linux/meta-nfv-access-bsp-arm.git, branch krogoth

kernel: CVE-2016-10229

2017-05-18T14:06:07+00:00

Reference: https://nvd.nist.gov/vuln/detail/CVE-2016-10229 Rference to upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?h=v3.12.74&id=c3bfbecb1bb575278ce4812746a29c04875a2926 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: tty: CVE-2017-2636

2017-04-19T09:35:23+00:00

tty: n_hdlc: get rid of racy n_hdlc.tbuf Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636 Reference to upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/patch/?id=63075fbddd5151d2e98fa7cf0608a2113e23607d Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: tty: n_hdlc, fix lockdep false positive

2017-04-19T09:35:12+00:00

We need this patch to be able to cherry-pick the patch for CVE-2017-2636 from later version. Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: scsi: aacraid: CVE-2016-6480

2016-11-03T13:10:34+00:00

Fixes double fetch in ioctl_send_fib(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480 Upstream bug: https://bugzilla.kernel.org/show_bug.cgi?id=116751 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=bcc85e09fc60d2e99053eae3fd0515c343189375 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-5195

2016-10-24T12:56:09+00:00

Fixes privilege escalation via MAP_PRIVATE COW breakage. References: =========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5195 http://www.securityfocus.com/bid/93793 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-3136

2016-09-13T13:43:31+00:00

Crash on invalid USB device descriptors (mct_u232 driver) Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3136 Reference to upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=f9dbb3666b3ddb5f9a7e44a433383cb6880a03f5 Signen-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel-net: CVE-2016-5696

2016-08-22T12:55:50+00:00

tcp: make challenge acks less predictable net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696 https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=860c53258e634c54f70252c352bae7bac30724a9 Signed-off-by: Sona Sarmadi Signed-off-by: Martin Borg

kernel/drivers/ppp: CVE-2015-8569

2016-08-01T08:56:37+00:00

Fixes an out-of-bounds flaw in the kernel where the length of the sockaddr parameter was not checked in the pptp_bind() and pptp_connect() functions. A local system user could exploit this flaw to bypass kernel ASLR or leak other information. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8569 Upstream patch: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=d470ffbe3fe914d176ced4cf330a297c523c5711 Signed-off-by: Sona Sarmadi Signed-off-by: Nora Björklund

README: Update maintainers and contribution information

2016-07-04T14:18:37+00:00

Signed-off-by: Adrian Dudau

linux-ls1: enable IKCONFIG feature

2016-06-27T13:07:04+00:00

Provide gzip-compressed kernel configuration file at run-time which stores the kernel config file used to build the kernel. Signed-off-by: Stefan Sicleru Signed-off-by: Martin Borg