linux/meta-enea-bsp-ppc.git, branch krogoth

kernel: CVE-2016-10229

2017-05-19T11:19:26+00:00

Reference: https://nvd.nist.gov/vuln/detail/CVE-2016-10229 Reference to upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?h=v3.12.74&id=c3bfbecb1bb575278ce4812746a29c04875a2926 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: tty: CVE-2017-2636

2017-04-05T15:27:11+00:00

tty: n_hdlc: get rid of racy n_hdlc.tbuf Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636 Reference to upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/patch/?id=63075fbddd5151d2e98fa7cf0608a2113e23607d Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: tty: n_hdlc, fix lockdep false positive

2017-04-05T15:26:02+00:00

We need this patch to be able to cherry-pick the patch for CVE-2017-2636 from later version. Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2017-5551

2017-02-06T09:45:55+00:00

S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix) It was found that fix for CVE-2016-7097 was incomplete as it missed tmpfs. Reference: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-5551 Reference to upstream commit (kernel.org 3.12 branch): https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=b0369e53c851f8cd87afd059d360a4f646840c8c Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-7097

2017-02-06T09:45:26+00:00

Setting a POSIX ACL via setxattr doesn't clear the setgid bit The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097 Reference to upstream commits (kernel.org 3.12 branch): https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?id=refs%2Ftags%2Fv3.12.70&qt=grep&q=posix_acl%3A+Clear+SGID+bit+when+setting+file+permissions Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

Kernel: CVE-2016-9754

2017-02-03T10:00:14+00:00

Integer overflow in ring_buffer_resize() The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9754 References to upstream patch: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59643d1535eb220668692a5359de22545af579f6 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: scsi: aacraid: CVE-2016-6480

2016-11-03T13:11:57+00:00

Fixes double fetch in ioctl_send_fib(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480 Upstream bug: https://bugzilla.kernel.org/show_bug.cgi?id=116751 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=bcc85e09fc60d2e99053eae3fd0515c343189375 Signen-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-5195

2016-10-24T12:54:06+00:00

Fixes privilege escalation via MAP_PRIVATE COW breakage. References: =========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5195 http://www.securityfocus.com/bid/93793 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-3136

2016-09-16T08:12:47+00:00

Crash on invalid USB device descriptors (mct_u232 driver) Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3136 Reference to upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=f9dbb3666b3ddb5f9a7e44a433383cb6880a03f5 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel-net: CVE-2016-5696

2016-08-22T11:06:16+00:00

tcp: make challenge acks less predictable net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696 https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=860c53258e634c54f70252c352bae7bac30724a9 Signed-off-by: Sona Sarmadi Signed-off-by: Martin Borg