10 Sep
2019
10 Sep
'19
13:49
apticron report [Tue, 10 Sep 2019 13:49:16 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
nonagon.federez.net
[ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ]
The following packages are currently pending an upgrade:
base-files 9.9+deb9u11
gettext-base 0.19.8.1-2+deb9u1
ldap-utils 2.4.44+dfsg-5+deb9u3
libcom-err2 1.44.5-1+deb10u1
libcomerr2 1.44.5-1+deb10u1
libcups2 2.2.1-8+deb9u4
libgd3 2.2.4-2+deb9u5
libglib2.0-0 2.50.3-2+deb9u1
libicu57 57.1-6+deb9u3
libldap-2.4-2 2.4.44+dfsg-5+deb9u3
libldap-common 2.4.44+dfsg-5+deb9u3
libmariadbclient18 10.1.41-0+deb9u1
libncurses6 6.1+20181013-2+deb10u1
libnghttp2-14 1.18.1-1+deb9u1
libpam-systemd 232-25+deb9u12
libsystemd0 232-25+deb9u12
libtinfo6 6.1+20181013-2+deb10u1
libudev1 232-25+deb9u12
libxslt1.1 1.1.29-2.1+deb9u1
linux-libc-dev 4.9.189-3
mariadb-client-10.1 10.1.41-0+deb9u1
mariadb-client-core-10.1 10.1.41-0+deb9u1
mariadb-common 10.1.41-0+deb9u1
openssh-client 1:7.4p1-10+deb9u7
openssh-server 1:7.4p1-10+deb9u7
openssh-sftp-server 1:7.4p1-10+deb9u7
python3-reportbug 7.1.7+deb9u3
reportbug 7.1.7+deb9u3
ssh 1:7.4p1-10+deb9u7
systemd 232-25+deb9u12
unzip 6.0-21+deb9u2
zsh 5.3.1-4+b3
========================================================================
Package Details:
apt-listchanges : Lecture des fichiers de modifications (« changelog »)...
apt-listchanges : journaux des modifications (« changelogs »)
-------------------------------------------------------------
--- Modifications pour base-files ---
base-files (9.9+deb9u11) stretch; urgency=emergency
* Non-maintainer upload.
* Change /etc/debian_version to 9.11, for Debian 9.11 point release.
-- Julien Cristau <jcristau(a)debian.org> Sun, 08 Sep 2019 12:51:39 +0200
base-files (9.9+deb9u10) stretch; urgency=medium
* Change /etc/debian_version to 9.10, for Debian 9.10 point release.
* Add VERSION_CODENAME to os-release. Closes: #829245. Please note
that this is only for stable releases.
-- Santiago Vila <sanvila(a)debian.org> Fri, 30 Aug 2019 14:27:24 +0200
--- Modifications pour libgd2 (libgd3) ---
libgd2 (2.2.4-2+deb9u5) stretch; urgency=high
* Fix CVE-2019-11038: Uninitialized read in gdImageCreateFromXbm
(Closes: #929821)
-- Jonas Meurer <jonas(a)freesources.org> Tue, 11 Jun 2019 17:33:42 +0200
--- Modifications pour nghttp2 (libnghttp2-14) ---
nghttp2 (1.18.1-1+deb9u1) stretch-security; urgency=high
* Fix CVE-2019-9511 and CVE-2019-9513
-- Tomasz Buchert <tomasz(a)debian.org> Fri, 23 Aug 2019 19:05:18 +0200
--- Modifications pour e2fsprogs (libcom-err2 libcomerr2) ---
e2fsprogs (1.44.5-1+deb10u1) buster; urgency=medium
* Fix e4defrag crashes on 32-bit architectures (Closes: #920767)
-- Theodore Y. Ts'o <tytso(a)mit.edu> Fri, 02 Aug 2019 23:49:00 -0400
--- Modifications pour gettext (gettext-base) ---
gettext (0.19.8.1-2+deb9u1) stretch; urgency=medium
* Stop xgettext() from crashing when run with --its=FILE option.
Patch taken from Debian 10, which in turn was extracted from
upstream git. Should help the inkscape project. Closes: #891347.
See https://gitlab.com/inkscape/inkscape/issues/271 for details.
-- Santiago Vila <sanvila(a)debian.org> Sat, 31 Aug 2019 01:30:22 +0200
--- Modifications pour glib2.0 (libglib2.0-0) ---
glib2.0 (2.50.3-2+deb9u1) stretch; urgency=medium
* Team upload
* d/gbp.conf: Add GNOME team configuration
* d/p/gfile-Limit-access-to-files-when-copying.patch:
When copying files, give the temporary partial copy of the file
suitably restrictive permissions (Closes: #929753; CVE-2019-12450)
* d/p/keyfile-settings-Use-tighter-permissions.patch:
Create directory and file with restrictive permissions when using the
GKeyfileSettingsBackend. Mitigation: in this version of GLib, the
GKeyfileSettingsBackend can only be used explicitly by code, and is
never selected automatically. (Closes: #931234; CVE-2019-13012)
* d/p/gmarkup-Fix-unvalidated-UTF-8-read-in-markup-parsing-erro.patch,
d/p/gmarkup-Avoid-reading-off-the-end-of-a-buffer-when-non-nu.patch:
Avoid buffer read overrun when formatting error messages for invalid
UTF-8 in GMarkup (CVE-2018-16429)
* d/p/gmarkup-Fix-crash-in-error-handling-path-for-closing-elem.patch:
Avoid NULL dereference when parsing invalid GMarkup with a malformed
closing tag not paired with an opening tag (CVE-2018-16429)
-- Simon McVittie <smcv(a)debian.org> Tue, 13 Aug 2019 10:46:20 +0100
--- Modifications pour icu (libicu57) ---
icu (57.1-6+deb9u3) stretch; urgency=medium
* Fix pkgdata command segfault (closes: #893009).
-- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Wed, 07 Aug 2019 16:30:43 +0000
--- Modifications pour libxslt (libxslt1.1) ---
libxslt (1.1.29-2.1+deb9u1) stretch; urgency=medium
* Non-maintainer upload.
* Fix security framework bypass (CVE-2019-11068) (Closes: #926895, #933743)
* Fix uninitialized read of xsl:number token (CVE-2019-13117)
(Closes: #931321, #933743)
* Fix uninitialized read with UTF-8 grouping chars (CVE-2019-13118)
(Closes: #931320, #933743)
-- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 24 Aug 2019 14:04:13 +0200
--- Modifications pour linux (linux-libc-dev) ---
linux (4.9.189-3) stretch; urgency=medium
* tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue
-- Salvatore Bonaccorso <carnil(a)debian.org> Mon, 02 Sep 2019 09:18:39 +0200
linux (4.9.189-2) stretch; urgency=medium
[ Salvatore Bonaccorso ]
* xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
(CVE-2019-15538)
[ Ben Hutchings ]
* [s390x] Revert "perf test 6: Fix missing kvm module load for s390"
(fixes FTBFS)
-- Ben Hutchings <ben(a)decadent.org.uk> Fri, 30 Aug 2019 01:48:25 +0100
linux (4.9.189-1) stretch; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.186
- [x86] Input: elantech - enable middle button support on 2 ThinkPads
- mac80211: mesh: fix RCU warning
- mac80211: free peer keys before vif down in mesh
- netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
- netfilter: ipv6: nf_defrag: accept duplicate fragments again
- [armhf] Input: imx_keypad - make sure keyboard can always wake up system
- [arm64] KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
- mac80211: only warn once on chanctx_conf being NULL
- md: fix for divide error in status_resync
- bnx2x: Check if transceiver implements DDM before access
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
- net :sunrpc :clnt :Fix xps refcount imbalance on the error path
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- [x86] tls: Fix possible spectre-v1 in do_get_thread_area()
- fscrypt: don't set policy for a dead directory
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are
disabled"
- p54usb: Fix race between disconnect and firmware loading
(CVE-2019-15220)
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt
- [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- carl9170: fix misuse of device driver API
- [x86] VMCI: Fix integer overflow in VMCI handle arrays
- Revert "e1000e: fix cyclic resets at link up with active tx"
- e1000e: start network tx queue only when link is up
- [arm64] crypto: remove accidentally backported files
- perf/core: Fix perf_sample_regs_user() mm check
- [armhf] omap2: remove incorrect __init annotation
- be2net: fix link failure after ethtool offline test
- ppp: mppe: Add softdep to arc4
- sis900: fix TX completion
- dm verity: use message limit for data block corruption message
- [s390x] fix stfle zero padding
- [s390x] qdio: (re-)initialize tiqdio list entries
- [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.187
- [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly
- [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path
- ath10k: Do not send probe response template for mesh
- ath9k: Check for errors when reading SREV register
- ath6kl: add some bounds checking
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
- batman-adv: fix for leaked TVLV handler.
- media: dvb: usb: fix use after free in dvb_usb_device_exit
- media: marvell-ccic: fix DMA s/g desc number calculation
- media: media_device_enum_links32: clean a reserved field
- [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries
- [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
- af_key: fix leaks in key_pol_get_resp and dump_sp.
- xfrm: Fix xfrm sel prefix length validation
- media: mc-device.c: don't memset __user pointer contents
- net: phy: Check against net_device being NULL
- tua6100: Avoid build warnings.
- [armhf] media: wl128x: Fix some error handling in
fm_v4l2_init_video_device()
- cpupower : frequency-set -r option misses the last cpu in related cpu
list
- [s390x] qdio: handle PENDING state for QEBSM devices
- perf cs-etm: Properly set the value of 'old' and 'head' in snapshot
mode
- [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4
- [armhf] gpio: omap: ensure irq is enabled before wakeup
- regmap: fix bulk writes on paged registers
- bpf: silence warning messages in core
- rcu: Force inlining of rcu_read_lock()
- blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
arbitration
- xfrm: fix sa selector validation
- perf evsel: Make perf_evsel__name() accept a NULL argument
- vhost_net: disable zerocopy by default
- ipoib: correcly show a VF hardware address
- EDAC/sysfs: Fix memory leak when creating a csrow object
- ipsec: select crypto ciphers for xfrm_algo
- media: i2c: fix warning same module names
- ntp: Limit TAI-UTC offset
- timer_list: Guard procfs specific code
- [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0
- mt7601u: do not schedule rx_tasklet when the device has been disconnected
- mt7601u: fix possible memory leak when the device is disconnected
- ath10k: fix PCIE device wake up failed
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES
- libata: don't request sense data on !ZAC ATA devices
- [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch
timer
- rslib: Fix decoding of shortened codes
- rslib: Fix handling of of caller provided syndrome
- ixgbe: Check DDM existence in transceiver before access
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
- bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
- iwlwifi: mvm: Drop large non sta frames
- net: usb: asix: init MAC address buffers
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb
- Bluetooth: 6lowpan: search for destination address in all peers
- Bluetooth: Check state in l2cap_disconnect_rsp
- Bluetooth: validate BLE connection interval updates
- gtp: fix Illegal context switch in RCU read-side critical section.
- gtp: fix use-after-free in gtp_newlink()
- crypto: ghash - fix unaligned memory access in ghash_setkey()
- [arm64] crypto: sha1-ce - correct digest for empty data in finup
- [arm64] crypto: sha2-ce - correct digest for empty data in finup
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
- [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages
- [arm64] tegra: Update Jetson TX1 GPU regulator timings
- iwlwifi: pcie: don't service an interrupt that was masked
- tracing/snapshot: Resize spare buffer if size changed
- NFSv4: Handle the special Linux file open access mode
- lib/scatterlist: Fix mapping iterator when sg->offset is greater than
PAGE_SIZE
- ALSA: seq: Break too long mutex context in the write loop
- [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
- media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
- [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed
- [arm64] tegra: Fix AGIC register range
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
inodes.
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
- 9p/virtio: Add cleanup path in p9_virtio_init
- PCI: Do not poll for PME if the device is in D3cold
- Btrfs: add missing inode version, ctime and mtime updates when punching
hole
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
- take floppy compat ioctls to floppy.c
- [x86] crypto: ccp - Validate the the error value used to index error
messages
- [x86] PCI: hv: Delete the device earlier from hbus->children for hot-
remove
- [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
- [ppc64el] watchpoint: Restore NV GPRs while returning from exception
- eCryptfs: fix a couple type promotion bugs
- [x86] intel_th: msu: Fix single mode with disabled IOMMU
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
- dm bufio: fix deadlock with loop device
- compiler.h: Add read_word_at_a_time() function.
- ext4: allow directory holes
- bnx2x: Prevent load reordering in tx completion processing
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
- igmp: fix memory leak in igmpv3_del_delrec()
- ipv4: don't set IPv6 only flags to IPv4 addresses
- [armhf] net: dsa: mv88e6xxx: wait after reset deactivation
- net: neigh: fix multiple neigh timer scheduling
- net: openvswitch: fix csum updates for MPLS actions
- nfc: fix potential illegal memory access
- rxrpc: Fix send on a connected, but unbound socket
- [x86] sky2: Disable MSI on ASUS P6T
- vrf: make sure skb->data contains ip header to make routing
- macsec: fix use-after-free of skb during RX
- macsec: fix checksumming after decryption
- netrom: fix a memory leak in nr_rx_frame()
- netrom: hold sock when setting skb->destructor
- bonding: validate ip header before check IPPROTO_IGMP
- tcp: Reset bytes_acked and bytes_received when disconnecting
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
- net: bridge: stp: don't cache eth dest pointer before skb pull
- [x86] perf/amd/uncore: Rename 'L2' to 'LLC'
- [x86] perf/amd/uncore: Get correct number of cores sharing last level
cache
- [x86] perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined
cpu_llc_id
- NFSv4: Fix open create exclusive when the server reboots
- nfsd: give out fewer session slots as limit approaches
- nfsd: fix performance-limiting session calculation
- nfsd: Fix overflow causing non-working mounts on 1 TB machines
- [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe
- usb: core: hub: Disable hub-initiated U1/U2
- [armhf] pinctrl: rockchip: fix leaked of_node references
- memstick: Fix error cleanup path of memstick_init
- [arm64] tty: serial: msm_serial: avoid system lockup condition
- serial: 8250: Fix TX interrupt handling condition
- drm/virtio: Add memory barriers for capset cache.
- phy: renesas: rcar-gen2: Fix memory leak at error paths
- [armhf] drm/rockchip: Properly adjust to a true clock in adjusted_mode
- tty: serial_core: Set port active bit in uart_port_activate
- usb: gadget: Zero ffs_io_data
- [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs
- PCI: sysfs: Ignore lockdep for remove attribute
- iio: iio-utils: Fix possible incorrect mask calculation
- [ppc64el] recordmcount: Fix spurious mcount entries on powerpc
- mfd: core: Set fwnode for created devices
- [arm64] mfd: hi655x-pmic: Fix missing return value check for
devm_regmap_init_mmio_clk
- RDMA/i40iw: Set queue pair state when being queried
- perf test mmap-thread-lookup: Initialize variable to suppress memory
sanitizer warning
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
- [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h
- f2fs: avoid out-of-range memory access
- mailbox: handle failed named mailbox channel request
- [ppc64el] eeh: Handle hugepages in ioremap space
- 9p: pass the correct prototype to read_cache_page
- mm/mmu_notifier: use hlist_add_head_rcu()
- usb: wusbcore: fix unbalanced get/put cluster_id
- [x86] usb: pci-quirks: Correct AMD PLL quirk detection
- [x86] sysfb_efi: Add quirks for some devices with swapped width and
height
- [x86] speculation/mds: Apply more accurate check on hypervisor platform
- [x86] hpet: Fix division by zero in hpet_time_div()
- ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
- ALSA: hda - Add a conexant codec entry to let mute led work
- access: avoid the RCU grace period for the temporary subjective
credentials
- [arm64] dts: marvell: Fix A37xx UART0 register size
- i2c: qup: fixed releasing dma without flush operation completion
- [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ
(Closes: #904385)
- ISDN: hfcsusb: checking idx of ep configuration
- media: au0828: fix null dereference in error path
- media: cpia2_usb: first wake up, then free in disconnect
- media: radio-raremono: change devm_k*alloc to k*alloc
- sched/fair: Don't free p->numa_faults with concurrent readers
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
- ceph: hold i_ceph_lock when removing caps for freeing inode
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.188
- [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
- [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
- [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
- ftrace: Enable trampoline when rec count returns back to one
- kernel/module.c: Only return -EEXIST for modules that have finished
loading
- fs/adfs: super: fix use-after-free bug
- btrfs: fix minimum number of chunk errors for DUP
- ceph: fix improper use of smp_mb__before_atomic()
- ceph: return -ERANGE if virtual xattr value didn't fit in buffer
- [s390x] scsi: zfcp: fix GCC compiler warning emitted with
-Wmaybe-uninitialized
- ACPI: fix false-positive -Wuninitialized warning
- be2net: Signal that the device cannot transmit during reconfiguration
- [x86] apic: Silence -Wtype-limits compiler warnings
- mm/cma.c: fail if fixed declaration can't be honored
- coda: add error handling for fget
- coda: fix build using bare-metal toolchain
- uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
headers
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
- ipc/mqueue.c: only perform resource calculation if user valid
- [x86] kvm: Don't call kvm_spurious_fault() from .fixup
- [x86] boot: Remove multiple copy of static function
sanitize_boot_params()
- Btrfs: fix incremental send failure after deduplication
- [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent
- selinux: fix memory leak in policydb_init()
- [s390x] dasd: fix endless loop after read unit address configuration
- [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
- infiniband: fix race condition between infiniband mlx4, mlx5 driver and
core dumping
- coredump: fix race condition between collapse_huge_page() and core dumping
- eeprom: at24: make spd world-readable again
- Backport minimal compiler_attributes.h to support GCC 9
- include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
- objtool: Support GCC 9 cold subfunction naming scheme
- [x86] mm, gup: prevent get_page() race with munmap in paravirt guest
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.189
- scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
- [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV
- [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo
- [armhf] dts: logicpd-som-lv: Fix Audio Mute
- [arm64] cpufeature: Fix CTR_EL0 field definitions
- [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
- tcp: be more careful in tcp_fragment()
- HID: wacom: fix bit shift for Cintiq Companion 2
- HID: Add quirk for HP X1200 PIXART OEM mouse
- RDMA: Directly cast the sockaddr union to sockaddr
- IB: directly cast the sockaddr union to aockaddr
- objtool: Add machine_real_restart() to the noreturn list
- objtool: Add rewind_stack_do_exit() to the noreturn list
- libceph: use kbasename() and kill ceph_file_part()
- atm: iphase: Fix Spectre v1 vulnerability
- net: bridge: delete local fdb on device init failure
- net: bridge: mcast: don't delete permanent entries when fast leave is
enabled
- net: fix ifindex collision during namespace removal
- net/mlx5: Use reversed order when unregister devices
- net: sched: Fix a possible null-pointer dereference in dequeue_func()
- tipc: compat: allow tipc commands without arguments
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
- ip6_tunnel: fix possible use-after-free on xmit
- ife: error out when nla attributes are empty
- bnx2x: Disable multi-cos feature.
- [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
[ Ben Hutchings ]
* Bump ABI to 11
* siphash: implement HalfSipHash1-3 for hash tables (Closes: #935134)
* netfilter: conntrack: Use consistent ct id hash calculation
(fixes regression in 4.9.168-1+deb9u5)
-- Ben Hutchings <ben(a)decadent.org.uk> Thu, 22 Aug 2019 21:50:36 +0100
linux (4.9.185-1) stretch; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.185
- [arm64,armhf] usb: chipidea: udc: workaround for endpoint conflict issue
- [amd64] IB/hfi1: Silence txreq allocation warnings
- Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
- apparmor: enforce nullbyte at end of tag string
- parport: Fix mem leak in parport_register_dev_model
- [amd64] IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
- [mips*] uprobes: remove set but not used variable 'epc'
- [armhf] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
- [arm64] net: hns: Fix loopback test failed at copper ports
- [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance
- scsi: ufs: Check that space was properly alloced in copy_query_response
- [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event
- nvme: Fix u32 overflow in the number of namespace list calculation
- btrfs: start readahead also in seed devices
- can: purge socket error queue on sock destruct
- [ppc64el] powerpc/bpf: use unsigned division instruction for 64-bit
operations
- Bluetooth: Align minimum encryption key size for LE and BR/EDR
connections
- Bluetooth: Fix regression with minimum encryption key size alignment
- cfg80211: fix memory leak of wiphy device name
- mac80211: drop robust management frames from unknown TA
- mac80211: Do not use stack memory with scatterlist for GMAC
- [amd64] IB/hfi1: Avoid hardlockup with flushlist_lock
- 9p/rdma: do not disconnect on down_interruptible EAGAIN
- 9p: acl: fix uninitialized iattr access
- 9p/rdma: remove useless check in cm_event_handler
- 9p: p9dirent_read: check network-provided name length
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
- [x86] x86/speculation: Allow guests to use SSBD even if host does not
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
- cpu/speculation: Warn on unsupported mitigations= parameter
- af_packet: Block execution of tasks waiting for transmit to complete in
AF_PACKET
- [arm64,armhf] net: stmmac: fixed new system time seconds value
calculation
- sctp: change to hold sk after auth shkey is created successfully
- tipc: change to use register_pernet_device
- tipc: check msg->req data len in tipc_nl_compat_bearer_disable
- tun: wake up waitqueues after IFF_UP is set
- team: Always enable vlan tx offload
- bonding: Always enable vlan tx offload
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while
loop
- net: check before dereferencing netdev_ops during busy poll
- bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
- bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
- Bluetooth: Fix faulty expression for minimum encryption key size check
- ASoC: soc-pcm: BE dai needs prepare when pause release after resume
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
- ASoC: max98090: remove 24-bit format support if RJ is 0
- scsi: hpsa: correct ioaccel2 chaining
- mm/mlock.c: change count_mm_mlocked_page_nr return type
- [mips*] math-emu: do not use bools for arithmetic
- [armhf] mfd: omap-usb-tll: Fix register offsets
- [armhf] clk: sunxi: fix uninitialized access
- [x86] KVM: degrade WARN to pr_warn_ratelimited
- [x86] drm/i915/dmc: protect against reading random memory
- ALSA: firewire-lib/fireworks: fix miss detection of received MIDI
messages
- ALSA: line6: Fix write on zero-sized buffer
- ALSA: usb-audio: fix sign unintended sign extension on left shifts
- [x86] lib/mpi: Fix karactx leak in mpi_powm
- [armhf] drm/imx: notify drm core before sending event during crtc
disable
- [armhf] drm/imx: only send event on crtc disable if kept disabled
- btrfs: Ensure replaced device doesn't have pending chunk allocation
- [x86] tty: rocket: fix incorrect forward declaration of 'rp_init()'
- [arm64] vdso: Define vdso_{start,end} as array
- [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software
disable LAPIC
- [amd64] IB/hfi1: Close PSM sdma_progress sleep window
- [mips*] Add missing EHB in mtc0 -> mfc0 sequence.
- [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0
-- Salvatore Bonaccorso <carnil(a)debian.org> Sun, 21 Jul 2019 14:35:10 +0200
linux (4.9.184-1) stretch; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169
- [x86] power: Fix some ordering bugs in __restore_processor_context()
- [amd64] power/64: Use struct desc_ptr for the IDT in struct saved_context
- [i386] power/32: Move SYSENTER MSR restoration to fix_processor_context()
- [x86] power: Make restore_processor_context() sane
- [ppc64el] powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
- [ppc64el] Fix invalid use of register expressions
- [ppc64el] powerpc/64s: Add barrier_nospec
- [ppc64el] powerpc/64s: Add support for ori barrier_nospec patching
- [ppc64el] Avoid code patching freed init sections
- [ppc64el] powerpc/64s: Patch barrier_nospec in modules
- [ppc64el] powerpc/64s: Enable barrier_nospec based on firmware settings
- [ppc64el] Use barrier_nospec in copy_from_user()
- [ppc64el] powerpc/64: Use barrier_nospec in syscall entry
- [ppc64el] powerpc/64s: Enhance the information in cpu_show_spectre_v1()
- [ppc64el] powerpc64s: Show ori31 availability in spectre_v1 sysfs file
not v2
- [ppc64el] powerpc/64: Disable the speculation barrier from the command
line
- [ppc64el] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
- [ppc64el] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
- [ppc64el] powerpc/64: Call setup_barrier_nospec() from setup_arch()
- [ppc64el] powerpc/64: Make meltdown reporting Book3S 64 specific
- [ppc64el] asm: Add a patch_site macro & helpers for patching
instructions
- [ppc64el] powerpc/64s: Add new security feature flags for count cache
flush
- [ppc64el] powerpc/64s: Add support for software count cache flush
- [ppc64el] powerpc/pseries: Query hypervisor for count cache flush
settings
- [ppc64el] powerpc/powernv: Query firmware for count cache flush
settings
- [ppc64el] security: Fix spectre_v2 reporting
- [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
- tty: ldisc: add sysctl to prevent autoloading of ldiscs
- ipv6: Fix dangling pointer when ipv6 fragment
- ipv6: sit: reset ip header pointer in ipip6_rcv
- openvswitch: fix flow actions reallocation
- qmi_wwan: add Olicard 600
- sctp: initialize _pad of sockaddr_in before copying to user memory
- tcp: Ensure DCTCP reacts to losses
- vrf: check accept_source_route on the original netdevice
- bnxt_en: Reset device on RX buffer errors.
- bnxt_en: Improve RX consumer index validity check.
- net/mlx5e: Add a lock on tir list
- netns: provide pure entropy for net_hash_mix()
- net: ethtool: not call vzalloc for zero sized memory request
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
- ALSA: seq: Fix OOB-reads from strlcpy
- Btrfs: do not allow trimming when a fs is mounted with the nologreplay
option
- block: do not leak memory in bio_copy_user_iov()
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue
- [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
- [x86] xen: Prevent buffer overflow in privcmd ioctl
- sched/fair: Do not re-read ->h_load_next during hierarchical load
calculation
- PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.170
- perf/core: Restore mmap record type correctly
- ext4: add missing brelse() in add_new_gdb_meta_bg()
- ext4: report real fs size after failed resize
- [i386] ALSA: sb8: add a check for request_region
- IB/mlx4: Fix race condition between catas error reset and aliasguid
flows
- [x86] thermal/int340x_thermal: Add additional UUIDs
- [x86] thermal/int340x_thermal: fix mode setting
- perf config: Fix an error in the config template documentation
- perf config: Fix a memory leak in collect_config()
- perf build-id: Fix memory leak in print_sdt_events()
- perf top: Fix error handling in cmd_top()
- perf hist: Add missing map__put() in error case
- perf evsel: Free evsel->counts in perf_evsel__exit()
- [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI
- [x86] hpet: Prevent potential NULL pointer dereference
- [i386] x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode
processors
- [amd64] iommu/vt-d: Check capability before disabling protected memory
- [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse()
return an error
- fix incorrect error code mapping for OBJECTID_NOT_FOUND
- ext4: prohibit fstrim in norecovery mode
- rsi: improve kernel thread handling to fix kernel panic
- 9p: do not trust pdu content for stat item size
- 9p locks: add mount option for lock retry interval
- f2fs: fix to do sanity check with current segment number
- [arm64] serial: uartps: console_setup() can't be placed to init section
- HID: i2c-hid: override HID descriptors for certain devices
- [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's
- cifs: fallback to older infolevels on findfirst queryinfo retry
- kernel: hung_task.c: disable on suspend
- [armhf] crypto: sha256/arm - fix crash bug in Thumb2 build
- [armhf] crypto: sha512/arm - fix crash bug in Thumb2 build
- [amd64] iommu/dmar: Fix buffer overflow during PCI bus notification
- [arm64,armhf] soc/tegra: pmc: Drop locking from
tegra_powergate_is_powered()
- [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t
- appletalk: Fix use-after-free in atalk_proc_exit
- lib/div64.c: off by one in shift
- include/linux/swap.h: use offsetof() instead of custom __swapoffset
macro
- [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv()
- [arm64,armhf] net: stmmac: Set dma ring length before enabling the DMA
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.171
- bonding: fix event handling for stacked bonds
- net: atm: Fix potential Spectre v1 vulnerabilities
- net: bridge: fix per-port af_packet sockets
- net: bridge: multicast: use rcu to access port list from
br_multicast_start_querier
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
- tcp: tcp_grow_window() needs to respect tcp_space()
- team: set slave to promisc if team is already in promisc mode
- vhost: reject zero size iova range
- ipv4: recompile ip options in ipv4_link_failure
- ipv4: ensure rcu_read_lock() in ipv4_link_failure()
- mmc: sdhci: Fix data command CRC error handling
- [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
- CIFS: keep FileInfo handle live during oplock break
- [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU
- [x86] iio/gyro/bmg160: Use millidegrees for temperature scale
- [x86] io: accel: kxcjk1013: restore the range after resume.
- [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore
- [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
- [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex
- [x86] staging: comedi: ni_usb6501: Fix possible double-free of
->usb_rx_buf
- ALSA: core: Fix card races between register and disconnect
- Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
- [x86] Revert "svm: Fix AVIC incomplete IPI emulation"
- [x86] crypto: x86/poly1305 - fix overflow during partial reduction
- [x86] kprobes: Verify stack frame on kretprobe
- kprobes: Mark ftrace mcount handler functions nokprobe
- kprobes: Fix error check when reusing optimized probes
- rt2x00: do not increment sequence number while re-transmitting
- mac80211: do not call driver wake_tx_queue op during reconfig
- [x86] perf/x86/amd: Add event map for AMD Family 17h
- sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
- device_cgroup: fix RCU imbalance in error case
- ALSA: info: Fix racy addition/deletion of nodes
- percpu: stop printing kernel addresses (CVE-2018-5995)
- [x86] i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
- kernel/sysctl.c: fix out-of-bounds access when setting file-max
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.172
- kbuild: simplify ld-option implementation
- cifs: do not attempt cifs operation on smb2+ rename error
- tracing: Fix a memory leak by early error exit in trace_pid_write()
- [mips*] scall64-o32: Fix indirect syscall number load
- trace: Fix preempt_enable_no_resched() abuse
- IB/rdmavt: Fix frwr memory registration
- sched/numa: Fix a possible divide-by-zero
- ceph: ensure d_name stability in ceph_dentry_hash()
- ceph: fix ci->i_head_snapc leak
- nfsd: Don't release the callback slot unless it was actually held
- sunrpc: don't mark uninitialised items as VALID.
- [arm64,armhf] drm/vc4: Fix memory leak during gpu reset.
- [arm64,armhf] drm/vc4: Fix compilation error reported by kbuild test bot
- USB: Add new USB LPM helpers
- USB: Consolidate LPM checks to avoid enabling LPM twice
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
- tipc: handle the err returned from cmd header function
- slip: make slhc_free() silently accept an error pointer
- [x86] intel_th: gth: Fix an off-by-one in output unassigning
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
- NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
- netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
- tipc: check bearer name with right length in
tipc_nl_compat_bearer_enable
- tipc: check link name with right length in tipc_nl_compat_link_set
- ipv4: add sanity checks in ipv4_link_failure()
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: exchange of 8K and 1M pool
- team: fix possible recursive locking when add slaves
- [arm64,armhf] net: stmmac: move stmmac_check_ether_addr() to driver
probe
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day
- ipv6: frags: fix a lockdep false positive
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- Documentation: Add nospectre_v1 parameter
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.173
- usbnet: ipheth: prevent TX queue timeouts when device not ready
- usbnet: ipheth: fix potential null pointer dereference in
ipheth_carrier_set
- media: vivid: check if the cec_adapter is valid
- [armhf] dts: bcm283x: Fix hdmi hpd gpio pull
- [s390x] limit brk randomization to 32MB
- qlcnic: Avoid potential NULL pointer dereference
- netfilter: nft_set_rbtree: check for inactive element after flag
mismatch
- netfilter: bridge: set skb transport_header before entering
NF_INET_PRE_ROUTING
- usb: gadget: net2280: Fix overrun of OUT messages
- usb: gadget: net2280: Fix net2280_dequeue()
- staging: rtl8712: uninitialized memory in read_bbreg_hdl()
- NFS: Fix a typo in nfs_init_timeout_values()
- scsi: qla4xxx: fix a potential NULL pointer dereference
- usb: u132-hcd: fix resource leak
- ceph: fix use-after-free on symlink traversal
- [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on
multi-element RSCN
- [x86,arm64] libata: fix using DMA buffers on stack
- gpio: of: Fix of_gpiochip_add() error path
- [amd64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.174
- ALSA: line6: use dynamic buffers
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
- ipv6/flowlabel: wait rcu grace period before put_pid()
- ipv6: invert flowlabel sharing check in process and user mode
- packet: validate msg_namelen in send directly
- bnxt_en: Improve multicast address setup logic.
- net: phy: marvell: Fix buffer overrun with stats counters
- [arm64] proc: Set PTE_NG for table entries to avoid traversing them
twice
- [arm64] mm: print out correct page table entries
- [arm64] mm: don't print out page table entries on EL0 faults
- USB: yurex: Fix protection fault after device removal
- USB: w1 ds2490: Fix bug caused by improper use of altsetting array
- [x86] usb: usbip: fix isoc packet num validation in get_pipe
- USB: core: Fix unterminated string returned by usb_string()
- USB: core: Fix bug caused by duplicate interface PM usage counter
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
- HID: logitech: check the return value of create_singlethread_workqueue
- HID: debug: fix race condition with between rdesc_show() and device
removal
- batman-adv: Reduce claim hash refcnt only for removed entry
- batman-adv: Reduce tt_local hash refcnt only for removed entry
- batman-adv: Reduce tt_global hash refcnt only for removed entry
- igb: Fix WARN_ONCE on runtime suspend
- net/mlx5: E-Switch, Fix esw manager vport indication for more vport
commands
- bonding: show full hw address in sysfs for slave entries
- [arm64,armhf] net: stmmac: don't overwrite discard_frame status
- [arm64,armhf] net: stmmac: fix dropping of multi-descriptor RX frames
- [arm64,armhf] net: stmmac: don't log oversized frames
- jffs2: fix use-after-free on symlink traversal
- debugfs: fix use-after-free on symlink traversal
- [amd64,ppc64el] vfio/pci: use correct format characters
- scsi: core: add new RDAC LENOVO/DE_Series device
- [x86] scsi: storvsc: Fix calculation of sub-channel count
- [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
- [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver
- [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled
- hugetlbfs: fix memory leak for resv_map
- [armel] orion: don't use using 64-bit DMA masks
- [x86] perf/x86/amd: Update generic hardware cache events for Family 17h
- scsi: RDMA/srpt: Fix a credit leak for aborted commands
- selinux: never allow relabeling on context mounts
- [x86] mce: Improve error message when kernel cannot recover, p2
- media: v4l2: i2c: ov7670: Fix PLL bypass register values
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.175
- scsi: libsas: fix a race condition when smp task timeout
(CVE-2018-20836)
- ASoC:soc-pcm:fix a codec fixup issue in TDM case
- [amd64] IB/hfi1: Eliminate opcode tests on mr deref
- [x86] perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
- virtio-blk: limit number of hw queues by nr_cpu_ids
- [amd64] iommu/amd: Set exclusion range correctly
- mm: add 'try_get_page()' helper function
- genirq: Prevent use-after-free and work list corruption
- [arm64,armhf] usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS
routines
- UAS: fix alignment of scatter/gather segments
- [x86] ASoC: Intel: avoid Oops if DMA setup fails
- timer/debug: Change /proc/timer_stats from 0644 to 0600 (CVE-2017-5967)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.176
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.177
- netfilter: compat: initialize all fields in xt_init
- bpf: fix struct htab_elem layout
- bpf: convert htab map to hlist_nulls
- [x86] platform/x86: sony-laptop: Fix unintentional fall-through
- USB: serial: fix unthrottle races
- [x86] libnvdimm/namespace: Fix a potential NULL pointer dereference
- HID: input: add mapping for Expose/Overview key
- HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
- HID: input: add mapping for "Toggle Display" key
- [x86] libnvdimm/btt: Fix a kmemdup failure check
- [s390x] dasd: Fix capacity calculation for large volumes
- mac80211: fix unaligned access in mesh table hash function
- [s390x] 3270: fix lockdep false positive on view->lock
- mISDN: Check address length before reading address family
- [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
- [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in
tracing
- init: initialize jump labels before command line option parsing
- ipvs: do not schedule icmp errors from tunnels
- [s390x] ctcm: fix ctcm_new_device error return code
- [armhf] gpu: ipu-v3: dp: fix CSC handling
- rtlwifi: rtl8723ae: Fix missing break in switch statement
- md/raid5: Don't jump to compute_result state from check_result state
- bridge: Fix error path for kobject_init_and_add()
- fib_rules: return 0 directly if an exactly same rule exists when
NLM_F_EXCL not supplied
- packet: Fix error path in packet_init
- vlan: disable SIOCSHWTSTAMP in container
- vrf: sit mtu should not be updated when vrf netdev is the link
- ipv4: Fix raw socket lookup for local traffic
- bonding: fix arp_validate toggling in active-backup mode
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.178
- net: core: another layer of lists, around PF_MEMALLOC skb handling
- locking/rwsem: Prevent decrement of reader count before increment
- [amd64] PCI: hv: Fix a memory leak in hv_eject_device_work()
- [x86] speculation/mds: Revert CPU buffer clear on double fault exit
- [x86] speculation/mds: Improve CPU buffer clear documentation
- [armhf] exynos: Fix a leaked reference by adding missing of_node_put
- [arm64] compat: Reduce address limit
- [arm64] Clear OSDLR_EL1 on CPU boot
- [x86] sched/x86: Save [ER]FLAGS on context switch
- crypto: chacha20poly1305 - set cra_name correctly
- [ppc64el] crypto: vmx - fix copy-paste error in CTR mode
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
- [amd64] crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
- ALSA: usb-audio: Fix a memory leak bug
- ALSA: hda/hdmi - Read the pin sense from register when repolling
- ALSA: hda/hdmi - Consider eld_valid when reporting jack event
- ALSA: hda/realtek - EAPD turn on later
- ASoC: max98090: Fix restore of DAPM Muxes
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
- [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
- tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
- jbd2: check superblock mapped prior to committing
- ext4: actually request zeroing of inode table after grow
- ext4: fix ext4_show_options for file systems w/o journal
- Btrfs: do not start a transaction at iterate_extent_inodes()
- bcache: fix a race between cache register and cacheset unregister
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
- [arm64] ipmi:ssif: compare block number correctly for multi-part return
messages
- crypto: gcm - Fix error return code in crypto_gcm_create_common()
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
- crypto: salsa20 - don't access already-freed walk.iv
- fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return
0...")
- writeback: synchronize sync(2) against cgroup writeback membership
switches
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
into workqueue when umount
- ext4: fix data corruption caused by overlapping unaligned and aligned IO
- [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal
microphone bug
- [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.179
- net: avoid weird emergency message
- net/mlx4_core: Change the error print to info print
- ppp: deflate: Fix possible crash in deflate_init
- tipc: switch order of device registration to fix a crash
- vsock/virtio: free packets during the socket release
- tipc: fix modprobe tipc failed after switch order of device registration
- vsock/virtio: Initialize core virtio vsock before registering the driver
- md: add mddev->pers to avoid potential NULL pointer dereference
- [x86] intel_th: msu: Fix single mode with IOMMU
- p54: drop device reference count if fails to enable device
- cifs: fix strcat buffer overflow and reduce raciness in
smb21_set_oplock_level()
- NFS4: Fix v4.0 client state corruption when mount
- [arm64,armhf] clk: tegra: Fix PLLM programming on Tegra124+ when PMC
overrides divider
- fuse: fix writepages on 32bit
- fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
- [arm64,armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
- ceph: flush dirty inodes before proceeding with remount
- tracing: Fix partial reading of trace event's id file
- [arm64,armhf] memory: tegra: Fix integer overflow on tick value
calculation
- [x86] perf intel-pt: Fix instructions sampling rate
- [x86] perf intel-pt: Fix improved sample timestamp
- [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches
- PCI: Mark Atheros AR9462 to avoid bus reset
- PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
- dm delay: fix a crash when invalid device is specified
- xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
- xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
- vti4: ipip tunnel deregistration fixes.
- xfrm4: Fix uninitialized memory read in _decode_session4
- mac80211: Fix kernel panic due to use of txq after free
- [arm64,armhf] KVM: arm/arm64: Ensure vcpu target is unset on reset
failure
- power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
- Revert "Don't jump to compute_result state from check_result state"
- md/raid: raid5 preserve the writeback action after the parity check
- btrfs: Honour FITRIM range constraints during free space trim
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.180
- ext4: do not delete unlinked inode from orphan list on failed truncate
- [x86] KVM: fix return value for reserved EFER
- bio: fix improper use of smp_mb__before_atomic()
- Revert "scsi: sd: Keep disk read-only when re-reading partition"
- [ppc64el] crypto: vmx - CTR: always increment IV as quadword
- [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID
- [x86] libnvdimm/namespace: Fix label tracking error
- [arm64] Save and restore OSDLR_EL1 across suspend/resume
- gfs2: Fix sign extension bug in gfs2_update_stats
- Btrfs: do not abort transaction at btrfs_update_root() after failure to
COW path
- Btrfs: fix race between ranged fsync and writeback of adjacent ranges
- btrfs: sysfs: don't leak memory when failing add fsid
- fbdev: fix divide error in fb_var_to_videomode
- hugetlb: use same fault hash key for shared and private mappings
- fbdev: fix WARNING in __alloc_pages_nodemask bug
- media: cpia2: Fix use-after-free in cpia2_exit
- media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
- [x86,ppc64el] ssb: Fix possible NULL pointer dereference in
ssb_host_pcmcia_exit
- at76c50x-usb: Don't register led_trigger if usb_register_driver failed
- Revert "btrfs: Honour FITRIM range constraints during free space trim"
- gfs2: Fix lru_count going negative
- cxgb4: Fix error path in cxgb4_init_module
- mmc: core: Verify SD bus width
- [arm64] dmaengine: tegra210-dma: free dma controller in remove()
- [arm64,armhf] ASoC: hdmi-codec: unlock the device on startup errors
- [ppc64el] boot: Fix missing check of lseek() return value
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler()
- [armel,armhf] vdso: Remove dependency with the arch_timer driver internals
- sched/cpufreq: Fix kobject memleak
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
- iwlwifi: pcie: don't crash on invalid RX interrupt
- w1: fix the resume command API
- [armhf] dmaengine: pl330: _stop: clear interrupt status
- mac80211/cfg80211: update bss channel on channel switch
- mwifiex: prevent an array overflow
- [armhf] crypto: sun4i-ss - Fix invalid calculation of hash end
- bcache: return error immediately in bch_journal_replay()
- bcache: fix failure in journal relplay
- bcache: add failure check to run_cache_set() for journal replay
- [x86] build: Move _etext to actual end of .text
- smpboot: Place the __percpu annotation correctly
- [amd64] mm: Remove in_nmi() warning from 64-bit implementation of
vmalloc_fault()
- HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
- media: au0828: stop video streaming only when last user stops
- audit: fix a memory leak bug
- media: au0828: Fix NULL pointer dereference in
au0828_analog_stream_enable()
- media: pvrusb2: Prevent a buffer overflow
- [ppc64el] numa: improve control of topology updates
- sched/core: Check quota and period overflow at usec to nsec conversion
- sched/core: Handle overflow in cpu_shares_write_u64
- USB: core: Don't unbind interfaces following device reset failure
- [amd64] irq: Limit IST stack overflow check to #DB stack
- i40e: don't allow changes to HW VLAN stripping on active port VLANs
- [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME
- RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
- scsi: libsas: Do discovery on empty PHY to update PHY info
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
- [arm64] mmc_spi: add a status check for spi_sync_locked
- PM / core: Propagate dev->power.wakeup_path when no callbacks
- rtlwifi: fix a potential NULL pointer dereference
- mwifiex: Fix mem leak in mwifiex_tm_cmd
- brcmfmac: fix missing checks for kmemdup
- brcmfmac: convert dev_init_lock mutex to completion
- brcmfmac: fix race during disconnect when USB completion is in progress
- brcmfmac: fix Oops when bringing up interface during USB disconnect
- scsi: ufs: Fix regulator load and icc-level configuration
- scsi: ufs: Avoid configuring regulator with undefined voltage range
- [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put
- [x86] uaccess, signal: Fix AC=1 bloat
- [amd64] x86/ia32: Fix ia32_restore_sigcontext() AC leak
- chardev: add additional check for minor range overlap
- HID: core: move Usage Page concatenation to Main item
- [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing
of_node_put
- [armhf] ASoC: fsl_utils: fix a leaked reference by adding missing
of_node_put
- cxgb3/l2t: Fix undefined behaviour
- [arm64,armhf] spi: tegra114: reset controller on probe
- [armhf] media: wl128x: prevent two potential buffer overflows
- virtio_console: initialize vtermno value for ports
- [x86,ppc64el] tty: ipwireless: fix missing checks for ioremap
- [x86] mce: Fix machine_check_poll() tests for error types
- usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
- scsi: qla4xxx: avoid freeing unallocated dma memory
- [arm64] dmaengine: tegra210-adma: use devm_clk_*() helpers
- media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
- [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers
- spi: Fix zero length xfer bug
- drm: Wake up next in drm_read() chain if we are forced to putback the
event
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.181
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
- llc: fix skb leak in llc_build_and_send_ui_pkt()
- [armhf] net: fec: fix the clk mismatch in failed_reset path
- net-gro: fix use-after-free read in napi_gro_frags()
- [arm64,armhf] net: stmmac: fix reset gpio free missing
- usbnet: fix kernel crash after disconnect
- tipc: Avoid copying bytes beyond the supplied data
- bnxt_en: Fix aggregation buffer leak under OOM condition.
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
- [armhf] net: dsa: mv88e6xxx: fix handling of upper half of
STATS_TYPE_PORT
- [armhf] net: mvneta: Fix err code path of probe
- [armhf] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
- [ppc64el] crypto: vmx - ghash: do nosimd fallback manually
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
(CVE-2015-8553)
- Revert "tipc: fix modprobe tipc failed after switch order of device
registration"
- tipc: fix modprobe tipc failed after switch order of device registration
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- [x86] usbip: usbip_host: fix BUG: sleeping function called from invalid
context
- [x86] usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from
port_remove
- [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs
(only sdevs)
- Btrfs: fix race updating log root item during fsync
- [ppc64el] powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: hda/realtek - Set default power save node to 0
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- [arm64] tty: serial: msm_serial: Fix XON/XOFF
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array
on ENOMEM
- [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master
set
- binder: Replace "%p" with "%pK" for stable (CVE-2018-20509)
- binder: replace "%p" with "%pK" (CVE-2018-20510)
- fs: prevent page refcount overflow in pipe_buf_get (CVE-2019-11487)
- mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages
- mm, gup: ensure real head page is ref-counted when using hugepages
- mm: prevent get_user_pages() from overflowing page refcount
(CVE-2019-11487)
- mm: make page ref count overflow check tighter and more explicit
(CVE-2019-11487)
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
- ethtool: fix potential userspace buffer overflow
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- pktgen: do not sleep with the thread lock held.
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules:
return 0...")"
- Revert "fib_rules: return 0 directly if an exactly same rule exists when
NLM_F_EXCL not supplied"
- rcu: locking and unlocking need to always be at least barriers
- fuse: fallocate: fix return with locked inode
- [x86] power: Fix 'nosmt' vs hibernation triple fault during resume
- [ppc64el] genwqe: Prevent an integer overflow in the ioctl
- [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/radeon: prefer lower reference dividers
- [x86] drm/i915: Fix I915_EXEC_RING_MASK
- TTY: serial_core, add ->install
- fs: stream_open - opener for stream-like files so that read and write
can run simultaneously without deadlock
- fuse: Add FOPEN_STREAM to use stream_open()
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- ethtool: check the return value of get_regs_len
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.182
- tcp: reduce tcp_fastretrans_alert() verbosity
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.183
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- [armhf] prevent tracing IPI_CPU_BACKTRACE
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- [armhf,ppc64el] mm/cma.c: fix crash on CMA allocation if bitmap
allocation fails
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- [arm64] drivers: thermal: tsens: Don't print error message on
-EPROBE_DEFER
- [x86] mfd: intel-lpss: Set the device in reset state when init
- mfd: twl6040: Fix device init errors for ACCCTL register
- [x86] perf/intel: Allow PEBS multi-entry in watermark mode
- [arm64] drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- [arm64] pwm: meson: Use the spin-lock only to protect register
modifications
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to do sanity check on valid block count of segment
- configfs: fix possible use-after-free in configfs_register_group
- [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- [x86] PCI: Fix PCI IRQ routing table memory leak
- platform/chrome: cros_ec_proto: check for NULL transfer function
- [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- [armhf] dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove
paths
- [x86] platform: intel_pmc_ipc: adding error handling
- [x86] video: hgafb: fix potential NULL pointer dereference
- [arm64] PCI: xilinx: Check for __get_free_pages() failure
- [armhf] gpio: gpio-omap: add check for off wake capable gpios
- [x86] dmaengine: idma64: Use actual device for DMA transfers
- [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs
- [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8
regulators on Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- [armhf] exynos: Fix undefined instruction during Exynos5422 resume
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- signal/ptrace: Don't leak unitialized kernel memory with
PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- media: v4l2-ioctl: clear fields in s_parm
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- [x86] uaccess, kcov: Disable stack protector
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- [arm64] mm: Inhibit huge-vmap with ptdump
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- usbnet: ipheth: fix racing condition
- [x86] KVM: pmu: do not mask the value that is written to fixed PMUs
- [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to
an invalid read
- [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- [arm64,armhf] usb: dwc2: Fix DMA cache alignment issues
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: usb-storage: Add new ID to ums-realtek
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- [armhf] rtc: pcf8523: don't return invalid date when battery is low
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- mISDN: make sure device name is NUL terminated
- [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf record: Fix s390 missing module symbol and warning for non-root users
- [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token
list
- [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: libsas: delete sas port if expander discover failed
- vfs: Abort file_remove_privs() for non-reg. files
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.184
- tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
[ Salvatore Bonaccorso ]
* [x86] Disable R3964 due to lack of security support
* Refresh version.patch for context changes in 4.9.170
* [rt] Drop 0053-arm-kprobe-replace-patch_lock-to-raw-lock.patch applied in
4.9.170
* Revert "x86: stop exporting msr-index.h to userland"
* [rt] Add new signing subkey for Steven Rostedt
* [rt] Update to 4.9.178-rt131:
- futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
- Update "kernel/hotplug: restore original cpu mask oncpu/down" to always
call arch_smt_update()
* Refresh 0058-net-ena-complete-host-info-to-match-latest-ENA-spec.patch for
context changes in 4.9.180
* Drop efi-libstub-unify-command-line-param-parsing.patch
* Refresh arm64-add-kernel-config-option-to-set-securelevel-wh.patch for
context changes in 4.9.181
[ Ben Hutchings ]
* Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed.
* [rt] Fix build failure after "genirq: Prevent use-after-free and work
list corruption":
- kthread: Convert worker lock to raw spinlock
- kthread: add a global worker thread.
- genirq: convert affinity_notify swork to kthread
* Bump ABI to 10 and apply deferred changes:
- genirq: Avoid summation loops for /proc/stat
* [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
-- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 29 Jun 2019 09:29:10 +0200
--- Modifications pour mariadb-10.1 (libmariadbclient18 mariadb-client-10.1
mariadb-client-core-10.1 mariadb-common) ---
mariadb-10.1 (10.1.41-0+deb9u1) stretch; urgency=medium
* SECURITY UPDATE: New upstream version 10.1.41. Includes fixes for the
following security vulnerabilities:
- CVE-2019-2737
- CVE-2019-2739
- CVE-2019-2740
- CVE-2019-2805
* Previous release 10.1.39
includes fixes for the following security vulnerabilities:
- CVE-2019-2627
- CVE-2019-2614
* Amend previous changelog entries to include newly released CVE numbers.
* Gitlab-CI: Sync latest version from Debian Sid but with Stretch adaptions
* Uses respolveip from correct path as per upstream fix (Closes: #928758)
-- Otto Kekäläinen <otto(a)debian.org> Fri, 02 Aug 2019 18:10:23 +0100
--- Modifications pour ncurses (libncurses6 libtinfo6) ---
ncurses (6.1+20181013-2+deb10u1) buster; urgency=medium
* Drop "rep" from xterm-new and derived terminfo descriptions
(Closes: #933053).
-- Sven Joachim <svenjoac(a)gmx.de> Mon, 05 Aug 2019 20:03:21 +0200
--- Modifications pour openldap (ldap-utils libldap-2.4-2 libldap-common) ---
openldap (2.4.44+dfsg-5+deb9u3) stretch; urgency=medium
* Fix slapd to restrict rootDN proxyauthz to its own databases
(CVE-2019-13057) (ITS#9038) (Closes: #932997)
* Fix slapd to enforce sasl_ssf ACL statement on every connection
(CVE-2019-13565) (ITS#9052) (Closes: #932998)
* Fix slapo-rwm to not free original filter when rewritten filter is invalid
(ITS#8964) (Closes: #934277, LP: #1838370)
-- Ryan Tandy <ryan(a)nardis.ca> Sat, 10 Aug 2019 12:17:00 -0700
--- Modifications pour openssh (openssh-client openssh-server openssh-sftp-server ssh) ---
openssh (1:7.4p1-10+deb9u7) stretch; urgency=medium
* Fix deadlock when the keys/principals command produces a lot of
output and a key is matched early (upstream commit
ddd3d34e5c7979ca6f4a3a98a7d219a4ed3d98c2). (Closes: #905226)
-- Moritz Mühlenhoff <jmm(a)debian.org> Mon, 15 Jul 2019 15:32:09 +0200
--- Modifications pour reportbug (python3-reportbug reportbug) ---
reportbug (7.1.7+deb9u3) stretch; urgency=medium
* Non-maintainer upload.
* Exclude *.pyc from source package.
* reportbug/utils.py
- update release names, following Buster releases, patch by Nicolas
Braud-Santoni; Closes: #932524, #931609
-- Andreas Beckmann <anbe(a)debian.org> Thu, 29 Aug 2019 16:19:25 +0200
--- Modifications pour systemd (libpam-systemd libsystemd0 libudev1 systemd) ---
systemd (232-25+deb9u12) stretch; urgency=medium
* networkd: Do not stop ndisc client in case of conf error.
When an NDisc error happens, e.g. in case of a prefix change, do not shut
down the dhcp client. Instead log about it and continue.
Otherwise networkd might fail to renew the DHCPv4 address and lose IPv4
connectivity. (Closes: #930353)
-- Michael Biebl <biebl(a)debian.org> Sun, 21 Jul 2019 20:43:29 +0200
--- Modifications pour unzip ---
unzip (6.0-21+deb9u2) stretch; urgency=medium
* Fix incorrect parsing of 64-bit values in fileio.c. Closes: #929502.
* Apply three patches by Mark Adler to fix CVE-2019-13232.
- Fix bug in undefer_input() that misplaced the input state.
- Detect and reject a zip bomb using overlapped entries.
Bug discovered by David Fifield. Closes: #931433.
- Do not raise a zip bomb alert for a misplaced central directory.
Reported by Peter Green. Closes: #932404.
-- Santiago Vila <sanvila(a)debian.org> Mon, 05 Aug 2019 18:10:06 +0200
--- Modifications pour cups (libcups2) ---
cups (2.2.1-8+deb9u4) stretch; urgency=low
* Fix multiple security/disclosure issues (Closes: #934957)
- CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
- Fixed IPP buffer overflow
- Fixed memory disclosure issue in the scheduler
- Fixed DoS issues in the scheduler
-- Didier Raboud <odyx(a)debian.org> Wed, 21 Aug 2019 09:51:54 +0200
--- Modifications pour zsh ---
zsh (5.3.1-4+b3) stretch; urgency=low, binary-only=yes
* Binary-only non-maintainer upload for amd64; no source changes.
* Rebuild to pick up security updates in dependencies for zsh-static
-- amd64 Build Daemon (binet) <buildd-binet(a)buildd.debian.org> Sat, 25 May 2019
21:00:38 +0000
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on nonagon.federez.net
--
apticron