summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* md-driver: CVE-2015-5697Sona Sarmadi2015-12-292-0/+56
| | | | | | | | | | | | | | | | | | Fixes an information leak in md driver. References: =========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5697 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5697 http://www.openwall.com/lists/oss-security/2015/07/28/2 Upstream patch: =============== https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=adbbaa36dd55ff0bde07391d898779760b5206df Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* drivers-scsi: CVE-2015-5707Sona Sarmadi2015-12-292-0/+45
| | | | | | | | | | | | | | | | | | | Fixes a bug in the scsi block request handling code in function start_req(). References: =========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5707 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5707 http://www.openwall.com/lists/oss-security/2015/08/01/6 Upstream patch: =============== https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=08ac1787579cb8bd9e7333836269e76801905597 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* kernel-fs: CVE-2015-5706Sona Sarmadi2015-12-292-0/+46
| | | | | | | | | | | | | | | | | Fixes double fput(). References: =========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5706 CVE assignment: http://seclists.org/oss-sec/2015/q3/270 Upstream/original fix: ====================== https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=88b4f377466cb673777d27693acf70108a908106 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* linux-yocto: CVE-2015-3339Sona Sarmadi2015-12-112-0/+123
| | | | | | | | | | | | | | | Fixes race condition between chown() and execve() system calls in the linux-yocto 3.14 version. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3339 http://seclists.org/oss-sec/2015/q2/216 Upstream fix: ihttps://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ patch/?id=de70236fbe30749fb8c317088c16a97e700fe232 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* net-sctp: CVE-2015-1421Sona Sarmadi2015-12-031-0/+1
| | | | | | | | | | | | | | | | Fix slab corruption from use after free on INIT collisions. Fix for linux-yocto 3.14. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1421 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/ ?id=43e39c2f63240f67a67b4060882f67dac1a6f339 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* net-sctp: CVE-2015-1421Sona Sarmadi2015-12-032-0/+137
| | | | | | | | | | | | | | | | Fix slab corruption from use after free on INIT collisions Fix for linux-qoriq 3.12. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1421 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/ ?id=43e39c2f63240f67a67b4060882f67dac1a6f339 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* media-ttusb-dec: CVE-2014-8884Sona Sarmadi2015-12-032-0/+36
| | | | | | | | | | | | | | | Fixes buffer overflow in ioctl. Fix for linux-qoriq 3.12. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8884 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/ ?id=482c6cb2dfb40838d67b0ba844b4b3d0af0f3d20 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* IB/uverbs: CVE-2014-8159Sona Sarmadi2015-12-031-0/+1
| | | | | | | | | | | | Prevent integer overflow in ib_umem_get address arithmetic Fix for linux-yocto_3.14. Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/ ?id=refs%2Ftags%2Fv3.12.51&qt=grep&q=CVE-2014-8159 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* IB/uverbs: CVE-2014-8159Sona Sarmadi2015-12-032-0/+51
| | | | | | | | | | | | Prevent integer overflow in ib_umem_get address arithmetic Fix for linux-qoriq 3.12. Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/ ?id=refs%2Ftags%2Fv3.12.51&qt=grep&q=CVE-2014-8159 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* linux-qoriq: mm: CVE-2014-3122Sona Sarmadi2015-11-272-1/+101
| | | | | | | | | | try_to_unmap_cluster() should lock_page() before mlocking Reference http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3122 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* kernel: net: CVE-2015-2041Sona Sarmadi2015-11-202-0/+63
| | | | | | | | | | | | | | | Fixes information leak in llc2_timeout_table. References: http://www.openwall.com/lists/oss-security/2015/02/20/19 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2041 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/ commit/?id=ecca64226ce2960280921e09ae33e90f82b5c408 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* kernel: CVE-2015-5364, CVE-2015-5366Tudor Florea2015-11-062-1/+67
| | | | | | | This fixes incorrect processing of checksums in UDP implementation Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* kernel: CVE-2015-1333Sona Sarmadi2015-10-222-0/+53
| | | | | | | | | | | | | | | Fixes denial of service due to memory leak in add_key() References: http://www.openwall.com/lists/oss-security/2015/07/27/7 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1333 Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/stable/ linux-stable.git/commit/?id=4fd5dc9eece297f49f16f82422ead3a28b11ea70 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* initial commit for Enea Linux 5.0 armTudor Florea2015-10-08254-0/+19588
Signed-off-by: Tudor Florea <tudor.florea@enea.com>