Monitoring

monitoring@federez.net

5453 discussions

58 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Mon, 04 Apr 2016 00:44:09 +0200] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: apt 1.0.9.8.3 apt-transport-https 1.0.9.8.3 apt-utils 1.0.9.8.3 base-files 8+deb8u4 gnupg 1.4.18-7+deb8u1 gpgv 1.4.18-7+deb8u1 initramfs-tools 0.120+deb8u1 libapache2-mod-php5 5.6.19+dfsg-0+deb8u1 libapt-inst1.5 1.0.9.8.3 libapt-pkg4.12 1.0.9.8.3 libc6 2.19-18+deb8u4 libc6-dev 2.19-18+deb8u4 libcairo2 1.14.0-2.1+deb8u1 libc-bin 2.19-18+deb8u4 libc-dev-bin 2.19-18+deb8u4 libgif4 4.1.6-11+deb8u1 libglib2.0-0 2.42.1-1+b1 libgtk2.0-0 2.24.25-3+deb8u1 libgtk2.0-bin 2.24.25-3+deb8u1 libgtk2.0-common 2.24.25-3+deb8u1 libhogweed2 2.7.1-5+deb8u1 libnettle4 2.7.1-5+deb8u1 libnss-ldapd 0.9.4-3+deb8u1 libpam0g 1.1.8-3.1+deb8u1+b1 libpam-ldapd 0.9.4-3+deb8u1 libpam-modules 1.1.8-3.1+deb8u1+b1 libpam-modules-bin 1.1.8-3.1+deb8u1+b1 libpam-systemd 215-17+deb8u4 libpcre3 2:8.35-3.3+deb8u4 libsndfile1 1.0.25-9.1+deb8u1 libsvn1 1.8.10-6+deb8u3 libsvn-perl 1.8.10-6+deb8u3 libsystemd0 215-17+deb8u4 libudev1 215-17+deb8u4 linux-image-3.16.0-4-amd64 3.16.7-ckt25-1 linux-libc-dev 3.16.7-ckt25-1 locales 2.19-18+deb8u4 multiarch-support 2.19-18+deb8u4 nscd 2.19-18+deb8u4 nslcd 0.9.4-3+deb8u1 nslcd-utils 0.9.4-3+deb8u1 php5 5.6.19+dfsg-0+deb8u1 php5-cgi 5.6.19+dfsg-0+deb8u1 php5-cli 5.6.19+dfsg-0+deb8u1 php5-common 5.6.19+dfsg-0+deb8u1 php5-curl 5.6.19+dfsg-0+deb8u1 php5-gd 5.6.19+dfsg-0+deb8u1 php5-ldap 5.6.19+dfsg-0+deb8u1 php5-mysql 5.6.19+dfsg-0+deb8u1 php5-readline 5.6.19+dfsg-0+deb8u1 php-pear 5.6.19+dfsg-0+deb8u1 ruby 1:2.1.5+deb8u2 ruby-dev 1:2.1.5+deb8u2 systemd 215-17+deb8u4 systemd-sysv 215-17+deb8u4 tzdata 2016c-0+deb8u1 tzdata-java 2016c-0+deb8u1 udev 215-17+deb8u4 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour glib2.0 (libglib2.0-0) --- glib2.0 (2.42.1-1+b1) jessie; urgency=low, binary-only=yes * Binary-only non-maintainer upload for amd64; no source changes. * Rebuild static .a files against newer libpcre3 -- amd64 Build Daemon (binet) <buildd-binet(a)buildd.debian.org> Tue, 11 Nov 2014 18:53:49 +0100 --- Modifications pour pam (libpam0g libpam-modules libpam-modules-bin) --- pam (1.1.8-3.1+deb8u1+b1) jessie; urgency=low, binary-only=yes * Binary-only non-maintainer upload for amd64; no source changes. * Rebuild to fix multi-arch co-installability -- amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01(a)buildd.debian.org> Wed, 06 Jan 2016 17:25:53 -0800 --- Modifications pour apt (apt apt-transport-https apt-utils libapt-inst1.5 libapt-pkg4.12) --- apt (1.0.9.8.3) jessie; urgency=medium * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList (Closes: #701069) -- Julian Andres Klode <jak(a)debian.org> Sat, 12 Mar 2016 13:14:21 +0000 --- Modifications pour cairo (libcairo2) --- cairo (1.14.0-2.1+deb8u1) jessie; urgency=medium * Fix CVE-2016-3190 -- Moritz Mühlenhoff <jmm(a)debian.org> Sat, 19 Mar 2016 22:37:18 +0100 --- Modifications pour giflib (libgif4) --- giflib (4.1.6-11+deb8u1) stable-proposed-updates; urgency=medium * Non-maintainer upload by the LTS Security Team. * CVE-2015-7555: bail out if Width > SWidth. Cherry-picked upstream commit 179510be300bf11115e37528d79619b53c884a63 (Closes: #808704) -- Guido Günther <agx(a)sigxcpu.org> Mon, 18 Jan 2016 17:08:39 +0100 --- Modifications pour glibc (libc6 libc6-dev libc-bin libc-dev-bin locales multiarch-support nscd) --- glibc (2.19-18+deb8u4) stable; urgency=medium [ Aurelien Jarno ] * Update from upstream stable branch: - Fixes bug18240 failing with a timeout on machines with a lot of swap. * patches/any/cvs-grantpt-pty-owner.diff: new patch from upstream to improve granpt when /dev/pts is not mounted with the correct options. * rules.d/debhelper.mk: only install pt_chown when built. * sysdeps/linux.mk: don't build pt_chown (CVE-2013-2207). Closes: #717544. -- Aurelien Jarno <aurel32(a)debian.org> Sat, 27 Feb 2016 23:17:33 +0100 --- Modifications pour gnupg (gnupg gpgv) --- gnupg (1.4.18-7+deb8u1) stable; urgency=medium [ Jonathan McDowell ] * Import upstream bugfix for handling unknown subkey types (Closes: #787046) -- Daniel Kahn Gillmor <dkg(a)fifthhorseman.net> Tue, 27 Oct 2015 15:39:42 -0400 --- Modifications pour gtk+2.0 (libgtk2.0-0 libgtk2.0-bin libgtk2.0-common) --- gtk+2.0 (2.24.25-3+deb8u1) jessie; urgency=medium * CVE-2013-7447 (Closes: #799275) -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 17 Mar 2016 00:17:18 +0100 --- Modifications pour initramfs-tools --- initramfs-tools (0.120+deb8u1) jessie; urgency=medium [ Ben Hutchings ] * [c367d7d] scripts/functions: Use shell to create stamp file instead of 'touch' (Closes: #783291) * [d22b95b] update-initramfs: Run 'sync' after writing the initramfs (Closes: #783620) * [c22cefe] hook-functions: Add support for nvme devices with MODULES=dep (Closes: #785147) * [e0b23a1] hook-functions: Add support for LVM/LUKS on mmcblk and nvme devices with MODULES=dep (Closes: #747871, #810808) * [0e905aa] scripts/functions: Fix fsck display options (Closes: #781239) [ Laurent Bigonville ] * [3c4b38a] Support fsck.mode= and fsck.repair= parameters as known by systemd-fsck (Closes: #783410, #792557) * [dcb0f0c] Run new panic scripts just before dropping to a shell (Closes: #602331) [ Boris Egorov ] * [2c82cf4] mkinitramfs: fix bashism in script (Closes: #633582) [ Andy Whitcroft ] * [97b664e] When adding i8042 also add psmouse as some keyboards are behind the mouse (Closes: #795839) [ Salvatore Bonaccorso ] * [71e5b62] scripts/nfs: Check return value from nfs_mount_root_impl (Closes: #782641) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 20 Feb 2016 15:48:17 +0000 --- Modifications pour libsndfile (libsndfile1) --- libsndfile (1.0.25-9.1+deb8u1) jessie; urgency=medium * Fix denial of service through division by zero (CVE-2014-9756) -> 03_file_io_divide_by_zero.diff (Closes: #804447) * Fix heap overflow in AIFF parser (CVE-2015-7805) -> 04_fix_aiff_heap_overflow.diff (Closes: #804445) -- Moritz Mühlenhoff <jmm(a)debian.org> Wed, 23 Mar 2016 00:34:11 +0100 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt25-1) jessie; urgency=medium * New upstream stable update: http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt21 - irda: precedence bug in irlmp_seq_hb_idx() - macvtap: unbreak receiving of gro skb with frag list - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv - stmmac: Correctly report PTP capabilities. - ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preemptible context. - sit: fix sit0 percpu double allocations - packet: race condition in packet_bind - net: avoid NULL deref in inet_ctl_sock_destroy() - net: fix a race in dst_release() - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount - [x86] xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map - HID: core: Avoid uninitialized buffer access - [media] v4l2-compat-ioctl32: fix alignment for ARM64 - [armhf] net: mvneta: Fix CPU_MAP registers initialisation - mtd: mtdpart: fix add_mtd_partitions error path - [armel,armhf] 8426/1: dma-mapping: add missing range check in dma_mmap() - [armel,armhf] 8427/1: dma-mapping: add support for offset parameter in dma_mmap() - spi: ti-qspi: Fix data corruption seen on r/w stress test - lockd: create NSM handles per net namespace - Btrfs: fix file corruption and data loss after cloning inline extents - [armel,armhf] common: edma: Fix channel parameter for irq callbacks - [x86] iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints - ext4: fix potential use after free in __ext4_journal_stop - ext4: fix calculation of meta_bg descriptor backups - ext4, jbd2: ensure entering into panic after recording an error in superblock - vTPM: fix memory allocation flag for rtce buffer at kernel boot - spi: dw: explicitly free IRQ handler in dw_spi_remove_host() - media: vb2 dma-contig: Fully cache synchronise buffers in prepare and finish - Bluetooth: hidp: fix device disconnect on idle timeout - Bluetooth: ath3k: Add new AR3012 0930:021c id - Bluetooth: ath3k: Add support of AR3012 0cf3:817b device - spi: atmel: Fix DMA-setup for transfers with more than 8 bits per word - ACPI: Use correct IRQ when uninstalling ACPI interrupt handler - [x86] ALSA: hda/realtek - Dell XPS one ALC3260 speaker no sound after resume back - megaraid_sas: Do not use PAGE_SIZE for max_sectors - [s390x] KVM: SCA must not cross page boundaries - [arm64] Fix compat register mappings - can: Use correct type in sizeof() in nla_put() - mtd: blkdevs: fix potential deadlock + lockdep warnings - Revert "dm mpath: fix stalls when handling invalid ioctls" - [x86] drm/i915: add quirk to enable backlight on Dell Chromebook 11 (2015) - crypto: algif_hash - Only export and import on sockets with data - xtensa: fixes for configs without loop option - megaraid_sas : do not access user memory from IOCTL code - mac80211: fix divide by zero when NOA update - mac80211: allow null chandef in tracing - [x86] KVM: VMX: fix SMEP and SMAP without EPT - [armhf] thermal: exynos: Fix unbalanced regulator disable on probe failure - [x86] ALSA: hda - Apply pin fixup for HP ProBook 6550b - firewire: ohci: fix JMicron JMB38x IT context discovery - scsi: restart list search after unlock in scsi_remove_target - mm: slab: only move management objects off-slab for sizes larger than KMALLOC_MIN_SIZE - [x86] Input: elantech - add Fujitsu Lifebook U745 to force crc_enabled - proc: actually make proc_fd_permission() thread-friendly - [x86] setup: Extend low identity map to cover whole kernel range - [x86] setup: Fix low identity map for >= 2GB kernel range - [x86] cpu: Call verify_cpu() after having entered long mode too - Btrfs: fix race leading to incorrect item deletion when dropping extents - Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow - perf: Fix inherited events vs. tracepoint filters - scsi_sysfs: Fix queue_ramp_up_period return code - Btrfs: fix race when listing an inode's xattrs - [x86] ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list - [x86] storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag - [x86] KVM: Defining missing x86 vectors - drivers: of: of_reserved_mem: fixup the alignment with CMA setup - drm/ast: Initialized data needed to map fbdev memory - FS-Cache: Increase reference of parent after registering, netfs success - FS-Cache: Don't override netfs's primary_index if registering failed - binfmt_elf: Don't clobber passed executable's file header - fs/pipe.c: return error code rather than 0 in pipe_write() - mac80211: fix driver RSSI event calculations - wm831x_power: Use IRQF_ONESHOT to request threaded IRQs - mwifiex: fix mwifiex_rdeeprom_read() - dmaengine: dw: convert to __ffs() - usb: ehci-orion: fix probe for !GENERIC_PHY - devres: fix a for loop bounds check - netfilter: remove dead code - ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk - packet: fix match_fanout_group() - hsi: fix double kfree - hsi: omap_ssi_port: Prevent warning if cawake_gpio is not defined. - ALSA: fireworks/bebob/oxfw/dice: enable to make as built-in - drm: Fix return value of drm_framebuffer_init() - ALSA: fireworks: use u32 type for be32_to_cpup() macro - ALSA: bebob: use correct type for __be32 data - tcp: apply Kern's check on RTTs used for congestion control - clk: versatile-icst: fix memory leak - mfd: twl6040: Fix deferred probe handling for clk32k - of/fdt: fix error checking for earlycon address - netfilter: nfnetlink: don't probe module if it exists - xprtrdma: Re-arm after missed events - ceph: fix message length computation - ipv6: fix tunnel error handling - perf trace: Fix documentation for -i - bonding: fix panic on non-ARPHRD_ETHER enslave failure - rtc: ds1307: Fix alarm programming for mcp794xx - TPM: Avoid reference to potentially freed memory - md/raid0: update queue parameter in a safer location. - md/raid0: apply base queue limits *before* disk_stack_limits - drm/radeon: add quirk for MSI R7 370 - drm/radeon: add quirk for ASUS R7 370 - drm/radeon: fix quirk for MSI R7 370 Armor 2X - tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c - fs/proc, core/debug: Don't expose absolute kernel addresses via wchan - ALSA: hda - Disable 64bit address for Creative HDA controllers - printk: prevent userland from spoofing kernel messages - FS-Cache: Handle a write to the page immediately beyond the EOF marker http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt22 - iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock - iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success - iio: ad5064: Fix ad5629/ad5669 shift - iio:ad7793: Fix ad7785 product ID - [x86] fpu: Fix 32-bit signal frame handling - iio: adc: xilinx: Fix VREFN scale - [x86] drm/i915: quirk backlight present on Macbook 4, 1 - USB: qcserial: Add support for Quectel EC20 Mini PCIe module - USB: serial: option: add support for Novatel MiFi USB620L - USB: ti_usb_3410_5052: Add Honeywell HGI80 ID - [x86] drm/i915: get runtime PM reference around GEM set_caching IOCTL - drm/radeon: unconditionally set sysfs_initialized - USB: qcserial: Fix support for HP lt4112 LTE/HSPA+ Gobi 4G Modem - [arm64] kernel: pause/unpause function graph tracer in cpu_suspend() - usb: dwc3: gadget: let us set lower max_speed - usb: chipidea: debug: disable usb irq while role switch - xhci: Workaround to get Intel xHCI reset working more reliably - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices - [x86] cpu: Fix SMAP check in PVOPS environments - [arm64] restore bogomips information in /proc/cpuinfo - USB: option: add XS Stick W100-2 from 4G Systems - usblp: do not set TASK_INTERRUPTIBLE before lock - fat: fix fake_offset handling on error path - kernel/signal.c: unexport sigsuspend() - ocfs2: fix umask ignored issue - mmc: remove bondage between REQ_META and reliable write - packet: do skb_probe_transport_header when we actually have data - packet: only allow extra vlan len on ethernet devices - packet: fix tpacket_snd max frame len - sctp: translate host order to network order when setting a hmacid - net/mlx4_core: Avoid returning success in case of an error flow - usb: musb: core: fix order of arguments to ulpi write callback - FS-Cache: Add missing initialization of ret in cachefiles_write_page() - macvlan: fix leak in macvlan_handle_frame - packet: always probe for transport header - packet: infer protocol from ethernet header if unset - ip_tunnel: disable preemption when updating per-cpu tstats - snmp: Remove duplicate OUTMCAST stat increment - tcp: initialize tp->copied_seq in case of cross SYN connection - net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds - net: ipmr: fix static mfc/dev leaks on table destruction - net: ip6mr: fix static mfc/dev leaks on table destruction - ipv6: distinguish frag queues by device for multicast and link-local packets - ipv6: add complete rcu protection around np->opt - net/neighbour: fix crash at dumping device-agnostic proxy entries - ipv6: sctp: implement sctp_v6_destroy_sock() - xfs: allow inode allocations in post-growfs disk space (Closes: #802885) - ALSA: usb-audio: add packet size quirk for the Medeli DD305 - ALSA: usb-audio: prevent CH345 multiport output SysEx corruption - ALSA: usb-audio: work around CH345 input SysEx corruption - dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE transition - dm: fix ioctl retry termination with signal - ALSA: hda - Add fixup for Acer Aspire One Cloudbook 14 - mac: validate mac_partition is within sector - ALSA: hda - Apply HP headphone fixups more generically - fix sysvfs symlinks - vfs: Make sendfile(2) killable even better - vfs: Avoid softlockups with sendfile(2) - nfs4: start callback_ident at idr 1 - ALSA: hda - Fix headphone noise after Dell XPS 13 resume back from S3 - [arm64] KVM: Fix AArch32 to AArch64 register mapping - drm/radeon: make rv770_set_sw_state failures non-fatal - ALSA: hda - Fix noise on Gigabyte Z170X mobo - drm/radeon: make some dpm errors debug only - nfs: if we have no valid attrs, then don't declare the attribute cache valid - xen/gntdev: Grant maps should not be subject to NUMA balancing - iscsi-target: Fix rx_login_comp hang after login failure - target: Fix race for SCF_COMPARE_AND_WRITE_POST checking - target: fix COMPARE_AND_WRITE non zero SGL offset data corruption - [armel/kirkwood] dts: Fix QNAP TS219 power-off - netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse - netfilter: nf_tables: fix bogus warning in nft_data_uninit() - netfilter: ip6t_SYNPROXY: fix NULL pointer dereference - gre6: allow to update all parameters via rtnl - atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation - sctp: use the same clock as if sock source timestamps were on - sctp: update the netstamp_needed counter when copying sockets - ipv6: sctp: clone options to avoid use after free - vlan: Fix untag operations of stacked vlans with REORDER_HEADER off - skbuff: Fix offset error in skb_reorder_vlan_header - af_unix: Revert 'lock_interruptible' in stream receive code - ip6mr: call del_timer_sync() in ip6mr_free_table() - [x86] drm/i915: Disable PSMI sleep messages on all rings around context switches (Closes: #777231) - crypto: nx - Fix timing leak in GCM and CCM decryption - crypto: talitos - Fix timing leak in ESP ICV verification - ASoC: wm8962: correct addresses for HPF_C_0/1 - mac80211: mesh: fix call_rcu() usage - mac80211: ensure we don't update tx power on a non-running sdata - can: sja1000: clear interrupts on start - ring-buffer: Update read stamp with first real commit on page - block: Always check queue limits for cloned requests - Fix a memory leak in scsi_host_dev_release() - wan/x25: Fix use-after-free in x25_asy_open_tty() - mac80211: do not actively scan DFS channels - locking: Add WARN_ON_ONCE lock assertion - drm: Fix an unwanted master inheritance v2 - sched/core: Clear the root_domain cpumasks in init_rootdomain() - [x86] signal: Fix restart_syscall number for x32 tasks - isdn: Partially revert debug format string usage clean up - remoteproc: avoid stack overflow in debugfs file - [armhf] net: mvneta: add configuration for MBUS windows access protection - [armhf] net: mvneta: fix bit assignment in MVNETA_RXQ_CONFIG_REG - [armhf] net: mvneta: fix bit assignment for RX packet irq enable - ipv4: igmp: Allow removing groups from a removed interface - sched/core: Remove false-positive warning from wake_up_process() - btrfs: fix signed overflows in btrfs_sync_file http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt23 - iio: fix some warning messages - USB: cp210x: Remove CP2110 ID from compatibility list - USB: cdc_acm: Ignore Infineon Flash Loader utility - USB: serial: Another Infineon flash loader USB ID - ext4: Fix handling of extended tv_sec - jbd2: Fix unreclaimed pages after truncate in data=journal mode - drm/ttm: Fixed a read/write lock imbalance - AHCI: Fix softreset failed issue of Port Multiplier - sata_sil: disable trim - usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron - staging: lustre: echo_copy.._lsm() dereferences userland pointers directly - irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB - usb: core : hub: Fix BOS 'NULL pointer' kernel panic - USB: whci-hcd: add check for dma mapping error - dm btree: fix leak of bufio-backed block in btree_split_sibling error path - SCSI: Fix NULL pointer dereference in runtime PM - perf: Fix PERF_EVENT_IOC_PERIOD deadlock - usb: xhci: fix config fail of FS hub behind a HS hub with MTT - ALSA: rme96: Fix unexpected volume reset after rate changes - ALSA: hda - Add inverted dmic for Packard Bell DOTS - virtio: fix memory leak of virtio ida cache layers - nfs4: limit callback decoding to received bytes - SUNRPC: Fix callback channel - IB/srp: Fix possible send queue overflow - ALSA: hda - Fixing speaker noise on the two latest thinkpad models - 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping - radeon/cik: Fix GFX IB test on Big-Endian - radeon: Fix VCE ring test for Big-Endian systems - radeon: Fix VCE IB test on Big-Endian systems - ALSA: hda - Fix noise problems on Thinkpad T440s - dm thin metadata: fix bug when taking a metadata snapshot - dm space map metadata: fix ref counting bug when bootstrapping a new space map - ipmi: move timer init to before irq is setup - dm btree: fix bufio buffer leaks in dm_btree_del() error path - vgaarb: fix signal handling in vga_get() - xhci: fix usb2 resume timing and races. - USB: add quirk for devices with broken LPM - [hppa] iommu: fix panic due to trying to allocate too large region - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count - mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress - mm: hugetlb: call huge_pte_alloc() only if ptep is null - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections - ocfs2: fix SGID not inherited issue - usb: musb: USB_TI_CPPI41_DMA requires dmaengine support - efi: Disable interrupts around EFI calls, not in the epilog/prolog calls - [armhf] i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs - xen/events/fifo: Consume unprocessed events when a CPU dies - video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented - crypto: skcipher - Copy iv from desc even for 0-len walks - rfkill: copy the name into the rfkill struct - ses: Fix problems with simple enclosures - Revert "SCSI: Fix NULL pointer dereference in runtime PM" - ses: fix additional element traversal bug - powercap / RAPL: fix BIOS lock check - n_tty: Fix poll() after buffer-limited eof push read - tty: Fix GPF in flush_to_ldisc() - ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly - [armel,armhf] 8471/1: need to save/restore arm register(r11) when it is corrupted - ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd - spi: fix parent-device reference leak - dma-debug: Fix dma_debug_entry offset calculation - [powerpc*] powernv: Fix the overflow of OPAL message notifiers head array - [powerpc*] powernv: pr_warn_once on unsupported OPAL_MSG type - USB: ipaq.c: fix a timeout loop - USB: fix invalid memory access in hub_activate() - pinctrl: bcm2835: Fix initial value for direction_output - net: phy: mdio-mux: Check return value of mdiobus_alloc() - mISDN: fix a loop count - qlcnic: fix a timeout loop - ser_gigaset: fix deallocation of platform device structure - include/linux/mmdebug.h: should include linux/bug.h - [x86] drm/i915: Fix SRC_COPY width on 830/845g - vmstat: allocate vmstat_wq before it is used - [powerpc*] KVM: Book3S HV: Prohibit setting illegal transaction state in MSR - ASoC: wm8974: set cache type for regmap - [armhf] dts: imx6: Fix Ethernet PHY mode on Ventana boards - ALSA: hda - Set SKL+ hda controller power at freeze() and thaw() - [s390x] dis: Fix handling of format specifiers - [hppa] Fix syscall restarts - ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2) - ocfs2: fix BUG when calculate new backup super - mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() - net/mlx4_en: Remove dependency between timestamping capability and service_task - net/mlx4_en: Fix HW timestamp init issue upon system startup - ipv6/addrlabel: fix ip6addrlbl_get() - qlcnic: fix a loop exit condition better - genirq: Prevent chip buslock deadlock - ftrace/scripts: Fix incorrect use of sprintf in recordmcount - tracing: Fix setting of start_index in find_next() - [armhf] dts: vt8500: Add SDHC node to DTS file for WM8650 - [x86] mce: Ensure offline CPUs don't participate in rendezvous process - ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz - async_tx: use GFP_NOWAIT rather than GFP_IO - ftrace/module: Call clean up function when module init fails early - ASoC: Use nested lock for snd_soc_dapm_mutex_lock - net: filter: make JITs zero A for SKF_AD_ALU_XOR_X - net: possible use after free in dst_release - [x86] kvm: only channel 0 of the i8254 is linked to the HPET - firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt24 - drm/nouveau/nv46: Change mc subdev oclass from nv44 to nv4c - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. - sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close - connector: bump skb->users before callback invocation - unix: properly account for FDs passed over unix sockets - bridge: Only call /sbin/bridge-stp for the initial network namespace - vxlan: fix test which detect duplicate vxlan iface - net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory - tcp_yeah: don't set ssthresh below 2 - bonding: Prevent IPv6 link local address on enslaved devices - phonet: properly unshare skbs in phonet_rcv() - net: bpf: reject invalid shifts - ipv6: update skb->csum when CE mark is propagated - team: Replace rcu_read_lock with a mutex in team_vlan_rx_kill_vid - xen-netback: respect user provided max_queues - xen-netfront: respect user provided max_queues - xen-netfront: print correct number of queues - xen-netfront: update num_queues to real created - xfrm: dst_entries_init() per-net dst_ops - sctp: convert sack_needed and sack_generation to bits - sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING - nfs: Fix unused variable error - media: gspca: ov534/topro: prevent a division by 0 - media: media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode - [x86] KVM: expose MSR_TSC_AUX to userspace - [x86] KVM: correctly print #AC in traces - drm/radeon: call hpd_irq_event on resume - xhci: refuse loading if nousb is used - [arm64] Clear out any singlestep state on a ptrace detach operation - time: Avoid signed overflow in timekeeping_get_ns() - Bluetooth: Add support of Toshiba Broadcom based devices - rtlwifi: fix memory leak for USB device - wlcore/wl12xx: spi: fix oops on firmware load - EDAC: Fix the leak of mci->bus->name when bus_register fails - EDAC, mc_sysfs: Fix freeing bus' name - EDAC: Robustify workqueues destruction - [arm64] mm: ensure that the zero page is visible to the page table walker - [powerpc*] Make value-returning atomics fully ordered - [powerpc*] Make {cmp}xchg* and their atomic_ versions fully ordered - dm space map metadata: remove unused variable in brb_pop() - dm thin: fix race condition when destroying thin pool workqueue - futex: Drop refcount if requeue_pi() acquired the rtmutex - [arm64] mdscr_el1: avoid exposing DCC to userspace - [arm64] kernel: enforce pmuserenr_el0 initialization and restore - drm/radeon: clean up fujitsu quirks - mmc: sdio: Fix invalid vdd in voltage switch power cycle - mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off() - udf: limit the maximum number of indirect extents in a row - nfs: Fix race in __update_open_stateid() - USB: cp210x: add ID for ELV Marble Sound Board 1 - posix-clock: Fix return code on the poll method's error path - rtlwifi: rtl8192de: Fix incorrect module parameter descriptions - rtlwifi: rtl8192se: Fix module parameter initialization - rtlwifi: rtl8192ce: Fix handling of module parameters - rtlwifi: rtl8192cu: Add missing parameter setup - NFSv4: Don't perform cached access checks before we've OPENed the file - NFS: Fix attribute cache revalidation - bcache: fix a livelock when we cause a huge number of cache misses - bcache: Add a cond_resched() call to gc - bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device - bcache: fix a leak in bch_cached_dev_run() - bcache: unregister reboot notifier if bcache fails to unregister device - bcache: allows use of register in udev to avoid "device_busy" error. - bcache: prevent crash on changing writeback_running - bcache: Change refill_dirty() to always scan entire disk if necessary - wlcore/wl12xx: spi: fix NULL pointer dereference (Oops) - Input: i8042 - add Fujitsu Lifebook U745 to the nomux list - libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct - [x86] xen: don't reset vcpu_info on a cancelled suspend - udf: Prevent buffer overrun with multi-byte characters - udf: Check output buffer length when converting name to CS0 - PCI: Fix minimum allocation address overwrite - PCI: host: Mark PCIe/PCI (MSI) IRQ cascade handlers as IRQF_NO_THREAD - iwlwifi: update and fix 7265 series PCI IDs - locks: fix unlock when fcntl_setlk races with a close - ASoC: compress: Fix compress device direction check - dm snapshot: fix hung bios when copy error occurs - uml: fix hostfs mknod() - uml: flush stdout before forking - drm/nouveau/kms: take mode_config mutex in connector hotplug path - [x86] boot: Double BOOT_HEAP_SIZE to 64KB - [s390x] fix normalization bug in exception table sorting - xfs: inode recovery readahead can race with inode buffer creation - xfs: handle dquot buffer readahead in log recovery correctly - clocksource/drivers/vt8500: Increase the minimum delta - Input: elantech - mark protocols v2 and v3 as semi-mt - [x86] reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[] - virtio_balloon: fix race by fill and leak - virtio_balloon: fix race between migration and ballooning - [hppa] Fix __ARCH_SI_PREAMBLE_SIZE - scripts/recordmcount.pl: support data in text section on powerpc - [powerpc*] module: Handle R_PPC64_ENTRY relocations - dmaengine: dw: fix cyclic transfer setup - dmaengine: dw: fix cyclic transfer callbacks - mmc: mmci: fix an ages old detection error - [sparc64] fix incorrect sign extension in sys_sparc64_personality - cifs: fix race between call_async() and reconnect() - cifs_dbg() outputs an uninitialized buffer in cifs_readdir() - dma-debug: switch check from _text to _stext - ocfs2/dlm: ignore cleaning the migration mle that is inuse - zram/zcomp: use GFP_NOIO to allocate streams - zram: try vmalloc() after kmalloc() - mm: soft-offline: check return value in second __get_any_page() call - memcg: only free spare array when readers are done - panic: release stale console lock to always get the logbuf printed out - kernel/panic.c: turn off locks debug before releasing console lock - printk: do cond_resched() between lines while outputting to consoles - ALSA: hda - Fix bass pin fixup for ASUS N550JX - crypto: af_alg - Disallow bind/setkey/... after accept(2) - crypto: af_alg - Fix socket double-free when accept fails - crypto: af_alg - Add nokey compatibility path - crypto: hash - Add crypto_ahash_has_setkey - crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path - crypto: af_alg - Forbid bind(2) when nokey child sockets are present - ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode - ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode - ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0 - crypto: algif_skcipher - Load TX SG list after waiting - crypto: crc32c - Fix crc32c soft dependency - IB/qib: fix mcast detach when qp not attached - IB/qib: Support creating qps with GFP_NOIO flag - [x86] ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill dmi list - iscsi-target: Fix potential dead-lock during node acl delete - ALSA: timer: Handle disconnection more safely - ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock - [x86] ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list - [x86] drm/i915: avoid deadlock on failure paths in __intel_framebuffer_create() - [x86] drm/i915: On fb alloc failure, unref gem object where it gets refed - media: rc: allow rc modules to be loaded if rc-main is not a module - SCSI: initio: remove duplicate module device table - [arm64] clk: xgene: Fix divider with non-zero shift value - clk: st: avoid uninitialized variable use - ath9k_htc: check for underflow in ath9k_htc_rx_msg() - mtd: nand: fix ONFI parameter page layout - mtd: nand: denali: add missing nand_release() call in denali_remove() - mtd: nand: remove unused and buggy get_platform_nandchip() helper function - ALSA: fm801: propagate TUNER_ONLY bit when autodetected - pinctrl: bcm2835: Fix memory leak in error path - [x86] LDT: Print the real LDT base address - sysrq: Fix warning in sysrq generated crash. - kconfig: return 'false' instead of 'no' in bool function - [x86] perf: Fix filter_events() bug with event mappings - power: test_power: correctly handle empty writes - firmware: actually return NULL on failed request_firmware_nowait() - target: Fix a memory leak in target_dev_lba_map_store() - um: Fix build error and kconfig for i386 - ipv6: tcp: add rcu locking in tcp_v6_send_synack() - mmc: sd: limit SD card power limit according to cards capabilities - Btrfs: clean up an error code in btrfs_init_space_info() - bridge: fix lockdep addr_list_lock false positive splat - batman-adv: Avoid recursive call_rcu for batadv_bla_claim - batman-adv: Avoid recursive call_rcu for batadv_nc_node - batman-adv: fix potential TT client + orig-node memory leak - batman-adv: Drop immediate batadv_orig_ifinfo free function - batman-adv: Drop immediate batadv_neigh_node free function - batman-adv: Drop immediate neigh_ifinfo free function - batman-adv: Drop immediate batadv_hard_iface free function - batman-adv: Drop immediate orig_node free function - printk: help pr_debug and pr_devel to optimize out arguments - mmc: debugfs: correct wrong voltage value - IB/mlx4: Initialize hop_limit when creating address handle - net/mlx4: Remove unused macro - cifs: Ratelimit kernel log messages - HID: usbhid: fix recursive deadlock http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt25 - ASN.1: Fix non-match detection failure on data overrun - qeth: initialize net_device with carrier off - EVM: Use crypto_memneq() for digest comparisons - iio: adis_buffer: Fix out-of-bounds memory access - [powerpc*] KVM: Fix emulation of H_SET_DABR/X on POWER8 - [x86] irq: Call chip->irq_set_affinity in proper context - ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot() - usb: cdc-acm: handle unlinked urb in acm read callback - usb: cdc-acm: send zero packet for intel 7260 modem - cdc-acm:exclude Samsung phone 04e8:685d - usb: hub: do not clear BOS field during reset device - USB: cp210x: add ID for IAI USB to RS485 adaptor - USB: visor: fix null-deref at probe - USB: serial: option: Adding support for Telit LE922 - ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup() - ALSA: seq: Degrade the error message for too many opens - USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable - USB: option: fix Cinterion AHxx enumeration - ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures - ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay - virtio_pci: fix use after free on release - ALSA: bebob: Use a signed return type for get_formation_index - [arm64] errata: Add -mpc-relative-literal-loads to build flags - [powerpc*] eeh: Fix PE location code - SCSI: fix crashes in sd and sr runtime PM - n_tty: Fix unsafe reference to "other" ldisc - staging/speakup: Use tty_ldisc_ref() for paste kworker - ALSA: dummy: Disable switching timer backend via sysfs - [x86] drm/vmwgfx: respect 'nomodeset' - [x86] mm/pat: Avoid truncation when converting cpa->numpages to address - perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed - perf hists: Fix HISTC_MEM_DCACHELINE width setting - [powerpc*] perf: Remove PPMU_HAS_SSLOT flag for Power8 - vmstat: explicitly schedule per-cpu work on the CPU we need it to run on - umount: Do not allow unmounting rootfs. - crypto: algif_skcipher - Require setkey before accept(2) - crypto: algif_skcipher - Add nokey compatibility path - crypto: algif_hash - Require setkey before accept(2) - crypto: skcipher - Add crypto_skcipher_has_setkey - crypto: algif_skcipher - Add key check exception for cipher_null - crypto: algif_hash - Remove custom release parent function - crypto: algif_skcipher - Remove custom release parent function - crypto: algif_hash - Fix race condition in hash_check_key - crypto: algif_skcipher - Fix race condition in skcipher_check_key - iio: add HAS_IOMEM dependency to VF610_ADC - iio: dac: mcp4725: set iio name property in sysfs - ASoC: rt5645: fix the shift bit of IN1 boost - cgroup: make sure a parent css isn't offlined before its children - PCI/AER: Flush workqueue on device remove to avoid use-after-free - libata: disable forced PORTS_IMPL for >= AHCI 1.3 - mac80211: Requeue work after scan complete for all VIF types. - rfkill: fix rfkill_fop_read wait_event usage - crypto: shash - Fix has_key setting - [x86] drm/i915/dp: fall back to 18 bpp when sink capability is unknown - target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors - crypto: algif_hash - wait for crypto_ahash_init() to complete - iio: inkern: fix a NULL dereference on error - iio: pressure: mpl115: fix temperature offset sign - [x86] intel_scu_ipcutil: underflow in scu_reg_access() - ALSA: seq: Fix race at closing in virmidi driver - ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check - ALSA: pcm: Fix potential deadlock in OSS emulation - ALSA: seq: Fix yet another races among ALSA timer accesses - ALSA: timer: Code cleanup - ALSA: timer: Fix link corruption due to double start or stop - libata: fix sff host state machine locking while polling - [mips*] Fix buffer overflow in syscall_get_arguments() - cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() - ASoC: dpcm: fix the BE state on hw_free - module: wrapper for symbol name. - ALSA: hda - Add fixup for Mac Mini 7,1 model - ALSA: rawmidi: Make snd_rawmidi_transmit() race-free - ALSA: rawmidi: Fix race at copying & updating the position - ALSA: seq: Fix lockdep warnings due to double mutex locks - drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration - radix-tree: fix race in gang lookup - [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms - xhci: Fix list corruption in urb dequeue at host removal - media: tda1004x: only update the frontend properties if locked - ALSA: timer: Fix leftover link at closing - media: saa7134-alsa: Only frees registered sound cards - Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl - scsi_dh_rdac: always retry MODE SELECT on command lock violation - SCSI: Add Marvell Console to VPD blacklist - drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil - ALSA: hda - Fix static checker warning in patch_hdmi.c - Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo" - dump_stack: avoid potential deadlocks - mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress - ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup - mm: replace vma_lock_anon_vma with anon_vma_lock_read/write - radix-tree: fix oops after radix_tree_iter_retry - crypto: user - lock crypto_alg_list on alg dump - serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) - pty: fix possible use after free of tty->driver_data - pty: make sure super_block is still valid in final /dev/tty close - ALSA: hda - Fix speaker output from VAIO AiO machines - klist: fix starting point removed bug in klist iterators - ALSA: dummy: Implement timer backend switching more safely - ALSA: timer: Fix wrong instance passed to slave callbacks - [armel,armhf] 8517/1: ICST: avoid arithmetic overflow in icst_hz() - ALSA: timer: Fix race between stop and interrupt - ALSA: timer: Fix race at concurrent reads - [armhf] phy: twl4030-usb: Relase usb phy on unload - [x86] ahci: Intel DNV device IDs SATA - workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup - drm/radeon: hold reference to fences in radeon_sa_bo_new - [armel,armhf] 8519/1: ICST: try other dividends than 1 - btrfs: properly set the termination value of ctx->pos in readdir - net: phy: Fix phy_mac_interrupt() - af_unix: fix struct pid memory leak - pptp: fix illegal memory access caused by multiple bind()s - sctp: allow setting SCTP_SACK_IMMEDIATELY by the application - netlink: not trim skb for mmaped socket when dump - ipv6: fix a lockdep splat - sctp: translate network order to host order when users get a hmacid - IB/mlx5: Fix RC transport send queue overhead computation - [x86] drm/vmwgfx: Fix an fb unlocking bug - net: phy: fix PHY_RUNNING in phy_state_machine - net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS [ Ben Hutchings ] * udeb: Add dm-service-time to multipath-modules (Closes: #806131) * net: Ignore ABI changes due to "ipv6: add complete rcu protection around np->opt", which don't appear to affect out-of-tree modules * crypto: {blk,giv}cipher: Set has_setkey (avoids regressing cryptsetup; see #815480) * net: Fix regression in ip_vti/ip6_vti in 3.16.7-ckt11 (Closes: #813594): - ip_vti/ip6_vti: Do not touch skb->mark on xmit - xfrm: Override skb->mark with tunnel->parm.i_key in xfrm_input - ip_vti/ip6_vti: Preserve skb->mark after rcv_cb call [ Aurelien Jarno ] * [mips*] Add support for MIPS 5KE CPU. * [mips*] Backport math emulation fix from 4.5. -- Ben Hutchings <ben(a)decadent.org.uk> Sun, 06 Mar 2016 22:19:34 +0000 --- Modifications pour pcre3 (libpcre3) --- pcre3 (2:8.35-3.3+deb8u4) jessie; urgency=medium * Non-maintainer upload. * Add 0001-Fixed-an-issue-with-nested-table-jumps.patch. Fixes issue with nested table jumps. (Closes: #819050) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 25 Mar 2016 19:58:10 +0100 pcre3 (2:8.35-3.3+deb8u3) jessie; urgency=medium * Non-maintainer upload. * Refresh CVE-2015-2325_CVE-2015-2326_CVE-2015-3210_CVE-2015-5073.patch. Drop addition of "error text" for error ERR86 in pcre_compile.c. This change belongs to upstream revision 1481 (Give error for \x{} and \o{}). * Add 0001-Give-error-for-x-and-o.patch. Give error for \x{} and \o{}. * Add 0001-Fix-workspace-overflow-for-ACCEPT-with-deeply-nested.patch. CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply nested parentheses. (Closes: #815921) * Add 0001-Yet-another-duplicate-name-bugfix-by-overestimating-.patch. CVE-2016-1283: heap buffer overflow in handling of duplicate named groups. (Closes: #809706) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 25 Mar 2016 07:05:50 +0100 --- Modifications pour php5 (libapache2-mod-php5 php5 php5-cgi php5-cli php5-common php5-curl php5-gd php5-ldap php5-mysql php5-readline php-pear) --- php5 (5.6.19+dfsg-0+deb8u1) jessie-security; urgency=medium * Imported Upstream version 5.6.19+dfsg * Rebase patches on top of 5.6.19+dfsg release * Allow multiple whitespace in php5-fpm init script (Closes: #818102) -- Ondřej Surý <ondrej(a)debian.org> Mon, 07 Mar 2016 20:09:14 +0100 php5 (5.6.18+dfsg-0+deb8u1) jessie-security; urgency=medium * Merge patch for ODBC bug fix varchars returning with length zero * Fix missing phpdbg sapi from the for loop that prevented the modules to be enabled for phpdbg SAPI * Fail gracefully when other PHP module is enabled in Apache2 * php5-maintscript-helper needs update for phpdbg * Imported Upstream version 5.6.18+dfsg * Rebase patches on top of 5.6.18 release * Revert PEAR version to last working version from PHP 5.6.14 (Closes: #812788) -- Ondřej Surý <ondrej(a)debian.org> Fri, 05 Feb 2016 11:07:34 +0100 --- Modifications pour ruby-defaults (ruby ruby-dev) --- ruby-defaults (1:2.1.5+deb8u2) jessie; urgency=medium * ruby: make the conflict on ruby-activesupport-2.3 versioned on (<< 2:4) to allow transitional package to be installed (Closes: #798712) -- Antonio Terceiro <terceiro(a)debian.org> Thu, 28 Jan 2016 11:28:36 -0200 --- Modifications pour subversion (libsvn1 libsvn-perl) --- subversion (1.8.10-6+deb8u3) jessie; urgency=medium * patches/r1701440-kwallet-segfault: Fix segfault when using kwallet to store authentication information. (Closes: #736879) -- James McCoy <jamessan(a)debian.org> Fri, 11 Mar 2016 20:25:57 -0500 --- Modifications pour systemd (libpam-systemd libsystemd0 libudev1 systemd systemd-sysv udev) --- systemd (215-17+deb8u4) stable; urgency=medium [ Martin Pitt ] * debian/udev.prerm: Add missing "deconfigure" action. (Closes: #809744) * udev.postinst: Don't call addgroup with --quiet, so that if the "input" group already exists as a non-system group you get a sensible error message. Some broken tutorials forget the --system option. (Closes: #769948, LP: #1455956) * systemd.postinst: Drop the --quiet from the addgroup calls as well, same reason as above. (Closes: #762275) [ Michael Biebl ] * Make sure all swap units are ordered before the swap target. This avoids that swap devices are being stopped prematurely during shutdown. (Closes: #805133) * Only skip the filesystem check for /usr if the /run/initramfs/fsck-usr flag file exists. Otherwise we break booting with dracut which uses systemd inside the initramfs. (Closes: #810748) * Fix --network-interface in systemd-nspawn to not fail when modifying an existing link. (Closes: #813696) -- Michael Biebl <biebl(a)debian.org> Thu, 03 Mar 2016 19:51:22 +0100 --- Modifications pour tzdata (tzdata tzdata-java) --- tzdata (2016c-0+deb8u1) stable; urgency=medium * New upstream version, affecting the following future time stamps: - America/Santiago - Asia/Baku -- Aurelien Jarno <aurel32(a)debian.org> Fri, 25 Mar 2016 23:58:54 +0100 tzdata (2016b-0+deb8u1) stable; urgency=medium * New upstream version, affecting the following future time stamps: - America/Cayman - America/Port-au-Prince - Asia/Chita - Asia/Gaza - Asia/Hebron - Asia/Tehran -- Aurelien Jarno <aurel32(a)debian.org> Mon, 14 Mar 2016 21:53:38 +0100 --- Modifications pour base-files --- base-files (8+deb8u4) stable; urgency=low * Changed /etc/debian_version to 8.4, for Debian 8.4 point release. -- Santiago Vila <sanvila(a)debian.org> Mon, 14 Mar 2016 00:45:24 +0100 --- Modifications pour nettle (libhogweed2 libnettle4) --- nettle (2.7.1-5+deb8u1) stable; urgency=low * Fix CVE-2015-8803, CVE-2015-8804, and CVE-2015-8805 (Closes: #813679). -- Magnus Holmgren <holmgren(a)debian.org> Sat, 06 Feb 2016 20:01:37 +0100 --- Modifications pour nss-pam-ldapd (libnss-ldapd libpam-ldapd nslcd nslcd-utils) --- nss-pam-ldapd (0.9.4-3+deb8u1) stable; urgency=low * fix-issues-withdaemonising.patch, avoid-signal-race.patch: patches to fix issues with daemonising nslcd and avoid a race condition in signal handling during start-up (closes: #759544) * ensure proper return code of init script (closes: #794686) * fix-ppolicy-expiration-warnings.patch: fix password policy expiration warnings (closes: #794068) -- Arthur de Jong <adejong(a)debian.org> Tue, 19 Jan 2016 19:52:02 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années

62 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Sun, 03 Apr 2016 10:48:22 +0200] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: amavisd-new 1:2.10.1-2~deb8u1 apt 1.0.9.8.3 apt-utils 1.0.9.8.3 base-files 8+deb8u4 gnupg 1.4.18-7+deb8u1 gpgv 1.4.18-7+deb8u1 imagemagick 8:6.8.9.9-5+deb8u1 imagemagick-6.q16 8:6.8.9.9-5+deb8u1 imagemagick-common 8:6.8.9.9-5+deb8u1 initramfs-tools 0.120+deb8u1 libapache2-mod-php5 5.6.19+dfsg-0+deb8u1 libapt-inst1.5 1.0.9.8.3 libapt-pkg4.12 1.0.9.8.3 libc6 2.19-18+deb8u4 libc6-dev 2.19-18+deb8u4 libcairo2 1.14.0-2.1+deb8u1 libc-bin 2.19-18+deb8u4 libc-dev-bin 2.19-18+deb8u4 libglib2.0-0 2.42.1-1+b1 libgtk2.0-0 2.24.25-3+deb8u1 libgtk2.0-bin 2.24.25-3+deb8u1 libgtk2.0-common 2.24.25-3+deb8u1 libhogweed2 2.7.1-5+deb8u1 libmagickcore-6.q16-2 8:6.8.9.9-5+deb8u1 libmagickcore-6.q16-2-extra 8:6.8.9.9-5+deb8u1 libmagickwand-6.q16-2 8:6.8.9.9-5+deb8u1 libnettle4 2.7.1-5+deb8u1 libnss-ldapd 0.9.4-3+deb8u1 libpam0g 1.1.8-3.1+deb8u1+b1 libpam-ldapd 0.9.4-3+deb8u1 libpam-modules 1.1.8-3.1+deb8u1+b1 libpam-modules-bin 1.1.8-3.1+deb8u1+b1 libpam-systemd 215-17+deb8u4 libpcre3 2:8.35-3.3+deb8u4 libsystemd0 215-17+deb8u4 libudev1 215-17+deb8u4 libunbound2 1.4.22-3+deb8u1 linux-image-3.16.0-4-amd64 3.16.7-ckt25-1 linux-libc-dev 3.16.7-ckt25-1 locales 2.19-18+deb8u4 multiarch-support 2.19-18+deb8u4 nettle-dev 2.7.1-5+deb8u1 nscd 2.19-18+deb8u4 nslcd 0.9.4-3+deb8u1 nslcd-utils 0.9.4-3+deb8u1 php5 5.6.19+dfsg-0+deb8u1 php5-cli 5.6.19+dfsg-0+deb8u1 php5-common 5.6.19+dfsg-0+deb8u1 php5-curl 5.6.19+dfsg-0+deb8u1 php5-enchant 5.6.19+dfsg-0+deb8u1 php5-gd 5.6.19+dfsg-0+deb8u1 php5-intl 5.6.19+dfsg-0+deb8u1 php5-ldap 5.6.19+dfsg-0+deb8u1 php5-mcrypt 5.6.19+dfsg-0+deb8u1 php5-mysql 5.6.19+dfsg-0+deb8u1 php5-pgsql 5.6.19+dfsg-0+deb8u1 php5-readline 5.6.19+dfsg-0+deb8u1 php5-sqlite 5.6.19+dfsg-0+deb8u1 php-pear 5.6.19+dfsg-0+deb8u1 systemd 215-17+deb8u4 systemd-sysv 215-17+deb8u4 udev 215-17+deb8u4 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour glib2.0 (libglib2.0-0) --- glib2.0 (2.42.1-1+b1) jessie; urgency=low, binary-only=yes * Binary-only non-maintainer upload for amd64; no source changes. * Rebuild static .a files against newer libpcre3 -- amd64 Build Daemon (binet) <buildd-binet(a)buildd.debian.org> Tue, 11 Nov 2014 18:53:49 +0100 --- Modifications pour pam (libpam0g libpam-modules libpam-modules-bin) --- pam (1.1.8-3.1+deb8u1+b1) jessie; urgency=low, binary-only=yes * Binary-only non-maintainer upload for amd64; no source changes. * Rebuild to fix multi-arch co-installability -- amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01(a)buildd.debian.org> Wed, 06 Jan 2016 17:25:53 -0800 --- Modifications pour amavisd-new --- amavisd-new (1:2.10.1-2~deb8u1) stable; urgency=medium * Backport LC_ALL change to stable. -- Brian May <bam(a)debian.org> Thu, 11 Feb 2016 11:55:08 +1100 amavisd-new (1:2.10.1-2) unstable; urgency=medium * Set LC_ALL before running daemon. Closes: #812325. -- Brian May <bam(a)debian.org> Fri, 29 Jan 2016 11:00:58 +1100 --- Modifications pour apt (apt apt-utils libapt-inst1.5 libapt-pkg4.12) --- apt (1.0.9.8.3) jessie; urgency=medium * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList (Closes: #701069) -- Julian Andres Klode <jak(a)debian.org> Sat, 12 Mar 2016 13:14:21 +0000 --- Modifications pour cairo (libcairo2) --- cairo (1.14.0-2.1+deb8u1) jessie; urgency=medium * Fix CVE-2016-3190 -- Moritz Mühlenhoff <jmm(a)debian.org> Sat, 19 Mar 2016 22:37:18 +0100 --- Modifications pour glibc (libc6 libc6-dev libc-bin libc-dev-bin locales multiarch-support nscd) --- glibc (2.19-18+deb8u4) stable; urgency=medium [ Aurelien Jarno ] * Update from upstream stable branch: - Fixes bug18240 failing with a timeout on machines with a lot of swap. * patches/any/cvs-grantpt-pty-owner.diff: new patch from upstream to improve granpt when /dev/pts is not mounted with the correct options. * rules.d/debhelper.mk: only install pt_chown when built. * sysdeps/linux.mk: don't build pt_chown (CVE-2013-2207). Closes: #717544. -- Aurelien Jarno <aurel32(a)debian.org> Sat, 27 Feb 2016 23:17:33 +0100 --- Modifications pour gnupg (gnupg gpgv) --- gnupg (1.4.18-7+deb8u1) stable; urgency=medium [ Jonathan McDowell ] * Import upstream bugfix for handling unknown subkey types (Closes: #787046) -- Daniel Kahn Gillmor <dkg(a)fifthhorseman.net> Tue, 27 Oct 2015 15:39:42 -0400 --- Modifications pour gtk+2.0 (libgtk2.0-0 libgtk2.0-bin libgtk2.0-common) --- gtk+2.0 (2.24.25-3+deb8u1) jessie; urgency=medium * CVE-2013-7447 (Closes: #799275) -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 17 Mar 2016 00:17:18 +0100 --- Modifications pour imagemagick (imagemagick imagemagick-6.q16 imagemagick-common libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickwand-6.q16-2) --- imagemagick (8:6.8.9.9-5+deb8u1) stable; urgency=medium * Fix build on mips by printing progress (Closes: #770009). * Fix a few security bugs: - A DOS on specially crafted MIFF file. - A DOS on specially crafted Vicar file. - A DOS on specially crafted HDR file. - A DOs on specially crafted PDB file. - Fix a Null dereference in coders/png.c (LP: #1492881). - Fix a double free in coders/tga.c (LP: #1490362). - Avoid a DOS for RLE file. - Avoid a bufer overflow by using field limit in sprintf. - Avoid a stack overflow in fx handling. - Fixed size of memory allocation in RLE coder to avoid segfault (LP: #1496649). - Add extra checks to avoid out of bounds error when parsing the 8bim profile. (LP: #1496645). - Fixed memory leak when reading incorrect PSD files (closes: #811308) http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=28791 - Fix PixelColor off by one on i386.(closes: #811308) https://github.com/ImageMagick/ImageMagick/issues/54 - Fix out of bounds error in -splice operator. - Prevent null pointer access in magick/constitute.c (closes: #811308) https://github.com/ImageMagick/ImageMagick/pull/34 - Fix another memory leak in string handling. - Fix an integer overflow that can lead to a buffer overrun in the icon parsing code (LP: #1459747, closes: #806441) - Fix an integer overflow that can lead to a double free in pict parsing (LP: #1448803, closes: #806441). -- Bastien Roucariès <roucaries.bastien+debian(a)gmail.com> Sat, 09 Jan 2016 23:05:59 +0100 --- Modifications pour initramfs-tools --- initramfs-tools (0.120+deb8u1) jessie; urgency=medium [ Ben Hutchings ] * [c367d7d] scripts/functions: Use shell to create stamp file instead of 'touch' (Closes: #783291) * [d22b95b] update-initramfs: Run 'sync' after writing the initramfs (Closes: #783620) * [c22cefe] hook-functions: Add support for nvme devices with MODULES=dep (Closes: #785147) * [e0b23a1] hook-functions: Add support for LVM/LUKS on mmcblk and nvme devices with MODULES=dep (Closes: #747871, #810808) * [0e905aa] scripts/functions: Fix fsck display options (Closes: #781239) [ Laurent Bigonville ] * [3c4b38a] Support fsck.mode= and fsck.repair= parameters as known by systemd-fsck (Closes: #783410, #792557) * [dcb0f0c] Run new panic scripts just before dropping to a shell (Closes: #602331) [ Boris Egorov ] * [2c82cf4] mkinitramfs: fix bashism in script (Closes: #633582) [ Andy Whitcroft ] * [97b664e] When adding i8042 also add psmouse as some keyboards are behind the mouse (Closes: #795839) [ Salvatore Bonaccorso ] * [71e5b62] scripts/nfs: Check return value from nfs_mount_root_impl (Closes: #782641) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 20 Feb 2016 15:48:17 +0000 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt25-1) jessie; urgency=medium * New upstream stable update: http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt21 - irda: precedence bug in irlmp_seq_hb_idx() - macvtap: unbreak receiving of gro skb with frag list - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv - stmmac: Correctly report PTP capabilities. - ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preemptible context. - sit: fix sit0 percpu double allocations - packet: race condition in packet_bind - net: avoid NULL deref in inet_ctl_sock_destroy() - net: fix a race in dst_release() - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount - [x86] xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map - HID: core: Avoid uninitialized buffer access - [media] v4l2-compat-ioctl32: fix alignment for ARM64 - [armhf] net: mvneta: Fix CPU_MAP registers initialisation - mtd: mtdpart: fix add_mtd_partitions error path - [armel,armhf] 8426/1: dma-mapping: add missing range check in dma_mmap() - [armel,armhf] 8427/1: dma-mapping: add support for offset parameter in dma_mmap() - spi: ti-qspi: Fix data corruption seen on r/w stress test - lockd: create NSM handles per net namespace - Btrfs: fix file corruption and data loss after cloning inline extents - [armel,armhf] common: edma: Fix channel parameter for irq callbacks - [x86] iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints - ext4: fix potential use after free in __ext4_journal_stop - ext4: fix calculation of meta_bg descriptor backups - ext4, jbd2: ensure entering into panic after recording an error in superblock - vTPM: fix memory allocation flag for rtce buffer at kernel boot - spi: dw: explicitly free IRQ handler in dw_spi_remove_host() - media: vb2 dma-contig: Fully cache synchronise buffers in prepare and finish - Bluetooth: hidp: fix device disconnect on idle timeout - Bluetooth: ath3k: Add new AR3012 0930:021c id - Bluetooth: ath3k: Add support of AR3012 0cf3:817b device - spi: atmel: Fix DMA-setup for transfers with more than 8 bits per word - ACPI: Use correct IRQ when uninstalling ACPI interrupt handler - [x86] ALSA: hda/realtek - Dell XPS one ALC3260 speaker no sound after resume back - megaraid_sas: Do not use PAGE_SIZE for max_sectors - [s390x] KVM: SCA must not cross page boundaries - [arm64] Fix compat register mappings - can: Use correct type in sizeof() in nla_put() - mtd: blkdevs: fix potential deadlock + lockdep warnings - Revert "dm mpath: fix stalls when handling invalid ioctls" - [x86] drm/i915: add quirk to enable backlight on Dell Chromebook 11 (2015) - crypto: algif_hash - Only export and import on sockets with data - xtensa: fixes for configs without loop option - megaraid_sas : do not access user memory from IOCTL code - mac80211: fix divide by zero when NOA update - mac80211: allow null chandef in tracing - [x86] KVM: VMX: fix SMEP and SMAP without EPT - [armhf] thermal: exynos: Fix unbalanced regulator disable on probe failure - [x86] ALSA: hda - Apply pin fixup for HP ProBook 6550b - firewire: ohci: fix JMicron JMB38x IT context discovery - scsi: restart list search after unlock in scsi_remove_target - mm: slab: only move management objects off-slab for sizes larger than KMALLOC_MIN_SIZE - [x86] Input: elantech - add Fujitsu Lifebook U745 to force crc_enabled - proc: actually make proc_fd_permission() thread-friendly - [x86] setup: Extend low identity map to cover whole kernel range - [x86] setup: Fix low identity map for >= 2GB kernel range - [x86] cpu: Call verify_cpu() after having entered long mode too - Btrfs: fix race leading to incorrect item deletion when dropping extents - Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow - perf: Fix inherited events vs. tracepoint filters - scsi_sysfs: Fix queue_ramp_up_period return code - Btrfs: fix race when listing an inode's xattrs - [x86] ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list - [x86] storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag - [x86] KVM: Defining missing x86 vectors - drivers: of: of_reserved_mem: fixup the alignment with CMA setup - drm/ast: Initialized data needed to map fbdev memory - FS-Cache: Increase reference of parent after registering, netfs success - FS-Cache: Don't override netfs's primary_index if registering failed - binfmt_elf: Don't clobber passed executable's file header - fs/pipe.c: return error code rather than 0 in pipe_write() - mac80211: fix driver RSSI event calculations - wm831x_power: Use IRQF_ONESHOT to request threaded IRQs - mwifiex: fix mwifiex_rdeeprom_read() - dmaengine: dw: convert to __ffs() - usb: ehci-orion: fix probe for !GENERIC_PHY - devres: fix a for loop bounds check - netfilter: remove dead code - ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk - packet: fix match_fanout_group() - hsi: fix double kfree - hsi: omap_ssi_port: Prevent warning if cawake_gpio is not defined. - ALSA: fireworks/bebob/oxfw/dice: enable to make as built-in - drm: Fix return value of drm_framebuffer_init() - ALSA: fireworks: use u32 type for be32_to_cpup() macro - ALSA: bebob: use correct type for __be32 data - tcp: apply Kern's check on RTTs used for congestion control - clk: versatile-icst: fix memory leak - mfd: twl6040: Fix deferred probe handling for clk32k - of/fdt: fix error checking for earlycon address - netfilter: nfnetlink: don't probe module if it exists - xprtrdma: Re-arm after missed events - ceph: fix message length computation - ipv6: fix tunnel error handling - perf trace: Fix documentation for -i - bonding: fix panic on non-ARPHRD_ETHER enslave failure - rtc: ds1307: Fix alarm programming for mcp794xx - TPM: Avoid reference to potentially freed memory - md/raid0: update queue parameter in a safer location. - md/raid0: apply base queue limits *before* disk_stack_limits - drm/radeon: add quirk for MSI R7 370 - drm/radeon: add quirk for ASUS R7 370 - drm/radeon: fix quirk for MSI R7 370 Armor 2X - tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c - fs/proc, core/debug: Don't expose absolute kernel addresses via wchan - ALSA: hda - Disable 64bit address for Creative HDA controllers - printk: prevent userland from spoofing kernel messages - FS-Cache: Handle a write to the page immediately beyond the EOF marker http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt22 - iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock - iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success - iio: ad5064: Fix ad5629/ad5669 shift - iio:ad7793: Fix ad7785 product ID - [x86] fpu: Fix 32-bit signal frame handling - iio: adc: xilinx: Fix VREFN scale - [x86] drm/i915: quirk backlight present on Macbook 4, 1 - USB: qcserial: Add support for Quectel EC20 Mini PCIe module - USB: serial: option: add support for Novatel MiFi USB620L - USB: ti_usb_3410_5052: Add Honeywell HGI80 ID - [x86] drm/i915: get runtime PM reference around GEM set_caching IOCTL - drm/radeon: unconditionally set sysfs_initialized - USB: qcserial: Fix support for HP lt4112 LTE/HSPA+ Gobi 4G Modem - [arm64] kernel: pause/unpause function graph tracer in cpu_suspend() - usb: dwc3: gadget: let us set lower max_speed - usb: chipidea: debug: disable usb irq while role switch - xhci: Workaround to get Intel xHCI reset working more reliably - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices - [x86] cpu: Fix SMAP check in PVOPS environments - [arm64] restore bogomips information in /proc/cpuinfo - USB: option: add XS Stick W100-2 from 4G Systems - usblp: do not set TASK_INTERRUPTIBLE before lock - fat: fix fake_offset handling on error path - kernel/signal.c: unexport sigsuspend() - ocfs2: fix umask ignored issue - mmc: remove bondage between REQ_META and reliable write - packet: do skb_probe_transport_header when we actually have data - packet: only allow extra vlan len on ethernet devices - packet: fix tpacket_snd max frame len - sctp: translate host order to network order when setting a hmacid - net/mlx4_core: Avoid returning success in case of an error flow - usb: musb: core: fix order of arguments to ulpi write callback - FS-Cache: Add missing initialization of ret in cachefiles_write_page() - macvlan: fix leak in macvlan_handle_frame - packet: always probe for transport header - packet: infer protocol from ethernet header if unset - ip_tunnel: disable preemption when updating per-cpu tstats - snmp: Remove duplicate OUTMCAST stat increment - tcp: initialize tp->copied_seq in case of cross SYN connection - net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds - net: ipmr: fix static mfc/dev leaks on table destruction - net: ip6mr: fix static mfc/dev leaks on table destruction - ipv6: distinguish frag queues by device for multicast and link-local packets - ipv6: add complete rcu protection around np->opt - net/neighbour: fix crash at dumping device-agnostic proxy entries - ipv6: sctp: implement sctp_v6_destroy_sock() - xfs: allow inode allocations in post-growfs disk space (Closes: #802885) - ALSA: usb-audio: add packet size quirk for the Medeli DD305 - ALSA: usb-audio: prevent CH345 multiport output SysEx corruption - ALSA: usb-audio: work around CH345 input SysEx corruption - dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE transition - dm: fix ioctl retry termination with signal - ALSA: hda - Add fixup for Acer Aspire One Cloudbook 14 - mac: validate mac_partition is within sector - ALSA: hda - Apply HP headphone fixups more generically - fix sysvfs symlinks - vfs: Make sendfile(2) killable even better - vfs: Avoid softlockups with sendfile(2) - nfs4: start callback_ident at idr 1 - ALSA: hda - Fix headphone noise after Dell XPS 13 resume back from S3 - [arm64] KVM: Fix AArch32 to AArch64 register mapping - drm/radeon: make rv770_set_sw_state failures non-fatal - ALSA: hda - Fix noise on Gigabyte Z170X mobo - drm/radeon: make some dpm errors debug only - nfs: if we have no valid attrs, then don't declare the attribute cache valid - xen/gntdev: Grant maps should not be subject to NUMA balancing - iscsi-target: Fix rx_login_comp hang after login failure - target: Fix race for SCF_COMPARE_AND_WRITE_POST checking - target: fix COMPARE_AND_WRITE non zero SGL offset data corruption - [armel/kirkwood] dts: Fix QNAP TS219 power-off - netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse - netfilter: nf_tables: fix bogus warning in nft_data_uninit() - netfilter: ip6t_SYNPROXY: fix NULL pointer dereference - gre6: allow to update all parameters via rtnl - atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation - sctp: use the same clock as if sock source timestamps were on - sctp: update the netstamp_needed counter when copying sockets - ipv6: sctp: clone options to avoid use after free - vlan: Fix untag operations of stacked vlans with REORDER_HEADER off - skbuff: Fix offset error in skb_reorder_vlan_header - af_unix: Revert 'lock_interruptible' in stream receive code - ip6mr: call del_timer_sync() in ip6mr_free_table() - [x86] drm/i915: Disable PSMI sleep messages on all rings around context switches (Closes: #777231) - crypto: nx - Fix timing leak in GCM and CCM decryption - crypto: talitos - Fix timing leak in ESP ICV verification - ASoC: wm8962: correct addresses for HPF_C_0/1 - mac80211: mesh: fix call_rcu() usage - mac80211: ensure we don't update tx power on a non-running sdata - can: sja1000: clear interrupts on start - ring-buffer: Update read stamp with first real commit on page - block: Always check queue limits for cloned requests - Fix a memory leak in scsi_host_dev_release() - wan/x25: Fix use-after-free in x25_asy_open_tty() - mac80211: do not actively scan DFS channels - locking: Add WARN_ON_ONCE lock assertion - drm: Fix an unwanted master inheritance v2 - sched/core: Clear the root_domain cpumasks in init_rootdomain() - [x86] signal: Fix restart_syscall number for x32 tasks - isdn: Partially revert debug format string usage clean up - remoteproc: avoid stack overflow in debugfs file - [armhf] net: mvneta: add configuration for MBUS windows access protection - [armhf] net: mvneta: fix bit assignment in MVNETA_RXQ_CONFIG_REG - [armhf] net: mvneta: fix bit assignment for RX packet irq enable - ipv4: igmp: Allow removing groups from a removed interface - sched/core: Remove false-positive warning from wake_up_process() - btrfs: fix signed overflows in btrfs_sync_file http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt23 - iio: fix some warning messages - USB: cp210x: Remove CP2110 ID from compatibility list - USB: cdc_acm: Ignore Infineon Flash Loader utility - USB: serial: Another Infineon flash loader USB ID - ext4: Fix handling of extended tv_sec - jbd2: Fix unreclaimed pages after truncate in data=journal mode - drm/ttm: Fixed a read/write lock imbalance - AHCI: Fix softreset failed issue of Port Multiplier - sata_sil: disable trim - usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron - staging: lustre: echo_copy.._lsm() dereferences userland pointers directly - irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB - usb: core : hub: Fix BOS 'NULL pointer' kernel panic - USB: whci-hcd: add check for dma mapping error - dm btree: fix leak of bufio-backed block in btree_split_sibling error path - SCSI: Fix NULL pointer dereference in runtime PM - perf: Fix PERF_EVENT_IOC_PERIOD deadlock - usb: xhci: fix config fail of FS hub behind a HS hub with MTT - ALSA: rme96: Fix unexpected volume reset after rate changes - ALSA: hda - Add inverted dmic for Packard Bell DOTS - virtio: fix memory leak of virtio ida cache layers - nfs4: limit callback decoding to received bytes - SUNRPC: Fix callback channel - IB/srp: Fix possible send queue overflow - ALSA: hda - Fixing speaker noise on the two latest thinkpad models - 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping - radeon/cik: Fix GFX IB test on Big-Endian - radeon: Fix VCE ring test for Big-Endian systems - radeon: Fix VCE IB test on Big-Endian systems - ALSA: hda - Fix noise problems on Thinkpad T440s - dm thin metadata: fix bug when taking a metadata snapshot - dm space map metadata: fix ref counting bug when bootstrapping a new space map - ipmi: move timer init to before irq is setup - dm btree: fix bufio buffer leaks in dm_btree_del() error path - vgaarb: fix signal handling in vga_get() - xhci: fix usb2 resume timing and races. - USB: add quirk for devices with broken LPM - [hppa] iommu: fix panic due to trying to allocate too large region - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count - mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress - mm: hugetlb: call huge_pte_alloc() only if ptep is null - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections - ocfs2: fix SGID not inherited issue - usb: musb: USB_TI_CPPI41_DMA requires dmaengine support - efi: Disable interrupts around EFI calls, not in the epilog/prolog calls - [armhf] i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs - xen/events/fifo: Consume unprocessed events when a CPU dies - video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented - crypto: skcipher - Copy iv from desc even for 0-len walks - rfkill: copy the name into the rfkill struct - ses: Fix problems with simple enclosures - Revert "SCSI: Fix NULL pointer dereference in runtime PM" - ses: fix additional element traversal bug - powercap / RAPL: fix BIOS lock check - n_tty: Fix poll() after buffer-limited eof push read - tty: Fix GPF in flush_to_ldisc() - ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly - [armel,armhf] 8471/1: need to save/restore arm register(r11) when it is corrupted - ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd - spi: fix parent-device reference leak - dma-debug: Fix dma_debug_entry offset calculation - [powerpc*] powernv: Fix the overflow of OPAL message notifiers head array - [powerpc*] powernv: pr_warn_once on unsupported OPAL_MSG type - USB: ipaq.c: fix a timeout loop - USB: fix invalid memory access in hub_activate() - pinctrl: bcm2835: Fix initial value for direction_output - net: phy: mdio-mux: Check return value of mdiobus_alloc() - mISDN: fix a loop count - qlcnic: fix a timeout loop - ser_gigaset: fix deallocation of platform device structure - include/linux/mmdebug.h: should include linux/bug.h - [x86] drm/i915: Fix SRC_COPY width on 830/845g - vmstat: allocate vmstat_wq before it is used - [powerpc*] KVM: Book3S HV: Prohibit setting illegal transaction state in MSR - ASoC: wm8974: set cache type for regmap - [armhf] dts: imx6: Fix Ethernet PHY mode on Ventana boards - ALSA: hda - Set SKL+ hda controller power at freeze() and thaw() - [s390x] dis: Fix handling of format specifiers - [hppa] Fix syscall restarts - ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2) - ocfs2: fix BUG when calculate new backup super - mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() - net/mlx4_en: Remove dependency between timestamping capability and service_task - net/mlx4_en: Fix HW timestamp init issue upon system startup - ipv6/addrlabel: fix ip6addrlbl_get() - qlcnic: fix a loop exit condition better - genirq: Prevent chip buslock deadlock - ftrace/scripts: Fix incorrect use of sprintf in recordmcount - tracing: Fix setting of start_index in find_next() - [armhf] dts: vt8500: Add SDHC node to DTS file for WM8650 - [x86] mce: Ensure offline CPUs don't participate in rendezvous process - ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz - async_tx: use GFP_NOWAIT rather than GFP_IO - ftrace/module: Call clean up function when module init fails early - ASoC: Use nested lock for snd_soc_dapm_mutex_lock - net: filter: make JITs zero A for SKF_AD_ALU_XOR_X - net: possible use after free in dst_release - [x86] kvm: only channel 0 of the i8254 is linked to the HPET - firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt24 - drm/nouveau/nv46: Change mc subdev oclass from nv44 to nv4c - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. - sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close - connector: bump skb->users before callback invocation - unix: properly account for FDs passed over unix sockets - bridge: Only call /sbin/bridge-stp for the initial network namespace - vxlan: fix test which detect duplicate vxlan iface - net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory - tcp_yeah: don't set ssthresh below 2 - bonding: Prevent IPv6 link local address on enslaved devices - phonet: properly unshare skbs in phonet_rcv() - net: bpf: reject invalid shifts - ipv6: update skb->csum when CE mark is propagated - team: Replace rcu_read_lock with a mutex in team_vlan_rx_kill_vid - xen-netback: respect user provided max_queues - xen-netfront: respect user provided max_queues - xen-netfront: print correct number of queues - xen-netfront: update num_queues to real created - xfrm: dst_entries_init() per-net dst_ops - sctp: convert sack_needed and sack_generation to bits - sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING - nfs: Fix unused variable error - media: gspca: ov534/topro: prevent a division by 0 - media: media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode - [x86] KVM: expose MSR_TSC_AUX to userspace - [x86] KVM: correctly print #AC in traces - drm/radeon: call hpd_irq_event on resume - xhci: refuse loading if nousb is used - [arm64] Clear out any singlestep state on a ptrace detach operation - time: Avoid signed overflow in timekeeping_get_ns() - Bluetooth: Add support of Toshiba Broadcom based devices - rtlwifi: fix memory leak for USB device - wlcore/wl12xx: spi: fix oops on firmware load - EDAC: Fix the leak of mci->bus->name when bus_register fails - EDAC, mc_sysfs: Fix freeing bus' name - EDAC: Robustify workqueues destruction - [arm64] mm: ensure that the zero page is visible to the page table walker - [powerpc*] Make value-returning atomics fully ordered - [powerpc*] Make {cmp}xchg* and their atomic_ versions fully ordered - dm space map metadata: remove unused variable in brb_pop() - dm thin: fix race condition when destroying thin pool workqueue - futex: Drop refcount if requeue_pi() acquired the rtmutex - [arm64] mdscr_el1: avoid exposing DCC to userspace - [arm64] kernel: enforce pmuserenr_el0 initialization and restore - drm/radeon: clean up fujitsu quirks - mmc: sdio: Fix invalid vdd in voltage switch power cycle - mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off() - udf: limit the maximum number of indirect extents in a row - nfs: Fix race in __update_open_stateid() - USB: cp210x: add ID for ELV Marble Sound Board 1 - posix-clock: Fix return code on the poll method's error path - rtlwifi: rtl8192de: Fix incorrect module parameter descriptions - rtlwifi: rtl8192se: Fix module parameter initialization - rtlwifi: rtl8192ce: Fix handling of module parameters - rtlwifi: rtl8192cu: Add missing parameter setup - NFSv4: Don't perform cached access checks before we've OPENed the file - NFS: Fix attribute cache revalidation - bcache: fix a livelock when we cause a huge number of cache misses - bcache: Add a cond_resched() call to gc - bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device - bcache: fix a leak in bch_cached_dev_run() - bcache: unregister reboot notifier if bcache fails to unregister device - bcache: allows use of register in udev to avoid "device_busy" error. - bcache: prevent crash on changing writeback_running - bcache: Change refill_dirty() to always scan entire disk if necessary - wlcore/wl12xx: spi: fix NULL pointer dereference (Oops) - Input: i8042 - add Fujitsu Lifebook U745 to the nomux list - libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct - [x86] xen: don't reset vcpu_info on a cancelled suspend - udf: Prevent buffer overrun with multi-byte characters - udf: Check output buffer length when converting name to CS0 - PCI: Fix minimum allocation address overwrite - PCI: host: Mark PCIe/PCI (MSI) IRQ cascade handlers as IRQF_NO_THREAD - iwlwifi: update and fix 7265 series PCI IDs - locks: fix unlock when fcntl_setlk races with a close - ASoC: compress: Fix compress device direction check - dm snapshot: fix hung bios when copy error occurs - uml: fix hostfs mknod() - uml: flush stdout before forking - drm/nouveau/kms: take mode_config mutex in connector hotplug path - [x86] boot: Double BOOT_HEAP_SIZE to 64KB - [s390x] fix normalization bug in exception table sorting - xfs: inode recovery readahead can race with inode buffer creation - xfs: handle dquot buffer readahead in log recovery correctly - clocksource/drivers/vt8500: Increase the minimum delta - Input: elantech - mark protocols v2 and v3 as semi-mt - [x86] reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[] - virtio_balloon: fix race by fill and leak - virtio_balloon: fix race between migration and ballooning - [hppa] Fix __ARCH_SI_PREAMBLE_SIZE - scripts/recordmcount.pl: support data in text section on powerpc - [powerpc*] module: Handle R_PPC64_ENTRY relocations - dmaengine: dw: fix cyclic transfer setup - dmaengine: dw: fix cyclic transfer callbacks - mmc: mmci: fix an ages old detection error - [sparc64] fix incorrect sign extension in sys_sparc64_personality - cifs: fix race between call_async() and reconnect() - cifs_dbg() outputs an uninitialized buffer in cifs_readdir() - dma-debug: switch check from _text to _stext - ocfs2/dlm: ignore cleaning the migration mle that is inuse - zram/zcomp: use GFP_NOIO to allocate streams - zram: try vmalloc() after kmalloc() - mm: soft-offline: check return value in second __get_any_page() call - memcg: only free spare array when readers are done - panic: release stale console lock to always get the logbuf printed out - kernel/panic.c: turn off locks debug before releasing console lock - printk: do cond_resched() between lines while outputting to consoles - ALSA: hda - Fix bass pin fixup for ASUS N550JX - crypto: af_alg - Disallow bind/setkey/... after accept(2) - crypto: af_alg - Fix socket double-free when accept fails - crypto: af_alg - Add nokey compatibility path - crypto: hash - Add crypto_ahash_has_setkey - crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path - crypto: af_alg - Forbid bind(2) when nokey child sockets are present - ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode - ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode - ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0 - crypto: algif_skcipher - Load TX SG list after waiting - crypto: crc32c - Fix crc32c soft dependency - IB/qib: fix mcast detach when qp not attached - IB/qib: Support creating qps with GFP_NOIO flag - [x86] ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill dmi list - iscsi-target: Fix potential dead-lock during node acl delete - ALSA: timer: Handle disconnection more safely - ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock - [x86] ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list - [x86] drm/i915: avoid deadlock on failure paths in __intel_framebuffer_create() - [x86] drm/i915: On fb alloc failure, unref gem object where it gets refed - media: rc: allow rc modules to be loaded if rc-main is not a module - SCSI: initio: remove duplicate module device table - [arm64] clk: xgene: Fix divider with non-zero shift value - clk: st: avoid uninitialized variable use - ath9k_htc: check for underflow in ath9k_htc_rx_msg() - mtd: nand: fix ONFI parameter page layout - mtd: nand: denali: add missing nand_release() call in denali_remove() - mtd: nand: remove unused and buggy get_platform_nandchip() helper function - ALSA: fm801: propagate TUNER_ONLY bit when autodetected - pinctrl: bcm2835: Fix memory leak in error path - [x86] LDT: Print the real LDT base address - sysrq: Fix warning in sysrq generated crash. - kconfig: return 'false' instead of 'no' in bool function - [x86] perf: Fix filter_events() bug with event mappings - power: test_power: correctly handle empty writes - firmware: actually return NULL on failed request_firmware_nowait() - target: Fix a memory leak in target_dev_lba_map_store() - um: Fix build error and kconfig for i386 - ipv6: tcp: add rcu locking in tcp_v6_send_synack() - mmc: sd: limit SD card power limit according to cards capabilities - Btrfs: clean up an error code in btrfs_init_space_info() - bridge: fix lockdep addr_list_lock false positive splat - batman-adv: Avoid recursive call_rcu for batadv_bla_claim - batman-adv: Avoid recursive call_rcu for batadv_nc_node - batman-adv: fix potential TT client + orig-node memory leak - batman-adv: Drop immediate batadv_orig_ifinfo free function - batman-adv: Drop immediate batadv_neigh_node free function - batman-adv: Drop immediate neigh_ifinfo free function - batman-adv: Drop immediate batadv_hard_iface free function - batman-adv: Drop immediate orig_node free function - printk: help pr_debug and pr_devel to optimize out arguments - mmc: debugfs: correct wrong voltage value - IB/mlx4: Initialize hop_limit when creating address handle - net/mlx4: Remove unused macro - cifs: Ratelimit kernel log messages - HID: usbhid: fix recursive deadlock http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt25 - ASN.1: Fix non-match detection failure on data overrun - qeth: initialize net_device with carrier off - EVM: Use crypto_memneq() for digest comparisons - iio: adis_buffer: Fix out-of-bounds memory access - [powerpc*] KVM: Fix emulation of H_SET_DABR/X on POWER8 - [x86] irq: Call chip->irq_set_affinity in proper context - ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot() - usb: cdc-acm: handle unlinked urb in acm read callback - usb: cdc-acm: send zero packet for intel 7260 modem - cdc-acm:exclude Samsung phone 04e8:685d - usb: hub: do not clear BOS field during reset device - USB: cp210x: add ID for IAI USB to RS485 adaptor - USB: visor: fix null-deref at probe - USB: serial: option: Adding support for Telit LE922 - ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup() - ALSA: seq: Degrade the error message for too many opens - USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable - USB: option: fix Cinterion AHxx enumeration - ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures - ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay - virtio_pci: fix use after free on release - ALSA: bebob: Use a signed return type for get_formation_index - [arm64] errata: Add -mpc-relative-literal-loads to build flags - [powerpc*] eeh: Fix PE location code - SCSI: fix crashes in sd and sr runtime PM - n_tty: Fix unsafe reference to "other" ldisc - staging/speakup: Use tty_ldisc_ref() for paste kworker - ALSA: dummy: Disable switching timer backend via sysfs - [x86] drm/vmwgfx: respect 'nomodeset' - [x86] mm/pat: Avoid truncation when converting cpa->numpages to address - perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed - perf hists: Fix HISTC_MEM_DCACHELINE width setting - [powerpc*] perf: Remove PPMU_HAS_SSLOT flag for Power8 - vmstat: explicitly schedule per-cpu work on the CPU we need it to run on - umount: Do not allow unmounting rootfs. - crypto: algif_skcipher - Require setkey before accept(2) - crypto: algif_skcipher - Add nokey compatibility path - crypto: algif_hash - Require setkey before accept(2) - crypto: skcipher - Add crypto_skcipher_has_setkey - crypto: algif_skcipher - Add key check exception for cipher_null - crypto: algif_hash - Remove custom release parent function - crypto: algif_skcipher - Remove custom release parent function - crypto: algif_hash - Fix race condition in hash_check_key - crypto: algif_skcipher - Fix race condition in skcipher_check_key - iio: add HAS_IOMEM dependency to VF610_ADC - iio: dac: mcp4725: set iio name property in sysfs - ASoC: rt5645: fix the shift bit of IN1 boost - cgroup: make sure a parent css isn't offlined before its children - PCI/AER: Flush workqueue on device remove to avoid use-after-free - libata: disable forced PORTS_IMPL for >= AHCI 1.3 - mac80211: Requeue work after scan complete for all VIF types. - rfkill: fix rfkill_fop_read wait_event usage - crypto: shash - Fix has_key setting - [x86] drm/i915/dp: fall back to 18 bpp when sink capability is unknown - target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors - crypto: algif_hash - wait for crypto_ahash_init() to complete - iio: inkern: fix a NULL dereference on error - iio: pressure: mpl115: fix temperature offset sign - [x86] intel_scu_ipcutil: underflow in scu_reg_access() - ALSA: seq: Fix race at closing in virmidi driver - ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check - ALSA: pcm: Fix potential deadlock in OSS emulation - ALSA: seq: Fix yet another races among ALSA timer accesses - ALSA: timer: Code cleanup - ALSA: timer: Fix link corruption due to double start or stop - libata: fix sff host state machine locking while polling - [mips*] Fix buffer overflow in syscall_get_arguments() - cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() - ASoC: dpcm: fix the BE state on hw_free - module: wrapper for symbol name. - ALSA: hda - Add fixup for Mac Mini 7,1 model - ALSA: rawmidi: Make snd_rawmidi_transmit() race-free - ALSA: rawmidi: Fix race at copying & updating the position - ALSA: seq: Fix lockdep warnings due to double mutex locks - drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration - radix-tree: fix race in gang lookup - [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms - xhci: Fix list corruption in urb dequeue at host removal - media: tda1004x: only update the frontend properties if locked - ALSA: timer: Fix leftover link at closing - media: saa7134-alsa: Only frees registered sound cards - Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl - scsi_dh_rdac: always retry MODE SELECT on command lock violation - SCSI: Add Marvell Console to VPD blacklist - drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil - ALSA: hda - Fix static checker warning in patch_hdmi.c - Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo" - dump_stack: avoid potential deadlocks - mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress - ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup - mm: replace vma_lock_anon_vma with anon_vma_lock_read/write - radix-tree: fix oops after radix_tree_iter_retry - crypto: user - lock crypto_alg_list on alg dump - serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) - pty: fix possible use after free of tty->driver_data - pty: make sure super_block is still valid in final /dev/tty close - ALSA: hda - Fix speaker output from VAIO AiO machines - klist: fix starting point removed bug in klist iterators - ALSA: dummy: Implement timer backend switching more safely - ALSA: timer: Fix wrong instance passed to slave callbacks - [armel,armhf] 8517/1: ICST: avoid arithmetic overflow in icst_hz() - ALSA: timer: Fix race between stop and interrupt - ALSA: timer: Fix race at concurrent reads - [armhf] phy: twl4030-usb: Relase usb phy on unload - [x86] ahci: Intel DNV device IDs SATA - workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup - drm/radeon: hold reference to fences in radeon_sa_bo_new - [armel,armhf] 8519/1: ICST: try other dividends than 1 - btrfs: properly set the termination value of ctx->pos in readdir - net: phy: Fix phy_mac_interrupt() - af_unix: fix struct pid memory leak - pptp: fix illegal memory access caused by multiple bind()s - sctp: allow setting SCTP_SACK_IMMEDIATELY by the application - netlink: not trim skb for mmaped socket when dump - ipv6: fix a lockdep splat - sctp: translate network order to host order when users get a hmacid - IB/mlx5: Fix RC transport send queue overhead computation - [x86] drm/vmwgfx: Fix an fb unlocking bug - net: phy: fix PHY_RUNNING in phy_state_machine - net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS [ Ben Hutchings ] * udeb: Add dm-service-time to multipath-modules (Closes: #806131) * net: Ignore ABI changes due to "ipv6: add complete rcu protection around np->opt", which don't appear to affect out-of-tree modules * crypto: {blk,giv}cipher: Set has_setkey (avoids regressing cryptsetup; see #815480) * net: Fix regression in ip_vti/ip6_vti in 3.16.7-ckt11 (Closes: #813594): - ip_vti/ip6_vti: Do not touch skb->mark on xmit - xfrm: Override skb->mark with tunnel->parm.i_key in xfrm_input - ip_vti/ip6_vti: Preserve skb->mark after rcv_cb call [ Aurelien Jarno ] * [mips*] Add support for MIPS 5KE CPU. * [mips*] Backport math emulation fix from 4.5. -- Ben Hutchings <ben(a)decadent.org.uk> Sun, 06 Mar 2016 22:19:34 +0000 --- Modifications pour pcre3 (libpcre3) --- pcre3 (2:8.35-3.3+deb8u4) jessie; urgency=medium * Non-maintainer upload. * Add 0001-Fixed-an-issue-with-nested-table-jumps.patch. Fixes issue with nested table jumps. (Closes: #819050) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 25 Mar 2016 19:58:10 +0100 pcre3 (2:8.35-3.3+deb8u3) jessie; urgency=medium * Non-maintainer upload. * Refresh CVE-2015-2325_CVE-2015-2326_CVE-2015-3210_CVE-2015-5073.patch. Drop addition of "error text" for error ERR86 in pcre_compile.c. This change belongs to upstream revision 1481 (Give error for \x{} and \o{}). * Add 0001-Give-error-for-x-and-o.patch. Give error for \x{} and \o{}. * Add 0001-Fix-workspace-overflow-for-ACCEPT-with-deeply-nested.patch. CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply nested parentheses. (Closes: #815921) * Add 0001-Yet-another-duplicate-name-bugfix-by-overestimating-.patch. CVE-2016-1283: heap buffer overflow in handling of duplicate named groups. (Closes: #809706) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 25 Mar 2016 07:05:50 +0100 --- Modifications pour php5 (libapache2-mod-php5 php5 php5-cli php5-common php5-curl php5-enchant php5-gd php5-intl php5-ldap php5-mcrypt php5-mysql php5-pgsql php5-readline php5-sqlite php-pear) --- php5 (5.6.19+dfsg-0+deb8u1) jessie-security; urgency=medium * Imported Upstream version 5.6.19+dfsg * Rebase patches on top of 5.6.19+dfsg release * Allow multiple whitespace in php5-fpm init script (Closes: #818102) -- Ondřej Surý <ondrej(a)debian.org> Mon, 07 Mar 2016 20:09:14 +0100 php5 (5.6.18+dfsg-0+deb8u1) jessie-security; urgency=medium * Merge patch for ODBC bug fix varchars returning with length zero * Fix missing phpdbg sapi from the for loop that prevented the modules to be enabled for phpdbg SAPI * Fail gracefully when other PHP module is enabled in Apache2 * php5-maintscript-helper needs update for phpdbg * Imported Upstream version 5.6.18+dfsg * Rebase patches on top of 5.6.18 release * Revert PEAR version to last working version from PHP 5.6.14 (Closes: #812788) -- Ondřej Surý <ondrej(a)debian.org> Fri, 05 Feb 2016 11:07:34 +0100 --- Modifications pour systemd (libpam-systemd libsystemd0 libudev1 systemd systemd-sysv udev) --- systemd (215-17+deb8u4) stable; urgency=medium [ Martin Pitt ] * debian/udev.prerm: Add missing "deconfigure" action. (Closes: #809744) * udev.postinst: Don't call addgroup with --quiet, so that if the "input" group already exists as a non-system group you get a sensible error message. Some broken tutorials forget the --system option. (Closes: #769948, LP: #1455956) * systemd.postinst: Drop the --quiet from the addgroup calls as well, same reason as above. (Closes: #762275) [ Michael Biebl ] * Make sure all swap units are ordered before the swap target. This avoids that swap devices are being stopped prematurely during shutdown. (Closes: #805133) * Only skip the filesystem check for /usr if the /run/initramfs/fsck-usr flag file exists. Otherwise we break booting with dracut which uses systemd inside the initramfs. (Closes: #810748) * Fix --network-interface in systemd-nspawn to not fail when modifying an existing link. (Closes: #813696) -- Michael Biebl <biebl(a)debian.org> Thu, 03 Mar 2016 19:51:22 +0100 --- Modifications pour unbound (libunbound2) --- unbound (1.4.22-3+deb8u1) jessie; urgency=medium * iterator/iter_hints.c: Update hints for H.ROOT-SERVERS.NET (Closes: #815370) -- Robert Edmonds <edmonds(a)debian.org> Sun, 21 Feb 2016 18:36:43 -0500 --- Modifications pour base-files --- base-files (8+deb8u4) stable; urgency=low * Changed /etc/debian_version to 8.4, for Debian 8.4 point release. -- Santiago Vila <sanvila(a)debian.org> Mon, 14 Mar 2016 00:45:24 +0100 --- Modifications pour nettle (libhogweed2 libnettle4 nettle-dev) --- nettle (2.7.1-5+deb8u1) stable; urgency=low * Fix CVE-2015-8803, CVE-2015-8804, and CVE-2015-8805 (Closes: #813679). -- Magnus Holmgren <holmgren(a)debian.org> Sat, 06 Feb 2016 20:01:37 +0100 --- Modifications pour nss-pam-ldapd (libnss-ldapd libpam-ldapd nslcd nslcd-utils) --- nss-pam-ldapd (0.9.4-3+deb8u1) stable; urgency=low * fix-issues-withdaemonising.patch, avoid-signal-race.patch: patches to fix issues with daemonising nslcd and avoid a race condition in signal handling during start-up (closes: #759544) * ensure proper return code of init script (closes: #794686) * fix-ppolicy-expiration-warnings.patch: fix password policy expiration warnings (closes: #794068) -- Arthur de Jong <adejong(a)debian.org> Tue, 19 Jan 2016 19:52:02 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années

Let's Encrypt certificate expiration notice

par expiry＠letsencrypt.org

Hello, Your certificate (or certificates) for the names listed below will expire in 19 days (on 22 Apr 16 15:05 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors. archives.federez.net autoconfig.federez.net calendrier.federez.net compta.federez.net dev.federez.net dev.www.federez.net federez.net ftp.federez.net hexagon.federez.net journees.federez.net ldap.federez.net lists.federez.net mail.federez.net munin.federez.net oc.federez.net roundcube.federez.net smtp.federez.net webldap.federez.net webmail.federez.net wiki.federez.net www.federez.net For any questions or support, please visit https://community.letsencrypt.org/. Unfortunately, we can't provide support by email. If you are receiving this email in error, unsubscribe at http://mandrillapp.com/track/unsub.php?u=30850198&id=b2a6dfb1ad944daea401f5…. (HTTP link, we know. We're working on it!) Regards, The Let's Encrypt Team

9 années

*** SECURITY information for hexagon.federez.net ***

par peb＠hexagon.federez.net

hexagon.federez.net : Apr 2 01:12:36 : peb : user NOT in sudoers ; TTY=pts/1 ; PWD=/home/peb ; USER=root ; COMMAND=/bin/su

9 années, 1 mois

Let's Encrypt certificate expiration notice

par expiry＠letsencrypt.org

Hello, Your certificate (or certificates) for the names listed below will expire in 9 days (on 07 Apr 16 22:19 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors. federez.net hexagon.federez.net mail.federez.net roundcube.federez.net webmail.federez.net For any questions or support, please visit https://community.letsencrypt.org/. Unfortunately, we can't provide support by email. If you are receiving this email in error, unsubscribe at http://mandrillapp.com/track/unsub.php?u=30850198&id=7817e7f997394fae9c582a…. (HTTP link, we know. We're working on it!) Regards, The Let's Encrypt Team

9 années, 1 mois

Let's Encrypt certificate expiration notice

par expiry＠letsencrypt.org

Hello, Your certificate (or certificates) for the names listed below will expire in 19 days (on 16 Apr 16 21:40 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors. archives.federez.net autoconfig.federez.net calendrier.federez.net compta.federez.net federez.net ftp.federez.net hexagon.federez.net journees.federez.net ldap.federez.net lists.federez.net mail.federez.net munin.federez.net oc.federez.net roundcube.federez.net smtp.federez.net webldap.federez.net webmail.federez.net wiki.federez.net www.federez.net For any questions or support, please visit https://community.letsencrypt.org/. Unfortunately, we can't provide support by email. If you are receiving this email in error, unsubscribe at http://mandrillapp.com/track/unsub.php?u=30850198&id=a49063cdb17649a7b918a7…. (HTTP link, we know. We're working on it!) Regards, The Let's Encrypt Team

9 années, 1 mois

1 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Sun, 27 Mar 2016 10:48:20 +0200] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: tzdata 2016c-0+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour tzdata --- tzdata (2016c-0+deb8u1) stable; urgency=medium * New upstream version, affecting the following future time stamps: - America/Santiago - Asia/Baku -- Aurelien Jarno <aurel32(a)debian.org> Fri, 25 Mar 2016 23:58:54 +0100 tzdata (2016b-0+deb8u1) stable; urgency=medium * New upstream version, affecting the following future time stamps: - America/Cayman - America/Port-au-Prince - Asia/Chita - Asia/Gaza - Asia/Hebron - Asia/Tehran -- Aurelien Jarno <aurel32(a)debian.org> Mon, 14 Mar 2016 21:53:38 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années, 1 mois

2 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Mon, 21 Mar 2016 09:48:21 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: git 1:2.1.4-2.1+deb8u2 git-man 1:2.1.4-2.1+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour git (git git-man) --- git (1:2.1.4-2.1+deb8u2) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix remote code execution via buffer overflows (CVE-2016-2315, CVE-2016-2324) (Closes: #818318) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 18 Mar 2016 06:20:38 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années, 1 mois

3 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Sun, 20 Mar 2016 23:44:11 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: git 1:2.1.4-2.1+deb8u2 git-core 1:2.1.4-2.1+deb8u2 git-man 1:2.1.4-2.1+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour git (git git-core git-man) --- git (1:2.1.4-2.1+deb8u2) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix remote code execution via buffer overflows (CVE-2016-2315, CVE-2016-2324) (Closes: #818318) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 18 Mar 2016 06:20:38 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 1 mois

monit alert -- Exists freeradius

par monit＠hexagon.federez.net

Exists Service freeradius Date: Sun, 20 Mar 2016 18:29:06 Action: alert Host: hexagon.federez.net Description: process is running with pid 1302 Monit, unique employÃ© de federez,

9 années, 1 mois

Aller à la page :

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring