| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 6 Jan 2015 18:06:28 -0800
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-kernel@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, satoru.takeuchi@...il.com,
shuah.kh@...sung.com, stable@...r.kernel.org
Subject: [PATCH 3.14 00/52] 3.14.28-stable review
This is the start of the stable review cycle for the 3.14.28 release.
There are 52 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri Jan 9 02:05:23 UTC 2015.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v3.0/stable-review/patch-3.14.28-rc1.gz
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 3.14.28-rc1
Filipe Manana <fdmanana@...e.com>
Btrfs: fix fs corruption on transaction abort if device supports discard
Josef Bacik <jbacik@...com>
Btrfs: do not move em to modified list when unpinning
Michael Halcrow <mhalcrow@...gle.com>
eCryptfs: Remove buggy and unnecessary write in file name decode routine
Tyler Hicks <tyhicks@...onical.com>
eCryptfs: Force RO mount when encrypted view is enabled
Jan Kara <jack@...e.cz>
udf: Verify symlink size before loading it
Oleg Nesterov <oleg@...hat.com>
exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting
Jan Kara <jack@...e.cz>
ncpfs: return proper error from NCP_IOC_SETROOT ioctl
Rabin Vincent <rabin.vincent@...s.com>
crypto: af_alg - fix backlog handling
Richard Guy Briggs <rgb@...hat.com>
audit: restore AUDIT_LOGINUID unset ABI
Eric W. Biederman <ebiederm@...ssion.com>
userns: Unbreak the unprivileged remount tests
Eric W. Biederman <ebiederm@...ssion.com>
userns: Allow setting gid_maps without privilege when setgroups is disabled
Eric W. Biederman <ebiederm@...ssion.com>
userns: Add a knob to disable setgroups on a per user namespace basis
Eric W. Biederman <ebiederm@...ssion.com>
userns: Rename id_map_mutex to userns_state_mutex
Eric W. Biederman <ebiederm@...ssion.com>
userns: Only allow the creator of the userns unprivileged mappings
Eric W. Biederman <ebiederm@...ssion.com>
userns: Check euid no fsuid when establishing an unprivileged uid mapping
Eric W. Biederman <ebiederm@...ssion.com>
userns: Don't allow unprivileged creation of gid mappings
Eric W. Biederman <ebiederm@...ssion.com>
userns: Don't allow setgroups until a gid mapping has been setablished
Eric W. Biederman <ebiederm@...ssion.com>
userns: Document what the invariant required for safe unprivileged mappings.
Eric W. Biederman <ebiederm@...ssion.com>
groups: Consolidate the setgroups permission checks
Eric W. Biederman <ebiederm@...ssion.com>
umount: Disallow unprivileged mount force
Eric W. Biederman <ebiederm@...ssion.com>
mnt: Update unprivileged remount test
Eric W. Biederman <ebiederm@...ssion.com>
mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount
Luis Henriques <luis.henriques@...onical.com>
thermal: Fix error path in thermal_init()
Eric W. Biederman <ebiederm@...ssion.com>
mnt: Fix a memory stomp in umount
Johannes Berg <johannes.berg@...el.com>
mac80211: free management frame keys when removing station
Andreas Müller <goo@...pelspeicher.org>
mac80211: fix multicast LED blinking and counter
Takashi Iwai <tiwai@...e.de>
KEYS: Fix stale key registration at error path
Jan Kara <jack@...e.cz>
isofs: Fix unchecked printing of ER records
Andy Lutomirski <luto@...capital.net>
x86/tls: Don't validate lm in set_thread_area() after all
Uwe Kleine-König <u.kleine-koenig@...gutronix.de>
ARM: mvebu: fix ordering in Armada 370 .dtsi
Dmitry Osipenko <digetx@...il.com>
ARM: tegra: Re-add removed SoC id macro to tegra_resume()
Catalin Marinas <catalin.marinas@....com>
arm64: Add COMPAT_HWCAP_LPAE
Joe Thornber <ejt@...hat.com>
dm thin: fix missing out-of-data-space to write mode transition if blocks are released
Joe Thornber <ejt@...hat.com>
dm thin: fix inability to discard blocks when in out-of-data-space mode
Dan Carpenter <dan.carpenter@...cle.com>
dm space map metadata: fix sm_bootstrap_get_nr_blocks()
Joe Thornber <ejt@...hat.com>
dm cache: dirty flag was mistakenly being cleared when promoting via overwrite
Joe Thornber <ejt@...hat.com>
dm cache: only use overwrite optimisation for promotion when in writeback mode
Milan Broz <gmazyland@...il.com>
dm crypt: use memzero_explicit for on-stack buffer
Darrick J. Wong <darrick.wong@...cle.com>
dm bufio: fix memleak when using a dm_buffer's inline bio
Peng Tao <tao.peng@...marydata.com>
nfs41: fix nfs4_proc_layoutget error handling
Hannes Reinecke <hare@...e.de>
scsi: correct return values for .eh_abort_handler implementations
Sumit.Saxena@...gotech.com <Sumit.Saxena@...gotech.com>
megaraid_sas: corrected return of wait_event from abort frame path
Peter Guo <peter.guo@...hubtech.com>
mmc: sdhci-pci-o2micro: Fix Dell E5440 issue
Baruch Siach <baruch@...s.co.il>
mmc: block: add newline to sysfs display of force_ro
James Hogan <james.hogan@...tec.com>
mmc: dw_mmc: avoid write to CDTHRCTL on older versions
Dmitry Eremin-Solenikov <dbaryshkov@...il.com>
mfd: tc6393xb: Fail ohci suspend if full state restore is required
NeilBrown <neilb@...e.de>
md/bitmap: always wait for writes on unplug.
Andy Lutomirski <luto@...capital.net>
x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit
Andy Lutomirski <luto@...capital.net>
x86_64, switch_to(): Load TLS descriptors before switching DS and ES
Andy Lutomirski <luto@...capital.net>
x86/tls: Disallow unusual TLS segments
Andy Lutomirski <luto@...capital.net>
x86/tls: Validate TLS entries to protect espfix
Jan Kara <jack@...e.cz>
isofs: Fix infinite looping over CE entries
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/armada-370.dtsi | 10 +-
arch/arm/mach-tegra/reset-handler.S | 1 +
arch/arm64/include/asm/hwcap.h | 1 +
arch/arm64/kernel/setup.c | 3 +-
arch/s390/kernel/compat_linux.c | 2 +-
arch/x86/include/uapi/asm/ldt.h | 7 +
arch/x86/kernel/kvm.c | 9 +-
arch/x86/kernel/kvmclock.c | 1 -
arch/x86/kernel/process_64.c | 101 +++++++---
arch/x86/kernel/tls.c | 39 ++++
crypto/af_alg.c | 3 +
drivers/md/bitmap.c | 16 +-
drivers/md/dm-bufio.c | 20 +-
drivers/md/dm-cache-target.c | 13 +-
drivers/md/dm-crypt.c | 2 +-
drivers/md/dm-thin.c | 24 ++-
drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
drivers/mfd/tc6393xb.c | 13 +-
drivers/mmc/card/block.c | 2 +-
drivers/mmc/host/dw_mmc.c | 7 +
drivers/mmc/host/sdhci-pci-o2micro.c | 2 -
drivers/scsi/NCR5380.c | 12 +-
drivers/scsi/aha1740.c | 2 +-
drivers/scsi/atari_NCR5380.c | 2 +-
drivers/scsi/esas2r/esas2r_main.c | 2 +-
drivers/scsi/megaraid.c | 8 +-
drivers/scsi/megaraid/megaraid_sas_base.c | 2 +-
drivers/scsi/sun3_NCR5380.c | 10 +-
drivers/thermal/thermal_core.c | 4 +-
fs/btrfs/disk-io.c | 6 -
fs/btrfs/extent-tree.c | 10 +-
fs/btrfs/extent_map.c | 2 -
fs/ecryptfs/crypto.c | 1 -
fs/ecryptfs/file.c | 12 --
fs/ecryptfs/main.c | 16 +-
fs/isofs/rock.c | 9 +
fs/namespace.c | 13 +-
fs/ncpfs/ioctl.c | 1 -
fs/nfs/nfs4proc.c | 6 +-
fs/proc/base.c | 53 ++++++
fs/udf/symlink.c | 17 +-
include/linux/audit.h | 4 +
include/linux/cred.h | 1 +
include/linux/user_namespace.h | 12 ++
kernel/auditfilter.c | 10 +
kernel/groups.c | 11 +-
kernel/pid.c | 2 +
kernel/uid16.c | 2 +-
kernel/user.c | 1 +
kernel/user_namespace.c | 125 +++++++++++--
net/mac80211/key.c | 2 +-
net/mac80211/rx.c | 11 +-
security/keys/encrypted-keys/encrypted.c | 5 +-
.../selftests/mount/unprivileged-remount-test.c | 204 +++++++++++++++++----
55 files changed, 682 insertions(+), 180 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists