Debian Package Tracker

general

source: linux (main)
version: 5.2.9-2
maintainer: Debian Kernel Team (archive) (DMD)
uploaders: maximilian attems [DMD] – Ben Hutchings [DMD] – Salvatore Bonaccorso [DMD] – Bastian Blank [DMD]
arch: all
std-ver: 4.2.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.16.56-1+deb8u1
o-o-sec: 3.16.72-1
oldstable: 4.9.189-3
old-sec: 4.9.168-1+deb9u5
old-bpo: 4.19.67-2~bpo9+1
stable: 4.19.67-2
stable-sec: 4.19.37-5+deb10u2
stable-bpo: 5.2.9-2~bpo10+1
testing: 5.2.9-2
unstable: 5.2.9-2
exp: 5.3~rc5-1~exp2

versioned links

3.16.43-2+deb8u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.51-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.51-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.56-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.57-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.59-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.64-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.68-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.72-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.30-2+deb9u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.65-3+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.65-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.88-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.110-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.110-3+deb9u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.168-1+deb9u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.189-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.37-5+deb10u2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.37-5+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.2.9-2~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.2.9-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.3~rc5-1~exp2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

acpi-modules-5.2.0-2-686-di
acpi-modules-5.2.0-2-686-pae-di
acpi-modules-5.2.0-2-amd64-di
affs-modules-5.2.0-2-4kc-malta-di
affs-modules-5.2.0-2-5kc-malta-di
affs-modules-5.2.0-2-loongson-3-di
affs-modules-5.2.0-2-m68k-di
affs-modules-5.2.0-2-octeon-di
affs-modules-5.2.0-2-powerpc-di
affs-modules-5.2.0-2-powerpc64-di
ata-modules-5.2.0-2-4kc-malta-di
ata-modules-5.2.0-2-5kc-malta-di
ata-modules-5.2.0-2-686-di
ata-modules-5.2.0-2-686-pae-di
ata-modules-5.2.0-2-alpha-generic-di
ata-modules-5.2.0-2-amd64-di
ata-modules-5.2.0-2-arm64-di
ata-modules-5.2.0-2-armmp-di
ata-modules-5.2.0-2-itanium-di
ata-modules-5.2.0-2-loongson-3-di
ata-modules-5.2.0-2-m68k-di
ata-modules-5.2.0-2-parisc-di
ata-modules-5.2.0-2-parisc64-di
ata-modules-5.2.0-2-powerpc-di
ata-modules-5.2.0-2-powerpc64-di
ata-modules-5.2.0-2-powerpc64le-di
ata-modules-5.2.0-2-riscv64-di
ata-modules-5.2.0-2-sparc64-di
btrfs-modules-5.2.0-2-4kc-malta-di
btrfs-modules-5.2.0-2-5kc-malta-di
btrfs-modules-5.2.0-2-686-di
btrfs-modules-5.2.0-2-686-pae-di
btrfs-modules-5.2.0-2-alpha-generic-di
btrfs-modules-5.2.0-2-amd64-di
btrfs-modules-5.2.0-2-arm64-di
btrfs-modules-5.2.0-2-armmp-di
btrfs-modules-5.2.0-2-itanium-di
btrfs-modules-5.2.0-2-loongson-3-di
btrfs-modules-5.2.0-2-m68k-di
btrfs-modules-5.2.0-2-marvell-di
btrfs-modules-5.2.0-2-mips32r6-di
btrfs-modules-5.2.0-2-mips32r6el-di
btrfs-modules-5.2.0-2-mips64r6-di
btrfs-modules-5.2.0-2-mips64r6el-di
btrfs-modules-5.2.0-2-octeon-di
btrfs-modules-5.2.0-2-parisc-di
btrfs-modules-5.2.0-2-parisc64-di
btrfs-modules-5.2.0-2-powerpc-di
btrfs-modules-5.2.0-2-powerpc64-di
btrfs-modules-5.2.0-2-powerpc64le-di
btrfs-modules-5.2.0-2-riscv64-di
btrfs-modules-5.2.0-2-s390x-di
btrfs-modules-5.2.0-2-sh7751r-di
btrfs-modules-5.2.0-2-sh7785lcr-di
btrfs-modules-5.2.0-2-sparc64-di
cdrom-core-modules-5.2.0-2-4kc-malta-di
cdrom-core-modules-5.2.0-2-5kc-malta-di
cdrom-core-modules-5.2.0-2-686-di
cdrom-core-modules-5.2.0-2-686-pae-di
cdrom-core-modules-5.2.0-2-alpha-generic-di
cdrom-core-modules-5.2.0-2-amd64-di
cdrom-core-modules-5.2.0-2-arm64-di
cdrom-core-modules-5.2.0-2-armmp-di
cdrom-core-modules-5.2.0-2-itanium-di
cdrom-core-modules-5.2.0-2-loongson-3-di
cdrom-core-modules-5.2.0-2-m68k-di
cdrom-core-modules-5.2.0-2-marvell-di
cdrom-core-modules-5.2.0-2-octeon-di
cdrom-core-modules-5.2.0-2-parisc-di
cdrom-core-modules-5.2.0-2-parisc64-di
cdrom-core-modules-5.2.0-2-powerpc-di
cdrom-core-modules-5.2.0-2-powerpc64-di
cdrom-core-modules-5.2.0-2-powerpc64le-di
cdrom-core-modules-5.2.0-2-riscv64-di
cdrom-core-modules-5.2.0-2-s390x-di
cdrom-core-modules-5.2.0-2-sh7751r-di
cdrom-core-modules-5.2.0-2-sh7785lcr-di
cdrom-core-modules-5.2.0-2-sparc64-di
compress-modules-5.2.0-2-4kc-malta-di
compress-modules-5.2.0-2-5kc-malta-di
compress-modules-5.2.0-2-686-di
compress-modules-5.2.0-2-686-pae-di
compress-modules-5.2.0-2-alpha-generic-di
compress-modules-5.2.0-2-amd64-di
compress-modules-5.2.0-2-arm64-di
compress-modules-5.2.0-2-armmp-di
compress-modules-5.2.0-2-itanium-di
compress-modules-5.2.0-2-loongson-3-di
compress-modules-5.2.0-2-m68k-di
compress-modules-5.2.0-2-marvell-di
compress-modules-5.2.0-2-mips32r6-di
compress-modules-5.2.0-2-mips32r6el-di
compress-modules-5.2.0-2-mips64r6-di
compress-modules-5.2.0-2-mips64r6el-di
compress-modules-5.2.0-2-octeon-di
compress-modules-5.2.0-2-parisc-di
compress-modules-5.2.0-2-parisc64-di
compress-modules-5.2.0-2-powerpc-di
compress-modules-5.2.0-2-powerpc64-di
compress-modules-5.2.0-2-powerpc64le-di
compress-modules-5.2.0-2-riscv64-di
compress-modules-5.2.0-2-s390x-di
compress-modules-5.2.0-2-sh7751r-di
compress-modules-5.2.0-2-sh7785lcr-di
compress-modules-5.2.0-2-sparc64-di
crc-modules-5.2.0-2-4kc-malta-di
crc-modules-5.2.0-2-5kc-malta-di
crc-modules-5.2.0-2-686-di
crc-modules-5.2.0-2-686-pae-di
crc-modules-5.2.0-2-alpha-generic-di
crc-modules-5.2.0-2-amd64-di
crc-modules-5.2.0-2-arm64-di
crc-modules-5.2.0-2-armmp-di
crc-modules-5.2.0-2-itanium-di
crc-modules-5.2.0-2-loongson-3-di
crc-modules-5.2.0-2-m68k-di
crc-modules-5.2.0-2-marvell-di
crc-modules-5.2.0-2-mips32r6-di
crc-modules-5.2.0-2-mips32r6el-di
crc-modules-5.2.0-2-mips64r6-di
crc-modules-5.2.0-2-mips64r6el-di
crc-modules-5.2.0-2-octeon-di
crc-modules-5.2.0-2-parisc-di
crc-modules-5.2.0-2-parisc64-di
crc-modules-5.2.0-2-powerpc-di
crc-modules-5.2.0-2-powerpc64-di
crc-modules-5.2.0-2-powerpc64le-di
crc-modules-5.2.0-2-riscv64-di
crc-modules-5.2.0-2-s390x-di
crc-modules-5.2.0-2-sh7751r-di
crc-modules-5.2.0-2-sh7785lcr-di
crc-modules-5.2.0-2-sparc64-di
crypto-dm-modules-5.2.0-2-4kc-malta-di
crypto-dm-modules-5.2.0-2-5kc-malta-di
crypto-dm-modules-5.2.0-2-686-di
crypto-dm-modules-5.2.0-2-686-pae-di
crypto-dm-modules-5.2.0-2-alpha-generic-di
crypto-dm-modules-5.2.0-2-amd64-di
crypto-dm-modules-5.2.0-2-arm64-di
crypto-dm-modules-5.2.0-2-armmp-di
crypto-dm-modules-5.2.0-2-itanium-di
crypto-dm-modules-5.2.0-2-loongson-3-di
crypto-dm-modules-5.2.0-2-marvell-di
crypto-dm-modules-5.2.0-2-mips32r6-di
crypto-dm-modules-5.2.0-2-mips32r6el-di
crypto-dm-modules-5.2.0-2-mips64r6-di
crypto-dm-modules-5.2.0-2-mips64r6el-di
crypto-dm-modules-5.2.0-2-octeon-di
crypto-dm-modules-5.2.0-2-parisc-di
crypto-dm-modules-5.2.0-2-parisc64-di
crypto-dm-modules-5.2.0-2-powerpc-di
crypto-dm-modules-5.2.0-2-powerpc64-di
crypto-dm-modules-5.2.0-2-powerpc64le-di
crypto-dm-modules-5.2.0-2-riscv64-di
crypto-dm-modules-5.2.0-2-s390x-di
crypto-dm-modules-5.2.0-2-sh7751r-di
crypto-dm-modules-5.2.0-2-sh7785lcr-di
crypto-dm-modules-5.2.0-2-sparc64-di
crypto-modules-5.2.0-2-4kc-malta-di
crypto-modules-5.2.0-2-5kc-malta-di
crypto-modules-5.2.0-2-686-di
crypto-modules-5.2.0-2-686-pae-di
crypto-modules-5.2.0-2-alpha-generic-di
crypto-modules-5.2.0-2-amd64-di
crypto-modules-5.2.0-2-arm64-di
crypto-modules-5.2.0-2-armmp-di
crypto-modules-5.2.0-2-itanium-di
crypto-modules-5.2.0-2-loongson-3-di
crypto-modules-5.2.0-2-m68k-di
crypto-modules-5.2.0-2-marvell-di
crypto-modules-5.2.0-2-mips32r6-di
crypto-modules-5.2.0-2-mips32r6el-di
crypto-modules-5.2.0-2-mips64r6-di
crypto-modules-5.2.0-2-mips64r6el-di
crypto-modules-5.2.0-2-octeon-di
crypto-modules-5.2.0-2-parisc-di
crypto-modules-5.2.0-2-parisc64-di
crypto-modules-5.2.0-2-powerpc-di
crypto-modules-5.2.0-2-powerpc64-di
crypto-modules-5.2.0-2-powerpc64le-di
crypto-modules-5.2.0-2-riscv64-di
crypto-modules-5.2.0-2-s390x-di
crypto-modules-5.2.0-2-sh7751r-di
crypto-modules-5.2.0-2-sh7785lcr-di
crypto-modules-5.2.0-2-sparc64-di
dasd-extra-modules-5.2.0-2-s390x-di
dasd-modules-5.2.0-2-s390x-di
efi-modules-5.2.0-2-686-di
efi-modules-5.2.0-2-686-pae-di
efi-modules-5.2.0-2-amd64-di
efi-modules-5.2.0-2-arm64-di
efi-modules-5.2.0-2-armmp-di
event-modules-5.2.0-2-4kc-malta-di
event-modules-5.2.0-2-5kc-malta-di
event-modules-5.2.0-2-686-di
event-modules-5.2.0-2-686-pae-di
event-modules-5.2.0-2-alpha-generic-di
event-modules-5.2.0-2-amd64-di
event-modules-5.2.0-2-arm64-di
event-modules-5.2.0-2-armmp-di
event-modules-5.2.0-2-itanium-di
event-modules-5.2.0-2-loongson-3-di
event-modules-5.2.0-2-marvell-di
event-modules-5.2.0-2-octeon-di
event-modules-5.2.0-2-parisc-di
event-modules-5.2.0-2-parisc64-di
event-modules-5.2.0-2-powerpc-di
event-modules-5.2.0-2-powerpc64-di
event-modules-5.2.0-2-powerpc64le-di
event-modules-5.2.0-2-riscv64-di
ext4-modules-5.2.0-2-4kc-malta-di
ext4-modules-5.2.0-2-5kc-malta-di
ext4-modules-5.2.0-2-686-di
ext4-modules-5.2.0-2-686-pae-di
ext4-modules-5.2.0-2-alpha-generic-di
ext4-modules-5.2.0-2-amd64-di
ext4-modules-5.2.0-2-arm64-di
ext4-modules-5.2.0-2-armmp-di
ext4-modules-5.2.0-2-itanium-di
ext4-modules-5.2.0-2-loongson-3-di
ext4-modules-5.2.0-2-m68k-di
ext4-modules-5.2.0-2-marvell-di
ext4-modules-5.2.0-2-mips32r6-di
ext4-modules-5.2.0-2-mips32r6el-di
ext4-modules-5.2.0-2-mips64r6-di
ext4-modules-5.2.0-2-mips64r6el-di
ext4-modules-5.2.0-2-octeon-di
ext4-modules-5.2.0-2-parisc-di
ext4-modules-5.2.0-2-parisc64-di
ext4-modules-5.2.0-2-powerpc-di
ext4-modules-5.2.0-2-powerpc64-di
ext4-modules-5.2.0-2-powerpc64le-di
ext4-modules-5.2.0-2-riscv64-di
ext4-modules-5.2.0-2-s390x-di
ext4-modules-5.2.0-2-sh7751r-di
ext4-modules-5.2.0-2-sh7785lcr-di
ext4-modules-5.2.0-2-sparc64-di
fancontrol-modules-5.2.0-2-powerpc64-di
fancontrol-modules-5.2.0-2-powerpc64le-di
fat-modules-5.2.0-2-4kc-malta-di
fat-modules-5.2.0-2-5kc-malta-di
fat-modules-5.2.0-2-686-di
fat-modules-5.2.0-2-686-pae-di
fat-modules-5.2.0-2-alpha-generic-di
fat-modules-5.2.0-2-amd64-di
fat-modules-5.2.0-2-arm64-di
fat-modules-5.2.0-2-armmp-di
fat-modules-5.2.0-2-itanium-di
fat-modules-5.2.0-2-loongson-3-di
fat-modules-5.2.0-2-m68k-di
fat-modules-5.2.0-2-marvell-di
fat-modules-5.2.0-2-octeon-di
fat-modules-5.2.0-2-parisc-di
fat-modules-5.2.0-2-parisc64-di
fat-modules-5.2.0-2-powerpc-di
fat-modules-5.2.0-2-powerpc64-di
fat-modules-5.2.0-2-powerpc64le-di
fat-modules-5.2.0-2-riscv64-di
fat-modules-5.2.0-2-s390x-di
fat-modules-5.2.0-2-sh7751r-di
fat-modules-5.2.0-2-sh7785lcr-di
fat-modules-5.2.0-2-sparc64-di
fb-modules-5.2.0-2-4kc-malta-di
fb-modules-5.2.0-2-5kc-malta-di
fb-modules-5.2.0-2-686-di
fb-modules-5.2.0-2-686-pae-di
fb-modules-5.2.0-2-alpha-generic-di
fb-modules-5.2.0-2-amd64-di
fb-modules-5.2.0-2-arm64-di
fb-modules-5.2.0-2-armmp-di
fb-modules-5.2.0-2-itanium-di
fb-modules-5.2.0-2-loongson-3-di
fb-modules-5.2.0-2-marvell-di
fb-modules-5.2.0-2-parisc64-di
fb-modules-5.2.0-2-powerpc-di
fb-modules-5.2.0-2-powerpc64-di
fb-modules-5.2.0-2-powerpc64le-di
fb-modules-5.2.0-2-riscv64-di
fb-modules-5.2.0-2-sparc64-di
firewire-core-modules-5.2.0-2-686-di
firewire-core-modules-5.2.0-2-686-pae-di
firewire-core-modules-5.2.0-2-amd64-di
firewire-core-modules-5.2.0-2-itanium-di
firewire-core-modules-5.2.0-2-loongson-3-di
firewire-core-modules-5.2.0-2-powerpc-di
firewire-core-modules-5.2.0-2-powerpc64-di
firewire-core-modules-5.2.0-2-powerpc64le-di
firewire-core-modules-5.2.0-2-sh7751r-di
firewire-core-modules-5.2.0-2-sh7785lcr-di
fuse-modules-5.2.0-2-4kc-malta-di
fuse-modules-5.2.0-2-5kc-malta-di
fuse-modules-5.2.0-2-686-di
fuse-modules-5.2.0-2-686-pae-di
fuse-modules-5.2.0-2-alpha-generic-di
fuse-modules-5.2.0-2-amd64-di
fuse-modules-5.2.0-2-arm64-di
fuse-modules-5.2.0-2-armmp-di
fuse-modules-5.2.0-2-itanium-di
fuse-modules-5.2.0-2-loongson-3-di
fuse-modules-5.2.0-2-m68k-di
fuse-modules-5.2.0-2-marvell-di
fuse-modules-5.2.0-2-mips32r6-di
fuse-modules-5.2.0-2-mips32r6el-di
fuse-modules-5.2.0-2-mips64r6-di
fuse-modules-5.2.0-2-mips64r6el-di
fuse-modules-5.2.0-2-octeon-di
fuse-modules-5.2.0-2-parisc-di
fuse-modules-5.2.0-2-parisc64-di
fuse-modules-5.2.0-2-powerpc-di
fuse-modules-5.2.0-2-powerpc64-di
fuse-modules-5.2.0-2-powerpc64le-di
fuse-modules-5.2.0-2-riscv64-di
fuse-modules-5.2.0-2-s390x-di
fuse-modules-5.2.0-2-sh7751r-di
fuse-modules-5.2.0-2-sh7785lcr-di
fuse-modules-5.2.0-2-sparc64-di
hfs-modules-5.2.0-2-4kc-malta-di
hfs-modules-5.2.0-2-5kc-malta-di
hfs-modules-5.2.0-2-loongson-3-di
hfs-modules-5.2.0-2-m68k-di
hfs-modules-5.2.0-2-octeon-di
hfs-modules-5.2.0-2-powerpc-di
hfs-modules-5.2.0-2-powerpc64-di
hyperv-daemons (3 bugs: 0, 2, 1, 0)
hypervisor-modules-5.2.0-2-powerpc64-di
hypervisor-modules-5.2.0-2-powerpc64le-di
i2c-modules-5.2.0-2-4kc-malta-di
i2c-modules-5.2.0-2-5kc-malta-di
i2c-modules-5.2.0-2-686-di
i2c-modules-5.2.0-2-686-pae-di
i2c-modules-5.2.0-2-alpha-generic-di
i2c-modules-5.2.0-2-amd64-di
i2c-modules-5.2.0-2-arm64-di
i2c-modules-5.2.0-2-armmp-di
i2c-modules-5.2.0-2-itanium-di
i2c-modules-5.2.0-2-powerpc64-di
i2c-modules-5.2.0-2-powerpc64le-di
i2c-modules-5.2.0-2-riscv64-di
i2c-modules-5.2.0-2-sh7751r-di
i2c-modules-5.2.0-2-sparc64-di
ide-core-modules-5.2.0-2-itanium-di
ide-core-modules-5.2.0-2-m68k-di
ide-modules-5.2.0-2-itanium-di
ide-modules-5.2.0-2-m68k-di
input-modules-5.2.0-2-4kc-malta-di
input-modules-5.2.0-2-5kc-malta-di
input-modules-5.2.0-2-686-di
input-modules-5.2.0-2-686-pae-di
input-modules-5.2.0-2-alpha-generic-di
input-modules-5.2.0-2-amd64-di
input-modules-5.2.0-2-arm64-di
input-modules-5.2.0-2-armmp-di
input-modules-5.2.0-2-itanium-di
input-modules-5.2.0-2-loongson-3-di
input-modules-5.2.0-2-marvell-di
input-modules-5.2.0-2-octeon-di
input-modules-5.2.0-2-parisc-di
input-modules-5.2.0-2-parisc64-di
input-modules-5.2.0-2-powerpc-di
input-modules-5.2.0-2-powerpc64-di
input-modules-5.2.0-2-powerpc64le-di
input-modules-5.2.0-2-riscv64-di
input-modules-5.2.0-2-sparc64-di
ipv6-modules-5.2.0-2-marvell-di
isofs-modules-5.2.0-2-4kc-malta-di
isofs-modules-5.2.0-2-5kc-malta-di
isofs-modules-5.2.0-2-686-di
isofs-modules-5.2.0-2-686-pae-di
isofs-modules-5.2.0-2-alpha-generic-di
isofs-modules-5.2.0-2-amd64-di
isofs-modules-5.2.0-2-arm64-di
isofs-modules-5.2.0-2-armmp-di
isofs-modules-5.2.0-2-itanium-di
isofs-modules-5.2.0-2-loongson-3-di
isofs-modules-5.2.0-2-m68k-di
isofs-modules-5.2.0-2-marvell-di
isofs-modules-5.2.0-2-mips32r6-di
isofs-modules-5.2.0-2-mips32r6el-di
isofs-modules-5.2.0-2-mips64r6-di
isofs-modules-5.2.0-2-mips64r6el-di
isofs-modules-5.2.0-2-octeon-di
isofs-modules-5.2.0-2-parisc-di
isofs-modules-5.2.0-2-parisc64-di
isofs-modules-5.2.0-2-powerpc-di
isofs-modules-5.2.0-2-powerpc64-di
isofs-modules-5.2.0-2-powerpc64le-di
isofs-modules-5.2.0-2-riscv64-di
isofs-modules-5.2.0-2-s390x-di
isofs-modules-5.2.0-2-sh7751r-di
isofs-modules-5.2.0-2-sh7785lcr-di
isofs-modules-5.2.0-2-sparc64-di
jffs2-modules-5.2.0-2-marvell-di
jfs-modules-5.2.0-2-4kc-malta-di
jfs-modules-5.2.0-2-5kc-malta-di
jfs-modules-5.2.0-2-686-di
jfs-modules-5.2.0-2-686-pae-di
jfs-modules-5.2.0-2-alpha-generic-di
jfs-modules-5.2.0-2-amd64-di
jfs-modules-5.2.0-2-arm64-di
jfs-modules-5.2.0-2-armmp-di
jfs-modules-5.2.0-2-itanium-di
jfs-modules-5.2.0-2-loongson-3-di
jfs-modules-5.2.0-2-marvell-di
jfs-modules-5.2.0-2-mips32r6-di
jfs-modules-5.2.0-2-mips32r6el-di
jfs-modules-5.2.0-2-mips64r6-di
jfs-modules-5.2.0-2-mips64r6el-di
jfs-modules-5.2.0-2-octeon-di
jfs-modules-5.2.0-2-parisc-di
jfs-modules-5.2.0-2-parisc64-di
jfs-modules-5.2.0-2-powerpc-di
jfs-modules-5.2.0-2-powerpc64-di
jfs-modules-5.2.0-2-powerpc64le-di
jfs-modules-5.2.0-2-riscv64-di
jfs-modules-5.2.0-2-sh7751r-di
jfs-modules-5.2.0-2-sh7785lcr-di
jfs-modules-5.2.0-2-sparc64-di
kernel-image-5.2.0-2-4kc-malta-di
kernel-image-5.2.0-2-5kc-malta-di
kernel-image-5.2.0-2-686-di
kernel-image-5.2.0-2-686-pae-di
kernel-image-5.2.0-2-alpha-generic-di
kernel-image-5.2.0-2-amd64-di
kernel-image-5.2.0-2-arm64-di
kernel-image-5.2.0-2-armmp-di
kernel-image-5.2.0-2-itanium-di
kernel-image-5.2.0-2-loongson-3-di
kernel-image-5.2.0-2-m68k-di
kernel-image-5.2.0-2-marvell-di
kernel-image-5.2.0-2-mips32r6-di
kernel-image-5.2.0-2-mips32r6el-di
kernel-image-5.2.0-2-mips64r6-di
kernel-image-5.2.0-2-mips64r6el-di
kernel-image-5.2.0-2-octeon-di
kernel-image-5.2.0-2-parisc-di
kernel-image-5.2.0-2-parisc64-di
kernel-image-5.2.0-2-powerpc-di
kernel-image-5.2.0-2-powerpc64-di
kernel-image-5.2.0-2-powerpc64le-di
kernel-image-5.2.0-2-riscv64-di
kernel-image-5.2.0-2-s390x-di
kernel-image-5.2.0-2-sh7751r-di
kernel-image-5.2.0-2-sh7785lcr-di
kernel-image-5.2.0-2-sparc64-di
leds-modules-5.2.0-2-arm64-di
leds-modules-5.2.0-2-armmp-di
leds-modules-5.2.0-2-marvell-di
libbpf-dev
libbpf0
libcpupower-dev
libcpupower2
linux-bootwrapper-5.2.0-2
linux-compiler-gcc-8-arm
linux-compiler-gcc-8-s390
linux-compiler-gcc-8-x86
linux-config-5.2
linux-cpupower (2 bugs: 0, 1, 1, 0)
linux-doc-5.2
linux-headers-5.2.0-2-4kc-malta
linux-headers-5.2.0-2-5kc-malta
linux-headers-5.2.0-2-686
linux-headers-5.2.0-2-686-pae
linux-headers-5.2.0-2-all
linux-headers-5.2.0-2-all-alpha
linux-headers-5.2.0-2-all-amd64
linux-headers-5.2.0-2-all-arm64
linux-headers-5.2.0-2-all-armel
linux-headers-5.2.0-2-all-armhf
linux-headers-5.2.0-2-all-hppa
linux-headers-5.2.0-2-all-i386
linux-headers-5.2.0-2-all-ia64
linux-headers-5.2.0-2-all-m68k
linux-headers-5.2.0-2-all-mips
linux-headers-5.2.0-2-all-mips64
linux-headers-5.2.0-2-all-mips64el
linux-headers-5.2.0-2-all-mips64r6
linux-headers-5.2.0-2-all-mips64r6el
linux-headers-5.2.0-2-all-mipsel
linux-headers-5.2.0-2-all-mipsr6
linux-headers-5.2.0-2-all-mipsr6el
linux-headers-5.2.0-2-all-powerpc
linux-headers-5.2.0-2-all-powerpcspe
linux-headers-5.2.0-2-all-ppc64
linux-headers-5.2.0-2-all-ppc64el
linux-headers-5.2.0-2-all-riscv64
linux-headers-5.2.0-2-all-s390x
linux-headers-5.2.0-2-all-sh4
linux-headers-5.2.0-2-all-sparc64
linux-headers-5.2.0-2-alpha-generic
linux-headers-5.2.0-2-alpha-smp
linux-headers-5.2.0-2-amd64 (1 bugs: 0, 1, 0, 0)
linux-headers-5.2.0-2-arm64
linux-headers-5.2.0-2-armmp
linux-headers-5.2.0-2-armmp-lpae
linux-headers-5.2.0-2-cloud-amd64
linux-headers-5.2.0-2-common
linux-headers-5.2.0-2-common-rt
linux-headers-5.2.0-2-itanium
linux-headers-5.2.0-2-loongson-3
linux-headers-5.2.0-2-m68k
linux-headers-5.2.0-2-marvell
linux-headers-5.2.0-2-mckinley
linux-headers-5.2.0-2-mips32r6
linux-headers-5.2.0-2-mips32r6el
linux-headers-5.2.0-2-mips64r6
linux-headers-5.2.0-2-mips64r6el
linux-headers-5.2.0-2-octeon
linux-headers-5.2.0-2-parisc
linux-headers-5.2.0-2-parisc64
linux-headers-5.2.0-2-powerpc
linux-headers-5.2.0-2-powerpc-smp
linux-headers-5.2.0-2-powerpc64
linux-headers-5.2.0-2-powerpc64le
linux-headers-5.2.0-2-powerpcspe
linux-headers-5.2.0-2-riscv64
linux-headers-5.2.0-2-rpi
linux-headers-5.2.0-2-rt-686-pae
linux-headers-5.2.0-2-rt-amd64
linux-headers-5.2.0-2-rt-arm64
linux-headers-5.2.0-2-rt-armmp
linux-headers-5.2.0-2-s390x
linux-headers-5.2.0-2-sh7751r
linux-headers-5.2.0-2-sh7785lcr
linux-headers-5.2.0-2-sparc64
linux-headers-5.2.0-2-sparc64-smp
linux-image-5.2.0-2-4kc-malta
linux-image-5.2.0-2-4kc-malta-dbg
linux-image-5.2.0-2-5kc-malta
linux-image-5.2.0-2-5kc-malta-dbg
linux-image-5.2.0-2-686-dbg
linux-image-5.2.0-2-686-pae-dbg
linux-image-5.2.0-2-686-pae-unsigned
linux-image-5.2.0-2-686-unsigned
linux-image-5.2.0-2-alpha-generic
linux-image-5.2.0-2-alpha-generic-dbg
linux-image-5.2.0-2-alpha-smp
linux-image-5.2.0-2-alpha-smp-dbg
linux-image-5.2.0-2-amd64-dbg
linux-image-5.2.0-2-amd64-unsigned
linux-image-5.2.0-2-arm64-dbg
linux-image-5.2.0-2-arm64-unsigned
linux-image-5.2.0-2-armmp
linux-image-5.2.0-2-armmp-dbg
linux-image-5.2.0-2-armmp-lpae
linux-image-5.2.0-2-armmp-lpae-dbg
linux-image-5.2.0-2-cloud-amd64-dbg
linux-image-5.2.0-2-cloud-amd64-unsigned
linux-image-5.2.0-2-itanium
linux-image-5.2.0-2-itanium-dbg
linux-image-5.2.0-2-loongson-3
linux-image-5.2.0-2-loongson-3-dbg
linux-image-5.2.0-2-m68k
linux-image-5.2.0-2-m68k-dbg
linux-image-5.2.0-2-marvell
linux-image-5.2.0-2-marvell-dbg
linux-image-5.2.0-2-mckinley
linux-image-5.2.0-2-mckinley-dbg
linux-image-5.2.0-2-mips32r6
linux-image-5.2.0-2-mips32r6-dbg
linux-image-5.2.0-2-mips32r6el
linux-image-5.2.0-2-mips32r6el-dbg
linux-image-5.2.0-2-mips64r6
linux-image-5.2.0-2-mips64r6-dbg
linux-image-5.2.0-2-mips64r6el
linux-image-5.2.0-2-mips64r6el-dbg
linux-image-5.2.0-2-octeon
linux-image-5.2.0-2-octeon-dbg
linux-image-5.2.0-2-parisc
linux-image-5.2.0-2-parisc64
linux-image-5.2.0-2-powerpc
linux-image-5.2.0-2-powerpc-dbg
linux-image-5.2.0-2-powerpc-smp
linux-image-5.2.0-2-powerpc-smp-dbg
linux-image-5.2.0-2-powerpc64
linux-image-5.2.0-2-powerpc64-dbg
linux-image-5.2.0-2-powerpc64le
linux-image-5.2.0-2-powerpc64le-dbg
linux-image-5.2.0-2-powerpcspe
linux-image-5.2.0-2-powerpcspe-dbg
linux-image-5.2.0-2-riscv64
linux-image-5.2.0-2-riscv64-dbg
linux-image-5.2.0-2-rpi
linux-image-5.2.0-2-rpi-dbg
linux-image-5.2.0-2-rt-686-pae-dbg
linux-image-5.2.0-2-rt-686-pae-unsigned
linux-image-5.2.0-2-rt-amd64-dbg
linux-image-5.2.0-2-rt-amd64-unsigned
linux-image-5.2.0-2-rt-arm64-dbg
linux-image-5.2.0-2-rt-arm64-unsigned
linux-image-5.2.0-2-rt-armmp
linux-image-5.2.0-2-rt-armmp-dbg
linux-image-5.2.0-2-s390x
linux-image-5.2.0-2-s390x-dbg
linux-image-5.2.0-2-sh7751r
linux-image-5.2.0-2-sh7751r-dbg
linux-image-5.2.0-2-sh7785lcr
linux-image-5.2.0-2-sh7785lcr-dbg
linux-image-5.2.0-2-sparc64
linux-image-5.2.0-2-sparc64-dbg
linux-image-5.2.0-2-sparc64-smp
linux-image-5.2.0-2-sparc64-smp-dbg
linux-image-amd64-signed-template
linux-image-arm64-signed-template
linux-image-i386-signed-template
linux-kbuild-5.2
linux-libc-dev (10 bugs: 0, 7, 3, 0)
linux-perf-5.2
linux-source-5.2 (2 bugs: 0, 2, 0, 0)
linux-support-5.2.0-2
loop-modules-5.2.0-2-4kc-malta-di
loop-modules-5.2.0-2-5kc-malta-di
loop-modules-5.2.0-2-686-di
loop-modules-5.2.0-2-686-pae-di
loop-modules-5.2.0-2-alpha-generic-di
loop-modules-5.2.0-2-amd64-di
loop-modules-5.2.0-2-arm64-di
loop-modules-5.2.0-2-armmp-di
loop-modules-5.2.0-2-itanium-di
loop-modules-5.2.0-2-loongson-3-di
loop-modules-5.2.0-2-m68k-di
loop-modules-5.2.0-2-marvell-di
loop-modules-5.2.0-2-mips32r6-di
loop-modules-5.2.0-2-mips32r6el-di
loop-modules-5.2.0-2-mips64r6-di
loop-modules-5.2.0-2-mips64r6el-di
loop-modules-5.2.0-2-octeon-di
loop-modules-5.2.0-2-parisc-di
loop-modules-5.2.0-2-parisc64-di
loop-modules-5.2.0-2-powerpc-di
loop-modules-5.2.0-2-powerpc64-di
loop-modules-5.2.0-2-powerpc64le-di
loop-modules-5.2.0-2-riscv64-di
loop-modules-5.2.0-2-s390x-di
loop-modules-5.2.0-2-sh7751r-di
loop-modules-5.2.0-2-sh7785lcr-di
md-modules-5.2.0-2-4kc-malta-di
md-modules-5.2.0-2-5kc-malta-di
md-modules-5.2.0-2-686-di
md-modules-5.2.0-2-686-pae-di
md-modules-5.2.0-2-alpha-generic-di
md-modules-5.2.0-2-amd64-di
md-modules-5.2.0-2-arm64-di
md-modules-5.2.0-2-armmp-di
md-modules-5.2.0-2-itanium-di
md-modules-5.2.0-2-loongson-3-di
md-modules-5.2.0-2-m68k-di
md-modules-5.2.0-2-marvell-di
md-modules-5.2.0-2-mips32r6-di
md-modules-5.2.0-2-mips32r6el-di
md-modules-5.2.0-2-mips64r6-di
md-modules-5.2.0-2-mips64r6el-di
md-modules-5.2.0-2-octeon-di
md-modules-5.2.0-2-parisc-di
md-modules-5.2.0-2-parisc64-di
md-modules-5.2.0-2-powerpc-di
md-modules-5.2.0-2-powerpc64-di
md-modules-5.2.0-2-powerpc64le-di
md-modules-5.2.0-2-riscv64-di
md-modules-5.2.0-2-s390x-di
md-modules-5.2.0-2-sh7751r-di
md-modules-5.2.0-2-sh7785lcr-di
md-modules-5.2.0-2-sparc64-di
minix-modules-5.2.0-2-4kc-malta-di
minix-modules-5.2.0-2-5kc-malta-di
minix-modules-5.2.0-2-loongson-3-di
minix-modules-5.2.0-2-marvell-di
minix-modules-5.2.0-2-octeon-di
minix-modules-5.2.0-2-sh7751r-di
minix-modules-5.2.0-2-sh7785lcr-di
mmc-core-modules-5.2.0-2-4kc-malta-di
mmc-core-modules-5.2.0-2-5kc-malta-di
mmc-core-modules-5.2.0-2-686-di
mmc-core-modules-5.2.0-2-686-pae-di
mmc-core-modules-5.2.0-2-amd64-di
mmc-core-modules-5.2.0-2-marvell-di
mmc-core-modules-5.2.0-2-powerpc-di
mmc-core-modules-5.2.0-2-powerpc64-di
mmc-modules-5.2.0-2-4kc-malta-di
mmc-modules-5.2.0-2-5kc-malta-di
mmc-modules-5.2.0-2-686-di
mmc-modules-5.2.0-2-686-pae-di
mmc-modules-5.2.0-2-amd64-di
mmc-modules-5.2.0-2-arm64-di
mmc-modules-5.2.0-2-armmp-di
mmc-modules-5.2.0-2-marvell-di
mouse-modules-5.2.0-2-4kc-malta-di
mouse-modules-5.2.0-2-5kc-malta-di
mouse-modules-5.2.0-2-686-di
mouse-modules-5.2.0-2-686-pae-di
mouse-modules-5.2.0-2-alpha-generic-di
mouse-modules-5.2.0-2-amd64-di
mouse-modules-5.2.0-2-itanium-di
mouse-modules-5.2.0-2-marvell-di
mouse-modules-5.2.0-2-parisc-di
mouse-modules-5.2.0-2-parisc64-di
mouse-modules-5.2.0-2-powerpc-di
mouse-modules-5.2.0-2-powerpc64-di
mouse-modules-5.2.0-2-powerpc64le-di
mtd-core-modules-5.2.0-2-4kc-malta-di
mtd-core-modules-5.2.0-2-5kc-malta-di
mtd-core-modules-5.2.0-2-686-di
mtd-core-modules-5.2.0-2-686-pae-di
mtd-core-modules-5.2.0-2-amd64-di
mtd-core-modules-5.2.0-2-arm64-di
mtd-core-modules-5.2.0-2-itanium-di
mtd-core-modules-5.2.0-2-loongson-3-di
mtd-core-modules-5.2.0-2-marvell-di
mtd-core-modules-5.2.0-2-powerpc64-di
mtd-core-modules-5.2.0-2-powerpc64le-di
mtd-core-modules-5.2.0-2-riscv64-di
mtd-core-modules-5.2.0-2-s390x-di
mtd-modules-5.2.0-2-armmp-di
mtd-modules-5.2.0-2-marvell-di
mtd-modules-5.2.0-2-riscv64-di
multipath-modules-5.2.0-2-4kc-malta-di
multipath-modules-5.2.0-2-5kc-malta-di
multipath-modules-5.2.0-2-686-di
multipath-modules-5.2.0-2-686-pae-di
multipath-modules-5.2.0-2-alpha-generic-di
multipath-modules-5.2.0-2-amd64-di
multipath-modules-5.2.0-2-arm64-di
multipath-modules-5.2.0-2-armmp-di
multipath-modules-5.2.0-2-itanium-di
multipath-modules-5.2.0-2-loongson-3-di
multipath-modules-5.2.0-2-marvell-di
multipath-modules-5.2.0-2-mips32r6-di
multipath-modules-5.2.0-2-mips32r6el-di
multipath-modules-5.2.0-2-mips64r6-di
multipath-modules-5.2.0-2-mips64r6el-di
multipath-modules-5.2.0-2-octeon-di
multipath-modules-5.2.0-2-parisc-di
multipath-modules-5.2.0-2-parisc64-di
multipath-modules-5.2.0-2-powerpc-di
multipath-modules-5.2.0-2-powerpc64-di
multipath-modules-5.2.0-2-powerpc64le-di
multipath-modules-5.2.0-2-riscv64-di
multipath-modules-5.2.0-2-s390x-di
multipath-modules-5.2.0-2-sh7751r-di
multipath-modules-5.2.0-2-sh7785lcr-di
multipath-modules-5.2.0-2-sparc64-di
nbd-modules-5.2.0-2-4kc-malta-di
nbd-modules-5.2.0-2-5kc-malta-di
nbd-modules-5.2.0-2-686-di
nbd-modules-5.2.0-2-686-pae-di
nbd-modules-5.2.0-2-alpha-generic-di
nbd-modules-5.2.0-2-amd64-di
nbd-modules-5.2.0-2-arm64-di
nbd-modules-5.2.0-2-armmp-di
nbd-modules-5.2.0-2-itanium-di
nbd-modules-5.2.0-2-loongson-3-di
nbd-modules-5.2.0-2-m68k-di
nbd-modules-5.2.0-2-marvell-di
nbd-modules-5.2.0-2-mips32r6-di
nbd-modules-5.2.0-2-mips32r6el-di
nbd-modules-5.2.0-2-mips64r6-di
nbd-modules-5.2.0-2-mips64r6el-di
nbd-modules-5.2.0-2-octeon-di
nbd-modules-5.2.0-2-parisc-di
nbd-modules-5.2.0-2-parisc64-di
nbd-modules-5.2.0-2-powerpc-di
nbd-modules-5.2.0-2-powerpc64-di
nbd-modules-5.2.0-2-powerpc64le-di
nbd-modules-5.2.0-2-riscv64-di
nbd-modules-5.2.0-2-s390x-di
nbd-modules-5.2.0-2-sh7751r-di
nbd-modules-5.2.0-2-sh7785lcr-di
nbd-modules-5.2.0-2-sparc64-di
nfs-modules-5.2.0-2-loongson-3-di
nic-modules-5.2.0-2-4kc-malta-di
nic-modules-5.2.0-2-5kc-malta-di
nic-modules-5.2.0-2-686-di
nic-modules-5.2.0-2-686-pae-di
nic-modules-5.2.0-2-alpha-generic-di
nic-modules-5.2.0-2-amd64-di
nic-modules-5.2.0-2-arm64-di
nic-modules-5.2.0-2-armmp-di
nic-modules-5.2.0-2-itanium-di
nic-modules-5.2.0-2-loongson-3-di
nic-modules-5.2.0-2-m68k-di
nic-modules-5.2.0-2-marvell-di
nic-modules-5.2.0-2-octeon-di
nic-modules-5.2.0-2-parisc-di
nic-modules-5.2.0-2-parisc64-di
nic-modules-5.2.0-2-powerpc-di
nic-modules-5.2.0-2-powerpc64-di
nic-modules-5.2.0-2-powerpc64le-di
nic-modules-5.2.0-2-riscv64-di
nic-modules-5.2.0-2-s390x-di
nic-modules-5.2.0-2-sh7751r-di
nic-modules-5.2.0-2-sh7785lcr-di
nic-modules-5.2.0-2-sparc64-di
nic-pcmcia-modules-5.2.0-2-686-di
nic-pcmcia-modules-5.2.0-2-686-pae-di
nic-pcmcia-modules-5.2.0-2-alpha-generic-di
nic-pcmcia-modules-5.2.0-2-amd64-di
nic-pcmcia-modules-5.2.0-2-powerpc-di
nic-pcmcia-modules-5.2.0-2-powerpc64-di
nic-shared-modules-5.2.0-2-4kc-malta-di
nic-shared-modules-5.2.0-2-5kc-malta-di
nic-shared-modules-5.2.0-2-686-di
nic-shared-modules-5.2.0-2-686-pae-di
nic-shared-modules-5.2.0-2-alpha-generic-di
nic-shared-modules-5.2.0-2-amd64-di
nic-shared-modules-5.2.0-2-arm64-di
nic-shared-modules-5.2.0-2-armmp-di
nic-shared-modules-5.2.0-2-itanium-di
nic-shared-modules-5.2.0-2-loongson-3-di
nic-shared-modules-5.2.0-2-m68k-di
nic-shared-modules-5.2.0-2-marvell-di
nic-shared-modules-5.2.0-2-mips32r6-di
nic-shared-modules-5.2.0-2-mips32r6el-di
nic-shared-modules-5.2.0-2-mips64r6-di
nic-shared-modules-5.2.0-2-mips64r6el-di
nic-shared-modules-5.2.0-2-octeon-di
nic-shared-modules-5.2.0-2-parisc-di
nic-shared-modules-5.2.0-2-parisc64-di
nic-shared-modules-5.2.0-2-powerpc-di
nic-shared-modules-5.2.0-2-powerpc64-di
nic-shared-modules-5.2.0-2-powerpc64le-di
nic-shared-modules-5.2.0-2-riscv64-di
nic-shared-modules-5.2.0-2-sh7751r-di
nic-shared-modules-5.2.0-2-sh7785lcr-di
nic-shared-modules-5.2.0-2-sparc64-di
nic-usb-modules-5.2.0-2-4kc-malta-di
nic-usb-modules-5.2.0-2-5kc-malta-di
nic-usb-modules-5.2.0-2-686-di
nic-usb-modules-5.2.0-2-686-pae-di
nic-usb-modules-5.2.0-2-alpha-generic-di
nic-usb-modules-5.2.0-2-amd64-di
nic-usb-modules-5.2.0-2-arm64-di
nic-usb-modules-5.2.0-2-armmp-di
nic-usb-modules-5.2.0-2-itanium-di
nic-usb-modules-5.2.0-2-loongson-3-di
nic-usb-modules-5.2.0-2-marvell-di
nic-usb-modules-5.2.0-2-octeon-di
nic-usb-modules-5.2.0-2-parisc-di
nic-usb-modules-5.2.0-2-parisc64-di
nic-usb-modules-5.2.0-2-powerpc-di
nic-usb-modules-5.2.0-2-powerpc64-di
nic-usb-modules-5.2.0-2-powerpc64le-di
nic-usb-modules-5.2.0-2-riscv64-di
nic-usb-modules-5.2.0-2-sh7751r-di
nic-usb-modules-5.2.0-2-sh7785lcr-di
nic-usb-modules-5.2.0-2-sparc64-di
nic-wireless-modules-5.2.0-2-4kc-malta-di
nic-wireless-modules-5.2.0-2-5kc-malta-di
nic-wireless-modules-5.2.0-2-686-di
nic-wireless-modules-5.2.0-2-686-pae-di
nic-wireless-modules-5.2.0-2-alpha-generic-di
nic-wireless-modules-5.2.0-2-amd64-di
nic-wireless-modules-5.2.0-2-arm64-di
nic-wireless-modules-5.2.0-2-armmp-di
nic-wireless-modules-5.2.0-2-loongson-3-di
nic-wireless-modules-5.2.0-2-octeon-di
nic-wireless-modules-5.2.0-2-powerpc-di
nic-wireless-modules-5.2.0-2-powerpc64-di
nic-wireless-modules-5.2.0-2-powerpc64le-di
nic-wireless-modules-5.2.0-2-riscv64-di
pata-modules-5.2.0-2-4kc-malta-di
pata-modules-5.2.0-2-5kc-malta-di
pata-modules-5.2.0-2-686-di
pata-modules-5.2.0-2-686-pae-di
pata-modules-5.2.0-2-alpha-generic-di
pata-modules-5.2.0-2-amd64-di
pata-modules-5.2.0-2-armmp-di
pata-modules-5.2.0-2-itanium-di
pata-modules-5.2.0-2-loongson-3-di
pata-modules-5.2.0-2-m68k-di
pata-modules-5.2.0-2-octeon-di
pata-modules-5.2.0-2-parisc-di
pata-modules-5.2.0-2-parisc64-di
pata-modules-5.2.0-2-powerpc-di
pata-modules-5.2.0-2-powerpc64-di
pata-modules-5.2.0-2-riscv64-di
pata-modules-5.2.0-2-sh7751r-di
pata-modules-5.2.0-2-sh7785lcr-di
pata-modules-5.2.0-2-sparc64-di
pcmcia-modules-5.2.0-2-686-di
pcmcia-modules-5.2.0-2-686-pae-di
pcmcia-modules-5.2.0-2-alpha-generic-di
pcmcia-modules-5.2.0-2-amd64-di
pcmcia-modules-5.2.0-2-itanium-di
pcmcia-modules-5.2.0-2-powerpc-di
pcmcia-modules-5.2.0-2-powerpc64-di
pcmcia-storage-modules-5.2.0-2-686-di
pcmcia-storage-modules-5.2.0-2-686-pae-di
pcmcia-storage-modules-5.2.0-2-amd64-di
pcmcia-storage-modules-5.2.0-2-powerpc-di
pcmcia-storage-modules-5.2.0-2-powerpc64-di
ppp-modules-5.2.0-2-4kc-malta-di
ppp-modules-5.2.0-2-5kc-malta-di
ppp-modules-5.2.0-2-686-di
ppp-modules-5.2.0-2-686-pae-di
ppp-modules-5.2.0-2-alpha-generic-di
ppp-modules-5.2.0-2-amd64-di
ppp-modules-5.2.0-2-arm64-di
ppp-modules-5.2.0-2-armmp-di
ppp-modules-5.2.0-2-itanium-di
ppp-modules-5.2.0-2-loongson-3-di
ppp-modules-5.2.0-2-m68k-di
ppp-modules-5.2.0-2-marvell-di
ppp-modules-5.2.0-2-octeon-di
ppp-modules-5.2.0-2-parisc-di
ppp-modules-5.2.0-2-parisc64-di
ppp-modules-5.2.0-2-powerpc-di
ppp-modules-5.2.0-2-powerpc64-di
ppp-modules-5.2.0-2-powerpc64le-di
ppp-modules-5.2.0-2-riscv64-di
ppp-modules-5.2.0-2-sh7751r-di
ppp-modules-5.2.0-2-sh7785lcr-di
ppp-modules-5.2.0-2-sparc64-di
rfkill-modules-5.2.0-2-686-di
rfkill-modules-5.2.0-2-686-pae-di
rfkill-modules-5.2.0-2-amd64-di
rtc-modules-5.2.0-2-octeon-di
sata-modules-5.2.0-2-4kc-malta-di
sata-modules-5.2.0-2-5kc-malta-di
sata-modules-5.2.0-2-686-di
sata-modules-5.2.0-2-686-pae-di
sata-modules-5.2.0-2-alpha-generic-di
sata-modules-5.2.0-2-amd64-di
sata-modules-5.2.0-2-arm64-di
sata-modules-5.2.0-2-armmp-di
sata-modules-5.2.0-2-itanium-di
sata-modules-5.2.0-2-loongson-3-di
sata-modules-5.2.0-2-marvell-di
sata-modules-5.2.0-2-octeon-di
sata-modules-5.2.0-2-parisc-di
sata-modules-5.2.0-2-parisc64-di
sata-modules-5.2.0-2-powerpc-di
sata-modules-5.2.0-2-powerpc64-di
sata-modules-5.2.0-2-powerpc64le-di
sata-modules-5.2.0-2-riscv64-di
sata-modules-5.2.0-2-sh7751r-di
sata-modules-5.2.0-2-sh7785lcr-di
sata-modules-5.2.0-2-sparc64-di
scsi-core-modules-5.2.0-2-4kc-malta-di
scsi-core-modules-5.2.0-2-5kc-malta-di
scsi-core-modules-5.2.0-2-686-di
scsi-core-modules-5.2.0-2-686-pae-di
scsi-core-modules-5.2.0-2-alpha-generic-di
scsi-core-modules-5.2.0-2-amd64-di
scsi-core-modules-5.2.0-2-arm64-di
scsi-core-modules-5.2.0-2-armmp-di
scsi-core-modules-5.2.0-2-itanium-di
scsi-core-modules-5.2.0-2-loongson-3-di
scsi-core-modules-5.2.0-2-m68k-di
scsi-core-modules-5.2.0-2-marvell-di
scsi-core-modules-5.2.0-2-octeon-di
scsi-core-modules-5.2.0-2-parisc-di
scsi-core-modules-5.2.0-2-parisc64-di
scsi-core-modules-5.2.0-2-powerpc-di
scsi-core-modules-5.2.0-2-powerpc64-di
scsi-core-modules-5.2.0-2-powerpc64le-di
scsi-core-modules-5.2.0-2-riscv64-di
scsi-core-modules-5.2.0-2-s390x-di
scsi-core-modules-5.2.0-2-sparc64-di
scsi-modules-5.2.0-2-4kc-malta-di
scsi-modules-5.2.0-2-5kc-malta-di
scsi-modules-5.2.0-2-686-di
scsi-modules-5.2.0-2-686-pae-di
scsi-modules-5.2.0-2-alpha-generic-di
scsi-modules-5.2.0-2-amd64-di
scsi-modules-5.2.0-2-arm64-di
scsi-modules-5.2.0-2-armmp-di
scsi-modules-5.2.0-2-itanium-di
scsi-modules-5.2.0-2-loongson-3-di
scsi-modules-5.2.0-2-m68k-di
scsi-modules-5.2.0-2-octeon-di
scsi-modules-5.2.0-2-parisc-di
scsi-modules-5.2.0-2-parisc64-di
scsi-modules-5.2.0-2-powerpc-di
scsi-modules-5.2.0-2-powerpc64-di
scsi-modules-5.2.0-2-powerpc64le-di
scsi-modules-5.2.0-2-riscv64-di
scsi-modules-5.2.0-2-s390x-di
scsi-modules-5.2.0-2-sparc64-di
scsi-nic-modules-5.2.0-2-4kc-malta-di
scsi-nic-modules-5.2.0-2-5kc-malta-di
scsi-nic-modules-5.2.0-2-686-di
scsi-nic-modules-5.2.0-2-686-pae-di
scsi-nic-modules-5.2.0-2-alpha-generic-di
scsi-nic-modules-5.2.0-2-amd64-di
scsi-nic-modules-5.2.0-2-arm64-di
scsi-nic-modules-5.2.0-2-armmp-di
scsi-nic-modules-5.2.0-2-itanium-di
scsi-nic-modules-5.2.0-2-loongson-3-di
scsi-nic-modules-5.2.0-2-octeon-di
scsi-nic-modules-5.2.0-2-powerpc-di
scsi-nic-modules-5.2.0-2-powerpc64-di
scsi-nic-modules-5.2.0-2-powerpc64le-di
scsi-nic-modules-5.2.0-2-riscv64-di
serial-modules-5.2.0-2-686-di
serial-modules-5.2.0-2-686-pae-di
serial-modules-5.2.0-2-alpha-generic-di
serial-modules-5.2.0-2-amd64-di
serial-modules-5.2.0-2-itanium-di
serial-modules-5.2.0-2-parisc-di
serial-modules-5.2.0-2-parisc64-di
serial-modules-5.2.0-2-powerpc-di
serial-modules-5.2.0-2-powerpc64-di
serial-modules-5.2.0-2-powerpc64le-di
sn-modules-5.2.0-2-itanium-di
sound-modules-5.2.0-2-4kc-malta-di
sound-modules-5.2.0-2-5kc-malta-di
sound-modules-5.2.0-2-686-di
sound-modules-5.2.0-2-686-pae-di
sound-modules-5.2.0-2-amd64-di
sound-modules-5.2.0-2-loongson-3-di
sound-modules-5.2.0-2-octeon-di
sound-modules-5.2.0-2-sh7751r-di
sound-modules-5.2.0-2-sh7785lcr-di
speakup-modules-5.2.0-2-686-di
speakup-modules-5.2.0-2-686-pae-di
speakup-modules-5.2.0-2-amd64-di
speakup-modules-5.2.0-2-loongson-3-di
speakup-modules-5.2.0-2-sh7751r-di
speakup-modules-5.2.0-2-sh7785lcr-di
squashfs-modules-5.2.0-2-4kc-malta-di
squashfs-modules-5.2.0-2-5kc-malta-di
squashfs-modules-5.2.0-2-686-di
squashfs-modules-5.2.0-2-686-pae-di
squashfs-modules-5.2.0-2-alpha-generic-di
squashfs-modules-5.2.0-2-amd64-di
squashfs-modules-5.2.0-2-arm64-di
squashfs-modules-5.2.0-2-armmp-di
squashfs-modules-5.2.0-2-itanium-di
squashfs-modules-5.2.0-2-loongson-3-di
squashfs-modules-5.2.0-2-m68k-di
squashfs-modules-5.2.0-2-marvell-di
squashfs-modules-5.2.0-2-mips32r6-di
squashfs-modules-5.2.0-2-mips32r6el-di
squashfs-modules-5.2.0-2-mips64r6-di
squashfs-modules-5.2.0-2-mips64r6el-di
squashfs-modules-5.2.0-2-octeon-di
squashfs-modules-5.2.0-2-parisc-di
squashfs-modules-5.2.0-2-parisc64-di
squashfs-modules-5.2.0-2-powerpc-di
squashfs-modules-5.2.0-2-powerpc64-di
squashfs-modules-5.2.0-2-powerpc64le-di
squashfs-modules-5.2.0-2-riscv64-di
squashfs-modules-5.2.0-2-sh7751r-di
squashfs-modules-5.2.0-2-sh7785lcr-di
squashfs-modules-5.2.0-2-sparc64-di
srm-modules-5.2.0-2-alpha-generic-di
udf-modules-5.2.0-2-4kc-malta-di
udf-modules-5.2.0-2-5kc-malta-di
udf-modules-5.2.0-2-686-di
udf-modules-5.2.0-2-686-pae-di
udf-modules-5.2.0-2-amd64-di
udf-modules-5.2.0-2-arm64-di
udf-modules-5.2.0-2-armmp-di
udf-modules-5.2.0-2-itanium-di
udf-modules-5.2.0-2-loongson-3-di
udf-modules-5.2.0-2-m68k-di
udf-modules-5.2.0-2-marvell-di
udf-modules-5.2.0-2-mips32r6-di
udf-modules-5.2.0-2-mips32r6el-di
udf-modules-5.2.0-2-mips64r6-di
udf-modules-5.2.0-2-mips64r6el-di
udf-modules-5.2.0-2-octeon-di
udf-modules-5.2.0-2-powerpc-di
udf-modules-5.2.0-2-powerpc64-di
udf-modules-5.2.0-2-powerpc64le-di
udf-modules-5.2.0-2-riscv64-di
udf-modules-5.2.0-2-s390x-di
udf-modules-5.2.0-2-sh7751r-di
udf-modules-5.2.0-2-sh7785lcr-di
udf-modules-5.2.0-2-sparc64-di
ufs-modules-5.2.0-2-sparc64-di
uinput-modules-5.2.0-2-686-di
uinput-modules-5.2.0-2-686-pae-di
uinput-modules-5.2.0-2-amd64-di
uinput-modules-5.2.0-2-arm64-di
uinput-modules-5.2.0-2-armmp-di
uinput-modules-5.2.0-2-itanium-di
uinput-modules-5.2.0-2-marvell-di
uinput-modules-5.2.0-2-powerpc-di
uinput-modules-5.2.0-2-powerpc64-di
uinput-modules-5.2.0-2-powerpc64le-di
usb-modules-5.2.0-2-4kc-malta-di
usb-modules-5.2.0-2-5kc-malta-di
usb-modules-5.2.0-2-686-di
usb-modules-5.2.0-2-686-pae-di
usb-modules-5.2.0-2-alpha-generic-di
usb-modules-5.2.0-2-amd64-di
usb-modules-5.2.0-2-arm64-di
usb-modules-5.2.0-2-armmp-di
usb-modules-5.2.0-2-itanium-di
usb-modules-5.2.0-2-loongson-3-di
usb-modules-5.2.0-2-marvell-di
usb-modules-5.2.0-2-octeon-di
usb-modules-5.2.0-2-parisc-di
usb-modules-5.2.0-2-parisc64-di
usb-modules-5.2.0-2-powerpc-di
usb-modules-5.2.0-2-powerpc64-di
usb-modules-5.2.0-2-powerpc64le-di
usb-modules-5.2.0-2-riscv64-di
usb-modules-5.2.0-2-sparc64-di
usb-serial-modules-5.2.0-2-4kc-malta-di
usb-serial-modules-5.2.0-2-5kc-malta-di
usb-serial-modules-5.2.0-2-686-di
usb-serial-modules-5.2.0-2-686-pae-di
usb-serial-modules-5.2.0-2-alpha-generic-di
usb-serial-modules-5.2.0-2-amd64-di
usb-serial-modules-5.2.0-2-arm64-di
usb-serial-modules-5.2.0-2-armmp-di
usb-serial-modules-5.2.0-2-itanium-di
usb-serial-modules-5.2.0-2-loongson-3-di
usb-serial-modules-5.2.0-2-marvell-di
usb-serial-modules-5.2.0-2-octeon-di
usb-serial-modules-5.2.0-2-parisc-di
usb-serial-modules-5.2.0-2-parisc64-di
usb-serial-modules-5.2.0-2-powerpc-di
usb-serial-modules-5.2.0-2-powerpc64-di
usb-serial-modules-5.2.0-2-powerpc64le-di
usb-serial-modules-5.2.0-2-riscv64-di
usb-serial-modules-5.2.0-2-sh7751r-di
usb-serial-modules-5.2.0-2-sh7785lcr-di
usb-serial-modules-5.2.0-2-sparc64-di
usb-storage-modules-5.2.0-2-4kc-malta-di
usb-storage-modules-5.2.0-2-5kc-malta-di
usb-storage-modules-5.2.0-2-686-di
usb-storage-modules-5.2.0-2-686-pae-di
usb-storage-modules-5.2.0-2-alpha-generic-di
usb-storage-modules-5.2.0-2-amd64-di
usb-storage-modules-5.2.0-2-arm64-di
usb-storage-modules-5.2.0-2-armmp-di
usb-storage-modules-5.2.0-2-itanium-di
usb-storage-modules-5.2.0-2-loongson-3-di
usb-storage-modules-5.2.0-2-marvell-di
usb-storage-modules-5.2.0-2-octeon-di
usb-storage-modules-5.2.0-2-parisc-di
usb-storage-modules-5.2.0-2-parisc64-di
usb-storage-modules-5.2.0-2-powerpc-di
usb-storage-modules-5.2.0-2-powerpc64-di
usb-storage-modules-5.2.0-2-powerpc64le-di
usb-storage-modules-5.2.0-2-riscv64-di
usb-storage-modules-5.2.0-2-sh7751r-di
usb-storage-modules-5.2.0-2-sparc64-di
usbip (4 bugs: 0, 4, 0, 0)
xfs-modules-5.2.0-2-4kc-malta-di
xfs-modules-5.2.0-2-5kc-malta-di
xfs-modules-5.2.0-2-686-di
xfs-modules-5.2.0-2-686-pae-di
xfs-modules-5.2.0-2-alpha-generic-di
xfs-modules-5.2.0-2-amd64-di
xfs-modules-5.2.0-2-arm64-di
xfs-modules-5.2.0-2-itanium-di
xfs-modules-5.2.0-2-loongson-3-di
xfs-modules-5.2.0-2-mips32r6-di
xfs-modules-5.2.0-2-mips32r6el-di
xfs-modules-5.2.0-2-mips64r6-di
xfs-modules-5.2.0-2-mips64r6el-di
xfs-modules-5.2.0-2-octeon-di
xfs-modules-5.2.0-2-parisc-di
xfs-modules-5.2.0-2-parisc64-di
xfs-modules-5.2.0-2-powerpc-di
xfs-modules-5.2.0-2-powerpc64-di
xfs-modules-5.2.0-2-powerpc64le-di
xfs-modules-5.2.0-2-s390x-di
xfs-modules-5.2.0-2-sh7751r-di
xfs-modules-5.2.0-2-sh7785lcr-di
xfs-modules-5.2.0-2-sparc64-di
zlib-modules-5.2.0-2-4kc-malta-di
zlib-modules-5.2.0-2-5kc-malta-di
zlib-modules-5.2.0-2-alpha-generic-di
zlib-modules-5.2.0-2-armmp-di
zlib-modules-5.2.0-2-loongson-3-di
zlib-modules-5.2.0-2-m68k-di
zlib-modules-5.2.0-2-marvell-di
zlib-modules-5.2.0-2-mips32r6-di
zlib-modules-5.2.0-2-mips32r6el-di
zlib-modules-5.2.0-2-mips64r6-di
zlib-modules-5.2.0-2-mips64r6el-di
zlib-modules-5.2.0-2-octeon-di
zlib-modules-5.2.0-2-parisc-di
zlib-modules-5.2.0-2-parisc64-di
zlib-modules-5.2.0-2-powerpc-di
zlib-modules-5.2.0-2-riscv64-di
zlib-modules-5.2.0-2-s390x-di
zlib-modules-5.2.0-2-sh7751r-di
zlib-modules-5.2.0-2-sh7785lcr-di
zlib-modules-5.2.0-2-sparc64-di

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0h 0m 19s
Last run: 2019-09-22 21:35:16
Previous status: pass

testing: pass (log)
The tests ran in 0h 1m 16s
Last run: 2019-09-23 05:39:59
Previous status: pass

stable: pass (log)
The tests ran in 0h 1m 27s
Last run: 2019-08-29 16:37:24
Previous status: pass

Created: 2019-09-23 Last update: 2019-09-23 16:32

A new upstream version is available: 5.3.1 high

A new upstream version 5.3.1 is available, you should consider packaging it.

Created: 2019-08-29 Last update: 2019-09-23 11:52

31 security issues in buster high

There are 31 open security issues in buster.

29 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-14821: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-15902: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-15504: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-14815:
CVE-2019-15918: An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
CVE-2019-15290: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c driver.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-14835: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.
CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVE-2019-15031: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.

2 issues skipped by the security teams:

CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.

Please fix them.

Created: 2017-06-18 Last update: 2019-09-22 07:00

28 security issues in bullseye high

There are 28 open security issues in bullseye.

28 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-15538: An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
CVE-2019-14821: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-15902: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-15504: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-14815:
CVE-2019-15290: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c driver.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-14835: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.
CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVE-2019-15031: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.

Please fix them.

Created: 2019-07-07 Last update: 2019-09-22 07:00

28 security issues in sid high

There are 28 open security issues in sid.

28 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-15538: An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
CVE-2019-14821: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-15902: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-15504: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-14815:
CVE-2019-15290: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c driver.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-14835: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.
CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVE-2019-15031: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.

Please fix them.

Created: 2015-07-12 Last update: 2019-09-22 07:00

85 security issues in jessie high

There are 85 open security issues in jessie.

54 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2016-10906: An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
CVE-2016-10905: An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.
CVE-2018-14613: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
CVE-2019-15926: An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.
CVE-2019-14821: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVE-2019-15218: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.
CVE-2019-15211: An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2017-5967: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2015-8839: Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-15215: An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.
CVE-2018-14610: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVE-2019-15292: An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.
TEMP-0000000-2B868D:
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15917: An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
CVE-2018-14611: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2018-21008: An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-14612: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVE-2017-13168: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
CVE-2019-13648: In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVE-2015-9289: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
CVE-2019-15290: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c driver.
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-0136: Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2016-10764: In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-15219: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.
CVE-2019-14835: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2019-15807: In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
CVE-2017-9725: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVE-2019-15212: An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-15221: An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.
CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.
CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVE-2019-15220: An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver.
CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

31 issues skipped by the security teams:

CVE-2018-10124: The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
CVE-2015-8553: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVE-2016-2854: The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
CVE-2016-2853: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
CVE-2018-13096: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2018-13099: An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
CVE-2014-9717: fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
CVE-2015-8952: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2016-3139: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
CVE-2018-18021: arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
CVE-2018-13100: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-1120: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVE-2018-14614: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2018-10087: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2017-10663: The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
CVE-2017-10662: The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
CVE-2018-20509: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
CVE-2017-18249: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-1000026: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
CVE-2018-13097: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).
CVE-2019-11487: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
CVE-2019-2054: In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVE-2017-5972: The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.

Please fix them.

Created: 2015-07-12 Last update: 2019-09-22 07:00

45 security issues in stretch high

There are 45 open security issues in stretch.

37 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2018-13094: An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2019-14821: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-15902: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15917: An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2018-21008: An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
CVE-2019-14815:
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2019-2182: In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-15290: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c driver.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2019-14835: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2018-13093: An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.
CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

8 issues skipped by the security teams:

CVE-2017-18232: The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-20449: The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2018-1108: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Please fix them.

Created: 2015-07-12 Last update: 2019-09-22 07:00

81 bugs tagged patch in the BTS normal

The BTS contains patches fixing 81 bugs (85 if counting merged bugs), consider including or untagging them.

Created: 2019-04-01 Last update: 2019-09-23 16:06

Depends on packages which need a new maintainer normal

The packages that linux depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2017-12-02 Last update: 2019-09-23 15:05

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-09-05 Last update: 2019-09-23 11:59

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 5.3-1~exp1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit ab7f724dbc8b942d3d8b0e85cceceb106be47fa7
Author: Romain Perier <romain.perier@gmail.com>
Date:   Fri Sep 20 23:14:30 2019 +0200

    Update to 5.3

commit 0f029f024ff42b18be59c6af085f791346969d87
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Tue Sep 10 11:09:36 2019 +0100

    Update to 5.3-rc8
    
    Drop a patch that went upstream.

commit e6621608d100941fb454bb80a662b0b6a1c6ca2f
Author: Uwe Kleine-König <uwe@kleine-koenig.org>
Date:   Fri Sep 6 17:36:13 2019 +0200

    [arm64] enable I2C_QCOM_GENI for Lenovo C630

commit d65997f5fe094f1064e0e7587d186f2cfe184369
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Wed Aug 28 13:40:35 2019 +0100

    Compile with gcc-9 on all architectures
    
    This is mostly s/\bgcc-8\b/gcc-9/g.  However, for x86, this removes
    the overriding dependency list because gcc-9 always had retpoline
    support.

commit 82a6cd715e40333385611c8a150838e4eaedfca2
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Mon Aug 26 00:45:20 2019 +0100

    Update to 5.3-rc6

commit 4aecd21ce7fe1c36063ef34a387b559d985f7c8a
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Sun Aug 25 19:28:26 2019 +0100

    [hppa,sparc64] udeb: Delete osst from scsi-modules (fixes FTBFS)

Created: 2019-08-25 Last update: 2019-09-20 22:46

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-08-22 Last update: 2019-08-22 01:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.2.0).

Created: 2017-12-02 Last update: 2019-08-21 18:45

testing migrations

This package will soon be part of the perl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2019-09-16] Accepted linux 4.19.67-2~bpo9+1 (all source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-09-02] Accepted linux 4.9.189-3 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2019-08-30] Accepted linux 4.9.189-2 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2019-08-28] Accepted linux 4.19.67-2 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-08-27] Accepted linux 5.2.9-2~bpo10+1 (all source) into buster-backports, buster-backports (Ben Hutchings)
[2019-08-26] Accepted linux 4.9.189-1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2019-08-26] linux 5.2.9-2 MIGRATED to testing (Debian testing watch)
[2019-08-25] Accepted linux 5.3~rc5-1~exp2 (source) into experimental (Ben Hutchings)
[2019-08-24] Accepted linux 5.3~rc5-1~exp1 (all source) into experimental, experimental (Ben Hutchings)
[2019-08-22] Accepted linux 4.19.67-1 (all source) into proposed-updates->stable-new, proposed-updates (Ben Hutchings)
[2019-08-21] Accepted linux 5.2.9-2 (source) into unstable (Ben Hutchings)
[2019-08-21] Accepted linux 4.19.37-5+deb10u2~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-08-19] Accepted linux 5.2.9-1 (source) into unstable (Ben Hutchings)
[2019-08-13] Accepted linux 3.16.72-1 (all source) into oldoldstable (Ben Hutchings)
[2019-08-13] Accepted linux 4.9.168-1+deb9u5 (source) into oldstable->embargoed, oldstable (Ben Hutchings)
[2019-08-12] Accepted linux 4.19.37-5+deb10u2 (source) into proposed-updates->stable-new, proposed-updates (Ben Hutchings)
[2019-08-10] Accepted linux 4.19.37-5+deb10u2 (source) into stable->embargoed, stable (Ben Hutchings)
[2019-08-08] Accepted linux 5.2.7-1 (all source) into unstable, unstable (Ben Hutchings)
[2019-08-06] Accepted linux 5.2.6-1 (all source) into unstable, unstable (Ben Hutchings)
[2019-07-25] Accepted linux 4.9.185-1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2019-07-25] Accepted linux 4.19.37-5+deb10u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-07-24] linux 4.19.37-6 MIGRATED to testing (Debian testing watch)
[2019-07-23] Accepted linux 3.16.70-1 (all source) into oldoldstable, oldoldstable (Ben Hutchings)
[2019-07-20] Accepted linux 4.19.37-5+deb10u1 (all source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-07-20] Accepted linux 4.9.168-1+deb9u4 (source) into oldstable->embargoed, oldstable (Salvatore Bonaccorso)
[2019-07-19] Accepted linux 4.19.37-6 (source) into unstable (Salvatore Bonaccorso)
[2019-07-16] Accepted linux 4.9.184-1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2019-06-23] linux 4.19.37-5 MIGRATED to testing (Debian testing watch)
[2019-06-21] Accepted linux 4.19.37-4~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-06-20] Accepted linux 4.19.37-5 (source) into unstable (Ben Hutchings)

bugs [bug history graph]

all: 2427 2517
RC: 12 14
I&N: 2248 2328
M&W: 160 168
F&P: 7
patch: 81 85

links

homepage
buildd: logs, exp, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.3.0-10.11
6887 bugs (278 patches)