[linux] 01/01: Merge tag 'debian/3.16.7-ckt20-1+deb8u2' into jessie

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch jessie
in repository linux.

commit b11ff8b7bdf372829d6f75f069a42977a116f070
Merge: 8e6b334 406dcf2
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Sun Jan 3 10:23:43 2016 +0000

    Merge tag 'debian/3.16.7-ckt20-1+deb8u2' into jessie

 debian/changelog                                   |  19 ++++
 ...alidate-socket-address-length-in-sco_sock.patch |  22 ++++
 .../keys-fix-race-between-read-and-revoke.patch    | 110 ++++++++++++++++++
 ...-sockaddr_len-in-pptp_bind-and-pptp_conne.patch |  34 ++++++
 ...e-wrt-a-process-requires-mapped-uids-gids.patch | 102 +++++++++++++++++
 ...ument-to-skb_copy_and_csum_datagram_iovec.patch |  95 ++++++++++++++++
 ...-t-finish-a-td-if-we-get-a-short-transfer.patch |  37 ++++++
 ...y-support-msg_peek-with-truncated-buffers.patch |  88 ++++++++++++++
 .../bugfix/all/xen-add-ring_copy_request.patch     |  52 +++++++++
 ...-only-read-request-operation-from-shared-.patch |  48 ++++++++
 ...-read-from-indirect-descriptors-only-once.patch |  63 +++++++++++
 ...-don-t-use-last-request-to-determine-mini.patch |  35 ++++++
 ...-netback-use-ring_copy_request-throughout.patch | 126 +++++++++++++++++++++
 ...-do-not-install-an-irq-handler-for-msi-in.patch |  77 +++++++++++++
 ...-don-t-allow-msi-x-ops-if-pci_command_mem.patch |  61 ++++++++++
 ...-for-xen_pci_op_disable_msi-x-only-disabl.patch | 102 +++++++++++++++++
 ...-return-error-on-xen_pci_op_enable_msi-wh.patch |  58 ++++++++++
 ...-return-error-on-xen_pci_op_enable_msix-w.patch |  60 ++++++++++
 ...-save-xen_pci_op-commands-before-processi.patch |  77 +++++++++++++
 ...oad-pit-counters-for-all-channels-when-re.patch |  53 +++++++++
 .../ptrace-fix-abi-change-for-priv-esc-fix.patch   |  19 ++++
 debian/patches/series                              |  20 ++++
 22 files changed, 1358 insertions(+)

diff --cc debian/changelog
index 748c3ea,effb94b..df78a37
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,16 -1,22 +1,35 @@@
 +linux (3.16.7-ckt20-2) UNRELEASED; urgency=medium
 +
 +  [ Ben Hutchings ]
 +  * udeb: Add dm-service-time to multipath-modules (Closes: #806131)
 +  * xfs: allow inode allocations in post-growfs disk space (Closes: #802885)
 +  * [x86] drm/i915: Disable PSMI sleep messages on all rings around context
 +    switches (Closes: #777231)
 +
 +  [ Aurelien Jarno ]
 +  * [mips*] Add support for MIPS 5KE CPU.
 +
 + -- Ben Hutchings <ben at decadent.org.uk>  Sun, 22 Nov 2015 23:31:18 +0000
 +
+ linux (3.16.7-ckt20-1+deb8u2) jessie-security; urgency=medium
+ 
+   * [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155)
+   * [xen] pciback: Fix state validation in MSI control operations
+     (CVE-2015-8551, CVE-2015-8852, XSA-157)
+   * pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569)
+   * bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575)
+   * ptrace: being capable wrt a process requires mapped uids/gids
+     (CVE-2015-8709)
+   * KEYS: Fix race between read and revoke (CVE-2015-7550)
+   * [x86] KVM: Reload pit counters for all channels when restoring state
+     (CVE-2015-7513)
+   * udp: properly support MSG_PEEK with truncated buffers
+     (Closes: #808293, regression in 3.16.7-ckt17)
+   * Revert "xhci: don't finish a TD if we get a short transfer event mid TD"
+     (Closes: #808602, #808953, regression in 3.16.7-ckt20)
+ 
+  -- Ben Hutchings <ben at decadent.org.uk>  Sat, 02 Jan 2016 03:31:39 +0000
+ 
  linux (3.16.7-ckt20-1+deb8u1) jessie-security; urgency=medium
  
    [ Salvatore Bonaccorso ]
diff --cc debian/patches/series
index b1daec2,f22c3f2..8f3cb7d
--- a/debian/patches/series
+++ b/debian/patches/series
@@@ -651,5 -650,23 +651,25 @@@ bugfix/all/unix-avoid-use-after-free-in
  debian/af_unix-avoid-abi-changes.patch
  bugfix/all/btrfs-fix-truncation-of-compressed-and-inlined-exten.patch
  bugfix/all/net-add-validation-for-the-socket-syscall-protocol.patch
+ bugfix/all/xen-add-ring_copy_request.patch
+ bugfix/all/xen-netback-don-t-use-last-request-to-determine-mini.patch
+ bugfix/all/xen-netback-use-ring_copy_request-throughout.patch
+ bugfix/all/xen-blkback-only-read-request-operation-from-shared-.patch
+ bugfix/all/xen-blkback-read-from-indirect-descriptors-only-once.patch
+ bugfix/all/xen-pciback-save-xen_pci_op-commands-before-processi.patch
+ bugfix/all/xen-pciback-return-error-on-xen_pci_op_enable_msi-wh.patch
+ bugfix/all/xen-pciback-return-error-on-xen_pci_op_enable_msix-w.patch
+ bugfix/all/xen-pciback-do-not-install-an-irq-handler-for-msi-in.patch
+ bugfix/all/xen-pciback-for-xen_pci_op_disable_msi-x-only-disabl.patch
+ bugfix/all/xen-pciback-don-t-allow-msi-x-ops-if-pci_command_mem.patch
+ bugfix/all/pptp-verify-sockaddr_len-in-pptp_bind-and-pptp_conne.patch
+ bugfix/all/bluetooth-validate-socket-address-length-in-sco_sock.patch
+ bugfix/all/ptrace-being-capable-wrt-a-process-requires-mapped-uids-gids.patch
+ debian/ptrace-fix-abi-change-for-priv-esc-fix.patch
+ bugfix/all/keys-fix-race-between-read-and-revoke.patch
+ bugfix/x86/KVM-x86-Reload-pit-counters-for-all-channels-when-re.patch
+ bugfix/all/revert-net-add-length-argument-to-skb_copy_and_csum_datagram_iovec.patch
+ bugfix/all/udp-properly-support-msg_peek-with-truncated-buffers.patch
+ bugfix/all/revert-xhci-don-t-finish-a-td-if-we-get-a-short-transfer.patch
 +bugfix/all/xfs-allow-inode-allocations-in-post-growfs-disk-spac.patch
 +bugfix/x86/drm-i915-disable-psmi-sleep-messages-on-all-rings-ar.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git