HalfSipHash1-3 for hash tables (Closes: #935134)
   * netfilter: conntrack: Use consistent ct id hash calculation
     (fixes regression in 4.9.168-1+deb9u5)
 .
 linux (4.9.185-1) stretch; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.185
     - [arm64,armhf] usb: chipidea: udc: workaround for endpoint conflict issue
     - [amd64] IB/hfi1: Silence txreq allocation warnings
     - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
     - apparmor: enforce nullbyte at end of tag string
     - parport: Fix mem leak in parport_register_dev_model
     - [amd64] IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
     - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
     - [mips*] uprobes: remove set but not used variable 'epc'
     - [armhf] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
     - [arm64] net: hns: Fix loopback test failed at copper ports
     - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance
     - scsi: ufs: Check that space was properly alloced in copy_query_response
     - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event
     - nvme: Fix u32 overflow in the number of namespace list calculation
     - btrfs: start readahead also in seed devices
     - can: purge socket error queue on sock destruct
     - [ppc64el] powerpc/bpf: use unsigned division instruction for 64-bit
       operations
     - Bluetooth: Align minimum encryption key size for LE and BR/EDR
       connections
     - Bluetooth: Fix regression with minimum encryption key size alignment
     - cfg80211: fix memory leak of wiphy device name
     - mac80211: drop robust management frames from unknown TA
     - mac80211: Do not use stack memory with scatterlist for GMAC
     - [amd64] IB/hfi1: Avoid hardlockup with flushlist_lock
     - 9p/rdma: do not disconnect on down_interruptible EAGAIN
     - 9p: acl: fix uninitialized iattr access
     - 9p/rdma: remove useless check in cm_event_handler
     - 9p: p9dirent_read: check network-provided name length
     - fs/proc/array.c: allow reporting eip/esp for all coredumping threads
     - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
     - [x86] x86/speculation: Allow guests to use SSBD even if host does not
     - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
     - cpu/speculation: Warn on unsupported mitigations= parameter
     - af_packet: Block execution of tasks waiting for transmit to complete in
       AF_PACKET
     - [arm64,armhf] net: stmmac: fixed new system time seconds value
       calculation
     - sctp: change to hold sk after auth shkey is created successfully
     - tipc: change to use register_pernet_device
     - tipc: check msg->req data len in tipc_nl_compat_bearer_disable
     - tun: wake up waitqueues after IFF_UP is set
     - team: Always enable vlan tx offload
     - bonding: Always enable vlan tx offload
     - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while
       loop
     - net: check before dereferencing netdev_ops during busy poll
     - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
     - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
     - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
     - Bluetooth: Fix faulty expression for minimum encryption key size check
     - ASoC: soc-pcm: BE dai needs prepare when pause release after resume
     - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
     - ASoC: max98090: remove 24-bit format support if RJ is 0
     - scsi: hpsa: correct ioaccel2 chaining
     - mm/mlock.c: change count_mm_mlocked_page_nr return type
     - [mips*] math-emu: do not use bools for arithmetic
     - [armhf] mfd: omap-usb-tll: Fix register offsets
     - [armhf] clk: sunxi: fix uninitialized access
     - [x86] KVM: degrade WARN to pr_warn_ratelimited
     - [x86] drm/i915/dmc: protect against reading random memory
     - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI
       messages
     - ALSA: line6: Fix write on zero-sized buffer
     - ALSA: usb-audio: fix sign unintended sign extension on left shifts
     - [x86] lib/mpi: Fix karactx leak in mpi_powm
     - [armhf] drm/imx: notify drm core before sending event during crtc
       disable
     - [armhf] drm/imx: only send event on crtc disable if kept disabled
     - btrfs: Ensure replaced device doesn't have pending chunk allocation
     - [x86] tty: rocket: fix incorrect forward declaration of 'rp_init()'
     - [arm64] vdso: Define vdso_{start,end} as array
     - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software
       disable LAPIC
     - [amd64] IB/hfi1: Close PSM sdma_progress sleep window
     - [mips*] Add missing EHB in mtc0 -> mfc0 sequence.
     - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0
 .
 linux (4.9.184-1) stretch; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169
     - [x86] power: Fix some ordering bugs in __restore_processor_context()
     - [amd64] power/64: Use struct desc_ptr for the IDT in struct saved_context
     - [i386] power/32: Move SYSENTER MSR restoration to fix_processor_context()
     - [x86] power: Make restore_processor_context() sane
     - [ppc64el] powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
     - [ppc64el] Fix invalid use of register expressions
     - [ppc64el] powerpc/64s: Add barrier_nospec
     - [ppc64el] powerpc/64s: Add support for ori barrier_nospec patching
     - [ppc64el] Avoid code patching freed init sections
     - [ppc64el] powerpc/64s: Patch barrier_nospec in modules
     - [ppc64el] powerpc/64s: Enable barrier_nospec based on firmware settings
     - [ppc64el] Use barrier_nospec in copy_from_user()
     - [ppc64el] powerpc/64: Use barrier_nospec in syscall entry
     - [ppc64el] powerpc/64s: Enhance the information in cpu_show_spectre_v1()
     - [ppc64el] powerpc64s: Show ori31 availability in spectre_v1 sysfs file
       not v2
     - [ppc64el] powerpc/64: Disable the speculation barrier from the command
       line
     - [ppc64el] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
     - [ppc64el] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
     - [ppc64el] powerpc/64: Call setup_barrier_nospec() from setup_arch()
     - [ppc64el] powerpc/64: Make meltdown reporting Book3S 64 specific
     - [ppc64el] asm: Add a patch_site macro & helpers for patching
       instructions
     - [ppc64el] powerpc/64s: Add new security feature flags for count cache
       flush
     - [ppc64el] powerpc/64s: Add support for software count cache flush
     - [ppc64el] powerpc/pseries: Query hypervisor for count cache flush
       settings
     - [ppc64el] powerpc/powernv: Query firmware for count cache flush
       settings
     - [ppc64el] security: Fix spectre_v2 reporting
     - [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
     - tty: ldisc: add sysctl to prevent autoloading of ldiscs
     - ipv6: Fix dangling pointer when ipv6 fragment
     - ipv6: sit: reset ip header pointer in ipip6_rcv
     - openvswitch: fix flow actions reallocation
     - qmi_wwan: add Olicard 600
     - sctp: initialize _pad of sockaddr_in before copying to user memory
     - tcp: Ensure DCTCP reacts to losses
     - vrf: check accept_source_route on the original netdevice
     - bnxt_en: Reset device on RX buffer errors.
     - bnxt_en: Improve RX consumer index validity check.
     - net/mlx5e: Add a lock on tir list
     - netns: provide pure entropy for net_hash_mix()
     - net: ethtool: not call vzalloc for zero sized memory request
     - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
     - ALSA: seq: Fix OOB-reads from strlcpy
     - Btrfs: do not allow trimming when a fs is mounted with the nologreplay
       option
     - block: do not leak memory in bio_copy_user_iov()
     - genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
     - virtio: Honour 'may_reduce_num' in vring_create_virtqueue
     - [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
     - [x86] xen: Prevent buffer overflow in privcmd ioctl
     - sched/fair: Do not re-read ->h_load_next during hierarchical load
       calculation
     - PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.170
     - perf/core: Restore mmap record type correctly
     - ext4: add missing brelse() in add_new_gdb_meta_bg()
     - ext4: report real fs size after failed resize
     - [i386] ALSA: sb8: add a check for request_region
     - IB/mlx4: Fix race condition between catas error reset and aliasguid
       flows
     - [x86] thermal/int340x_thermal: Add additional UUIDs
     - [x86] thermal/int340x_thermal: fix mode setting
     - perf config: Fix an error in the config template documentation
     - perf config: Fix a memory leak in collect_config()
     - perf build-id: Fix memory leak in print_sdt_events()
     - perf top: Fix error handling in cmd_top()
     - perf hist: Add missing map__put() in error case
     - perf evsel: Free evsel->counts in perf_evsel__exit()
     - [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI
     - [x86] hpet: Prevent potential NULL pointer dereference
     - [i386] x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode
       processors
     - [amd64] iommu/vt-d: Check capability before disabling protected memory
     - [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse()
       return an error
     - fix incorrect error code mapping for OBJECTID_NOT_FOUND
     - ext4: prohibit fstrim in norecovery mode
     - rsi: improve kernel thread handling to fix kernel panic
     - 9p: do not trust pdu content for stat item size
     - 9p locks: add mount option for lock retry interval
     - f2fs: fix to do sanity check with current segment number
     - [arm64] serial: uartps: console_setup() can't be placed to init section
     - HID: i2c-hid: override HID descriptors for certain devices
     - [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's
     - cifs: fallback to older infolevels on findfirst queryinfo retry
     - kernel: hung_task.c: disable on suspend
     - [armhf] crypto: sha256/arm - fix crash bug in Thumb2 build
     - [armhf] crypto: sha512/arm - fix crash bug in Thumb2 build
     - [amd64] iommu/dmar: Fix buffer overflow during PCI bus notification
     - [arm64,armhf] soc/tegra: pmc: Drop locking from
       tegra_powergate_is_powered()
     - [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t
     - appletalk: Fix use-after-free in atalk_proc_exit
     - lib/div64.c: off by one in shift
     - include/linux/swap.h: use offsetof() instead of custom __swapoffset
       macro
     - [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv()
     - [arm64,armhf] net: stmmac: Set dma ring length before enabling the DMA
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.171
     - bonding: fix event handling for stacked bonds
     - net: atm: Fix potential Spectre v1 vulnerabilities
     - net: bridge: fix per-port af_packet sockets
     - net: bridge: multicast: use rcu to access port list from
       br_multicast_start_querier
     - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
     - tcp: tcp_grow_window() needs to respect tcp_space()
     - team: set slave to promisc if team is already in promisc mode
     - vhost: reject zero size iova range
     - ipv4: recompile ip options in ipv4_link_failure
     - ipv4: ensure rcu_read_lock() in ipv4_link_failure()
     - mmc: sdhci: Fix data command CRC error handling
     - [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
     - CIFS: keep FileInfo handle live during oplock break
     - [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU
     - [x86] iio/gyro/bmg160: Use millidegrees for temperature scale
     - [x86] io: accel: kxcjk1013: restore the range after resume.
     - [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore
     - [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
     - [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex
     - [x86] staging: comedi: ni_usb6501: Fix possible double-free of
       ->usb_rx_buf
     - ALSA: core: Fix card races between register and disconnect
     - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
     - [x86] Revert "svm: Fix AVIC incomplete IPI emulation"
     - [x86] crypto: x86/poly1305 - fix overflow during partial reduction
     - [x86] kprobes: Verify stack frame on kretprobe
     - kprobes: Mark ftrace mcount handler functions nokprobe
     - kprobes: Fix error check when reusing optimized probes
     - rt2x00: do not increment sequence number while re-transmitting
     - mac80211: do not call driver wake_tx_queue op during reconfig
     - [x86] perf/x86/amd: Add event map for AMD Family 17h
     - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
     - device_cgroup: fix RCU imbalance in error case
     - ALSA: info: Fix racy addition/deletion of nodes
     - percpu: stop printing kernel addresses (CVE-2018-5995)
     - [x86] i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
     - kernel/sysctl.c: fix out-of-bounds access when setting file-max
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.172
     - kbuild: simplify ld-option implementation
     - cifs: do not attempt cifs operation on smb2+ rename error
     - tracing: Fix a memory leak by early error exit in trace_pid_write()
     - [mips*] scall64-o32: Fix indirect syscall number load
     - trace: Fix preempt_enable_no_resched() abuse
     - IB/rdmavt: Fix frwr memory registration
     - sched/numa: Fix a possible divide-by-zero
     - ceph: ensure d_name stability in ceph_dentry_hash()
     - ceph: fix ci->i_head_snapc leak
     - nfsd: Don't release the callback slot unless it was actually held
     - sunrpc: don't mark uninitialised items as VALID.
     - [arm64,armhf] drm/vc4: Fix memory leak during gpu reset.
     - [arm64,armhf] drm/vc4: Fix compilation error reported by kbuild test bot
     - USB: Add new USB LPM helpers
     - USB: Consolidate LPM checks to avoid enabling LPM twice
     - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
     - tipc: handle the err returned from cmd header function
     - slip: make slhc_free() silently accept an error pointer
     - [x86] intel_th: gth: Fix an off-by-one in output unassigning
     - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
     - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
     - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
     - tipc: check bearer name with right length in
       tipc_nl_compat_bearer_enable
     - tipc: check link name with right length in tipc_nl_compat_link_set
     - ipv4: add sanity checks in ipv4_link_failure()
     - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
     - net: rds: exchange of 8K and 1M pool
     - team: fix possible recursive locking when add slaves
     - [arm64,armhf] net: stmmac: move stmmac_check_ether_addr() to driver
       probe
     - ipv4: set the tcp_min_rtt_wlen range from 0 to one day
     - ipv6: frags: fix a lockdep false positive
     - net: IP defrag: encapsulate rbtree defrag code into callable functions
     - ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
     - net: IP6 defrag: use rbtrees for IPv6 defrag
     - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
     - Documentation: Add nospectre_v1 parameter
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.173
     - usbnet: ipheth: prevent TX queue timeouts when device not ready
     - usbnet: ipheth: fix potential null pointer dereference in
       ipheth_carrier_set
     - media: vivid: check if the cec_adapter is valid
     - [armhf] dts: bcm283x: Fix hdmi hpd gpio pull
     - [s390x] limit brk randomization to 32MB
     - qlcnic: Avoid potential NULL pointer dereference
     - netfilter: nft_set_rbtree: check for inactive element after flag
       mismatch
     - netfilter: bridge: set skb transport_header before entering
       NF_INET_PRE_ROUTING
     - usb: gadget: net2280: Fix overrun of OUT messages
     - usb: gadget: net2280: Fix net2280_dequeue()
     - staging: rtl8712: uninitialized memory in read_bbreg_hdl()
     - NFS: Fix a typo in nfs_init_timeout_values()
     - scsi: qla4xxx: fix a potential NULL pointer dereference
     - usb: u132-hcd: fix resource leak
     - ceph: fix use-after-free on symlink traversal
     - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on
       multi-element RSCN
     - [x86,arm64] libata: fix using DMA buffers on stack
     - gpio: of: Fix of_gpiochip_add() error path
     - [amd64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882)
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.174
     - ALSA: line6: use dynamic buffers
     - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
     - ipv6/flowlabel: wait rcu grace period before put_pid()
     - ipv6: invert flowlabel sharing check in process and user mode
     - packet: validate msg_namelen in send directly
     - bnxt_en: Improve multicast address setup logic.
     - net: phy: marvell: Fix buffer overrun with stats counters
     - [arm64] proc: Set PTE_NG for table entries to avoid traversing them
       twice
     - [arm64] mm: print out correct page table entries
     - [arm64] mm: don't print out page table entries on EL0 faults
     - USB: yurex: Fix protection fault after device removal
     - USB: w1 ds2490: Fix bug caused by improper use of altsetting array
     - [x86] usb: usbip: fix isoc packet num validation in get_pipe
     - USB: core: Fix unterminated string returned by usb_string()
     - USB: core: Fix bug caused by duplicate interface PM usage counter
     - nvme-loop: init nvmet_ctrl fatal_err_work when allocate
     - HID: logitech: check the return value of create_singlethread_workqueue
     - HID: debug: fix race condition with between rdesc_show() and device
       removal
     - batman-adv: Reduce claim hash refcnt only for removed entry
     - batman-adv: Reduce tt_local hash refcnt only for removed entry
     - batman-adv: Reduce tt_global hash refcnt only for removed entry
     - igb: Fix WARN_ONCE on runtime suspend
     - net/mlx5: E-Switch, Fix esw manager vport indication for more vport
       commands
     - bonding: show full hw address in sysfs for slave entries
     - [arm64,armhf] net: stmmac: don't overwrite discard_frame status
     - [arm64,armhf] net: stmmac: fix dropping of multi-descriptor RX frames
     - [arm64,armhf] net: stmmac: don't log oversized frames
     - jffs2: fix use-after-free on symlink traversal
     - debugfs: fix use-after-free on symlink traversal
     - [amd64,ppc64el] vfio/pci: use correct format characters
     - scsi: core: add new RDAC LENOVO/DE_Series device
     - [x86] scsi: storvsc: Fix calculation of sub-channel count
     - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
     - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver
     - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled
     - hugetlbfs: fix memory leak for resv_map
     - [armel] orion: don't use using 64-bit DMA masks
     - [x86] perf/x86/amd: Update generic hardware cache events for Family 17h
     - scsi: RDMA/srpt: Fix a credit leak for aborted commands
     - selinux: never allow relabeling on context mounts
     - [x86] mce: Improve error message when kernel cannot recover, p2
     - media: v4l2: i2c: ov7670: Fix PLL bypass register values
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.175
     - scsi: libsas: fix a race condition when smp task timeout
       (CVE-2018-20836)
     - ASoC:soc-pcm:fix a codec fixup issue in TDM case
     - [amd64] IB/hfi1: Eliminate opcode tests on mr deref
     - [x86] perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
     - scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
     - virtio-blk: limit number of hw queues by nr_cpu_ids
     - [amd64] iommu/amd: Set exclusion range correctly
     - mm: add 'try_get_page()' helper function
     - genirq: Prevent use-after-free and work list corruption
     - [arm64,armhf] usb: dwc3: Fix default lpm_nyet_threshold value
     - USB: serial: f81232: fix interrupt worker not stop
     - usb-storage: Set virt_boundary_mask to avoid SG overflows
     - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS
       routines
     - UAS: fix alignment of scatter/gather segments
     - [x86] ASoC: Intel: avoid Oops if DMA setup fails
     - timer/debug: Change /proc/timer_stats from 0644 to 0600 (CVE-2017-5967)
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.176
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.177
     - netfilter: compat: initialize all fields in xt_init
     - bpf: fix struct htab_elem layout
     - bpf: convert htab map to hlist_nulls
     - [x86] platform/x86: sony-laptop: Fix unintentional fall-through
     - USB: serial: fix unthrottle races
     - [x86] libnvdimm/namespace: Fix a potential NULL pointer dereference
     - HID: input: add mapping for Expose/Overview key
     - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
     - HID: input: add mapping for "Toggle Display" key
     - [x86] libnvdimm/btt: Fix a kmemdup failure check
     - [s390x] dasd: Fix capacity calculation for large volumes
     - mac80211: fix unaligned access in mesh table hash function
     - [s390x] 3270: fix lockdep false positive on view->lock
     - mISDN: Check address length before reading address family
     - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
     - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in
       tracing
     - init: initialize jump labels before command line option parsing
     - ipvs: do not schedule icmp errors from tunnels
     - [s390x] ctcm: fix ctcm_new_device error return code
     - [armhf] gpu: ipu-v3: dp: fix CSC handling
     - rtlwifi: rtl8723ae: Fix missing break in switch statement
     - md/raid5: Don't jump to compute_result state from check_result state
     - bridge: Fix error path for kobject_init_and_add()
     - fib_rules: return 0 directly if an exactly same rule exists when
       NLM_F_EXCL not supplied
     - packet: Fix error path in packet_init
     - vlan: disable SIOCSHWTSTAMP in container
     - vrf: sit mtu should not be updated when vrf netdev is the link
     - ipv4: Fix raw socket lookup for local traffic
     - bonding: fix arp_validate toggling in active-backup mode
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.178
     - net: core: another layer of lists, around PF_MEMALLOC skb handling
     - locking/rwsem: Prevent decrement of reader count before increment
     - [amd64] PCI: hv: Fix a memory leak in hv_eject_device_work()
     - [x86] speculation/mds: Revert CPU buffer clear on double fault exit
     - [x86] speculation/mds: Improve CPU buffer clear documentation
     - [armhf] exynos: Fix a leaked reference by adding missing of_node_put
     - [arm64] compat: Reduce address limit
     - [arm64] Clear OSDLR_EL1 on CPU boot
     - [x86] sched/x86: Save [ER]FLAGS on context switch
     - crypto: chacha20poly1305 - set cra_name correctly
     - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode
     - crypto: crct10dif-generic - fix use via crypto_shash_digest()
     - [amd64] crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
     - ALSA: usb-audio: Fix a memory leak bug
     - ALSA: hda/hdmi - Read the pin sense from register when repolling
     - ALSA: hda/hdmi - Consider eld_valid when reporting jack event
     - ALSA: hda/realtek - EAPD turn on later
     - ASoC: max98090: Fix restore of DAPM Muxes
     - ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
     - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
     - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
     - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
     - jbd2: check superblock mapped prior to committing
     - ext4: actually request zeroing of inode table after grow
     - ext4: fix ext4_show_options for file systems w/o journal
     - Btrfs: do not start a transaction at iterate_extent_inodes()
     - bcache: fix a race between cache register and cacheset unregister
     - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
     - [arm64] ipmi:ssif: compare block number correctly for multi-part return
       messages
     - crypto: gcm - Fix error return code in crypto_gcm_create_common()
     - crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
     - crypto: salsa20 - don't access already-freed walk.iv
     - fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return
       0...")
     - writeback: synchronize sync(2) against cgroup writeback membership
       switches
     - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
       into workqueue when umount
     - ext4: fix data corruption caused by overlapping unaligned and aligned IO
     - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal
       microphone bug
     - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.179
     - net: avoid weird emergency message
     - net/mlx4_core: Change the error print to info print
     - ppp: deflate: Fix possible crash in deflate_init
     - tipc: switch order of device registration to fix a crash
     - vsock/virtio: free packets during the socket release
     - tipc: fix modprobe tipc failed after switch order of device registration
     - vsock/virtio: Initialize core virtio vsock before registering the driver
     - md: add mddev->pers to avoid potential NULL pointer dereference
     - [x86] intel_th: msu: Fix single mode with IOMMU
     - p54: drop device reference count if fails to enable device
     - cifs: fix strcat buffer overflow and reduce raciness in
       smb21_set_oplock_level()
     - NFS4: Fix v4.0 client state corruption when mount
     - [arm64,armhf] clk: tegra: Fix PLLM programming on Tegra124+ when PMC
       overrides divider
     - fuse: fix writepages on 32bit
     - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
     - [arm64,armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
     - ceph: flush dirty inodes before proceeding with remount
     - tracing: Fix partial reading of trace event's id file
     - [arm64,armhf] memory: tegra: Fix integer overflow on tick value
       calculation
     - [x86] perf intel-pt: Fix instructions sampling rate
     - [x86] perf intel-pt: Fix improved sample timestamp
     - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches
     - PCI: Mark Atheros AR9462 to avoid bus reset
     - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
     - dm delay: fix a crash when invalid device is specified
     - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
     - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
     - vti4: ipip tunnel deregistration fixes.
     - xfrm4: Fix uninitialized memory read in _decode_session4
     - mac80211: Fix kernel panic due to use of txq after free
     - [arm64,armhf] KVM: arm/arm64: Ensure vcpu target is unset on reset
       failure
     - power: supply: sysfs: prevent endless uevent loop with
       CONFIG_POWER_SUPPLY_DEBUG
     - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
     - Revert "Don't jump to compute_result state from check_result state"
     - md/raid: raid5 preserve the writeback action after the parity check
     - btrfs: Honour FITRIM range constraints during free space trim
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.180
     - ext4: do not delete unlinked inode from orphan list on failed truncate
     - [x86] KVM: fix return value for reserved EFER
     - bio: fix improper use of smp_mb__before_atomic()
     - Revert "scsi: sd: Keep disk read-only when re-reading partition"
     - [ppc64el] crypto: vmx - CTR: always increment IV as quadword
     - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID
     - [x86] libnvdimm/namespace: Fix label tracking error
     - [arm64] Save and restore OSDLR_EL1 across suspend/resume
     - gfs2: Fix sign extension bug in gfs2_update_stats
     - Btrfs: do not abort transaction at btrfs_update_root() after failure to
       COW path
     - Btrfs: fix race between ranged fsync and writeback of adjacent ranges
     - btrfs: sysfs: don't leak memory when failing add fsid
     - fbdev: fix divide error in fb_var_to_videomode
     - hugetlb: use same fault hash key for shared and private mappings
     - fbdev: fix WARNING in __alloc_pages_nodemask bug
     - media: cpia2: Fix use-after-free in cpia2_exit
     - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
     - [x86,ppc64el] ssb: Fix possible NULL pointer dereference in
       ssb_host_pcmcia_exit
     - at76c50x-usb: Don't register led_trigger if usb_register_driver failed
     - Revert "btrfs: Honour FITRIM range constraints during free space trim"
     - gfs2: Fix lru_count going negative
     - cxgb4: Fix error path in cxgb4_init_module
     - mmc: core: Verify SD bus width
     - [arm64] dmaengine: tegra210-dma: free dma controller in remove()
     - [arm64,armhf] ASoC: hdmi-codec: unlock the device on startup errors
     - [ppc64el] boot: Fix missing check of lseek() return value
     - brcm80211: potential NULL dereference in
       brcmf_cfg80211_vndr_cmds_dcmd_handler()
     - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals
     - sched/cpufreq: Fix kobject memleak
     - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
     - iwlwifi: pcie: don't crash on invalid RX interrupt
     - w1: fix the resume command API
     - [armhf] dmaengine: pl330: _stop: clear interrupt status
     - mac80211/cfg80211: update bss channel on channel switch
     - mwifiex: prevent an array overflow
     - [armhf] crypto: sun4i-ss - Fix invalid calculation of hash end
     - bcache: return error immediately in bch_journal_replay()
     - bcache: fix failure in journal relplay
     - bcache: add failure check to run_cache_set() for journal replay
     - [x86] build: Move _etext to actual end of .text
     - smpboot: Place the __percpu annotation correctly
     - [amd64] mm: Remove in_nmi() warning from 64-bit implementation of
       vmalloc_fault()
     - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
     - media: au0828: stop video streaming only when last user stops
     - audit: fix a memory leak bug
     - media: au0828: Fix NULL pointer dereference in
       au0828_analog_stream_enable()
     - media: pvrusb2: Prevent a buffer overflow
     - [ppc64el] numa: improve control of topology updates
     - sched/core: Check quota and period overflow at usec to nsec conversion
     - sched/core: Handle overflow in cpu_shares_write_u64
     - USB: core: Don't unbind interfaces following device reset failure
     - [amd64] irq: Limit IST stack overflow check to #DB stack
     - i40e: don't allow changes to HW VLAN stripping on active port VLANs
     - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME
     - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
     - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
     - [x86] hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
     - [x86] hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
     - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
     - [x86] hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
     - scsi: libsas: Do discovery on empty PHY to update PHY info
     - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
     - [arm64] mmc_spi: add a status check for spi_sync_locked
     - PM / core: Propagate dev->power.wakeup_path when no callbacks
     - rtlwifi: fix a potential NULL pointer dereference
     - mwifiex: Fix mem leak in mwifiex_tm_cmd
     - brcmfmac: fix missing checks for kmemdup
     - brcmfmac: convert dev_init_lock mutex to completion
     - brcmfmac: fix race during disconnect when USB completion is in progress
     - brcmfmac: fix Oops when bringing up interface during USB disconnect
     - scsi: ufs: Fix regulator load and icc-level configuration
     - scsi: ufs: Avoid configuring regulator with undefined voltage range
     - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put
     - [x86] uaccess, signal: Fix AC=1 bloat
     - [amd64] x86/ia32: Fix ia32_restore_sigcontext() AC leak
     - chardev: add additional check for minor range overlap
     - HID: core: move Usage Page concatenation to Main item
     - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing
       of_node_put
     - [armhf] ASoC: fsl_utils: fix a leaked reference by adding missing
       of_node_put
     - cxgb3/l2t: Fix undefined behaviour
     - [arm64,armhf] spi: tegra114: reset controller on probe
     - [armhf] media: wl128x: prevent two potential buffer overflows
     - virtio_console: initialize vtermno value for ports
     - [x86,ppc64el] tty: ipwireless: fix missing checks for ioremap
     - [x86] mce: Fix machine_check_poll() tests for error types
     - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
     - scsi: qla4xxx: avoid freeing unallocated dma memory
     - [arm64] dmaengine: tegra210-adma: use devm_clk_*() helpers
     - media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
     - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
     - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers
     - spi: Fix zero length xfer bug
     - drm: Wake up next in drm_read() chain if we are forced to putback the
       event
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.181
     - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
     - llc: fix skb leak in llc_build_and_send_ui_pkt()
     - [armhf] net: fec: fix the clk mismatch in failed_reset path
     - net-gro: fix use-after-free read in napi_gro_frags()
     - [arm64,armhf] net: stmmac: fix reset gpio free missing
     - usbnet: fix kernel crash after disconnect
     - tipc: Avoid copying bytes beyond the supplied data
     - bnxt_en: Fix aggregation buffer leak under OOM condition.
     - ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
     - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
     - [armhf] net: dsa: mv88e6xxx: fix handling of upper half of
       STATS_TYPE_PORT
     - [armhf] net: mvneta: Fix err code path of probe
     - [armhf] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
     - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually
     - xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
       (CVE-2015-8553)
     - Revert "tipc: fix modprobe tipc failed after switch order of device
       registration"
     - tipc: fix modprobe tipc failed after switch order of device registration
     - xhci: update bounce buffer with correct sg num
     - xhci: Use %zu for printing size_t type
     - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
     - usb: xhci: avoid null pointer deref when bos field is NULL
     - [x86] usbip: usbip_host: fix BUG: sleeping function called from invalid
       context
     - [x86] usbip: usbip_host: fix stub_dev lock context imbalance regression
     - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
     - USB: sisusbvga: fix oops in error path of sisusb_probe
     - USB: Add LPM quirk for Surface Dock GigE adapter
     - USB: rio500: refuse more than one device at a time
     - USB: rio500: fix memory leak in close after disconnect
     - media: usb: siano: Fix general protection fault in smsusb
     - media: usb: siano: Fix false-positive "uninitialized variable" warning
     - media: smsusb: better handle optional alignment
     - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from
       port_remove
     - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs
       (only sdevs)
     - Btrfs: fix race updating log root item during fsync
     - [ppc64el] powerpc/perf: Fix MMCRA corruption by bhrb_filter
     - ALSA: hda/realtek - Set default power save node to 0
     - drm/nouveau/i2c: Disable i2c bus access after ->fini()
     - [arm64] tty: serial: msm_serial: Fix XON/XOFF
     - memcg: make it work on sparse non-0-node systems
     - kernel/signal.c: trace_signal_deliver when signal_group_exit
     - CIFS: cifs_read_allocate_pages: don't iterate through whole page array
       on ENOMEM
     - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master
       set
     - binder: Replace "%p" with "%pK" for stable (CVE-2018-20509)
     - binder: replace "%p" with "%pK" (CVE-2018-20510)
     - fs: prevent page refcount overflow in pipe_buf_get (CVE-2019-11487)
     - mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages
     - mm, gup: ensure real head page is ref-counted when using hugepages
     - mm: prevent get_user_pages() from overflowing page refcount
       (CVE-2019-11487)
     - mm: make page ref count overflow check tighter and more explicit
       (CVE-2019-11487)
     - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
     - ethtool: fix potential userspace buffer overflow
     - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
     - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
     - net: rds: fix memory leak in rds_ib_flush_mr_pool
     - pktgen: do not sleep with the thread lock held.
     - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
     - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
     - Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules:
       return 0...")"
     - Revert "fib_rules: return 0 directly if an exactly same rule exists when
       NLM_F_EXCL not supplied"
     - rcu: locking and unlocking need to always be at least barriers
     - fuse: fallocate: fix return with locked inode
     - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume
     - [ppc64el] genwqe: Prevent an integer overflow in the ioctl
     - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels
     - drm/radeon: prefer lower reference dividers
     - [x86] drm/i915: Fix I915_EXEC_RING_MASK
     - TTY: serial_core, add ->install
     - fs: stream_open - opener for stream-like files so that read and write
       can run simultaneously without deadlock
     - fuse: Add FOPEN_STREAM to use stream_open()
     - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
     - ethtool: check the return value of get_regs_len
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.182
     - tcp: reduce tcp_fastretrans_alert() verbosity
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.183
     - fs/fat/file.c: issue flush after the writeback of FAT
     - sysctl: return -EINVAL if val violates minmax
     - ipc: prevent lockup on alloc_msg and free_msg
     - [armhf] prevent tracing IPI_CPU_BACKTRACE
     - hugetlbfs: on restore reserve error path retain subpool reservation
     - mem-hotplug: fix node spanned pages when we have a node with only
       ZONE_MOVABLE
     - [armhf,ppc64el] mm/cma.c: fix crash on CMA allocation if bitmap
       allocation fails
     - mm/slab.c: fix an infinite loop in leaks_show()
     - kernel/sys.c: prctl: fix false positive in validate_prctl_map()
     - [arm64] drivers: thermal: tsens: Don't print error message on
       -EPROBE_DEFER
     - [x86] mfd: intel-lpss: Set the device in reset state when init
     - mfd: twl6040: Fix device init errors for ACCCTL register
     - [x86] perf/intel: Allow PEBS multi-entry in watermark mode
     - [arm64] drm/bridge: adv7511: Fix low refresh rate selection
     - objtool: Don't use ignore flag for fake jumps
     - [arm64] pwm: meson: Use the spin-lock only to protect register
       modifications
     - ntp: Allow TAI-UTC offset to be set to zero
     - f2fs: fix to avoid panic in do_recover_data()
     - f2fs: fix to clear dirty inode in error path of f2fs_iget()
     - f2fs: fix to do sanity check on valid block count of segment
     - configfs: fix possible use-after-free in configfs_register_group
     - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values
     - watchdog: fix compile time error of pretimeout governors
     - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly
     - ALSA: hda - Register irq handler after the chip initialization
     - nvmem: core: fix read buffer in place
     - fuse: retrieve: cap requested size to negotiated max_write
     - nfsd: allow fh_want_write to be called twice
     - [x86] PCI: Fix PCI IRQ routing table memory leak
     - platform/chrome: cros_ec_proto: check for NULL transfer function
     - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
     - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
     - [armhf] dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
     - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
     - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
     - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
     - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove
       paths
     - [x86] platform: intel_pmc_ipc: adding error handling
     - [x86] video: hgafb: fix potential NULL pointer dereference
     - [arm64] PCI: xilinx: Check for __get_free_pages() failure
     - [armhf] gpio: gpio-omap: add check for off wake capable gpios
     - [x86] dmaengine: idma64: Use actual device for DMA transfers
     - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs
     - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8
       regulators on Arndale Octa
     - pwm: Fix deadlock warning when removing PWM device
     - [armhf] exynos: Fix undefined instruction during Exynos5422 resume
     - ALSA: seq: Cover unsubscribe_port() in list_mutex
     - ALSA: oxfw: allow PCM capture for Stanton SCS.1m
     - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
     - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
     - fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
     - signal/ptrace: Don't leak unitialized kernel memory with
       PTRACE_PEEK_SIGINFO
     - ptrace: restore smp_rmb() in __ptrace_may_access()
     - media: v4l2-ioctl: clear fields in s_parm
     - bcache: fix stack corruption by PRECEDING_KEY()
     - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
     - [x86] uaccess, kcov: Disable stack protector
     - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
     - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
     - scsi: lpfc: add check for loss of ndlp when sending RRQ
     - [arm64] mm: Inhibit huge-vmap with ptdump
     - scsi: bnx2fc: fix incorrect cast to u64 on shift operation
     - usbnet: ipheth: fix racing condition
     - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs
     - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
     - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to
       an invalid read
     - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
     - [arm64,armhf] usb: dwc2: Fix DMA cache alignment issues
     - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
     - USB: usb-storage: Add new ID to ums-realtek
     - USB: serial: pl2303: add Allied Telesis VT-Kit3
     - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
     - USB: serial: option: add Telit 0x1260 and 0x1261 compositions
     - [armhf] rtc: pcf8523: don't return invalid date when battery is low
     - ax25: fix inconsistent lock state in ax25_destroy_timer
     - be2net: Fix number of Rx queues used for flow hashing
     - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
     - lapb: fixed leak of control-blocks.
     - neigh: fix use-after-free read in pneigh_get_next
     - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
     - mISDN: make sure device name is NUL terminated
     - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor
     - perf/ring_buffer: Fix exposing a temporarily decreased data_head
     - perf/ring_buffer: Add ordering to rb->nest increment
     - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
     - configfs: Fix use-after-free when accessing sd->s_dentry
     - perf data: Fix 'strncat may truncate' build failure with recent gcc
     - perf record: Fix s390 missing module symbol and warning for non-root users
     - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token
       list
     - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
     - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
     - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
     - scsi: libsas: delete sas port if expander discover failed
     - vfs: Abort file_remove_privs() for non-reg. files
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.184
     - tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
 .
   [ Salvatore Bonaccorso ]
   * [x86] Disable R3964 due to lack of security support
   * Refresh version.patch for context changes in 4.9.170
   * [rt] Drop 0053-arm-kprobe-replace-patch_lock-to-raw-lock.patch applied in
     4.9.170
   * Revert "x86: stop exporting msr-index.h to userland"
   * [rt] Add new signing subkey for Steven Rostedt
   * [rt] Update to 4.9.178-rt131:
     - futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
     - Update "kernel/hotplug: restore original cpu mask oncpu/down" to always
       call arch_smt_update()
   * Refresh 0058-net-ena-complete-host-info-to-match-latest-ENA-spec.patch for
     context changes in 4.9.180
   * Drop efi-libstub-unify-command-line-param-parsing.patch
   * Refresh arm64-add-kernel-config-option-to-set-securelevel-wh.patch for
     context changes in 4.9.181
 .
   [ Ben Hutchings ]
   * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed.
   * [rt] Fix build failure after "genirq: Prevent use-after-free and work
     list corruption":
     - kthread: Convert worker lock to raw spinlock
     - kthread: add a global worker thread.
     - genirq: convert affinity_notify swork to kthread
   * Bump ABI to 10 and apply deferred changes:
     - genirq: Avoid summation loops for /proc/stat
   * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
Checksums-Sha1: 
 b25c3006ef0cb5aea3a7986c4f3525c4502e0aa5 15723 linux-4.9_4.9.189-3~deb8u1.dsc
 14ac9ce8c4e3abad0c43e4f0d5ea65df9742d288 94803500 linux-4.9_4.9.189.orig.tar.xz
 bebe61d56e10a52659509f6fac2541ba30f5a013 1252104 linux-4.9_4.9.189-3~deb8u1.debian.tar.xz
 cdffbc189832d82fc2da75a1beab1776db0f328c 7710206 linux-headers-4.9.0-0.bpo.11-common_4.9.189-3~deb8u1_all.deb
 22376d2c3acd5fd66c07a345bb568ae9e14638b7 5766700 linux-headers-4.9.0-0.bpo.11-common-rt_4.9.189-3~deb8u1_all.deb
 6a16d1d4af17165905bec1cb23e8c2deb60a9fdd 11441560 linux-doc-4.9_4.9.189-3~deb8u1_all.deb
 5342affea8b0c99750628cc5658de1bdf01ec4a3 708562 linux-support-4.9.0-0.bpo.11_4.9.189-3~deb8u1_all.deb
 3b7890b8e4c5e49aaf06f9256db5c6cb6982e76e 3261404 linux-manual-4.9_4.9.189-3~deb8u1_all.deb
 0b6cc4e373414b87bdd66ef4ee3f112615f9252d 96892066 linux-source-4.9_4.9.189-3~deb8u1_all.deb
Checksums-Sha256: 
 613a55a51879eded909935e572da3ea31fce76d05f9002448165255d00df1ea1 15723 linux-4.9_4.9.189-3~deb8u1.dsc
 1f970d3606893143800ce64a6da3b728c9498100d7855dd9404b4b8ddc8b5c21 94803500 linux-4.9_4.9.189.orig.tar.xz
 8bed1e57de7e26285a3dd7222f651db559471dca713823ac6ef292c58d61d4ff 1252104 linux-4.9_4.9.189-3~deb8u1.debian.tar.xz
 b9f9eb0920422b54068d037659447e7787a26cb4dc872d949dd71807291b43da 7710206 linux-headers-4.9.0-0.bpo.11-common_4.9.189-3~deb8u1_all.deb
 13ddd30e0e9a33612ccb0f062f13c383b6b63c0bfc353f7d1ccfa5bf8d49b39b 5766700 linux-headers-4.9.0-0.bpo.11-common-rt_4.9.189-3~deb8u1_all.deb
 dbc211fc200967a19cb890f2d4b6b52505e3e9da4e3311a09af66af418f29d7f 11441560 linux-doc-4.9_4.9.189-3~deb8u1_all.deb
 4ef2813f62d84209e4c2aa0b15223916a5acffe6b3689a958b1b00ca66b0951d 708562 linux-support-4.9.0-0.bpo.11_4.9.189-3~deb8u1_all.deb
 6bbf53c3202bda17e374e7f459ee60c3415383672e58ffa09cff52c3ac7f3b93 3261404 linux-manual-4.9_4.9.189-3~deb8u1_all.deb
 4146eaafb5092740846d35fcc053e88114996be745623cddd84822f3e4c66b33 96892066 linux-source-4.9_4.9.189-3~deb8u1_all.deb
Files: 
 b195c207eab8abd6dfaf7ddd4295c405 15723 kernel optional linux-4.9_4.9.189-3~deb8u1.dsc
 b098d9207ce2eb2a8c2039be5a7f46a5 94803500 kernel optional linux-4.9_4.9.189.orig.tar.xz
 5337cc18af0689a957a9d8d118ae7752 1252104 kernel optional linux-4.9_4.9.189-3~deb8u1.debian.tar.xz
 fcc595216041c1b7dec0c1de7ebff156 7710206 kernel optional linux-headers-4.9.0-0.bpo.11-common_4.9.189-3~deb8u1_all.deb
 49327fb25e157b2da988b9c2547f6cb0 5766700 kernel optional linux-headers-4.9.0-0.bpo.11-common-rt_4.9.189-3~deb8u1_all.deb
 aba25f73d56de1637e6fb1efc7f811bc 11441560 doc optional linux-doc-4.9_4.9.189-3~deb8u1_all.deb
 7c6f5a57bb587807a7235b9c2fc1785a 708562 devel optional linux-support-4.9.0-0.bpo.11_4.9.189-3~deb8u1_all.deb
 f6dd155c641a09d7611b892d18d96b1c 3261404 doc optional linux-manual-4.9_4.9.189-3~deb8u1_all.deb
 eaf32e5cf26e5708867d3d33076d414c 96892066 kernel optional linux-source-4.9_4.9.189-3~deb8u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=Iacb
-----END PGP SIGNATURE-----