Linux Kernel 2.6.20.17 has been released:
I've just released Linux 2.6.20.17.
As a reminder, it fixes these 3 security issues :
CVE-2007-3105
CVE-2007-3848
CVE-2007-3851
I'll also be replying to this message with a copy of the patch between
2.6.20.16 and 2.6.20.17.
The patch and changelog will appear soon at the following locations:
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/patch-2.6.20.17.bz2
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.17
Git repository:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.20.y.git
http://www.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.20.y.git
Git repository through the gitweb interface:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.20.y.git
Willy
-------
Makefile | 2
arch/i386/kernel/cpu/cpufreq/acpi-cpufreq.c | 13 +--
arch/sparc/kernel/entry.S | 14 ++-
arch/sparc/lib/memset.S | 2
arch/sparc64/kernel/head.S | 1
arch/um/os-Linux/user_syms.c | 20 +---
drivers/ata/ata_piix.c | 2
drivers/ata/pata_atiixp.c | 1
drivers/base/cpu.c | 2
drivers/char/drm/i915_dma.c | 14 ++-
drivers/char/drm/i915_drv.h | 1
drivers/char/random.c | 9 +-
drivers/char/sx.c | 4
drivers/cpufreq/cpufreq_ondemand.c | 30 ++++--
drivers/kvm/svm.c | 6 +
drivers/kvm/svm.h | 3
drivers/md/dm-crypt.c | 5 -
drivers/md/dm-exception-store.c | 11 +-
drivers/md/dm-mpath.c | 3
drivers/md/dm-snap.c | 11 --
drivers/md/dm.c | 9 ++
drivers/md/raid10.c | 10 ++
drivers/media/video/v4l2-common.c | 19 +++-
drivers/media/video/wm8739.c | 2
drivers/media/video/wm8775.c | 2
drivers/net/forcedeth.c | 108 ++++++++++++++++++++++---
drivers/pcmcia/cs.c | 3
drivers/scsi/aacraid/linit.c | 4
drivers/usb/core/hub.c | 10 +-
drivers/video/macmodes.c | 5 -
drivers/video/macmodes.h | 8 -
drivers/video/stifb.c | 19 ++--
fs/9p/conv.c | 1
fs/direct-io.c | 1
fs/exec.c | 13 ++-
fs/ext4/extents.c | 2
fs/jbd/commit.c | 3
fs/jbd2/commit.c | 3
fs/nfsd/vfs.c | 2
fs/splice.c | 5 -
include/linux/Kbuild | 1
include/linux/netfilter_ipv4/ipt_iprange.h | 2
include/net/bluetooth/rfcomm.h | 1
include/net/xfrm.h | 1
ipc/shm.c | 2
kernel/lockdep_proc.c | 2
mm/hugetlb.c | 15 ++-
mm/mlock.c | 5 -
mm/readahead.c | 12 ++
net/bluetooth/rfcomm/tty.c | 34 ++++++-
net/core/gen_estimator.c | 82 +++++++++++-------
net/core/netpoll.c | 2
net/ieee80211/softmac/ieee80211softmac_assoc.c | 5 -
net/ieee80211/softmac/ieee80211softmac_wx.c | 11 +-
net/ipv6/addrconf.c | 1
net/ipv6/anycast.c | 1
net/ipv6/icmp.c | 2
net/ipv6/tcp_ipv6.c | 1
net/sctp/ipv6.c | 4
net/sunrpc/auth_gss/svcauth_gss.c | 9 +-
net/xfrm/xfrm_policy.c | 2
61 files changed, 410 insertions(+), 168 deletions(-)
Summary of changes from 2.6.20.16 to 2.6.20.17
============================================
Adrian Bunk (2):
Missing header include in ipt_iprange.h
drivers/video/macmodes.c:mac_find_mode() mustn't be __devinit
Alan Cox (1):
aacraid: fix security hole
Alan Stern (1):
USB: fix warning caused by autosuspend counter going negative
Alexander Shmelev (1):
Fix sparc32 memset()
Alexey Dobriyan (1):
Fix leak on /proc/lockdep_stats
Arne Redlich (1):
md: handle writes to broken raid10 arrays gracefully
Ayaz Abdulla (2):
forcedeth bug fix: cicada phy
forcedeth bug fix: vitesse phy
Badari Pulavarty (1):
direct-io: fix error-path crashes
Daniel Ritz (1):
pcmcia: give socket time to power down
Dave Airlie (1):
drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)
David S. Miller (1):
Sparc64 bootup assembler bug
David Stevens (1):
IPV6: /proc/net/anycast6 unbalanced inet6_dev refcnt
Dmitry Butskoy (1):
Fix error queue socket lookup in ipv6
Fengguang Wu (1):
readahead: MIN_RA_PAGES/MAX_RA_PAGES macros
Hans Verkuil (2):
V4L: Add check for valid control ID to v4l2_ctrl_next
V4L: wm8775/wm8739: Fix memory leak when unloading module
Helge Deller (1):
stifb: detect cards in double buffer mode more reliably
Herbert van den Bergh (1):
do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY
Herton Ronaldo Krzesinski (1):
Include serial_reg.h with userspace headers
J. Bruce Fields (2):
nfsd: fix possible read-ahead cache and export table corruption
nfsd: fix possible oops on re-insertion of rpcsec_gss modules
Jan Kara (2):
jbd commit: fix transaction dropping
jbd2 commit: fix transaction dropping
Jean Tourrilhes (1):
softmac: Fix ESSID problem
Jeff Dike (1):
UML: exports for hostfs
Jeff Garzik (1):
pata_atiixp: add SB700 PCI ID
Jens Axboe (1):
splice: fix double page unlock
Jiri Slaby (1):
sx: switch subven and subid values
Joe Jin (1):
hugetlb: fix race in alloc_fresh_huge_page()
Joerg Roedel (1):
KVM: SVM: Reliably detect if SVM was disabled by BIOS
Maik Hampel (1):
md: raid10: fix use-after-free of bio
Marcel Holtmann (1):
Reset current->pdeath_signal on SUID binary execution (CVE-2007-3848)
Mariusz Kozlowski (1):
fs: 9p/conv.c error path fix
Mark Fortescue (1):
Fix sparc32 udelay() rounding errors.
Matt Mackall (1):
random: fix bound check ordering (CVE-2007-3105)
Michael Buesch (1):
softmac: Fix deadlock of wx_set_essid with assoc work
Mikko Rapeli (1):
Hangup TTY before releasing rfcomm_dev
Milan Broz (2):
dm io: fix panic on large request
dm snapshot: permit invalid activation
Mingming Cao (1):
"ext4_ext_put_in_cache" uses __u32 to receive physical block number
Patrick McHardy (2):
Fix IPCOMP crashes.
gen estimator timer unload race
Pavel Emelianov (1):
Fix user struct leakage with locked IPC shem segment
Ranko Zivojnovic (1):
gen estimator deadlock fix
Satyam Sharma (1):
Netpoll leak
Stefan Bader (1):
dm: disable barriers
Tejun Heo (1):
ata_piix: update map 10b for ich8m
Ulrich Drepper (1):
CPU online file permission
Venki Pallipadi (3):
acpi-cpufreq: Proper ReadModifyWrite of PERF_CTL MSR
CPUFREQ: ondemand: fix tickless accounting and software coordination bug
CPUFREQ: ondemand: add a check to avoid negative load calculation
Ville Tervo (1):
Keep rfcomm_dev on the list until it is freed
Vlad Yasevich (2):
SCTP scope_id handling fix
Fix ipv6 link down handling.
Willy Tarreau (1):
Linux 2.6.20.17
YOSHIFUJI Hideaki (1):
Fix TCP IPV6 MD5 bug.
I've just released Linux 2.6.20.17.
As a reminder, it fixes these 3 security issues :
CVE-2007-3105
CVE-2007-3848
CVE-2007-3851
I'll also be replying to this message with a copy of the patch between
2.6.20.16 and 2.6.20.17.
The patch and changelog will appear soon at the following locations:
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/patch-2.6.20.17.bz2
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.17
Git repository:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.20.y.git
http://www.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.20.y.git
Git repository through the gitweb interface:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.20.y.git
Willy
-------
Makefile | 2
arch/i386/kernel/cpu/cpufreq/acpi-cpufreq.c | 13 +--
arch/sparc/kernel/entry.S | 14 ++-
arch/sparc/lib/memset.S | 2
arch/sparc64/kernel/head.S | 1
arch/um/os-Linux/user_syms.c | 20 +---
drivers/ata/ata_piix.c | 2
drivers/ata/pata_atiixp.c | 1
drivers/base/cpu.c | 2
drivers/char/drm/i915_dma.c | 14 ++-
drivers/char/drm/i915_drv.h | 1
drivers/char/random.c | 9 +-
drivers/char/sx.c | 4
drivers/cpufreq/cpufreq_ondemand.c | 30 ++++--
drivers/kvm/svm.c | 6 +
drivers/kvm/svm.h | 3
drivers/md/dm-crypt.c | 5 -
drivers/md/dm-exception-store.c | 11 +-
drivers/md/dm-mpath.c | 3
drivers/md/dm-snap.c | 11 --
drivers/md/dm.c | 9 ++
drivers/md/raid10.c | 10 ++
drivers/media/video/v4l2-common.c | 19 +++-
drivers/media/video/wm8739.c | 2
drivers/media/video/wm8775.c | 2
drivers/net/forcedeth.c | 108 ++++++++++++++++++++++---
drivers/pcmcia/cs.c | 3
drivers/scsi/aacraid/linit.c | 4
drivers/usb/core/hub.c | 10 +-
drivers/video/macmodes.c | 5 -
drivers/video/macmodes.h | 8 -
drivers/video/stifb.c | 19 ++--
fs/9p/conv.c | 1
fs/direct-io.c | 1
fs/exec.c | 13 ++-
fs/ext4/extents.c | 2
fs/jbd/commit.c | 3
fs/jbd2/commit.c | 3
fs/nfsd/vfs.c | 2
fs/splice.c | 5 -
include/linux/Kbuild | 1
include/linux/netfilter_ipv4/ipt_iprange.h | 2
include/net/bluetooth/rfcomm.h | 1
include/net/xfrm.h | 1
ipc/shm.c | 2
kernel/lockdep_proc.c | 2
mm/hugetlb.c | 15 ++-
mm/mlock.c | 5 -
mm/readahead.c | 12 ++
net/bluetooth/rfcomm/tty.c | 34 ++++++-
net/core/gen_estimator.c | 82 +++++++++++-------
net/core/netpoll.c | 2
net/ieee80211/softmac/ieee80211softmac_assoc.c | 5 -
net/ieee80211/softmac/ieee80211softmac_wx.c | 11 +-
net/ipv6/addrconf.c | 1
net/ipv6/anycast.c | 1
net/ipv6/icmp.c | 2
net/ipv6/tcp_ipv6.c | 1
net/sctp/ipv6.c | 4
net/sunrpc/auth_gss/svcauth_gss.c | 9 +-
net/xfrm/xfrm_policy.c | 2
61 files changed, 410 insertions(+), 168 deletions(-)
Summary of changes from 2.6.20.16 to 2.6.20.17
============================================
Adrian Bunk (2):
Missing header include in ipt_iprange.h
drivers/video/macmodes.c:mac_find_mode() mustn't be __devinit
Alan Cox (1):
aacraid: fix security hole
Alan Stern (1):
USB: fix warning caused by autosuspend counter going negative
Alexander Shmelev (1):
Fix sparc32 memset()
Alexey Dobriyan (1):
Fix leak on /proc/lockdep_stats
Arne Redlich (1):
md: handle writes to broken raid10 arrays gracefully
Ayaz Abdulla (2):
forcedeth bug fix: cicada phy
forcedeth bug fix: vitesse phy
Badari Pulavarty (1):
direct-io: fix error-path crashes
Daniel Ritz (1):
pcmcia: give socket time to power down
Dave Airlie (1):
drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)
David S. Miller (1):
Sparc64 bootup assembler bug
David Stevens (1):
IPV6: /proc/net/anycast6 unbalanced inet6_dev refcnt
Dmitry Butskoy (1):
Fix error queue socket lookup in ipv6
Fengguang Wu (1):
readahead: MIN_RA_PAGES/MAX_RA_PAGES macros
Hans Verkuil (2):
V4L: Add check for valid control ID to v4l2_ctrl_next
V4L: wm8775/wm8739: Fix memory leak when unloading module
Helge Deller (1):
stifb: detect cards in double buffer mode more reliably
Herbert van den Bergh (1):
do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY
Herton Ronaldo Krzesinski (1):
Include serial_reg.h with userspace headers
J. Bruce Fields (2):
nfsd: fix possible read-ahead cache and export table corruption
nfsd: fix possible oops on re-insertion of rpcsec_gss modules
Jan Kara (2):
jbd commit: fix transaction dropping
jbd2 commit: fix transaction dropping
Jean Tourrilhes (1):
softmac: Fix ESSID problem
Jeff Dike (1):
UML: exports for hostfs
Jeff Garzik (1):
pata_atiixp: add SB700 PCI ID
Jens Axboe (1):
splice: fix double page unlock
Jiri Slaby (1):
sx: switch subven and subid values
Joe Jin (1):
hugetlb: fix race in alloc_fresh_huge_page()
Joerg Roedel (1):
KVM: SVM: Reliably detect if SVM was disabled by BIOS
Maik Hampel (1):
md: raid10: fix use-after-free of bio
Marcel Holtmann (1):
Reset current->pdeath_signal on SUID binary execution (CVE-2007-3848)
Mariusz Kozlowski (1):
fs: 9p/conv.c error path fix
Mark Fortescue (1):
Fix sparc32 udelay() rounding errors.
Matt Mackall (1):
random: fix bound check ordering (CVE-2007-3105)
Michael Buesch (1):
softmac: Fix deadlock of wx_set_essid with assoc work
Mikko Rapeli (1):
Hangup TTY before releasing rfcomm_dev
Milan Broz (2):
dm io: fix panic on large request
dm snapshot: permit invalid activation
Mingming Cao (1):
"ext4_ext_put_in_cache" uses __u32 to receive physical block number
Patrick McHardy (2):
Fix IPCOMP crashes.
gen estimator timer unload race
Pavel Emelianov (1):
Fix user struct leakage with locked IPC shem segment
Ranko Zivojnovic (1):
gen estimator deadlock fix
Satyam Sharma (1):
Netpoll leak
Stefan Bader (1):
dm: disable barriers
Tejun Heo (1):
ata_piix: update map 10b for ich8m
Ulrich Drepper (1):
CPU online file permission
Venki Pallipadi (3):
acpi-cpufreq: Proper ReadModifyWrite of PERF_CTL MSR
CPUFREQ: ondemand: fix tickless accounting and software coordination bug
CPUFREQ: ondemand: add a check to avoid negative load calculation
Ville Tervo (1):
Keep rfcomm_dev on the list until it is freed
Vlad Yasevich (2):
SCTP scope_id handling fix
Fix ipv6 link down handling.
Willy Tarreau (1):
Linux 2.6.20.17
YOSHIFUJI Hideaki (1):
Fix TCP IPV6 MD5 bug.
