[ubuntu/precise-security] linux 3.2.0-64.97 (Accepted)
Adam Conrad
adconrad at 0c3.net
Thu Jun 5 19:48:07 UTC 2014
linux (3.2.0-64.97) precise; urgency=low
[ Upstream Kernel Changes ]
* futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
uaddr2 in futex_requeue(..., requeue_pi=1)
- LP: #1326367
- CVE-2014-3153
* futex: Validate atomic acquisition in futex_lock_pi_atomic()
- LP: #1326367
- CVE-2014-3153
* futex: Always cleanup owner tid in unlock_pi
- LP: #1326367
- CVE-2014-3153
* futex: Make lookup_pi_state more robust
- LP: #1326367
- CVE-2014-3153
linux (3.2.0-64.96) precise; urgency=low
[ Luis Henriques ]
* Release Tracking Bug
- LP: #1321792
[ Joseph Salisbury ]
* [Config] updateconfigs after Linux v3.2.58 and v3.2.59 updates
[ Upstream Kernel Changes ]
* Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
- LP: #1319885
* Revert "alpha: fix broken network checksum"
- LP: #1319885
* Revert "isci: fix reset timeout handling"
- LP: #1319885
* Revert "USB: serial: add usbid for dell wwan card to sierra.c"
- LP: #1319885
* mm: try_to_unmap_cluster() should lock_page() before mlocking
- LP: #1316268
- CVE-2014-3122
* net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk
- LP: #1319885
* bridge: multicast: add sanity check for query source addresses
- LP: #1319885
* net: unix: non blocking recvmsg() should not return -EINTR
- LP: #1319885
* vlan: Set correct source MAC address with TX VLAN offload enabled
- LP: #1319885
* net: socket: error on a negative msg_namelen
- LP: #1319885
* ipv6: Avoid unnecessary temporary addresses being generated
- LP: #1319885
* ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment
properly
- LP: #1319885
* vhost: validate vhost_get_vq_desc return value
- LP: #1319885
- CVE-2014-0055
* xen-netback: remove pointless clause from if statement
- LP: #1319885
* ipv6: some ipv6 statistic counters failed to disable bh
- LP: #1319885
* netlink: don't compare the nul-termination in nla_strcmp
- LP: #1319885
* isdnloop: Validate NUL-terminated strings from user.
- LP: #1319885
* isdnloop: several buffer overflows
- LP: #1319885
* sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on
Simba-bridges
- LP: #1319885
* sparc32: fix build failure for arch_jump_label_transform
- LP: #1319885
* sparc64: don't treat 64-bit syscall return codes as 32-bit
- LP: #1319885
* drm/i915: inverted brightness quirk for Acer Aspire 4736Z
- LP: #1319885
* drm/i915: quirk invert brightness for Acer Aspire 5336
- LP: #1319885
* w1: fix w1_send_slave dropping a slave id
- LP: #1319885
* ARM: mm: introduce present, faulting entries for PAGE_NONE
- LP: #1319885
* ARM: 7954/1: mm: remove remaining domain support from ARMv6
- LP: #1319885
* matroxfb: restore the registers M_ACCESS and M_PITCH
- LP: #1319885
* framebuffer: fix cfb_copyarea
- LP: #1319885
* mach64: use unaligned access
- LP: #1319885
* mach64: fix cursor when character width is not a multiple of 8 pixels
- LP: #1319885
* tgafb: fix data copying
- LP: #1319885
* hvc: ensure hvc_init is only ever called once in hvc_console.c
- LP: #1319885
* usb: dwc3: fix wrong bit mask in dwc3_event_devt
- LP: #1319885
* media: gspca: sn9c20x: add ID for Genius Look 1320 V2
- LP: #1319885
* tty: Set correct tty name in 'active' sysfs attribute
- LP: #1319885
* uvcvideo: Do not use usb_set_interface on bulk EP
- LP: #1319885
* usb: gadget: atmel_usba: fix crashed during stopping when DEBUG is
enabled
- LP: #1319885
* blktrace: fix accounting of partially completed requests
- LP: #1319885
* rtlwifi: rtl8192se: Fix too long disable of IRQs
- LP: #1319885
* staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to
integer
- LP: #1319885
* Btrfs: skip submitting barrier for missing device
- LP: #1319885
* jffs2: remove from wait queue after schedule()
- LP: #1319885
* jffs2: avoid soft-lockup in jffs2_reserve_space_gc()
- LP: #1319885
* jffs2: Fix segmentation fault found in stress test
- LP: #1319885
* jffs2: Fix crash due to truncation of csize
- LP: #1319885
* iwlwifi: dvm: take mutex when sending SYNC BT config command
- LP: #1319885
* virtio_balloon: don't softlockup on huge balloon changes.
- LP: #1319885
* ext4: fix partial cluster handling for bigalloc file systems
- LP: #1319885
* ath9k: fix ready time of the multicast buffer queue
- LP: #1319885
* IB/ipath: Fix potential buffer overrun in sending diag packet routine
- LP: #1319885
* IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL
- LP: #1319885
* mfd: Include all drivers in subsystem menu
- LP: #1319885
* mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1319885
* mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1319885
* mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1319885
* mfd: 88pm860x: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1319885
* pid: get pid_t ppid of task in init_pid_ns
- LP: #1319885
* audit: convert PPIDs to the inital PID namespace.
- LP: #1319885
* Btrfs: fix deadlock with nested trans handles
- LP: #1319885
* gpio: mxs: Allow for recursive enable_irq_wake() call
- LP: #1319885
* x86, hyperv: Bypass the timer_irq_works() check
- LP: #1319885
* nfsd4: buffer-length check for SUPPATTR_EXCLCREAT
- LP: #1319885
* nfsd4: session needs room for following op to error out
- LP: #1319885
* nfsd: Add fh_{want,drop}_write()
- LP: #1319885
* nfsd: notify_change needs elevated write count
- LP: #1319885
* drm/i915/tv: fix gen4 composite s-video tv-out
- LP: #1319885
* dm thin: fix dangling bio in process_deferred_bios error path
- LP: #1319885
* nfsd4: fix setclientid encode size
- LP: #1319885
* MIPS: Hibernate: Flush TLB entries in swsusp_arch_resume()
- LP: #1319885
* ALSA: hda - Enable beep for ASUS 1015E
- LP: #1319885
* IB/mthca: Return an error on ib_copy_to_udata() failure
- LP: #1319885
* IB/ehca: Returns an error on ib_copy_to_udata() failure
- LP: #1319885
* reiserfs: fix race in readdir
- LP: #1319885
* drm/vmwgfx: correct fb_fix_screeninfo.line_length
- LP: #1319885
* drm/radeon: call drm_edid_to_eld when we update the edid
- LP: #1319885
* sh: fix format string bug in stack tracer
- LP: #1319885
* ocfs2: dlm: fix lock migration crash
- LP: #1319885
* ocfs2: dlm: fix recovery hung
- LP: #1319885
* ocfs2: do not put bh when buffer_uptodate failed
- LP: #1319885
* iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug
- LP: #1319885
* mm: hugetlb: fix softlockup when a large number of hugepages are freed.
- LP: #1319885
* wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race
- LP: #1319885
* ALSA: ice1712: Fix boundary checks in PCM pointer ops
- LP: #1319885
* lib/percpu_counter.c: fix bad percpu counter state during suspend
- LP: #1319885
* b43: Fix machine check error due to improper access of
B43_MMIO_PSM_PHY_HDR
- LP: #1319885
* x86-64, modify_ldt: Ban 16-bit segments on 64-bit kernels
- LP: #1319885
* target/tcm_fc: Fix use-after-free of ft_tpg
- LP: #1319885
* drivers: hv: additional switch to use mb() instead of smp_mb()
- LP: #1319885
* Char: ipmi_bt_sm, fix infinite loop
- LP: #1319885
* selinux: correctly label /proc inodes in use before the policy is
loaded
- LP: #1319885
* powernow-k6: disable cache when changing frequency
- LP: #1319885
* powernow-k6: correctly initialize default parameters
- LP: #1319885
* powernow-k6: reorder frequencies
- LP: #1319885
* Linux 3.2.58
- LP: #1319885
* ext4: FIBMAP ioctl causes BUG_ON due to handle EXT_MAX_BLOCKS
- LP: #1319885
* ext4: note the error in ext4_end_bio()
- LP: #1319885
* ext4: use i_size_read in ext4_unaligned_aio()
- LP: #1319885
* parisc: fix epoll_pwait syscall on compat kernel
- LP: #1319885
* locks: allow __break_lease to sleep even when break_time is 0
- LP: #1319885
* mlx4_en: don't use napi_synchronize inside mlx4_en_netpoll
- LP: #1319885
* staging: r8712u: Fix case where ethtype was never obtained and always
be checked against 0
- LP: #1319885
* USB: serial: ftdi_sio: add id for Brainboxes serial cards
- LP: #1319885
* usb: option driver, add support for Telit UE910v2
- LP: #1319885
* USB: cp210x: Add 8281 (Nanotec Plug & Drive)
- LP: #1319885
* USB: pl2303: add ids for Hewlett-Packard HP POS pole displays
- LP: #1319885
* USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM
driver
- LP: #1319885
* nfsd: set timeparms.to_maxval in setup_callback_client
- LP: #1319885
* libata/ahci: accommodate tag ordered controllers
- LP: #1319885
* mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
- LP: #1319885
* dmi: add support for exact DMI matches in addition to substring
matching
- LP: #1319885
* Input: synaptics - add min/max quirk for ThinkPad T431s, L440, L540, S1
Yoga and X1
- LP: #1319885
* mm: make fixup_user_fault() check the vma access rights too
- LP: #1319885
* ARM: 8027/1: fix do_div() bug in big-endian systems
- LP: #1319885
* USB: serial: fix sysfs-attribute removal deadlock
- LP: #1319885
* Btrfs: Don't allocate inode that is already in use
- LP: #1319885
* Btrfs: fix inode caching vs tree log
- LP: #1319885
* xhci: For streams the css flag most be read from the stream-ctx on ep
stop
- LP: #1319885
* usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb
- LP: #1319885
* usb/xhci: fix compilation warning when !CONFIG_PCI && !CONFIG_PM
- LP: #1319885
* USB: io_ti: fix firmware download on big-endian machines
- LP: #1319885
* usb: option: add Olivetti Olicard 500
- LP: #1319885
* usb: option: add Alcatel L800MA
- LP: #1319885
* usb: option: add and update a number of CMOTech devices
- LP: #1319885
* rtl8192ce: Fix null dereference in watchdog
- LP: #1319885
* Linux 3.2.59
- LP: #1319885
Date: 2014-06-04 22:01:43.321353+00:00
Changed-By: Brad Figg <brad.figg at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/precise/+source/linux/3.2.0-64.97
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list