lp://staging/ubuntu/utopic-proposed/linux-flo

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1308764: apparmor refcount bug in apparmor_kill	Undecided	Confirmed
Bug #1308765: refcount bug in apparmor pivotroot handling	Undecided	Confirmed
Bug #1323526: apparmor spam log with warnings on Preempt kernels	Undecided	Confirmed

Link a bug report

Related blueprints

9. By Tim Gardner on 2014-09-19

[ John Johansen ]

* SAUCE: (no-up) apparmor: Sync to apparmor3 - RC1 snapshot
  - LP: #1362199

[ Tim Gardner ]

* Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot"

[ Tyler Hicks ]

* Revert "SAUCE: (no-up) apparmor: fix disconnected bind mnts
  reconnection"
* Revert "SAUCE: (no-up) apparmor fix: remove unused cxt var for
  unix_sendmsg"
* Revert "SAUCE: (no-up) apparmor: use custom write_is_locked macro"
* Revert "SAUCE: (no-up) apparmor: fix bug that constantly spam the
  console"
* Revert "SAUCE: (no-up) apparmor: fix apparmor refcount bug in
  apparmor_kill"
* Revert "SAUCE: (no-up) apparmor: fix refcount bug in apparmor
  pivotroot"
* Revert "SAUCE: (no-up) apparmor: fix apparmor spams log with warning
  message"

8. By Andy Whitcroft on 2014-07-16

[ Upstream Kernel Changes ]

* epoll: Add a flag, EPOLLWAKEUP, to prevent suspend while epoll events
  are ready
* epoll: Fix user space breakage related to EPOLLWAKEUP

7. By Tim Gardner on 2014-06-26

[ Javier Martinez Canillas ]

* SAUCE: (no-up) apparmor: fix bug that constantly spam the console
  - LP: #1323526

[ John Johansen ]

* Revert "SAUCE: apparmor: fix bad lock balance when introspecting
  policy"
* Revert "SAUCE: apparmor: fix memleak of replacedby struct"
* Revert "SAUCE: apparmor: fix memleak of the profile hash"
* Revert "SAUCE: apparmor: allocate path lookup buffers during init"
* Revert "SAUCE: apparmor: fix unix domain sockets to be mediated on
  connection"
* Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 4 snapshot"
* SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot
* SAUCE: (no-up) apparmor: update configs for apparmor 3 alpha 6
* SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
  - LP: #1308761
* SAUCE: (no-up) apparmor: fix refcount bug in apparmor pivotroot
  - LP: #1308765
* SAUCE: (no-up) apparmor: fix apparmor refcount bug in apparmor_kill
  - LP: #1308764
* SAUCE: (no-up) apparmor: use custom write_is_locked macro
  - LP: #1323530
* SAUCE: (no-up) apparmor fix: remove unused cxt var for unix_sendmsg
* SAUCE: (no-up) apparmor: fix disconnected bind mnts reconnection
  - LP: #1319984

[ Tyler Hicks ]

* [Config] CONFIG_ECRYPT_FS=y
* [Config] CONFIG_COMPAT_BRK=n
* [Config] CONFIG_SYN_COOKIES=y
* [Config] CONFIG_EVM=y
* [Config] Sync LSM config options
* [Config] Sync crypto config options
* [Config] Sync IPsec config options

[ Upstream Kernel Changes ]

* Revert "use clamp_t in UNAME26 fix"
* Revert "kernel/sys.c: fix stack memory content leak via UNAME26"
* Revert "wake_up_process() should be never used to wakeup a
  TASK_STOPPED/TRACED task"
* Revert "ptrace: ensure arch_ptrace/ptrace_request can never race with
  SIGKILL"
* Revert "ptrace: introduce signal_wake_up_state() and
  ptrace_signal_wake_up()"
* Revert "perf: Treat attr.config as u64 in perf_swevent_init()"
* Revert "ARM: 7809/1: perf: fix event validation for software group
  leaders"
  - CVE-2013-4254
* kernel/sys.c: fix stack memory content leak via UNAME26
  - CVE-2012-0957
* use clamp_t in UNAME26 fix
  - CVE-2012-0957
* ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
  - CVE-2013-0871
* ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
  - CVE-2013-0871
* wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED
  task
  - CVE-2013-0871
* net: fix incorrect credentials passing
  - CVE-2013-1979
* perf: Treat attr.config as u64 in perf_swevent_init()
  - CVE-2013-2094
* iscsi-target: fix heap buffer overflow on error
  - CVE-2013-2850
* ARM: 7809/1: perf: fix event validation for software group leaders
  - CVE-2013-4254
* ARM: 7810/1: perf: Fix array out of bounds access in
  armpmu_map_hw_event()
  - CVE-2013-4254
* n_tty: Fix n_tty_write crash when echoing in raw mode
  - CVE-2014-0196
* floppy: ignore kernel-only members in FDRAWCMD ioctl input
  - CVE-2014-1737
* floppy: don't write kernel-only members to FDRAWCMD ioctl output
  - CVE-2014-1738
* futex: Test for pi_mutex on fault in futex_wait_requeue_pi()
  - CVE-2014-3153
* futex: Fix bug in WARN_ON for NULL q.pi_state
  - CVE-2014-3153
* futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
  - CVE-2014-3153
* futex: Handle futex_pi OWNER_DIED take over correctly
  - CVE-2014-3153
* futex: avoid wake_futex() for a PI futex_q
  - CVE-2014-3153
* futex: Revert "futex: Mark get_robust_list as deprecated"
  - CVE-2014-3153
* futex: fix handling of read-only-mapped hugepages
  - CVE-2014-3153
* futex: Add another early deadlock detection check
  - CVE-2014-3153
* futex: Prevent attaching to kernel threads
  - CVE-2014-3153
* futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
  uaddr2 in futex_requeue(..., requeue_pi=1)
  - CVE-2014-3153
* futex: Validate atomic acquisition in futex_lock_pi_atomic()
  - CVE-2014-3153
* futex: Always cleanup owner tid in unlock_pi
  - CVE-2014-3153
* futex: Make lookup_pi_state more robust
  - CVE-2014-3153

6. By Andy Whitcroft on 2014-03-28

[ Oliver Grawert ]

* SAUCE: battery: quieten the battery charging messages by default
  - LP: #1270248

5. By Andy Whitcroft on 2014-02-28

[ Andy Whitcroft ]

* [Config] CONFIG_TMPFS_POSIX_ACL=y
  - LP: #1286184
* enforcer file should not be empty

4. By Andy Whitcroft on 2014-02-17

[ Ricardo Salveti de Araujo ]

SAUCE: wcnss_wlan: don't free penv when it fails to trigger config

3. By Andy Whitcroft on 2014-02-07

[ Kees Cook ]

* SAUCE: (no-up) Yama: add link restrictions

[ Tyler Hicks ]

* [Config] Enable Stacked Yama

[ Upstream Kernel Changes ]

* Yama: add additional ptrace scopes
* Yama: higher restrictions should block PTRACE_TRACEME
* security: allow Yama to be unconditionally stacked

2. By Ricardo Salveti on 2014-01-24

[ Ricardo Salveti de Araujo ]

[Config]: Enabling backlight driver for flo

1. By Andy Whitcroft on 2014-01-24

[ Ricardo Salveti de Araujo ]

* [Config] Enabling configs needed by Ubuntu
* Switch to gcc 4.7

[ Upstream Kernel Changes ]

* ARM: 7668/1: fix memset-related crashes caused by recent GCC (4.7.2)
  optimizations
* ARM: 7670/1: fix the memset fix