-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 28 Feb 2022 12:23:03 +0100 Source: linux-signed-arm64 Architecture: source Version: 5.10.92+2 Distribution: bullseye-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: linux-signed-arm64 (5.10.92+2) bullseye-security; urgency=high . * Sign kernel from linux 5.10.92-2 . * lib/iov_iter: initialize "flags" in new pipe_buffer * [x86] mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (CVE-2021-43976) * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330) * [x86] drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942) * NFSv4: Handle case where the lookup of a directory fails (CVE-2022-24448) * yam: fix a memory leak in yam_siocdevprivate() (CVE-2022-24959) * tipc: improve size validations for received domain records (CVE-2022-0435) * [s390x] KVM: s390: Return error on SIDA memop on normal guest (CVE-2022-0516) * USB: gadget: validate interface OS descriptor requests (CVE-2022-25258) * usb: gadget: rndis: check size of RNDIS_MSG_SET command (CVE-2022-25375) Checksums-Sha1: f75f91029350aceab9cc1aec65a6b210ae8f56cf 7332 linux-signed-arm64_5.10.92+2.dsc cf0fda11f79ca10229f5d0864251940946634019 2472424 linux-signed-arm64_5.10.92+2.tar.xz Checksums-Sha256: 33dca75dc77551281a4a01a803953170b31f6cf1fef43dcf2bc44e39c2ecbb8a 7332 linux-signed-arm64_5.10.92+2.dsc 548163ce451c03e65b49ac2b3e762a7517d0f5c52c22c29911cfa725e9987fd4 2472424 linux-signed-arm64_5.10.92+2.tar.xz Files: 3b5b70e867da10cb9b5706bedee8e26c 7332 kernel optional linux-signed-arm64_5.10.92+2.dsc 9e05b1abb6a087f5dc4f6d29a8888f68 2472424 kernel optional linux-signed-arm64_5.10.92+2.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmIdMbMACgkQi0FRiLdO Nzah+g/+Lg82MTzXECks9VijGts0RwdDfDuSBC2Dj73E1/YAiZi8Vd0FVpQadqSh zV6ROMiwMd41lGmA/IyqCTiySUQFS9FvtgGKdMFy1yHS9EaSoeA54R4laNQxaZAk eu1r0MMr2RkTqUjUfsIUo5wBq1f29ztJ/uJjPCWx6HIbRGkhcD9BKoQ+sWHAQ81s F8/lrAH6Wqo1c/fc3BjAwdmXf5S+wkpYOZ5B3mWInFUi9NTczycDwQ93Otvl7R/1 LWrEQL+G9QSfUEb80C3pqqlHflg8145xQ6A5WkBgaS7cV8itrngAdsgm13NaTZAH E/k4jDT/58VGcEVBLKhJYF/GiU3moshLW+y42yldAdHMLsGUU92SMMwGfS1l9z7D ecI8bS8dNrLOhwoD66yitHe8FplLwO6iWcvmgqJdnZNJnKqcaJ02Cg9QBPTzISk2 YIBHrAct92PJOF3rxQpz4a/o19C4WpGusBUMU4KWIhfxlg4dqfhhsG+rC9UDNIJ+ CXDSihVQWe+pO40wuu6XacvJO8QHzN5y61XSGoPYRifTkNrLlsgPJ9PLt+bCW2EN HPHe4Ot4K8FHOfLPkte7kc62+r4KkSRM4CgNCTMcILyfYgYNNKVGTUyRqKsqGumZ Gv1EyN97YlqMyusrjFOqW1mXOR56YHGPiI4eH1ukrbs8awUVjrU= =8lkd -----END PGP SIGNATURE-----