group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1700972@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 3.13.0-132.181

---------------
linux (3.13.0-132.181) trusty; urgency=low

  * linux: 3.13.0-132.181 -proposed tracker (LP: #1716634)

  * CVE-2017-1000251
    - Bluetooth: Properly check L2CAP config option output buffer length

linux (3.13.0-131.180) trusty; urgency=low

  * linux: 3.13.0-131.180 -proposed tracker (LP: #1715439)

  * CVE-2016-7097
    - posix_acl: Clear SGID bit when setting file permissions

  * CVE-2016-9083
    - vfio/pci: Fix integer overflows, bitmask check

  * CVE-2016-9084
    - vfio/pci: Fix integer overflows, bitmask check

  * CVE-2016-9604
    - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings

  * CVE-2016-9191
    - sysctl: Drop reference added by grab_header in proc_sys_readdir

  * CVE-2016-9178
    - fix minor infoleak in get_user_ex()

  * CVE-2016-8650
    - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]

  * CVE-2016-10044
    - vfs: Commit to never having exectuables on proc and sysfs.
    - aio: mark AIO pseudo-fs noexec

linux (3.13.0-130.179) trusty; urgency=low

  * linux: 3.13.0-130.179 -proposed tracker (LP: #1713456)

  * CVE-2016-10200
    - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{, 6}_bind()

  * CVE-2016-9754
    - ring-buffer: Prevent overflow of size in ring_buffer_resize()

  * CVE-2017-5970
    - ipv4: keep skb->dst around in presence of IP options

  * CVE-2017-6346
    - packet: fix races in fanout_add()

  * CVE-2017-6214
    - tcp: avoid infinite loop in tcp_splice_read()

  * CVE-2017-6951
    - KEYS: Change the name of the dead type to ".dead" to prevent user access

  * CVE-2017-7472
    - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings

  * CVE-2017-7187
    - scsi: sg: check length passed to SG_NEXT_CMD_LEN

  * CVE-2017-7541
    - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()

  * sort ABI files with C.UTF-8 locale (LP: #1712345)
    - [Packaging] sort ABI files with C.UTF-8 locale

  * Please only recommend or suggest initramfs-tools | linux-initramfs-tool for
    kernels able to boot without initramfs (LP: #1700972)
    - [Debian] Don't depend on initramfs-tools

 -- Juerg Haefliger <juerg.haefliger@xxxxxxxxxxxxx>  Wed, 13 Sep 2017
13:34:29 +0200

** Changed in: linux (Ubuntu Trusty)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-10044

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-10200

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-7097

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-8650

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9083

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9084

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9178

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9191

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9604

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9754

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5970

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6214

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6346

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6951

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-7187

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-7472

** Changed in: linux (Ubuntu Trusty)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1700972

Title:
  Please only recommend or suggest initramfs-tools | linux-initramfs-
  tool for kernels able to boot without initramfs

Status in linux package in Ubuntu:
  Fix Released
Status in linux-aws package in Ubuntu:
  Fix Committed
Status in linux-azure package in Ubuntu:
  Fix Committed
Status in linux-gke package in Ubuntu:
  Fix Committed
Status in linux source package in Trusty:
  Fix Released
Status in linux source package in Xenial:
  Fix Released
Status in linux-aws source package in Xenial:
  Fix Committed
Status in linux-azure source package in Xenial:
  Fix Committed
Status in linux-gke source package in Xenial:
  Fix Released
Status in linux source package in Zesty:
  Fix Released
Status in linux source package in Artful:
  Fix Released

Bug description:
  Linux kernel packages depend on initramfs-tools | linux-initramfs-
  tool, even when systems using the kernel can be booted without it.

  Demoting the dependency to Recommends: or Suggests: would allow
  creating smaller images without initramfs-tools installed and fully
  skipping initramfs updates upon kernel updates saving time.

  Please consider changing the Depends: to Recommends: or Suggests: for
  kernels capable of booting without initramfs.

  initramfs-tools is still a dependency of ubuntu-minimal thus
  accidental removal of initramfs-tools resulting an unbootable system
  would still be unlikely.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1700972/+subscriptions