Accepted linux 3.2.63-2+deb7u1~bpo60+1 (all source) into squeeze-backports->backports-policy, squeeze-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 02 Nov 2014 01:08:06 +0000
Source: linux
Binary: linux-source-3.2 linux-doc-3.2 linux-manual-3.2 linux-support-3.2.0-0.bpo.4 linux-libc-dev linux-headers-3.2.0-0.bpo.4-all linux-headers-3.2.0-0.bpo.4-all-alpha linux-headers-3.2.0-0.bpo.4-common linux-image-3.2.0-0.bpo.4-alpha-generic linux-headers-3.2.0-0.bpo.4-alpha-generic linux-image-3.2.0-0.bpo.4-alpha-smp linux-headers-3.2.0-0.bpo.4-alpha-smp linux-image-3.2.0-0.bpo.4-alpha-legacy linux-headers-3.2.0-0.bpo.4-alpha-legacy linux-headers-3.2.0-0.bpo.4-all-amd64 linux-image-3.2.0-0.bpo.4-amd64 linux-headers-3.2.0-0.bpo.4-amd64 linux-image-3.2.0-0.bpo.4-amd64-dbg xen-linux-system-3.2.0-0.bpo.4-amd64 linux-headers-3.2.0-0.bpo.4-common-rt linux-image-3.2.0-0.bpo.4-rt-amd64 linux-headers-3.2.0-0.bpo.4-rt-amd64 linux-image-3.2.0-0.bpo.4-rt-amd64-dbg linux-headers-3.2.0-0.bpo.4-all-armel linux-image-3.2.0-0.bpo.4-iop32x linux-headers-3.2.0-0.bpo.4-iop32x linux-image-3.2.0-0.bpo.4-ixp4xx linux-headers-3.2.0-0.bpo.4-ixp4xx linux-image-3.2.0-0.bpo.4-kirkwood
linux-headers-3.2.0-0.bpo.4-kirkwood linux-image-3.2.0-0.bpo.4-mv78xx0 linux-headers-3.2.0-0.bpo.4-mv78xx0 linux-image-3.2.0-0.bpo.4-orion5x linux-headers-3.2.0-0.bpo.4-orion5x linux-image-3.2.0-0.bpo.4-versatile linux-headers-3.2.0-0.bpo.4-versatile linux-headers-3.2.0-0.bpo.4-all-armhf linux-image-3.2.0-0.bpo.4-mx5 linux-headers-3.2.0-0.bpo.4-mx5 linux-image-3.2.0-0.bpo.4-omap linux-headers-3.2.0-0.bpo.4-omap linux-image-3.2.0-0.bpo.4-vexpress linux-headers-3.2.0-0.bpo.4-vexpress linux-headers-3.2.0-0.bpo.4-all-hppa linux-image-3.2.0-0.bpo.4-parisc linux-headers-3.2.0-0.bpo.4-parisc linux-image-3.2.0-0.bpo.4-parisc-smp linux-headers-3.2.0-0.bpo.4-parisc-smp linux-image-3.2.0-0.bpo.4-parisc64 linux-headers-3.2.0-0.bpo.4-parisc64 linux-image-3.2.0-0.bpo.4-parisc64-smp linux-headers-3.2.0-0.bpo.4-parisc64-smp linux-headers-3.2.0-0.bpo.4-all-i386 linux-image-3.2.0-0.bpo.4-486 linux-headers-3.2.0-0.bpo.4-486 linux-image-3.2.0-0.bpo.4-686-pae
linux-headers-3.2.0-0.bpo.4-686-pae linux-image-3.2.0-0.bpo.4-686-pae-dbg xen-linux-system-3.2.0-0.bpo.4-686-pae linux-image-3.2.0-0.bpo.4-rt-686-pae linux-headers-3.2.0-0.bpo.4-rt-686-pae linux-image-3.2.0-0.bpo.4-rt-686-pae-dbg linux-headers-3.2.0-0.bpo.4-all-ia64 linux-image-3.2.0-0.bpo.4-itanium linux-headers-3.2.0-0.bpo.4-itanium linux-image-3.2.0-0.bpo.4-mckinley linux-headers-3.2.0-0.bpo.4-mckinley linux-headers-3.2.0-0.bpo.4-all-m68k linux-image-3.2.0-0.bpo.4-amiga linux-headers-3.2.0-0.bpo.4-amiga linux-image-3.2.0-0.bpo.4-atari linux-headers-3.2.0-0.bpo.4-atari linux-image-3.2.0-0.bpo.4-bvme6000 linux-headers-3.2.0-0.bpo.4-bvme6000 linux-image-3.2.0-0.bpo.4-mac linux-headers-3.2.0-0.bpo.4-mac linux-image-3.2.0-0.bpo.4-mvme147 linux-headers-3.2.0-0.bpo.4-mvme147 linux-image-3.2.0-0.bpo.4-mvme16x linux-headers-3.2.0-0.bpo.4-mvme16x linux-headers-3.2.0-0.bpo.4-all-mips linux-image-3.2.0-0.bpo.4-r4k-ip22 linux-headers-3.2.0-0.bpo.4-r4k-ip22
linux-image-3.2.0-0.bpo.4-r5k-ip32 linux-headers-3.2.0-0.bpo.4-r5k-ip32 linux-image-3.2.0-0.bpo.4-sb1-bcm91250a linux-headers-3.2.0-0.bpo.4-sb1-bcm91250a linux-image-3.2.0-0.bpo.4-sb1a-bcm91480b linux-headers-3.2.0-0.bpo.4-sb1a-bcm91480b linux-image-3.2.0-0.bpo.4-4kc-malta linux-headers-3.2.0-0.bpo.4-4kc-malta linux-image-3.2.0-0.bpo.4-5kc-malta linux-headers-3.2.0-0.bpo.4-5kc-malta linux-image-3.2.0-0.bpo.4-octeon linux-headers-3.2.0-0.bpo.4-octeon linux-headers-3.2.0-0.bpo.4-all-mipsel linux-image-3.2.0-0.bpo.4-r5k-cobalt linux-headers-3.2.0-0.bpo.4-r5k-cobalt linux-image-3.2.0-0.bpo.4-loongson-2f linux-headers-3.2.0-0.bpo.4-loongson-2f linux-headers-3.2.0-0.bpo.4-all-powerpc linux-image-3.2.0-0.bpo.4-powerpc linux-headers-3.2.0-0.bpo.4-powerpc linux-image-3.2.0-0.bpo.4-powerpc-smp linux-headers-3.2.0-0.bpo.4-powerpc-smp linux-image-3.2.0-0.bpo.4-powerpc64 linux-headers-3.2.0-0.bpo.4-powerpc64 linux-headers-3.2.0-0.bpo.4-all-ppc64
linux-headers-3.2.0-0.bpo.4-all-s390 linux-image-3.2.0-0.bpo.4-s390x linux-headers-3.2.0-0.bpo.4-s390x linux-image-3.2.0-0.bpo.4-s390x-dbg linux-image-3.2.0-0.bpo.4-s390x-tape linux-headers-3.2.0-0.bpo.4-all-s390x linux-headers-3.2.0-0.bpo.4-all-sh4 linux-image-3.2.0-0.bpo.4-sh7751r linux-headers-3.2.0-0.bpo.4-sh7751r linux-image-3.2.0-0.bpo.4-sh7785lcr linux-headers-3.2.0-0.bpo.4-sh7785lcr linux-headers-3.2.0-0.bpo.4-all-sparc linux-image-3.2.0-0.bpo.4-sparc64 linux-headers-3.2.0-0.bpo.4-sparc64 linux-image-3.2.0-0.bpo.4-sparc64-smp linux-headers-3.2.0-0.bpo.4-sparc64-smp
linux-headers-3.2.0-0.bpo.4-all-sparc64
Architecture: all source
Version: 3.2.63-2+deb7u1~bpo60+1
Distribution: squeeze-backports
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Closes: 633128 721346 726150 754420 756249 766195
Description:
linux-doc-3.2 - Linux kernel specific documentation for version 3.2
linux-headers-3.2.0-0.bpo.4-486 - Header files for Linux 3.2.0-0.bpo.4-486
linux-headers-3.2.0-0.bpo.4-4kc-malta - Header files for Linux 3.2.0-0.bpo.4-4kc-malta
linux-headers-3.2.0-0.bpo.4-5kc-malta - Header files for Linux 3.2.0-0.bpo.4-5kc-malta
linux-headers-3.2.0-0.bpo.4-686-pae - Header files for Linux 3.2.0-0.bpo.4-686-pae
linux-headers-3.2.0-0.bpo.4-all - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-alpha - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-amd64 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-armel - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-armhf - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-hppa - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-i386 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-ia64 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-m68k - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-mips - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-mipsel - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-powerpc - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-ppc64 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-s390 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-s390x - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-sh4 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-sparc64 - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-all-sparc - All header files for Linux 3.2 (meta-package)
linux-headers-3.2.0-0.bpo.4-alpha-generic - Header files for Linux 3.2.0-0.bpo.4-alpha-generic
linux-headers-3.2.0-0.bpo.4-alpha-legacy - Header files for Linux 3.2.0-0.bpo.4-alpha-legacy
linux-headers-3.2.0-0.bpo.4-alpha-smp - Header files for Linux 3.2.0-0.bpo.4-alpha-smp
linux-headers-3.2.0-0.bpo.4-amd64 - Header files for Linux 3.2.0-0.bpo.4-amd64
linux-headers-3.2.0-0.bpo.4-amiga - Header files for Linux 3.2.0-0.bpo.4-amiga
linux-headers-3.2.0-0.bpo.4-atari - Header files for Linux 3.2.0-0.bpo.4-atari
linux-headers-3.2.0-0.bpo.4-bvme6000 - Header files for Linux 3.2.0-0.bpo.4-bvme6000
linux-headers-3.2.0-0.bpo.4-common - Common header files for Linux 3.2.0-0.bpo.4
linux-headers-3.2.0-0.bpo.4-common-rt - Common header files for Linux 3.2.0-0.bpo.4-rt
linux-headers-3.2.0-0.bpo.4-iop32x - Header files for Linux 3.2.0-0.bpo.4-iop32x
linux-headers-3.2.0-0.bpo.4-itanium - Header files for Linux 3.2.0-0.bpo.4-itanium
linux-headers-3.2.0-0.bpo.4-ixp4xx - Header files for Linux 3.2.0-0.bpo.4-ixp4xx
linux-headers-3.2.0-0.bpo.4-kirkwood - Header files for Linux 3.2.0-0.bpo.4-kirkwood
linux-headers-3.2.0-0.bpo.4-loongson-2f - Header files for Linux 3.2.0-0.bpo.4-loongson-2f
linux-headers-3.2.0-0.bpo.4-mac - Header files for Linux 3.2.0-0.bpo.4-mac
linux-headers-3.2.0-0.bpo.4-mckinley - Header files for Linux 3.2.0-0.bpo.4-mckinley
linux-headers-3.2.0-0.bpo.4-mv78xx0 - Header files for Linux 3.2.0-0.bpo.4-mv78xx0
linux-headers-3.2.0-0.bpo.4-mvme147 - Header files for Linux 3.2.0-0.bpo.4-mvme147
linux-headers-3.2.0-0.bpo.4-mvme16x - Header files for Linux 3.2.0-0.bpo.4-mvme16x
linux-headers-3.2.0-0.bpo.4-mx5 - Header files for Linux 3.2.0-0.bpo.4-mx5
linux-headers-3.2.0-0.bpo.4-octeon - Header files for Linux 3.2.0-0.bpo.4-octeon
linux-headers-3.2.0-0.bpo.4-omap - Header files for Linux 3.2.0-0.bpo.4-omap
linux-headers-3.2.0-0.bpo.4-orion5x - Header files for Linux 3.2.0-0.bpo.4-orion5x
linux-headers-3.2.0-0.bpo.4-parisc64 - Header files for Linux 3.2.0-0.bpo.4-parisc64
linux-headers-3.2.0-0.bpo.4-parisc64-smp - Header files for Linux 3.2.0-0.bpo.4-parisc64-smp
linux-headers-3.2.0-0.bpo.4-parisc - Header files for Linux 3.2.0-0.bpo.4-parisc
linux-headers-3.2.0-0.bpo.4-parisc-smp - Header files for Linux 3.2.0-0.bpo.4-parisc-smp
linux-headers-3.2.0-0.bpo.4-powerpc64 - Header files for Linux 3.2.0-0.bpo.4-powerpc64
linux-headers-3.2.0-0.bpo.4-powerpc - Header files for Linux 3.2.0-0.bpo.4-powerpc
linux-headers-3.2.0-0.bpo.4-powerpc-smp - Header files for Linux 3.2.0-0.bpo.4-powerpc-smp
linux-headers-3.2.0-0.bpo.4-r4k-ip22 - Header files for Linux 3.2.0-0.bpo.4-r4k-ip22
linux-headers-3.2.0-0.bpo.4-r5k-cobalt - Header files for Linux 3.2.0-0.bpo.4-r5k-cobalt
linux-headers-3.2.0-0.bpo.4-r5k-ip32 - Header files for Linux 3.2.0-0.bpo.4-r5k-ip32
linux-headers-3.2.0-0.bpo.4-rt-686-pae - Header files for Linux 3.2.0-0.bpo.4-rt-686-pae
linux-headers-3.2.0-0.bpo.4-rt-amd64 - Header files for Linux 3.2.0-0.bpo.4-rt-amd64
linux-headers-3.2.0-0.bpo.4-s390x - Header files for Linux 3.2.0-0.bpo.4-s390x
linux-headers-3.2.0-0.bpo.4-sb1a-bcm91480b - Header files for Linux 3.2.0-0.bpo.4-sb1a-bcm91480b
linux-headers-3.2.0-0.bpo.4-sb1-bcm91250a - Header files for Linux 3.2.0-0.bpo.4-sb1-bcm91250a
linux-headers-3.2.0-0.bpo.4-sh7751r - Header files for Linux 3.2.0-0.bpo.4-sh7751r
linux-headers-3.2.0-0.bpo.4-sh7785lcr - Header files for Linux 3.2.0-0.bpo.4-sh7785lcr
linux-headers-3.2.0-0.bpo.4-sparc64 - Header files for Linux 3.2.0-0.bpo.4-sparc64
linux-headers-3.2.0-0.bpo.4-sparc64-smp - Header files for Linux 3.2.0-0.bpo.4-sparc64-smp
linux-headers-3.2.0-0.bpo.4-versatile - Header files for Linux 3.2.0-0.bpo.4-versatile
linux-headers-3.2.0-0.bpo.4-vexpress - Header files for Linux 3.2.0-0.bpo.4-vexpress
linux-image-3.2.0-0.bpo.4-486 - Linux 3.2 for older PCs
linux-image-3.2.0-0.bpo.4-4kc-malta - Linux 3.2 for MIPS Malta
linux-image-3.2.0-0.bpo.4-5kc-malta - Linux 3.2 for MIPS Malta (64-bit)
linux-image-3.2.0-0.bpo.4-686-pae-dbg - Debugging symbols for Linux 3.2.0-0.bpo.4-686-pae
linux-image-3.2.0-0.bpo.4-686-pae - Linux 3.2 for modern PCs
linux-image-3.2.0-0.bpo.4-alpha-generic - Linux 3.2 for Alpha
linux-image-3.2.0-0.bpo.4-alpha-legacy - Linux 3.2 for Alpha Legacy
linux-image-3.2.0-0.bpo.4-alpha-smp - Linux 3.2 for Alpha SMP
linux-image-3.2.0-0.bpo.4-amd64-dbg - Debugging symbols for Linux 3.2.0-0.bpo.4-amd64
linux-image-3.2.0-0.bpo.4-amd64 - Linux 3.2 for 64-bit PCs
linux-image-3.2.0-0.bpo.4-amiga - Linux 3.2 for Amiga
linux-image-3.2.0-0.bpo.4-atari - Linux 3.2 for Atari
linux-image-3.2.0-0.bpo.4-bvme6000 - Linux 3.2 for BVM BVME4000 and BVME6000
linux-image-3.2.0-0.bpo.4-iop32x - Linux 3.2 for IOP32x
linux-image-3.2.0-0.bpo.4-itanium - Linux 3.2 for Itanium
linux-image-3.2.0-0.bpo.4-ixp4xx - Linux 3.2 for IXP4xx
linux-image-3.2.0-0.bpo.4-kirkwood - Linux 3.2 for Marvell Kirkwood
linux-image-3.2.0-0.bpo.4-loongson-2f - Linux 3.2 for Loongson 2F
linux-image-3.2.0-0.bpo.4-mac - Linux 3.2 for Macintosh
linux-image-3.2.0-0.bpo.4-mckinley - Linux 3.2 for Itanium II
linux-image-3.2.0-0.bpo.4-mv78xx0 - Linux 3.2 for Marvell 78xx0
linux-image-3.2.0-0.bpo.4-mvme147 - Linux 3.2 for Motorola MVME147
linux-image-3.2.0-0.bpo.4-mvme16x - Linux 3.2 for Motorola MVME162/6/7, MVME172/7
linux-image-3.2.0-0.bpo.4-mx5 - Linux 3.2 for Freescale i.MX51/53
linux-image-3.2.0-0.bpo.4-octeon - Linux 3.2 for Octeon
linux-image-3.2.0-0.bpo.4-omap - Linux 3.2 for TI OMAP3+
linux-image-3.2.0-0.bpo.4-orion5x - Linux 3.2 for Marvell Orion
linux-image-3.2.0-0.bpo.4-parisc64 - Linux 3.2 for 64-bit PA-RISC
linux-image-3.2.0-0.bpo.4-parisc64-smp - Linux 3.2 for multiprocessor 64-bit PA-RISC
linux-image-3.2.0-0.bpo.4-parisc - Linux 3.2 for 32-bit PA-RISC
linux-image-3.2.0-0.bpo.4-parisc-smp - Linux 3.2 for multiprocessor 32-bit PA-RISC
linux-image-3.2.0-0.bpo.4-powerpc64 - Linux 3.2 for 64-bit PowerPC
linux-image-3.2.0-0.bpo.4-powerpc - Linux 3.2 for uniprocessor 32-bit PowerPC
linux-image-3.2.0-0.bpo.4-powerpc-smp - Linux 3.2 for multiprocessor 32-bit PowerPC
linux-image-3.2.0-0.bpo.4-r4k-ip22 - Linux 3.2 for SGI IP22
linux-image-3.2.0-0.bpo.4-r5k-cobalt - Linux 3.2 for Cobalt
linux-image-3.2.0-0.bpo.4-r5k-ip32 - Linux 3.2 for SGI IP32
linux-image-3.2.0-0.bpo.4-rt-686-pae-dbg - Debugging symbols for Linux 3.2.0-0.bpo.4-rt-686-pae
linux-image-3.2.0-0.bpo.4-rt-686-pae - Linux 3.2 for modern PCs, PREEMPT_RT
linux-image-3.2.0-0.bpo.4-rt-amd64-dbg - Debugging symbols for Linux 3.2.0-0.bpo.4-rt-amd64
linux-image-3.2.0-0.bpo.4-rt-amd64 - Linux 3.2 for 64-bit PCs, PREEMPT_RT
linux-image-3.2.0-0.bpo.4-s390x-dbg - Debugging symbols for Linux 3.2.0-0.bpo.4-s390x
linux-image-3.2.0-0.bpo.4-s390x - Linux 3.2 for IBM zSeries
linux-image-3.2.0-0.bpo.4-s390x-tape - Linux 3.2 for IBM zSeries, IPL from tape
linux-image-3.2.0-0.bpo.4-sb1a-bcm91480b - Linux 3.2 for BCM91480B
linux-image-3.2.0-0.bpo.4-sb1-bcm91250a - Linux 3.2 for BCM91250A
linux-image-3.2.0-0.bpo.4-sh7751r - Linux 3.2 for sh7751r
linux-image-3.2.0-0.bpo.4-sh7785lcr - Linux 3.2 for sh7785lcr
linux-image-3.2.0-0.bpo.4-sparc64 - Linux 3.2 for uniprocessor 64-bit UltraSPARC
linux-image-3.2.0-0.bpo.4-sparc64-smp - Linux 3.2 for multiprocessor 64-bit UltraSPARC
linux-image-3.2.0-0.bpo.4-versatile - Linux 3.2 for Versatile
linux-image-3.2.0-0.bpo.4-vexpress - Linux 3.2 for ARM Ltd. Versatile Express
linux-libc-dev - Linux support headers for userspace development
linux-manual-3.2 - Linux kernel API manual pages for version 3.2
linux-source-3.2 - Linux kernel source for version 3.2 with Debian patches
linux-support-3.2.0-0.bpo.4 - Support files for Linux 3.2
xen-linux-system-3.2.0-0.bpo.4-686-pae - Xen system with Linux 3.2 on modern PCs (meta-package)
xen-linux-system-3.2.0-0.bpo.4-amd64 - Xen system with Linux 3.2 on 64-bit PCs (meta-package)
Changes:
linux (3.2.63-2+deb7u1~bpo60+1) squeeze-backports; urgency=medium
.
* Rebuild for squeeze:
- Use gcc-4.4 for all architectures
- Disable building of udebs
- Change ABI number to 0.bpo.4
- Monkey-patch Python collections module to add OrderedDict if necessary
- [armel] Disable CRYPTO_FIPS, VGA_ARB, FTRACE on iop32x and ixp4xx to
reduce kernel size (as suggested by Arnaud Patard)
- Use QUILT_PATCH_OPTS instead of missing quilt patch --fuzz option
- Make build target depend on build-arch only, so we don't redundantly
build documentation on each architecture
.
linux (3.2.63-2+deb7u1) wheezy-security; urgency=high
.
* drivers/net,ipv6: Fix virtio/IPv6 regression in 3.2.63:
- ipv6: reuse ip6_frag_id from ip6_ufo_append_data (Closes: #766195)
(CVE-2014-7207)
- drivers/net: Disable UFO through virtio
- drivers/net,ipv6: Select IPv6 fragment idents for virtio UFO packets
* [x86] KVM: Check non-canonical addresses upon WRMSR (CVE-2014-3610)
* [x86] KVM: Improve thread safety in pit (CVE-2014-3611)
* [x86] KVM: nEPT: Nested INVEPT (CVE-2014-3645)
* [x86] kvm: vmx: handle invvpid vm exit gracefully (CVE-2014-3646)
* [x86] KVM: emulator: Use opcode::execute for CALL
* [x86] KVM: Fix wrong masking on relative jump/call
* [x86] KVM: Emulator fixes for eip canonical checks on near branches
(CVE-2014-3647)
* [x86] KVM: use new CS.RPL as CPL during task switch
* [x86] KVM: Handle errors when RIP is set during far jumps (CVE-2014-3647)
* net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks
(CVE-2014-3673)
* net: sctp: fix panic on duplicate ASCONF chunks (CVE-2014-3687)
* net: sctp: fix remote memory pressure from excessive queueing
(CVE-2014-3688)
* [x86] kvm,vmx: Preserve CR4 across VM entry (CVE-2014-3690)
.
linux (3.2.63-2) wheezy; urgency=medium
.
* [s390*] Ignore ABI change in lowcore structure (fixes FTBFS)
.
linux (3.2.63-1) wheezy; urgency=medium
.
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61
- mm: highmem: don't treat PKMAP_ADDR(LAST_PKMAP) as a highmem address
- UBIFS: fix an mmap and fsync race condition
- HID: core: fix validation of report id 0
- IB/srp: Fix a sporadic crash triggered by cable pulling
- reiserfs: drop vmtruncate
- reiserfs: call truncate_setsize under tailpack mutex
- [arm] 8051/1: put_user: fix possible data corruption in put_user
- ext4: fix zeroing of page during writeback
- ext4: fix wrong assert in ext4_mb_normalize_request()
- USB: sierra: fix remote wakeup
- USB: option: fix runtime PM handling
- USB: usb_wwan: fix race between write and resume
- USB: usb_wwan: fix write and suspend race
- USB: usb_wwan: fix urb leak at shutdown
- USB: cdc-acm: Fix various bugs in power management
- USB: io_ti: fix firmware download on big-endian machines (part 2)
- md: always set MD_RECOVERY_INTR when aborting a reshape or other
"resync".
- [s390] lowcore: reserve 96 bytes for IRB in lowcore
- rtmutex: Fix deadlock detector for real
- xhci: delete endpoints from bandwidth list before freeing whole device
- IB/umad: Fix error handling
- RDMA/cxgb4: Fix four byte info leak in c4iw_create_cq()
- nfsd: getattr for FATTR4_WORD0_FILES_AVAIL needs the statfs buffer
- UBIFS: Remove incorrect assertion in shrink_tnc()
- nfsd4: use recall_lock for delegation hashing
- iscsi-target: Reject mutual authentication with reflected CHAP_C
- ptrace: fix fork event messages across pid namespaces
- idr: fix overflow bug during maximum ID calculation at maximum height
- Input: synaptics - fix resolution for manually provided min/max
(regression in 3.2.57)
- nfsd4: fix FREE_STATEID lockowner leak (regression in 3.2.60)
- Btrfs: fix double free in find_lock_delalloc_range
- mm: rmap: fix use-after-free in __put_anon_vma
- rtmutex: Handle deadlock detection smarter
- rtmutex: Detect changes in the pi lock chain
- rtmutex: Plug slow unlock race
- Bluetooth: Fix check for connection encryption
- Bluetooth: Fix SSP acceptor just-works confirmation without MITM
- tracing: Fix syscall_*regfunc() vs copy_process() race
- lib/lzo: Update LZO compression to current upstream version
- lzo: properly check for overruns (CVE-2014-4608)
- hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned
entry
- mm: fix crashes from mbind() merging vmas
- [mips] MSC: Prevent out-of-bounds writes to MIPS SC ioremap'd region
- SCSI: Stop accepting SCSI requests before removing a device
- SCSI: fix our current target reap infrastructure
- SCSI: dual scan thread bug fix
- perf: Fix race in removing an event
- netlink: rate-limit leftover bytes warning and print process name
- net: tunnels - enable module autoloading
- net: fix inet_getid() and ipv6_select_ident() bugs
- target: Explicitly clear ramdisk_mcp backend pages
- iommu/vt-d: Fix missing IOTLB flush in intel_iommu_unmap()
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.62
- ibmvscsi: Add memory barriers for send / receive
- cpuset,mempolicy: fix sleeping function called from invalid context
- nfsd: fix rare symlink decoding bug
- md: flush writes before starting a recovery.
- drm/vmwgfx: Fix incorrect write to read-only register v2:
(regression in 3.2.58)
- ACPI / EC: Avoid race condition related to advance_transaction()
- ACPI / EC: Fix race condition in ec_transaction_completed()
- hwmon: (adm1031) Fix writes to limit registers
- alarmtimer: Fix bug where relative alarm timers were treated as absolute
- dm io: fix a race condition in the wake up code for sync_io
- sched: Fix possible divide by zero in avg_atom() calculation
- locking/mutex: Disable optimistic spinning on some architectures
- hwmon: (adt7470) Fix writes to temperature limit registers
- usb: Check if port status is equal to RxDetect (regression in 3.2.38)
- tcp: fix tcp_match_skb_to_sack() for unaligned SACK at end of an skb
- igmp: fix the problem when mc leave group
- appletalk: Fix socket referencing in skb
- net: sctp: fix information leaks in ulpevent layer
- dns_resolver: assure that dns_query() result is null-terminated
- dns_resolver: Null-terminate the right string
- rtnetlink: fix userspace API breakage for iproute2 < v3.9.0
(regression in 3.2.45)
- netfilter: ipt_ULOG: fix info leaks
- xfs: fix allocbt cursor leak in xfs_alloc_ag_vextent_near
- xfs: really fix the cursor leak in xfs_alloc_ag_vextent_near
- shmem: fix faulting into a hole, not taking i_mutex (CVE-2014-4171)
- shmem: fix splicing from a hole while it's punched (CVE-2014-4171)
- [x86] x86-32, espfix: Remove filter for espfix32 due to race
- sym53c8xx_2: Set DID_REQUEUE return code when aborting squeue
- mm: hugetlb: fix copy_hugetlb_page_range() (regression in 3.2.61)
- [arm*] 7668/1: fix memset-related crashes caused by recent GCC (4.7.2)
optimizations
- [arm*] 7670/1: fix the memset fix
- ceph: fix overflow check in build_snap_context()
- libata: support the ata host which implements a queue depth less than 32
(regression in 3.2.59)
- libata: introduce ata_host->n_tags to avoid oops on SAS controllers
- [x86] x86_32, entry: Store badsys error code in %eax
(regression in 3.2.60-1)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.63
- [x86] KVM: Inter-privilege level ret emulation is not implemeneted
- block: don't assume last put of shared tags is for the host
- debugfs: Fix corrupted loop in debugfs_remove_recursive
- mtd/ftl: fix the double free of the buffers allocated in build_maps()
- [x86] don't exclude low BIOS area when allocating address space for
non-PCI cards (regression in 2.6.37)
- scsi: handle flush errors properly
- hwmon: (smsc47m192) Fix temperature limit and vrm write operations
- staging: vt6655: Fix Warning on boot handle_irq_event_percpu.
- [mips,powerpc] bfa: Fix undefined bit shift on big-endian architectures
with 32-bit DMA address
- Drivers: scsi: storvsc: Implement a eh_timed_out handler
- iommu/vt-d: Exclude devices using RMRRs from IOMMU API domains
- net: sendmsg: fix NULL pointer dereference
- hwmon: (ads1015) Fix off-by-one for valid channel index checking
- [mips*] tlbex: Fix a missing statement for HUGETLB
- [mips*] Prevent user from setting FCSR cause bits
- md/raid1,raid10: always abort recover on write error.
- ext4: fix ext4_discard_allocated_blocks() if we can't allocate the pa
struct
- hwmon: (lm85) Fix various errors on attribute writes
- hwmon: (amc6821) Fix possible race condition bug
- crypto: af_alg - properly label AF_ALG socket
- mnt: Change the default remount atime from relatime to the existing value
- netlabel: fix a problem when setting bits below the previously lowest bit
- ALSA: virtuoso: Xonar DSX support (Closes: #721346)
- hwmon: (ads1015) Fix out-of-bounds array access
- [s390*] locking: Reenable optimistic spinning
- ring-buffer: Always reset iterator to reader page
- reiserfs: Fix use after free in journal teardown
- [powerpc*] mm: Use read barrier when creating real_pte
- Btrfs: fix csum tree corruption, duplicate and outdated checksums
- CIFS: Fix wrong directory attributes after rename
- md/raid6: avoid data corruption during recovery of double-degraded RAID6
- iommu/amd: Fix cleanup_domain for mass device removal
- pata_scc: propagate return value of scc_wait_after_reset
- kvm: iommu: fix the third parameter of kvm_iommu_put_pages
(CVE-2014-3601)
- [mips*/octeon] make get_system_type() thread-safe
- xhci: rework cycle bit checking for new dequeue pointers
(regression in 3.2.59)
- isofs: Fix unbounded recursion when processing relocated directories
(CVE-2014-5471, CVE-2014-5472)
- HID: logitech: perform bounds checking on device_id early enough
(CVE-2014-3182)
- USB: whiteheat: Added bounds checking for bulk command response
(CVE-2014-3183, CVE-2014-3184, CVE-2014-3185)
- HID: logitech-dj: prevent false errors to be shown
- ACPI / EC: Add support to disallow QR_EC to be issued when SCI_EVT isn't
set (regression in 3.2.62)
- HID: magicmouse: sanity check report size in raw_event() callback
(CVE-2014-3181)
- HID: picolcd: sanity check report size in raw_event() callback
(CVE-2014-3186)
- [armhf] 8128/1: abort: don't clear the exclusive monitors
- [armhf] 8129/1: errata: work around Cortex-A15 erratum 830321 using dummy
strex
- USB: serial: fix potential stack buffer overflow
- USB: serial: fix potential heap buffer overflow
- [mips*] Fix accessing to per-cpu data when flushing the cache
- inetpeer: get rid of ip_id_count
- ip: make IP identifiers less predictable
- tcp: Fix integer-overflows in TCP veno
- tcp: Fix integer-overflow in TCP vegas
- net: sctp: inherit auth_capable on INIT collisions (CVE-2014-5077)
- iovec: make sure the caller actually wants anything in
memcpy_fromiovecend
- sctp: fix possible seqlock seadlock in sctp_packet_transmit()
- [sparc] Fix argument sign extension for compat_sys_futex().
- [sparc] Handle 32-bit tasks properly in compute_effective_address().
- [sparc] Fix top-level fault handling bugs.
- [sparc] Don't bark so loudly about 32-bit tasks generating 64-bit fault
addresses.
- [sparc] Fix huge TSB mapping on pre-UltraSPARC-III cpus.
- [sparc] Add membar to Niagara2 memcpy code.
- [sparc] Do not insert non-valid PTEs into the TSB hash table.
- [sparc] arch/sparc/math-emu/math_32.c: drop stray break operator
- [amd64] Revert "x86-64, modify_ldt: Make support for 16-bit segments a
runtime option"
- [amd64] x86-64, espfix: Don't leak bits 31:16 of %esp returning to 16-bit
stack
- [amd64] x86_64/entry/xen: Do not invoke espfix64 on Xen
- [amd64] x86/espfix/xen: Fix allocation of pages for paravirt page tables
.
[ Ben Hutchings ]
* drm, agp: Update to 3.4.103:
- drm/radeon: only apply hdmi bpc pll flags when encoder mode is hdmi
- drm/radeon: fix typo in radeon_connector_is_dp12_capable()
- drm/radeon/atom: fix dithering on certain panels
- drm/vmwgfx: Fix incorrect write to read-only register v2:
- drm/radeon: stop poisoning the GART TLB
* nfsd: Fix ACL null pointer deref (thanks to Sergio Gelato)
(Closes: #754420)
* ext4: fix BUG_ON in mb_free_blocks() (regression in 3.2.63)
* udf: Avoid infinite loop when processing indirect ICBs (CVE-2014-6410)
* libceph: do not hard code max auth ticket len (CVE-2014-6416,
CVE-2014-6417, CVE-2014-6418)
* sp5100_tco: Reject SB8x0 chips (Closes: #726150)
* udeb: Add pata_rdc to pata-modules (Closes: #633128)
.
[ Cyril Brulebois ]
* udeb: Add virtio_scsi to virtio-modules (Closes: #756249).
Checksums-Sha1:
7e3dd563fd0fb05f7ddd3aa580c3e62216d4ec3d 15711 linux_3.2.63-2+deb7u1~bpo60+1.dsc
803929937252089656f7ff3ad3edf47abdd993a1 3416896 linux_3.2.63-2+deb7u1~bpo60+1.debian.tar.xz
1f72ac3ecd9039d4115b39bf79b165374d6a6ab1 6460262 linux-doc-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
4fd74e9a57fd9572ad0edaf297559bef59a9addd 239980 linux-support-3.2.0-0.bpo.4_3.2.63-2+deb7u1~bpo60+1_all.deb
1f9de9b79a83b7cf19883f3aa110f50d37255b7e 2971060 linux-manual-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
742c3c28eb08e48f06dbba778268113166c05ebd 77492804 linux-source-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
Checksums-Sha256:
bac46d9b41ff37a24b4957f652dfab215cb42718f950a7c2fd7ba388f7ca1dcc 15711 linux_3.2.63-2+deb7u1~bpo60+1.dsc
b69712c07d89160cea4587dd7493c957cda719248055dc6a035bf729c562ab0b 3416896 linux_3.2.63-2+deb7u1~bpo60+1.debian.tar.xz
7a39664bde755adfbccf006cf508f6e83fd14cc1e77cc5bcb85ac580ec5005ef 6460262 linux-doc-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
4600730fe1e505ca76553203e4f82145491c3bba23dc7de55fbd1ddc169ec8d5 239980 linux-support-3.2.0-0.bpo.4_3.2.63-2+deb7u1~bpo60+1_all.deb
d87239f9af425abd09b4bef31d34c1932d7b1efdc90c04b3a680a9525c9659d9 2971060 linux-manual-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
0c0ab4d9dd7ca55bb14d0fd3cfe3bdd54d7d63c2690aa0bfcd40db56ce29031a 77492804 linux-source-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
Files:
c7bfbad182143d5538c5255167797aca 15711 kernel optional linux_3.2.63-2+deb7u1~bpo60+1.dsc
5cade518dd2eccc905e22fb3c52f112e 3416896 kernel optional linux_3.2.63-2+deb7u1~bpo60+1.debian.tar.xz
a6e469a744a1e2be9f859217b0860451 6460262 doc optional linux-doc-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
43320e4d0f34f14f92ddd9a1bcc4150a 239980 devel optional linux-support-3.2.0-0.bpo.4_3.2.63-2+deb7u1~bpo60+1_all.deb
1047cfafd32cb28a7157b2ac490268b1 2971060 doc optional linux-manual-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
faedd5f39b8fabc4a426b1a8d65749e9 77492804 kernel optional linux-source-3.2_3.2.63-2+deb7u1~bpo60+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=JGio
-----END PGP SIGNATURE-----
Reply to: