APPLIED: [lucid/fsl-imx51][pull request] CVE fixes

[Tim Gardner]

On 06/22/2011 08:06 AM, Paolo Pisati wrote:
> The following changes since commit ad43db5a592e927faed31f7b44cf099d7944b498:
>
>    can: Add missing socket check in can/bcm release. (2011-06-14 09:20:49
> +0100)
>
> are available in the git repository at:
>    git://kernel.ubuntu.com/ubuntu/ubuntu-lucid.git ..BRANCH.NOT.VERIFIED..
>
> Alan Cox (2):
>        tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
>        bluetooth: Fix missing NULL check CVE-2010-4242
>
> Dan Carpenter (1):
>        IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4649
>
> Dan Rosenberg (1):
>        rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
>
> David S. Miller (1):
>        filter: make sure filters dont read uninitialized memory CVE-2010-4158
>
> Jens Axboe (1):
>        bio: take care not overflow page count when mapping/copying user
> data CVE-2010-4162
>
> Paolo Pisati (1):
>        UBUNTU: Start new release
>
> Xiaotian Feng (1):
>        block: check for proper length of iov entries earlier in
> blk_rq_map_user_iov(), CVE-2010-4163
>
>   block/blk-map.c                                    |    3 +
>   debian.fsl-imx51/abi/2.6.31-608.25/abiname         |    1 -
>   .../abi/2.6.31-608.25/armel/ignore.modules         |    1 -
>   debian.fsl-imx51/abi/2.6.31-609.26/abiname         |    1 +
>   .../{2.6.31-608.25 =>  2.6.31-609.26}/armel/imx51   | 2991
> ++++++++++----------
>   .../armel/imx51.modules                            |   26 -
>   debian.fsl-imx51/changelog                         |    8 +
>   drivers/bluetooth/hci_ldisc.c                      |    7 +
>   drivers/char/tty_io.c                              |   21 +
>   drivers/infiniband/core/uverbs_cmd.c               |  101 +-
>   drivers/serial/serial_core.c                       |   37 +-
>   drivers/usb/serial/usb-serial.c                    |   13 +
>   fs/bio.c                                           |   14 +-
>   include/linux/tty_driver.h                         |    9 +
>   include/linux/usb/serial.h                         |    2 +
>   net/core/filter.c                                  |   64 +-
>   net/rds/rdma.c                                     |   24 +-
>   17 files changed, 1690 insertions(+), 1633 deletions(-)
>   delete mode 100644 debian.fsl-imx51/abi/2.6.31-608.25/abiname
>   delete mode 100644 debian.fsl-imx51/abi/2.6.31-608.25/armel/ignore.modules
>   create mode 100644 debian.fsl-imx51/abi/2.6.31-609.26/abiname
>   rename debian.fsl-imx51/abi/{2.6.31-608.25 =>
> 2.6.31-609.26}/armel/imx51 (81%)
>   rename debian.fsl-imx51/abi/{2.6.31-608.25 =>
> 2.6.31-609.26}/armel/imx51.modules (99%)
>
> All commits cherry-picked from lucid/master, upstream sha, buglink
> pointing to the real lp bug and kteam ack included.


-- 
Tim Gardner tim.gardner at canonical.com