Linux 2.6.16.38
From: Adrian Bunk
Date: Sun Jan 21 2007 - 11:09:29 EST
Security fixes since 2.6.16.37:
- CVE-2006-4814: Fix incorrect user space access locking in mincore()
- CVE-2006-5173: i386: save/restore eflags in context switch
- CVE-2006-5749: Call init_timer() for ISDN PPP CCP reset state timer
- CVE-2006-5755: x86_64: Don't leak NT bit into next task
- CVE-2006-5757/CVE-2006-6060: grow_buffers() infinite loop fix
- CVE-2006-5823: corrupted cramfs filesystems cause kernel oops
- CVE-2006-6053: handle ext3 directory corruption better
- CVE-2006-6054: ext2: skip pages past number of blocks in ext2_find_entry
- CVE-2006-6056: hfs_fill_super returns success even if no root inode
- CVE-2006-6106: Bluetooth: Add packet size checks for CAPI messages
Location:
ftp://ftp.kernel.org/pub/linux/kernel/v2.6/
git tree:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
RSS feed of the git tree:
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=rss
Changes since 2.6.16.37:
Adrian Bunk (6):
fix the UML compilation
USB_RTL8150 must select MII to avoid link errors.
x86_64: re-add a newline to RESTORE_CONTEXT
Linux 2.6.16.38-rc1
Linux 2.6.16.38-rc2
Linux 2.6.16.38
Andi Kleen (1):
x86_64: Don't leak NT bit into next task (CVE-2006-5755)
Andrew Morton (2):
grow_buffers() infinite loop fix (CVE-2006-5757/CVE-2006-6060)
ibmtr section fixes
Andrey Mirkin (1):
skip data conversion in compat_sys_mount when data_page is NULL
Arnaud Patard (1):
ALSA: emu10k1: Fix outl() in snd_emu10k1_resume_regs()
Badari Pulavarty (1):
Fix for shmem_truncate_range() BUG_ON()
Chuck Ebbert (2):
x86_64: fix ia32 syscall count
ebtables: check struct type before computing gap
Chuck Short (1):
drm: allow detection of new VIA chipsets
Clemens Ladisch (1):
ALSA: snd_rtctimer: handle RTC interrupts with a tasklet
Dave Airlie (1):
drm: Add the P4VM800PRO PCI ID.
David Brownell (1):
SPI/MTD: mtd_dataflash oops prevention
David L Stevens (1):
[IPV4/IPV6]: Fix inet{,6} device initialization order.
David S. Miller (1):
[SOUND] Sparc CS4231: Use 64 for period_bytes_min
Dirk Eibach (1):
i2c: fix broken ds1337 initialization
Eric Sandeen (3):
hfs_fill_super returns success even if no root inode (CVE-2006-6056)
ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054)
handle ext3 directory corruption better (CVE-2006-6053)
Fabrice Knevez (1):
[SUNKBD]: Fix sunkbd_enable(sunkbd, 0); obvious.
Georg Chini (1):
[SOUND] Sparc CS4231: Fix IRQ return value and initialization.
Jason Gaston (2):
PCI: irq: irq and pci_ids patch for Intel ICH9
i2c-i801: SMBus patch for Intel ICH9
Jean Delvare (1):
V4L: cx88: Fix leadtek_eeprom tagging
John Heffner (1):
TCP: Fix and simplify microsecond rtt sampling
Linus Torvalds (2):
Fix incorrect user space access locking in mincore() (CVE-2006-4814)
i386: save/restore eflags in context switch (CVE-2006-5173)
Marcel Holtmann (2):
Call init_timer() for ISDN PPP CCP reset state timer (CVE-2006-5749)
Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)
Maxime Bizon (1):
i2c-mv64xxx: Fix random oops at boot
Mikael Pettersson (1):
USB: Fix alignment of buffer passed down to ->hub_control()
Miklos Szeredi (1):
fuse: fix hang on SMP
Paolo 'Blaisorblade' Giarrusso (2):
uml: fix processor selection
UML: fix the MODE_TT compilation
Patrick McHardy (1):
NET_SCHED: Fix fallout from dev->qdisc RCU change
Peter Zijlstra (1):
rtc: lockdep fix/workaround
Phillip Lougher (1):
corrupted cramfs filesystems cause kernel oops (CVE-2006-5823)
Robert Olsson (1):
[PKTGEN]: Fix module load/unload races.
Rudolf Marek (1):
i2c-viapro: Add support for the VT8237A and VT8251
Takashi Iwai (1):
ALSA: Fix initiailization of user-space controls
Willy Tarreau (1):
rio: typo in bitwise AND expression.
YOSHIFUJI Hideaki (1):
[IPV6] Fix joining all-node multicast group.
Documentation/i2c/busses/i2c-viapro | 7
Makefile | 2
arch/i386/Kconfig.cpu | 3
arch/i386/kernel/entry.S | 2
arch/i386/pci/irq.c | 6
arch/um/os-Linux/process.c | 5
arch/um/os-Linux/skas/process.c | 1
arch/x86_64/kernel/entry.S | 4
arch/x86_64/kernel/setup64.c | 4
drivers/char/drm/drm_pciids.h | 4
drivers/char/rio/rio_linux.c | 2
drivers/char/rtc.c | 5
drivers/i2c/busses/Kconfig | 19 +-
drivers/i2c/busses/i2c-i801.c | 2
drivers/i2c/busses/i2c-mv64xxx.c | 4
drivers/i2c/busses/i2c-viapro.c | 8 +
drivers/i2c/chips/ds1337.c | 8 -
drivers/input/keyboard/sunkbd.c | 2
drivers/isdn/i4l/isdn_ppp.c | 1
drivers/media/video/cx88/cx88-cards.c | 2
drivers/mtd/devices/mtd_dataflash.c | 2
drivers/net/tokenring/ibmtr.c | 4
drivers/usb/core/hcd.c | 3
drivers/usb/net/Kconfig | 1
fs/buffer.c | 21 ++
fs/compat.c | 2
fs/cramfs/inode.c | 2
fs/ext2/dir.c | 8 +
fs/ext3/dir.c | 3
fs/ext3/namei.c | 9 +
fs/fuse/dir.c | 29 ++--
fs/fuse/file.c | 12 +
fs/fuse/inode.c | 4
fs/hfs/super.c | 2
include/asm-i386/system.h | 8 -
include/asm-x86_64/ia32_unistd.h | 2
include/asm-x86_64/system.h | 22 ++-
include/linux/pci_ids.h | 7
mm/mincore.c | 183 +++++++++++---------------
mm/shmem.c | 7
net/bluetooth/cmtp/capi.c | 39 ++++-
net/bridge/netfilter/ebtables.c | 3
net/core/dev.c | 14 +
net/core/pktgen.c | 20 ++
net/ipv4/devinet.c | 5
net/ipv4/tcp_input.c | 16 +-
net/ipv6/addrconf.c | 12 +
net/ipv6/mcast.c | 6
net/sched/cls_api.c | 4
net/sched/sch_api.c | 16 +-
net/sched/sch_generic.c | 66 ++-------
sound/core/control.c | 1
sound/core/rtctimer.c | 17 +-
sound/pci/emu10k1/emu10k1_main.c | 4
sound/sparc/cs4231.c | 26 +--
55 files changed, 409 insertions(+), 262 deletions(-)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/