Changelog
linux (4.0.2-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.1
- udptunnels: Call handle_offloads after inserting vlan tag.
- tcp: tcp_make_synack() should clear skb->tstamp
- bnx2x: Fix busy_poll vs netpoll
- bpf: fix verifier memory corruption
- Revert "net: Reset secmark when scrubbing packet"
- skbuff: Do not scrub skb mark within the same name space
- fs: take i_mutex during prepare_binprm for set[ug]id executables
(CVE-2015-3339)
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2
- tcp: fix possible deadlock in tcp_send_fin()
- tcp: avoid looping in tcp_send_fin() (regression in 4.0)
- net: do not deplete pfmemalloc reserve
- net: fix crash in build_skb()
- net: rfs: fix crash in get_rps_cpus() (regression in 4.0)
- md: fix md io stats accounting broken (regression in 3.19)
- [x86] perf/intel: Fix Core2,Atom,NHM,WSM cycles:pp events
(regression in 3.19)
- [x86] fix special __probe_kernel_write() tail zeroing case
(regression in 4.0)
- Btrfs: fix log tree corruption when fs mounted with -o discard
- btrfs: don't accept bare namespace as a valid xattr
- Btrfs: fix inode eviction infinite loop after cloning into it
- Btrfs: fix inode eviction infinite loop after extent_same ioctl
- mm/hugetlb: use pmd_page() in follow_huge_pmd() (regression in 4.0)
- [powerpc] hugetlb: Call mm_dec_nr_pmds() in hugetlb_free_pmd_range()
(regression in 4.0)
- [s390x] KVM: fix handling of write errors in the tpi handler
- [s390x] KVM: reinjection of irqs can fail in the tpi handler
- [s390x] KVM: fix get_all_floating_irqs (regression in 3.15)
- [s390x] hibernate: fix save and restore of kernel text section
- KVM: use slowpath for cross page cached accesses
- [arm*] KVM: check IRQ number on userland injection
- [x86] KVM: VMX: Preserve host CR4.MCE value while in guest mode.
- [mips*el] Loongson-3: Add IRQF_NO_SUSPEND to Cascade irqaction
(regression in 3.19)
- [mips*] Hibernate: flush TLB entries earlier
- md/raid0: fix bug with chunksize not a power of 2.
- [armhf] spi: imx: read back the RX/TX watermark levels earlier
(regression in 3.18)
- ring-buffer: Replace this_cpu_*() with __this_cpu_*()
- NFS: fix BUG() crash in notify_change() with patch to chown_common()
- [armhf] fix broken hibernation (regression in 3.16)
- [armel,armhf] 8320/1: fix integer overflow in ELF_ET_DYN_BASE
- ALSA: emu10k1: don't deadlock in proc-functions
- Input: alps - fix touchpad buttons getting stuck when used with trackpoint
(regression in 4.0)
- mfd: core: Fix platform-device name collisions (regression in 3.19)
- fs/binfmt_elf.c: fix bug in loading of PIE binaries
- ptrace: fix race between ptrace_resume() and wait_task_stopped()
- ext4: make fsync to sync parent dir in no-journal for real this time
- mnt: Prevent circumvention of locked mounts using umount(MNT_DETACH)
(CVE-2014-9717)
- tpm: fix: sanitized code paths in tpm_chip_register() (regression in 4.0)
- [powerpc/powerpc64,ppc64*] perf: Cap 64bit userspace backtraces to
PERF_MAX_STACK_DEPTH (Closes: #784278)
- UBI: account for bitflips in both the VID header and data
- UBI: fix out of bounds write
- UBI: fix check for "too many bytes"
- target: Fix COMPARE_AND_WRITE with SG_TO_MEM_NOALLOC handling
- target/file: Fix SG table for prot_buf initialization
- [arm64] head.S: ensure visibility of page tables (regression in 3.15)
- [arm64] errata: add workaround for cortex-a53 erratum #845719
- [powerpc/powerpc64,ppc64*] powernv: Don't map M64 segments using M32DT
(regression in 3.17)
- [powerpc/powerpc64,ppc64] cell: Fix crash in iic_setup_cpu() after per_cpu
changes (regression in 3.19)
- [powerpc/powerpc64,ppc64] cell: Fix cell iommu after it_page_shift changes
- [i386/686-pae] ACPICA: Utilities: split IO address types from data type
models.
- ACPICA: Store GPE register enable masks upfront (regression in 3.19)
- [armhf] clk: samsung: exynos4: Disable ARMCLK down feature on Exynos4210
SoC (regression in 3.17)
- [armhf] clk: tegra: Use the proper parent for plld_dsi (regression in 4.0)
- [armhf] serial: imx: Fix clearing of receiver overrun flag
- serial: 8250: Check UART_SCR is writable (regression in 4.0)
- sd: Unregister integrity profile (regression in 3.18)
- sd: Fix missing ATO tag check (regression in 3.18)
- [x86] Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open()
- IB/core: disallow registering 0-sized memory region
- IB/iser: Fix wrong calculation of protection buffer length
(regression in 3.16)
- i2c: Mark adapter devices with pm_runtime_no_callbacks (regression in 4.0)
- [armhf] drm/exynos: Enable DP clock to fix display on Exynos5250 and other
(regression in 4.0)
- [x86] drm/i915: vlv: fix save/restore of GFX_MAX_REQ_COUNT reg
(regression in 3.16)
- [x86] drm/i915: cope with large i2c transfers
- vfs: RCU pathwalk breakage when running into a symlink overmounting
something
- Revert "nfs: replace nfs_add_stats with nfs_inc_stats when add one"
(regression in 3.19)
- nfsd4: disallow ALLOCATE with special stateids (regression in 3.19)
- nfsd4: fix READ permission checking (regression in 3.16)
- nfsd4: disallow SEEK with special stateids (regression in 3.18)
- nfsd: eliminate NFSD_DEBUG (regression of linux-libc-dev in 3.19)
- nfs: fix high load average due to callback thread sleeping
(regression in 4.0)
- nfs: fix DIO good bytes calculation (regression in 4.0)
- nfs: remove WARN_ON_ONCE from nfs_direct_good_bytes
- NFS: Add a stub for GETDEVICELIST (regression in 3.18)
- sched/deadline: Always enqueue on previous rq when dl_task_timer() fires
(regression in 4.0)
- mac80211: send AP probe as unicast again (regression in 3.19)
- lib: memzero_explicit: use barrier instead of OPTIMIZER_HIDE_VAR
- [armhf] crypto: omap-aes - Fix support for unequal lengths
- memstick: mspro_block: add missing curly braces
- drivers: platform: parse IRQ flags from resources (regression in 3.18)
[ Ben Hutchings ]
* debian.py,gencontrol.py: Fix the version sanity checks for backports and
security/LTS uploads
* ipv4: Missing sk_nulls_node_init() in ping_unhash() (CVE-2015-3636)
* [armel/orion5x] Increase maximum kernel image size to ~2 MB, removing
support for DNS-323 (fixes FTBFS)
- Re-enable BLK_DEV_INTEGRITY, SCSI_UFSHCD, TCM_IBLOCK, AUDIT, USER_NS,
PCI_QUIRKS, FTRACE, DEBUG_BUGVERBOSE, SECURITY
- Enable DYNAMIC_DEBUG, FRONTSWAP
* [arm64,armhf,powerpcspe,x86] gpio: Explicitly enable GPIOLIB, as some
drivers now depend on rather than selecting it (fixes FTBFS on i386)
* [x86] thermal: Enable INT340X_THERMAL as module, replacing
ACPI_INT3403_THERMAL
* [x86] Re-enable IOSF_MBI and INTEL_RAPL as modules
* sound: Enable SND_USB_POD, SND_USB_PODHD, SND_USB_TONEPORT,
SND_USB_VARIAX as modules, replacing LINE6_USB
* media/rc: Enable IR_IGORPLUGUSB as module, replacing LIRC_IGORPLUGUSB
* [amd64] misc: Enable INTEL_MIC_BUS and re-enable INTEL_MIC_HOST as modules
* sound/firewire: Enable SND_OXFW as module, replacing SND_FIREWIRE_SPEAKERS
* [x86] Enable DW_DMAC and re-enable SND_SOC_INTEL_HASWELL_MACH,
SND_SOC_INTEL_BYT_RT5640_MACH, SND_SOC_INTEL_BYT_MAX98090_MACH as modules
* [x86] tpm: Enable TCG_TIS_I2C_ST33 as module, replacing TCG_ST33_I2C
* [armel/kirkwood] regulator: Re-enable REGULATOR, REGULATOR_FIXED_VOLTAGE
* [armel/kirkwood] sound: Enable SND_SIMPLE_CARD as module, replacing
SND_KIRKWOOD_SOC_OPENRD, SND_KIRKWOOD_SOC_T5325; re-enable
SND_SOC_ALC5623, SND_SOC_CS42L51_I2C as modules
* [alpha,armel/kirkwood,hppa,ia64,mips*/{octeon,sb1-bcm91250a}] Re-enable PM
* [armel/orion5x] Enable PM
* [armhf] sound: Enable SND_SIMPLE_CARD as module
* path_openat(): fix double fput()
* [x86] serial: Enable SERIAL_8250_DW as built-in
* [armhf] Enable ARM_ERRATA_430973 (Closes: #768890), ARM_ERRATA_643719,
ARM_ERRATA_754327, ARM_ERRATA_773022
* [x86] nfc: Enable NFC_HCI, NFC_MEI_PHY, NFC_PN544, NFC_PN544_MEI as
modules (Closes: #770323)
* Set ABI to 1
* mnt: Add missing pieces of fix for CVE-2014-9717:
- mnt: Fail collect_mounts when applied to unmounted mounts
- fs_pin: Allow for the possibility that m_list or s_list go unused.
[ Ian Campbell ]
* [armhf] Enable support for Freescale SNVS RTC. (Closes: #782364)
* [armhf] Add ehci-orion module to usb-modules udeb. (Closes: #783324)
* [armhf] imx-hdmi module is now called dw_hdmi-imx, so update fb-modules
udeb. Patches from both Vagrant Cascadian and Wookey. (Closes: #783275)
* [arm*] Install DTBS using dtbs_install target. (Closes: #784761)
-- Ben Hutchings <email address hidden> Mon, 11 May 2015 04:29:06 +0100
