[ubuntu/lucid-security] linux-lts-backport-oneiric 3.0.0-29.46~lucid1 (Accepted)
Adam Conrad
adconrad at 0c3.net
Wed Dec 19 16:41:31 UTC 2012
linux-lts-backport-oneiric (3.0.0-29.46~lucid1) lucid-proposed; urgency=low
[Luis Henriques]
* Release Tracking Bug
- LP: #1086597
[ Upstream Kernel Changes ]
* ath9k: fix stale pointers potentially causing access to free'd skbs
- LP: #1081645
* rt2800: validate step value for temperature compensation
- LP: #1081645
* target: Don't return success from module_init() if setup fails
- LP: #1081645
* cfg80211: fix antenna gain handling
- LP: #1081645
* wireless: drop invalid mesh address extension frames
- LP: #1081645
* mac80211: don't inspect Sequence Control field on control frames
- LP: #1081645
* DRM/Radeon: Fix Load Detection on legacy primary DAC.
- LP: #1081645
* mac80211: check management frame header length
- LP: #1081645
* mac80211: fix SSID copy on IBSS JOIN
- LP: #1081645
* nfsv3: Make v3 mounts fail with ETIMEDOUTs instead EIO on mountd
timeouts
- LP: #1081645
* nfs: Show original device name verbatim in /proc/*/mount{s,info}
- LP: #1081645
* NFSv4: nfs4_locku_done must release the sequence id
- LP: #1081645
* nfsd: add get_uint for u32's
- LP: #1081645
* NFS: fix bug in legacy DNS resolver.
- LP: #1081645
* NFS: Fix Oopses in nfs_lookup_revalidate and nfs4_lookup_revalidate
- LP: #1081645
* drm: restore open_count if drm_setup fails
- LP: #1081645
* hwmon: (w83627ehf) Force initial bank selection
- LP: #1081645
* ALSA: PCM: Fix some races at disconnection
- LP: #1081645
* ALSA: usb-audio: Fix races at disconnection
- LP: #1081645
* ALSA: usb-audio: Use rwsem for disconnect protection
- LP: #1081645
* ALSA: usb-audio: Fix races at disconnection in mixer_quirks.c
- LP: #1081645
* ALSA: Add a reference counter to card instance
- LP: #1081645
* ALSA: Avoid endless sleep after disconnect
- LP: #1081645
* sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()
- LP: #1081645
* netlink: use kfree_rcu() in netlink_release()
- LP: #1081645
* tcp: fix FIONREAD/SIOCINQ
- LP: #1081645
* ipv6: Set default hoplimit as zero.
- LP: #1081645
* net: usb: Fix memory leak on Tx data path
- LP: #1081645
* l2tp: fix oops in l2tp_eth_create() error path
- LP: #1081645
* ipv6: send unsolicited neighbour advertisements to all-nodes
- LP: #1081645
* futex: Handle futex_pi OWNER_DIED take over correctly
- LP: #1081645
* drm/vmwgfx: Fix hibernation device reset
- LP: #1081645
* drm/i915: fixup infoframe support for sdvo
- LP: #1081645
* drm/i915: clear the entire sdvo infoframe buffer
- LP: #1081645
* USB: mos7840: remove unused variable
- LP: #1081645
* xfs: fix reading of wrapped log data
- LP: #1081645
* intel-iommu: Fix AB-BA lockdep report
- LP: #1081645
* ALSA: Fix card refcount unbalance
- LP: #1081645
* ALSA: usb-audio: Fix mutex deadlock at disconnection
- LP: #1081645
* Linux 3.0.52
- LP: #1081645
* mm: bugfix: set current->reclaim_state to NULL while returning from
kswapd()
- LP: #1083318
* fanotify: fix missing break
- LP: #1083318
* crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
data corruption
- LP: #1083318
* ALSA: hda: Cirrus: Fix coefficient index for beep configuration
- LP: #1083318
* ALSA: hda - Force to reset IEC958 status bits for AD codecs
- LP: #1083318, #359361
* ASoC: wm8978: pll incorrectly configured when codec is master
- LP: #1083318
* ASoC: dapm: Use card_list during DAPM shutdown
- LP: #1083318
* UBIFS: fix mounting problems after power cuts
- LP: #1083318
* UBIFS: introduce categorized lprops counter
- LP: #1083318
* s390/gup: add missing TASK_SIZE check to get_user_pages_fast()
- LP: #1083318
* USB: option: add Novatel E362 and Dell Wireless 5800 USB IDs
- LP: #1083318
* USB: option: add Alcatel X220/X500D USB IDs
- LP: #1083318
* wireless: allow 40 MHz on world roaming channels 12/13
- LP: #1083318
* m68k: fix sigset_t accessor functions
- LP: #1083318
* ipv4: avoid undefined behavior in do_ip_setsockopt()
- LP: #1083318
* ipv6: setsockopt(IPIPPROTO_IPV6, IPV6_MINHOPCOUNT) forgot to set return
value
- LP: #1083318
* net: correct check in dev_addr_del()
- LP: #1083318
* net-rps: Fix brokeness causing OOO packets
- LP: #1083318
* r8169: use unlimited DMA burst for TX
- LP: #1083318
* kbuild: Fix gcc -x syntax
- LP: #1083318
* netfilter: Validate the sequence number of dataless ACK packets as well
- LP: #1083318
* netfilter: Mark SYN/ACK packets as invalid from original direction
- LP: #1083318
* netfilter: nf_nat: don't check for port change on ICMP tuples
- LP: #1083318
* usb: use usb_serial_put in usb_serial_probe errors
- LP: #1083318
* sky2: Fix for interrupt handler
- LP: #1083318
* drm/i915: fix overlay on i830M
- LP: #1083318
* NFS: Wait for session recovery to finish before returning
- LP: #1083318
* reiserfs: Fix lock ordering during remount
- LP: #1083318
* reiserfs: Protect reiserfs_quota_on() with write lock
- LP: #1083318
* reiserfs: Move quota calls out of write lock
- LP: #1083318
* reiserfs: Protect reiserfs_quota_write() with write lock
- LP: #1083318
* selinux: fix sel_netnode_insert() suspicious rcu dereference
- LP: #1083318
* PCI : ability to relocate assigned pci-resources
- LP: #1083318
* PCI : Calculate right add_size
- LP: #1083318
* Resource: fix wrong resource window calculation
- LP: #1083318
* Linux 3.0.53
- LP: #1083318
* mm/hotplug: correctly add new zone to all other nodes' zone lists
- LP: #1079860
- CVE-2012-5517
* Bluetooth: ath3k: Add support for VAIO VPCEH [0489:e027]
- LP: #898826
linux (3.0.0-28.45) oneiric-proposed; urgency=low
[Luis Henriques]
* Release Tracking Bug
- LP: #1078663
[ Tim Gardner ]
* [Config] updateconfigs for stable updates
[ Upstream Kernel Changes ]
* Revert "SUNRPC: Ensure we close the socket on EPIPE errors too..."
- LP: #1075332
* mn10300: only add -mmem-funcs to KBUILD_CFLAGS if gcc supports it
- LP: #1067857
* kbuild: make: fix if_changed when command contains backslashes
- LP: #1067857
* media: rc: ite-cir: Initialise ite_dev::rdev earlier
- LP: #1067857
* ACPI: run _OSC after ACPI_FULL_INITIALIZATION
- LP: #1067857
* PCI: acpiphp: check whether _ADR evaluation succeeded
- LP: #1067857
* lib/gcd.c: prevent possible div by 0
- LP: #1067857
* kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()
- LP: #1067857
* drivers/scsi/atp870u.c: fix bad use of udelay
- LP: #1067857
* workqueue: add missing smp_wmb() in process_one_work()
- LP: #1067857
* xfrm: Workaround incompatibility of ESN and async crypto
- LP: #1067857
* xfrm_user: return error pointer instead of NULL
- LP: #1067857
* xfrm_user: return error pointer instead of NULL #2
- LP: #1067857
* xfrm: fix a read lock imbalance in make_blackhole
- LP: #1067857
* xfrm_user: fix info leak in copy_to_user_auth()
- LP: #1067857
* xfrm_user: fix info leak in copy_to_user_state()
- LP: #1067857
* xfrm_user: fix info leak in copy_to_user_policy()
- LP: #1067857
* xfrm_user: fix info leak in copy_to_user_tmpl()
- LP: #1067857
* xfrm_user: don't copy esn replay window twice for new states
- LP: #1067857
* xfrm_user: ensure user supplied esn replay window is valid
- LP: #1067857
* net: ethernet: davinci_cpdma: decrease the desc count when cleaning up
the remaining packets
- LP: #1067857
* ixp4xx_hss: fix build failure due to missing linux/module.h inclusion
- LP: #1067857
* netxen: check for root bus in netxen_mask_aer_correctable
- LP: #1067857
* net-sched: sch_cbq: avoid infinite loop
- LP: #1067857
* pkt_sched: fix virtual-start-time update in QFQ
- LP: #1067857
* sierra_net: Endianess bug fix.
- LP: #1067857
* 8021q: fix mac_len recomputation in vlan_untag()
- LP: #1067857
* ipv6: release reference of ip6_null_entry's dst entry in __ip6_del_rt
- LP: #1067857
* tcp: flush DMA queue before sk_wait_data if rcv_wnd is zero
- LP: #1067857
* sctp: Don't charge for data in sndbuf again when transmitting packet
- LP: #1067857
* pppoe: drop PPPOX_ZOMBIEs in pppoe_release
- LP: #1067857
* net: small bug on rxhash calculation
- LP: #1067857
* net: guard tcp_set_keepalive() to tcp sockets
- LP: #1067857
* ipv4: raw: fix icmp_filter()
- LP: #1067857
* ipv6: raw: fix icmpv6_filter()
- LP: #1067857
* ipv6: mip6: fix mip6_mh_filter()
- LP: #1067857
* l2tp: fix a typo in l2tp_eth_dev_recv()
- LP: #1067857
* netrom: copy_datagram_iovec can fail
- LP: #1067857
* net: do not disable sg for packets requiring no checksum
- LP: #1067857
* aoe: assert AoE packets marked as requiring no checksum
- LP: #1067857
* tg3: Fix TSO CAP for 5704 devs w / ASF enabled
- LP: #1067857
* SCSI: zfcp: Make trace record tags unique
- LP: #1067857
* SCSI: zfcp: Do not wakeup while suspended
- LP: #1067857
* SCSI: zfcp: remove invalid reference to list iterator variable
- LP: #1067857
* SCSI: zfcp: restore refcount check on port_remove
- LP: #1067857
* SCSI: zfcp: only access zfcp_scsi_dev for valid scsi_device
- LP: #1067857
* PCI: Check P2P bridge for invalid secondary/subordinate range
- LP: #1067857
* ext4: online defrag is not supported for journaled files
- LP: #1067857
* ext4: always set i_op in ext4_mknod()
- LP: #1067857
* ext4: fix fdatasync() for files with only i_size changes
- LP: #1067857
* ASoC: wm9712: Fix name of Capture Switch
- LP: #1067857
* mm: fix invalidate_complete_page2() lock ordering
- LP: #1067857
* mm: thp: fix pmd_present for split_huge_page and PROT_NONE with THP
- LP: #1067857
* ALSA: aloop - add locking to timer access
- LP: #1067857
* ALSA: usb - disable broken hw volume for Tenx TP6911
- LP: #1067857, #559939
* ALSA: USB: Support for (original) Xbox Communicator
- LP: #1067857
* drm/radeon: only adjust default clocks on NI GPUs
- LP: #1067857
* drm/radeon: Add MSI quirk for gateway RS690
- LP: #1067857
* drm/radeon: force MSIs on RS690 asics
- LP: #1067857
* rcu: Fix day-one dyntick-idle stall-warning bug
- LP: #1067857
* r8169: fix wake on lan setting for non-8111E.
- LP: #1067857
* r8169: don't enable rx when shutdown.
- LP: #1067857
* r8169: remove erroneous processing of always set bit.
- LP: #1067857
* r8169: jumbo fixes.
- LP: #1067857
* r8169: expand received packet length indication.
- LP: #1067857
* r8169: increase the delay parameter of pm_schedule_suspend
- LP: #1067857
* r8169: Rx FIFO overflow fixes.
- LP: #1067857
* r8169: fix Config2 MSIEnable bit setting.
- LP: #1067857
* r8169: missing barriers.
- LP: #1067857
* r8169: runtime resume before shutdown.
- LP: #1067857
* r8169: Config1 is read-only on 8168c and later.
- LP: #1067857
* r8169: 8168c and later require bit 0x20 to be set in Config2 for PME
signaling.
- LP: #1067857
* r8169: fix unsigned int wraparound with TSO
- LP: #1067857
* r8169: call netif_napi_del at errpaths and at driver unload
- LP: #1067857
* revert "mm: mempolicy: Let vma_merge and vma_split handle
vma->vm_policy linkages"
- LP: #1067857
* mempolicy: remove mempolicy sharing
- LP: #1067857
* mempolicy: fix a race in shared_policy_replace()
- LP: #1067857
* mempolicy: fix refcount leak in mpol_set_shared_policy()
- LP: #1067857
* mempolicy: fix a memory corruption by refcount imbalance in
alloc_pages_vma()
- LP: #1067857
* CPU hotplug, cpusets, suspend: Don't modify cpusets during
suspend/resume
- LP: #1067857
* mtd: autcpu12-nvram: Fix compile breakage
- LP: #1067857
* mtd: nandsim: bugfix: fail if overridesize is too big
- LP: #1067857
* mtd: nand: Use the mirror BBT descriptor when reading its version
- LP: #1067857
* mtd: omap2: fix omap_nand_remove segfault
- LP: #1067857
* mtd: omap2: fix module loading
- LP: #1067857
* Linux 3.0.46
- LP: #1067857
* eCryptfs: check for eCryptfs cipher support at mount
- LP: #338914
* ARM: vfp: fix saving d16-d31 vfp registers on v6+ kernels
- LP: #1069914
* lockd: use rpc client's cl_nodename for id encoding
- LP: #1069914
* ACPI: EC: Make the GPE storm threshold a module parameter
- LP: #1069914
* ACPI: EC: Add a quirk for CLEVO M720T/M730T laptop
- LP: #1069914
* mips,kgdb: fix recursive page fault with CONFIG_KPROBES
- LP: #1069914
* tmpfs,ceph,gfs2,isofs,reiserfs,xfs: fix fh_len checking
- LP: #1069914
* ARM: 7541/1: Add ARM ERRATA 775420 workaround
- LP: #1069914
* firewire: cdev: fix user memory corruption (i386 userland on amd64
kernel)
- LP: #1069914
* SUNRPC: Ensure that the TCP socket is closed when in CLOSE_WAIT
- LP: #1069914
* xen/bootup: allow {read|write}_cr8 pvops call.
- LP: #1069914
* xen/bootup: allow read_tscp call for Xen PV guests.
- LP: #1069914
* autofs4 - fix reset pending flag on mount fail
- LP: #1069914
* module: taint kernel when lve module is loaded
- LP: #1069914
* video/udlfb: fix line counting in fb_write
- LP: #1069914
* viafb: don't touch clock state on OLPC XO-1.5
- LP: #1069914
* timers: Fix endless looping between cascade() and internal_add_timer()
- LP: #1069914
* pktgen: fix crash when generating IPv6 packets
- LP: #1069914
* tg3: Apply short DMA frag workaround to 5906
- LP: #1069914
* ipvs: fix oops in ip_vs_dst_event on rmmod
- LP: #1069914
* netfilter: nf_conntrack: fix racy timer handling with reliable events
- LP: #1069914
* netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
- LP: #1069914
* netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP
expectation
- LP: #1069914
* ipvs: fix oops on NAT reply in br_nf context
- LP: #1069914
* netfilter: nf_nat_sip: fix via header translation with multiple
parameters
- LP: #1069914
* netfilter: nf_ct_expect: fix possible access to uninitialized timer
- LP: #1069914
* netfilter: limit, hashlimit: avoid duplicated inline
- LP: #1069914
* netfilter: xt_limit: have r->cost != 0 case work
- LP: #1069914
* Add CDC-ACM support for the CX93010-2x UCMxx USB Modem
- LP: #1069914
* drm/radeon: Don't destroy I2C Bus Rec in radeon_ext_tmds_enc_destroy().
- LP: #1069914
* jbd: Fix assertion failure in commit code due to lacking transaction
credits
- LP: #1069914
* x86, random: Architectural inlines to get random integers with RDRAND
- LP: #1069914
* x86, random: Verify RDRAND functionality and allow it to be disabled
- LP: #1069914
* tpm: Propagate error from tpm_transmit to fix a timeout hang
- LP: #1069914
* udf: fix retun value on error path in udf_load_logicalvol
- LP: #1069914
* ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()
- LP: #1069914
* ALSA: emu10k1: add chip details for E-mu 1010 PCIe card
- LP: #1069914
* Linux 3.0.47
- LP: #1069914
* Linux 3.0.48
- LP: #1069939
* drm/i915: apply timing generator bug workaround on CPT and PPT
- LP: #1041315
* arch/tile: avoid generating .eh_frame information in modules
- LP: #1075329
* NLM: nlm_lookup_file() may return NLMv4-specific error codes
- LP: #1075329
* oprofile, x86: Fix wrapping bug in op_x86_get_ctrl()
- LP: #1075329
* SUNRPC: Prevent kernel stack corruption on long values of flush
- LP: #1075329
* Revert: lockd: use rpc client's cl_nodename for id encoding
- LP: #1075329
* pcmcia: sharpsl: don't discard sharpsl_pcmcia_ops
- LP: #1075329
* kernel/sys.c: fix stack memory content leak via UNAME26
- LP: #1075329
- CVE-2012-0957
* use clamp_t in UNAME26 fix
- LP: #1075329
* x86: Exclude E820_RESERVED regions and memory holes above 4 GB from
direct mapping.
- LP: #1075329
* xen/x86: don't corrupt %eip when returning from a signal handler
- LP: #1075329
* USB: cdc-acm: fix pipe type of write endpoint
- LP: #1075329
* usb: acm: fix the computation of the number of data bits
- LP: #1075329
* USB: option: blacklist net interface on ZTE devices
- LP: #1075329
* USB: option: add more ZTE devices
- LP: #1075329
* cgroup: notify_on_release may not be triggered in some cases
- LP: #1075329
* amd64_edac:__amd64_set_scrub_rate(): avoid overindexing scrubrates[]
- LP: #1075329
* media: au0828: fix case where STREAMOFF being called on stopped stream
causes BUG()
- LP: #1075329
* net: Fix skb_under_panic oops in neigh_resolve_output
- LP: #1075329
* skge: Add DMA mask quirk for Marvell 88E8001 on ASUS P5NSLI motherboard
- LP: #1075329
* RDS: fix rds-ping spinlock recursion
- LP: #1075329
* tcp: resets are misrouted
- LP: #1075329
* sparc64: fix ptrace interaction with force_successful_syscall_return()
- LP: #1075329
* sparc64: Like x86 we should check current->mm during perf backtrace
generation.
- LP: #1075329
* sparc64: Fix bit twiddling in sparc_pmu_enable_event().
- LP: #1075329
* sparc64: do not clobber personality flags in sys_sparc64_personality()
- LP: #1075329
* sparc64: Be less verbose during vmemmap population.
- LP: #1075329
* xHCI: add cmd_ring_state
- LP: #1075329
* xHCI: add aborting command ring function
- LP: #1075329
* xHCI: cancel command after command timeout
- LP: #1075329
* xHCI: handle command after aborting the command ring
- LP: #1075329
* Linux 3.0.49
- LP: #1075329
* gen_init_cpio: avoid stack overflow when expanding
- LP: #1075332
* fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check
- LP: #1075332
* drivers/rtc/rtc-imxdi.c: add missing spin lock initialization
- LP: #1075332
* genalloc: stop crashing the system when destroying a pool
- LP: #1075332
* ARM: 7559/1: smp: switch away from the idmap before updating
init_mm.mm_count
- LP: #1075332
* SUNRPC: Get rid of the xs_error_report socket callback
- LP: #1075332
* SUNRPC: Clear the connect flag when socket state is TCP_CLOSE_WAIT
- LP: #1075332
* SUNRPC: Prevent races in xs_abort_connection()
- LP: #1075332
* sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
- LP: #1075332
* ehci: fix Lucid nohandoff pci quirk to be more generic with BIOS
versions
- LP: #1075332
* ehci: Add yet-another Lucid nohandoff pci quirk
- LP: #1075332
* usb-storage: add unusual_devs entry for Casio EX-N1 digital camera
- LP: #1075332
* usb hub: send clear_tt_buffer_complete events when canceling TT clear
work
- LP: #1075332
* USB: whiteheat: fix memory leak in error path
- LP: #1075332
* USB: opticon: fix DMA from stack
- LP: #1075332
* USB: opticon: fix memory leak in error path
- LP: #1075332
* USB: serial: Fix memory leak in sierra_release()
- LP: #1075332
* USB: sierra: fix memory leak in attach error path
- LP: #1075332
* USB: sierra: fix memory leak in probe error path
- LP: #1075332
* USB: mos7840: fix urb leak at release
- LP: #1075332
* USB: mos7840: fix port-device leak in error path
- LP: #1075332
* USB: mos7840: remove NULL-urb submission
- LP: #1075332
* USB: mos7840: remove invalid disconnect handling
- LP: #1075332
* xhci: Fix potential NULL ptr deref in command cancellation.
- LP: #1075332
* vhost: fix mergeable bufs on BE hosts
- LP: #1075332
* ARM: at91/i2c: change id to let i2c-gpio work
- LP: #1075332
* mac80211: check if key has TKIP type before updating IV
- LP: #1075332
* bcma: fix unregistration of cores
- LP: #1075332
* cpufreq / powernow-k8: Remove usage of smp_processor_id() in
preemptible code
- LP: #1075332
* x86, mm: Find_early_table_space based on ranges that are actually being
mapped
- LP: #1075332
* x86, mm: Undo incorrect revert in arch/x86/mm/init.c
- LP: #1075332
* staging: comedi: amplc_pc236: fix invalid register access during detach
- LP: #1075332
* drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13
- LP: #1075332
* Linux 3.0.50
- LP: #1075332
* floppy: do put_disk on current dr if blk_init_queue fails
- LP: #1075335
* x86: Remove the ancient and deprecated disable_hlt() and enable_hlt()
facility
- LP: #1075335
* mm: fix XFS oops due to dirty pages without buffers on s390
- LP: #1075335
* drm/nouveau: silence modesetting spam on pre-gf8 chipsets
- LP: #1075335
* Linux 3.0.51
- LP: #1075335
* net: fix divide by zero in tcp algorithm illinois
- LP: #1077091
- CVE-2012-4565
Date: 2012-12-05 11:45:20.212235+00:00
Changed-By: Luis Henriques <luis.henriques at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/lucid/+source/linux-lts-backport-oneiric/3.0.0-29.46~lucid1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Lucid-changes
mailing list