Bug #1380025 “linux could use CONFIG_CC_STACKPROTECTOR_STRONG in...” : Bugs : linux package : Ubuntu

Revision history for this message

Laurent Bonnaud (laurent-bonnaud) wrote on 2014-10-11:

#1

AlsaInfo.txt Edit (36.0 KiB, text/plain; charset="utf-8")
BootDmesg.txt Edit (68.1 KiB, text/plain; charset="utf-8")
CRDA.txt Edit (203 bytes, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (2.4 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (2.8 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (10.5 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (444 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.6 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (341 bytes, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.3 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (4.1 KiB, text/plain; charset="utf-8")
PulseList.txt Edit (23.4 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (128.4 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (304.2 KiB, text/plain; charset="utf-8")
WifiSyslog.txt Edit (114.2 KiB, text/plain; charset="utf-8")

Revision history for this message

Brad Figg (brad-figg) wrote on 2014-10-11: Status changed to Confirmed

#2

This change was made by a bot.

Changed in linux (Ubuntu):
status:	New → Confirmed

Joseph Salisbury (jsalisbury) on 2014-10-13

Changed in linux (Ubuntu):
importance:	Undecided → Medium
status:	Confirmed → Triaged

Revision history for this message

Laurent Bonnaud (laurent-bonnaud) wrote on 2015-10-02:

#3

This "bug" is still there is wily:

$ grep STACKPROTECTOR /boot/config-4.2.0-13-generic
CONFIG_HAVE_CC_STACKPROTECTOR=y
CONFIG_CC_STACKPROTECTOR=y
# CONFIG_CC_STACKPROTECTOR_NONE is not set
CONFIG_CC_STACKPROTECTOR_REGULAR=y
# CONFIG_CC_STACKPROTECTOR_STRONG is not set

Tim Gardner (timg-tpi) on 2015-10-02

Changed in linux (Ubuntu Wily):
assignee:	nobody → Tim Gardner (timg-tpi)
status:	Triaged → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-10-09:

#4

Download full text (5.2 KiB)

This bug was fixed in the package linux - 4.2.0-15.18

---------------
linux (4.2.0-15.18) wily; urgency=low

[ Tim Gardner ]

* Release Tracking Bug
- LP: #1503692

[ Andy Whitcroft ]

* Revert "SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()"
Was incorrectly backported.

[ Ben Hutchings ]

* SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
- CVE-2015-7312

[ Tim Gardner ]

* [Debian] config-check and prepare using ${DEBIAN}/config/annotations
Makes the LTS update script work better.

linux (4.2.0-15.17) wily; urgency=low

[ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1503016
  * rebase to v4.2.3

[ Andrew Donnellan ]

  * SAUCE: cxl: fix leak of IRQ names in cxl_free_afu_irqs()
  * SAUCE: cxl: fix leak of ctx->irq_bitmap when releasing context via
    kernel API
  * SAUCE: cxl: fix leak of ctx->mapping when releasing kernel API contexts

[ Ben Hutchings ]

* SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
- CVE-2015-7312

[ Dan Carpenter ]

* SAUCE: (noup) cxlflash: a couple off by one bugs
- LP: #1499849

[ John Johansen ]

* SAUCE: (no-up) apparmor: fix mount not handling disconnected paths
- LP: #1496430

[ Manoj Kumar ]

  * SAUCE: (noup) cxlflash: Fix to avoid invalid port_sel value
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Replace magic numbers with literals
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix read capacity timeout
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to double the delay each time
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to escalate to LINK_RESET on login timeout
    - LP: #1499849

[ Matthew R. Ochs ]

  * SAUCE: (noup) cxlflash: Fix potential oops following LUN removal
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix data corruption when vLUN used over
    multiple cards
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid sizeof(bool)
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix context encode mask width
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid CXL services during EEH
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct naming of limbo state and waitq
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Make functions static
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Refine host/device attributes
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid spamming the kernel log
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid stall while waiting on TMF
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix location of setting resid
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix host link up event handling
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix async interrupt bypass logic
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Remove dual port online dependency
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix AFU version access/storage and add check
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct usage of scsi_host_put()
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to prevent workq from accessing freed
    memory
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct behavior in device reset handler
    ...

This bug was fixed in the package linux - 4.2.0-15.18

---------------
linux (4.2.0-15.18) wily; urgency=low

[ Tim Gardner ]

* Release Tracking Bug
    - LP: #1503692

[ Andy Whitcroft ]

* Revert "SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()"
    Was incorrectly backported.

[ Ben Hutchings ]

* SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - CVE-2015-7312

[ Tim Gardner ]

* [Debian] config-check and prepare using ${DEBIAN}/config/annotations
    Makes the LTS update script work better.

linux (4.2.0-15.17) wily; urgency=low

[ Tim Gardner ]

* Release Tracking Bug
    - LP: #1503016
  * rebase to v4.2.3

[ Andrew Donnellan ]

* SAUCE: cxl: fix leak of IRQ names in cxl_free_afu_irqs()
  * SAUCE: cxl: fix leak of ctx->irq_bitmap when releasing context via
    kernel API
  * SAUCE: cxl: fix leak of ctx->mapping when releasing kernel API contexts

[ Ben Hutchings ]

* SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - CVE-2015-7312

[ Dan Carpenter ]

* SAUCE: (noup) cxlflash: a couple off by one bugs
    - LP: #1499849

[ John Johansen ]

* SAUCE: (no-up) apparmor: fix mount not handling disconnected paths
    - LP: #1496430

[ Manoj Kumar ]

* SAUCE: (noup) cxlflash: Fix to avoid invalid port_sel value
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Replace magic numbers with literals
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix read capacity timeout
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to double the delay each time
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to escalate to LINK_RESET on login timeout
    - LP: #1499849

[ Matthew R. Ochs ]

* SAUCE: (noup) cxlflash: Fix potential oops following LUN removal
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix data corruption when vLUN used over
    multiple cards
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid sizeof(bool)
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix context encode mask width
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid CXL services during EEH
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct naming of limbo state and waitq
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Make functions static
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Refine host/device attributes
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid spamming the kernel log
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid stall while waiting on TMF
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix location of setting resid
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix host link up event handling
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix async interrupt bypass logic
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Remove dual port online dependency
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix AFU version access/storage and add check
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct usage of scsi_host_put()
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to prevent workq from accessing freed
    memory
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct behavior in device reset handler
    following EEH
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Remove unnecessary scsi_block_requests
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix function prolog parameters and return codes
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix MMIO and endianness errors
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to prevent EEH recovery failure
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct spelling, grammar, and alignment
    mistakes
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to prevent stale AFU RRQ
    - LP: #1499849
  * SAUCE: (noup) MAINTAINERS: Add cxlflash driver
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid corrupting adapter fops
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Correct trace string
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid potential deadlock on EEH
    - LP: #1499849
  * SAUCE: (noup) cxlflash: Fix to avoid leaving dangling interrupt
    resources
    - LP: #1499849

[ Philippe Bergheaud ]

* SAUCE: cxl: Workaround malformed pcie packets on some cards

[ Tim Gardner ]

* [Config] CONFIG_CC_STACKPROTECTOR_STRONG=y
    - LP: #1380025
  * [Config] Add MMC modules sufficient for net booting
    - LP: #1502772

[ Upstream Kernel Changes ]

* Initialize msg/shm IPC objects before doing ipc_addid()
  * RDS: verify the underlying transport exists before creating a
    connection
  * cxl: abort cxl_pci_enable_device_hook() if PCI channel is offline
  * cxl: Fix build failure due to -Wunused-variable behaviour change
  * cxl: Fix lockdep warning while creating afu_err_buff attribute
  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - CVE-2015-2925
  * hv_netvsc: Add support to set MTU reservation from guest side
    - LP: #1494431
  * hv_netvsc: Add close of RNDIS filter into change mtu call
    - LP: #1494431

-- Tim Gardner <tim.gardner@canonical.com>  Wed, 07 Oct 2015 07:28:10 -0600

Changed in linux (Ubuntu Wily):
status:	Fix Committed → Fix Released

Revision history for this message

Laurent Bonnaud (laurent-bonnaud) wrote on 2015-10-09:

#5

Thank you for the "fix"!

How about enabling CONFIG_CC_STACKPROTECTOR_STRONG also for mainline builds ?

Revision history for this message

Tim Gardner (timg-tpi) wrote on 2015-10-09:

#6

Mainline builds use a Trusty chroot, and therefore gcc 4.8. CONFIG_CC_STACKPROTECTOR_STRONG requires gcc 4.9+

Ubuntu
linux package

linux could use CONFIG_CC_STACKPROTECTOR_STRONG instead of CONFIG_CC_STACKPROTECTOR_REGULAR

Bug Description

CVE References

Other bug subscribers

Bug attachments

Remote bug watches

Affects		Status	Importance	Assigned to	Milestone
	linux (Ubuntu)	Fix Released	Medium	Tim Gardner
	Wily	Fix Released	Medium	Tim Gardner

Ubuntulinux package

linux could use CONFIG_CC_STACKPROTECTOR_STRONG instead of CONFIG_CC_STACKPROTECTOR_REGULAR

Bug Description

CVE References

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
linux package