group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1571691@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 4.2.0-42.49

---------------
linux (4.2.0-42.49) wily; urgency=low

  [ Ben Romer ]

  * Release Tracking Bug
    - LP: #1597053

  [ Josh Boyer ]

  * SAUCE: UEFI: acpi: Ignore acpi_rsdp kernel parameter when module
    loading is restricted
    - LP: #1566221
  * SAUCE: UEFI: efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI
    - LP: #1566221
  * SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
    - LP: #1571691
  * SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
    - LP: #1571691

  [ Matthew Garrett ]

  * SAUCE: UEFI: Add secure_modules() call
    - LP: #1566221
  * SAUCE: UEFI: PCI: Lock down BAR access when module security is enabled
    - LP: #1566221
  * SAUCE: UEFI: x86: Lock down IO port access when module security is
    enabled
    - LP: #1566221
  * SAUCE: UEFI: ACPI: Limit access to custom_method
    - LP: #1566221
  * SAUCE: UEFI: asus-wmi: Restrict debugfs interface when module loading
    is restricted
    - LP: #1566221
  * SAUCE: UEFI: Restrict /dev/mem and /dev/kmem when module loading is
    restricted
    - LP: #1566221
  * SAUCE: UEFI: kexec: Disable at runtime if the kernel enforces module
    loading restrictions
    - LP: #1566221
  * SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
    - LP: #1566221
  * SAUCE: UEFI: Add option to automatically enforce module signatures when
    in Secure Boot mode
    - LP: #1566221

  [ Stefan Bader ]

  * [Config] Add pm80xx scsi driver to d-i
    - LP: #1595628

  [ Tim Gardner ]

  * [Config] CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE=y
  * SAUCE: UEFI: Display MOKSBState when disabled
    - LP: #1571691
  * SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
    - LP: #1593075

  [ Upstream Kernel Changes ]

  * Revert "scsi: fix soft lockup in scsi_remove_target() on module
    removal"
    - LP: #1592552
  * ath10k: fix firmware assert in monitor mode
    - LP: #1592552
  * drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
    - LP: #1592552
  * ath10k: fix debugfs pktlog_filter write
    - LP: #1592552
  * drm/i915: Call intel_dp_mst_resume() before resuming displays
    - LP: #1592552
  * ARM: mvebu: fix GPIO config on the Linksys boards
    - LP: #1592552
  * ath5k: Change led pin configuration for compaq c700 laptop
    - LP: #1592552, #972604
  * xfs: disallow rw remount on fs with unknown ro-compat features
    - LP: #1592552
  * xfs: Don't wrap growfs AGFL indexes
    - LP: #1592552
  * rtlwifi: rtl8723be: Add antenna select module parameter
    - LP: #1592552
  * rtlwifi: btcoexist: Implement antenna selection
    - LP: #1592552
  * drm/gma500: Fix possible out of bounds read
    - LP: #1592552
  * Bluetooth: vhci: fix open_timeout vs. hdev race
    - LP: #1592552
  * Bluetooth: vhci: purge unhandled skbs
    - LP: #1592552
  * cpuidle: Indicate when a device has been unregistered
    - LP: #1592552
  * mfd: intel_quark_i2c_gpio: Use clkdev_create()
    - LP: #1592552
  * mfd: intel_quark_i2c_gpio: Remove clock tree on error path
    - LP: #1592552
  * [media] media: v4l2-compat-ioctl32: fix missing reserved field copy in
    put_v4l2_create32
    - LP: #1592552
  * scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
    - LP: #1592552
  * drm/i915/dsi: fix CHV dsi encoder hardware state readout on port C
    - LP: #1592552
  * usb: f_mass_storage: test whether thread is running before starting
    another
    - LP: #1592552
  * hwmon: (ads7828) Enable internal reference
    - LP: #1592552
  * ath10k: fix rx_channel during hw reconfigure
    - LP: #1592552
  * Bluetooth: vhci: Fix race at creating hci device
    - LP: #1592552
  * powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
    - LP: #1592552
  * PM / Runtime: Fix error path in pm_runtime_force_resume()
    - LP: #1592552
  * crypto: s5p-sss - Fix missed interrupts when working with 8 kB blocks
    - LP: #1592552
  * ath9k: Add a module parameter to invert LED polarity.
    - LP: #1592552
  * ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
    - LP: #1592552
  * pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
    - LP: #1592552
  * btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in
    btrfs_ioctl
    - LP: #1592552
  * serial: 8250_pci: fix divide error bug if baud rate is 0
    - LP: #1592552
  * TTY: n_gsm, fix false positive WARN_ON
    - LP: #1592552
  * staging: comedi: das1800: fix possible NULL dereference
    - LP: #1592552
  * arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
    - LP: #1592552
  * KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
    - LP: #1592552
  * aacraid: Relinquish CPU during timeout wait
    - LP: #1592552
  * aacraid: Fix for aac_command_thread hang
    - LP: #1592552
  * aacraid: Fix for KDUMP driver hang
    - LP: #1592552
  * ext4: fix hang when processing corrupted orphaned inode list
    - LP: #1592552
  * MIPS: ath79: make bootconsole wait for both THRE and TEMT
    - LP: #1592552
  * Drivers: hv: ring_buffer.c: fix comment style
    - LP: #1592552
  * mei: fix NULL dereferencing during FW initiated disconnection
    - LP: #1592552
  * mei: amthif: discard not read messages
    - LP: #1592552
  * tty: Abstract tty buffer work
    - LP: #1592552
  * Fix OpenSSH pty regression on close
    - LP: #1592552
  * QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
    - LP: #1592552
  * thunderbolt: Fix double free of drom buffer
    - LP: #1592552
  * USB: serial: option: add support for Cinterion PH8 and AHxx
    - LP: #1592552
  * usb: misc: usbtest: format the data pattern according to max packet
    size
    - LP: #1592552
  * usb: misc: usbtest: fix pattern tests for scatterlists.
    - LP: #1592552
  * mcb: Fixed bar number assignment for the gdd
    - LP: #1592552
  * USB: serial: option: add more ZTE device ids
    - LP: #1592552
  * USB: serial: option: add even more ZTE device ids
    - LP: #1592552
  * ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA
    internal strings
    - LP: #1592552
  * drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
    - LP: #1592552
  * USB: serial: cp210x: fix hardware flow-control disable
    - LP: #1592552
  * ext4: fix oops on corrupted filesystem
    - LP: #1592552
  * ext4: address UBSAN warning in mb_find_order_for_block()
    - LP: #1592552
  * ext4: silence UBSAN in ext4_mb_init()
    - LP: #1592552
  * arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
    - LP: #1592552
  * ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on
    exynos4210-trats
    - LP: #1592552
  * ath10k: fix kernel panic, move arvifs list head init before htt init
    - LP: #1592552
  * can: fix handling of unmodifiable configuration options
    - LP: #1592552
  * MIPS: Fix siginfo.h to use strict posix types
    - LP: #1592552
  * MIPS: Don't unwind to user mode with EVA
    - LP: #1592552
  * MIPS: Avoid using unwind_stack() with usermode
    - LP: #1592552
  * MIPS: Reserve nosave data for hibernation
    - LP: #1592552
  * MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
    - LP: #1592552
  * MIPS64: R6: R2 emulation bugfix
    - LP: #1592552
  * usb: host: xhci-rcar: Avoid long wait in xhci_reset()
    - LP: #1592552
  * mfd: omap-usb-tll: Fix scheduling while atomic BUG
    - LP: #1592552
  * USB: serial: io_edgeport: fix memory leaks in attach error path
    - LP: #1592552
  * USB: serial: io_edgeport: fix memory leaks in probe error path
    - LP: #1592552
  * USB: serial: keyspan: fix use-after-free in probe error path
    - LP: #1592552
  * USB: serial: mxuport: fix use-after-free in probe error path
    - LP: #1592552
  * USB: serial: quatech2: fix use-after-free in probe error path
    - LP: #1592552
  * crypto: caam - fix caam_jr_alloc() ret code
    - LP: #1592552
  * MIPS: KVM: Fix timer IRQ race when freezing timer
    - LP: #1592552
  * MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
    - LP: #1592552
  * gcov: disable tree-loop-im to reduce stack usage
    - LP: #1592552
  * irqchip/gic: Ensure ordering between read of INTACK and shared data
    - LP: #1592552
  * irqchip/gic-v3: Configure all interrupts as non-secure Group-1
    - LP: #1592552
  * arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
    - LP: #1592552
  * kbuild: move -Wunused-const-variable to W=1 warning level
    - LP: #1592552
  * rtlwifi: Fix logic error in enter/exit power-save mode
    - LP: #1592552
  * rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
    rtl_pci_reset_trx_ring
    - LP: #1592552
  * sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
    systems
    - LP: #1592552
  * powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
    - LP: #1592552
  * powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
    - LP: #1592552
  * MIPS: Handle highmem pages in __update_cache
    - LP: #1592552
  * MIPS: Sync icache & dcache in set_pte_at
    - LP: #1592552
  * SIGNAL: Move generic copy_siginfo() to signal.h
    - LP: #1592552
  * MIPS: Fix uapi include in exported asm/siginfo.h
    - LP: #1592552
  * MIPS: math-emu: Fix jalr emulation when rd == $0
    - LP: #1592552
  * MIPS: ptrace: Fix FP context restoration FCSR regression
    - LP: #1592552
  * MIPS: ptrace: Prevent writes to read-only FCSR bits
    - LP: #1592552
  * MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
    - LP: #1592552
  * MIPS: Force CPUs to lose FP context during mode switches
    - LP: #1592552
  * ring-buffer: Use long for nr_pages to avoid overflow failures
    - LP: #1592552
  * ring-buffer: Prevent overflow of size in ring_buffer_resize()
    - LP: #1592552
  * mmc: mmc: Fix partition switch timeout for some eMMCs
    - LP: #1592552
  * PCI: Disable all BAR sizing for devices with non-compliant BARs
    - LP: #1592552
  * MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
    - LP: #1592552
  * drm/i915/fbdev: Fix num_connector references in
    intel_fb_initial_config()
    - LP: #1592552
  * drm/fb_helper: Fix references to dev->mode_config.num_connector
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication via NTLMSSP
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the LANMAN
    authentication
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the NTLM(v1)
    authentication
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the NTLM(v2)
    authentication
    - LP: #1592552
  * remove directory incorrectly tries to set delete on close on non-empty
    directories
    - LP: #1592552
  * cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
    - LP: #1592552
  * xfs: xfs_iflush_cluster fails to abort on error
    - LP: #1592552
  * xfs: fix inode validity check in xfs_iflush_cluster
    - LP: #1592552
  * xfs: skip stale inodes in xfs_iflush_cluster
    - LP: #1592552
  * ASoC: ak4642: Enable cache usage to fix crashes on resume
    - LP: #1592552
  * cifs: Create dedicated keyring for spnego operations
    - LP: #1592552
  * ALSA: hda - Fix headphone noise on Dell XPS 13 9360
    - LP: #1592552
  * kvm: arm64: Fix EC field in inject_abt64
    - LP: #1592552
  * Input: uinput - handle compat ioctl for UI_SET_PHYS
    - LP: #1592552
  * PM / sleep: Handle failures in device_suspend_late() consistently
    - LP: #1592552
  * mm: use phys_addr_t for reserve_bootmem_region() arguments
    - LP: #1592552
  * locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
    - LP: #1592552
  * drm/i915: Don't leave old junk in ilk active watermarks on readout
    - LP: #1592552
  * mmc: longer timeout for long read time quirk
    - LP: #1592552
  * mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - LP: #1592552
  * mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - LP: #1592552
  * sunrpc: fix stripping of padded MIC tokens
    - LP: #1592552
  * wait/ptrace: assume __WALL if the child is traced
    - LP: #1592552
  * xen/x86: actually allocate legacy interrupts on PV guests
    - LP: #1592552
  * xen/events: Don't move disabled irqs
    - LP: #1592552
  * UBI: Fix static volume checks when Fastmap is used
    - LP: #1592552
  * drm/amdgpu: Fix hdmi deep color support.
    - LP: #1592552
  * dma-debug: avoid spinlock recursion when disabling dma-debug
    - LP: #1592552
  * dell-rbtn: Ignore ACPI notifications if device is suspended
    - LP: #1592552
  * Input: xpad - prevent spurious input from wired Xbox 360 controllers
    - LP: #1592552
  * Input: pwm-beeper - fix - scheduling while atomic
    - LP: #1592552
  * MIPS: lib: Mark intrinsics notrace
    - LP: #1592552
  * hpfs: fix remount failure when there are no options changed
    - LP: #1592552
  * affs: fix remount failure when there are no options changed
    - LP: #1592552
  * hpfs: implement the show_options method
    - LP: #1592552
  * regmap: cache: Fix typo in cache_bypass parameter description
    - LP: #1592552
  * ARM: dts: kirkwood: add kirkwood-ds112.dtb to Makefile
    - LP: #1592552
  * serial: doc: Un-document non-existing uart_write_console()
    - LP: #1592552
  * iio: buffer: add missing descriptions in iio_buffer_access_funcs
    - LP: #1592552
  * iommu/vt-d: Ratelimit fault handler
    - LP: #1592552
  * iommu/vt-d: Improve fault handler error messages
    - LP: #1592552
  * power: ipaq-micro-battery: freeing the wrong variable
    - LP: #1592552
  * ARM: OMAP2+: hwmod: fix _idle() hwmod state sanity check sequence
    - LP: #1592552
  * security: drop the unused hook skb_owned_by
    - LP: #1592552
  * mfd: lp8788-irq: Uninitialized variable in irq handler
    - LP: #1592552
  * am437x-vfpe: fix typo in vpfe_get_app_input_index
    - LP: #1592552
  * am437x-vpfe: fix an uninitialized variable bug
    - LP: #1592552
  * cx23885: uninitialized variable in cx23885_av_work_handler()
    - LP: #1592552
  * ipv6, token: allow for clearing the current device token
    - LP: #1592552
  * usb: gadget: f_fs: Fix EFAULT generation for async read operations
    - LP: #1592552
  * EDAC: Increment correct counter in edac_inc_ue_error()
    - LP: #1592552
  * PCI: Supply CPU physical address (not bus address) to
    iomem_is_exclusive()
    - LP: #1592552
  * alpha/PCI: Call iomem_is_exclusive() for IORESOURCE_MEM, but not
    IORESOURCE_IO
    - LP: #1592552
  * ARM: debug: remove extraneous DEBUG_HI3716_UART option
    - LP: #1592552
  * cxl: Fix DAR check & use REGION_ID instead of opencoding
    - LP: #1592552
  * taskstats: fix nl parsing in accounting/getdelays.c
    - LP: #1592552
  * char: Drop bogus dependency of DEVPORT on !M68K
    - LP: #1592552
  * driver-core: use 'dev' argument in dev_dbg_ratelimited stub
    - LP: #1592552
  * metag: Fix atomic_*_return inline asm constraints
    - LP: #1592552
  * tty: vt, return error when con_startup fails
    - LP: #1592552
  * cpufreq: Fix GOV_LIMITS handling for the userspace governor
    - LP: #1592552
  * ACPI / sysfs: fix error code in get_status()
    - LP: #1592552
  * clk: qcom: msm8916: Fix crypto clock flags
    - LP: #1592552
  * MIPS: BMIPS: Fix PRID_IMP_BMIPS5000 masking for BMIPS5200
    - LP: #1592552
  * NFS: Fix an LOCK/OPEN race when unlinking an open file
    - LP: #1592552
  * ata: sata_dwc_460ex: remove incorrect locking
    - LP: #1592552
  * s390/vmem: fix identity mapping
    - LP: #1592552
  * perf tools: Fix perf regs mask generation
    - LP: #1592552
  * powerpc/sstep: Fix sstep.c compile on powerpcspe
    - LP: #1592552
  * MIPS: BMIPS: BMIPS5000 has I cache filing from D cache
    - LP: #1592552
  * MIPS: BMIPS: Clear MIPS_CACHE_ALIASES earlier
    - LP: #1592552
  * MIPS: BMIPS: local_r4k___flush_cache_all needs to blast S-cache
    - LP: #1592552
  * MIPS: BMIPS: Pretty print BMIPS5200 processor name
    - LP: #1592552
  * MIPS: math-emu: Fix BC1{EQ,NE}Z emulation
    - LP: #1592552
  * MIPS: Fix BC1{EQ,NE}Z return offset calculation
    - LP: #1592552
  * MIPS: BMIPS: Adjust mips-hpt-frequency for BCM7435
    - LP: #1592552
  * IB/srp: Print "ib_srp: " prefix once
    - LP: #1592552
  * IB/IWPM: Fix a potential skb leak
    - LP: #1592552
  * i40e: fix an uninitialized variable bug
    - LP: #1592552
  * blk-mq: fix undefined behaviour in order_to_size()
    - LP: #1592552
  * x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs
    - LP: #1592552
  * netlink: Fix dump skb leak/double free
    - LP: #1592552
  * MIPS: ath79: fix regression in PCI window initialization
    - LP: #1592552
  * sched/preempt: Fix preempt_count manipulations
    - LP: #1592552
  * tipc: fix nametable publication field in nl compat
    - LP: #1592552
  * sunrpc: Update RPCBIND_MAXNETIDLEN
    - LP: #1592552
  * batman-adv: fix skb deref after free
    - LP: #1592552
  * net: ehea: avoid null pointer dereference
    - LP: #1592552
  * tuntap: correctly wake up process during uninit
    - LP: #1592552
  * uapi glibc compat: fix compilation when !__USE_MISC in glibc
    - LP: #1592552
  * drivers/hwspinlock: use correct radix tree API
    - LP: #1592552
  * RDMA/cxgb3: device driver frees DMA memory with different size
    - LP: #1592552
  * Linux 4.2.8-ckt12
    - LP: #1592552
  * HID: core: prevent out-of-bound readings
    - LP: #1579190
  * mm: migrate dirty page without clear_page_dirty_for_io etc
    - LP: #1581865
    - CVE-2016-3070

 -- Benjamin M Romer <benjamin.romer@xxxxxxxxxxxxx>  Tue, 28 Jun 2016
14:57:26 -0400

** Changed in: linux (Ubuntu Wily)
       Status: In Progress => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-3070

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1571691

Title:
  linux: MokSBState is ignored

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Trusty:
  In Progress
Status in linux source package in Vivid:
  Fix Released
Status in linux source package in Wily:
  Fix Released
Status in linux source package in Xenial:
  Fix Released

Bug description:
  Ubuntu-4.4.0-20.36 was released with signed module enforcement
  enabled, but contained no way of disabling secure boot for DKMS.
  Without these kernel patches it is possible to get your machine in an
  unbootable state, especially if you don't have a fallback kernel.

  This patch set implements the ability to disable secure boot on demand
  from user space (with some password shennaigans). If one boots in
  secure boot mode and then installs a third party module (such as
  DKMS), then a dialog is displayed giving the user an option to disable
  secure boot, thereby also disabling module signature verification.
  Patch 1/2 is a scaffold patch of which only the GUID macros are
  actually used. The rest of the code is fenced by
  CONFIG_MODULE_SIG_UEFI which will not be enabled until a later series.
  Patch 2/2 is where MOKSBState is read and implemented. Patch 3/3
  simply prints a bit more informative state information.

  Information regarding secure boot and signed module enforcement will
  appear in the kernel log thusly:

  'Secure boot enabled' - normal secure boot operation with signed module enforcement.
  'Secure boot MOKSBState disabled' - UEFI Secure boot state has been over-ridden by MOKSBState. No signed module enforcement.

  In the absense of a 'Secure boot' string assume that secure boot is
  disabled or does not exist.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1571691/+subscriptions