apticron report [Thu, 17 Dec 2015 23:38:11 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libgdk-pixbuf2.0-0 2.31.1-2+deb8u4 libgdk-pixbuf2.0-common 2.31.1-2+deb8u4 linux-image-3.16.0-4-amd64 3.16.7-ckt20-1+deb8u1 linux-libc-dev 3.16.7-ckt20-1+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour gdk-pixbuf (libgdk-pixbuf2.0-0 libgdk-pixbuf2.0-common) --- gdk-pixbuf (2.31.1-2+deb8u4) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add additional patch for CVE-2015-4491. The n_x variable could be made large enough to overflow, which was missed in the initial commit upstream. -- Salvatore Bonaccorso <carnil(a)debian.org> Tue, 15 Dec 2015 19:47:31 +0100 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt20-1+deb8u1) jessie-security; urgency=medium [ Salvatore Bonaccorso ] * [x86] KVM: rename update_db_bp_intercept to update_bp_intercept [ Ben Hutchings ] * media: usbvision: fix leak of usb_dev on failure paths in usbvision_probe() * media: usbvision: fix crash on detecting device with invalid configuration (CVE-2015-7833, partly fixed in 3.16.7-ckt11-1+deb8u6) * splice: sendfile() at once fails for big files (Closes: #785189) * unix: avoid use-after-free in ep_remove_wait_queue (CVE-2013-7446) * Btrfs: fix truncation of compressed and inlined extents (CVE-2015-8374) * net: add validation for the socket syscall protocol argument (CVE-2015-8543) -- Ben Hutchings <ben(a)decadent.org.uk> Mon, 14 Dec 2015 21:10:28 +0000 linux (3.16.7-ckt20-1) jessie; urgency=medium * New upstream stable update: http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt18 - mac80211: enable assoc check for mesh interfaces - PCI: Add VPD function 0 quirk for Intel Ethernet devices - staging: comedi: usbduxsigma: don't clobber ai_timer in command test - staging: comedi: usbduxsigma: don't clobber ao_timer in command test - [armhf] usb: dwc3: ep0: Fix mem corruption on OUT transfers of more than 512 bytes - [x86] KVM: MMU: fix validation of mmio page fault (regression in 3.11) - iio: industrialio-buffer: Fix iio_buffer_poll return value (regression in 3.13) - iio: event: Remove negative error code from iio_event_poll (regression in 3.13) - NFSv4: don't set SETATTR for O_RDONLY|O_EXCL - fs: Set the size of empty dirs to 0. (regression in 3.16.7-ckt15) - [x86] staging: comedi: adl_pci7x3x: fix digital output on PCI-7230 - blk-mq: fix buffer overflow when reading sysfs file of 'pending' - NFS: nfs_set_pgio_error sometimes misses errors - NFS: Fix a NULL pointer dereference of migration recovery ops for v4.2 client - usb: host: ehci-sys: delete useless bus_to_hcd conversion - USB: symbolserial: Use usb_get_serial_port_data (regression in 3.10) - igb: Fix oops caused by missing queue pairing (regression in 3.14) - eCryptfs: Invalidate dcache entries when lower i_nlink is zero - libxfs: readahead of dir3 data blocks should use the read verifier - xfs: Fix xfs_attr_leafblock definition - [arm64] kconfig: Move LIST_POISON to a safe value - Btrfs: check if previous transaction aborted to avoid fs corruption - xfs: Fix file type directory corruption for btree directories - [arm64] flush FP/SIMD state correctly after execve() - xfs: return errors from partial I/O failures to files - drm/radeon/atom: Send out the full AUX address - [x86] drm/i915: Always mark the object as dirty when used by the GPU - IB/uverbs: reject invalid or unknown opcodes - [x86] crypto: ghash-clmulni: specify context size for ghash async algorithm - fs: create and use seq_show_option for escaping - scsi: fix scsi_error_handler vs. scsi_host_dev_release race - [x86] drm/i915: Limit the number of loops for reading a split 64bit register (regression in 3.16.7-ckt16) - hfs,hfsplus: cache pages correctly between bnode_create and bnode_free - hfs: fix B-tree corruption after insertion at position 0 - [armel/versatile,armhf] Input: ambakmi - fix system PM by converting to modern callbacks (regression in 3.14) - svcrdma: Fix send_reply() scatter/gather set-up - [x86] mm: Initialize pmd_idx in page_table_range_init_count() - batman-adv: fix multicast counter when purging originators - batman-adv: fix counter for multicast supporting nodes - batman-adv: Fix potential synchronization issues in mcast tvlv handler - batman-adv: Fix potentially broken skb network header access - [powerpc/powerpc64] mm: Fix pte_pagesize_index() crash on 4K w/64K hash - ath10k: fix dma_mapping_error() handling - mmc: sdhci: also get preset value and driver type for MMC_DDR52 (regression in 3.16) - IB/mlx4: Fix potential deadlock when sending mad to wire - IB/mlx4: Forbid using sysfs to change RoCE pkeys - IB/uverbs: Fix race between ib_uverbs_open and remove_one - mmc: core: fix race condition in mmc_wait_data_done - task_work: remove fifo ordering guarantee - netlink, mmap: fix edge-case leakages in nf queue zero-copy - md: flush ->event_work before stopping array. - md/raid10: always set reshape_safe when initializing reshape_position. - ext4: fix loss of delalloc extent info in ext4_zero_range() - [powerpc,ppc64el] MSI: Fix race condition in tearing down MSI interrupts - UBI: block: Add missing cache flushes - net/ipv6: Correct PIM6 mrt_lock handling - netlink, mmap: transform mmap skb into full skb on taps - openvswitch: Zero flows on allocation. - fib_rules: fix fib rule dumps across multiple skbs http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt19 - CIFS: fix type confusion in copy offload ioctl - [x86] apic: Serialize LVTT and TSC_DEADLINE writes - [arm64] head.S: initialise mdcr_el2 in el2_setup - kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd - kvm: fix double free for fast mmio eventfd - [powerpc*] mm: Recompute hash value after a failed update (regression in 3.11) - [i386] platform: Fix Geode LX timekeeping in the generic x86 build - [arm64,armhf] KVM: Disable virtual timer even if the guest is not using it - [x86] hp-wmi: limit hotkey enable - zram: fix possible use after free in zcomp_create() (regression in 3.15) - [x86] drm/vmwgfx: Fix up user_dmabuf refcounting - [armhf] dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again (regression in 3.15) - Btrfs: fix read corruption of compressed and shared extents - btrfs: skip waiting on ordered range for special files - [armhf] usb: chipidea: udc: using the correct stall implementation - [armhf] net: mvneta: fix DMA buffer unmapping in mvneta_rx() (regression in 3.16.7-ckt16) - iser-target: remove command with state ISTATE_REMOVE - [x86] KVM: trap AMD MSRs for the TSeg base and mask - usb: Use the USB_SS_MULT() macro to get the burst multiplier. - xhci: give command abortion one more chance before killing xhci - usb: xhci: Clear XHCI_STATE_DYING on start - xhci: change xhci 1.0 only restrictions to support xhci 1.1 - xhci: init command timeout timer earlier to avoid deleting it uninitialized - cifs: use server timestamp for ntlmv2 authentication - [x86] paravirt: Replace the paravirt nop with a bona fide empty function - [amd64] nmi: Fix a paravirt stack-clobbering bug in the NMI code (regression in 3.16.7-ckt16) - ocfs2/dlm: fix deadlock when dispatch assert master - [x86] drm/i915/bios: handle MIPI Sequence Block v3+ gracefully - drm/qxl: only report first monitor as connected if we have no state - PCI: Fix devfn for VPD access through function 0 (regression in 3.16.7-ckt18) - PCI: Use function 0 VPD for identical functions, regular VPD for others - netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC - vxlan: set needed headroom correctly - jbd2: avoid infinite loop when destroying aborted journal - asix: Don't reset PHY on if_up for ASIX 88772 - asix: Do full reset during ax88772_bind - fib_rules: Fix dump_rules() not to exit early - net/xen-netfront: only napi_synchronize() if running - [x86] intel_pstate: Fix overflow in busy_scaled due to long delay - UBI: Validate data_size - UBI: return ENOSPC if no enough space available - [mips*/4kc-malta] dma-default: Fix 32-bit fall back to GFP_DMA - [x86] efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down - [x86] Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS - mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault - [x86] mm: Set NX on gap between __ex_table and rodata - clocksource: Fix abs() usage w/ 64bit values - [x86] drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware - fs: if a coredump already exists, unlink and recreate with O_EXCL - sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state - l2tp: protect tunnel->del_work by ref_count - af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag - net/unix: fix logic about sk_peek_offset - skbuff: Fix skb checksum flag on skb pull - skbuff: Fix skb checksum partial check. - net: add pfmemalloc check in sk_add_backlog() - ppp: don't override sk->sk_state in pppoe_flush_dev() - ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings - ovs: do not allocate memory from offline numa node - netlink: Trim skb to alloc size to avoid MSG_TRUNC - net: add length argument to skb_copy_and_csum_datagram_iovec (regression in 3.16.7-ckt17) (CVE-2015-8019) - Btrfs: update fix for read corruption of compressed and shared extents http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt20 - regmap: debugfs: Ensure we don't underflow when printing access masks - regmap: debugfs: Don't bother actually printing when calculating max length - [x86] xen: Support kexec/kdump in HVM guests by doing a soft reset - svcrdma: handle rdma read with a non-zero initial page offset (regression in 3.16) - dm: fix AB-BA deadlock in __dm_destroy() (regression in 3.16.7-ckt10) - cifs: [SMB3] Do not fall back to SMBWriteX in set_file_size error cases - dm raid: fix round up of default region size - staging: speakup: fix speakup-r regression - [arm64] readahead: fault retry breaks mmap file read random detection - sched/core: Fix TASK_DEAD race in finish_task_switch() - dm cache: fix NULL pointer when switching from cleaner policy - 3w-9xxx: don't unmap bounce buffered commands (regression in 3.16.7-ckt17) - workqueue: make sure delayed work run in local cpu - drm/radeon: add pm sysfs files late - drm/nouveau/fbcon: take runpm reference when userspace has an open fd - crypto: ahash - ensure statesize is non-zero - btrfs: check unsupported filters in balance arguments - btrfs: fix use after free iterating extrefs - btrfs: fix possible leak in btrfs_ioctl_balance() - drm: Reject DRI1 hw lock ioctl functions for kms drivers - usb: xhci: Add support for URB_ZERO_PACKET to bulk/sg transfers - rbd: fix double free on rbd_dev->header_name - ath9k: declare required extra tx headroom - iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb() - xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing) - iio: mxs-lradc: Fix temperature offset - [x86] drm/i915: Deny wrapping an userptr into a framebuffer - xhci: don't finish a TD if we get a short transfer event mid TD - xhci: handle no ping response error properly - drm/nouveau/gem: return only valid domain when there's only one - [powerpc*] rtas: Validate rtas.entry before calling enter_rtas() - mm: make sendfile(2) killable - rbd: don't leak parent_spec in rbd_dev_probe_parent() - rbd: prevent kernel stack blow up on rbd map - dm btree remove: fix a bug when rebalancing nodes after removal - dm btree: fix leak of bufio-backed block in btree_split_beneath error path - IB/cm: Fix rb-tree duplicate free and use-after-free - iwlwifi: mvm: init card correctly on ctkill exit check (regression in 3.16.7-ckt2) - module: Fix locking in symbol_put_addr() - crypto: api - Only abort operations on fatal signal - md/raid1: submit_bio_wait() returns 0 on success - md/raid10: submit_bio_wait() returns 0 on success - [x86] iommu/amd: Don't clear DTE flags when modifying it - [armel,armhf] i2c: mv64xxx: really allow I2C offloading - drm/radeon: don't try to recreate sysfs entries on resume - mvsas: Fix NULL pointer dereference in mvs_slot_task_free - [arm64] Revert "ARM64: unwind: Fix PC calculation" - rbd: require stable pages if message data CRCs are enabled - md/raid5: fix locking in handle_stripe_clean_event() - Revert "md: allow a partially recovered device to be hot-added to an array." (regression in 3.14) - ipv6: Fix IPsec pre-encap fragmentation check - ppp: fix pppoe_dev deletion condition in pppoe_release() - ipv6: gre: support SIT encapsulation (regression in 3.13) - isdn_ppp: Add checks for allocation failure in isdn_ppp_open() - ppp, slip: Validate VJ compression slot parameters completely (CVE-2015-7799) - staging/dgnc: fix info leak in ioctl - sched/preempt: Fix cond_resched_lock() and cond_resched_softirq() (regression in 3.13) [ Aurelien Jarno ] * [mips*/octeon] Enable CAVIUM_CN63XXP1 (Closes: #800595) [ Ben Hutchings ] * nbd: Restore request timeout detection (Closes: #770479) * netlink: Fix ABI change in 3.16.7-ckt18 * [x86] Enable PINCTRL_BAYTRAIL (Closes: #797949) * firmware_class: Fix condition in directory search loop (Closes: #804862) * ehci: Fix ABI change in 3.16.7-ckt19 * [arm64] Defer workaround for erratum #843419 * [x86] KVM: svm: unconditionally intercept #DB (CVE-2015-8104) -- Ben Hutchings <ben(a)decadent.org.uk> Thu, 19 Nov 2015 15:14:30 +0000 linux (3.16.7-ckt17-1) jessie; urgency=medium * New upstream stable updates: http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt12 - [x86] reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag - UBI: fix soft lockup in ubi_check_volume() - mnt: Fail collect_mounts when applied to unmounted mounts - btrfs: unlock i_mutex after attempting to delete subvolume during send (regression in 3.16) - [arm64] dma-mapping: always clear allocated buffers - ALSA: emu10k1: Fix card shortname string buffer overflow - SCSI: add 1024 max sectors black list flag - 3w-sas,3w-xxxx,3w-9xxx: fix command completion race - [armhf] usb: chipidea: otg: remove mutex unlock and lock while stop and start role (regression in 3.16) - cdc-acm: prevent infinite loop when parsing CDC headers. (regression in 3.16.7-ckt8) - ALSA: emux: Fix mutex deadlock in OSS emulation - rbd: end I/O the entire obj_request on error - mlx4_en: Use correct loop cursor in error path. - [armhf,arm64] KVM: Fix and refactor unmap_range - [armhf] KVM: Unmap IPA on memslot delete/move - [armhf] KVM: user_mem_abort: support stage 2 MMIO page mapping - [armhf,arm64] KVM: avoid returning negative error code as bool - [armhf,arm64] KVM: fix use of WnR bit in kvm_is_write_fault() - [armhf] KVM: vgic: plug irq injection race - [armhf,arm64] KVM: Fix set_clear_sgi_pend_reg offset - [armhf,arm64] KVM: Fix VTTBR_BADDR_MASK and pgd alloc - [armhf,arm64] KVM: fix potential NULL dereference in user_mem_abort() - [armhf,arm64] KVM: Ensure memslots are within KVM_PHYS_SIZE - [arm64] KVM: fix unmapping with 48-bit VAs - [armhf,arm64] kvm: drop inappropriate use of kvm_is_mmio_pfn() - [armhf,arm64] KVM: Reset the HCR on each vcpu when resetting the vcpu - [armhf,arm64] KVM: Introduce stage2_unmap_vm - [armhf,arm64] KVM: Don't allow creating VCPUs after vgic_initialized - [armhf,arm64 KVM: Require in-kernel vgic for the arch timers - [arm64] KVM: Fix TLB invalidation by IPA/VMID - [arm64] KVM: Fix HCR setting for 32bit guests - [arm64] KVM: Do not use pgd_index to index stage-2 pgd - net: make skb_gso_segment error handling more robust - blk-mq: fix CPU hotplug handling - mm/memory-failure: call shake_page() when error hits thp tail page - nilfs2: fix sanity check of btree level in nilfs_btree_root_broken() - ocfs2: dlm: fix race between purge and get lock resource - drm/radeon: make VCE handle check more strict - drm/radeon: make UVD handle checking more strict - drm/radeon: more strictly validate the UVD codec - mnt: Fix fs_fully_visible to verify the root directory is visible - pinctrl: Don't just pretend to protect pinctrl_maps, do it for real - crush: ensuring at most num-rep osds are selected - netfilter: nf_tables: fix error handling of rule replacement - netfilter: Zero the tuple in nfnl_cthelper_parse_tuple() - netfilter: nf_tables: check for overflow of rule dlen field - netfilter: nft_rbtree: fix locking - sched/autogroup: Fix failure to set cpu.rt_runtime_us - xprtrdma: Free the pd if ib_query_qp() fails - xfs: ensure truncate forces zeroed blocks to disk http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt13 - usb: gadget: configfs: Fix interfaces array NULL-termination - nfsd: fix the check for confirmed openowner in nfs4_preprocess_stateid_op - libata: Blacklist queued TRIM on all Samsung 800-series (Closes: #790520) - md/raid5: don't record new size if resize_stripes fails. - sched: Handle priority boosted tasks proper in setscheduler() - [armel,armhf] net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K intruction. - drm/radeon: add new bonaire pci id (Closes: #792099) - firmware: dmi_scan: Fix ordering of product_uuid - ext4: fix NULL pointer dereference when journal restart fails (regression in 3.11) - ext4: check for zero length extent explicitly (regression in 3.13) - jbd2: fix r_count overflows leading to buffer overflow in journal recovery - igb: Fix oops on changing number of rings - igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector - [arm64] add missing PAGE_ALIGN() to __dma_free() - net: socket: Fix the wrong returns for recvmsg and sendmsg (regression in 3.16.7-ckt9) - mac80211: move WEP tailroom size check - [x86] KVM: MMU: fix smap permission check - [x86] KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages - [x86] KVM: MMU: fix SMAP virtualization - sd: Disable support for 256 byte/sector disks - xen/events: don't bind non-percpu VIRQs with percpu chip - libceph: request a new osdmap if lingering request maps to no osd - [s390x] crypto: ghash - Fix incorrect ghash icv buffer handling. - ipvs: fix memory leak in ip_vs_ctl.c - ipv6: fix ECMP route replacement - ipv4: Avoid crashing in ip_error - bridge: fix parsing of MLDv2 reports - module: Call module notifier on failure after complete_formation() (regression in 3.16) - [x86] gpio: gpio-kempld: Fix get_direction return value (regression in 3.12) - [armel,armhf] 8356/1: mm: handle non-pmd-aligned end of RAM - mac80211: don't use napi_gro_receive() outside NAPI context - xfs: xfs_attr_inactive leaves inconsistent attr fork state behind - fs, omfs: add NULL terminator in the end up the token list - vfs: d_walk() might skip too much (regression in 3.16.7-ckt4) - target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST - net_sched: invoke ->attach() after setting dev->qdisc - fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (regression in 3.16.7-ckt11) http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt14 - n_tty: Fix auditing support for cannonical mode (regression in 3.12) - lib: Fix strnlen_user() to not touch memory after specified maximum - xfrm: fix a race in xfrm_state_lookup_byspi - thermal: step_wise: Revert optimization (regression in 3.12) - net: dp83640: fix broken calibration routine. - net: dp83640: reinforce locking rules. - unix/caif: sk_socket can disappear when state is unlocked - xen/netback: Properly initialize credit_bytes (regression in 3.16) - ipv4/udp: Verify multicast group is ours in upd_v4_early_demux() (regression in 3.13) - bridge: disable softirqs around br_fdb_update to avoid lockup - Btrfs: send, add missing check for dead clone root - Btrfs: send, don't leave without decrementing clone root's send_progress - btrfs: incorrect handling for fiemap_fill_next_extent return - btrfs: cleanup orphans while looking up default subvolume - [x86] iommu/vt-d: Allow RMRR on graphics devices too (regression in 3.16.3) - [armhf] irqchip: sunxi-nmi: Fix off-by-one error in irq iterator - mm/memory_hotplug.c: set zone->wait_table to null after freeing it - block: fix ext_dev_lock lockdep report (regression in 3.16.4) - iser-target: Fix variable-length response error completion (regression in 3.16) - iser-target: release stale iser connections http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt15 - [x86] KVM: nSVM: Check for NRIPS support before updating control field - nfs: take extra reference to fl->fl_file when running a setlk - net: don't wait for order-3 page allocation - bridge: fix br_stp_set_bridge_priority race conditions - packet: read num_members once in packet_rcv_fanout() - packet: avoid out of bounds read in round robin fanout - neigh: do not modify unlinked entries - tcp: Do not call tcp_fastopen_reset_cipher from interrupt context (regression in 3.13) - sctp: Fix race between OOTB responce and route removal - media: s5h1420: fix a buffer overflow when checking userspace params - media: cx24116: fix a buffer overflow when checking userspace params - media: af9013: Don't accept invalid bandwidth - media: cx24117: fix a buffer overflow when checking userspace params - spi: fix race freeing dummy_tx/rx before it is unmapped - mtd: fix: avoid race condition when accessing mtd->usecount - intel_pstate: set BYT MSR with wrmsrl_on_cpu() (regression in 3.14) - leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger (regression in 3.11) - mnt: Refactor the logic for mounting sysfs and proc in a user namespace - scsi_transport_srp: Fix a race condition - w1_therm reference count family data - drm/radeon: take the mode_config mutex when dealing with hpds (v2) - [armhf] usb: dwc3: gadget: return error if command sent to DGCMD register fails - rcu: Correctly handle non-empty Tiny RCU callback list with none ready - [armhf] usb: dwc3: gadget: don't clear EP_BUSY too early - staging: rtl8712: prevent buffer overrun in recvbuf2recvframe - SUNRPC: Fix a memory leak in the backchannel code - ieee802154: Fix sockaddr_ieee802154 implicit padding information leak. - mnt: Modify fs_fully_visible to deal with locked ro nodev and atime - regulator: core: fix constraints output buffer - ACPI / PM: Add missing pm_generic_complete() invocation (regression in 3.16) - [armel,armh] dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup - [arm64] Do not attempt to use init_mm in reset_context() - ext4: fix race between truncate and __ext4_journalled_writepage() - [x86] pcmcia: Disable write buffering on Toshiba ToPIC95 - fs/ufs: revert "ufs: fix deadlocks introduced by sb mutex merge" (regression in 3.16.4) - jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail() - jbd2: fix ocfs2 corrupt when updating journal superblock fails - fs/ufs: restore s_lock mutex (regression in 3.16) - regmap: Fix possible shift overflow in regmap_field_init() - [x86] PCI: Use host bridge _CRS info on systems with >32 bit addressing (regression in 3.14) - libata: Do not blacklist Micron M500DC (regression in 3.14) - [x86] iommu/amd: Handle large pages correctly in free_pagetable (regression in 3.11) - ext4: call sync_blockdev() before invalidate_bdev() in put_super() - xfs: fix remote symlinks on V5/CRC filesystems - ext4: don't retry file block mapping on bigalloc fs with non-extent file - xfs: don't truncate attribute extents if no extents exist - NET: ROSE: Don't dereference NULL neighbour pointer. - netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook - fs: Fix S_NOSEC handling - stmmac: troubleshoot unexpected bits in des0 & des1 - PM / sleep: Increase default DPM watchdog timeout to 60 (regression in 3.13) - [armhf] clocksource: exynos_mct: Avoid blocking calls in the cpu hotplug notifier (regression in 3.11) - drm/radeon: compute ring fix hibernation (CI GPU family) v2. - drm/radeon: SDMA fix hibernation (CI GPU family). - [armhf] net: mvneta: disable IP checksum with jumbo frames for Armada 370 - [arm64] Don't report clear pmds and puds as huge - fuse: initialize fc->release before calling it - vfs: Ignore unlocked mounts in fs_fully_visible - proc: Allow creating permanently empty directories that serve as mount points - mnt: Update fs_fully_visible to test for permanently empty directories - ACPICA: Tables: Enable both 32-bit and 64-bit FACS (regression in 3.14) - ACPICA: Tables: Fix an issue that FACS initialization is performed twice - ACPICA: Tables: Enable default 64-bit FADT addresses favor - [x86] KVM: make vapics_in_nmi_mode atomic - [s390x] KVM: virtio-ccw: don't overwrite config space values - 9p: forgetting to cancel request on interrupted zero-copy RPC - e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size (regression in 3.15) - ath9k_htc: memory corruption calling set_bit() - mac80211: prevent possible crypto tx tailroom corruption - cfg80211: ignore netif running state when changing iftype - Btrfs: lock superblock before remounting for rw subvol (regression in 3.15) - of: return NUMA_NO_NODE from fallback of_node_to_nid() (regression in 3.13) - sched/fair: Prevent throttling in early pick_next_task_fair() (regression in 3.15) - ACPI / init: Switch over platform to the ACPI mode later (regression in 3.14) - [armhf] drm/tegra: dpaux: Fix transfers larger than 4 bytes - mmc: card: Fixup request missing in mmc_blk_issue_rw_rq - perf: Fix ring_buffer_attach() RCU sync, again - LZ4 : fix the data abort issue http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt16 - Btrfs: use kmem_cache_free when freeing entry in inode cache - Btrfs: fix race between caching kthread and returning inode to inode cache - Btrfs: fix fsync data loss after append write - ext4: fix reservation release on invalidatepage for delalloc fs - ext4: be more strict when migrating to non-extent based file - ext4: correctly migrate a file with a hole at the beginning - 9p: don't leave a half-initialized inode sitting around - thermal: step_wise: fix: Prevent from binary overflow when trend is dropping - dm btree remove: fix bug in redistribute3 - [armhf] crypto: omap-des - Fix unmapping of dma channels - [armhf] usb: musb: host: rely on port_mode to call musb_start() (regression in 3.13) - drm: add a check for x/y in drm_mode_setcrtc - bio integrity: do not assume bio_integrity_pool exists if bioset exists - Btrfs: fix memory leak in the extent_same ioctl - Btrfs: fix list transaction->pending_ordered corruption - Btrfs: fix file corruption after cloning inline extents - [armel,armhf] 8404/1: dma-mapping: fix off-by-one error in bitmap size check (regression in 3.15) - net: graceful exit from netif_alloc_netdev_queues() - ip_tunnel: fix ipv4 pmtu check to honor inner ip header df (regression in 3.11) - net: do not process device backlog during unregistration - rds: rds_ib_device.refcount overflow - mm: avoid setting up anonymous pages into file mapping - HID: cp2112: fix to force single data-report reply - [armhf] net: mvneta: fix refilling for Rx DMA buffers - [armhf] usb: dwc3: gadget: return error if command sent to DEPCMD register fails - usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() function - usb: core: lpm: set lpm_capable for root hub device (regression in 3.15) - USB: OHCI: Fix race between ED unlink and URB submission (regression in 3.16.2) - usb-storage: ignore ZTE MF 823 card reader in mode 0x1225 - md/raid1: fix test for 'was read error from last working device'. - [armhf] mmc: omap_hsmmc: Fix DTO and DCRC handling - bonding: correctly handle bonding type change on enslave failure - inet: frags: fix defragmented packet's IP header for af_packet - vfs: freeing unlinked file indefinitely delayed - mmc: sdhci: Fix FSL ESDHC reset handling quirk (regression in 3.16) http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt17 - sysfs: Create mountpoints with sysfs_create_mount_point - iscsi-target: Fix use-after-free during TPG session shutdown - iscsi-target: Fix iscsit_start_kthreads failure OOPs (regression in 3.16.7-ckt11) - iscsi-target: Fix iser explicit logout TX kthread leak (regression in 3.16.7-ckt11) - xfs: remote attribute headers contain an invalid LSN - xfs: remote attributes need to be considered data - [x86] drm/i915: Replace WARN inside I915_READ64_2x32 with retry loop - ipr: Fix locking for unit attention handling - ipr: Fix invalid array indexing for HRRQ - [x86] xen: Probe target addresses in set_aliased_prot() before the hypercall - netfilter: ctnetlink: put back references to master ct and expect object (regression in 3.12) - ipvs: do not use random local source address for tunnels - ipvs: fix crash if scheduler is changed - ipvs: fix crash with sync protocol v0 and FTP - NFS: Don't revalidate the mapping if both size and change attr are up to date (regression in 3.16) - packet: missing dev_put() in packet_do_bind() - packet: tpacket_snd(): fix signed/unsigned comparison - net: sched: fix refcount imbalance in actions - act_pedit: check binding before calling tcf_hash_release() - nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem - [armel/ixp4xx] crypto: Remove bogus BUG_ON on scattered dst buffer - rbd: fix copyup completion race - md/bitmap: return an error when bitmap superblock is corrupt. - md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies - [armhf] thermal: exynos: Disable the regulator on probe failure - xhci: fix off by one error in TRB DMA address boundary check - mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations - [mips*] Make set_pte() SMP safe. - ipc: modify message queue accounting to not take kernel data structures into account - ocfs2: fix BUG in ocfs2_downconvert_thread_do_work() - fsnotify: fix oops in fsnotify_clear_marks_by_group_flags() - rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver - net/tipc: initialize security state for new connection socket - net: call rcu_read_lock early in process_backlog - net: Clone skb before setting peeked flag - net: Fix skb csum races when peeking - net: Fix skb_set_peeked use-after-free bug - ipv6: lock socket in ip6_datagram_connect() - netlink: don't hold mutex in rcu callback when releasing mmapd ring - rds: fix an integer overflow test in rds_info_getsockopt() - udp: fix dst races with multicast early demux - bna: fix interrupts storm caused by erroneous packets (regression in 3.14) - net: gso: use feature flag argument in all protocol gso handlers - ext4: avoid deadlocks in the writeback path by using sb_getblk_gfp - xen-blkfront: don't add indirect pages to list when !feature_persistent - xen-blkback: replace work_pending with work_busy in purge_persistent_gnt() - regmap: regcache-rbtree: Clean new present bits on present bitmap resize (regression in 3.12) - target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT - [x86] ldt: Make modify_ldt synchronous - [x86] ldt: Correct LDT access in single stepping logic - [i386] ldt: Correct FPU emulation access to LDT - dm btree: add ref counting ops for the leaves of top level btrees - libfc: Fix fc_exch_recv_req() error path (regression in 3.13) - libfc: Fix fc_fcp_cleanup_each_cmd() - [x86] drm/vmwgfx: Fix execbuf locking issues - mm/hwpoison: fix page refcount of unknown non LRU page - ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set exits - ipc/sem.c: change memory barrier in sem_lock() to smp_rmb() - ipc/sem.c: update/correct memory barriers - [mips*] Fix seccomp syscall argument for MIPS64 (regression in 3.15) - [i386] ldt: Further fix FPU emulation - ALSA: usb-audio: Fix runtime PM unbalance (regression in 3.15) - libata: Add factory recertified Crucial M500s to blacklist - [arm64] KVM: Fix host crash when injecting a fault into a 32bit guest - batman-adv: fix kernel crash due to missing NULL checks (regression in 3.16) - batman-adv: protect tt_local_entry from concurrent delete events - perf: Fix PERF_EVENT_IOC_PERIOD migration race (regression in 3.14) - net: Fix RCU splat in af_key - ip6_gre: release cached dst on tunnel removal - xen/gntdevt: Fix race condition in gntdev_release() - signalfd: fix information leak in signalfd_copyinfo - signal: fix information leak in copy_siginfo_to_user - signal: fix information leak in copy_siginfo_from_user32 [ Ben Hutchings ] * [x86] vmwgfx: Enable DRM_VMWGFX_FBCON (Closes: #714929) * [x86] edac: Add edac_ie31200 driver from Linux 3.17 (Closes: #780773) * [mips*] Correct FP ISA requirements (Closes: #781892) * Revert "ACPICA: Utilities: split IO address types from data type models." to avoid ABI change on i386 * libata: add ATA_HORKAGE_NOTRIM * libata: force disable trim for SuperSSpeed S238 * block: Do a full clone when splitting discard bios (Closes: #793326) * [armel,sh4] linux-image: Recommend u-boot-tools rather than the obsolete uboot-mkimage package (Closes: #793608) * linux-source: Depend on xz-utils, not bzip2 (Closes: #796940) * [x86] i2c: i801: Use wait_event_timeout to wait for interrupts (Closes: #799786) * Adjust for migration to git: - Update .gitignore files - debian/control: Update Vcs-* fields - README.Debian, README.source: Update references to svn * media: uvcvideo: Disable hardware timestamps by default (Closes: #794327) [ Ian Campbell ] * [xen] xen-netback: return correct ethtool stats (Closes: #786936) * of: make sure of_alias is initialized before accessing it. (Closes: #784053) [ Uwe Kleine-König ] * Merge jessie-security changes [ Aurelien Jarno ] * [mips*] Correct FP emulation delay slot exception propagation. * [mips*el/loongson3] Set Loongson 3 ISA to MIPS64R1 to correctly emulate the corresponding FP instructions. -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 26 Sep 2015 16:03:16 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron