Back to linux-grsec PTS page

Accepted linux-grsec 4.4.8-1+grsec201604252206+1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 Apr 2016 21:19:10 +0200
Source: linux-grsec
Binary: linux-grsec-source-4.4 linux-grsec-support-4.4.0-1 linux-headers-4.4.0-1-common-grsec linux-image-4.4.0-1-grsec-amd64 linux-headers-4.4.0-1-grsec-amd64 linux-image-4.4.0-1-grsec-686-pae linux-headers-4.4.0-1-grsec-686-pae
Architecture: source
Version: 4.4.8-1+grsec201604252206+1
Distribution: unstable
Urgency: medium
Maintainer: Yves-Alexis Perez <corsac@debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
 linux-grsec-source-4.4 - Linux kernel source for version 4.4 with Debian patches
 linux-grsec-support-4.4.0-1 - Support files for Linux 4.4
 linux-headers-4.4.0-1-common-grsec - Common header files for Linux 4.4.0-1-grsec
 linux-headers-4.4.0-1-grsec-686-pae - Header files for Linux 4.4.0-1-grsec-686-pae
 linux-headers-4.4.0-1-grsec-amd64 - Header files for Linux 4.4.0-1-grsec-amd64
 linux-image-4.4.0-1-grsec-686-pae - Linux 4.4 for modern PCs, Grsecurity protection
 linux-image-4.4.0-1-grsec-amd64 - Linux 4.4 for 64-bit PCs, Grsecurity protection
Changes:
 linux-grsec (4.4.8-1+grsec201604252206+1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.8
     - hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
     - PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
     - parisc: Avoid function pointers for kernel exception routines
     - parisc: Fix kernel crash with reversed copy_from_user()
     - parisc: Unbreak handling exceptions from kernel modules
     - ALSA: timer: Use mod_timer() for rearming the system timer
     - ALSA: hda - Asus N750JV external subwoofer fixup
     - ALSA: hda - Fix white noise on Asus N750JV headphone
     - ALSA: hda - Apply fix for white noise on Asus N550JV, too
     - mm: fix invalid node in alloc_migrate_target()
     - powerpc/mm: Fixup preempt underflow with huge pages
     - libnvdimm: fix smart data retrieval
     - libnvdimm, pfn: fix uuid validation
     - compiler-gcc: disable -ftracer for __noclone functions
     - arm64: opcodes.h: Add arm big-endian config options before including arm header
     - drm/dp: move hw_mutex up the call stack
     - drm/udl: Use unlocked gem unreferencing
     - drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
     - drm/radeon: add another R7 370 quirk
     - drm/radeon: add a dpm quirk for all R7 370 parts
     - drm/amdgpu/gmc: move vram type fetching into sw_init
     - drm/amdgpu/gmc: use proper register for vram type on Fiji
     - xen/events: Mask a moving irq
     - tcp: convert cached rtt from usec to jiffies when feeding initial rto
     - tunnel: Clear IPCB(skb)->opt before dst_link_failure called
     - ipv4: only create late gso-skb if skb is already set up with CHECKSUM_PARTIAL
     - net: jme: fix suspend/resume on JMC260
     - net: vrf: Remove direct access to skb->data
     - net: qca_spi: Don't clear IFF_BROADCAST
     - net: qca_spi: clear IFF_TX_SKB_SHARING
     - net: fix bridge multicast packet checksum validation
     - sctp: lack the check for ports in sctp_v6_cmp_addr
     - mld, igmp: Fix reserved tailroom calculation
     - tipc: Revert "tipc: use existing sk_write_queue for outgoing packet chain"
     - qmi_wwan: add Sierra Wireless EM74xx device ID
     - ipv6: re-enable fragment header matching in ipv6_find_hdr
     - vxlan: fix missing options_len update on RX with collect metadata
     - cdc_ncm: toggle altsetting to force reset before setup
     - usbnet: cleanup after bind() in probe()
     - udp6: fix UDP/IPv6 encap resubmit path
     - tcp: fix tcpi_segs_in after connection establishment
     - ppp: release rtnl mutex when interface creation fails
     - net: validate variable length ll headers
     - ax25: add link layer header validation function
     - packet: validate variable length ll headers
     - bpf: avoid copying junk bytes in bpf_get_current_comm()
     - sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
     - sh_eth: advance 'rxdesc' later in sh_eth_ring_format()
     - qlcnic: Remove unnecessary usage of atomic_t
     - qlcnic: Fix mailbox completion handling during spurious interrupt
     - macvtap: always pass ethernet header in linear
     - mlxsw: spectrum: Check requested ageing time is valid
     - rocker: set FDB cleanup timer according to lowest ageing time
     - bridge: allow zero ageing time
     - ipv4: Don't do expensive useless work during inetdev destroy.
     - net: Fix use after free in the recvmmsg exit path
     - mlx4: add missing braces in verify_qp_parameters
     - farsync: fix off-by-one bug in fst_add_one
     - ath9k: fix buffer overrun for ar9287
     - ppp: ensure file->private_data can't be overridden
     - tcp/dccp: remove obsolete WARN_ON() in icmp handlers
     - qlge: Fix receive packets drop.
     - net: bcmgenet: fix dma api length mismatch
     - bonding: fix bond_get_stats()
     - ipv4: fix broadcast packets reception
     - ipv4: initialize flowi4_flags before calling fib_lookup()
     - ppp: take reference on channels netns
     - xfrm: Fix crash observed during device unregistration and decryption
     - qmi_wwan: add "D-Link DWM-221 B1" device id
     - ipv6: udp: fix UDP_MIB_IGNOREDMULTI updates
     - bridge: Allow set bridge ageing time when switchdev disabled
     - rtnl: fix msg size calculation in if_nlmsg_size()
     - tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter
     - tuntap: restore default qdisc
     - ipv4: l2tp: fix a potential issue in l2tp_ip_recv
     - ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
     - ip6_tunnel: set rtnl_link_ops before calling register_netdevice
     - ipv6: Count in extension headers in skb->network_header
     - mpls: find_outdev: check for err ptr in addition to NULL check
     - USB: uas: Limit qdepth at the scsi-host level
     - USB: uas: Add a new NO_REPORT_LUNS quirk
     - cdc-acm: fix NULL pointer reference
     - KVM: x86: Inject pending interrupt even if pending nmi exist
     - KVM: x86: reduce default value of halt_poll_ns parameter
     - MIPS: Fix MSA ld unaligned failure cases
     - pinctrl: pistachio: fix mfio84-89 function description and pinmux.
     - pinctrl: sh-pfc: only use dummy states for non-DT platforms
     - pinctrl: sunxi: Fix A33 external interrupts not working
     - pinctrl: nomadik: fix pull debug print inversion
     - pinctrl: freescale: imx: fix bogus check of of_iomap() return value
     - au0828: fix au0828_v4l2_close() dev_state race condition
     - au0828: Fix dev_state handling
     - coda: fix error path in case of missing pdata on non-DT platform
     - v4l: vsp1: Set the SRU CTRL0 register when starting the stream
     - pcmcia: db1xxx_ss: fix last irq_to_gpio user
     - rbd: use GFP_NOIO consistently for request allocations
     - virtio: virtio 1.0 cs04 spec compliance for reset
     - mac80211: properly deal with station hashtable insert errors
     - mac80211: avoid excessive stack usage in sta_info
     - mac80211: fix ibss scan parameters
     - mac80211: fix unnecessary frame drops in mesh fwding
     - mac80211: fix txq queue related crashes
     - usb: renesas_usbhs: avoid NULL pointer derefernce in usbhsf_pkt_handler()
     - usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
     - usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done()
     - iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
     - iio: accel: bmc150: fix endianness when reading axes
     - iio: gyro: bmg160: fix buffer read values
     - iio: gyro: bmg160: fix endianness when reading axes
     - sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes
     - fs: add file_dentry()
     - nfs: use file_dentry()
     - btrfs: fix crash/invalid memory access on fsync when using overlayfs
     - ext4: add lockdep annotations for i_data_sem
     - ext4: ignore quota mount options if the quota feature is enabled
     - iommu: Don't overwrite domain pointer when there is no default_domain
     - Btrfs: fix file/data loss caused by fsync after rename and new inode
     - arm64: replace read_lock to rcu lock in call_step_hook
     - perf: Do not double free
     - perf: Cure event->pending_disable race
     - mmc: sdhci-pci: Add support and PCI IDs for more Broxton host controllers
     - ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225
     - ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
     - ALSA: hda - fix front mic problem for a HP desktop
     - ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s
     - ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
     - ALSA: usb-audio: Add a quirk for Plantronics BT300
     - ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
     - HID: wacom: fix Bamboo ONE oops
     - HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
     - Revert "x86/PCI: Don't alloc pcibios-irq when MSI is enabled"
     - Revert "PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"
     - Revert "PCI, x86: Implement pcibios_alloc_irq() and pcibios_free_irq()"
     - staging: android: ion: Set the length of the DMA sg entries in buffer
     - usbvision: fix crash on detecting device with invalid configuration
     - Revert "usb: hub: do not clear BOS field during reset device"
   * debian/patches:
     - bugfix/all/usbvision-fix-overflow-of-interfaces-array and
     bugfix/all/media-usbvision-fix-crash-on-detecting-device-with-i disabled,
     included in 4.4.8.
   * Update grsecurity patch to 3.1-4.4.8-201604252206.
Checksums-Sha1:
 61219354fe3587d5fbebd5560a56316d8e6a4dd2 2604 linux-grsec_4.4.8-1+grsec201604252206+1.dsc
 1d0d572db2daed3d8cbb00be795660991fb1e663 88517532 linux-grsec_4.4.8.orig.tar.xz
 67c3542269eea717a1b719fb950b61d5335a0605 4419564 linux-grsec_4.4.8-1+grsec201604252206+1.debian.tar.xz
Checksums-Sha256:
 b084d75da57f63e634d473266c876359ddfa53be97375a17b762c23a4e8ddc89 2604 linux-grsec_4.4.8-1+grsec201604252206+1.dsc
 2ca73d4b541dbee947d1b114f0a451ff45695c8e44bef704cfa2ff4bd31c7a17 88517532 linux-grsec_4.4.8.orig.tar.xz
 255097b6a9514b53bd6fcbd684de71e4fa3356ea32c120a0521458032ff346d7 4419564 linux-grsec_4.4.8-1+grsec201604252206+1.debian.tar.xz
Files:
 4923236a35babc4c5a4c2d3f539a59c4 2604 kernel optional linux-grsec_4.4.8-1+grsec201604252206+1.dsc
 de0211bab9edc503047ce17d9b64fae9 88517532 kernel optional linux-grsec_4.4.8.orig.tar.xz
 bf625a61771af292f76d9384761c504e 4419564 kernel optional linux-grsec_4.4.8-1+grsec201604252206+1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCgAGBQJXImr0AAoJEG3bU/KmdcClT/wH/1hKF0FhCjdJtB8MVQlr45pO
G+wOxj3HdTPDDjyxMBC/cVhUUca4km0O+HapMWzGyaAJDR7HwXvQehbTyt3y9OkR
D/JP3guElY/s2v3yLT3eFF8nLKR3ap7nhVt5Q6YFR8IAFoqyV1yJxH5Zpldc9Sbv
XKXFDZSziv83WIX5Lo1OKe4TEvFHHYVkcpXmz55pM4USet2pHXzU/7MFu4W+PrTi
Vd1cZtn4gLa4UOFMQYKjdYUL0fzsbZd2326epJ5sFzdTshpJh/R4xWPe1zsii5Nn
Z2FmIvQ6WVaiH86jekMVKi8CzHDwO8Y2vLE/DLhkNJgIMweF6tbXz2FPWDn3Uwk=
=vzKP
-----END PGP SIGNATURE-----