-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Dec 2021 00:20:10 +0100 Source: linux-signed-i386 Architecture: source Version: 5.15.5+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: linux-signed-i386 (5.15.5+2) unstable; urgency=medium . * Sign kernel from linux 5.15.5-2 . * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975) * fget: check that the fd still exists after getting a ref to it (CVE-2021-4083) * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685) * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685) * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128) * nfsd: fix use-after-free due to delegation race (Closes: #988044) * bpf: Fix kernel address leakage in atomic fetch * bpf: Fix signed bounds propagation after mov32 * bpf: Make 32->64 bounds propagation slightly more robust * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg Checksums-Sha1: 1b25f0087f4ae7d9305197d85d98bc17405e2814 14031 linux-signed-i386_5.15.5+2.dsc 8e5b8f897249b42b95f676cb0fe8f496d4a0d11e 3695628 linux-signed-i386_5.15.5+2.tar.xz Checksums-Sha256: db46f07d7db048efe47692da33d0b29559815acc5ec462fc6386709dad5b01fa 14031 linux-signed-i386_5.15.5+2.dsc 3105bf406c151ac218289f507295793903293dca2e5dc918b98dd2339484da51 3695628 linux-signed-i386_5.15.5+2.tar.xz Files: 74fff491925d8e3a0f80dff9d438a26e 14031 kernel optional linux-signed-i386_5.15.5+2.dsc ba2bfcf70b9ce2b1f8ebf1e5a58970b0 3695628 kernel optional linux-signed-i386_5.15.5+2.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmHDexQACgkQi0FRiLdO NzbCQg//YDTXhhZnAW3LqK8rTg9q7Po+ZsdYyKvbc2IWVzCFGUzEhqEFke7oWtTV lygM464Xq7woqcjueiyx4aTKQGd3K31SUfkhx4907oe1kaz0EyuKLJI2AHtFsXaU PJvoqIbuPKdow9INNlawMsKImGjoQjVUki6tOWJAkeHRSibA+hUFBvzL20NpKSPV s74luJPo3clYogp/cE5MN/Qn9uNKtIcVkaR8iv+bI4Y9DpVan7FSZcT5qRYsav6j YaPWEeq5lZY6lRGFJnZVB2iNhucw52PSUuxATTuZe47bWeFFhddqCGfQkDKhr8dW 4Le8UiNrR7tGpqshu6mcEFrBIaSjYY3pAB4NFloTabAy4q9md2bcwOAXK+oG6neF cuaH32njdPDZZpPOoazOH6iTDJFEs5GxO3rjlJb22CLk1kEi8T4mNDd4CsoUzned 6z4mc5/u1sJOrP5goSVSmrTmBpTLHhpMIqKdnYk8pbyWhVVIinPOEasf67FBXv1W v8AP4ScuGXuO6m+5jWhm6qE40MkDjey62mnVzGCuAWHJJmjGR6w6T5cKU/pmG+iR rVfjrN3zH3tS7e/isIzFjLMQfcyfgAsnjCALMXa7ByfPKRXwgvGxxoZ05EqZTibp CmUedLJVd2OZXG+2vTJig+NTAYE86Ng+1wYdRBDiBanNLEk7Lqs= =ILwE -----END PGP SIGNATURE-----