[ubuntu/lucid-security] linux-lts-backport-oneiric 3.0.0-22.36~lucid1 (Accepted)

Adam Conrad adconrad at 0c3.net
Thu Jun 28 16:35:26 UTC 2012


linux-lts-backport-oneiric (3.0.0-22.36~lucid1) lucid-proposed; urgency=low

  [Luis Henriques]

  * Release Tracking Bug
    - LP: #1012483

  [ Herton Ronaldo Krzesinski ]

  * SAUCE: fix get_gate_vma call in i386 NX emulation code
    - LP: #1009200

  [ Upstream Kernel Changes ]

  * Avoid reading past buffer when calling GETACL
    - LP: #1002505
    - CVE-2012-2375
  * Avoid beyond bounds copy while caching ACL
    - LP: #1002505
    - CVE-2012-2375
  * Fix length of buffer copied in __nfs4_get_acl_uncached
    - LP: #1002505
    - CVE-2012-2375
  * tilegx: enable SYSCALL_WRAPPERS support
    - LP: #1008697
  * block: fix buffer overflow when printing partition UUIDs
    - LP: #1008697
  * block: don't mark buffers beyond end of disk as mapped
    - LP: #1008697
  * PARISC: fix PA1.1 oops on boot
    - LP: #1008697
  * PARISC: fix crash in flush_icache_page_asm on PA1.1
    - LP: #1008697
  * PARISC: fix panic on prefetch(NULL) on PA7300LC
    - LP: #1008697
  * isdn/gigaset: ratelimit CAPI message dumps
    - LP: #1008697
  * vfs: make AIO use the proper rw_verify_area() area helpers
    - LP: #1008697
  * cfg80211: warn if db.txt is empty with CONFIG_CFG80211_INTERNAL_REGDB
    - LP: #1008697
  * Fix blocking allocations called very early during bootup
    - LP: #1008697
  * s390/pfault: fix task state race
    - LP: #1008697
  * SCSI: mpt2sas: Fix for panic happening because of improper memory
    allocation
    - LP: #1008697
  * RDMA/cxgb4: Drop peer_abort when no endpoint found
    - LP: #1008697
  * KEYS: Use the compat keyctl() syscall wrapper on Sparc64 for Sparc32
    compat
    - LP: #1008697
  * SELinux: if sel_make_bools errors don't leave inconsistent state
    - LP: #1008697
  * drivers/staging/comedi/comedi_fops.c: add missing vfree
    - LP: #1008697
  * perf/x86: Update event scheduling constraints for AMD family 15h models
    - LP: #1008697
  * mtd: sm_ftl: fix typo in major number.
    - LP: #1008697
  * ahci: Detect Marvell 88SE9172 SATA controller
    - LP: #1008697
  * um: Fix __swp_type()
    - LP: #1008697
  * um: Implement a custom pte_same() function
    - LP: #1008697
  * docs: update HOWTO for 2.6.x -> 3.x versioning
    - LP: #1008697
  * USB: cdc-wdm: poll must return POLLHUP if device is gone
    - LP: #1008697
  * workqueue: skip nr_running sanity check in worker_enter_idle() if
    trustee is active
    - LP: #1008697
  * mm: mempolicy: Let vma_merge and vma_split handle vma->vm_policy
    linkages
    - LP: #1008697
  * md: using GFP_NOIO to allocate bio for flush request
    - LP: #1008697
  * Add missing call to uart_update_timeout()
    - LP: #1008697
  * tty: Allow uart_register/unregister/register
    - LP: #1008697
  * USB: ftdi-sio: add support for Physik Instrumente E-861
    - LP: #1008697
  * usb-storage: unusual_devs entry for Yarvik PMP400 MP4 player
    - LP: #1008697
  * USB: ffs-test: fix length argument of out function call
    - LP: #1008697
  * drivers/rtc/rtc-pl031.c: configure correct wday for 2000-01-01
    - LP: #1008697
  * SCSI: hpsa: Fix problem with MSA2xxx devices
    - LP: #1008697
  * usb: usbtest: two super speed fixes for usbtest
    - LP: #1008697
  * USB: Remove races in devio.c
    - LP: #1008697
  * USB: serial: ti_usb_3410_5052: Add support for the FRI2 serial console
    - LP: #1008697
  * usb: gadget: fsl_udc_core: dTD's next dtd pointer need to be updated
    once written
    - LP: #1008697
  * usb: add USB_QUIRK_RESET_RESUME for M-Audio 88es
    - LP: #1008697
  * xhci: Add Lynx Point to list of Intel switchable hosts.
    - LP: #1008697
  * usb-xhci: Handle COMP_TX_ERR for isoc tds
    - LP: #1008697
  * xhci: Reset reserved command ring TRBs on cleanup.
    - LP: #1008697
  * xhci: Add new short TX quirk for Fresco Logic host.
    - LP: #1008697
  * drm/i915: Avoid a double-read of PCH_IIR during interrupt handling
    - LP: #1008697
  * drm/i915: [GEN7] Use HW scheduler for fixed function shaders
    - LP: #1008697
  * drm/i915: don't clobber the pipe param in sanitize_modesetting
    - LP: #1008697
  * nouveau: nouveau_set_bo_placement takes TTM flags
    - LP: #1008697
  * smsusb: add autodetection support for USB ID 2040:c0a0
    - LP: #1008697
  * media: uvcvideo: Fix ENUMINPUT handling
    - LP: #1008697
  * x86/mce: Fix check for processor context when machine check was taken.
    - LP: #1008697
  * mmc: sdio: avoid spurious calls to interrupt handlers
    - LP: #1008697
  * tile: fix bug where fls(0) was not returning 0
    - LP: #1008697
  * isci: fix oem parameter validation on single controller skus
    - LP: #1008697
  * ARM: 7365/1: drop unused parameter from flush_cache_user_range
    - LP: #1008697
  * ARM: 7409/1: Do not call flush_cache_user_range with mmap_sem held
    - LP: #1008697
  * i2c: davinci: Free requested IRQ in remove
    - LP: #1008697
  * Linux 3.0.33
    - LP: #1008697

linux (3.0.0-21.35) oneiric-proposed; urgency=low

  [Luis Henriques]

  * Release Tracking Bug
    - LP: #1004571

  [ Andy Whitcroft ]

  * [Config] control.stub is an intermediate product not a dependancy
    - LP: #992414

  [ Herton Ronaldo Krzesinski ]

  * SAUCE: async_populate_rootfs: fix build warnings
    - LP: #1003417

  [ Tim Gardner ]

  * Revert "SAUCE: ite-cir: postpone ISR registration"
    - LP: #1002880
  * [Config] perarch and indep tools builds need separate build directories

  [ Upstream Kernel Changes ]

  * Revert "autofs: work around unhappy compat problem on x86-64"
    - LP: #996109
  * Revert "usb: Fix build error due to dma_mask is not at pdev_archdata at
    ARM"
    - LP: #996109
  * KVM: unmap pages from the iommu when slots are removed
    - LP: #987569
    - CVE-2012-2121
  * NFSv4: include bitmap in nfsv4 get acl data
    - LP: #893147
    - CVE-2011-4131
  * hugepages: fix use after free bug in "quota" handling
    - LP: #990368
    - CVE-2012-2133
  * nfs: Enclose hostname in brackets when needed in nfs_do_root_mount
    - LP: #996109
  * NFSv4: Ensure that the LOCK code sets exception->inode
    - LP: #996109
  * NFSv4: Ensure that we check lock exclusive/shared type against open
    modes
    - LP: #996109
  * x86, apic: APIC code touches invalid MSR on P5 class machines
    - LP: #996109
  * xen: correctly check for pending events when restoring irq flags
    - LP: #996109
  * xen/smp: Fix crash when booting with ACPI hotplug CPUs.
    - LP: #996109
  * ASoC: dapm: Ensure power gets managed for line widgets
    - LP: #996109
  * dmaengine: at_hdmac: remove clear-on-read in atc_dostart()
    - LP: #996109
  * hwmon: fam15h_power: fix bogus values with current BIOSes
    - LP: #996109
  * hwmon: (fam15h_power) Fix pci_device_id array
    - LP: #996109
  * drm/i915: handle input/output sdvo timings separately in mode_set
    - LP: #996109
  * drm/i915: fix integer overflow in i915_gem_execbuffer2()
    - LP: #996109
  * drm/i915: fix integer overflow in i915_gem_do_execbuffer()
    - LP: #996109
  * nl80211: ensure interface is up in various APIs
    - LP: #996109
  * EHCI: fix criterion for resuming the root hub
    - LP: #996109
  * brcm80211: smac: resume transmit fifo upon receiving frames
    - LP: #996109
  * Fix modpost failures in fedora 17
    - LP: #996109
  * mmc: unbreak sdhci-esdhc-imx on i.MX25
    - LP: #996109
  * nfsd: fix b0rken error value for setattr on read-only mount
    - LP: #996109
  * nfsd: fix error values returned by nfsd4_lockt() when nfsd_open() fails
    - LP: #996109
  * USB: cdc-wdm: fix race leading leading to memory corruption
    - LP: #996109
  * USB: EHCI: fix crash during suspend on ASUS computers
    - LP: #996109
  * USB: gadget: storage gadgets send wrong error code for unknown commands
    - LP: #996109
  * usb gadget: uvc: uvc_request_data::length field must be signed
    - LP: #996109
  * pipes: add a "packetized pipe" mode for writing
    - LP: #996109
  * autofs: make the autofsv5 packet file descriptor use a packetized pipe
    - LP: #996109
  * ARM: 7403/1: tls: remove covert channel via TPIDRURW
    - LP: #996109
  * SCSI: libsas: fix sas_find_bcast_phy() in the presence of 'vacant' phys
    - LP: #996109
  * SCSI: libsas: fix false positive 'device attached' conditions
    - LP: #996109
  * efi: Add new variable attributes
    - LP: #996109
  * efivars: String functions
    - LP: #996109
  * efivars: fix warnings when CONFIG_PSTORE=n
    - LP: #996109
  * efi: Validate UEFI boot variables
    - LP: #996109
  * efivars: Improve variable validation
    - LP: #996109
  * hwmon: (coretemp) Increase CPU core limit
    - LP: #996109
  * hwmon: (coretemp) fix oops on cpu unplug
    - LP: #996109
  * libata: skip old error history when counting probe trials
    - LP: #996109
  * i2c: pnx: Disable clk in suspend
    - LP: #996109
  * ipw2200: Fix race condition in the command completion acknowledge
    - LP: #996109
  * mac80211: fix AP mode EAP tx for VLAN stations
    - LP: #996109
  * rtlwifi: Fix oops on unload
    - LP: #996109
  * wl1251: fix crash on remove due to premature kfree
    - LP: #996109
  * wl1251: fix crash on remove due to leftover work item
    - LP: #996109
  * sched: Fix nohz load accounting -- again!
    - LP: #996109
  * hfsplus: Fix potential buffer overflows
    - LP: #996109
  * Linux 3.0.31
    - LP: #996109
  * smsc95xx: mark link down on startup and let PHY interrupt deal with
    carrier changes
    - LP: #1002880
  * xen/pte: Fix crashes when trying to see non-existent PGD/PMD/PUD/PTEs
    - LP: #1002880
  * xen/pci: don't use PCI BIOS service for configuration space accesses
    - LP: #1002880
  * percpu, x86: don't use PMD_SIZE as embedded atom_size on 32bit
    - LP: #1002880
  * asm-generic: Use __BITS_PER_LONG in statfs.h
    - LP: #1002880
  * Fix __read_seqcount_begin() to use ACCESS_ONCE for sequence value read
    - LP: #1002880
  * ARM: 7410/1: Add extra clobber registers for assembly in kernel_execve
    - LP: #1002880
  * ARM: 7414/1: SMP: prevent use of the console when using idmap_pgd
    - LP: #1002880
  * regulator: Fix the logic to ensure new voltage setting in valid range
    - LP: #1002880
  * ARM: orion5x: Fix GPIO enable bits for MPP9
    - LP: #1002880
  * asix: Fix tx transfer padding for full-speed USB
    - LP: #1002880
  * netem: fix possible skb leak
    - LP: #1002880
  * net: In unregister_netdevice_notifier unregister the netdevices.
    - LP: #1002880
  * net: l2tp: unlock socket lock before returning from l2tp_ip_sendmsg
    - LP: #1002880
  * sky2: propogate rx hash when packet is copied
    - LP: #1002880
  * sky2: fix receive length error in mixed non-VLAN/VLAN traffic
    - LP: #1002880
  * tg3: Avoid panic from reserved statblk field access
    - LP: #1002880
  * sungem: Fix WakeOnLan
    - LP: #1002880
  * tcp: change tcp_adv_win_scale and tcp_rmem[2]
    - LP: #1002880
  * sony-laptop: Enable keyboard backlight by default
    - LP: #1002880
  * ALSA: echoaudio: Remove incorrect part of assertion
    - LP: #1002880
  * ALSA: HDA: Lessen CPU usage when waiting for chip to respond
    - LP: #1002880
  * usbnet: fix skb traversing races during unlink(v2)
    - LP: #1002880
  * namespaces, pid_ns: fix leakage on fork() failure
    - LP: #1002880
  * sparc64: Do not clobber %g2 in xcall_fetch_glob_regs().
    - LP: #1002880
  * ARM: prevent VM_GROWSDOWN mmaps extending below FIRST_USER_ADDRESS
    - LP: #1002880
  * media: rc: Postpone ISR registration
    - LP: #1002880
  * cdc_ether: Ignore bogus union descriptor for RNDIS devices
    - LP: #1002880
  * cdc_ether: add Novatel USB551L device IDs for FLAG_WWAN
    - LP: #1002880
  * percpu: pcpu_embed_first_chunk() should free unused parts after all
    allocs are complete
    - LP: #1002880
  * hugetlb: prevent BUG_ON in hugetlb_fault() -> hugetlb_cow()
    - LP: #1002880
  * mm: nobootmem: fix sign extend problem in __free_pages_memory()
    - LP: #1002880
  * jffs2: Fix lock acquisition order bug in gc path
    - LP: #1002880
  * arch/tile: apply commit 74fca9da0 to the compat signal handling as well
    - LP: #1002880
  * crypto: mv_cesa requires on CRYPTO_HASH to build
    - LP: #1002880
  * MD: Add del_timer_sync to mddev_suspend (fix nasty panic)
    - LP: #1002880
  * tcp: do_tcp_sendpages() must try to push data out on oom conditions
    - LP: #1002880
  * init: don't try mounting device as nfs root unless type fully matches
    - LP: #1002880
  * ext4: avoid deadlock on sync-mounted FS w/o journal
    - LP: #1002880
  * NFSv4: Revalidate uid/gid after open
    - LP: #1002880
  * memcg: free spare array to avoid memory leak
    - LP: #1002880
  * compat: Fix RT signal mask corruption via sigprocmask
    - LP: #1002880
  * ext3: Fix error handling on inode bitmap corruption
    - LP: #1002880
  * ext4: fix error handling on inode bitmap corruption
    - LP: #1002880
  * ACPI / PM: Add Sony Vaio VPCCW29FX to nonvs blacklist.
    - LP: #1002880
  * SCSI: hpsa: Add IRQF_SHARED back in for the non-MSI(X) interrupt
    handler
    - LP: #1002880
  * wake up s_wait_unfrozen when ->freeze_fs fails
    - LP: #1002880
  * pch_gpio: Support new device LAPIS Semiconductor ML7831 IOH
    - LP: #1002880
  * pch_gbe: fixed the issue which receives an unnecessary packet.
    - LP: #1002880
  * pch_gbe: support ML7831 IOH
    - LP: #1002880
  * pch_gbe: Fixed the issue on which PC was frozen when link was downed.
    - LP: #1002880
  * pch_gbe: Do not abort probe on bad MAC
    - LP: #1002880
  * pch_gbe: memory corruption calling pch_gbe_validate_option()
    - LP: #1002880
  * ia64: Add accept4() syscall
    - LP: #1002880
  * Linux 3.0.32
    - LP: #1002880
  * dl2k: Clean up rio_ioctl
    - CVE-2012-2313

Date: 2012-06-13 15:37:21.813456+00:00
Changed-By: Luis Henriques <luis.henriques at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/lucid/+source/linux-lts-backport-oneiric/3.0.0-22.36~lucid1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Lucid-changes mailing list