Commit 07bd8a55 authored by AlmAck's avatar AlmAck

linux-lts kernel group updated to version 3.14.66

parent b889fa1d
......@@ -2,12 +2,12 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=acpi_call-lts
_pkgname=acpi_call
pkgver=1.1.0
pkgrel=3
pkgrel=4
pkgdesc="A kernel module that enables you to call parameterless ACPI methods by writing the method name to /proc/acpi/call, e.g. to turn off discrete graphics card in a dual graphics environment (like NVIDIA Optimus)."
arch=('x86_64')
url=("http://github.com/mkottman/acpi_call")
......
......@@ -2,12 +2,12 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=bbswitch-lts
_pkgname=bbswitch
pkgver=0.8
pkgrel=6
pkgrel=7
pkgdesc="kernel module allowing to switch dedicated graphics card on Optimus laptops"
arch=('x86_64')
url=("http://github.com/Bumblebee-Project/bbswitch")
......
......@@ -4,11 +4,11 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=broadcom-wl-lts
pkgver=6.30.223.271
pkgrel=1
pkgrel=2
pkgdesc='Broadcom 802.11abgn hybrid Linux networking device driver'
arch=('x86_64')
url='http://www.broadcom.com/support/802.11/linux_sta.php'
......
......@@ -2,14 +2,14 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
url_ref="http://support.amd.com/en-us/download/desktop?os=Linux+x86"
DLAGENTS="http::/usr/bin/curl --referer ${url_ref} -o %o %u"
pkgname=catalyst-lts
pkgver=15.9
pkgrel=1
pkgrel=2
_amdver=15.201.1151
pkgdesc="AMD/ATI Catalyst drivers for linux. fglrx kernel module only"
arch=('x86_64')
......
From 23567fd052a9abb6d67fe8e7a9ccdd9800a540f2 Mon Sep 17 00:00:00 2001
From: Yevgeny Pats <yevgeny@perception-point.io>
Date: Tue, 19 Jan 2016 22:09:04 +0000
Subject: [PATCH] KEYS: Fix keyring ref leak in join_session_keyring()
This fixes CVE-2016-0728.
If a thread is asked to join as a session keyring the keyring that's already
set as its session, we leak a keyring reference.
This can be tested with the following program:
#include <stddef.h>
#include <stdio.h>
#include <sys/types.h>
#include <keyutils.h>
int main(int argc, const char *argv[])
{
int i = 0;
key_serial_t serial;
serial = keyctl(KEYCTL_JOIN_SESSION_KEYRING,
"leaked-keyring");
if (serial < 0) {
perror("keyctl");
return -1;
}
if (keyctl(KEYCTL_SETPERM, serial,
KEY_POS_ALL | KEY_USR_ALL) < 0) {
perror("keyctl");
return -1;
}
for (i = 0; i < 100; i++) {
serial = keyctl(KEYCTL_JOIN_SESSION_KEYRING,
"leaked-keyring");
if (serial < 0) {
perror("keyctl");
return -1;
}
}
return 0;
}
If, after the program has run, there something like the following line in
/proc/keys:
3f3d898f I--Q--- 100 perm 3f3f0000 0 0 keyring leaked-keyring: empty
with a usage count of 100 * the number of times the program has been run,
then the kernel is malfunctioning. If leaked-keyring has zero usages or
has been garbage collected, then the problem is fixed.
Reported-by: Yevgeny Pats <yevgeny@perception-point.io>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Don Zickus <dzickus@redhat.com>
Acked-by: Prarit Bhargava <prarit@redhat.com>
Acked-by: Jarod Wilson <jarod@redhat.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
---
security/keys/process_keys.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/security/keys/process_keys.c b/security/keys/process_keys.c
index a3f85d2a..e6d50172 100644
--- a/security/keys/process_keys.c
+++ b/security/keys/process_keys.c
@@ -794,6 +794,7 @@ long join_session_keyring(const char *name)
ret = PTR_ERR(keyring);
goto error2;
} else if (keyring == new->session_keyring) {
+ key_put(keyring);
ret = 0;
goto error2;
}
......@@ -6,8 +6,8 @@ pkgbase="linux-lts"
pkgname=('linux-lts' 'linux-lts-headers' 'linux-lts-docs')
_kernelname="-CHAKRA-LTS"
_basekernel=3.14
pkgver=3.14.57
pkgrel=2
pkgver=3.14.66
pkgrel=1
makedepends=('xmlto' 'docbook-xsl' 'kmod' 'inetutils' 'bc')
arch=('x86_64')
license=('GPL2')
......@@ -19,25 +19,19 @@ source=("https://www.kernel.org/pub/linux/kernel/v3.x/linux-$_basekernel.tar.xz"
'config.x86_64'
# standard config files for mkinitcpio ramdisk
'linux-lts.preset'
'change-default-console-loglevel.patch'
'CVE-2016-0728.patch')
'change-default-console-loglevel.patch')
md5sums=('b621207b3f6ecbb67db18b13258f8ea8'
'3d6b633d5c80988e9b107e0227b9383c'
'0ee585c72b3ebfdfcd68a3e7ed291f19'
'9fd7a4e21d3f8f31fb5baa91c43937f7'
'232b52576a62c7a333e9fe7a1e1ca359'
'98beb36f9b8cf16e58de2483ea9985e3'
'c018da62d8f3a48e8a8985a1af43185d'
)
'98beb36f9b8cf16e58de2483ea9985e3')
prepare() {
cd ${srcdir}/linux-$_basekernel
# add upstream patch
patch -p1 -i "${srcdir}/patch-${pkgver}"
# fixes #47820 CVE-2016-0728.patch
patch -Np1 -i "${srcdir}/CVE-2016-0728.patch"
# add latest fixes from stable queue, if needed
# http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git
......
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86 3.14.44-1 Kernel Configuration
# Linux/x86 3.14.66-1 Kernel Configuration
#
CONFIG_64BIT=y
CONFIG_X86_64=y
......
......@@ -2,7 +2,7 @@
# arg 2: the old package version
KERNEL_NAME=-CHAKRA-LTS
KERNEL_VERSION=3.14.44-1-CHAKRA-LTS
KERNEL_VERSION=3.14.66-1-CHAKRA-LTS
post_install () {
# updating module dependencies
......
......@@ -2,13 +2,13 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
_rootOfSourceTree=/usr/src/linux-${_kver}
pkgname=ndiswrapper-lts
_pkgname=ndiswrapper
pkgver=1.59
pkgrel=7
pkgrel=8
pkgdesc="Module for NDIS (Windows Network Drivers) drivers supplied by vendors. For linux-testing."
license=('GPL')
arch=('x86_64')
......@@ -44,4 +44,4 @@ package() {
sed -i -e "s/EXTRAMODULES='.*'/EXTRAMODULES='${_extramodules}'/" \
"${startdir}/ndiswrapper.install"
}
\ No newline at end of file
}
......@@ -2,10 +2,10 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=nvidia-304xx-lts
pkgver=304.128
pkgver=304.131
pkgrel=1
pkgdesc="NVIDIA drivers for linux."
arch=('x86_64')
......@@ -17,7 +17,7 @@ license=('custom')
install=nvidia.install
_pkg="NVIDIA-Linux-${arch}-${pkgver}-no-compat32"
source=("ftp://download.nvidia.com/XFree86/Linux-${arch}/${pkgver}/${_pkg}.run")
md5sums=('6478e40ed87d9177cbfc3d0b6e39a051')
md5sums=('24c9c6a8679edae3b2a608b191fdc727')
prepare() {
cd "${srcdir}"
......
......@@ -2,10 +2,10 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=nvidia-340xx-lts
pkgver=340.93
pkgver=340.96
pkgrel=1
pkgdesc="NVIDIA drivers for linux."
arch=('x86_64')
......@@ -17,7 +17,7 @@ license=('custom')
install=nvidia.install
_pkg="NVIDIA-Linux-x86_64-${pkgver}-no-compat32"
source=("ftp://download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/${_pkg}.run")
md5sums=('cb80e3f1cb6f2fb6e6eab35fad0884e4')
md5sums=('7bdbcee13bade63227933d9217571882')
prepare() {
sh "${_pkg}.run" --extract-only
......
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=nvidia-lts
pkgver=358.16
pkgnamen=nvidia-lts
pkgver=361.42
pkgrel=1
pkgdesc="NVIDIA drivers for linux."
arch=('x86_64')
......@@ -18,7 +18,7 @@ license=('custom')
install=nvidia.install
_pkg="NVIDIA-Linux-x86_64-${pkgver}-no-compat32"
source=("ftp://download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/${_pkg}.run")
md5sums=('efb1e649c0e0d62e92774bbf2c124488')
md5sums=('e70ece47407c53ebb527fa684ca759e7')
prepare() {
sh ${_pkg}.run --extract-only
......@@ -32,6 +32,10 @@ build() {
package() {
install -D -m644 "${srcdir}/${_pkg}/kernel/nvidia.ko" \
"${pkgdir}/usr/lib/modules/${_extramodules}/nvidia.ko"
install -D -m644 "${srcdir}/${_pkg}/kernel/nvidia-modeset.ko" \
"${pkgdir}/usr/lib/modules/${_extramodules}/kernel/drivers/video/nvidia-modeset.ko"
install -D -m644 "${srcdir}/${_pkg}/kernel/nvidia-drm.ko" \
"${pkgdir}/usr/lib/modules/${_extramodules}/nvidia-drm.ko"
install -D -m644 "${srcdir}/${_pkg}/kernel/nvidia-uvm.ko" \
"${pkgdir}/usr/lib/modules/${_extramodules}/nvidia-uvm.ko"
gzip "${pkgdir}/usr/lib/modules/${_extramodules}/"*.ko
......@@ -39,4 +43,4 @@ package() {
install -d -m755 "${pkgdir}/usr/lib/modprobe.d"
echo "blacklist nouveau" >> "${pkgdir}/usr/lib/modprobe.d/nouveau_blacklist.conf"
sed -i -e "s/EXTRAMODULES='.*'/EXTRAMODULES='${_extramodules}'/" "${startdir}/nvidia.install"
}
\ No newline at end of file
}
......@@ -4,12 +4,12 @@
_extramodules=extramodules-3.14-CHAKRA-LTS
_kver="$(cat /lib/modules/${_extramodules}/version)"
_kernelver=3.14.57
_kernelver=3.14.66
pkgname=vhba-module-lts
_pkgname=vhba-module
pkgver=20140928
pkgrel=3
pkgrel=4
pkgdesc="Kernel module that emulates SCSI devices"
arch=('x86_64')
url="http://cdemu.sourceforge.net/"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment