+linux (4.10.0-32.36) zesty; urgency=low
+
+ * CVE-2017-1000112
+ - udp: avoid ufo handling on IP payload compression packets
+ - net: account for current skb length when deciding about UFO
+ - udp: consistently apply ufo or fragmentation
+
+ * CVE-2017-1000111
+ - net-packet: fix race in packet_set_ring on PACKET_RESERVE
+
+ -- Stefan Bader <stefan.bader@canonical.com> Mon, 07 Aug 2017 12:54:42 +0200
+
+linux (4.10.0-30.34) zesty; urgency=low
+
+ * CVE-2017-7533
+ - dentry name snapshots
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Mon, 31 Jul 2017 14:27:53 -0300
+
+linux (4.10.0-29.33) zesty; urgency=low
+
+ * linux: 4.10.0-29.33 -proposed tracker (LP: #1704961)
+
+ * Opal and POWER9 DD2 (LP: #1702159)
+ - powerpc/powernv: Tell OPAL about our MMU mode on POWER9
+ - powerpc/powernv: Fix boot on Power8 bare metal due to opal_configure_cores()
+
+ * CVE-2017-1000364
+ - mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack
+ - mm/mmap.c: expand_downwards: don't require the gap if !vm_prev
+
+ * [Xenial] nvme: Quirks for PM1725 controllers (LP: #1704435)
+ - nvme: Quirks for PM1725 controllers
+
+ * hns: under heavy load, NIC may fail and require reboot (LP: #1704146)
+ - net: hns: Bugfix for Tx timeout handling in hns driver
+
+ * New ACPI identifiers for ThunderX SMMU (LP: #1703437)
+ - iommu/arm-smmu: Plumb in new ACPI identifiers
+
+ * CVE-2017-7482
+ - rxrpc: Fix several cases where a padded len isn't checked in ticket decode
+
+ * CVE-2017-1000365
+ - fs/exec.c: account for argv/envp pointers
+
+ * CVE-2017-10810
+ - drm/virtio: don't leak bo on drm_gem_object_init failure
+
+ * Data corruption with hio driver (LP: #1701316)
+ - SAUCE: hio: Fix incorrect use of enum req_opf values
+
+ * arm64: fix crash reading /proc/kcore (LP: #1702749)
+ - fs/proc: kcore: use kcore_list type to check for vmalloc/module address
+ - arm64: mm: select CONFIG_ARCH_PROC_KCORE_TEXT
+
+ * cxlflash update request in the Xenial SRU stream (LP: #1702521)
+ - scsi: cxlflash: Refactor context reset to share reset logic
+ - scsi: cxlflash: Support SQ Command Mode
+ - scsi: cxlflash: Cleanup prints
+ - scsi: cxlflash: Cancel scheduled workers before stopping AFU
+ - scsi: cxlflash: Enable PCI device ID for future IBM CXL Flash AFU
+ - scsi: cxlflash: Separate RRQ processing from the RRQ interrupt handler
+ - scsi: cxlflash: Serialize RRQ access and support offlevel processing
+ - scsi: cxlflash: Implement IRQ polling for RRQ processing
+ - scsi: cxlflash: Update sysfs helper routines to pass config structure
+ - scsi: cxlflash: Support dynamic number of FC ports
+ - scsi: cxlflash: Remove port configuration assumptions
+ - scsi: cxlflash: Hide FC internals behind common access routine
+ - scsi: cxlflash: SISlite updates to support 4 ports
+ - scsi: cxlflash: Support up to 4 ports
+ - scsi: cxlflash: Fence EEH during probe
+ - scsi: cxlflash: Remove unnecessary DMA mapping
+ - scsi: cxlflash: Fix power-of-two validations
+ - scsi: cxlflash: Fix warnings/errors
+ - scsi: cxlflash: Improve asynchronous interrupt processing
+ - scsi: cxlflash: Support multiple hardware queues
+ - scsi: cxlflash: Add hardware queues attribute
+ - scsi: cxlflash: Introduce hardware queue steering
+ - cxl: Enable PCI device IDs for future IBM CXL adapters
+ - scsi: cxlflash: Select IRQ_POLL
+ - scsi: cxlflash: Combine the send queue locks
+ - scsi: cxlflash: Update cxlflash_afu_sync() to return errno
+ - scsi: cxlflash: Reset hardware queue context via specified register
+ - scsi: cxlflash: Schedule asynchronous reset of the host
+ - scsi: cxlflash: Handle AFU sync failures
+ - scsi: cxlflash: Track pending scsi commands in each hardware queue
+ - scsi: cxlflash: Flush pending commands in cleanup path
+ - scsi: cxlflash: Add scsi command abort handler
+ - scsi: cxlflash: Create character device to provide host management interface
+ - scsi: cxlflash: Separate AFU internal command handling from AFU sync
+ specifics
+ - scsi: cxlflash: Introduce host ioctl support
+ - scsi: cxlflash: Refactor AFU capability checking
+ - scsi: cxlflash: Support LUN provisioning
+ - scsi: cxlflash: Support AFU debug
+ - scsi: cxlflash: Support WS16 unmap
+ - scsi: cxlflash: Remove zeroing of private command data
+ - scsi: cxlflash: Update TMF command processing
+ - scsi: cxlflash: Avoid double free of character device
+ - scsi: cxlflash: Update send_tmf() parameters
+ - scsi: cxlflash: Update debug prints in reset handlers
+
+ * Ath10k to read different board data file if specify in SMBIOS (LP: #1666742)
+ - ath10k: search SMBIOS for OEM board file extension
+
+ * APST gets enabled against explicit kernel option (LP: #1699004)
+ - nvme: Display raw APST configuration via DYNAMIC_DEBUG
+ - nvme: Add nvme_core.force_apst to ignore the NO_APST quirk
+ - nvme: explicitly disable APST on quirked devices
+
+ * Quirk for non-compliant PCI bridge on HiSilicon D05 board (LP: #1698706)
+ - SAUCE: PCI: Support hibmc VGA cards behind a misbehaving HiSilicon bridge
+
+ * New NVLINK2 patches (LP: #1701272)
+ - powerpc/powernv/npu-dma: Add explicit flush when sending an ATSD
+ - powerpc/npu-dma: Remove spurious WARN_ON when a PCI device has no of_node
+
+ * ERAT invalidate on context switch removal (LP: #1700819)
+ - powerpc: Only do ERAT invalidate on radix context switch on P9 DD1
+
+ * powerpc: Invalidate ERAT on powersave wakeup for POWER9 (LP: #1700521)
+ - powerpc/64s: Invalidate ERAT on powersave wakeup for POWER9
+
+ * update ENA driver to 1.2.0k from net-next (LP: #1701575)
+ - net/ena: use napi_complete_done() return value
+ - net: ena: remove superfluous check in ena_remove()
+ - net/ena: switch to pci_alloc_irq_vectors
+ - net: ena: fix rare uncompleted admin command false alarm
+ - net: ena: fix bug that might cause hang after consecutive open/close
+ interface.
+ - net: ena: add missing return when ena_com_get_io_handlers() fails
+ - net: ena: fix race condition between submit and completion admin command
+ - net: ena: add missing unmap bars on device removal
+ - net: ena: fix theoretical Rx hang on low memory systems
+ - net: ena: disable admin msix while working in polling mode
+ - net: ena: bug fix in lost tx packets detection mechanism
+ - net: ena: update ena driver to version 1.1.7
+ - net: ena: change return value for unsupported features unsupported return
+ value
+ - net: ena: add hardware hints capability to the driver
+ - net: ena: change sizeof() argument to be the type pointer
+ - net: ena: add reset reason for each device FLR
+ - net: ena: add support for out of order rx buffers refill
+ - net: ena: allow the driver to work with small number of msix vectors
+ - net: ena: use napi_schedule_irqoff when possible
+ - net: ena: separate skb allocation to dedicated function
+ - net: ena: use lower_32_bits()/upper_32_bits() to split dma address
+ - net: ena: update driver's rx drop statistics
+ - net: ena: update ena driver to version 1.2.0
+
+ -- Kleber Sacilotto de Souza <kleber.souza@canonical.com> Wed, 19 Jul 2017 12:50:42 +0200
+
+linux (4.10.0-28.32) zesty; urgency=low
+
+ * linux: 4.10.0-28.32 -proposed tracker (LP: #1701013)
+
+ * KILLER1435-S[0489:e0a2] BT cannot search BT 4.0 device (LP: #1699651)
+ - Bluetooth: btusb: Add support for 0489:e0a2 QCA_ROME device
+
+ * aacraid driver may return uninitialized stack data to userspace
+ (LP: #1700077)
+ - SAUCE: scsi: aacraid: Don't copy uninitialized stack memory to userspace
+
+ * CVE-2017-9605
+ - drm/vmwgfx: Make sure backup_handle is always valid
+
+ * CVE-2017-1000380
+ - ALSA: timer: Fix race between read and ioctl
+ - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
+
+ * XDP eBPF programs fail to verify on Zesty ppc64el (LP: #1699627)
+ - [Config] ppc64el: build for Power8 not Power7
+
+ * AACRAID for power9 platform (LP: #1689980)
+ - scripts/spelling.txt: add "therfore" pattern and fix typo instances
+ - scsi: aacraid: fix PCI error recovery path
+ - scsi: aacraid: pci_alloc_consistent() failures on ARM64
+ - scsi: aacraid: Remove __GFP_DMA for raw srb memory
+ - scsi: aacraid: Fix DMAR issues with iommu=pt
+ - scsi: aacraid: Added 32 and 64 queue depth for arc natives
+ - scsi: aacraid: Set correct Queue Depth for HBA1000 RAW disks
+ - scsi: aacraid: Remove reset support from check_health
+ - scsi: aacraid: Change wait time for fib completion
+ - scsi: aacraid: Log count info of scsi cmds before reset
+ - scsi: aacraid: Print ctrl status before eh reset
+ - scsi: aacraid: Using single reset mask for IOP reset
+ - scsi: aacraid: Rework IOP reset
+ - scsi: aacraid: Add periodic checks to see IOP reset status
+ - scsi: aacraid: Rework SOFT reset code
+ - scsi: aacraid: Rework aac_src_restart
+ - scsi: aacraid: Use correct function to get ctrl health
+ - scsi: aacraid: Make sure ioctl returns on controller reset
+ - scsi: aacraid: Enable ctrl reset for both hba and arc
+ - scsi: aacraid: Add reset debugging statements
+ - scsi: aacraid: Remove reference to Series-9
+ - scsi: aacraid: Update driver version to 50834
+
+ * arm64 kernel crashdump support (LP: #1694859)
+ - memblock: add memblock_clear_nomap()
+ - memblock: add memblock_cap_memory_range()
+ - arm64: limit memory regions based on DT property, usable-memory-range
+ - arm64: kdump: reserve memory for crash dump kernel
+ - arm64: mm: add set_memory_valid()
+ - arm64: mm: use phys_addr_t instead of unsigned long in __map_memblock
+ - arm64: kdump: protect crash dump kernel memory
+ - arm64: hibernate: preserve kdump image around hibernation
+ - arm64: kdump: implement machine_crash_shutdown()
+ - arm64: kdump: add VMCOREINFO's for user-space tools
+ - [Config] CONFIG_CRASH_DUMP=y on arm64
+ - arm64: kdump: provide /proc/vmcore file
+ - Documentation: kdump: describe arm64 port
+ - Documentation: dt: chosen properties for arm64 kdump
+ - efi/libstub/arm*: Set default address and size cells values for an empty dtb
+
+ * hibmc driver does not include "pci:" prefix in bus ID (LP: #1698700)
+ - SAUCE: drm: hibmc: Use set_busid function from drm core
+
+ * Processes in "D" state due to zap_pid_ns_processes kernel call with Ubuntu +
+ Docker (LP: #1698264)
+ - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
+
+ * Bugfixes for hns network driver (LP: #1696031)
+ - hns_enet: use cpumask_var_t for on-stack mask
+ - net: hns: fix uninitialized data use
+ - net: hns: avoid gcc-7.0.1 warning for uninitialized data
+ - net: hns: Add ACPI support to check SFP present
+ - net: hns: Fix the implementation of irq affinity function
+ - net: hns: Modify GMAC init TX threshold value
+ - net: hns: Optimize the code for GMAC pad and crc Config
+ - net: hns: Remove redundant memset during buffer release
+ - net: hns: bug fix of ethtool show the speed
+ - net: hns: Optimize hns_nic_common_poll for better performance
+ - net: hns: Fix to adjust buf_size of ring according to mtu
+ - net: hns: Replace netif_tx_lock to ring spin lock
+ - net: hns: Correct HNS RSS key set function
+ - net: hns: Remove the redundant adding and deleting mac function
+ - net: hns: Remove redundant mac_get_id()
+ - net: hns: Remove redundant mac table operations
+ - net: hns: Clean redundant code from hns_mdio.c file
+ - net: hns: Optimise the code in hns_mdio_wait_ready()
+ - net: hns: Simplify the exception sequence in hns_ppe_init()
+ - net: hns: Adjust the SBM module buffer threshold
+ - net: hns: Avoid Hip06 chip TX packet line bug
+ - net: hns: Some checkpatch.pl script & warning fixes
+ - net: hns: support deferred probe when can not obtain irq
+ - net: hns: support deferred probe when no mdio
+ - net: hns: fix ethtool_get_strings overflow in hns driver
+
+ * CVE-2017-7346
+ - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
+
+ * [SRU][Zesty] qcom_emac is unable to get ip address with at803x phy driver.
+ (LP: #1696143)
+ - net: qcom/emac: do not use hardware mdio automatic polling
+
+ * hisi_sas driver updates (LP: #1695999)
+ - scsi: hisi_sas: service v2 hw CQ ISR with tasklet
+ - scsi: hisi_sas: lock sensitive regions when servicing CQ interrupt
+ - scsi: hisi_sas: lock sensitive region in hisi_sas_slot_abort()
+ - scsi: hisi_sas: workaround v2 hw SATA IO timeout issue
+ - scsi: hisi_sas: modify some values of ITCT table
+ - scsi: hisi_sas: downgrade refclk message
+ - scsi: hisi_sas: modify hard reset for directed-attached disk
+ - scsi: hisi_sas: downgrade internal abort exit print
+ - scsi: hisi_sas: fix probe ordering problem
+ - scsi: hisi_sas: decrease running_req in hisi_sas_slot_task_free()
+ - scsi: hisi_sas: add to_hisi_sas_port()
+ - scsi: hisi_sas: add controller reset
+ - scsi: hisi_sas: move PHY init to hisi_sas_scan_start()
+ - scsi: hisi_sas: add softreset function for SATA disk
+ - scsi: hisi_sas: remove hisi_sas_port_deformed()
+ - scsi: hisi_sas: error hisi_sas_task_prep() when port down
+ - scsi: hisi_sas: only reset link for PHY_FUNC_LINK_RESET
+ - scsi: hisi_sas: modify error handling for v2 hw
+ - scsi: hisi_sas: modify hisi_sas_abort_task() for SSP
+ - scsi: hisi_sas: hardreset for SATA disk in LU reset
+ - scsi: hisi_sas: check for SAS_TASK_STATE_ABORTED in slot complete
+ - scsi: hisi_sas: free slots after hardreset
+ - scsi: hisi_sas: fix some sas_task.task_state_lock locking
+ - scsi: hisi_sas: remove task free'ing for timeouts
+ - scsi: hisi_sas: process error codes according to their priority
+ - scsi: hisi_sas: some modifications to v2 hw reg init values
+ - scsi: hisi_sas: handle PHY UP+DOWN simultaneous irq
+ - scsi: hisi_sas: rename hisi_sas_link_timeout_{enable, disable}_link
+ - scsi: hisi_sas: add hisi_sas_clear_nexus_ha()
+ - scsi: hisi_sas: release SMP slot in lldd_abort_task
+ - scsi: hisi_sas: check hisi_sas_lu_reset() error message
+ - scsi: hisi_sas: use dev_is_sata to identify SATA or SAS disk
+ - scsi: hisi_sas: add is_sata_phy_v2_hw()
+ - scsi: hisi_sas: add missing break in switch statement
+ - scsi: hisi_sas: fix SATA dependency
+ - scsi: hisi_sas: workaround STP link SoC bug
+ - scsi: hisi_sas: workaround a SoC SATA IO processing bug
+ - scsi: hisi_sas: workaround SoC about abort timeout bug
+ - scsi: hisi_sas: add v2 hw internal abort timeout workaround
+ - scsi: hisi_sas: fix NULL deference when TMF timeouts
+ - scsi: hisi_sas: controller reset for multi-bits ECC and AXI fatal errors
+
+ * [SRU][Zesty] fix soft lockup on overcommited hugepages (LP: #1696165)
+ - mm/migrate: fix refcount handling when !hugepage_migration_supported()
+
+ * HiSilicon D05: installer doesn't appear on VGA (LP: #1698954)
+ - d-i: Add hibmc-drm to kernel-image udeb
+
+ * Fix /proc/cpuinfo revision for POWER9 DD2 (LP: #1698844)
+ - SAUCE: powerpc: Fix /proc/cpuinfo revision for POWER9 DD2
+
+ * CVE-2014-9900
+ - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
+
+ * OpenPower: Some multipaths temporarily have only a single path
+ (LP: #1696445)
+ - scsi: ses: don't get power status of SES device slot on probe
+
+ -- Juerg Haefliger <juerg.haefliger@canonical.com> Thu, 29 Jun 2017 11:14:43 +0200
+
+linux (4.10.0-26.30) zesty; urgency=low
+
+ * linux: 4.10.0-26.30 -proposed tracker (LP: #1700528)
+
+ * CVE-2017-1000364
+ - Revert "UBUNTU: SAUCE: mm: Only expand stack if guard area is hit"
+ - Revert "mm: do not collapse stack gap into THP"
+ - Revert "mm: enlarge stack guard gap"
+ - mm: larger stack guard gap, between vmas
+ - mm: fix new crash in unmapped_area_topdown()
+ - Allow stack to grow up to address space limit
+
+ -- Juerg Haefliger <juerg.haefliger@canonical.com> Mon, 26 Jun 2017 18:09:03 +0200
+
+linux (4.10.0-25.29) zesty; urgency=low
+
+ * linux: 4.10.0-25.29 -proposed tracker (LP: #1699028)
+
+ * CVE-2017-1000364
+ - SAUCE: mm: Only expand stack if guard area is hit
+
+ * CVE-2017-9074
+ - ipv6: Prevent overrun when parsing v6 header options
+ - ipv6: Check ip6_find_1stfragopt() return value properly.
+
+ * [Zesty] QDF2400 ARM64 server - NMI watchdog: BUG: soft lockup - CPU#8 stuck
+ for 22s! (LP: #1680549)
+ - iommu/dma: Stop getting dma_32bit_pfn wrong
+ - iommu/dma: Implement PCI allocation optimisation
+ - iommu/dma: Convert to address-based allocation
+ - iommu/dma: Clean up MSI IOVA allocation
+ - iommu/dma: Plumb in the per-CPU IOVA caches
+ - iommu/iova: Fix underflow bug in __alloc_and_insert_iova_range
+
+ * Zesty update to 4.10.17 stable release (LP: #1692898)
+ - xen: adjust early dom0 p2m handling to xen hypervisor behavior
+ - target: Fix compare_and_write_callback handling for non GOOD status
+ - target/fileio: Fix zero-length READ and WRITE handling
+ - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
+ - usb: xhci: bInterval quirk for TI TUSB73x0
+ - usb: host: xhci: print correct command ring address
+ - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
+ - USB: Proper handling of Race Condition when two USB class drivers try to
+ call init_usb_class simultaneously
+ - USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications"
+ - staging: vt6656: use off stack for in buffer USB transfers.
+ - staging: vt6656: use off stack for out buffer USB transfers.
+ - staging: gdm724x: gdm_mux: fix use-after-free on module unload
+ - staging: wilc1000: Fix problem with wrong vif index
+ - staging: comedi: jr3_pci: fix possible null pointer dereference
+ - staging: comedi: jr3_pci: cope with jiffies wraparound
+ - usb: misc: add missing continue in switch
+ - usb: gadget: legacy gadgets are optional
+ - usb: Make sure usb/phy/of gets built-in
+ - usb: hub: Fix error loop seen after hub communication errors
+ - usb: hub: Do not attempt to autosuspend disconnected devices
+ - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
+ - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
+ - x86, pmem: Fix cache flushing for iovec write < 8 bytes
+ - um: Fix PTRACE_POKEUSER on x86_64
+ - perf/x86: Fix Broadwell-EP DRAM RAPL events
+ - KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
+ - KVM: arm/arm64: fix races in kvm_psci_vcpu_on
+ - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
+ - block: fix blk_integrity_register to use template's interval_exp if not 0
+ - crypto: s5p-sss - Close possible race for completed requests
+ - crypto: algif_aead - Require setkey before accept(2)
+ - crypto: ccp - Use only the relevant interrupt bits
+ - crypto: ccp - Disable interrupts early on unload
+ - crypto: ccp - Change ISR handler method for a v3 CCP
+ - crypto: ccp - Change ISR handler method for a v5 CCP
+ - dm crypt: rewrite (wipe) key in crypto layer using random data
+ - dm era: save spacemap metadata root after the pre-commit
+ - dm rq: check blk_mq_register_dev() return value in
+ dm_mq_init_request_queue()
+ - dm thin: fix a memory leak when passing discard bio down
+ - vfio/type1: Remove locked page accounting workqueue
+ - iov_iter: don't revert iov buffer if csum error
+ - IB/core: Fix sysfs registration error flow
+ - IB/core: For multicast functions, verify that LIDs are multicast LIDs
+ - IB/IPoIB: ibX: failed to create mcg debug file
+ - IB/mlx4: Fix ib device initialization error flow
+ - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
+ - IB/hfi1: Prevent kernel QP post send hard lockups
+ - perf auxtrace: Fix no_size logic in addr_filter__resolve_kernel_syms()
+ - perf annotate s390: Fix perf annotate error -95 (4.10 regression)
+ - perf annotate s390: Implement jump types for perf annotate
+ - jbd2: fix dbench4 performance regression for 'nobarrier' mounts
+ - ext4: evict inline data when writing to memory map
+ - orangefs: fix bounds check for listxattr
+ - orangefs: clean up oversize xattr validation
+ - orangefs: do not set getattr_time on orangefs_lookup
+ - orangefs: do not check possibly stale size on truncate
+ - fs/xattr.c: zero out memory copied to userspace in getxattr
+ - ceph: fix memory leak in __ceph_setxattr()
+ - fs/block_dev: always invalidate cleancache in invalidate_bdev()
+ - mm: prevent potential recursive reclaim due to clearing PF_MEMALLOC
+ - Fix match_prepath()
+ - Set unicode flag on cifs echo request to avoid Mac error
+ - SMB3: Work around mount failure when using SMB3 dialect to Macs
+ - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
+ - cifs: fix leak in FSCTL_ENUM_SNAPS response handling
+ - cifs: fix CIFS_ENUMERATE_SNAPSHOTS oops
+ - CIFS: fix oplock break deadlocks
+ - cifs: fix CIFS_IOC_GET_MNT_INFO oops
+ - CIFS: add misssing SFM mapping for doublequote
+ - ovl: do not set overlay.opaque on non-dir create
+ - padata: free correct variable
+ - md/raid1: avoid reusing a resync bio after error handling.
+ - device-dax: fix cdev leak
+ - device-dax: fix sysfs attribute deadlock
+ - dax: prevent invalidation of mapped DAX entries
+ - mm: fix data corruption due to stale mmap reads
+ - f2fs: fix fs corruption due to zero inode page
+ - fscrypt: fix context consistency check when key(s) unavailable
+ - serial: samsung: Use right device for DMA-mapping calls
+ - serial: omap: fix runtime-pm handling on unbind
+ - serial: omap: suspend device on probe errors
+ - tty: pty: Fix ldisc flush after userspace become aware of the data already
+ - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
+ - Bluetooth: hci_bcm: add missing tty-device sanity check
+ - Bluetooth: hci_intel: add missing tty-device sanity check
+ - libnvdimm, region: fix flush hint detection crash
+ - libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
+ - libnvdimm: fix nvdimm_bus_lock() vs device_lock() ordering
+ - libnvdimm, pfn: fix 'npfns' vs section alignment
+ - pstore: Shut down worker when unregistering
+ - Linux 4.10.17
+
+ * [SRU][Zesty] Support SMMU passthrough using the default domain
+ (LP: #1688158)
+ - iommu/arm-smmu: Restrict domain attributes to UNMANAGED domains
+ - iommu/arm-smmu: Install bypass S2CRs for IOMMU_DOMAIN_IDENTITY domains
+ - iommu/arm-smmu-v3: Make arm_smmu_install_ste_for_dev return void
+ - iommu: Rename iommu_get_instance()
+ - iommu: Rename struct iommu_device
+ - iommu: Introduce new 'struct iommu_device'
+ - iommu: Add sysfs bindings for struct iommu_device
+ - iommu: Make iommu_device_link/unlink take a struct iommu_device
+ - iommu: Add iommu_device_set_fwnode() interface
+ - iommu/arm-smmu: Make use of the iommu_register interface
+ - iommu/arm-smmu-v3: Install bypass STEs for IOMMU_DOMAIN_IDENTITY domains
+ - iommu: Allow default domain type to be set on the kernel command line
+ - arm64: dma-mapping: Only swizzle DMA ops for IOMMU_DOMAIN_DMA
+ - iommu/vt-d: Fix crash on boot when DMAR is disabled
+
+ * Enable Matrox driver for Ubuntu 16.04.3 (LP: #1693337)
+ - [Config] Enable CONFIG_DRM_MGAG200 as module
+ - drm/mgag200: Added support for the new device G200eH3
+
+ * Ubuntu16.04.03: POWER9 XIVE: msgsnd/doorbell IPI support (backport)
+ (LP: #1691973)
+ - powerpc/64s: Add msgp facility unavailable log string
+ - powerpc/64s: Add SCV FSCR bit for ISA v3.0
+ - powerpc/xmon: Dump memory in CPU endian format
+ - powerpc/xive: Native exploitation of the XIVE interrupt controller
+ - powerpc: Change the doorbell IPI calling convention
+ - powerpc: Introduce msgsnd/doorbell barrier primitives
+ - powerpc/64s: Avoid a branch for ppc_msgsnd
+ - powerpc/powernv: POWER9 support for msgsnd/doorbell IPI
+ - powerpc: Add optional smp_ops->prepare_cpu SMP callback
+ - powerpc: Add more PPC bit conversion macros
+ - powerpc/powernv: Add XIVE related definitions to opal-api.h
+ - powerpc/smp: Remove migrate_irq() custom implementation
+ - powerpc/powernv: Fix oops on P9 DD1 in cause_ipi()
+ - (config) Update configs with PPC_XIVE options
+
+ * CVE-2017-100363
+ - char: lp: fix possible integer overflow in lp_setup()
+
+ * CVE-2017-9242
+ - ipv6: fix out of bound writes in __ip6_append_data()
+
+ * CVE-2017-9075
+ - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
+
+ * CVE-2017-9076
+ - ipv6/dccp: do not inherit ipv6_mc_list from parent
+
+ * CVE-2017-9077
+ - ipv6/dccp: do not inherit ipv6_mc_list from parent
+
+ * CVE-2017-8890
+ - dccp/tcp: do not inherit mc_list from parent
+
+ * Module signing exclusion for staging drivers does not work properly
+ (LP: #1690908)
+ - SAUCE: Fix module signing exclusion in package builds
+
+ * extend-diff-ignore should use exact matches (LP: #1693504)
+ - [Packaging] exact extend-diff-ignore matches
+
+ * Marvell MacchiatoBin crashes in fintek_8250_probe() (LP: #1692548)
+ - drivers/tty: 8250: only call fintek_8250_probe when doing port I/O
+
+ * arm-smmu arm-smmu.2.auto: Unhandled context fault (LP: #1694506)
+ - net: thunderx: Fix IOMMU translation faults
+
+ * arm64: mbigen updates (LP: #1692783)
+ - Revert "UBUNTU: SAUCE: irqchip: mbigen: Add ACPI support"
+ - irqchip/mbigen: Add ACPI support
+ - irqchip/mbigen: Fix return value check in mbigen_device_probe()
+ - irqchip/mbigen: Fix memory mapping code
+ - irqchip/mbigen: Fix potential NULL dereferencing
+ - irqchip/mbigen: Fix the clear register offset calculation
+
+ * System doesn't boot properly on Gigabyte AM4 motherboards (AMD Ryzen)
+ (LP: #1671360)
+ - pinctrl: amd: make use of raw_spinlock variants
+ - pinctrl/amd: Use regular interrupt instead of chained
+
+ * PowerPC: Pstore dump for powerpc is broken (LP: #1691045)
+ - pstore: Fix flags to enable dumps on powerpc
+
+ * Dell Inspiron on kernel 4.10 : battery detected only after AC power adapter
+ event (LP: #1678590)
+ - ACPI / blacklist: add _REV quirk for Dell Inspiron 7537
+
+ * APST quirk needed for Intel NVMe (LP: #1686592)
+ - nvme: Quirk APST on Intel 600P/P3100 devices
+
+ * Merlin SGMII fail on Ubuntu Xenial HWE kernel (LP: #1686305)
+ - drivers: net: phy: xgene: Fix mdio write
+
+ * Zesty update to 4.10.16 stable release (LP: #1691369)
+ - 9p: fix a potential acl leak
+ - drm/sti: fix GDP size to support up to UHD resolution
+ - hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628
+ - mtd: nand: Add OX820 NAND hardware dependency
+ - tpm: fix RC value check in tpm2_seal_trusted
+ - tmp: use pdev for parent device in tpm_chip_alloc
+ - crypto: caam - fix error path for ctx_dma mapping failure
+ - crypto: caam - don't dma_map key for hash algorithms
+ - power: supply: lp8788: prevent out of bounds array access
+ - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
+ - powerpc/perf: Fix perf_get_data_addr() for power9 DD1
+ - powerpc/perf: Handle sdar_mode for marked event in power9
+ - powerpc/mm: Fixup wrong LPCR_VRMASD value
+ - powerpc/powernv: Fix opal_exit tracepoint opcode
+ - powerpc/mm: Fix build break when CMA=n && SPAPR_TCE_IOMMU=y
+ - powerpc/ftrace: Fix confusing help text for DISABLE_MPROFILE_KERNEL
+ - powerpc: Correctly disable latent entropy GCC plugin on prom_init.o
+ - power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
+ - power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
+ - power: supply: bq24190_charger: Install irq_handler_thread() at end of
+ probe()
+ - power: supply: bq24190_charger: Call power_supply_changed() for relevant
+ component
+ - power: supply: bq24190_charger: Don't read fault register outside
+ irq_handle_thread()
+ - power: supply: bq24190_charger: Handle fault before status on interrupt
+ - arm64: dts: r8a7795: Mark EthernetAVB device node disabled
+ - arm: dts: qcom: Fix ipq board clock rates
+ - arm64: remove wrong CONFIG_PROC_SYSCTL ifdef
+ - arm64: Improve detection of user/non-user mappings in set_pte(_at)
+ - spi: armada-3700: Remove spi_master_put in a3700_spi_remove()
+ - leds: ktd2692: avoid harmless maybe-uninitialized warning
+ - ARM: pxa: ezx: fix a910 camera data
+ - ARM: dts: NSP: GPIO reboot open-source
+ - ARM: dts: imx6sx-udoo-neo: Fix reboot hang
+ - ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
+ - ARM: OMAP3: Fix smartreflex platform data regression
+ - ARM: dts: am57xx-idk: tpic2810 is on I2C bus, not SPI
+ - ARM: dts: sun7i: lamobo-r1: Fix CPU port RGMII settings
+ - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
+ - mwifiex: remove redundant dma padding in AMSDU
+ - mwifiex: Avoid skipping WEP key deletion for AP
+ - mwifiex: don't enable/disable IRQ 0 during suspend/resume
+ - mwifiex: set adapter->dev before starting to use mwifiex_dbg()
+ - iwlwifi: mvm: properly check for transport data in dump
+ - iwlwifi: mvm: don't restart HW if suspend fails with unified image
+ - iwlwifi: mvm: overwrite skb info later
+ - iwlwifi: pcie: don't increment / decrement a bool
+ - iwlwifi: pcie: trans: Remove unused 'shift_param'
+ - iwlwifi: pcie: fix the set of DMA memory mask
+ - iwlwifi: mvm: fix reorder timer re-arming
+ - iwlwifi: mvm: Use aux queue for offchannel frames in dqa
+ - iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe
+ - iwlwifi: mvm: fix pending frame counter calculation
+ - iwlwifi: mvm: fix references to first_agg_queue in DQA mode
+ - iwlwifi: mvm: synchronize firmware DMA paging memory
+ - iwlwifi: mvm: writing zero bytes to debugfs causes a crash
+ - iwlwifi: mvm: fix accessing fw_id_to_mac_id
+ - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
+ - x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
+ - x86/mpx: Re-add MPX to selftests Makefile
+ - clk: Make x86/ conditional on CONFIG_COMMON_CLK
+ - platform/x86: intel_pmc_core: fix out-of-bounds accesses on stack
+ - kprobes/x86: Fix kernel panic when certain exception-handling addresses are
+ probed
+ - x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
+ - Revert "KVM: nested VMX: disable perf cpuid reporting"
+ - KVM: nVMX: initialize PML fields in vmcs02
+ - KVM: nVMX: do not leak PML full vmexit to L1
+ - usb: dwc2: host: use msleep() for long delay
+ - usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
+ paths
+ - usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
+ paths
+ - usb: chipidea: Only read/write OTGSC from one place
+ - usb: chipidea: Handle extcon events properly
+ - USB: serial: keyspan_pda: fix receive sanity checks
+ - USB: serial: digi_acceleport: fix incomplete rx sanity check
+ - USB: serial: ssu100: fix control-message error handling
+ - USB: serial: io_edgeport: fix epic-descriptor handling
+ - USB: serial: ti_usb_3410_5052: fix control-message error handling
+ - USB: serial: ark3116: fix open error handling
+ - USB: serial: ftdi_sio: fix latency-timer error handling
+ - USB: serial: quatech2: fix control-message error handling
+ - USB: serial: mct_u232: fix modem-status error handling
+ - USB: serial: ch341: fix modem-status handling
+ - USB: serial: io_edgeport: fix descriptor error handling
+ - clk: rockchip: add "," to mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036
+ - phy: qcom-usb-hs: Add depends on EXTCON
+ - serial: 8250_omap: Fix probe and remove for PM runtime
+ - scsi: qedi: Fix possible memory leak in qedi_iscsi_update_conn()
+ - scsi: qedi: fix build error without DEBUG_FS
+ - scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr
+ - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
+ - scsi: smartpqi: fix time handling
+ - MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
+ - brcmfmac: Ensure pointer correctly set if skb data location changes
+ - brcmfmac: Make skb header writable before use
+ - staging/lustre/llite: move root_squash from sysfs to debugfs
+ - staging: wlan-ng: add missing byte order conversion
+ - staging: emxx_udc: remove incorrect __init annotations
+ - staging: lustre: ptlrpc: avoid warning on missing return
+ - ALSA: hda - Fix deadlock of controller device lock at unbinding
+ - sparc64: fix fault handling in NGbzero.S and GENbzero.S
+ - tcp: do not underestimate skb->truesize in tcp_trim_head()
+ - net: adjust skb->truesize in ___pskb_trim()
+ - net: macb: fix phy interrupt parsing
+ - geneve: fix incorrect setting of UDP checksum flag
+ - bpf: enhance verifier to understand stack pointer arithmetic
+ - bpf, arm64: fix jit branch offset related to ldimm64
+ - tcp: fix wraparound issue in tcp_lp
+ - net: ipv6: Do not duplicate DAD on link up
+ - net: usb: qmi_wwan: add Telit ME910 support
+ - tcp: do not inherit fastopen_req from parent
+ - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
+ - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
+ - ipv6: initialize route null entry in addrconf_init()
+ - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
+ - bnxt_en: allocate enough space for ->ntp_fltr_bmap
+ - bpf: don't let ldimm64 leak map addresses on unprivileged
+ - net: mdio-mux: bcm-iproc: call mdiobus_free() in error path
+ - openvswitch: Set internal device max mtu to ETH_MAX_MTU.
+ - f2fs: sanity check segment count
+ - xen: Revert commits da72ff5bfcb0 and 72a9b186292d
+ - drm/hisilicon/hibmc: Fix wrong pointer passed to PTR_ERR()
+ - drm: mxsfb: drm_dev_alloc() returns error pointers
+ - drm/ttm: fix use-after-free races in vm fault handling
+ - block: get rid of blk_integrity_revalidate()
+ - Linux 4.10.16
+ - [Config] Remove CONFIG_MTD_NAND_OXNAS=m
+ - Ignore missing oxnas_nand
+
+ * Keyboard backlight control does not work on some dell laptops.
+ (LP: #1693126)
+ - platform/x86: dell-laptop: Add Latitude 7480 and others to the DMI whitelist
+ - platform/x86: dell-laptop: Add keyboard backlight timeout AC settings
+
+ * Hardware transaction memory corruption (LP: #1691477)
+ - powerpc/tm: Fix FP and VMX register corruption
+
+ * Offlined CPUs of a core fail to come up online on POWER9 DD1 (Ubuntu 17.04)
+ (LP: #1685792)
+ - powerpc/powernv: Move CPU-Offline idle state invocation from smp.c to idle.c
+ - powerpc/powernv/smp: Add busy-wait loop as fall back for CPU-Hotplug
+ - powerpc/powernv/idle: Don't override default/deepest directly in kernel
+ - powerpc/powernv: Recover correct PACA on wakeup from a stop on P9 DD1
+
+ * [Regression] NUMA_BALANCING disabled on arm64 (LP: #1690914)
+ - [Config] CONFIG_NUMA_BALANCING{,_DEFAULT_ENABLED}=y on arm64
+
+ * ATS fix: Fix opal_npu_destroy_context call (LP: #1692580)
+ - powerpc/powernv/npu-dma.c: Fix opal_npu_destroy_context() call
+
+ * powerpc/powernv: Introduce address translation services for Nvlink2
+ (LP: #1690412)
+ - powerpc/powernv: Require MMU_NOTIFIER to fix NPU build
+ - drivers/of/base.c: Add of_property_read_u64_index
+ - powerpc/powernv: Add sanity checks to pnv_pci_get_{gpu|npu}_dev
+ - powerpc/powernv: Introduce address translation services for Nvlink2
+
+ * exec'ing a setuid binary from a threaded program sometimes fails to setuid
+ (LP: #1672819)
+ - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
+
+ -- Stefan Bader <stefan.bader@canonical.com> Tue, 20 Jun 2017 16:40:34 +0200
+
linux (4.10.0-24.28) zesty; urgency=low
* CVE-2017-1000364
projects / mirror_ubuntu-zesty-kernel.git / blobdiff