mbox

[Trusty,CVEs,Pull,Request] CVE fixes for Trusty

Message ID 20140922164901.GE7886@hercules
State New
Headers show

Pull-request

git://kernel.ubuntu.com/henrix/ubuntu-trusty.git trusty-cves

Message

Luis Henriques Sept. 22, 2014, 4:49 p.m. UTC
This pull-request contains fixes for Trusty, for the following
security issues:

- CVE-2014-3181
- CVE-2014-3184
- CVE-2014-3185
- CVE-2014-3186
- CVE-2014-3631
- CVE-2014-6410
- CVE-2014-6416
- CVE-2014-6417
- CVE-2014-6418

Cheers,
--
Luís

The following changes since commit 6fba2cddb68dc76e15b160f8d13bf452b305e354:

  UBUNTU: Ubuntu-3.13.0-36.63 (2014-09-03 16:39:32 -0400)

are available in the git repository at:

  git://kernel.ubuntu.com/henrix/ubuntu-trusty.git trusty-cves

for you to fetch changes up to ea5acba34f7209ed42be67b8ae85f7d5d3f5551a:

  libceph: do not hard code max auth ticket len (2014-09-22 17:20:07 +0100)

----------------------------------------------------------------
David Howells (1):
      KEYS: Fix termination condition in assoc array garbage collection

Ilya Dryomov (2):
      libceph: add process_one_ticket() helper
      libceph: do not hard code max auth ticket len

James Forshaw (1):
      USB: whiteheat: Added bounds checking for bulk command response

Jan Kara (2):
      udf: Fold udf_fill_inode() into __udf_read_inode()
      udf: Avoid infinite loop when processing indirect ICBs

Jiri Kosina (3):
      HID: magicmouse: sanity check report size in raw_event() callback
      HID: fix a couple of off-by-ones
      HID: picolcd: sanity check report size in raw_event() callback

 drivers/hid/hid-cherry.c       |   2 +-
 drivers/hid/hid-kye.c          |   2 +-
 drivers/hid/hid-lg.c           |   4 +-
 drivers/hid/hid-magicmouse.c   |  10 ++
 drivers/hid/hid-monterey.c     |   2 +-
 drivers/hid/hid-petalynx.c     |   2 +-
 drivers/hid/hid-picolcd_core.c |   6 +
 drivers/hid/hid-sunplus.c      |   2 +-
 drivers/usb/serial/whiteheat.c |   7 +-
 fs/udf/inode.c                 |  57 +++++----
 lib/assoc_array.c              |   4 +-
 net/ceph/auth_x.c              | 256 ++++++++++++++++++++++-------------------
 12 files changed, 193 insertions(+), 161 deletions(-)

Comments

Tim Gardner Sept. 22, 2014, 5:07 p.m. UTC | #1