linux/meta-nfv-access-bsp-common.git, branch krogoth

linux-yocto: Drop patches obsoleted by v4.4.26

2016-11-23T11:36:13+00:00

Yocto upgraded kernel version to 4.4.26, which includes the CVE fixes maintained here. Signed-off-by: Adrian Dudau Signed-off-by: Martin Borg

kernel: scsi: aacraid: CVE-2016-6480

2016-11-03T13:11:09+00:00

Fixes double fetch in ioctl_send_fib(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480 Upstream bug: https://bugzilla.kernel.org/show_bug.cgi?id=116751 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=e4878ef66e5b8d01d6734b1952f9abb3eeea454c Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel-media: CVE-2016-5400

2016-11-01T15:25:41+00:00

Fixes airspy usb probe error path Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5400 Reference to upstream patch: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=d863bec646a590584eabcb40550bff0708c26b0d Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-5195

2016-10-24T12:50:18+00:00

Fixes privilege escalation via MAP_PRIVATE COW breakage. References: =========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5195 http://www.securityfocus.com/bid/93793 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel: CVE-2016-4951

2016-10-07T12:33:16+00:00

Fixes null pointer dereference in tipc_nl_publ_dump. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4951 Reference to upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=23cdd8c3cbe9d790f23d7f9ae14e9b828f56f69c Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

kernel-net: CVE-2016-5696

2016-08-30T13:58:53+00:00

tcp: make challenge acks less predictable net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696 https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=5413f1a526d2d51d7a5768133c90936c017165c6 https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=72c2d3bccaba4a0a4de354f9d2d24eccd05bfccf (This a follow-up to "tcp: make challenge acks less predictable) Signen-off-by: Sona Sarmadi Signed-off-by: Martin Borg

kernel/drivers/hid: CVE-2016-5829

2016-07-27T12:45:52+00:00

Fixes a heap-based buffer overflow vulnerability in the Linux kernel's hiddev driver. This flaw could allow a local attacker to corrupt kernel memory or crashing the system. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5829 Upstream patch: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=f67b6920a0cf03d363c5f3bfb14f5d258168dc8c Signed-off-by: Sona Sarmadi Signed-off-by: Nora Björklund

README: Update maintainers and contribution information

2016-07-04T14:20:05+00:00

Signed-off-by: Adrian Dudau

README: fix branch name

2016-06-01T12:33:23+00:00

Replace master with krogoth branch for layer dependencies. Signed-off-by: Stefan Sicleru Signed-off-by: Adrian Dudau

linux/cfg: add config fragments to disable debug features

2016-05-23T08:30:33+00:00

New config fragments created to: - disable debugging on target. Trying to disable any type of debugging that can affect performances on target. - disable profiling. Profiling is mainly based on hooks which should not affect the performance on target. This options allow to test if profiling does affect the performance or not. - enable PreemptRT Low Latency Desktop - disable erratum for new PowerPC revisions targets Signed-off-by: Adrian Calianu Signed-off-by: Martin Borg