]> code.ossystems Code Review - openembedded-core.git/commit
linux-yocto/4.10: CVE & misc fixes
authorBruce Ashfield <bruce.ashfield@windriver.com>
Mon, 21 Aug 2017 02:58:22 +0000 (22:58 -0400)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 23 Aug 2017 07:47:05 +0000 (08:47 +0100)
commit6cfd520ea050aa449f0ac7ee0b2c647d14d588ad
treea2a81d773a5fc75486a8745aa662e83efe55a391
parent44aea7b87307795fe4e089c51d45afccaa2f6525
linux-yocto/4.10: CVE & misc fixes

Updating the 4.10 SRCREVs to import the following changes:

  65370fa249e2 drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  530ec12a0cb0 ACPICA: Namespace: fix operand cache leak
  b1098b5bbded char: lp: fix possible integer overflow in lp_setup()
  56ee0c7811e5 dccp/tcp: do not inherit mc_list from parent
  9f6cbd022bba nfsd: encoders mustn't use unitialized values in error cases
  084036ebc243 nfsd: fix undefined behavior in nfsd4_layout_verify
  973f780eeaa6 xen-blkback: don't leak stack data via response ring
  20c4b5015fea brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
  1dff0f28b490 ipx: call ipxitf_put() in ioctl error path
  d666a8e60a45 mm: fix new crash in unmapped_area_topdown()
  73d059ba1a17 mm: larger stack guard gap, between vmas

Which address the following CVEs:

  CVE-2017-8890
  CVE-2017-1000363
  CVE-2017-11472
  CVE-2017-7346
  CVE-2017-1000380
  CVE-2017-7541
  CVE-2017-10911

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/linux-yocto-rt_4.10.bb
meta/recipes-kernel/linux/linux-yocto-tiny_4.10.bb
meta/recipes-kernel/linux/linux-yocto_4.10.bb