Messages in this thread | | | Date | Mon, 4 Dec 2006 21:04:44 +0100 | From | Adrian Bunk <> | Subject | Linux 2.6.16.35-rc1 |
| |
Security fixes since 2.6.16.32: - CVE-2006-5751: bridge: fix possible overflow in get_fdb_entries
Patch location: ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
RSS feed of the git tree: http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=rss
Changes since 2.6.16.34:
Adrian Bunk (3): drivers/usb/input/ati_remote.c: fix cut'n'paste error remove garbage that sneaked into the ext3 fix Linux 2.6.16.35-rc1
Al Viro (5): add forgotten ->b_data in memcpy() call in ext3/resize.c (oopsable) [EBTABLES]: Fix wraparounds in ebt_entries verification. [EBTABLES]: Verify that ebt_entries have zero ->distinguisher. [EBTABLES]: Deal with the worst-case behaviour in loop checks. [EBTABLES]: Prevent wraparounds in checks for entry components' sizes.
Alexey Dobriyan (1): proper flags type of spin_lock_irqsave()
Chris Wright (1): bridge: fix possible overflow in get_fdb_entries (CVE-2006-5751)
Dave Kleikamp (1): JFS: pageno needs to be long
Fernando J. Pereda (1): alpha: Fix ALPHA_EV56 dependencies typo
Herbert Xu (1): SCTP: Always linearise packet on input
Jean Delvare (1): Fix a masking bug in the 6pack driver.
Jens Axboe (3): block: Fix bad data direction in SG_IO cpqarray: fix iostat cciss: fix iostat
Jeremy Higdon (1): sgiioc4: Disable module unload
Jiri Slaby (1): Char: isicom, fix close bug
Josh Triplett (1): freevxfs: Add missing lock_kernel() to vxfs_readdir
Kim Nordlund (1): [PKT_SCHED] act_gact: division by zero
Kyle McMartin (1): Fix incorrent type of flags in <asm/semaphore.h>
Michael De Backer (1): alim15x3.c: M5229 (rev c8) support for DMA cd-writer
Nathan Lynch (1): nvidiafb: fix unreachable code in nv10GetConfig
Olaf Kirch (1): [UDP]: Make udp_encap_rcv use pskb_may_pull
Oliver Neukum (1): USB: failure in usblp's error path
Patrick McHardy (1): [NET_SCHED]: policer: restore compatibility with old iproute binaries
Pierre Ossman (1): MMC: Always use a sector size of 512 bytes
Roberto Castagnola (1): Input: logips2pp - fix button mapping for MX300
Trond Myklebust (1): fcntl(F_SETSIG) fix
Vasily Tarasov (1): block layer: elv_iosched_show should get elv_list_lock
Wink Saville (1): Fix divide by zero error for nvidia 7600 pci-express card
YOSHIFUJI Hideaki (1): [IPV6]: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.
Zbigniew Luszpinski (1): Input: psmouse - add detection of Logitech TrackMan Wheel trackball
Zhou Yingchao (1): Remove redundant up() in stop_machine()
Makefile | 2 - arch/alpha/Kconfig | 2 - arch/ia64/kernel/mca.c | 2 - arch/ia64/sn/pci/pcibr/pcibr_ate.c | 2 - arch/ia64/sn/pci/pcibr/pcibr_dma.c | 2 - arch/parisc/kernel/firmware.c | 7 ++- arch/v850/kernel/memcons.c | 2 - arch/v850/kernel/rte_cb_leds.c | 2 - arch/v850/kernel/rte_mb_a_pci.c | 12 +++--- block/elevator.c | 4 +- block/scsi_ioctl.c | 2 - drivers/block/cciss.c | 6 +++ drivers/block/cpqarray.c | 13 +++++- drivers/char/ds1286.c | 15 ++++---- drivers/char/isicom.c | 3 + drivers/i2c/busses/i2c-ite.c | 2 - drivers/ide/pci/alim15x3.c | 2 - drivers/ide/pci/sgiioc4.c | 7 --- drivers/input/mouse/logips2pp.c | 9 +++- drivers/mmc/mmc_block.c | 49 ++------------------------ drivers/net/hamradio/6pack.c | 2 - drivers/usb/class/usblp.c | 1 drivers/usb/input/ati_remote.c | 2 - drivers/video/nvidia/nv_hw.c | 12 ++++-- drivers/video/nvidia/nv_setup.c | 20 +++++++++- drivers/video/nvidia/nv_type.h | 1 drivers/video/nvidia/nvidia.c | 24 ++++++------ fs/ext3/resize.c | 2 - fs/freevxfs/vxfs_lookup.c | 2 + fs/jfs/jfs_imap.c | 4 +- fs/locks.c | 6 ++- include/asm-parisc/semaphore.h | 6 ++- kernel/stop_machine.c | 1 net/bridge/br_ioctl.c | 9 ++-- net/bridge/netfilter/ebtables.c | 54 +++++++++++++++++------------ net/dccp/ipv6.c | 2 - net/ipv4/udp.c | 19 +++++++--- net/ipv6/udp.c | 7 +-- net/sched/act_gact.c | 4 +- net/sched/act_police.c | 26 +++++++++++-- net/sctp/input.c | 3 + sound/oss/swarm_cs4297a.c | 2 - 42 files changed, 199 insertions(+), 155 deletions(-) - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |