All of lore.kernel.org
 help / color / mirror / Atom feed
From: Adrian Bunk <bunk@stusta.de>
To: linux-kernel@vger.kernel.org
Subject: Linux 2.6.16.35-rc1
Date: Mon, 4 Dec 2006 21:04:44 +0100	[thread overview]
Message-ID: <20061204200444.GD7027@stusta.de> (raw)

Security fixes since 2.6.16.32:
- CVE-2006-5751: bridge: fix possible overflow in get_fdb_entries


Patch location:
ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/

git tree:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git

RSS feed of the git tree:
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=rss


Changes since 2.6.16.34:

Adrian Bunk (3):
      drivers/usb/input/ati_remote.c: fix cut'n'paste error
      remove garbage that sneaked into the ext3 fix
      Linux 2.6.16.35-rc1

Al Viro (5):
      add forgotten ->b_data in memcpy() call in ext3/resize.c (oopsable)
      [EBTABLES]: Fix wraparounds in ebt_entries verification.
      [EBTABLES]: Verify that ebt_entries have zero ->distinguisher.
      [EBTABLES]: Deal with the worst-case behaviour in loop checks.
      [EBTABLES]: Prevent wraparounds in checks for entry components' sizes.

Alexey Dobriyan (1):
      proper flags type of spin_lock_irqsave()

Chris Wright (1):
      bridge: fix possible overflow in get_fdb_entries (CVE-2006-5751)

Dave Kleikamp (1):
      JFS: pageno needs to be long

Fernando J. Pereda (1):
      alpha: Fix ALPHA_EV56 dependencies typo

Herbert Xu (1):
      SCTP: Always linearise packet on input

Jean Delvare (1):
      Fix a masking bug in the 6pack driver.

Jens Axboe (3):
      block: Fix bad data direction in SG_IO
      cpqarray: fix iostat
      cciss: fix iostat

Jeremy Higdon (1):
      sgiioc4: Disable module unload

Jiri Slaby (1):
      Char: isicom, fix close bug

Josh Triplett (1):
      freevxfs: Add missing lock_kernel() to vxfs_readdir

Kim Nordlund (1):
      [PKT_SCHED] act_gact: division by zero

Kyle McMartin (1):
      Fix incorrent type of flags in <asm/semaphore.h>

Michael De Backer (1):
      alim15x3.c: M5229 (rev c8) support for DMA cd-writer

Nathan Lynch (1):
      nvidiafb: fix unreachable code in nv10GetConfig

Olaf Kirch (1):
      [UDP]: Make udp_encap_rcv use pskb_may_pull

Oliver Neukum (1):
      USB: failure in usblp's error path

Patrick McHardy (1):
      [NET_SCHED]: policer: restore compatibility with old iproute binaries

Pierre Ossman (1):
      MMC: Always use a sector size of 512 bytes

Roberto Castagnola (1):
      Input: logips2pp - fix button mapping for MX300

Trond Myklebust (1):
      fcntl(F_SETSIG) fix

Vasily Tarasov (1):
      block layer: elv_iosched_show should get elv_list_lock

Wink Saville (1):
      Fix divide by zero error for nvidia 7600 pci-express card

YOSHIFUJI Hideaki (1):
      [IPV6]: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.

Zbigniew Luszpinski (1):
      Input: psmouse - add detection of Logitech TrackMan Wheel trackball

Zhou Yingchao (1):
      Remove redundant up() in stop_machine()


 Makefile                           |    2 -
 arch/alpha/Kconfig                 |    2 -
 arch/ia64/kernel/mca.c             |    2 -
 arch/ia64/sn/pci/pcibr/pcibr_ate.c |    2 -
 arch/ia64/sn/pci/pcibr/pcibr_dma.c |    2 -
 arch/parisc/kernel/firmware.c      |    7 ++-
 arch/v850/kernel/memcons.c         |    2 -
 arch/v850/kernel/rte_cb_leds.c     |    2 -
 arch/v850/kernel/rte_mb_a_pci.c    |   12 +++---
 block/elevator.c                   |    4 +-
 block/scsi_ioctl.c                 |    2 -
 drivers/block/cciss.c              |    6 +++
 drivers/block/cpqarray.c           |   13 +++++-
 drivers/char/ds1286.c              |   15 ++++----
 drivers/char/isicom.c              |    3 +
 drivers/i2c/busses/i2c-ite.c       |    2 -
 drivers/ide/pci/alim15x3.c         |    2 -
 drivers/ide/pci/sgiioc4.c          |    7 ---
 drivers/input/mouse/logips2pp.c    |    9 +++-
 drivers/mmc/mmc_block.c            |   49 ++------------------------
 drivers/net/hamradio/6pack.c       |    2 -
 drivers/usb/class/usblp.c          |    1 
 drivers/usb/input/ati_remote.c     |    2 -
 drivers/video/nvidia/nv_hw.c       |   12 ++++--
 drivers/video/nvidia/nv_setup.c    |   20 +++++++++-
 drivers/video/nvidia/nv_type.h     |    1 
 drivers/video/nvidia/nvidia.c      |   24 ++++++------
 fs/ext3/resize.c                   |    2 -
 fs/freevxfs/vxfs_lookup.c          |    2 +
 fs/jfs/jfs_imap.c                  |    4 +-
 fs/locks.c                         |    6 ++-
 include/asm-parisc/semaphore.h     |    6 ++-
 kernel/stop_machine.c              |    1 
 net/bridge/br_ioctl.c              |    9 ++--
 net/bridge/netfilter/ebtables.c    |   54 +++++++++++++++++------------
 net/dccp/ipv6.c                    |    2 -
 net/ipv4/udp.c                     |   19 +++++++---
 net/ipv6/udp.c                     |    7 +--
 net/sched/act_gact.c               |    4 +-
 net/sched/act_police.c             |   26 +++++++++++--
 net/sctp/input.c                   |    3 +
 sound/oss/swarm_cs4297a.c          |    2 -
 42 files changed, 199 insertions(+), 155 deletions(-)

                 reply	other threads:[~2006-12-04 20:04 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20061204200444.GD7027@stusta.de \
    --to=bunk@stusta.de \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.