[ubuntu/trusty-security] linux 3.13.0-29.53 (Accepted)
Adam Conrad
adconrad at 0c3.net
Thu Jun 5 19:36:06 UTC 2014
linux (3.13.0-29.53) trusty; urgency=low
[ Upstream Kernel Changes ]
* futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
uaddr2 in futex_requeue(..., requeue_pi=1)
- LP: #1326367
- CVE-2014-3153
* futex: Validate atomic acquisition in futex_lock_pi_atomic()
- LP: #1326367
- CVE-2014-3153
* futex: Always cleanup owner tid in unlock_pi
- LP: #1326367
- CVE-2014-3153
* futex: Make lookup_pi_state more robust
- LP: #1326367
- CVE-2014-3153
linux (3.13.0-29.52) trusty; urgency=low
[ Luis Henriques ]
* Release Tracking Bug
- re-used previous tracking bug
[ Adam Conrad ]
* [Config] Normalize AHCI configs on powerpc/ppc64el with the rest of the
architectures
- LP: #1323980
[ Tanmay Inamdar ]
* SAUCE: Add MSI/MSI-X driver for APM PCI bus
- LP: #1318977
linux (3.13.0-28.51) trusty; urgency=low
[ Luis Henriques ]
* Release Tracking Bug
- LP: #1322112
[ Adam Lee ]
* SAUCE: (no-up) rtlwifi: rtl8723be: disable MSI interrupts mode
- LP: #1310512, #1320070
[ Andy Whitcroft ]
* [Packaging] ppc64el is a powerpc kernel arch and needs its quirks
- LP: #1318848
[ Ben Collins ]
* [Config] Switch to grub-ieee1275 as recommended on book3e systems
- LP: #1318629
[ Upstream Kernel Changes ]
* Revert "PCI: Enable INTx in pci_reenable_device() only when MSI/MSI-X
not enabled"
- LP: #1320946
* Bluetooth: allocate static minor for vhci
- LP: #1317336
* core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle
errors
- LP: #1320946
* __dentry_path() fixes
- LP: #1320946
* drm/i915: quirk invert brightness for Acer Aspire 5336
- LP: #1320946
* w1: fix w1_send_slave dropping a slave id
- LP: #1320946
* ARM: 7954/1: mm: remove remaining domain support from ARMv6
- LP: #1320946
* matroxfb: restore the registers M_ACCESS and M_PITCH
- LP: #1320946
* framebuffer: fix cfb_copyarea
- LP: #1320946
* mach64: use unaligned access
- LP: #1320946
* mach64: fix cursor when character width is not a multiple of 8 pixels
- LP: #1320946
* tgafb: fix mode setting with fbset
- LP: #1320946
* tgafb: fix data copying
- LP: #1320946
* hvc: ensure hvc_init is only ever called once in hvc_console.c
- LP: #1320946
* ARM: dts: Keep G3D regulator always on for exynos5250-arndale
- LP: #1320946
* PCI: mvebu: Fix potential issue in range parsing
- LP: #1320946
* usb: dwc3: fix wrong bit mask in dwc3_event_devt
- LP: #1320946
* x86, AVX-512: AVX-512 Feature Detection
- LP: #1320946
* x86, AVX-512: Enable AVX-512 States Context Switch
- LP: #1320946
* s390/cio: fix driver callback initialization for ccw consoles
- LP: #1320946
* ARM: Fix default CPU selection for ARCH_MULTI_V5
- LP: #1320946
* omap3isp: preview: Fix the crop margins
- LP: #1320946
* ACPICA: Restore code that repairs NULL package elements in return
values.
- LP: #1320946
* media: gspca: sn9c20x: add ID for Genius Look 1320 V2
- LP: #1320946
* m88rs2000: add caps FE_CAN_INVERSION_AUTO
- LP: #1320946
* m88rs2000: prevent frontend crash on continuous transponder scans
- LP: #1320946
* mmc: sdhci-bcm-kona: fix build errors when built-in
- LP: #1320946
* usb: musb: avoid NULL pointer dereference
- LP: #1320946
* uvcvideo: Do not use usb_set_interface on bulk EP
- LP: #1320946
* drm/i915: Don't clobber CHICKEN_PIPESL_1 on BDW
- LP: #1320946
* usb: dwc3: fix randconfig build errors
- LP: #1320946
* usb: gadget: atmel_usba: fix crashed during stopping when DEBUG is
enabled
- LP: #1320946
* blktrace: fix accounting of partially completed requests
- LP: #1320946
* rtlwifi: rtl8192cu: Fix too long disable of IRQs
- LP: #1320946
* rtlwifi: rtl8192se: Fix too long disable of IRQs
- LP: #1320946
* rtlwifi: rtl8188ee: Fix too long disable of IRQs
- LP: #1320946
* rtlwifi: rtl8723ae: Fix too long disable of IRQs
- LP: #1320946
* xhci: Prevent runtime pm from autosuspending during initialization
- LP: #1320946
* staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to
integer
- LP: #1320946
* mtd: atmel_nand: Disable subpage NAND write when using Atmel PMECC
- LP: #1320946
* iwlwifi: dvm: take mutex when sending SYNC BT config command
- LP: #1320946
* virtio_balloon: don't softlockup on huge balloon changes.
- LP: #1320946
* arm64: Make DMA coherent and strongly ordered mappings not executable
- LP: #1320946
* arm64: Do not synchronise I and D caches for special ptes
- LP: #1320946
* ARM: OMAP2+: INTC: Acknowledge stuck active interrupts
- LP: #1320946
* ARM: dts: am33xx: correcting dt node unit address for usb
- LP: #1320946
* mtip32xx: Set queue bounce limit
- LP: #1320946
* mtip32xx: Unmap the DMA segments before completing the IO request
- LP: #1320946
* mtip32xx: mtip_async_complete() bug fixes
- LP: #1320946
* ath9k: fix ready time of the multicast buffer queue
- LP: #1320946
* KVM: s390: Optimize ucontrol path
- LP: #1320946
* mei: fix memory leak of pending write cb objects
- LP: #1320946
* usb: gadget: tcm_usb_gadget: stop format strings
- LP: #1320946
* usb: phy: Add ulpi IDs for SMSC USB3320 and TI TUSB1210
- LP: #1320946
* USB: unbind all interfaces before rebinding any
- LP: #1320946
* IB/ipath: Fix potential buffer overrun in sending diag packet routine
- LP: #1320946
* IB/qib: Fix debugfs ordering issue with multiple HCAs
- LP: #1320946
* IB/qib: add missing braces in do_qib_user_sdma_queue_create()
- LP: #1320946
* IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL
- LP: #1320946
* ALSA: hda/realtek - Restore default value for ALC283
- LP: #1320946
* mfd: sec-core: Fix possible NULL pointer dereference when i2c_new_dummy
error
- LP: #1320946
* regulator: arizona-ldo1: Correct default regulator init_data
- LP: #1320946
* ASoC: cs42l73: Fix mask bits for SOC_VALUE_ENUM_SINGLE
- LP: #1320946
* ASoC: cs42l52: Fix mask bits for SOC_VALUE_ENUM_SINGLE
- LP: #1320946
* drm/i915: Do not dereference pointers from ring buffer in evict event
- LP: #1320946
* mfd: Include all drivers in subsystem menu
- LP: #1320946
* mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: max77686: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: 88pm860x: Fix I2C device resource leak on regmap init fail
- LP: #1320946
* mfd: 88pm860x: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: max77693: Fix possible NULL pointer dereference on i2c_new_dummy
error
- LP: #1320946
* mfd: 88pm800: Fix I2C device resource leak if probe fails
- LP: #1320946
* mfd: tps65910: Fix possible invalid pointer dereference on
regmap_add_irq_chip fail
- LP: #1320946
* MIPS: KVM: Pass reserved instruction exceptions to guest
- LP: #1320946
* ASoC: cs42l51: Fix SOC_DOUBLE_R_SX_TLV shift values for ADC, PCM, and
Analog kcontrols
- LP: #1320946
* mac80211: fix potential use-after-free
- LP: #1320946
* mac80211: fix suspend vs. authentication race
- LP: #1320946
* mac80211: fix WPA with VLAN on AP side with ps-sta again
- LP: #1320946
* pid: get pid_t ppid of task in init_pid_ns
- LP: #1320946
* audit: restore order of tty and ses fields in log output
- LP: #1320946
* audit: convert PPIDs to the inital PID namespace.
- LP: #1320946
* mfd: kempld-core: Fix potential hang-up during boot
- LP: #1320946
* drm/i915: Fix unsafe loop iteration over vma whilst unbinding them
- LP: #1320946
* powerpc/compat: 32-bit little endian machine name is ppcle, not ppc
- LP: #1320946
* clk: s2mps11: Fix possible NULL pointer dereference
- LP: #1320946
* spi: efm32: use $vendor,$device scheme for compatible string
- LP: #1320946
* ALSA: hda - add headset mic detect quirks for three Dell laptops
- LP: #1297581, #1320946
* KVM: PPC: Book3S HV: Fix KVM hang with CONFIG_KVM_XICS=n
- LP: #1320946
* gpio: mxs: Allow for recursive enable_irq_wake() call
- LP: #1320946
* nfsd4: buffer-length check for SUPPATTR_EXCLCREAT
- LP: #1320946
* nfsd4: session needs room for following op to error out
- LP: #1320946
* nfsd4: leave reply buffer space for failed setattr
- LP: #1320946
* nfsd4: fix test_stateid error reply encoding
- LP: #1320946
* nfsd: notify_change needs elevated write count
- LP: #1320946
* dm cache: prevent corruption caused by discard_block_size >
cache_block_size
- LP: #1320946
* dm transaction manager: fix corruption due to non-atomic transaction
commit
- LP: #1320946
* dm: take care to copy the space map roots before locking the superblock
- LP: #1320946
* aio: v4 ensure access to ctx->ring_pages is correctly serialised for
migration
- LP: #1320946
* NFSD: Traverse unconfirmed client through hash-table
- LP: #1320946
* lockd: ensure we tear down any live sockets when socket creation fails
during lockd_up
- LP: #1320946
* drm/i915/tv: fix gen4 composite s-video tv-out
- LP: #1320946
* dm thin: fix dangling bio in process_deferred_bios error path
- LP: #1320946
* em28xx: fix PCTV 290e LNA oops
- LP: #1320946
* NFSv4: Fix a use-after-free problem in open()
- LP: #1320946
* nfsd4: fix setclientid encode size
- LP: #1320946
* MIPS: Hibernate: Flush TLB entries in swsusp_arch_resume()
- LP: #1320946
* ALSA: hda - Enable beep for ASUS 1015E
- LP: #1320946
* nfsd: check passed socket's net matches NFSd superblock's one
- LP: #1320946
* s390/bitops,atomic: add missing memory barriers
- LP: #1320946
* IB/mthca: Return an error on ib_copy_to_udata() failure
- LP: #1320946
* IB/ehca: Returns an error on ib_copy_to_udata() failure
- LP: #1320946
* drm/qxl: unset a pointer in sync_obj_unref
- LP: #1320946
* smarter propagate_mnt()
- LP: #1320946
* don't bother with {get,put}_write_access() on non-regular files
- LP: #1320946
* reiserfs: fix race in readdir
- LP: #1320946
* drm/vmwgfx: correct fb_fix_screeninfo.line_length
- LP: #1320946
* ALSA: hda - Fix silent speaker output due to mute LED fixup
- LP: #1320946
* drm/radeon: clear needs_reset flag if IB test fails
- LP: #1320946
* drm/radeon: call drm_edid_to_eld when we update the edid
- LP: #1320946
* drm/radeon: fix endian swap on hawaii clear state buffer setup
- LP: #1320946
* drm/radeon: fix typo in spectre_golden_registers
- LP: #1320946
* sh: fix format string bug in stack tracer
- LP: #1320946
* ocfs2: dlm: fix lock migration crash
- LP: #1320946
* ocfs2: dlm: fix recovery hung
- LP: #1320946
* ocfs2: do not put bh when buffer_uptodate failed
- LP: #1320946
* ocfs2: fix panic on kfree(xattr->name)
- LP: #1320946
* xattr: guard against simultaneous glibc header inclusion
- LP: #1320946
* drm/i915: move power domain init earlier during system resume
- LP: #1320946
* Skip intel_crt_init for Dell XPS 8700
- LP: #1320946
* dm cache: fix a lock-inversion
- LP: #1320946
* thinkpad_acpi: Fix inconsistent mute LED after resume
- LP: #1320946
* iser-target: Add missing se_cmd put for WRITE_PENDING in tx_comp_err
- LP: #1320946
* iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug
- LP: #1320946
* Target/sbc: Initialize COMPARE_AND_WRITE write_sg scatterlist
- LP: #1320946
* mm: page_alloc: spill to remote nodes before waking kswapd
- LP: #1320946
* mm: try_to_unmap_cluster() should lock_page() before mlocking
- LP: #1320946
* mm: hugetlb: fix softlockup when a large number of hugepages are freed.
- LP: #1320946
* hung_task: check the value of "sysctl_hung_task_timeout_sec"
- LP: #1320946
* DRM: armada: fix corruption while loading cursors
- LP: #1320946
* ALSA: ice1712: Fix boundary checks in PCM pointer ops
- LP: #1320946
* lib/percpu_counter.c: fix bad percpu counter state during suspend
- LP: #1320946
* md/raid1: r1buf_pool_alloc: free allocate pages when subsequent
allocation fails.
- LP: #1320946
* ALSA: hda - add headset mic detect quirk for a Dell laptop
- LP: #1297581, #1320946
* b43: Fix machine check error due to improper access of
B43_MMIO_PSM_PHY_HDR
- LP: #1320946
* x86-64, modify_ldt: Ban 16-bit segments on 64-bit kernels
- LP: #1320946
* target/tcm_fc: Fix use-after-free of ft_tpg
- LP: #1320946
* ib_srpt: Use correct ib_sg_dma primitives
- LP: #1320946
* Linux 3.13.11.1
- LP: #1320946
* Linux 3.13.11.2
- LP: #1320946
* hp-wireless: new driver for hp wireless button for Windows 8
- LP: #1303737
* x86, platform: Make HP_WIRELESS option text more descriptive
- LP: #1303737
* ACPI: blacklist win8 OSI for Dell Inspiron 7737
- LP: #1288161
Date: 2014-06-04 20:58:13.131720+00:00
Changed-By: Brad Figg <brad.figg at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/trusty/+source/linux/3.13.0-29.53
-------------- next part --------------
Sorry, changesfile not available.
More information about the Trusty-changes
mailing list