Changelog
linux (4.12.6-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3
- brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
(CVE-2017-7541)
- [sparc64] Adding asm-prototypes.h for genksyms to generate crc
- [sparc64] sed regex in Makefile.build requires line break between
exported symbols
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4
- f2fs: sanity check checkpoint segno and blkoff (CVE-2017-10663)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.5
- dentry name snapshots (CVE-2017-7533)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.6
- saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
[ Ben Hutchings ]
* media: Enable USB_RAINSHADOW_CEC as module (see #868511)
* Clean up symbol version fixes for symbols exported from asm
(fixes FTBFS on sparc64):
- [alpha] Un-revert "alpha: move exports to actual definitions"
- [alpha] Restore symbol versions for symbols exported from assembly
- [m68k] Un-revert "m68k: move exports to definitions"
- [sparc64] Un-revert "sparc: move exports to definitions"
* [mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
* [armhf] Revert "gpu: host1x: Add IOMMU support"
* [armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
* [i386] perf tools: Fix unwind build (fixes FTBFS)
* debian/control: Fix version in dependencies on arch-independent
linux-headers-*-common* (Closes: #869511)
* xfrm: policy: check policy direction value (CVE-2017-11600)
* rtlwifi: Fix memory leak when firmware request fails
* rtlwifi: Fix fallback firmware loading (Closes: #869084)
* [arm64] video: Enable FRAMEBUFFER_CONSOLE (Closes: #870071)
* integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS
(Closes: #869565)
* [x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module
(Closes: #869372)
* blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
* blk-mq: Enable IOSCHED_BFQ as module (Closes: #869028); enable
BFQ_GROUP_IOSCHED
* bfq: Enable auto-loading when built as a module
* netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules
(Closes: #868803)
* [amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base
(Closes: #869090)
[ Salvatore Bonaccorso ]
* packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
* udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
* Set ABI to 1
[ Uwe Kleine-König ]
* [arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin and enable
respective device in its device tree (Closes: #871049)
[ Roger Shimizu ]
* [armel] Change NAND related stuff to modules (fixes FTBFS)
-- Ben Hutchings <email address hidden> Sat, 12 Aug 2017 23:09:26 +0100
