4.8.17-200.fc24.gnu

5 files changed, 15 insertions, 80 deletions

diff --git a/freed-ora/current/f24/kernel.spec b/freed-ora/current/f24/kernel.spec
index e648dd139..589f1a266 100644
--- a/freed-ora/current/f24/kernel.spec
+++ b/freed-ora/current/f24/kernel.spec
@@ -92,7 +92,7 @@ Summary: The Linux kernel
 %if 0%{?released_kernel}
 
 # Do we have a -stable update to apply?
-%define stable_update 16
+%define stable_update 17
 # Set rpm version accordingly
 %if 0%{?stable_update}
 %define stablerev %{stable_update}
@@ -688,9 +688,6 @@ Patch855: 0001-platform-x86-ideapad-laptop-Add-Lenovo-Yoga-910-13IK.patch
 # CVE-2016-9755 rhbz 1400904 1400905
 Patch856: 0001-netfilter-ipv6-nf_defrag-drop-mangled-skb-on-ream-er.patch
 
-# CVE-2016-9588 rhbz 1404924 1404925
-Patch857: kvm-nVMX-allow-L1-to-intercept-software-exceptions.patch
-
 # END OF PATCH DEFINITIONS
 
 %endif
@@ -2316,6 +2313,12 @@ fi
 #
 # 
 %changelog
+* Mon Jan  9 2017 Alexandre Oliva <lxoliva@fsfla.org> -libre
+- GNU Linux-libre 4.8.17-gnu.
+
+* Mon Jan 09 2017 Justin M. Forbes <jforbes@fedoraproject.org> - 4.8.17-200
+- Linux v4.8.17
+
 * Fri Jan  6 2017 Alexandre Oliva <lxoliva@fsfla.org> -libre
 - GNU Linux-libre 4.8.16-gnu.
 
diff --git a/freed-ora/current/f24/kvm-nVMX-allow-L1-to-intercept-software-exceptions.patch b/freed-ora/current/f24/kvm-nVMX-allow-L1-to-intercept-software-exceptions.patch
deleted file mode 100644
index b408fc604..000000000
--- a/freed-ora/current/f24/kvm-nVMX-allow-L1-to-intercept-software-exceptions.patch
+++ /dev/null
@@ -1,68 +0,0 @@
-From:   Jim Mattson <jmattson@google.com>

-To:     kvm@vger.kernel.org

-Cc:     Jim Mattson <jmattson@google.com>

-Subject: [PATCH] kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)

-Date:   Wed, 14 Dec 2016 11:41:59 -0800

-

-When L2 exits to L0 due to "exception or NMI", software exceptions

-(#BP and #OF) for which L1 has requested an intercept should be

-handled by L1 rather than L0. Previously, only hardware exceptions

-were forwarded to L1.

-

-Signed-off-by: Jim Mattson <jmattson@google.com>

----

- arch/x86/kvm/vmx.c | 11 +++++------

- 1 file changed, 5 insertions(+), 6 deletions(-)

-

-diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c

-index 5382b82..64774f4 100644

---- a/arch/x86/kvm/vmx.c

-+++ b/arch/x86/kvm/vmx.c

-@@ -1343,10 +1343,10 @@ static inline bool nested_cpu_has_posted_intr(struct vmcs12 *vmcs12)

- 	return vmcs12->pin_based_vm_exec_control & PIN_BASED_POSTED_INTR;

- }

- 

--static inline bool is_exception(u32 intr_info)

-+static inline bool is_nmi(u32 intr_info)

- {

- 	return (intr_info & (INTR_INFO_INTR_TYPE_MASK | INTR_INFO_VALID_MASK))

--		== (INTR_TYPE_HARD_EXCEPTION | INTR_INFO_VALID_MASK);

-+		== (INTR_TYPE_NMI_INTR | INTR_INFO_VALID_MASK);

- }

- 

- static void nested_vmx_vmexit(struct kvm_vcpu *vcpu, u32 exit_reason,

-@@ -5476,7 +5476,7 @@ static int handle_exception(struct kvm_vcpu *vcpu)

- 	if (is_machine_check(intr_info))

- 		return handle_machine_check(vcpu);

- 

--	if ((intr_info & INTR_INFO_INTR_TYPE_MASK) == INTR_TYPE_NMI_INTR)

-+	if (is_nmi(intr_info))

- 		return 1;  /* already handled by vmx_vcpu_run() */

- 

- 	if (is_no_device(intr_info)) {

-@@ -8018,7 +8018,7 @@ static bool nested_vmx_exit_handled(struct kvm_vcpu *vcpu)

- 

- 	switch (exit_reason) {

- 	case EXIT_REASON_EXCEPTION_NMI:

--		if (!is_exception(intr_info))

-+		if (is_nmi(intr_info))

- 			return false;

- 		else if (is_page_fault(intr_info))

- 			return enable_ept;

-@@ -8611,8 +8611,7 @@ static void vmx_complete_atomic_exit(struct vcpu_vmx *vmx)

- 		kvm_machine_check();

- 

- 	/* We need to handle NMIs before interrupts are enabled */

--	if ((exit_intr_info & INTR_INFO_INTR_TYPE_MASK) == INTR_TYPE_NMI_INTR &&

--	    (exit_intr_info & INTR_INFO_VALID_MASK)) {

-+	if (is_nmi(exit_intr_info)) {

- 		kvm_before_handle_nmi(&vmx->vcpu);

- 		asm("int $2");

- 		kvm_after_handle_nmi(&vmx->vcpu);

--- 

-2.8.0.rc3.226.g39d4020

-

---

-To unsubscribe from this list: send the line "unsubscribe kvm" in

-the body of a message to majordomo@vger.kernel.org

-More majordomo info at  http://vger.kernel.org/majordomo-info.html

diff --git a/freed-ora/current/f24/patch-4.8-gnu-4.8.16-gnu.xz.sign b/freed-ora/current/f24/patch-4.8-gnu-4.8.16-gnu.xz.sign
deleted file mode 100644
index eb6aa6d18..000000000
--- a/freed-ora/current/f24/patch-4.8-gnu-4.8.16-gnu.xz.sign
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2
-
-iEYEABECAAYFAlhwTF8ACgkQvLfPh359R6cnTACfTb2DmcdQAb9pr6Ndc8SLgBmE
-8V8An09RTFN5kECTzmh4HXAQpCvXblNn
-=abcL
------END PGP SIGNATURE-----
diff --git a/freed-ora/current/f24/patch-4.8-gnu-4.8.17-gnu.xz.sign b/freed-ora/current/f24/patch-4.8-gnu-4.8.17-gnu.xz.sign
new file mode 100644
index 000000000..44d9a5fec
--- /dev/null
+++ b/freed-ora/current/f24/patch-4.8-gnu-4.8.17-gnu.xz.sign
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlh0K68ACgkQvLfPh359R6fiTACfQp1y5x7WK92SXTJ9nNvSh1Nk
+XMMAn0ydZNv9LOy5inQ3OQ5LNQOR0KT0
+=3hY6
+-----END PGP SIGNATURE-----
diff --git a/freed-ora/current/f24/sources b/freed-ora/current/f24/sources
index d85863bab..346218eae 100644
--- a/freed-ora/current/f24/sources
+++ b/freed-ora/current/f24/sources
@@ -1,3 +1,3 @@
 SHA512 (linux-libre-4.8-gnu.tar.xz) = 728da6c27bd73a41866d37c82bfdc350a3bff59e15291e80a94af9e0b7b4401ea161da4c2ec4d8fc25d30c35becd85624ac32d068afff4c12ee7790c5649da2d
 SHA512 (perf-man-4.8.tar.gz) = 1e9707f1e11808178c1953d4f46e1789a138e9aca7bec89af7a6e209cd91e5301bc582db72cf889baa31dcba8cd3d3b1ceb4e8999ac1544ef17d513e861f2b59
-SHA512 (patch-4.8-gnu-4.8.16-gnu.xz) = 81f533bee632a30518376f8b27ed4a2c55c2e1bf4858a2bcdd80618697ebade64e76dedec4fcae273e9fa5ace341b0286544042d64fbb79c1a625e9ee6531e47
+SHA512 (patch-4.8-gnu-4.8.17-gnu.xz) = e8e52f5a4ea0a8c78cf9704963710962cfc33e764f3de14359591d5ed656b42212ccd83a20923e3c755375c040e155520aad01d41adebface831b5decc62c08e