2
ae19322028b1773b1bcd6c885984833d1e75db70 3a3675b7f23f83ca8c67c9c2b6edf707fd28d1ba
3
109589c0f628d971a3f5f8be26327b611294209a 3a3675b7f23f83ca8c67c9c2b6edf707fd28d1ba
5
# CVE-2010-4073 -- upstream provenance missing
6
ab795cb81e3c4dea070760521172641bba134112 03145beb455cf5c20a761e8451e30b8a74ba58d9
8
# CVE-2011-1182 -- upstream provenance truncated
9
5ab3f07c1f2ae5426b3d7617b00c71a1c15b59e1 243b422af9ea9af4ead07a8ad54c90d4f9b6081a
11
# CVE-2010-4655 -- upstream provenance incorrect
12
5caf3ae4c4bed98bd6148021e6e934d94b5dea1d b00916b189d13a615ff05c9242201135992fcda3
14
# CVE-2010-4258 -- upstream provenance missing
15
110fec00b959225ee7b4cd39f72d63037e965d32 33dd94ae1ccbfb7bf0fb6c692bc3d1c4269e6177
17
# CVE-2010-4249 -- upstream provenance missing
18
66c83ca9f05093f15479cf0bf32af8d74c188329 9915672d41273f5b77f1b3c29b391ffb7732b84b
19
46eb64181d1ece0418c62ee21fb0125269edb919 9915672d41273f5b77f1b3c29b391ffb7732b84b
21
# CVE-2010-4169 -- upstream provenance missing
22
28bab0844a0841b7b2a751004fe3f020882d9d41 63bfd7384b119409685a17d5c58f0b56e5dc03da
23
e528dd34dd7ad15c866bb0cda26d870fd5f07175 63bfd7384b119409685a17d5c58f0b56e5dc03da
25
# CVE-2010-4165 -- upstream provenance missing
26
:title('tcp: Increase TCP_MAXSEG socket option minimum.', ['7a1abd08d52fdeddb3e9a5a33f2f15cc6a5674d2'])
28
# CVE-2010-4073 -- upstream provenance missing
29
ab795cb81e3c4dea070760521172641bba134112 03145beb455cf5c20a761e8451e30b8a74ba58d9
30
889ad53006bd1c40847d2d4d30974741e2efa7e9 03145beb455cf5c20a761e8451e30b8a74ba58d9
32
# CVE-2010-4163 -- hardy patch contains both halves of the fix
33
f9e99e7d9c270629c7112baa1f1df78d83a29193 9284bcf4e335e5f18a8bc7b26461c33ab60d0689 5478755616ae2ef1ce144dded589b62b2a50d575
35
# CVE-2010-4249 -- upstream provenance missing
36
a1032dc786e55544575a8d959509cf5bf547b15d 9915672d41273f5b77f1b3c29b391ffb7732b84b
37
d428c4f08e29958d3d9dd3a2ea846ef5fce0366d 9915672d41273f5b77f1b3c29b391ffb7732b84b
39
# CVE-2011-1576 -- partial backport only
40
:title('core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576', ["3701e51382a026cba10c60b03efabe534fba4ca4"])
42
# CVE-2011-3188 -- stable update lacks provenance
43
:title('crypto: Move md5_transform to lib/md5.c', ['bc0b96b54a21246e377122d54569eef71cec535f'])
44
:title('net: Compute protocol sequence numbers and fragment IDs using MD5.', ['6e5714eaf77d79ae1c8b47e3e040ff5411b717ec'])
46
# CVE_2010-3448 -- backport lacks provenance
47
5dbd1a5bb0c356e4bfe79fc380d344ee7d998119 b525c06cdbd8a3963f0173ccd23f9147d4c384b5
49
# CVE-2009-4067 -- local fix
50
:title('UBUNTU: SAUCE: auerswald: validate the length of USB strings', ['CVE-2009-4067'])
51
88d987d6db2a14b191f4eb21cc623dae31e28e9d CVE-2009-4067
53
# CVE-2012-0055 -- local fix
54
:title('overlayfs: apply device cgroup and security permissions to overlay files', ['local-2012-0055'])
55
:title('UBUNTU: SAUCE: overlayfs: apply device cgroup and security permissions to overlay files', ['local-2012-0055'])
56
:title('UBUNTU: ubuntu: overlayfs -- overlayfs: apply device cgroup and security permissions to overlay files', ['local-2012-0055'])
59
16344d9f1160ed00312bf5bba85cf475cba1f94f 4ff67b720c02c36e54d55b88c2931879b7db1cd2 fc87a40677bbe0937e2ff0642c7e83c9a4813f3d 24e6cf92fde1f140d8eb0bf7cd24c2c78149b6b2
62
9013f4991549b363768eea2b1bbfc6076de242f3 b525c06cdbd8a3963f0173ccd23f9147d4c384b5
64
# CVE-2011-2517 -- backport carries two fixes
65
:title('nl80211: fix overflow in ssid_len - CVE-2011-2517', ['208c72f4fe44fe09577e7975ba0e7fa0278f3d03', '57a27e1d6a3bb9ad4efeebd3a8c71156d6207536'])
67
# CVE-2012-0056 -- revert to avoid the issue
68
:title('Revert "proc: enable writing to /proc/pid/mem"', ['e268337dfe26dfc7efd422a804dbb27977a3cccc-CVE-2012-0056'])
70
# CVE-2012-2372 -- local fix
71
:title('UBUNTU: SAUCE: rds_ib_send() -- prevent local pings triggering BUG_ON()', ['local-2012-2372'])
72
:title('UBUNTU: SAUCE: (no-up) rds_ib_send() -- prevent local pings triggering BUG_ON()', ['local-2012-2372'])
74
# CVE-2012-3400 -- incorrect attribution
75
3ef4736e53bd603e80830b4778ea39baa94919fd adee11b2085bee90bd8f4f52123ffb07882d6256
76
d8ce19a1e59bbf5944fcb7b6843c20a2fa4b1683 adee11b2085bee90bd8f4f52123ffb07882d6256
78
# Lucid has drm-3.3 installed
79
bd53bbe184ca00326a3c21834f41cca7a7bdb6d4 4e4ddd47774313accc86b233d6ca2c6a9037a671 6c42966768b0254f465a8f451333795283f53d22 76befb8c30cebe2af83fa346bdaf75b430893511 531e77139f26e8da32ee694b9ee5e6f4c764f1db 4c27bd339d226175ac0e4dc3ab8289ba696db8be 66b6ebaccb176a2068bbe328f162614dce524621 e7e65caefd57913260c82fb751f07655671ec47e 61caf87cb5c2a198966018343a6ce4c5ab6cf8df 635f1a31292087a2e99568bf4451c10ee287adaa 7d404c7b5f4c004712bc15ed6e6edd6779842126 f0e2f38befa787f0267419082b33e8ac72269d77 6a660f06e8120977b25d30ace354c8f9dc3aff2a d3932d6c475f8307ac66b4ce21563285ec05f6ea c86a90383638fa830c32cf086a1520be72167086 94429bb6c8343722544e282d89dc4638672e49b4 91cb91becf372b5308cdd7d2e15b2e3ef66bae7e b58db2c6dd18d35f59862d3352c86a0a58838bf3 f2d12b8e2c05e86b1a2070efcc07f1b8a79afb4c 01d4503968f471f876fb44335800d2cf8dc5a2ce 1379d2fef0ec07c7027a5e89036025ce761470c8 bf929efa56ac174bf6d4f54cd6fe811181a51ae5 d9184fa97b6f48d399636e5e2669bc8419f9369e e803e8b2628f3e9a42f45c5b7bb1f9821b08352c ce36f00d599e0f988c2a1b7b276d9184ee9c5d82 e22238ea37a870f70e34668a4992bde0c92bba8d 775c67090c98780b44c4f95d5c05565df715b8bd 648ac05c4f8a8aea908c7dff81ceffe003e28561 c60a284cc41f9989391706e113d30b4f27dbe3e0 85b9e4878f3b16993fba871c0c68d0948ec9c7c6 a87897edbae2d60db7bcb6bb0a75e82013d68305 3bef35721018d2bac08d0d03979606b65347211e f77cef3db357aeea22d82a2aa4f0ef8fbae41d47 75dfca80a610e4e87d3b9ccfb3f520692808697d 84b79f8d2882b0a84330c04839ed4d3cefd2ff77 6719fc663c6cd30da5dd02d08aaefb031a7a98fd 13876c6e5fec94e9ea51b73ac025583dd7655345 dd19e44b28b12f7ea59ebb54d8ea18054da7f9d1 a40e8d3139e9eb54bf1d29f91639a6c5e05f652e aacef09b59e99d9e919ede74d107d5d7f3721432 f072d2e77128c5b332ce217764cf170b660b99dc b1b87f6b65a770a69f3632cf7c1f9182547c1249 ee25df2bc379728c45d81e04cf87984db1425edf fd2e8ea597222b8f38ae8948776a61ea7958232e 99fcb766a3a50466fe31d743260a3400c1aee855 b91ad0ec52770dcb622b94fc1f57e076686f427a b1d37aa0aa43c5bf857364093ab2191acd37f2ec a87ff62a80a6a65fc664cd410061910b8c52b896 a51a3bf50d41708388f51ce63d965c0e77726eab eb1dba0ebaa5b7642b323fac148f9947522a48a8 5025b43120b629bdf11087a3c652dc9cbe172191 39c9bfb453b748ce220ceefacbe2a5c19fabf67b 1ee7698fc3ec3d7949fa55e5154c8f5de8f1c3d9 e235c1f3e132a243a1f81b3d95c99ee199b4d3f3 9967b9481d2387af4dbe5ceda7a209466ba004a0 126b5440565a1fa0cb49fd30041525d5a9a848f5 7dad9ef6d9255b4d2d0a26305a785a55f3ba55e3 f0fbe3eb5f65fe5948219f4ceac68f8a665b1fc6 139295b671ff4ccd904f2fa58e9dbc0fe99cc7fe 69c9700b544e496dc3ccf472a4f3a76dcf4abaf7 a32ed69d7bb3cd259d813d71281d62993b9a70fd f927b8907cb25943d6275d4ea036c065b8fd3f33 efa8450f6c93c9d4c99adfea2f52f1d02d878d5b 4b9d2a2112163a757943c78ea98587fc9e828641 1ca137cdcd4e11af03dbe073d48a470b833a456d 38fd2c6ff526e6a59edfa8e08f6f0724646784c4 5ff55717674470b96562f931f778c878080755b7 a17538f93c16f0e15e35dc31eedad87e2d9c5c26 624ab4f87e99f10ea3b45e76039c477fd4d7a7e6 23fff28a9b0529869bffef8aab0d3f350dd3b5a4 655efd3dc92cd0d37292157178d33deb0430aeaa 94cf6434a1bc5958d5da3be62f1272792dada2bf d7748bacbbee80b2cc4b690a74d5db2cd84acd7b 9e5b2af75abc67c13005c706cf95bbbb78f7fddc 062b389c8704e539e234cfd67c7e034a514f50bf c38c7b64a2747a211c3a6e8e5919ee25ccd474e7 93533c291a0af78ca57115fc44d2e6c4c9517cd2 67026e03244d76b8f1fa725b079d4182fe8910aa 33c5fd121eabbccc9103daf6cda36941eb3c349f 17aafccab4352b422aa01fa6ebf82daff693a5b3 f71d0187987e691516cd10c2702f002c0e2f0edc ff82f052d2a187dd0fa0e431ba70eb457c71a40e 5ffdb658f605cbc420944e7c7eeec9fbb8a73772 c188660f6dbb0df9febe1b841a16c66c28353c15 8e19a951774a16cf2626292ae06fd2b62630e67e 110b20c3ddcfa98cc932aef3af2d59b4e0841f08 fa5829b36539067f3c675f5d437531dedcfc4ad8 dd5fde6041d7ea30fcfedcc159a4cec8b01f73b2 4b866288be6ffaefaad9cec212cb09e3258a68ee 2dea2e29b9fad48c759aa406b5ea426bff4339af cdb6e375c3c84558ed2c13c5461b22e8f7b7980e db78e27de7e29a6db6be7caf607cf803d84094aa f28cf33945cc112f8ee835512b7440905dc29ad2 43c33ed87d0f1b900a6a3014db556ecc7f4a989b 97b94ccb9aa1b82ed7a9a045d0ae5b32c99b84a0 013d5aa2bbb2ceacba7a0dad7f2a0eb20133323f f034b12dbb5749b11e9390e15e93ffa87ece8038 2dd873838805a6e84c1afdfbf13e8709bfb5c70f 643ced9b0b4810b5725910667604f1a373f30f2f 4bdadb9785696439c6e2b3efe34aa76df1149c83 de3f440f8c9922afe8770dd16c84f1c87d779b59 8a6c77d645d9111f7bc01f908464301f5c3e0a05 c062df61966405b0be6743bfb0cf300dca2fa7c2 0ce907f89118aa8748f950700b6919b1d8d8a038 eceb784cec4dc0fcc2993d9ee4a7c0d111ada80a 7087e16286913b41ba9a5186360645b57b8508dd f2ab3a13d2cbe19426c27c35a014c98212e914a5 5fd4df4d475a7fee96fff54f6341192f547984e0 d796d8446fe0ff4442c1a1d0b10c861f17ac8168 8ba5152a3acd5914cade42a1c8c9dc58ad8d1a89 0eaddb28d3460f13102cd82cf58af875bfb1bd53 1a961ce09fe39df9a1b796df98794fd32c76c413 162265367a96d381f07066581d65e52627b08618 0107bae01add219e1a146f2b412d64a7f1946028 0208843dd59330c30e0773c77d5362260aa340e0 a1470890f29da73783e932078ed911f5871e3ad3 38678d3557420a1c40f7ad5a04a46a7de7a305b9 947bfc83043181e86e3e3134da158e479c9bcc51 4eaeca33512b9774c25507b9a9bdcfe3791a5cc5 fc10332b8ac5ca32d11f898027d84c007543bd80 a348c84d953f61c776e53cde0a63a4e407a23c18 c8c15ff1e90bfc4a2db1ba77a01b3b2783e723fc db96380ea26fcc31ab37189aedeabd12894b1431 7e71c9e2e7704ebf044d4a964e02fbd2098a173f 7924e5eb8fe422d6b1ce3b3e2be749a480dfcdd9 79c2bbc505751bb5130ac753251fc9a0eb37bb12 0c45249f419d8b86abe0e51c6627ca4b085e8c23 615e0cb67968c94fd9e53797985843a5b816dec4 54f088a9603dbee88809cb2ddfd8dc1ef8a74be5 e2f8e87089427d3a203538dc73058b90e82b11f6 9f53e7931610cbd1715fd2d2c0f9a853e17f02d8 07bec2df01cde5590a1700b992d12de3f46b12bc cf57fc7aa2ac61d02a29550b99db6a01ccd7917c 828153e29206196552c2cc34461ad7e5b93e3f22 f3d1ccc14f37a07614c67a270f05a8d94ec3667c 58d65b84dee524b0a4a8b747b8eb8bbf2fb16d9d 134f248bea4bf5c3169b4950eb49c6651b09eb0e 71666475018a3024fb49499096d26a9350349e8b d051bbb22e9d8e87e2a5b8efb176d1bfd0f7feee 0d92971dd6973d865a873c24df2d7bfe06ec4486 ba59953d281747b1f7518a60f0ba8ff671cd0d65 9b974cc17166d31afed2638d56bdbf9829afbfaa 6251ec0ae2eb9e9e96689422358c2fdb35c63768 885a5fb5b120a5c7e0b3baad7b0feb5a89f76c18 500a8cc466a24e2fbc4c86ef9c6467ae2ffdeb0c 33814341f22f13cec17e8d7fbf6f7e8000e3efa4 21bd770b9c90ee6a53a9dbb6293513a8c7654cfe 6036ae7e9486352d5d1cbbee89186986e28e11fd c7c85101afd0cb8ce497456d12ee1cad4aad152f 79b7dcb2af7da728819cf060b94ce8c9ead36f7e 12f735b79f0ad63964dedabed3eee8a581bb66a5 ac8fb975e8c88d312a376b035494be17548d01c6 b8780e2ad20feb8d086bc961a678e8fdb4fa296b 0ed3165e55fdedee6fc04b757907a2d5ccacdf18 c8ebe275790f2c5efc3ffec515c93b7a139829d3 3d9aefb8bd1be2b5e07acf0f938c21769f03cc64 b79d8a65d52d3d80204e1bad30ee57bb5a58ced1 716abaa8e52548e8863831cb32984655f46b5566 b0d2de860bd621959bc826ffd42618fe1de37a61 ed42f8240cfea13580fe91195e52c5247275e7df 77cb5c75e89ccfeb993d9dec37f8edb3a855e9f4 e147eae80afe98b86a7921a40a709584e6603e34 9855e584d296a32bbcc1bb3d29b7e0ed078b03cc 0a90dc51aa3162abb7cd64323ba2e6674e1c5ff4 354fb52cb6138de0e6cf84a0f6a7f3467586e390 d9f36a0051b7c0382107cb0342af1126a6eb627d e99e1e7893ac80fe769477cb1ddd4b482cef8902 476d51dbdbaa2e61fa4899459c658f476eee3fd9 3f09ea4ecdcbcea05541f83e557d6ce2e56626d8 effe1105bef07f42366c20eac41b80ff9fcf675e 7704befbd599e9c9524f640e14658ca8ed9d8717 50ec3b7c35fda131e92abc6f9d93a230b7e009eb df1c93bae2b671e2aa50899a120af20afdbd504b 700a0cc088a42a2ed92c6f961534fdb38588af87 0a3f316370da07fcdb11fde4f5a683d60713b7fd 30d2d9a54d48e4fefede0389ded1b6fc2d44a522 6398d42454ce1671b3422c34fd0f600c9c76c8b1 7a15cbd40108a670baae71cbd3cec62b65891fa6 ef14587706521287f1c7ea3326e732f7d86dd096 70a94d6a35072b62f808155f117f00485a395f03 2c761270d5520dd84ab0b4e47c24d99ff8503c38 9270eb1b496cb002d75f49ef82c9ef4cbd22a5a0 11f3b59e3654c66c4e8ef2c48f8138b78bf440da 1b24203e51072b6e76aff8c74bdd67eb3b34a724 b042589ca038e647fa1e2bb4e7ac3963688479b8 3890ddf56dbc0f804953198e65a7e406ed654576 b9241ea31fae4887104e5d1b3b18f4009c25a0c4 7c3f0a2726fed78e0e0afe3b6fc3c1f5b298e447 6a304caf0bf9c429fc261f260b86cabf5bde2cbb 6207937d4feea000913e8ca23fe20c7744be7847 d8e292093a3a78a7967757e90abbe64869e4cb7c 40c2298bdcc8b766a39964c44e9a74d16aa95d53 c63834e1db41b59d6c7bfb1d2a549c027a42a877 400f14ac4ef02b2f77c9d0e3ad7d66e2f6c8e663 cc6e496587502057af02139931736b0b7a49f637 d6126c5c8b2019658aadc9754dca80a7573dbff5 dc8d76cac942e7344a72ad18afb90fa46cf20bb4 1959ca80e1f88b82c1cb7227f437910768ab0c94 a908b96c22883f967e4ddf5aa5b35e3b4a0629a5 c03ec7f91fcf20af177dbc728d518fb462bad42d e9dd8e11edfff5e348f3dcfd152a70c5da921126 7de3643f938af910bef4c1f800176a3ebdc29502 ea911a1cf4f9c5bef18ff399ee2e2ec77792b650 a5027ccd3c1abe190d2b84a2d7e40d5f099e48a7 ca4362adb4c01807dfcf3f2b3152a7ee36f0d1ca 0a2d090f99c9686e5107ed59533fc4210a9a47d1 c2b82924bda0c3de2b49bd3a4d8b6725721820bc 8f71c29e442e013212a98e2b37eb1074c4d1134f b7f7e41b895afd110d1f5121161fd401eccd98c9 02076da97a15bbf7477bffed71d02f726de2afc2 e55ca7e68efc7c2d320cd9975ebc5e0fd27debf0 fbe36a7a069267b82b7b82a66d79a4406cfa90b2 aeca15e596eba284c727049d0b9b855b13c48856 69a18c328b762eaec3f8ca3af8c7cbf10b536bf8 c6af6053be60840dcbb037c3798557cbf71cbb08 73cb9276fd189c19558a97600456bd13fa5debe8 287c1532145b63d394060d46c0309b123b862345 0d87c100312ce75d9bb75a456d8a542e84a1722f 617e234b01757698ed5f8c9a5fbf12717b76e371 94fd163d86b049842856864cdeac318131ec576d 509c7d83c3b18a50a0bd02afa43c8ee3c7605bc9 89347bb8ef2d0af1ae8d847b7df91e9f04eccf2a 804c7559e9376c3ba78ae15a30337b1e24f8ae80 fe5a64acbfab4f79ccd18972c3d4c1cae31f3b8d 75c99da6cdd0ec9d70747f9ced3e85b2dd955cdf dff36321497b1130085820c81a44779b065c8d7e 1dee7a930bfddd69825fca3e3f9541c8a5333876 234896a7671c23233230622728f6942b3d1c098e 7978b9cfa59133a34aaad420e447c2a29d5c6152 bbb8c3d8820893694a3567716adb3b6f6ba2b7d0 7fb8ec8e2bedc8381243cf4bdc4cfa8e657397a8 846975a97b098bbbf1232a01a3a5723a4bddd9e7 61768bf1e694056cb41029b60e1270bf2578a83f bf5302b9496b25fe80ffa8a4fd191ad95c217864 be9721a951bd5ee6346dd2f3eed8a6fd1761c186 8c032ce73ef3a9e5a14c35ea3de19f1b9a8d7c0d f03a314b4671407c4ff69a2d85e72413e8064c48 a510604df9444a2a1bdecafc048749e0f35816b5 1c7059e4f36e76c72cefbb6c9bd2bcf45c12e777 111b459af191891f49682f21e11f348703cd8bdd 0829168b474663d8b13f6105368dbbf4a1a03256 11d6eb2af53395b25e1d6b8b79bb9a999c3e4c4d 3033f14d6538e0e7c3c53d3ed1ff6cec28260b98 75c722d7ea70b791d179ec900e7c88bd6d5fd71e 8dea4a1935fabbc5fcea6016d6670e6bc06de198 27f691a69d411b9b2093163cdd27780f9c927422 77e2b5ed83864f0a58e2cd046b15aab6865babfb cea7789f2a680893e812776dd7202dd50475f9d2 a0af9add499cf29a16707b7b148842992077f4cb cb00f7c1419d09ee0daf7d8bed86f253d98db7b4 588d7d1268658b6a010eb7415bff2f936c51acf7 50f411e34d623efbf4e4b4b0c1a4a20e04c5cc9e 7751b8cb754f1bc48b20c1145d43c7651d4951fd 992dc9ae61f86db3b8ef9f8d6b7df898c90e8c08 003e69f9862bcda89a75c27750efdbc17ac02945 e77cef9c2d87db835ad9d70cde4a9b00b0ca2262 059d233f9c1183ed2f59d631e4daf486060e880d d0269ed8580b492df75dafb011dc51a1390bf200 cafe6609d6dc0a6a278f9fdbb59ce4d761a35ddd 62cdc0c20663ef840a94850892517b2b7f584904 06b6476d6b291473d0928ed242158a001d50c0f0 fc9a89f97e532152ae614d5ce717b81c8f8b0e91 196c58d21fc47fbabab6a98e23e5a6335f717e44 7970e677accb676f15e11468c60cb93ae477a513 f0f480adcb6c44e76186c6d3036e06ed7e7e0202 a7bc115fffb69a55cf2c332567ea6908d9026f22 a5899fcc189e9357873ddf26d5e6e7e6ff84c2f4 a59e385eacd920222756a23c113444fe3063cf81 ddc9003c357d1ce10be6ec91bdb8df8ea836087d 40f33a92100f4d9b6e85ad642100cfe42d7ff57d 8fcc501831aa5b37a4a5a8cd9dc965be3cacc599 43b19f161c7a9941e3aa7db0e3ee19b93980e3d7 65aa2f4e8d85b6145ef4834f440a63ab68bd7443 875c186620e017e62b773c93e46af21bb704fe6b 3655d54af8dd85788c3e5088387469703a0f8f12 d8a7f79246a447722bd90c2c4ba3ca068b2aa4c0 5eb226132f53d5ec36ce4e7ff9d6b49cceb50f3d e89a8c901ca94a47c0e0b2fb335623d810e37545 8e10ee9a0da12c586d3397150e34a946507c23f3 69da301589b579f9619475e30cc449df9193410c e6be8d9d17bd44061116f601fe2609b3ace7aa69 823f68fd646da6a39a9c0d3eb4c60d69dab5aa13 4547668a050e7de3cd73a4c6736dfc2adebff67d e5a95eb778690bc864eb330202d2c1b974caaeb4 8faf3b317471179c02db339aa80955a2e88c036d 898822ce9561ab9b58a7eb60580a162a83dadecd e3d8affb0d2d95f2da61e30ce86b33177feb91e8 9ea8d05932c082a7ccbd9dc2e10687c88a70bd13 29bd0ae25f8cb96b63560c2cbccec77b425e1603 69e302a998ddfc3bd99033052f6d6152a46e7d6e cda9d05c499093c67b4a376a15009923acc2127a 1d3c36ad4122651018599d4e3c9be0cccfbfb939 76446cac68568fc7f5168a27deaf803ed22a4360 1d3d51b6d2d6fb51c6c30a8c7ed0fd939f6100bf 246263ccc31e4ba2886cca17000bf09ea683eac5 b9597a1c6fa6cbc938f14ab6a7fe09047b3a346b 0786201d8cd0730e72b0e087484dd47cc5f58409 f56cd64f5f713a3013c4d980a5695c198d839671 3642133816f9f25065e3ca310f0720574bcdcc52 0a0c7596c643239e8d4c3eaaba43b74a96f2411e d2efdf6d6f425950a61fa5cc3aa22e6718e7f3c8 512889f450c1851d9e3628f1894b9b64b0701eac 46c64d4bfa01cda7d58c514164f8b127ab6741b7 5ea597f3764880ab3a67fe2246218634a8c12778 c31ad97f1886a2ff0f3356dc31d50c57944365da d79766fab9975c6414ebab7d2abf017834a48c35 310a82c8c5fc431913fe34a17251118e71c2c876 edc664e314d5dadc326cfc15a536fe906d652204 29ebdf925c2c45f6531a953c6c5c8e4d3b4ac2dc e2108eb1f66d77b4af77caf282cab1d47e3f4831 7a73ba7469cbea631050094fd14f73acebb97cf9 3d3a5b3290043618e8409f3fb68a63de6156fdd4 e1f7800315d78686481b27b113a3317ac687b6bf 794f3141a194a4f4c28c1d417b071a901f78d9bb e265f39e1ff026dcc787f1953c048f3de5aefd16 01136acff8cc8251822fbae77f11e8029049c6f1 ed8b67040965e4fe695db333d5914e18ea5f146f c566ec49159b806db95a90fd8f37448376cd0ad2 b01f2c3a4a37d09a47ad73ccbb46d554d21cfeb0 b295d1b6e3e3f240d27cbe556d33ff5eb54721a7 cfdf1fa23f4074c9f8766dc67a928bbf680b1ac9 49ae35f2dd1ff78ee88d5f8a38d0af63c3ad9f71 a2565377a5c31e25c77c7cabaf6752abe9a2d83a a3cb5195f6db58dbebd8a31b877ddce082c9b63d cbda12d77ea590082edb6d30bd342a67ebc459e0 11ba159288f1bfc1a475c994e598f5fe423fde9d 96b47b65594fe2365f73aede060cb5203561fed3 37cb3e08852be92d94e6a65c489bd8afa2e8a15f 65ec01a9406327f22b1c740f8a42cb93eb676eb5 0735f62e116fae1e4f36237a97de28e8a56b4c2c 3c8868d3dbba5110bd43b49879f12d1a6b2a28ca 054b93e444550a72aef17115363cdef253b9ee7c 15bee69ee1532a29e13124b298027ee6ef54bac8 22fbd53809eb7a1b00fe09159fe0a565fb6c725c c5804be0627508487bd9eacebf9de7f807e5d4e7 13c5443b515109f175bb9917c578a7ae973f6851 37383650e4f47aef633055e3f62e87a44d83312d 657b6245ba23d32c7a4fd273549c8c0beebec770 ef2bb506687a5f1cc8ef2fef370bb168b2808106 dc4a684ae80d914b2b7fe75b2733a3296a8b92d2 95f158eab42f971c2a6f82cc886ce657d92a25f4 d785d78bbdb53580b12c40e820af5a3281ce2fc8 6e7267721fd67d626433ea10c59fc232c6928259 6234077d6bad4db25d516743b6723c1b26505341 dafc3bd515d6079406986f7748b48adb3c7170f2 7923c615b811945a9d9f456c92a7a32c34167458 f89551bfe953a144f7d4918ca4c12e11de1e455d 51f07b7ebce15c1848743a2ba43a0005375d8243 ecabd32a623eaf3e4c853ff73f200c8079028000 d03d858970a158fa82d9ba0d502bdea0bdb3ad33 9fb03e63511cc20d413c2896396ba77df3db8411 5012f5063f41ca01240e5983c3b2cceb9aafc7a4 eb6d2c39dbe46ea1c4f3da4eac5728c73f109ea1 9c51ba1db37cab780f38b2210913959f22d7b830 aaa207369436d04bb85382ddbb688a5b9461fd21 b663752627e7c6b4bc414684d71c6adce5719fce b8ff7357da45e025c446fe0479612215fe56a249 656cb79322319a7bbafec7912d262142e9a38bc0 9ddc8c52f58338ddc278fc82e540d9eaf4489dc7 81a5487756573b43458073969bc36b1e19124c24 b694dfb25a8de4ffbc14c9092ab8f88344ca86b1 61c2bb45697a56e96313a5f85f609b0c12ae26ff fb1d9738ca053ea8afa5e86af6463155f983b01c 632f61178d0473861ba77e774bb654b37bc7eccc be1cb8689c480228ffd2e4bfccc0dab7156cd9ea 6ee738610f41b59733f63718f0bdbcba7d3a3f12 d1ede145cea25c5b6d2ebb19b167af14e374bb45 9062fa6612958f35f41379425bcae9c9b4ccd68e 1fb107fc46692a000533da3d6904ac28b6b3148d 09855acb1c2e3779f25317ec9a8ffe1b1784a4a8 4361e52ad0372e6fd2240a2207b49a4de1f45ca9 fb53f8621a3fab88776ae2450a1f3afc7920231b 99d7e48e8cb867f303439ad40e995e203841bd94 550e2d9270e2f0a10c3b063899f70e4cca25fe72 779720a3209849be202ac36a811e934865c50971 7cb7d1d7b650c9764c8a1b00e2b43d932acde779 cf0fe4566dcc0c5bd9b7da8c9a53e712593db118 eaa5fd1a66fefd7cc918d80250d66fa48b10b81f 4a04a844ba0c09b5641bf2ebd9f9517aa76e52fb b27b63750d912e80d61d2120c4a1664062d0f808 69b3b5e59bc763c30d0098ae4bbe1225c0e82a04 2e7b6f7fa62d92d941c626f8ae45f5cd75a52d55 5cc6fbab9da5680e7e5d2507d0f0c2c52ff18031 98ffc4158e12008102cb6ae242a7fc46f9243f0d 312ea8da049a1830aa50c6e00002e50e30df476e ca262a9998d46196750bb19a9dc4bd465b170ff7 a2e68e92d384d37c8cc6bb7206d43b1eb9bc3f08 cf2f05d30dacab32e6866347be6cbfa4030b33b7 4f8d619cc3ab805aa1726c1dfe196a0705b955bd d3f420d1089169fb48366e1aa750bdd92db0a04b 279b215ecb8acc735c01ac89b1aa28c4a27dcafa 390d0bbe88b3ef00c28086076d791533407f298e ec42a6e7dcfc2e9a92fad1c132bc9e110fafeb3f b16d9acbdb97452d1418420e069acf7381ef10bb 7e8b60faea972604c315634cff62d44803731ea9 b0a007dc27d8d3ff3db07b3ea997323d9330f770 d4877cf2293f5463f531769fd12300cb3417c778 429770b3e39999c4d025fbcb9959502adc3989d8 e0df1ac5c2cf346f4cc335025734978a4d747aa0 dcfdd4083509f9c46b1e92c58c062d50da50580e 05a05c506f52041daa511f4899b63d21c9457474 b500f68045058454549f5f8553110ef086d8d06b eed45b30cd1423f8dc10b4312700773cac13c1c8 53c1e09fea4cf3fc0ec1f735a5fcab78c43cb55d 9fa05c98d69eb77c82e59b5e434ca63bba230ba0 e8696330e2a95e1b5872550dcf3ed04aecaf96b3 58682f107ad5178e47a45af3af1851442d05d7fc 5fbfce7fc906c4a9e3d5e0872e5d6affaca54761 54d9cb47dd6a754e434e5adeccb3a1e2835594fd ffd09c648a76a1cf96872c033e98d4730f9b10a4 5801ead6bd6bddf5505d6eab55f84d8ee8106cd8 f92a8b6758bdc0f277c4f42aa7d736a205ac9ded 4143e919ea999c9356ae4f71b5a3a80e075290d5 6a93cb250a60af1bb7b4070949f8546a2fdc52ef 1a66c95a64c9ae0bc8382254f544b24b23f498ec 746c1aa4d100f7441423050f34be79f401fbf7d4 5618ca6abc2d6f475b258badc017a5254cf43d1b fcffb947668073fd9c47da33f8e72add7f62163d 447aeb907e417e0e837b4a4026d5081c88b6e8ca ab2c0672984f7f7ebec6d5f615fd5a6ebad26f3d 22dd50133ab7548adb23e86c302d6e8b75817e8c f2b115e69d46344ae7afcaad5823496d2a0d8650 2a008d0ccde4ce59a2714e132d5f86a0771e6422 92cde00cbaf3236ef7ea9bd4f0b43c8c4a3f507f 6b02af1c1f35550ce1a9873841fe9c50b1613591 d904ef9b00a4473af16766e99f17bdbb5f0fde65 ffb4728095b030f0885ea8e0907ee4ac57b130ee 85364905f9ae12d19cb34099257d493e5d9a0c4e 22fd0fab3b512b5fcb4fd0b0668deeaa701511f9 85bb0c377f259100d049937e30c85f7a8dea0fa0 4bfd75cb08a362cb1df35dc6a5032d12843c6d87 c078aa2fc4d8e022c3b611e07b25ff77afdf9b73 4aff1013f5e4ae08a24155c029a2c5e1a7929de6 88071539a3f5195f9e9dae38a3e35b3ce4b9f9fc 64bffd03756249e11b8651ccf33ac3a50a93ed4c 4f15d24adb39803ba7b9363d0bb5dd714a6706f6 6070d81eb5f2d4943223c96e7609a53cdc984364 af901ca181d92aac3a7dc265144a9081a86d8f39 aa1a750ecb3412f69fe34081b249aa978154f360 0088dbdb809e8799cb8f26da5ac64b15201fa99d 722f29434e72188b2d20f9b41f4b5952073ed568 8de21525439e6b5bb8d8c81e49094d867bf82f6d 500b758725314ab1b5316eb0caa5b0fa26740e6b 4e3f9b78ff917cc5c833858fdb5d96bc262e0bf3 4c4f5413c3208da7621cd29baac1fbdca89181b2 d684076627a4561ea698bf7652a1a1baabdcdbdc 93e7de7b37cb6c75032007e5b84e1305f1705485 c142c3e5e3e826bdeca77062ec44be558ff2f6b9 01d01ba947670cf58f22119fc126fdf39078f6ba 884840aa3ce3214259e69557be5b4ce0d781ffa4 c3a73ba13bac7fd96030f39202b2d37fb19c46a6 46a79fa08a9a890a12cf9ec3ce51800911a907bf 1a95916f5465ad6c91398f17924949db7e0b5c36 862302ffe422378a5213f558fc5cdf62c37050a9 9340d8cfeacd16cef1cbe94527f7baaed7640669 2dbdc52c8162291aa7541b8ba6e1c1587f50c1dd 07a5e6324abacad56a8e7bcb44dd404e84f75f57 7ac96a9cb4982140e206bf3b58236efb2498ab3f 9cf00977da092096c7a983276dad8b3002d23a99 6e36595a2131e7ed5ee2674be54b2713ba7f0490 652af9d74e1a3a10bb10f0d8e8f42ddac26bbc1a f24bc39facc1e74eb989908106fe9f6d375ae16e 4c7886791264f03428d5424befb1b96f08fc90f4 1614f8b17b8cc3ad143541d41569623d30dbc9ec d8f60cfc93452d0554f6a701aa8e3236cbee4636 50dafba685c0f12c23d315820370b32d9ba64db7 ee2215f0b269f4c460807e3f827665eb7049aa34 ed160143c6967e89aee05b0685e73c4103bb3e38 72542d77058bd45ccafd1e15ed3c70349fe3277b 4b30b87042aa71ed8682e4df622a10456796fccd 7dde8a19656ddec769b609e8b5662aa7243b8b6a 30256a3f6b646f6c6ab7276a97b40792faac5f1d ec51efa9b2b8ff10b535a853c293e85bada886e4 32f48ffea91008a27b99aab7a68a3443559d83fb 23956dfa82eab95931aab5fa9886c1e96c41e4dc 38e1492130c42ac806ffd8b21ccf64eb1c997d10 47381156a8f0d793bacfa346cc4cc515399525f7 1f3b6a45f0805690269a7a9d265cbbc2f15b6c6e 2de3b4841f67a15c7b8e820b84dd6b7cc41370da fd874ad0a0dcf715333a3f3564c6486a3a90bb22 71407c46fecb82c542b6209f021d38a2901969a3 3e5f8ff3a9f4e7a71c5371b2122b32faf31c563a 80297e87bc9728a6ce559063fc4c117eba1f955a fe6890c3e8019cf1cebce60a86c19180359d3292 17e15b0c719b5ec0b344d3ebe3787b48315a0218 fcec570b27a47e428a9bfc8572ae4c7c230d0488 9b9fe72488a3a637e0550cc888e3f7a8f70e521e ab1e9ea08f1e94639b2d21a6bde5b55d31b1deee f0217c42c9ab3d772e543f635ce628b9478f70b6 d09c23de9f967a7b7dcee0ffc57222ddbd821aba 04b2d218001bdddb41b84c9f78d6bb3cd3b5b31c 778c902640530371a169ad1c03566e7c51b09874 27dfaf4f5825a119305db1bc63bef30ed400e376 28cf798f5a9bd894ee90b27667b0d36b4933ae23 38b3037ee47fbd65a36bc7c39f60a900fbbe3b8e 05dd8f973f895692dd33c95e87c0e69aa0e7a93b e9560f7cb20722e0e7db46bbb6f43c2194a238d5 7bd4d7be5c8c35a401b1589201e5d43a64d3f05b 6b95a207c1fd552e7d017837c5eaf1b0173a48c9 103a196f4224dc6872081305cf7f82ebf67aa7bd c35614380d5c956bfda20eab2755b2f5a7d6f1e7 7cf4f69d3f4511f443473954456cb91d5514756d ae266c98f580a9ba5e0bfdb1d1f0f70ab3cd807f fc816655236cd9da162356e96e74c7cfb0834d92 6363ee6f496eb7e3b3f78dc105e522c7b496089b c1b5dea097258b3d3d570d5ccc8f4bf5accb3f29 69341a5e01897714f968b7dccb94f57137acf45f 33db679b4ee94e5a55abb439a87905d76739095a 29874f44fbcbc24b231b42c9956f8f9de9407231 d271817baecbccb47da0d9f28c285a0dae8a06b7 9bedb9743fd906e4160468663ee6e1bbdc4412b8 12ca45fea91cfbb09df828bea958b47348caee6d 26444877812fb2a2b9301b0b3702fdf9f9e06e4b 311089d3d372c6f2b01a6d8a5ed7fcbcd9ad7621 1991bdfaf5897b6fbfdc7dce81508f7cbc044768 1b3c7a47f993bf9ab6c4c7cc3bbf5588052b58f4 4215866059b126590aceddfe9f846595b0c1f458 d1fcea6a529d22212b324f26cd660c85b289a026 18f9ed12f8c977e25d65a16af8e8d73f72417ba1 c8e0f93a381d1d76135e567f13a4418fce66fd95 2263576cfc6e8f6ab038126c3254404b9fcb1c33 9632b41f00cc2fb2846569cc99dbeef78e5c94a0 862b89c069cafded4e31029be511f2e0b58d9c5f 47ee4ccf745ea88ee1aadcf5895d91af3b73ea64 f985dedb57bae741b4326415f72fe1a1e556563b 3bea21b64c0e3f380814de990ef57ff1f08dbf95 7a654158bdf9dc318fd451fbf606ed100d6ba25f cda6be1ce27d721a88cb90543a1e6d0f41baeaa4 731b5a15a3b1474a41c2ca29b4c32b0f21bc852e d91d8a3f88059d93e34ac70d059153ec69a9ffc7 dad07ca71719598bc990dbdbeda763d15a10e98b 140a45fc3253746e1e42feafc63509df5d90889e 156822f7175d9ceb9d7e808502d3c5de8841e047 420a457088669e055e767dfb8468909cd1799cf9 4a9216453c8537a7f43a3b1708509b9dd271dc9f c9a9c5e02aedc1a2815877b0268f886d2640b771 4efc50d697ed8d9a91f0005d922907a7b6c9290d 43bcd61fae05fc6062b4f117c5adb1a72c9f8c57 c650156af34bffa3d3a62c9fe26eee595aab3fd1 01c66889c14aa163c49355b3be2ccfb214500599 1dc7546d1a73664e5d117715b214bea9cae5951c a4f45cf178f0d0ad4e516e020818b5f1c00e3d63 f3cd474bb235f2331c1a6f579bdbf892386e5c7c aed5f1dc264e2bc87e8656dd6945e4b1e72ebdbc d0c3b04ae953fd3bf69f9b1430c22608d2d3b90d 3e0f27ed75369298176abdf2fbe59116b6587a56 28c97730c36e06d5ba0c442156eb2154347cc3fe 44d98a614267c81a04ba9c7a0427c3a628985b7d 5c5a4359fe392b52b444134877fc4002be542b42 1df4b35b61df27fc5b173fe2789d976e40e1dc22 03f77ea5972e6a2363152aec692744cac824daba 5a5a0c64a99d7542c48c99d1a8bbb49e665842be 240a2d12dfff98f8fa1332dc8424284d96f0801e 02e792fbaadb75dec8e476a05b610e49908fc6a4 f0f8a9cecea322b215600d96cf0c1eb08343a4e9 48764bf43f746113fc77877d7e80f2df23ca4cbb 7a9c906094de8b3dc227de448019dbc386cd25d4 97f5ab6651a996ecefed73e41684422f3b29d9a8 c182be37ed7cb04c344501b88b8fdb747016e6cf 0a5c1e61dbaceb6ce56281a3128a6912b0dcd043
81
# CVE-2012-2119 -- incorrect attribution
82
d2cfe6dde0de9f9cfdd5be315496a7e25f04974f c50ac050811d6485616a193eb0f37bfbd191cc89 4523e1458566a0e8ecfaff90f380dd23acc44d27
84
# CVE-2012-5532 -- incorrect SHA1
85
f800ffc46405b8aa0c04af929eeb42c1ffa41683 95a69adab9acfc3981c504737a2b6578e4d846ef
86
14127d5cf5ce26f11b7345e5c15b9e0d60d988c9 95a69adab9acfc3981c504737a2b6578e4d846ef
87
81fae9fa5f83380084ef9dd393d20a4368cfef8c 95a69adab9acfc3981c504737a2b6578e4d846ef
89
# CVE-2012-4530 -- local fix, from -mm tree
90
:title('UBUNTU: SAUCE: exec: do not leave bprm->interp on stack', ['b66c5984017533316fd1951770302649baf1aa33'])
92
# CVE-2013-0231 -- local fix, http://seclists.org/oss-sec/2013/q1/att-233/xsa43-pvops.patch
93
:title('UBUNTU: SAUCE: xen-pciback: rate limit error messages from xen_pcibk_enable_msi{, x}()', ['51ac8893a7a51b196501164e645583bf78138699'])
95
# CVE-2013-0216 -- local fix
96
:title('UBUNTU: SAUCE: netback: correct netbk_tx_err to handle wrap around.', ['b9149729ebdcfce63f853aa54a404c6a8f6ebbf3'])
97
:title('UBUNTU: SAUCE: xen/netback: shutdown the ring if it contains garbage.', ['48856286b64e4b66ec62b94e504d0b29c1ade664'])
99
# CVE-2013-0217 -- local fix
100
:title("UBUNTU: SAUCE: xen/netback: don't leak pages on failure in xen_netbk_tx_check_gop.", ['7d5145d8eb2b9791533ffe4dc003b129b9696c48'])
101
:title('UBUNTU: SAUCE: xen/netback: free already allocated memory on failure in xen_netbk_get_requests', ['4cc7c1cb7b11b6f3515bd9075527576a1eecc4aa'])
103
# CVE-2013-1763 -- incorrect SHA1
104
:title("sock_diag: Fix out-of-bounds access to sock_diag_handlers[]", ['6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0'])
106
# CVE-2012-6547 -- commit message not parsed by scripts:
107
# [ Upstream commits a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc
108
# and 8bbb181308bc348e02bfdbebdedd4e4ec9d452ce ]
109
:title("net/tun: fix ioctl() based info leaks", ['a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc'])
111
# CVE-2013-1772 -- upstream fix has not been applied to 3.2 kernels;
112
# instead, the 3.2 maintainer has used a different fix for this CVE
113
49246465518de77d4c28431591bfebe8f7a05123 7ff9554bb578ba02166071d2d487b7fc7d860d62
115
# CVE-2013-2850 -- coordinated release, no upstream sha1
116
:title('iscsi-target: fix heap buffer overflow on error', ['cea4dcfdad926a27a18e188720efe0f2c9403456'])
118
# CVE-2013-3232 -- fix of a fix merged into single commit
119
041c8b32b20978d0b5e96b6adf015632d647c5af 3ce5efad47b62c57a4f5c54248347085a750ce0e
120
b508e50dfe6c828720d6e04cd510b8383b64480a 3ce5efad47b62c57a4f5c54248347085a750ce0e c802d759623acbd6e1ee9fbdabae89159a513913
122
# CVE-2012-4508 -- lucid uses a different fix that came from upstream stable updates
123
6c3ad759a6f68dc26f5eef2075bd3130cead8ef5 dee1f973ca341c266229faa5a1a5bb268bed3531
125
# CVE-2013-1060 -- local Ubuntu specific CVE
126
:title('UBUNTU: [Packaging] supply perf with appropriate prefix to ensure use of local config', ['local-2013-1060'])
127
:title('UBUNTU: [Debian] supply perf with appropriate prefix to ensure use of local config', ['local-2013-1060'])
128
:title('UBUNTU: [Debian] (no-squash) supply perf with appropriate prefix to ensure use of local config', ['local-2013-1060'])
130
fef4fb4a263c1c8ef910e8bdcf4dbffaa9917c5c local-2013-1060
132
0d34a427cb7518200a7c00024bd74f4e423bb72b local-2013-1060
135
# CVE fix was provided by upstream to the stable kernels, and merged the two
137
:title('inet: fix possible memory corruption with UDP_CORK and UFO', ['e93b7d748be887cd7639b113ba7d7ef792a7efb9', 'c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b'])
140
# Saucy didn't actually took the fix from upstream stable but it got another
141
# stable commit that includes it
142
845778d82cf91cef07dfb7c7bbc0fb1e17a64e1c 0e033e04c2678dbbe74a46b23fffb7bb918c288e
145
# We applied an early version which is functionally good enough, so mark it up
146
# as if it was a backport
147
8c57646584aab87099d0dc69785ce3e2b2b3b626 2def2ef2ae5f3990aabdbe8a755911902707d268
148
8a0754170360f2fdb83f625d2121dcd0baf813f0 2def2ef2ae5f3990aabdbe8a755911902707d268
149
a8d42725bb9adec19e48a9600529cf3200255206 2def2ef2ae5f3990aabdbe8a755911902707d268
152
# We applied an early version of this patch, so mark it up as a backport.
153
afe184f9f4b1ed82795755a2eae88bacbef44cae b2853fd6c2d0f383dbdf7427e263eb576a633867
156
:title('n_tty: Fix n_tty_write crash when echoing in raw mode', ['4291086b1f081b869c6d79e5b7441633dc3ace00'])
159
# a fix different from upstream has been pushed into 3.5 and 3.2 stable trees
160
:title('ipc/msg: fix race around refcount', ['6062a8dc0517bce23e3c2f7d2fea5e22411269a3'])
163
# these got applied long before we had the upstream commit ids
164
:title('futex: Make lookup_pi_state more robust', ['54a217887a7b658e2650c3feff22756ab80c7339'])
165
:title('futex: Always cleanup owner tid in unlock_pi', ['13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e'])
166
:title('futex: Validate atomic acquisition in futex_lock_pi_atomic()', ['b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270'])
167
:title('futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr == uaddr2 in futex_requeue(..., requeue_pi=1)', ['e9c243a5a6de0be8e584c604d353412584b592f8'])
170
:title('x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)', ['b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a'])
173
:title('l2tp: Privilege escalation in ppp over l2tp sockets', ['3cf521f7dc87c031617fd47e4b7aa2593c2f3daf'])
176
# fix provided by upstream for stable kernels <= 3.14
177
:title('target: Explicitly clear ramdisk_mcp backend pages', ['4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc'])
180
# fix replaced in lucid by a simpler fix.
181
3e54afb854a521cddc94979f3fcce4e55848dadf 30b678d844af3305cda5953467005cebb5d7b687 7e6d06f0de3f74ca929441add094518ae332257c 1485348d2424e1131ea42efc033cbd9366462b01
184
# fix replaced in precise by a better upstream fix.
185
67962fe7b61e97e3cdf79e32aea33a1726c1a554 d9f966357b14e356dbd83b8f4a197a287ab4ff83
188
:title('gpu: Add MSM KGSL gpu driver', ['local-msm-gpu'])
191
# Lucid has a different fix commit, introduced by upstream stable
192
b7eaca87efdb30ad209d37c53e85ad8ac17e4d7d 667eff35a1f56fa74ce98a0c7c29a40adc1ba4e3
195
# manta and mako have a slightly different commit, without the original SHA1
196
:title('perf/arm: Fix armpmu_map_hw_event()', ['d9f966357b14e356dbd83b8f4a197a287ab4ff83'])
199
:title("x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit", ['29fa6825463c97e5157284db80107d1bfac5d77b'])
202
# Precise and Trusty use a simpler solution, different from upstream fix
203
:title("splice: Apply generic position and size checks to each write", ['8d0207652cbe27d1f962050737848e5ad4671958'])
206
:title("IB/core: Prevent integer overflow in ib_umem_get address arithmetic", ['8494057ab5e40df590ef6ef7d66324d3ae33356b'])
207
:title("UBUNTU: SAUCE: IB/core: Prevent integer overflow in ib_umem_get address arithmetic", ['8494057ab5e40df590ef6ef7d66324d3ae33356b'])
210
# This is a stable kernels-specific CVE, so there's no upstream SHA1
211
:title("tcp: Fix crash in TCP Fast Open", ['local-2015-3332'])
212
# We are using the original sha1 as the break here, but for upstream it is
213
# actually ok, so allow the containing tag to also "fix" the broken commit.
214
97bf6af1f928216fd6c5a66e8a57bfa95a659672 local-2015-3332
215
# This also applies to 3.2.x which got the backport right.
216
:title("Linux 3.2.69", ['local-2015-3332'])
219
# This is an Ubuntu kernel specific CVE.
220
:title("UBUNTU: SAUCE: Overlayfs: allow unprivileged mounts", ['local-2015-1328-break'])
221
:title("UBUNTU: SAUCE: overlayfs: when copying up and reading directories ensure mounter had permissions V2", ['local-2015-1328-fix'])
224
# Precise and Trusty fix different from upstream
225
:title("pipe: iovec: Fix memory corruption when retrying atomic copy as non-atomic", ['f0d1bec9d58d4c038d0ac958c9af82be6eb18045', '637b58c2887e5e57850865839cc75f59184b23d1'])
228
:title("UBUNTU: SAUCE: KEYS: ensure we free the assoc array edit if edit is valid", ['ca4da5dd1f99fe9c59f1709fb43e818b18ad20e0'])
231
:title("powerpc/perf: Cap 64bit userspace backtraces to PERF_MAX_STACK_DEPTH", ['9a5cbce421a283e6aea3c4007f141735bf9da8c3'])
234
:title("UBUNTU: SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()", ['local-2015-7312-fix'])
237
:title("KVM: x86: vmx: avoid guest->host DOS by intercepting #AC", ['54a20552e1eae07aa240fa370a0293e006b5faed'])
240
# linux-lts-utopic and linux-lts-wily never got the commit to drop the
241
# bad portion of the patch, but got the correct fix to address the cve,
242
# so use the cherry picked patch to "fix" the revert
243
9119f2d1ad6cf0d48b56512d7a085defdd39dc5f d5468d7afaa9c9e961e150f0455a14a9f4872a98
244
0523f6f4c018834ed7178752e70e78e888d5dc3f d5468d7afaa9c9e961e150f0455a14a9f4872a98
245
# xenial has the very same combination.
246
c96b4a0a584ca6884def6994b57a54e2cc099999 d5468d7afaa9c9e961e150f0455a14a9f4872a98
249
:title('UBUNTU: SAUCE: (no-up) kexec/uefi: copy secure_boot flag in boot params across kexec reboot', ['local-2015-7837'])
250
:title('UBUNTU: SAUCE: UEFI: kexec/uefi: copy secure_boot flag in boot params across kexec reboot', ['local-2015-7837'])
251
:title('UBUNTU: SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec reboot', ['local-2015-7837'])
254
:title("net: add length argument to skb_copy_and_csum_datagram_iovec", ['local-2015-8019'])
255
:title("[stable-only] net: add length argument to skb_copy_and_csum_datagram_iovec", ['local-2015-8019'])
256
# this _only_ affects stables which do not have iov_iter modifications applied
257
# so fake the fix in that as well. This has been determined as before Linux 3.19.
258
:title("Linux 3.19", ['local-2015-8019'])
259
# also replaced by a different fix in e.g. trusty:
260
:title("UBUNTU: SAUCE: (no-up) udp: properly support MSG_PEEK with truncated buffers", ['local-2015-8019-f2'])
263
:title("xen: Add RING_COPY_REQUEST()", ['454d5d882c7e412b840e3c99010fe81a9862f6fb'])
264
:title("xen-netback: don't use last request to determine minimum Tx credit", ['0f589967a73f1f30ab4ac4dd9ce0bb399b4d6357'])
265
:title("xen-netback: use RING_COPY_REQUEST() throughout", ['68a33bfd8403e4e22847165d149823a2e0e67c9c'])
266
:title("xen-blkback: only read request operation from shared ring once", ['1f13d75ccb806260079e0679d55d9253e370ec8a'])
267
:title("xen-blkback: read from indirect descriptors only once", ['18779149101c0dd43ded43669ae2a92d21b6f9cb'])
268
:title("xen-scsiback: safely copy requests", ['be69746ec12f35b484707da505c6c76ff06f97dc'])
269
:title("xen/pciback: Save xen_pci_op commands before processing it", ['8135cf8b092723dbfcc611fe6fdcb3a36c9951c5'])
272
:title("KEYS: Fix keyring ref leak in join_session_keyring()", ['23567fd052a9abb6d67fe8e7a9ccdd9800a540f2'])
275
:title("AIO: properly check iovec sizes", ['4c185ce06dca14f5cea192f5a2c981ef50663f2b'])
276
:title("[stable-only] AIO: properly check iovec sizes", ['4c185ce06dca14f5cea192f5a2c981ef50663f2b'])
279
:title("UBUNTU: SAUCE: overlayfs: Use mounter's credentials instead of full kernel credentials", ['1175b6b8d96331676f1d436b089b965807f23b4a'])
280
:title("UBUNTU: SAUCE: overlayfs: Use mounter's credentials instead of selectively raising caps", ['1175b6b8d96331676f1d436b089b965807f23b4a'])
281
:title("UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", ['local-2016-1575-2'])
284
:title("UBUNTU: SAUCE: overlayfs: Be more careful about copying up sxid files", ['local-2016-1576-1'])
285
:title("UBUNTU: SAUCE: overlayfs: Propogate nosuid from lower and upper mounts", ['local-2016-1576-2'])
288
:title("UBUNTU: SAUCE: [nf,v2] netfilter: x_tables: don't rely on well-behaving userspace", ['54d83fc74aa9ec72794373cb47432c5f7fb1a309'])
291
:title("UBUNTU: SAUCE: [nf] netfilter: x_tables: check for size overflow", ['d157bd761585605b7882935ffb86286919f62ea1'])
294
# corner case: the commit that introduced the security issue was not an upstream
295
# commit but a stable-specific fix (ironically, to fix CVE-2015-1805)
296
:title("pipe: iovec: Fix memory corruption when retrying atomic copy as non-atomic", ['local-2016-0774-break'])
297
:title("[stable-only] pipe: Fix buffer offset after partially failed read", ['local-2016-0774-fix'])
298
:title("pipe: Fix buffer offset after partially failed read", ['local-2016-0774-fix'])
301
# The ozwpan driver has been deleted from upstream; in the ubuntu kernels
302
# we have simply disabled it
303
:title("UBUNTU: [Config] CONFIG_USB_WPAN_HCD=n", ['a73e99cb67e7438e5ab0c524ae63a8a27616c839'])
305
# CVE-2015-8551 / CVE-2015-8552
306
:title("xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled", ['56441f3c8e5bd45aab10dd9f8c505dd4bec03b0d'])
307
:title("xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled", ['5e0ce1455c09dd61d029b8ad45d82e1ac0b6c4c9'])
308
:title("xen/pciback: Do not install an IRQ handler for MSI interrupts.", ['a396f3a210c3a61e94d6b87ec05a75d0be2a60d0'])
309
:title("xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled.", ['7cfb905b9638982862f0331b36ccaaca5d383b49'])
310
:title("xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set.", ['408fb0e5aa7fda0059db282ff58c3b2a4278baa0'])
313
# fix was reverted and replaced with upstream commit. linux-lts-utopic
314
# and linux-lts-wily will never get the replaced fix, but the original
315
# commit should still be considered okay
316
:title("(upstream) mm: Add a user_ns owner to mm_struct and fix ptrace permission checks", ['bfedb589252c01fa505ac9f6f2a3d5d68d707ef4'])
317
3e4066f75081b2409e5e54a2e681f7e4f07d83f4 bfedb589252c01fa505ac9f6f2a3d5d68d707ef4
318
82fe022f8c15899bae7dad15c7d89bd99b0e0d55 bfedb589252c01fa505ac9f6f2a3d5d68d707ef4
321
:title("UBUNTU: SAUCE: KVM: MTRR: remove MSR 0x2f8", ['9842df62004f366b9fed2423e24df10542ee0dc5'])
324
:title("UBUNTU: SAUCE: KEYS: Fix ASN.1 indefinite length object parsing", ['23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa'])
327
# the fix was applied twice, and then reverted; adding an override so that the
328
# tracker doesn't think it was actually reverted
329
3bfd2ce586e9ed143c10263981a6ec7fa5b40890 7f821fc9c77a9b01fe7b1d6e72717b33d8d64142
332
:title("UBUNTU: SAUCE: proc: prevent stacking filesystems on top", ['e54ad7f1ee263ffa5a2de9c609d58dfa27b21cd9'])
333
:title("UBUNTU: SAUCE: ecryptfs: forbid opening files without mmap handler", ['2f36db71009304b3f0b95afacd8eba1f9f046b87'])
334
:title("UBUNTU: SAUCE: sched: panic on corrupted stack end", ['29d6455178a09e1dc340380c582b13356227e8df'])
335
# 2f36db71009304b3f0b95afacd8eba1f9f046b87 got reverted and replaced by f0fe970df3838c202ef6c07a4c2b36838ef0a88b
337
f0fe970df3838c202ef6c07a4c2b36838ef0a88b 2f36db71009304b3f0b95afacd8eba1f9f046b87
340
# branch: Ubuntu-4.4.0-21.37
341
a56fd24fae866a8fd3d1477b72b10a914e555842 e54ad7f1ee263ffa5a2de9c609d58dfa27b21cd9 2f36db71009304b3f0b95afacd8eba1f9f046b87 29d6455178a09e1dc340380c582b13356227e8df
342
# branch: Ubuntu-4.4.0-22.39
343
3a5de5e8b9cd8260899f7b81d23c39b53720e894 e54ad7f1ee263ffa5a2de9c609d58dfa27b21cd9 2f36db71009304b3f0b95afacd8eba1f9f046b87 29d6455178a09e1dc340380c582b13356227e8df
344
# branch: Ubuntu-4.4.0-22.40
345
27b30c287ebca4afe158e261dc63f213c2eccf7f e54ad7f1ee263ffa5a2de9c609d58dfa27b21cd9 2f36db71009304b3f0b95afacd8eba1f9f046b87 29d6455178a09e1dc340380c582b13356227e8df
348
:title("UBUNTU: SAUCE: net: add recursion limit to GRO", ['fcd91dd449867c6bfe56a81cabba76b829fd05cd'])
351
:title("UBUNTU: SAUCE: KEYS: ensure xbuf is large enough to fix buffer overflow in proc_keys_show (LP: #1634496)", ['03dab869b7b239c4e013ec82aea22e181e441cfc'])
354
:title("UBUNTU: SAUCE: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()", ['19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619'])
357
# Upstream stable kernels actually provide an alternate fix for this CVE
358
:title("Fix potential infoleak in older kernels", ['1c109fabbd51863475cd12ac206bdd249aee35af'])
361
# Fix applied without including upstream SHA1
362
:title("packet: fix race condition in packet_set_ring", ['84ac7260236a49c79eede91617700174c2c19b0c'])
365
# Fix applied with no upstream SHA1
366
:title("tty: n_hdlc: get rid of racy n_hdlc.tbuf", ['82f2341c94d270421f383641b7cd670e474db56b'])
367
:title("n_hdlc: prevent concurrent access to scratch transmit buffer.", ['82f2341c94d270421f383641b7cd670e474db56b'])
370
# Fix applied without upstream SHA1
371
:title("UBUNTU: SAUCE: (no-up) udp: properly support MSG_PEEK with truncated buffers", ['197c949e7798fbf28cfadc69d9ca0c2abbf93191'])
374
# Fix applied without upstream SHA1
375
:title("xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window", ['677e806da4d916052585301785d847c3b3e6186a'])
376
:title("xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder", ['f843ee6dd019bcece3e74e76ad9df0155655d0df'])
379
# yakkety fix contained typo of commit reference
380
08aee12204a337566ce65ee66a9e0b43e55687d1 e7e11f99564222d82f0ce84bd521e57d78a6b678
383
# Fix applied without machine-readable SHA1
384
:title("UBUNTU: SAUCE: KVM has a flaw in INVEPT emulation that could crash the host", ['4b855078601fc422dbac3059f2215e776f49780f'])
387
:title("mm: do not collapse stack gap into THP", ['1be7107fbe18eed3e319a6c3e83c78254b693acb'])
390
:title("net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()", ['local-2014-9900'])
391
:title("UBUNTU: SAUCE: (no-up) net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()", ['local-2014-9900'])
394
:title("UBUNTU: SAUCE: ubuntu: overlayfs v20 -- fs: limit filesystem stacking depth", ['69c433ed2ecd2d3264efd7afec4439524b319121'])
397
:title("net-packet: fix race in packet_set_ring on PACKET_RESERVE", ['c27927e372f0785f3303e8fad94b85945e2c97b7'])
400
:title("udp: consistently apply ufo or fragmentation", ['85f1bd9a7b5a79d5baa8bf44af19658f7bf77bfa'])
403
:title("UBUNTU: SAUCE: powerpc/tm: Fix illegal TM state in signal handler", ['044215d145a7a8a60ffa8fdc859d110a795fa6ea'])
404
:title("UBUNTU: SAUCE: powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks", ['265e60a170d0a0ecfc2d20490134ed2c48dd45ab'])
406
# CVE-2017-5123, no upstream SHA1
407
a44789dbadbf1162b3fc0d8e89b70550a40d13a6 96ca579a1ecc943b75beba58bebb0356f6cc4b51
409
# CVE-2017-1000405, claimed breaks, no upstream SHA1
410
:title("UBUNTU: SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp", ['8310d48b125d19fcd9521d83b8293e63eb1646aa'])
412
# CVE-2018-7755, fix not making any progress upstream as in floppy.c
413
:title("UBUNTU: SAUCE: floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl", ['local-2018-7755-1'])
added
removed
active/10autotriage.linux
