lp://staging/ubuntu/vivid/linux-flo

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

9. By Tim Gardner on 2014-09-19

[ John Johansen ]

* SAUCE: (no-up) apparmor: Sync to apparmor3 - RC1 snapshot
  - LP: #1362199

[ Tim Gardner ]

* Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot"

[ Tyler Hicks ]

* Revert "SAUCE: (no-up) apparmor: fix disconnected bind mnts
  reconnection"
* Revert "SAUCE: (no-up) apparmor fix: remove unused cxt var for
  unix_sendmsg"
* Revert "SAUCE: (no-up) apparmor: use custom write_is_locked macro"
* Revert "SAUCE: (no-up) apparmor: fix bug that constantly spam the
  console"
* Revert "SAUCE: (no-up) apparmor: fix apparmor refcount bug in
  apparmor_kill"
* Revert "SAUCE: (no-up) apparmor: fix refcount bug in apparmor
  pivotroot"
* Revert "SAUCE: (no-up) apparmor: fix apparmor spams log with warning
  message"

8. By Andy Whitcroft on 2014-07-16

[ Upstream Kernel Changes ]

* epoll: Add a flag, EPOLLWAKEUP, to prevent suspend while epoll events
  are ready
* epoll: Fix user space breakage related to EPOLLWAKEUP

7. By Tim Gardner on 2014-06-26

[ Javier Martinez Canillas ]

* SAUCE: (no-up) apparmor: fix bug that constantly spam the console
  - LP: #1323526

[ John Johansen ]

* Revert "SAUCE: apparmor: fix bad lock balance when introspecting
  policy"
* Revert "SAUCE: apparmor: fix memleak of replacedby struct"
* Revert "SAUCE: apparmor: fix memleak of the profile hash"
* Revert "SAUCE: apparmor: allocate path lookup buffers during init"
* Revert "SAUCE: apparmor: fix unix domain sockets to be mediated on
  connection"
* Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 4 snapshot"
* SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot
* SAUCE: (no-up) apparmor: update configs for apparmor 3 alpha 6
* SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
  - LP: #1308761
* SAUCE: (no-up) apparmor: fix refcount bug in apparmor pivotroot
  - LP: #1308765
* SAUCE: (no-up) apparmor: fix apparmor refcount bug in apparmor_kill
  - LP: #1308764
* SAUCE: (no-up) apparmor: use custom write_is_locked macro
  - LP: #1323530
* SAUCE: (no-up) apparmor fix: remove unused cxt var for unix_sendmsg
* SAUCE: (no-up) apparmor: fix disconnected bind mnts reconnection
  - LP: #1319984

[ Tyler Hicks ]

* [Config] CONFIG_ECRYPT_FS=y
* [Config] CONFIG_COMPAT_BRK=n
* [Config] CONFIG_SYN_COOKIES=y
* [Config] CONFIG_EVM=y
* [Config] Sync LSM config options
* [Config] Sync crypto config options
* [Config] Sync IPsec config options

[ Upstream Kernel Changes ]

* Revert "use clamp_t in UNAME26 fix"
* Revert "kernel/sys.c: fix stack memory content leak via UNAME26"
* Revert "wake_up_process() should be never used to wakeup a
  TASK_STOPPED/TRACED task"
* Revert "ptrace: ensure arch_ptrace/ptrace_request can never race with
  SIGKILL"
* Revert "ptrace: introduce signal_wake_up_state() and
  ptrace_signal_wake_up()"
* Revert "perf: Treat attr.config as u64 in perf_swevent_init()"
* Revert "ARM: 7809/1: perf: fix event validation for software group
  leaders"
  - CVE-2013-4254
* kernel/sys.c: fix stack memory content leak via UNAME26
  - CVE-2012-0957
* use clamp_t in UNAME26 fix
  - CVE-2012-0957
* ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
  - CVE-2013-0871
* ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
  - CVE-2013-0871
* wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED
  task
  - CVE-2013-0871
* net: fix incorrect credentials passing
  - CVE-2013-1979
* perf: Treat attr.config as u64 in perf_swevent_init()
  - CVE-2013-2094
* iscsi-target: fix heap buffer overflow on error
  - CVE-2013-2850
* ARM: 7809/1: perf: fix event validation for software group leaders
  - CVE-2013-4254
* ARM: 7810/1: perf: Fix array out of bounds access in
  armpmu_map_hw_event()
  - CVE-2013-4254
* n_tty: Fix n_tty_write crash when echoing in raw mode
  - CVE-2014-0196
* floppy: ignore kernel-only members in FDRAWCMD ioctl input
  - CVE-2014-1737
* floppy: don't write kernel-only members to FDRAWCMD ioctl output
  - CVE-2014-1738
* futex: Test for pi_mutex on fault in futex_wait_requeue_pi()
  - CVE-2014-3153
* futex: Fix bug in WARN_ON for NULL q.pi_state
  - CVE-2014-3153
* futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
  - CVE-2014-3153
* futex: Handle futex_pi OWNER_DIED take over correctly
  - CVE-2014-3153
* futex: avoid wake_futex() for a PI futex_q
  - CVE-2014-3153
* futex: Revert "futex: Mark get_robust_list as deprecated"
  - CVE-2014-3153
* futex: fix handling of read-only-mapped hugepages
  - CVE-2014-3153
* futex: Add another early deadlock detection check
  - CVE-2014-3153
* futex: Prevent attaching to kernel threads
  - CVE-2014-3153
* futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
  uaddr2 in futex_requeue(..., requeue_pi=1)
  - CVE-2014-3153
* futex: Validate atomic acquisition in futex_lock_pi_atomic()
  - CVE-2014-3153
* futex: Always cleanup owner tid in unlock_pi
  - CVE-2014-3153
* futex: Make lookup_pi_state more robust
  - CVE-2014-3153

6. By Andy Whitcroft on 2014-03-28

[ Oliver Grawert ]

* SAUCE: battery: quieten the battery charging messages by default
  - LP: #1270248

5. By Andy Whitcroft on 2014-02-28

[ Andy Whitcroft ]

* [Config] CONFIG_TMPFS_POSIX_ACL=y
  - LP: #1286184
* enforcer file should not be empty

4. By Andy Whitcroft on 2014-02-17

[ Ricardo Salveti de Araujo ]

SAUCE: wcnss_wlan: don't free penv when it fails to trigger config

3. By Andy Whitcroft on 2014-02-07

[ Kees Cook ]

* SAUCE: (no-up) Yama: add link restrictions

[ Tyler Hicks ]

* [Config] Enable Stacked Yama

[ Upstream Kernel Changes ]

* Yama: add additional ptrace scopes
* Yama: higher restrictions should block PTRACE_TRACEME
* security: allow Yama to be unconditionally stacked

2. By Ricardo Salveti on 2014-01-24

[ Ricardo Salveti de Araujo ]

[Config]: Enabling backlight driver for flo

1. By Andy Whitcroft on 2014-01-24

[ Ricardo Salveti de Araujo ]

* [Config] Enabling configs needed by Ubuntu
* Switch to gcc 4.7

[ Upstream Kernel Changes ]

* ARM: 7668/1: fix memset-related crashes caused by recent GCC (4.7.2)
  optimizations
* ARM: 7670/1: fix the memset fix