Ubuntu
linux package

CVE-2011-1577

Bug #795418 reported by Andy Whitcroft on 2011年06月10日

260

This bug affects 1 person

Affects		Status	Importance
linux (Ubuntu)	Fix Released	Medium	Unassigned
Hardy	Fix Released	Medium	Andy Whitcroft
Lucid	Fix Released	Medium	Andy Whitcroft
Maverick	Fix Released	Medium	Andy Whitcroft
Natty	Fix Released	Medium	Andy Whitcroft
Oneiric	Fix Released	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
linux-ec2 (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Andy Whitcroft
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-lts-backport-natty (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-lts-backport-oneiric (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Maverick	Fix Released	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Fix Released	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Fix Released	Medium	Unassigned
Natty	Fix Released	Medium	Unassigned
Oneiric	Fix Released	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned

Bug Description

Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.

Break-Fix: - 3eb8e74ec72736b9b9d728bad30484ec89c91dde

See original description

Tags:

Related branches

lp:ubuntu/lucid-proposed/linux-lts-backport-maverick

lp:ubuntu/maverick-proposed/linux-ti-omap4

lp:ubuntu/lucid-proposed/linux-ec2

lp:ubuntu/lucid-proposed/linux-mvl-dove

lp:ubuntu/maverick-proposed/linux-mvl-dove

lp:ubuntu/natty-proposed/linux-ti-omap4

CVE References

Revision history for this message

Andy Whitcroft (apw) wrote on 2011年06月10日: #1

CVE-2011-1577

tags: added: kernel-cve-tracking-bug

security vulnerability: no → yes

Changed in linux (Ubuntu Oneiric):

status: New → Fix Released

Changed in linux-fsl-imx51 (Ubuntu Hardy):

status: New → Invalid

Changed in linux-fsl-imx51 (Ubuntu Maverick):

status: New → Invalid

Changed in linux-fsl-imx51 (Ubuntu Natty):

status: New → Invalid

Changed in linux-fsl-imx51 (Ubuntu Oneiric):

status: New → Invalid

Changed in linux-lts-backport-maverick (Ubuntu Hardy):

status: New → Invalid

Changed in linux-lts-backport-maverick (Ubuntu Maverick):

status: New → Invalid

Changed in linux-lts-backport-maverick (Ubuntu Natty):

status: New → Invalid

Changed in linux-lts-backport-maverick (Ubuntu Oneiric):

status: New → Invalid

Changed in linux-mvl-dove (Ubuntu Hardy):

status: New → Invalid

Changed in linux-mvl-dove (Ubuntu Natty):

status: New → Invalid

Changed in linux-mvl-dove (Ubuntu Oneiric):

status: New → Invalid

Andy Whitcroft (apw) on 2011年06月10日

Changed in linux-ti-omap4 (Ubuntu Hardy):

status: New → Invalid

Changed in linux-ti-omap4 (Ubuntu Lucid):

status: New → Invalid

Changed in linux-lts-backport-natty (Ubuntu Hardy):

status: New → Invalid

Changed in linux-lts-backport-natty (Ubuntu Maverick):

status: New → Invalid

Changed in linux-lts-backport-natty (Ubuntu Natty):

status: New → Invalid

Changed in linux-lts-backport-natty (Ubuntu Oneiric):

status: New → Invalid

Changed in linux-ec2 (Ubuntu Hardy):

status: New → Invalid

Changed in linux-ec2 (Ubuntu Maverick):

status: New → Invalid

Changed in linux-ec2 (Ubuntu Natty):

status: New → Invalid

Changed in linux-ec2 (Ubuntu Oneiric):

status: New → Invalid

Changed in linux-lts-backport-natty (Ubuntu Lucid):

status: New → Fix Released

Andy Whitcroft (apw) on 2011年06月10日

description: updated

Andy Whitcroft (apw) on 2011年06月10日

Changed in linux (Ubuntu Natty):

assignee: nobody → Andy Whitcroft (apw)

status: New → In Progress

Changed in linux (Ubuntu Maverick):

assignee: nobody → Andy Whitcroft (apw)

status: New → In Progress

Changed in linux (Ubuntu Lucid):

assignee: nobody → Andy Whitcroft (apw)

status: New → In Progress

Changed in linux (Ubuntu Hardy):

status: New → In Progress

assignee: nobody → Andy Whitcroft (apw)

Changed in linux-lts-backport-maverick (Ubuntu Lucid):

status: New → Confirmed

Changed in linux-mvl-dove (Ubuntu Lucid):

status: New → Confirmed

Changed in linux-mvl-dove (Ubuntu Maverick):

status: New → Confirmed

Changed in linux-fsl-imx51 (Ubuntu Lucid):

status: New → Confirmed

Changed in linux-ec2 (Ubuntu Lucid):

status: New → Confirmed

Changed in linux-ti-omap4 (Ubuntu Maverick):

status: New → Confirmed

Changed in linux-ti-omap4 (Ubuntu Natty):

status: New → Confirmed

Changed in linux-ti-omap4 (Ubuntu Oneiric):

status: New → Confirmed

Andy Whitcroft (apw) on 2011年06月13日

Changed in linux-fsl-imx51 (Ubuntu Lucid):

assignee: nobody → Andy Whitcroft (apw)

status: Confirmed → Fix Committed

Changed in linux-ti-omap4 (Ubuntu Maverick):

status: Confirmed → Fix Committed

Changed in linux-ti-omap4 (Ubuntu Natty):

status: Confirmed → Fix Committed

Changed in linux-ti-omap4 (Ubuntu Oneiric):

status: Confirmed → Fix Committed

status: Fix Committed → Confirmed

Changed in linux (Ubuntu Hardy):

status: In Progress → Fix Committed

Changed in linux (Ubuntu Lucid):

status: In Progress → Fix Committed

Changed in linux (Ubuntu Maverick):

status: In Progress → Fix Committed

Changed in linux (Ubuntu Natty):

status: In Progress → Fix Committed

Changed in linux-ec2 (Ubuntu Lucid):

status: Confirmed → Fix Committed

Changed in linux-lts-backport-maverick (Ubuntu Lucid):

status: Confirmed → Fix Committed

Changed in linux-mvl-dove (Ubuntu Lucid):

status: Confirmed → Fix Committed

Changed in linux-mvl-dove (Ubuntu Maverick):

status: Confirmed → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年07月14日: #2

This bug was fixed in the package linux - 2.6.24-29.91

---------------
linux (2.6.24-29.91) hardy-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #801636

[Andy Whitcroft]

* custom binaries need VERSION_SIGNATURE updated during prepare
- LP: #794698

[Stefan Bader]

* (config) Disable COMPAT_VDSO for i386 Xen kernels
- LP: #794715
* XEN: Add yield points to blktap and blkback
- LP: #791212
- CVE-2010-4247
* xen: Fix memory corruption caused by double free
- LP: #705562

[Upstream Kernel Changes]

* agp: fix arbitrary kernel memory writes, CVE-1011-2022
- LP: #788684
- CVE-1011-2022
* agp: fix OOM and buffer overflow
- LP: #791918
- CVE-2011-1746
* tty: icount changeover for other main devices, CVE-2010-4076,
CVE-2010-4077
- LP: #794034
- CVE-2010-4077
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* Fix corrupted OSF partition table parsing
- LP: #796606
- CVE-2011-1163
* proc: avoid information leaks to non-privileged processes
- LP: #799906
- CVE-2011-0726
* proc: protect mm start_code/end_code in /proc/pid/stat
- LP: #799906
- CVE-2011-0726
* sctp: Fix a race between ICMP protocol unreachable and connect()
- LP: #799828
- CVE-2010-4526
* xen: blkback, blktap: Fix potential resource leak
- LP: #800254
-- Steve Conklin <email address hidden> 2011年6月24日 10:59:11 -0500

This bug was fixed in the package linux - 2.6.24-29.91
---------------
linux (2.6.24-29.91) hardy-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #801636
 [Andy Whitcroft]
 * custom binaries need VERSION_SIGNATURE updated during prepare
 - LP: #794698
 [Stefan Bader]
 * (config) Disable COMPAT_VDSO for i386 Xen kernels
 - LP: #794715
 * XEN: Add yield points to blktap and blkback
 - LP: #791212
 - CVE-2010-4247
 * xen: Fix memory corruption caused by double free
 - LP: #705562
 [Upstream Kernel Changes]
 * agp: fix arbitrary kernel memory writes, CVE-1011-2022
 - LP: #788684
 - CVE-1011-2022
 * agp: fix OOM and buffer overflow
 - LP: #791918
 - CVE-2011-1746
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #794034
 - CVE-2010-4077
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * Fix corrupted OSF partition table parsing
 - LP: #796606
 - CVE-2011-1163
 * proc: avoid information leaks to non-privileged processes
 - LP: #799906
 - CVE-2011-0726
 * proc: protect mm start_code/end_code in /proc/pid/stat
 - LP: #799906
 - CVE-2011-0726
 * sctp: Fix a race between ICMP protocol unreachable and connect()
 - LP: #799828
 - CVE-2010-4526
 * xen: blkback, blktap: Fix potential resource leak
 - LP: #800254
 -- Steve Conklin <sconklin@canonical.com> 2011年6月24日 10:59:11 -0500

Changed in linux (Ubuntu Hardy):

status: Fix Committed → Fix Released

Kees Cook (kees) on 2011年08月02日

Changed in linux-ti-omap4 (Ubuntu Oneiric):

status: Confirmed → Fix Committed

description: updated

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年08月02日: #3

This bug was fixed in the package linux - 2.6.35-30.56

---------------
linux (2.6.35-30.56) maverick-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #808934

[ Herton Ronaldo Krzesinski ]

* Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"

[ Upstream Kernel Changes ]

* Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
- LP: #805209

linux (2.6.35-30.55) maverick-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #801690

[ Jeremy Kerr ]

* SAUCE: cx23885: Fix argument to videobuf_dma_unmap
- LP: #800527

[ Manoj Iyer ]

* SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
- LP: #790754

[ Upstream Kernel Changes ]

* agp: fix OOM and buffer overflow
- LP: #791918
- CVE-2011-1746
* tty: icount changeover for other main devices, CVE-2010-4076,
CVE-2010-4077
- LP: #720189
- CVE-2010-4077
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* Fix corrupted OSF partition table parsing
- LP: #796606
- CVE-2011-1163
* can: Add missing socket check in can/bcm release.
- LP: #796502
- CVE-2011-1598
* nfs4: Ensure that ACL pages sent over NFS were not allocated from the
slab (v3) CVE-2011-1090
- LP: #800775
- CVE-2011-1090
-- Herton Ronaldo Krzesinski <email address hidden> 2011年7月11日 15:17:32 -0300

This bug was fixed in the package linux - 2.6.35-30.56
---------------
linux (2.6.35-30.56) maverick-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #808934
 [ Herton Ronaldo Krzesinski ]
 * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
 [ Upstream Kernel Changes ]
 * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
 - LP: #805209
linux (2.6.35-30.55) maverick-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #801690
 [ Jeremy Kerr ]
 * SAUCE: cx23885: Fix argument to videobuf_dma_unmap
 - LP: #800527
 [ Manoj Iyer ]
 * SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
 - LP: #790754
 [ Upstream Kernel Changes ]
 * agp: fix OOM and buffer overflow
 - LP: #791918
 - CVE-2011-1746
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * Fix corrupted OSF partition table parsing
 - LP: #796606
 - CVE-2011-1163
 * can: Add missing socket check in can/bcm release.
 - LP: #796502
 - CVE-2011-1598
 * nfs4: Ensure that ACL pages sent over NFS were not allocated from the
 slab (v3) CVE-2011-1090
 - LP: #800775
 - CVE-2011-1090
 -- Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com> 2011年7月11日 15:17:32 -0300

Changed in linux (Ubuntu Maverick):

status: Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年08月08日: #4

Download full text (45.4 KiB)

This bug was fixed in the package linux-lts-backport-maverick - 2.6.35-30.56~lucid1

---------------
linux-lts-backport-maverick (2.6.35-30.56~lucid1) lucid-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #811215

[ Herton Ronaldo Krzesinski ]

* Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"

[ Upstream Kernel Changes ]

* Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
- LP: #805209

linux (2.6.35-30.55) maverick-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #801690

[ Jeremy Kerr ]

* SAUCE: cx23885: Fix argument to videobuf_dma_unmap
- LP: #800527

[ Manoj Iyer ]

* SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
- LP: #790754

[ Upstream Kernel Changes ]

linux (2.6.35-30.54) maverick-proposed; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #794114

[ Upstream Kernel Changes ]

* Revert "xhci: Fix full speed bInterval encoding."
* Revert "USB: xhci - also free streams when resetting devices"
* Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
* Revert "USB: xhci - fix unsafe macro definitions"

linux (2.6.35-30.53) maverick-proposed; urgency=low

[ Upstream Kernel Changes ]

* xhci: Fix full speed bInterval encoding.
- LP: #792959

linux (2.6.35-30.52) maverick-proposed; urgency=low

[ Herton R. Krzesinski ]

* Release Tracking Bug
- LP: #790653

[ Stefan Bader ]

* Include nls_iso8859-1 for virtual images
- LP: #732046

[ Thomas Schlichter ]

* SAUCE: vesafb: mtrr module parameter is uint, not bool
- LP: #778043

[ Tim Gardner ]

* [Config] Add cachefiles.ko to virtual flavour
- LP: #770430

[ Upstream Kernel Changes ]

* Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
hang"
- LP: #772560
* Revert "TPM: Long default timeout fix"
- LP: #772560
* Revert "tpm_tis: Use timeouts returned from TPM"
- LP: #772560
* Revert "xen: set max_pfn_mapped to the last pfn mapped"
* CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
- LP: #765007
- CVE-2010-4565
* xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
CVE-2011-0711
- LP: #767740
- CVE-2011-0711
* Treat writes as new when holes span across page boundaries,
CVE-2011-0463
- LP: #770483
- CVE-2011-0463
* fs/partitions/ldm.c: fix oops caused by corrupted partition table,
CVE-2011-1017
- LP: #771382
- CVE-2011-1017
* qla2xxx:...

This bug was fixed in the package linux-lts-backport-maverick - 2.6.35-30.56~lucid1
---------------
linux-lts-backport-maverick (2.6.35-30.56~lucid1) lucid-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #811215
 [ Herton Ronaldo Krzesinski ]
 * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
 [ Upstream Kernel Changes ]
 * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
 - LP: #805209
linux (2.6.35-30.55) maverick-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #801690
 [ Jeremy Kerr ]
 * SAUCE: cx23885: Fix argument to videobuf_dma_unmap
 - LP: #800527
 [ Manoj Iyer ]
 * SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
 - LP: #790754
 [ Upstream Kernel Changes ]
 * agp: fix OOM and buffer overflow
 - LP: #791918
 - CVE-2011-1746
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * Fix corrupted OSF partition table parsing
 - LP: #796606
 - CVE-2011-1163
 * can: Add missing socket check in can/bcm release.
 - LP: #796502
 - CVE-2011-1598
 * nfs4: Ensure that ACL pages sent over NFS were not allocated from the
 slab (v3) CVE-2011-1090
 - LP: #800775
 - CVE-2011-1090
linux (2.6.35-30.54) maverick-proposed; urgency=low
 [ Brad Figg ]
 * Release Tracking Bug
 - LP: #794114
 [ Upstream Kernel Changes ]
 * Revert "xhci: Fix full speed bInterval encoding."
 * Revert "USB: xhci - also free streams when resetting devices"
 * Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
 * Revert "USB: xhci - fix unsafe macro definitions"
linux (2.6.35-30.53) maverick-proposed; urgency=low
 [ Upstream Kernel Changes ]
 * xhci: Fix full speed bInterval encoding.
 - LP: #792959
linux (2.6.35-30.52) maverick-proposed; urgency=low
 [ Herton R. Krzesinski ]
 * Release Tracking Bug
 - LP: #790653
 [ Stefan Bader ]
 * Include nls_iso8859-1 for virtual images
 - LP: #732046
 [ Thomas Schlichter ]
 * SAUCE: vesafb: mtrr module parameter is uint, not bool
 - LP: #778043
 [ Tim Gardner ]
 * [Config] Add cachefiles.ko to virtual flavour
 - LP: #770430
 [ Upstream Kernel Changes ]
 * Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
 hang"
 - LP: #772560
 * Revert "TPM: Long default timeout fix"
 - LP: #772560
 * Revert "tpm_tis: Use timeouts returned from TPM"
 - LP: #772560
 * Revert "xen: set max_pfn_mapped to the last pfn mapped"
 * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
 - LP: #765007
 - CVE-2010-4565
 * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
 CVE-2011-0711
 - LP: #767740
 - CVE-2011-0711
 * Treat writes as new when holes span across page boundaries,
 CVE-2011-0463
 - LP: #770483
 - CVE-2011-0463
 * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
 CVE-2011-1017
 - LP: #771382
 - CVE-2011-1017
 * qla2xxx: Make the FC port capability mutual exclusive.
 - LP: #772560
 * staging: usbip: bugfixes related to kthread conversion
 - LP: #772560
 * staging: usbip: bugfix add number of packets for isochronous frames
 - LP: #772560
 * staging: usbip: bugfix for isochronous packets and optimization
 - LP: #772560
 * staging: hv: Fix GARP not sent after Quick Migration
 - LP: #772560
 * staging: hv: use sync_bitops when interacting with the hypervisor
 - LP: #772560
 * irda: validate peer name and attribute lengths
 - LP: #772560
 * irda: prevent heap corruption on invalid nickname
 - LP: #772560
 * nilfs2: fix data loss in mmap page write for hole blocks
 - LP: #772560
 * ASoC: Explicitly say registerless widgets have no register
 - LP: #772560
 * ALSA: ens1371: fix Creative Ectiva support
 - LP: #772560
 * ROSE: prevent heap corruption with bad facilities
 - LP: #772560
 * Btrfs: Fix uninitialized root flags for subvolumes
 - LP: #772560
 * x86, mtrr, pat: Fix one cpu getting out of sync during resume
 - LP: #772560
 * UBIFS: do not read flash unnecessarily
 - LP: #772560
 * UBIFS: fix oops on error path in read_pnode
 - LP: #772560
 * UBIFS: fix debugging failure in dbg_check_space_info
 - LP: #772560
 * quota: Don't write quota info in dquot_commit()
 - LP: #772560
 * mm: avoid wrapping vm_pgoff in mremap()
 - LP: #772560
 * p54usb: IDs for two new devices
 - LP: #772560
 * b43: allocate receive buffers big enough for max frame len + offset
 - LP: #772560
 * Bluetooth: sco: fix information leak to userspace
 - LP: #772560
 * bridge: netfilter: fix information leak
 - LP: #772560
 * Bluetooth: bnep: fix buffer overflow
 - LP: #772560
 * Bluetooth: add support for Apple MacBook Pro 8,2
 - LP: #772560
 * char/tpm: Fix unitialized usage of data buffer
 - LP: #772560
 * netfilter: ip_tables: fix infoleak to userspace
 - LP: #772560
 * netfilter: arp_tables: fix infoleak to userspace
 - LP: #772560
 * netfilter: ipt_CLUSTERIP: fix buffer overflow
 - LP: #772560
 * ipv6: netfilter: ip6_tables: fix infoleak to userspace
 - LP: #772560
 * mfd: ab3100: world-writable debugfs *_priv files
 - LP: #772560
 * drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
 - LP: #772560
 * drivers/misc/ep93xx_pwm.c: world-writable sysfs files
 - LP: #772560
 * econet: 4 byte infoleak to the network
 - LP: #772560
 * sound/oss: remove offset from load_patch callbacks
 - LP: #772560
 * sound: oss: midi_synth: check get_user() return value
 - LP: #772560
 * gro: Reset dev pointer on reuse
 - LP: #772560
 * gro: reset skb_iif on reuse
 - LP: #772560
 * x86, microcode, AMD: Extend ucode size verification
 - LP: #772560
 * Squashfs: handle corruption of directory structure
 - LP: #772560
 * atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
 - LP: #772560
 * ext4: fix credits computing for indirect mapped files
 - LP: #772560
 * nfsd: fix auth_domain reference leak on nlm operations
 - LP: #772560
 * inet_diag: Make sure we actually run the same bytecode we audited.
 - LP: #772560
 * xfs: zero proper structure size for geometry calls
 - LP: #772560
 * cifs: always do is_path_accessible check in cifs_mount
 - LP: #772560
 * video: sn9c102: world-wirtable sysfs files
 - LP: #772560
 * UBIFS: restrict world-writable debugfs files
 - LP: #772560
 * NET: cdc-phonet, handle empty phonet header
 - LP: #772560
 * x86: Fix a bogus unwind annotation in lib/semaphore_32.S
 - LP: #772560
 * tioca: Fix assignment from incompatible pointer warnings
 - LP: #772560
 * mca.c: Fix cast from integer to pointer warning
 - LP: #772560
 * ramfs: fix memleak on no-mmu arch
 - LP: #772560
 * MAINTAINERS: update STABLE BRANCH info
 - LP: #772560
 * UBIFS: fix oops when R/O file-system is fsync'ed
 - LP: #772560
 * x86, cpu: AMD errata checking framework
 - LP: #772560
 * x86, cpu: Clean up AMD erratum 400 workaround
 - LP: #772560
 * x86, AMD: Set ARAT feature on AMD processors
 - LP: #772560
 * x86, amd: Disable GartTlbWlkErr when BIOS forgets it
 - LP: #772560
 * USB: ftdi_sio: Added IDs for CTI USB Serial Devices
 - LP: #772560
 * USB: ftdi_sio: add PID for OCT DK201 docking station
 - LP: #772560
 * USB: ftdi_sio: add ids for Hameg HO720 and HO730
 - LP: #772560
 * USB: option: Add new ONDA vendor id and product id for ONDA MT825UP
 - LP: #772560
 * USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
 - LP: #772560
 * next_pidmap: fix overflow condition
 - LP: #772560
 * proc: do proper range check on readdir offset
 - LP: #772560
 * USB: EHCI: unlink unused QHs when the controller is stopped
 - LP: #772560
 * USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
 - LP: #772560
 * USB: xhci - fix unsafe macro definitions
 - LP: #772560
 * USB: xhci - fix math in xhci_get_endpoint_interval()
 - LP: #772560
 * x86, cpu: Fix regression in AMD errata checking code
 - LP: #772560
 * Input: synaptics - fix crash in synaptics_module_init()
 - LP: #772560
 * ath9k: fix a chip wakeup related crash in ath9k_start
 - LP: #772560
 * ath: add missing regdomain pair 0x5c mapping
 - LP: #772560
 * block, blk-sysfs: Fix an err return path in blk_register_queue()
 - LP: #772560
 * p54: Initialize extra_len in p54_tx_80211
 - LP: #772560
 * x86, gart: Make sure GART does not map physmem above 1TB
 - LP: #772560
 * intel-iommu: Unlink domain from iommu
 - LP: #772560
 * intel-iommu: Fix get_domain_for_dev() error path
 - LP: #772560
 * drm/radeon/kms: fix bad shift in atom iio table parser
 - LP: #772560
 * NFS: nfs_wcc_update_inode() should set nfsi->attr_gencount
 - LP: #772560
 * serial/imx: read cts state only after acking cts change irq
 - LP: #772560
 * ASoC: Fix output PGA enabling in wm_hubs CODECs
 - LP: #772560
 * kconfig: Avoid buffer underrun in choice input
 - LP: #772560
 * UBIFS: fix master node recovery
 - LP: #772560
 * Remove extra struct page member from the buffer info structure
 - LP: #772560
 * dasd: correct device table
 - LP: #772560
 * iwlagn: Support new 5000 microcode.
 - LP: #772560
 * uvcvideo: Fix descriptor parsing for video output devices
 - LP: #772560
 * ALSA: hda - VIA: Add missing support for VT1718S in A-A path
 - LP: #772560
 * ALSA: hda - VIA: Fix stereo mixer recording no sound issue
 - LP: #772560
 * iwlwifi: fix skb usage after free
 - LP: #772560
 * intel-iommu: Fix use after release during device attach
 - LP: #772560
 * USB: Fix unplug of device with active streams
 - LP: #772560
 * USB: xhci - also free streams when resetting devices
 - LP: #772560
 * 2.6.35.y: Revert "SH: Add missing consts to sys_execve() declaration"
 - LP: #772560
 * 2.6.35.13 longterm review
 - LP: #772560
 * release-2.6.35.13
 - LP: #772560
 * xen: events: do not unmask event channels on resume
 - LP: #681083
 * ALSA: sound/pci/asihpi: check adapter index in hpi_ioctl, CVE-2011-1169
 - LP: #785331
 - CVE-2011-1169
 * mpt2sas: prevent heap overflows and unchecked reads, CVE-2011-1494
 - LP: #787145
 - CVE-2011-1494
 * can: add missing socket check in can/raw release, CVE-2011-1748
 - LP: #788694
 - CVE-2011-1748
 * agp: fix arbitrary kernel memory writes, CVE-1011-2022
 - LP: #788684
 - CVE-1011-2022
linux (2.6.35-29.51) maverick-proposed; urgency=low
 [ Steve Conklin ]
 * Release Tracking Bug
 - LP: #760928
 [ Brad Figg ]
 * [Config] Set CONFIG_NR_CPUS=256 for amd64 generic
 - LP: #737124
 [ Kees Cook ]
 * SAUCE: nx-emu: further clarify dmesg reporting
 - LP: #745181
 [ Loïc Minier ]
 * Include nls_cp437 module in virtual for fat
 - LP: #732046
 [ Manoj Iyer ]
 * SAUCE: thinkpad-acpi: module autoloading for newer Lenovo ThinkPads.
 - LP: #745217
 * SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
 - LP: #746652
 [ Mel Gorman ]
 * (pre-stable) mm: page allocator: adjust the per-cpu counter threshold
 when memory is low
 - LP: #719446
 [ Tim Gardner ]
 * [Config] updateconfigs after 2.6.35.12
 - LP: #747520
 * SAUCE: staging: hv: Fixed issue with scheduling while atomic in
 hv_vmbus
 - LP: #752064
 * SAUCE: Backport of mainline loss of network fix for Hyper-V
 - LP: #752064
 [ Upstream Kernel Changes ]
 * Revert "slab: Fix missing DEBUG_SLAB last user"
 - LP: #747520
 * PM / Hibernate: Improve comments in hibernate_preallocate_memory()
 - LP: #737208
 * PM / Hibernate: Make default image size depend on total RAM size
 - LP: #737208
 * irda: prevent integer underflow in IRLMP_ENUMDEVICES, CVE-2010-4529
 - LP: #737823
 - CVE-2010-4529
 * perf session: Invalidate last_match when removing threads from rb_tree
 - LP: #747520
 * Fix cred leak in AF_NETLINK
 - LP: #747520
 * staging: usbip: remove double giveback of URB
 - LP: #747520
 * USB: EHCI: ASPM quirk of ISOC on AMD SB800
 - LP: #747520
 * rt2x00: add device id for windy31 usb device
 - LP: #747520
 * ALSA: snd-usb-us122l: Fix missing NULL checks
 - LP: #747520
 * hwmon: (via686a) Initialize fan_div values
 - LP: #747520
 * USB: serial: handle Data Carrier Detect changes
 - LP: #747520
 * USB: CP210x Add two device IDs
 - LP: #747520
 * USB: CP210x Removed incorrect device ID
 - LP: #747520
 * USB: usb-storage: unusual_devs update for Cypress ATACB
 - LP: #747520
 * USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u
 external hard drive enclosure
 - LP: #747520
 * USB: usb-storage: unusual_devs entry for CamSport Evo
 - LP: #747520
 * USB: usb-storage: unusual_devs entry for Coby MP3 player
 - LP: #747520
 * USB: serial: Updated support for ICOM devices
 - LP: #747520
 * USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
 - LP: #747520
 * USB: EHCI: ASPM quirk of ISOC on AMD Hudson
 - LP: #747520
 * USB: EHCI: fix DMA deallocation bug
 - LP: #747520
 * USB: g_printer: fix bug in module parameter definitions
 - LP: #747520
 * USB: io_edgeport: fix the reported firmware major and minor
 - LP: #747520
 * USB: ti_usb: fix module removal
 - LP: #747520
 * USB: Storage: Add unusual_devs entry for VTech Kidizoom
 - LP: #747520
 * USB: ftdi_sio: add ST Micro Connect Lite uart support
 - LP: #747520
 * USB: cdc-acm: Adding second ACM channel support for Nokia N8
 - LP: #747520
 * USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research
 spectrograph
 - LP: #747520
 * USB: prevent buggy hubs from crashing the USB stack
 - LP: #747520
 * staging: comedi: add support for newer jr3 1-channel pci board
 - LP: #747520
 * staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
 - LP: #747520
 * Staging: hv: fix sysfs symlink on hv block device
 - LP: #747520
 * staging: hv: Enable sending GARP packet after live migration
 - LP: #747520
 * iwlagn: enable only rfkill interrupt when device is down
 - LP: #747520
 * ath9k: Fix bug in delimiter padding computation
 - LP: #747520
 * fix medium error problems with some arrays which can cause data
 corruption
 - LP: #747520
 * libsas: fix runaway error handler problem
 - LP: #747520
 * mpt2sas: Fix device removal handshake for zoned devices
 - LP: #747520
 * mpt2sas: Correct resizing calculation for max_queue_depth
 - LP: #747520
 * mpt2sas: Kernel Panic during Large Topology discovery
 - LP: #747520
 * radio-aimslab.c: Fix gcc 4.5+ bug
 - LP: #747520
 * em28xx: Fix audio input for Terratec Grabby
 - LP: #747520
 * ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
 - LP: #747520
 * ALSA: HDA: Fix dmesg output of HDMI supported bits
 - LP: #747520
 * ALSA: hda - Fix memory leaks in conexant jack arrays
 - LP: #747520
 * input: bcm5974: Add support for MacBookAir3
 - LP: #747520
 * ALSA: hrtimer: handle delayed timer interrupts
 - LP: #747520
 * ASoC: WM8990: msleep() takes milliseconds not jiffies
 - LP: #747520
 * ASoC: Blackfin AC97: fix build error after multi-component update
 - LP: #747520
 * NFS: Fix "kernel BUG at fs/aio.c:554!"
 - LP: #747520
 * rtc-cmos: fix suspend/resume
 - LP: #747520
 * iwlagn: Re-enable RF_KILL interrupt when down
 - LP: #747520
 * rapidio: fix hang on RapidIO doorbell queue full condition
 - LP: #747520
 * PCI: pci-stub: ignore zero-length id parameters
 - LP: #747520
 * virtio: remove virtio-pci root device
 - LP: #747520
 * ds2760_battery: Fix calculation of time_to_empty_now
 - LP: #747520
 * p54: fix sequence no. accounting off-by-one error
 - LP: #747520
 * i2c: Unregister dummy devices last on adapter removal
 - LP: #747520
 * serial: unbreak billionton CF card
 - LP: #747520
 * ptrace: use safer wake up on ptrace_detach()
 - LP: #747520
 * x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
 - LP: #747520
 * fix jiffy calculations in calibrate_delay_direct to handle overflow
 - LP: #747520
 * drivers: update to pl2303 usb-serial to support Motorola cables
 - LP: #747520
 * klist: Fix object alignment on 64-bit.
 - LP: #747520
 * powerpc: Fix some 6xx/7xxx CPU setup functions
 - LP: #747520
 * parisc : Remove broken line wrapping handling pdc_iodc_print()
 - LP: #747520
 * kernel/smp.c: fix smp_call_function_many() SMP race
 - LP: #747520
 * hostap_cs: fix sleeping function called from invalid context
 - LP: #747520
 * md: fix regression with re-adding devices to arrays with no metadata
 - LP: #747520
 * pata_mpc52xx: inherit from ata_bmdma_port_ops
 - LP: #747520
 * TPM: Long default timeout fix
 - LP: #747520
 * tpm_tis: Use timeouts returned from TPM
 - LP: #747520
 * SELinux: define permissions for DCB netlink messages
 - LP: #747520
 * SELinux: do not compute transition labels on mountpoint labeled
 filesystems
 - LP: #747520
 * ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
 - LP: #747520
 * dm: dont take i_mutex to change device size
 - LP: #747520
 * dm mpath: disable blk_abort_queue
 - LP: #747520
 * drm/radeon/kms: add quirk for Mac Radeon HD 2600 card
 - LP: #747520
 * drm/radeon/kms: make the mac rv630 quirk generic
 - LP: #747520
 * drm/radeon/kms: add pll debugging output
 - LP: #747520
 * drm/radeon: remove 0x4243 pci id
 - LP: #747520
 * drm/radeon/kms: fix s/r issues with bios scratch regs
 - LP: #747520
 * drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
 - LP: #747520
 * drm/i915: Add dependency on CONFIG_TMPFS
 - LP: #747520
 * x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask
 after switching mm
 - LP: #747520
 * usb: Realloc xHCI structures after a hub is verified.
 - LP: #747520
 * sched: Move sched_avg_update() to update_cpu_load()
 - LP: #747520
 * sched: Increment cache_nice_tries only on periodic lb
 - LP: #747520
 * sched: Try not to migrate higher priority RT tasks
 - LP: #747520
 * sched: Give CPU bound RT tasks preference
 - LP: #747520
 * sched: suppress RCU lockdep splat in task_fork_fair
 - LP: #747520
 * sched: Do not consider SCHED_IDLE tasks to be cache hot
 - LP: #747520
 * sched: Set group_imb only a task can be pulled from the busiest cpu
 - LP: #747520
 * sched: Force balancing on newidle balance if local group has capacity
 - LP: #747520
 * sched: Drop group_capacity to 1 only if local group has extra capacity
 - LP: #747520
 * sched: Fix softirq time accounting
 - LP: #747520
 * sched: Consolidate account_system_vtime extern declaration
 - LP: #747520
 * sched: Remove unused PF_ALIGNWARN flag
 - LP: #747520
 * sched: Add a PF flag for ksoftirqd identification
 - LP: #747520
 * sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
 - LP: #747520
 * x86: Add IRQ_TIME_ACCOUNTING
 - LP: #747520
 * sched: Do not account irq time to current task
 - LP: #747520
 * sched: Remove irq time from available CPU power
 - LP: #747520
 * sched: Call tick_check_idle before __irq_enter
 - LP: #747520
 * sched: Export account_system_vtime()
 - LP: #747520
 * sched, cgroup: Fixup broken cgroup movement
 - LP: #747520
 * sched: Use group weight, idle cpu metrics to fix imbalances during idle
 - LP: #747520
 * kernel/user.c: add lock release annotation on free_user()
 - LP: #747520
 * NFSD: memory corruption due to writing beyond the stat array
 - LP: #747520
 * mptfusion: mptctl_release is required in mptctl.c
 - LP: #747520
 * mptfusion: Fix Incorrect return value in mptscsih_dev_reset
 - LP: #747520
 * ocfs2_connection_find() returns pointer to bad structure
 - LP: #747520
 * x86/pvclock: Zero last_value on resume
 - LP: #747520
 * av7110: check for negative array offset
 - LP: #747520
 * bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
 - LP: #747520
 * CRED: Fix kernel panic upon security_file_alloc() failure.
 - LP: #747520
 * CRED: Fix BUG() upon security_cred_alloc_blank() failure
 - LP: #747520
 * CRED: Fix memory and refcount leaks upon security_prepare_creds()
 failure
 - LP: #747520
 * isdn: hisax: Replace the bogus access to irq stats
 - LP: #747520
 * scsi_dh_alua: add netapp to dev list
 - LP: #747520
 * scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
 - LP: #747520
 * nfsd: correctly handle return value from nfsd_map_name_to_*
 - LP: #747520
 * s390: remove task_show_regs
 - LP: #747520
 * PM / Hibernate: Return error code when alloc_image_page() fails
 - LP: #747520
 * fs/partitions: Validate map_count in Mac partition tables
 - LP: #747520
 * ALSA: HDA: Add position_fix quirk for an Asus device
 - LP: #718402, #747520
 * ALSA: caiaq - Fix possible string-buffer overflow
 - LP: #747520
 * radio-aimslab.c needs #include <linux/delay.h>
 - LP: #747520
 * ARM: Ensure predictable endian state on signal handler entry
 - LP: #747520
 * acer-wmi: Fix capitalisation of GUID
 - LP: #747520
 * eCryptfs: Copy up lower inode attrs in getattr
 - LP: #747520
 * platform: x86: acer-wmi: world-writable sysfs threeg file
 - LP: #747520
 * platform: x86: asus_acpi: world-writable procfs files
 - LP: #747520
 * platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial
 files
 - LP: #747520
 * genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
 - LP: #747520
 * usb: musb: omap2430: fix kernel panic on reboot
 - LP: #747520
 * USB: add quirks entry for Keytouch QWERTY Panel
 - LP: #747520
 * USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
 - LP: #747520
 * USB: Add quirk for Samsung Android phone modem
 - LP: #747520
 * p54pci: update receive dma buffers before and after processing
 - LP: #747520
 * sierra: add new ID for Airprime/Sierra USB IP modem
 - LP: #747520
 * staging: usbip: vhci: update reference count for usb_device
 - LP: #747520
 * staging: usbip: vhci: give back URBs from in-flight unlink requests
 - LP: #747520
 * staging: usbip: vhci: refuse to enqueue for dead connections
 - LP: #747520
 * staging: usbip: vhci: use urb->dev->portnum to find port
 - LP: #747520
 * epoll: prevent creating circular epoll structures
 - LP: #747520
 * ldm: corrupted partition table can cause kernel oops
 - LP: #747520
 * md: correctly handle probe of an 'mdp' device.
 - LP: #747520
 * x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
 - LP: #747520
 * xhci: Avoid BUG() in interrupt context
 - LP: #747520
 * xhci: Clarify some expressions in the TRB math
 - LP: #747520
 * xhci: Fix errors in the running total calculations in the TRB math
 - LP: #747520
 * xhci: Fix an error in count_sg_trbs_needed()
 - LP: #747520
 * x25: Do not reference freed memory.
 - LP: #747520
 * Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in
 a right number.
 - LP: #747520
 * drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
 - LP: #747520
 * mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
 - LP: #747520
 * x86: Use u32 instead of long to set reset vector back to 0
 - LP: #747520
 * fuse: fix hang of single threaded fuseblk filesystem
 - LP: #747520
 * clockevents: Prevent oneshot mode when broadcast device is periodic
 - LP: #747520
 * ext2: Fix link count corruption under heavy link+rename load
 - LP: #747520
 * p54usb: add Senao NUB-350 usbid
 - LP: #747520
 * dccp: fix oops on Reset after close
 - LP: #747520
 * e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup
 instead
 - LP: #747520
 * r8169: disable ASPM
 - LP: #747520
 * usb: iowarrior: don't trust report_size for buffer size
 - LP: #747520
 * arp_notify: unconditionally send gratuitous ARP for
 NETDEV_NOTIFY_PEERS.
 - LP: #747520
 * CIFS: Fix oplock break handling (try #2)
 - LP: #747520
 * cpuset: add a missing unlock in cpuset_write_resmask()
 - LP: #747520
 * keyboard: integer underflow bug
 - LP: #747520
 * RxRPC: Fix v1 keys
 - LP: #747520
 * ixgbe: fix for 82599 erratum on Header Splitting
 - LP: #747520
 * mm: fix possible cause of a page_mapped BUG
 - LP: #747520
 * powerpc/kexec: Fix orphaned offline CPUs across kexec
 - LP: #747520
 * netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
 - LP: #747520
 * nfsd: wrong index used in inner loop
 - LP: #747520
 * r8169: use RxFIFO overflow workaround for 8168c chipset.
 - LP: #747520
 * net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
 - LP: #747520
 * ip6ip6-autoload-ip6-tunnel
 - LP: #747520
 * hwmon/f71882fg: Set platform drvdata to NULL later
 - LP: #747520
 * mtd: add "platform:" prefix for platform modalias
 - LP: #747520
 * libata: no special completion processing for EH commands
 - LP: #747520
 * MIPS: MTX-1: Make au1000_eth probe all PHY addresses
 - LP: #747520
 * x86/mm: Handle mm_fault_error() in kernel space
 - LP: #747520
 * ftrace: Fix memory leak with function graph and cpu hotplug
 - LP: #747520
 * x86: Fix panic when handling "mem={invalid}" param
 - LP: #553464, #747520
 * x86: Emit "mem=nopentium ignored" warning when not supported
 - LP: #553464, #747520
 * ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
 - LP: #747520
 * ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
 - LP: #747520
 * ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
 - LP: #747520
 * RDMA/cma: Fix crash in request handlers
 - LP: #747520
 * IB/cm: Bump reference count on cm_id before invoking callback
 - LP: #747520
 * x86, quirk: Fix SB600 revision check
 - LP: #747520
 * ath9k_hw: Fix incorrect macversion and macrev checks
 - LP: #747520
 * USB: serial/kobil_sct, fix potential tty NULL dereference
 - LP: #747520
 * USB: serial: ch341: add new id
 - LP: #747520
 * xhci: Fix cycle bit calculation during stall handling.
 - LP: #747520
 * ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
 - LP: #747520
 * PCI: add more checking to ICH region quirks
 - LP: #747520
 * PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
 - LP: #747520
 * PCI: sysfs: Fix failure path for addition of "vpd" attribute
 - LP: #747520
 * ALSA: ctxfi - Fix incorrect SPDIF status bit mask
 - LP: #747520
 * ALSA: ctxfi - Fix SPDIF status retrieval
 - LP: #747520
 * ALSA: ctxfi - Clear input settings before initialization
 - LP: #747520
 * SUNRPC: Ensure we always run the tk_callback before tk_action
 - LP: #747520
 * perf, powerpc: Handle events that raise an exception without
 overflowing
 - LP: #747520
 * ext3: Always set dx_node's fake_dirent explicitly.
 - LP: #747520
 * call_function_many: fix list delete vs add race
 - LP: #747520
 * call_function_many: add missing ordering
 - LP: #747520
 * x86: Flush TLB if PGD entry is changed in i386 PAE mode
 - LP: #747520
 * smp_call_function_many: handle concurrent clearing of mask
 - LP: #747520
 * fix per-cpu flag problem in the cpu affinity checkers
 - LP: #747520
 * i2c: Fix typo in instantiating-devices document
 - LP: #747520
 * mmc: sdio: remember new card RCA when redetecting card
 - LP: #747520
 * x86, binutils, xen: Fix another wrong size directive
 - LP: #747520
 * hwmon: (sht15) Fix integer overflow in humidity calculation
 - LP: #747520
 * aio: wake all waiters when destroying ctx
 - LP: #747520
 * shmem: let shared anonymous be nonlinear again
 - LP: #747520
 * PCI hotplug: acpiphp: set current_state to D0 in register_slot
 - LP: #747520
 * xen: set max_pfn_mapped to the last pfn mapped
 - LP: #747520
 * Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal
 code
 - LP: #747520
 * ext3: skip orphan cleanup on rocompat fs
 - LP: #747520
 * procfs: fix /proc/<pid>/maps heap check
 - LP: #747520
 * proc: protect mm start_code/end_code in /proc/pid/stat
 - LP: #747520
 * fbcon: Bugfix soft cursor detection in Tile Blitting
 - LP: #747520
 * nfsd41: modify the members value of nfsd4_op_flags
 - LP: #747520
 * uvcvideo: Fix uvc_fixup_video_ctrl() format search
 - LP: #747520
 * ehci-hcd: Bug fix: don't set a QH's Halt bit
 - LP: #747520
 * USB: uss720 fixup refcount position
 - LP: #747520
 * USB: cdc-acm: fix memory corruption / panic
 - LP: #747520
 * USB: cdc-acm: fix potential null-pointer dereference
 - LP: #747520
 * USB: cdc-acm: fix potential null-pointer dereference on disconnect
 - LP: #747520
 * Input: xen-kbdfront - advertise either absolute or relative coordinates
 - LP: #747520
 * SUNRPC: Never reuse the socket port after an xs_close()
 - LP: #747520
 * fs: call security_d_instantiate in d_obtain_alias V2
 - LP: #747520
 * dcdbas: force SMI to happen when expected
 - LP: #747520
 * ALSA: hda - Fix SPDIF out regression on ALC889
 - LP: #747520
 * ALSA: Fix yet another race in disconnection
 - LP: #747520
 * perf: Better fit max unprivileged mlock pages for tools needs
 - LP: #747520
 * myri10ge: fix rmmod crash
 - LP: #747520
 * cciss: fix lost command issue
 - LP: #747520
 * sound/oss/opl3: validate voice and channel indexes
 - LP: #747520
 * mac80211: initialize sta->last_rx in sta_info_alloc
 - LP: #747520
 * ses: show devices for enclosures with no page 7
 - LP: #747520
 * ses: Avoid kernel panic when lun 0 is not mapped
 - LP: #747520
 * eCryptfs: Unlock page in write_begin error path
 - LP: #747520
 * eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
 - LP: #747520
 * classmate-laptop: depends on RFKILL or RFKILL=n
 - LP: #747520
 * netfilter: arpt_mangle: fix return values of checkentry
 - LP: #747520
 * Patch cab9e9848b9a8283b0504a2d7c435a9f5ba026de to the 2.6.35.y stable
 tree
 - LP: #747520
 * revert misc: uss720.c: add another vendor/product ID
 - LP: #747520
 * cfg80211: fix can_beacon_sec_chan, reenable HT40
 - LP: #747520
 * USB: isp1760: Implement solution for erratum 2
 - LP: #747520
 * xhci: Update internal dequeue pointers after stalls.
 - LP: #747520
 * perf: Fix tear-down of inherited group events
 - LP: #747520
 * net: Fix ip link add netns oops
 - LP: #747520
 * hwmon: (w83627ehf) Driver cleanup
 - LP: #747520
 * md: Fix - again - partition detection when array becomes active
 - LP: #747520
 * iwl3945: remove plcp check
 - LP: #747520
 * KVM: enlarge number of possible CPUID leaves
 - LP: #747520
 * KVM: i8259: initialize isr_ack
 - LP: #747520
 * KVM: VMX: Fix host userspace gsbase corruption
 - LP: #747520
 * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
 - LP: #747520
 * Release 2.6.35.12
 - LP: #747520
 * drm/radeon/kms: check AA resolve registers on r300, CVE-2011-1016
 - LP: #745686
 - CVE-2011-1016
 * drm/radeon: fix regression with AA resolve checking, CVE-2011-1016
 - LP: #745686
 - CVE-2011-1016
 * staging: hv: fix netvsc sleeping while atomic
 - LP: #752064
 * staging: hv: Fix the WARN_ON condition in free_net_device()
 - LP: #752064
 * Yama: fix default relationship to check thread group
 - LP: #737676
linux (2.6.35-28.50) maverick-proposed; urgency=low
 [ Brad Figg ]
 * Release Tracking Bug
 - LP: #734399
 [ Corentin Chary ]
 * SAUCE: (drop after 2.6.38) eeepc-wmi: reorder keymap
 - LP: #689393
 * SAUCE: (drop after 2.6.38) eeepc-wmi: add wlan key found on 1015P
 - LP: #689393
 [ Keng-Yu Lin ]
 * SAUCE: eeepc-wmi: set the touchpad toggle key code to F22
 - LP: #689393
 [ Tim Gardner ]
 * [Config] CONFIG_BOOT_PRINTK_DELAY=y
 - LP: #733191
 [ Upstream Kernel Changes ]
 * Revert "drm/radeon/bo: add some fallback placements for VRAM only
 objects."
 - LP: #652934
 * eeepc-wmi: add additional hotkeys
 - LP: #689393
 * xen: don't bother to stop other cpus on shutdown/reboot
 - LP: #727814
 * Yama: use thread group leader when creating match
 - LP: #729839
 * mmc: sdhci-pci: add ricoh e822 pci id with device specific quirks
 - LP: #730820
linux (2.6.35-28.49) maverick-proposed; urgency=low
 [ Brad Figg ]
 * Release Tracking Bug
 - LP: #726796
 [ Colin Ian King ]
 * SAUCE: Dell All-In-One: Remove need for Dell module alias
 [ Manoj Iyer ]
 * SAUCE: add ricoh 0xe823 pci id.
 - LP: #717435
 [ Upstream Kernel Changes ]
 * virtio_net: Add schedule check to napi_enable call
 - LP: #579276
 * mmc: make sdhci work with ricoh mmc controller
 - LP: #717435
 * NFS: fix the return value of nfs_file_fsync()
 - LP: #585657
 * rt2x00: Pad beacon to multiple of 32 bits.
 - LP: #659143
 * rt2x00: Fix firmware loading regression on x86_64.
 - LP: #659143
 * rt2x00: Check for errors from skb_pad() calls
 - LP: #659143
 * block: check for proper length of iov entries earlier in
 blk_rq_map_user_iov(), CVE-2010-4163
 - LP: #721504
 - CVE-2010-4163
 * tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 - CVE-2010-4076
 * rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
 - LP: #721455
 - CVE-2010-4175
linux (2.6.35-27.48) maverick-proposed; urgency=low
 [ Steve Conklin ]
 * Release Tracking Bug
 - LP: #723335
 [ Upstream Kernel Changes ]
 * thinkpad-acpi: avoid keymap pitfall
 - LP: #722747
linux (2.6.35-27.47) maverick-proposed; urgency=low
 [ Brad Figg ]
 * Release Tracking Bug
 - LP: #716532
 [ Upstream Kernel Changes ]
 * Revert "USB: gadget: Allow function access to device ID data during
 bind()"
 - LP: #714732
 * net: fix rds_iovec page count overflow, CVE-2010-3865
 - LP: #709153
 - CVE-2010-3865
 * Input: fix typo in keycode validation supporting large scancodes
 - LP: #658198
 * net: ax25: fix information leak to userland, CVE-2010-3875
 - LP: #710714
 - CVE-2010-3875
 * net: ax25: fix information leak to userland harder, CVE-2010-3875
 - LP: #710714
 - CVE-2010-3875
 * net: packet: fix information leak to userland, CVE-2010-3876
 - LP: #710714
 - CVE-2010-3876
 * net: tipc: fix information leak to userland, CVE-2010-3877
 - LP: #711291
 - CVE-2010-3877
 * posix-cpu-timers: workaround to suppress the problems with mt exec,
 CVE-2010-4248
 - LP: #712609
 - CVE-2010-4248
 * sys_semctl: fix kernel stack leakage, CVE-2010-4083
 - LP: #712749
 - CVE-2010-4083
 * thinkpad-acpi: lock down size of hotkey keymap
 - LP: #712174
 * thinkpad-acpi: add support for model-specific keymaps
 - LP: #712174
 * thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
 - LP: #712174
 * x86, hotplug: Use mwait to offline a processor, fix the legacy case
 - LP: #714732
 * fuse: verify ioctl retries
 - LP: #714732
 * fuse: fix ioctl when server is 32bit
 - LP: #714732
 * ALSA: hda: Use position_fix=1 for Acer Aspire 5538 to enable capture on
 internal mic
 - LP: #685161, #714732
 * ALSA: hda: Use model=lg quirk for LG P1 Express to enable playback and
 capture
 - LP: #595482, #714732
 * drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP
 - LP: #714732
 * drm/kms: remove spaces from connector names (v2)
 - LP: #714732
 * drm/radeon/kms: fix vram base calculation on rs780/rs880
 - LP: #714732
 * nohz: Fix printk_needs_cpu() return value on offline cpus
 - LP: #714732
 * nohz: Fix get_next_timer_interrupt() vs cpu hotplug
 - LP: #714732
 * nfsd: Fix possible BUG_ON firing in set_change_info
 - LP: #714732
 * NFS: Fix fcntl F_GETLK not reporting some conflicts
 - LP: #714732
 * sunrpc: prevent use-after-free on clearing XPT_BUSY
 - LP: #714732
 * hwmon: (adm1026) Allow 1 as a valid divider value
 - LP: #714732
 * hwmon: (adm1026) Fix setting fan_div
 - LP: #714732
 * EDAC: Fix workqueue-related crashes
 - LP: #714732
 * amd64_edac: Fix interleaving check
 - LP: #714732
 * ASoC: Fix swap of left and right channels for WM8993/4 speaker boost
 gain
 - LP: #714732
 * ASoC: Fix off by one error in WM8994 EQ register bank size
 - LP: #714732
 * ASoC: WM8580: Fix R8 initial value
 - LP: #714732
 * ASoC: fix deemphasis control in wm8904/55/60 codecs
 - LP: #714732
 * bootmem: Add alloc_bootmem_align()
 - LP: #714732
 * x86, xsave: Use alloc_bootmem_align() instead of alloc_bootmem()
 - LP: #714732
 * IB/uverbs: Handle large number of entries in poll CQ
 - LP: #714732
 * PM / Hibernate: Fix PM_POST_* notification with user-space suspend
 - LP: #714732
 * ARM: 6535/1: V6 MPCore v6_dma_inv_range and v6_dma_flush_range RWFO fix
 - LP: #714732
 * qla2xxx: Correct issue where NPIV-config data was not being allocated
 for 82xx parts.
 - LP: #714732
 * qla2xxx: Populate Command Type 6 LUN field properly.
 - LP: #714732
 * llc: fix a device refcount imbalance
 - LP: #714732
 * ath9k: Disable SWBA interrupt on remove_interface
 - LP: #714732
 * ath9k: fix bug in tx power
 - LP: #714732
 * mac80211: Fix BUG in pskb_expand_head when transmitting shared skbs
 - LP: #714732
 * SPARC/LEON: removed constant timer initialization as if HZ=100, now it
 reflects the value of HZ
 - LP: #714732
 * sparc64: Delete prom_puts() unused.
 - LP: #714732
 * sparc: Remove prom_pathtoinode()
 - LP: #714732
 * sparc: Kill prom devops_{32,64}.c
 - LP: #714732
 * sparc64: Unexport prom_service_exists().
 - LP: #714732
 * sparc64: Delete prom_setcallback().
 - LP: #714732
 * sparc: Do not export prom_nb{get,put}char().
 - LP: #714732
 * sparc: Pass buffer pointer all the way down to prom_{get,put}char().
 - LP: #714732
 * sparc: Delete prom_*getchar().
 - LP: #714732
 * sparc: Write to prom console using indirect buffer.
 - LP: #714732
 * tcp: Don't change unlocked socket state in tcp_v4_err().
 - LP: #714732
 * tcp: Make TCP_MAXSEG minimum more correct.
 - LP: #714732
 * tcp: Bug fix in initialization of receive window.
 - LP: #714732
 * tcp: avoid a possible divide by zero
 - LP: #714732
 * tcp: protect sysctl_tcp_cookie_size reads
 - LP: #714732
 * 8139cp: fix checksum broken
 - LP: #714732
 * r8169: fix sleeping while holding spinlock.
 - LP: #714732
 * scm: Capture the full credentials of the scm sender.
 - LP: #714732
 * af_unix: Allow credentials to work across user and pid namespaces.
 - LP: #714732
 * user_ns: Introduce user_nsmap_uid and user_ns_map_gid.
 - LP: #714732
 * sock: Introduce cred_to_ucred
 - LP: #714732
 * net: Export cred_to_ucred to modules.
 - LP: #714732
 * af_unix: limit recursion level
 - LP: #714732
 * driver/net/benet: fix be_cmd_multicast_set() memcpy bug
 - LP: #714732
 * bonding: Fix slave selection bug.
 - LP: #714732
 * bridge: fix IPv6 queries for bridge multicast snooping
 - LP: #714732
 * cls_cgroup: Fix crash on module unload
 - LP: #714732
 * filter: fix sk_filter rcu handling
 - LP: #714732
 * econet: Do the correct cleanup after an unprivileged SIOCSIFADDR.
 - LP: #714732
 * econet: Fix crash in aun_incoming().
 - LP: #714732
 * ifb: goto resched directly if error happens and dp->tq isn't empty
 - LP: #714732
 * l2tp: Fix modalias of l2tp_ip
 - LP: #714732
 * x25: decrement netdev reference counts on unload
 - LP: #714732
 * tehuti: Firmware filename is tehuti/bdx.bin
 - LP: #714732
 * net/dst: dst_dev_event() called after other notifiers
 - LP: #714732
 * net: Fix header size check for GSO case in recvmsg (af_packet)
 - LP: #714732
 * ACPICA: Fix Scope() op in module level code
 - LP: #714732
 * nouveau: Acknowledge HPD irq in handler, not bottom half
 - LP: #714732
 * printk: Fix wake_up_klogd() vs cpu hotplug
 - LP: #714732
 * sched: Cure more NO_HZ load average woes
 - LP: #714732
 * ACPI: EC: Add another dmi match entry for MSI hardware
 - LP: #714732
 * PM / Runtime: Fix pm_runtime_suspended()
 - LP: #714732
 * inotify: stop kernel memory leak on file creation failure
 - LP: #714732
 * orinoco: fix TKIP countermeasure behaviour
 - LP: #714732
 * orinoco: clear countermeasure setting on commit
 - LP: #714732
 * x86, amd: Fix panic on AMD CPU family 0x15
 - LP: #714732
 * md: fix bug with re-adding of partially recovered device.
 - LP: #714732
 * md: protect against NULL reference when waiting to start a raid10.
 - LP: #714732
 * tracing: Fix panic when lseek() called on "trace" opened for writing
 - LP: #714732
 * x86, gcc-4.6: Use gcc -m options when building vdso
 - LP: #714732
 * x86: Enable the intr-remap fault handling after local APIC setup
 - LP: #714732
 * x86, vt-d: Handle previous faults after enabling fault handling
 - LP: #714732
 * x86, vt-d: Fix the vt-d fault handling irq migration in the x2apic mode
 - LP: #714732
 * x86, vt-d: Quirk for masking vtd spec errors to platform error handling
 logic
 - LP: #714732
 * rt2x00: Fix max TX power settings
 - LP: #714732
 * install_special_mapping skips security_file_mmap check.
 - LP: #714732
 * USB: misc: uss720.c: add another vendor/product ID
 - LP: #714732
 * USB: ftdi_sio: Add D.O.Tec PID
 - LP: #714732
 * USB: usb-storage: unusual_devs entry for the Samsung YP-CP3
 - LP: #714732
 * p54usb: add 5 more USBIDs
 - LP: #714732
 * p54usb: New USB ID for Gemtek WUBI-100GW
 - LP: #714732
 * n_gsm: Fix message length handling when building header
 - LP: #714732
 * n_gsm: gsm_data_alloc buffer allocation could fail and it is not being
 checked
 - LP: #714732
 * xhci: Fix issue with port array setup and buggy hosts.
 - LP: #714732
 * gpio: Fix null pointer dereference while accessing rdc321x
 platform_data
 - LP: #714732
 * cs5535-gpio: don't apply errata #36 to edge detect GPIOs
 - LP: #714732
 * cs5535-gpio: handle GPIO regs where higher (clear) bits are set
 - LP: #714732
 * mmc: at91_mci: fix multiblock SDIO transfers
 - LP: #714732
 * mmc: atmel-mci: fix multiblock SDIO transfers
 - LP: #714732
 * mmc: Fix re-probing with PM_POST_RESTORE notification
 - LP: #714732
 * fix freeing user_struct in user cache
 - LP: #714732
 * rtc: rs5c372: fix buffer size
 - LP: #714732
 * RAMOOPS: Don't overflow over non-allocated regions
 - LP: #714732
 * watchdog: Fix null pointer dereference while accessing rdc321x
 platform_data
 - LP: #714732
 * arch/x86/oprofile/op_model_amd.c: Perform initialisation on a single
 CPU
 - LP: #714732
 * mfd: Support additional parent IDs for wm831x
 - LP: #714732
 * mfd: Supply IRQ base for WM832x devices
 - LP: #714732
 * drm/radeon/kms/evergreen: reset the grbm blocks at resume and init
 - LP: #714732
 * drm/radeon/kms: fix evergreen asic reset
 - LP: #714732
 * drm/radeon/kms: reorder display resume to avoid problems
 - LP: #714732
 * drm/i915/dp: Fix I2C/EDID handling with active DisplayPort to DVI
 converter
 - LP: #714732
 * sound: Prevent buffer overflow in OSS load_mixer_volumes
 - LP: #714732
 * mv_xor: fix race in tasklet function
 - LP: #714732
 * ima: fix add LSM rule bug
 - LP: #714732
 * libata-sff: fix HSM_ST_ERR handling in __ata_sff_port_intr()
 - LP: #714732
 * mac80211: fix mesh forwarding
 - LP: #714732
 * ALSA: hda: Use LPIB quirk for Dell Inspiron m101z/1120
 - LP: #714732
 * Sched: fix skip_clock_update optimization
 - LP: #714732
 * block: Deprecate QUEUE_FLAG_CLUSTER and use queue_limits instead
 - LP: #714732
 * x86/microcode: Fix double vfree() and remove redundant pointer checks
 before vfree()
 - LP: #714732
 * gspca - sonixj: Set the flag for some devices
 - LP: #714732
 * gspca - sonixj: Add a flag in the driver_info table
 - LP: #714732
 * mac80211: fix hard lockup in sta_addba_resp_timer_expired
 - LP: #714732
 * mac80211: fix mesh forwarding when ratelimited too
 - LP: #714732
 * mac80211: fix initialization of skb->cb in ieee80211_subif_start_xmit
 - LP: #714732
 * Release 2.6.35.11
 - LP: #714732
 * inet_diag: Make sure we actually run the same bytecode we audited,
 CVE-2010-3880
 - LP: #711865
 - CVE-2010-3880
linux (2.6.35-26.46) maverick-proposed; urgency=low
 [ Steve Conklin ]
 * Tracking Bug
 - LP: #709352
 [ Andy Whitcroft ]
 * SAUCE: ensure root is ready before running usermodehelpers in it
 [ Colin Ian King ]
 * SAUCE: Add WMI hotkeys support for another Dell All-In-One series
 - LP: #701530
 * SAUCE: Dell WMI: Use sparse keymaps and tidy up code.
 - LP: #701530
 [ Tim Gardner ]
 * [Config] Set CONFIG_NR_CPUS=256 for amd64 server
 - LP: #706058
 [ Upstream Kernel Changes ]
 * Input: i8042 - introduce 'notimeout' blacklist for Dell Vostro V13
 - LP: #380126
 * ACPI / Sleep: Consolidate suspend and hibernation routines
 - LP: #703228
 * Quirk to fix suspend/resume on Lenovo Edge 11,13,14,15
 - LP: #702434
 * dell-laptop: Add another Dell laptop family to the DMI whitelist
 - LP: #693078
 * KVM: Fix fs/gs reload oops with invalid ldt, CVE-2010-3698
 - LP: #707000
 - CVE-2010-3698
 * V4L/DVB: ivtvfb: prevent reading uninitialized stack memory,
 CVE-2010-4079
 - LP: #707649
 - CVE-2010-4079
 * tpm: Autodetect itpm devices
 - LP: #705845
 * tpm: fix panic caused by "tpm: Autodetect itpm devices"
 - LP: #705845
linux (2.6.35-25.44) maverick-proposed; urgency=low
 [ Upstream Kernel Changes ]
 * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
 - LP: #703553
 -- Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com> 2011年7月11日 15:17:32 -0300

Changed in linux-lts-backport-maverick (Ubuntu Lucid):

status: Fix Committed → Fix Released

Kees Cook (kees) on 2011年08月10日

description: updated

Kees Cook (kees) on 2011年08月16日

Changed in linux-ec2 (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-ec2 (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-ec2 (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-ec2 (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-ec2 (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux-lts-backport-natty (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-lts-backport-natty (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-lts-backport-natty (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-lts-backport-natty (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-lts-backport-natty (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux-mvl-dove (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-mvl-dove (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-mvl-dove (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-mvl-dove (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-mvl-dove (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux-lts-backport-maverick (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-lts-backport-maverick (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-lts-backport-maverick (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-lts-backport-maverick (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-lts-backport-maverick (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux-ti-omap4 (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-ti-omap4 (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-ti-omap4 (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-ti-omap4 (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-ti-omap4 (Ubuntu Natty):

importance: Undecided → Medium

Changed in linux-fsl-imx51 (Ubuntu Lucid):

importance: Undecided → Medium

Changed in linux-fsl-imx51 (Ubuntu Oneiric):

importance: Undecided → Medium

Changed in linux-fsl-imx51 (Ubuntu Hardy):

importance: Undecided → Medium

Changed in linux-fsl-imx51 (Ubuntu Maverick):

importance: Undecided → Medium

Changed in linux-fsl-imx51 (Ubuntu Natty):

importance: Undecided → Medium

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年08月19日: #5

Download full text (13.4 KiB)

This bug was fixed in the package linux - 2.6.38-11.48

---------------
linux (2.6.38-11.48) natty-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #818175

[ Upstream Kernel Changes ]

* Revert "HID: magicmouse: ignore 'ivalid report id' while switching
modes"
- LP: #814250

linux (2.6.38-11.47) natty-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #811180

[ Keng-Yu Lin ]

* SAUCE: Revert: "dell-laptop: Toggle the unsupported hardware
killswitch"
- LP: #775281

[ Ming Lei ]

* SAUCE: fix yama_ptracer_del lockdep warning
- LP: #791019

[ Stefan Bader ]

* SAUCE: Re-enable RODATA for i386 virtual
- LP: #809838

[ Tim Gardner ]

* [Config] Add grub-efi as a recommended bootloader for server and
generic
- LP: #800910
* SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
- LP: #805494

[ Upstream Kernel Changes ]

* Revert "bridge: Forward reserved group addresses if !STP"
- LP: #793702
* Fix up ABI directory
* bonding: Incorrect TX queue offset, CVE-2011-1581
- LP: #792312
- CVE-2011-1581
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* usbnet/cdc_ncm: add missing .reset_resume hook
- LP: #793892
* ath5k: Disable fast channel switching by default
- LP: #767192
* mm: vmscan: correctly check if reclaimer should schedule during
shrink_slab
- LP: #755066
* mm: vmscan: correct use of pgdat_balanced in sleeping_prematurely
- LP: #755066
* ALSA: hda - Use LPIB for ATI/AMD chipsets as default
- LP: #741825
* ALSA: hda - Enable snoop bit for AMD controllers
- LP: #741825
* ALSA: hda - Enable sync_write workaround for AMD generically
- LP: #741825
* cpuidle: menu: fixed wrapping timers at 4.294 seconds
- LP: #774947
* drm/i915: Fix gen6 (SNB) missed BLT ring interrupts.
- LP: #761065
* USB: ehci: remove structure packing from ehci_def
- LP: #791552
* drm/i915: disable PCH ports if needed when disabling a CRTC
- LP: #791752
* kmemleak: Do not return a pointer to an object that kmemleak did not
get
- LP: #793702
* kmemleak: Initialise kmemleak after debug_objects_mem_init()
- LP: #793702
* Fix _OSC UUID in pcc-cpufreq
- LP: #793702
* CPU hotplug, re-create sysfs directory and symlinks
- LP: #793702
* Fix memory leak in cpufreq_stat
- LP: #793702
* net: recvmmsg: Strip MSG_WAITFORONE when calling recvmsg
- LP: #793702
* ftrace: Only update the function code on write to filter files
- LP: #793702
* qla2xxx: Fix hang during driver unload when vport is active.
- LP: #793702
* qla2xxx: Fix virtual port failing to login after chip reset.
- LP: #793702
* qla2xxx: Fix vport delete hang when logins are outstanding.
- LP: #793702
* powerpc/kdump64: Don't reference freed memory as pacas
- LP: #793702
* powerpc/kexec: Fix memory corruption from unallocated slaves
- LP: #793702
* x86, cpufeature: Fix cpuid leaf 7 feature detection
- LP: #793702
* ath9k_hw: do noise floor calibration only on required chain...

This bug was fixed in the package linux - 2.6.38-11.48
---------------
linux (2.6.38-11.48) natty-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #818175
 [ Upstream Kernel Changes ]
 * Revert "HID: magicmouse: ignore 'ivalid report id' while switching
 modes"
 - LP: #814250
linux (2.6.38-11.47) natty-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #811180
 [ Keng-Yu Lin ]
 * SAUCE: Revert: "dell-laptop: Toggle the unsupported hardware
 killswitch"
 - LP: #775281
 [ Ming Lei ]
 * SAUCE: fix yama_ptracer_del lockdep warning
 - LP: #791019
 [ Stefan Bader ]
 * SAUCE: Re-enable RODATA for i386 virtual
 - LP: #809838
 [ Tim Gardner ]
 * [Config] Add grub-efi as a recommended bootloader for server and
 generic
 - LP: #800910
 * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
 - LP: #805494
 [ Upstream Kernel Changes ]
 * Revert "bridge: Forward reserved group addresses if !STP"
 - LP: #793702
 * Fix up ABI directory
 * bonding: Incorrect TX queue offset, CVE-2011-1581
 - LP: #792312
 - CVE-2011-1581
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * usbnet/cdc_ncm: add missing .reset_resume hook
 - LP: #793892
 * ath5k: Disable fast channel switching by default
 - LP: #767192
 * mm: vmscan: correctly check if reclaimer should schedule during
 shrink_slab
 - LP: #755066
 * mm: vmscan: correct use of pgdat_balanced in sleeping_prematurely
 - LP: #755066
 * ALSA: hda - Use LPIB for ATI/AMD chipsets as default
 - LP: #741825
 * ALSA: hda - Enable snoop bit for AMD controllers
 - LP: #741825
 * ALSA: hda - Enable sync_write workaround for AMD generically
 - LP: #741825
 * cpuidle: menu: fixed wrapping timers at 4.294 seconds
 - LP: #774947
 * drm/i915: Fix gen6 (SNB) missed BLT ring interrupts.
 - LP: #761065
 * USB: ehci: remove structure packing from ehci_def
 - LP: #791552
 * drm/i915: disable PCH ports if needed when disabling a CRTC
 - LP: #791752
 * kmemleak: Do not return a pointer to an object that kmemleak did not
 get
 - LP: #793702
 * kmemleak: Initialise kmemleak after debug_objects_mem_init()
 - LP: #793702
 * Fix _OSC UUID in pcc-cpufreq
 - LP: #793702
 * CPU hotplug, re-create sysfs directory and symlinks
 - LP: #793702
 * Fix memory leak in cpufreq_stat
 - LP: #793702
 * net: recvmmsg: Strip MSG_WAITFORONE when calling recvmsg
 - LP: #793702
 * ftrace: Only update the function code on write to filter files
 - LP: #793702
 * qla2xxx: Fix hang during driver unload when vport is active.
 - LP: #793702
 * qla2xxx: Fix virtual port failing to login after chip reset.
 - LP: #793702
 * qla2xxx: Fix vport delete hang when logins are outstanding.
 - LP: #793702
 * powerpc/kdump64: Don't reference freed memory as pacas
 - LP: #793702
 * powerpc/kexec: Fix memory corruption from unallocated slaves
 - LP: #793702
 * x86, cpufeature: Fix cpuid leaf 7 feature detection
 - LP: #793702
 * ath9k_hw: do noise floor calibration only on required chains
 - LP: #793702
 * ath9k_hw: fix power for the HT40 duplicate frames
 - LP: #793702
 * ath9k_hw: fix dual band assumption for XB113
 - LP: #793702
 * ath9k_hw: Fix STA connection issues with AR9380 (XB113).
 - LP: #793702
 * powerpc: Set nr_cpu_ids early and use it to free PACAs
 - LP: #793702
 * powerpc/oprofile: Handle events that raise an exception without
 overflowing
 - LP: #793702
 * iwlagn: fix iwl_is_any_associated
 - LP: #793702
 * block: rescan partitions on invalidated devices on -ENOMEDIA too
 - LP: #793702
 * block: move bd_set_size() above rescan_partitions() in __blkdev_get()
 - LP: #793702
 * paride: Convert to bdops->check_events()
 - LP: #793702
 * gdrom,viocd: Convert to bdops->check_events()
 - LP: #793702
 * ide: Convert to bdops->check_events()
 - LP: #793702
 * block: don't block events on excl write for non-optical devices
 - LP: #793702
 * block: Fix discard topology stacking and reporting
 - LP: #793702
 * block: add proper state guards to __elv_next_request
 - LP: #793702
 * block: always allocate genhd->ev if check_events is implemented
 - LP: #793702
 * mtd: mtdconcat: fix NAND OOB write
 - LP: #793702
 * mtd: return badblockbits back
 - LP: #793702
 * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
 limit
 - LP: #793702
 * ext4: fix possible use-after-free in ext4_remove_li_request()
 - LP: #793702
 * iwlwifi: fix bugs in change_interface
 - LP: #793702
 * nl80211: Fix set_key regression with some drivers
 - LP: #793702
 * mac80211: fix a few RCU issues
 - LP: #793702
 * wire up fanotify syscalls
 - LP: #793702
 * wire up clock_adjtime syscall
 - LP: #793702
 * drm: Send pending vblank events before disabling vblank.
 - LP: #793702
 * pata_cm64x: fix boot crash on parisc
 - LP: #793702
 * ext3: Fix fs corruption when make_indexed_dir() fails
 - LP: #793702
 * jbd: Fix forever sleeping process in do_get_write_access()
 - LP: #793702
 * jbd: fix fsync() tid wraparound bug
 - LP: #793702
 * ext4: release page cache in ext4_mb_load_buddy error path
 - LP: #793702
 * bonding: 802.3ad - fix agg_device_up
 - LP: #793702
 * bridge: fix forwarding of IPv6
 - LP: #793702
 * ieee802154: Remove hacked CFLAGS in net/ieee802154/Makefile
 - LP: #793702
 * irda: fix locking unbalance in irda_sendmsg
 - LP: #793702
 * inetpeer: reduce stack usage
 - LP: #793702
 * ipv6: Remove hoplimit initialization to -1
 - LP: #793702
 * ipv6: udp: fix the wrong headroom check
 - LP: #793702
 * macvlan: fix panic if lowerdev in a bond
 - LP: #793702
 * net: Do not wrap sysctl igmp_max_memberships in IP_MULTICAST
 - LP: #793702
 * net: use hlist_del_rcu() in dev_change_name()
 - LP: #793702
 * SCTP: fix race between sctp_bind_addr_free() and
 sctp_bind_addr_conflict()
 - LP: #793702
 * tcp: len check is unnecessarily devastating, change to WARN_ON
 - LP: #793702
 * vlan: fix GVRP at dismantle time MIME-Version: 1.0
 - LP: #793702
 * igmp: call ip_mc_clear_src() only when we have no users of ip_mc_list
 - LP: #793702
 * net: add skb_dst_force() in sock_queue_err_skb()
 - LP: #793702
 * sch_sfq: avoid giving spurious NET_XMIT_CN signals
 - LP: #793702
 * sctp: fix memory leak of the ASCONF queue when free asoc
 - LP: #793702
 * sch_sfq: fix peek() implementation
 - LP: #793702
 * bonding: prevent deadlock on slave store with alb mode (v3)
 - LP: #793702
 * mpt2sas: move even handling of MPT2SAS_TURN_ON_FAULT_LED into process
 context
 - LP: #793702
 * bnx2i: Fixed packet error created when the sq_size is set to 16
 - LP: #793702
 * bnx2i: Updated the connection shutdown/cleanup timeout
 - LP: #793702
 * Fix Ultrastor asm snippet
 - LP: #793702
 * target: Fix multi task->task_sg[] chaining logic bug
 - LP: #793702
 * target: Fix interrupt context bug with stats_lock and
 core_tmr_alloc_req
 - LP: #793702
 * target: Fix bug with task_sg chained transport_free_dev_tasks release
 - LP: #793702
 * target: Fix task->task_execute_queue=1 clear bug + LUN_RESET OOPs
 - LP: #793702
 * x86, ioapic: Fix potential resume deadlock
 - LP: #793702
 * x86, amd: Do not enable ARAT feature on AMD processors below family
 0x12
 - LP: #793702
 * x86, amd: Use _safe() msr access for GartTlbWlk disable code
 - LP: #793702
 * x86, cpufeature: Update CPU feature RDRND to RDRAND
 - LP: #793702
 * oprofile, x86: Enable preemption during pci device setup in IBS init
 - LP: #793702
 * rcu: Fix unpaired rcu_irq_enter() from locking selftests
 - LP: #793702
 * When mandatory encryption on share, fail mount
 - LP: #793702
 * staging: usbip: fix wrong endian conversion
 - LP: #793702
 * staging: r8712u: Fix driver to support ad-hoc mode
 - LP: #793702
 * Fix for buffer overflow in ldm_frag_add not sufficient
 - LP: #793702
 * seqlock: Don't smp_rmb in seqlock reader spin loop
 - LP: #793702
 * md: Fix race when creating a new md device.
 - LP: #793702
 * md/bitmap: fix saving of events_cleared and other state.
 - LP: #793702
 * ALSA: HDA: Use one dmic only for Dell Studio 1558
 - LP: #731706, #793702
 * ALSA: HDA: Add quirk for Lenovo U350
 - LP: #751681, #793702
 * ALSA: hda - Fix input-src parse in patch_analog.c
 - LP: #793702
 * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
 - LP: #793702
 * ASoC: Add some missing volume update bit sets for wm_hubs devices
 - LP: #793702
 * HID: magicmouse: ignore 'ivalid report id' while switching modes
 - LP: #793702
 * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
 - LP: #793702
 * loop: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #793702
 * loop: handle on-demand devices correctly
 - LP: #793702
 * i2c/writing-clients: Fix foo_driver.id_table
 - LP: #793702
 * USB: CP210x Add 4 Device IDs for AC-Services Devices
 - LP: #793702
 * USB: moto_modem: Add USB identifier for the Motorola VE240.
 - LP: #793702
 * USB: serial: ftdi_sio: adding support for TavIR STK500
 - LP: #793702
 * USB: gadget: g_multi: fixed vendor and product ID in inf files
 - LP: #793702
 * USB: gamin_gps: Fix for data transfer problems in native mode
 - LP: #793702
 * Bind only modem AT command endpoint to option module.
 - LP: #793702
 * USB: cdc_acm: Fix oops when Droids MuIn LCD is connected
 - LP: #793702
 * xhci: Fix bug in control transfer cancellation.
 - LP: #793702
 * usb/gadget: at91sam9g20 fix end point max packet size
 - LP: #793702
 * usb: gadget: rndis: don't test against req->length
 - LP: #793702
 * xhci: Fix memory leak in ring cache deallocation.
 - LP: #793702
 * xhci: Fix memory leak bug when dropping endpoints
 - LP: #793702
 * USB: option: add support for Huawei E353 device
 - LP: #793702
 * OHCI: fix regression caused by nVidia shutdown workaround
 - LP: #793702
 * USB: remove remaining usages of hcd->state from usbcore and fix
 regression
 - LP: #793702
 * cx88: protect per-device driver list with device lock
 - LP: #793702
 * cx88: fix locking of sub-driver operations
 - LP: #793702
 * cx88: hold device lock during sub-driver initialization
 - LP: #793702
 * sh: clkfwk: fixup clk_rate_table_build parameter in div6 clock
 - LP: #793702
 * sh: fixup fpu.o compile order
 - LP: #793702
 * p54usb: add zoom 4410 usbid
 - LP: #793702
 * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
 - LP: #793702
 * UBIFS: fix a rare memory leak in ro to rw remounting path
 - LP: #793702
 * kbuild: Fix GNU make v3.80 compatibility
 - LP: #793702
 * i8k: Avoid lahf in 64-bit code
 - LP: #793702
 * idle governor: Avoid lock acquisition to read pm_qos before entering
 idle
 - LP: #793702
 * dm table: reject devices without request fns
 - LP: #793702
 * ARM: 6941/1: cache: ensure MVA is cacheline aligned in
 flush_kern_dcache_area
 - LP: #793702
 * tmpfs: fix race between truncate and writepage
 - LP: #793702
 * atm: expose ATM device index in sysfs
 - LP: #793702
 * brd: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #793702
 * brd: handle on-demand devices correctly
 - LP: #793702
 * drm/i915: fix user irq miss in BSD ring on g4x
 - LP: #793702
 * drm/radeon/evergreen/btc/fusion: setup hdp to invalidate and flush when
 asked
 - LP: #793702
 * drm/radeon/kms: add wait idle ioctl for eg->cayman
 - LP: #793702
 * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
 callback...
 - LP: #793702
 * NFSv4: Handle expired stateids when the lease is still valid
 - LP: #793702
 * NFSv4.1: Fix the handling of NFS4ERR_SEQ_MISORDERED errors
 - LP: #793702
 * PCI: Add quirk for setting valid class for TI816X Endpoint
 - LP: #793702
 * xen mmu: fix a race window causing leave_mm BUG()
 - LP: #793702
 * ext4: Use schedule_timeout_interruptible() for waiting in lazyinit
 thread
 - LP: #793702
 * AppArmor: fix oops in apparmor_setprocattr
 - LP: #793702
 * Linux 2.6.38.8
 - LP: #793702
 * xhci: Add defines for hardcoded slot states
 - LP: #802541
 * xhci: Do not issue device reset when device is not setup
 - LP: #802541
 * taskstats: don't allow duplicate entries in listener mode,
 CVE-2011-2484
 - LP: #806390
 - CVE-2011-2484
 * ext4: init timer earlier to avoid a kernel panic in __save_error_info,
 CVE-2011-2493
 - LP: #806929
 - CVE-2011-2493
 * acer-wmi: does not poll device status when WMI event is available
 - LP: #771758
 * acer-wmi: Only update rfkill status for associated hotkey events
 - LP: #771758
 * (drop after 2.6.38) acer-wmi: Add support for Aspire 1830 wlan hotkey
 - LP: #771758
 * mm: vmscan: correct check for kswapd sleeping in sleeping_prematurely
 - LP: #808509
 * mm: vmscan: kswapd should not free an excessive number of pages when
 balancing small zones
 - LP: #808509
 * mm: vmscan: do not apply pressure to slab if we are not applying
 pressure to zone
 - LP: #808509
 * mm: vmscan: evaluate the watermarks against the correct classzone
 - LP: #808509
 * mm: vmscan: only read new_classzone_idx from pgdat when reclaiming
 successfully
 - LP: #808509
 -- Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com> 2011年7月29日 14:50:19 -0300

Changed in linux (Ubuntu Natty):

status: Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年09月13日: #6

Download full text (6.2 KiB)

This bug was fixed in the package linux-fsl-imx51 - 2.6.31-610.28

---------------
linux-fsl-imx51 (2.6.31-610.28) lucid-proposed; urgency=low

* Release tracking bug
- LP: #837802

[ Upstream Kernel Changes ]

* ipv6: make fragment identifications less predictable, CVE-2011-2699
- LP: #827685
- CVE-2011-2699
* perf: Fix software event overflow, CVE-2011-2918
- LP: #834121
- CVE-2011-2918
* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
- LP: #813026
- CVE-2011-1020

linux-fsl-imx51 (2.6.31-610.27) lucid-proposed; urgency=low

* Release tracking bug
- LP: #829160

[ Upstream Kernel Changes ]

* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* Fix corrupted OSF partition table parsing
- LP: #796606
- CVE-2011-1163
* can: Add missing socket check in can/bcm release.
- LP: #796502
- CVE-2011-1598
* proc: protect mm start_code/end_code in /proc/pid/stat
- LP: #799906
- CVE-2011-0726
* sctp: Fix a race between ICMP protocol unreachable and connect()
* tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
- LP: #794034
- CVE-2010-4077
* filter: make sure filters dont read uninitialized memory CVE-2010-4158
- LP: #721282
- CVE-2010-4158
* bio: take care not overflow page count when mapping/copying user data
CVE-2010-4162
- LP: #721441
- CVE-2010-4162
* block: check for proper length of iov entries in blk_rq_map_user_iov()
- LP: #721504
- CVE-2010-4163
* block: check for proper length of iov entries earlier in
blk_rq_map_user_iov(), CVE-2010-4163
- LP: #721504
- CVE-2010-4163
* rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
- LP: #721455
- CVE-2010-4175
* bluetooth: Fix missing NULL check CVE-2010-4242
- LP: #714846
- CVE-2010-4242
* IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4649
- LP: #800121
- CVE-2010-4649
* epoll: prevent creating circular epoll structures CVE-2011-1082
- LP: #800758
- CVE-2011-1082
* nfs4: Ensure that ACL pages sent over NFS were not allocated from the
slab (v3) CVE-2011-1090
- LP: #800775
* ldm: corrupted partition table can cause kernel oops CVE-2011-1012
- LP: #801083
- CVE-2011-1012
* netfilter: ipt_CLUSTERIP: fix buffer overflow CVE-2011-2534
- LP: #801473
- CVE-2011-2534
* netfilter: arp_tables: fix infoleak to userspace CVE-2011-1170
- LP: #801480
- CVE-2011-1170
* netfilter: ip_tables: fix infoleak to userspace CVE-2011-1171
- LP: #801482
- CVE-2011-1171
* ipv6: netfilter: ip6_tables: fix infoleak to userspace CVE-2011-1172
- LP: #801483
- CVE-2011-1172
* econet: 4 byte infoleak to the network CVE-2011-1173
- LP: #801484
- CVE-2011-1173
* net: Limit socket I/O iovec total length to INT_MAX.
- LP: #708839
* fs/partitions: Validate map_count in Mac partition tables -
CVE-2011-1010
- LP: #804225
- CVE-2011-1010
* drm: fix unsigned vs signed comparison issue in modeset ctl ioctl,
CVE-2011-1013
- LP: #804229
- CVE-2011-1013
...

This bug was fixed in the package linux-ti-omap4 - 2.6.35-903.24
---------------
linux-ti-omap4 (2.6.35-903.24) maverick-proposed; urgency=low
 * Release tracking bug
 - LP: #838037
 [ Upstream Kernel Changes ]
 * ipv6: make fragment identifications less predictable, CVE-2011-2699
 - LP: #827685
 - CVE-2011-2699
 * perf: Fix software event overflow, CVE-2011-2918
 - LP: #834121
 - CVE-2011-2918
 * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
linux-ti-omap4 (2.6.35-903.23) maverick-proposed; urgency=low
 * Release tracking bug
 - LP: #829655
 [ Upstream Kernel Changes ]
 * drm/radeon/kms: check AA resolve registers on r300, CVE-2011-1016
 - LP: #745686
 - CVE-2011-1016
 * drm/radeon: fix regression with AA resolve checking, CVE-2011-1016
 - LP: #745686
 - CVE-2011-1016
 * can-bcm: fix minor heap overflow
 - LP: #690730
 * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
 - LP: #765007
 - CVE-2010-4565
 * av7110: check for negative array offset
 - LP: #747520
 * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
 CVE-2011-0711
 - LP: #767740
 - CVE-2011-0711
 * ALSA: caiaq - Fix possible string-buffer overflow
 - LP: #747520
 * IB/cm: Bump reference count on cm_id before invoking callback,
 CVE-2011-0695
 - LP: #770369
 - CVE-2011-0695
 * RDMA/cma: Fix crash in request handlers, CVE-2011-0695
 - LP: #770369
 - CVE-2011-0695
 * Treat writes as new when holes span across page boundaries,
 CVE-2011-0463
 - LP: #770483
 - CVE-2011-0463
 * net: clear heap allocations for privileged ethtool actions
 - LP: #686158
 * usb: iowarrior: don't trust report_size for buffer size
 - LP: #747520
 * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
 CVE-2011-1017
 - LP: #771382
 - CVE-2011-1017
 * Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal
 code
 - LP: #747520
 * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
 - LP: #747520
 * exec: make argv/envp memory visible to oom-killer
 - LP: #690730
 * next_pidmap: fix overflow condition
 - LP: #772560
 * proc: do proper range check on readdir offset
 - LP: #772560
 * ALSA: sound/pci/asihpi: check adapter index in hpi_ioctl, CVE-2011-1169
 - LP: #785331
 - CVE-2011-1169
 * mpt2sas: prevent heap overflows and unchecked reads, CVE-2011-1494
 - LP: #787145
 - CVE-2011-1494
 * agp: fix arbitrary kernel memory writes, CVE-1011-2022
 - LP: #788684
 - CVE-1011-2022
 * can: add missing socket check in can/raw release, CVE-2011-1748
 - LP: #788694
 - CVE-2011-1748
 * agp: fix OOM and buffer overflow
 - LP: #788700
 * drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack
 memory - CVE-2010-3296
 - CVE-2010-3296
 * drivers/net/eql.c: prevent reading uninitialized stack memory -
 CVE-2010-3297
 - CVE-2010-3297
 * inet_diag: Make sure we actually run the same bytecode we audited,
 CVE-2010-3880
 - LP: #711865
 - CVE-2010-3880
 * setup_arg_pages: diagnose excessive argument size - CVE-2010-3858
 - LP: #672664
 - CVE-2010-3858
 * net: Truncate recvfrom and sendto length to INT_MAX - CVE-2010-3859
 - LP: #690730
 - CVE-2010-3859
 * net: Limit socket I/O iovec total length to INT_MAX - CVE-2010-3859
 - LP: #690730
 - CVE-2010-3859
 * ipc: initialize structure memory to zero for compat functions -
 CVE-2010-4073
 - LP: #690730
 - CVE-2010-4073
 * ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory -
 CVE-2010-4080, CVE-2010-4081
 - LP: #672664
 - CVE-2010-4080, CVE-2010-4081
 * drivers/video/via/ioctl.c: prevent reading uninitialized stack memory -
 CVE-2010-4082
 - CVE-2010-4082
 * sys_semctl: fix kernel stack leakage, CVE-2010-4083
 - LP: #712749
 - CVE-2010-4083
 * gdth: integer overflow in ioctl - CVE-2010-4157
 - LP: #686158
 - CVE-2010-4157
 * bio: take care not overflow page count when mapping/copying user data -
 CVE-2010-4162
 - LP: #721441
 - CVE-2010-4162
 * bluetooth: Fix missing NULL check - CVE-2010-4242
 - LP: #686158
 * rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
 - LP: #721455
 - CVE-2010-4175
 * perf_events: Fix perf_counter_mmap() hook in mprotect() - CVE-2010-4169
 - LP: #690730
 - CVE-2010-4169
 * block: check for proper length of iov entries in blk_rq_map_user_iov()
 - CVE-2010-4163
 - LP: #690730
 - CVE-2010-4163
 * block: check for proper length of iov entries earlier in
 blk_rq_map_user_iov(), CVE-2010-4163
 - LP: #721504
 - CVE-2010-4163
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * Fix corrupted OSF partition table parsing
 - LP: #796606
 - CVE-2011-1163
 * can: Add missing socket check in can/bcm release.
 - LP: #796502
 - CVE-2011-1598
 * proc: protect mm start_code/end_code in /proc/pid/stat
 - LP: #799906
 - CVE-2011-0726
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 * tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
 - LP: #794034
 - CVE-2010-4077
 * posix-cpu-timers: workaround to suppress the problems with mt exec,
 CVE-2010-4248
 - LP: #712609
 - CVE-2010-4248
 * Rename 'pipe_info()' to 'get_pipe_info()' CVE-2010-4256
 - LP: #799805
 - CVE-2010-4256
 * Export 'get_pipe_info()' to other users CVE-2010-4256
 - LP: #799805
 - CVE-2010-4256
 * IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4649
 - LP: #800121
 - CVE-2010-4649
 * nfs4: Ensure that ACL pages sent over NFS were not allocated from the
 slab (v3) CVE-2011-1090
 - LP: #800775
 - CVE-2011-1090
 * epoll: prevent creating circular epoll structures CVE-2011-1082
 - LP: #800758
 - CVE-2011-1082
 * xfs: zero proper structure size for geometry calls CVE-2011-0711
 - LP: #767740
 - CVE-2011-0711
 * ldm: corrupted partition table can cause kernel oops CVE-2011-1012
 - LP: #801083
 - CVE-2011-1012
 * netfilter: ipt_CLUSTERIP: fix buffer overflow CVE-2011-2534
 - LP: #801473
 - CVE-2011-2534
 * netfilter: arp_tables: fix infoleak to userspace CVE-2011-1170
 - LP: #801480
 - CVE-2011-1170
 * netfilter: ip_tables: fix infoleak to userspace CVE-2011-1171
 - LP: #801482
 - CVE-2011-1171
 * ipv6: netfilter: ip6_tables: fix infoleak to userspace CVE-2011-1172
 - LP: #801483
 - CVE-2011-1172
 * econet: 4 byte infoleak to the network CVE-2011-1173
 - LP: #801484
 - CVE-2011-1173
 * fs/partitions: Validate map_count in Mac partition tables CVE-2011-1010
 - LP: #804225
 - CVE-2011-1010
 * drm: fix unsigned vs signed comparison issue in modeset ctl ioctl
 CVE-2011-1013
 - LP: #804229
 * net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
 CVE-2011-1019
 - LP: #804366
 - CVE-2011-1019
 * exec: copy-and-paste the fixes into compat_do_execve() paths
 CVE-2010-4243
 - LP: #804234
 - CVE-2010-4243
 * taskstats: don't allow duplicate entries in listener mode,
 CVE-2011-2484
 - LP: #806390
 - CVE-2011-2484
 * dccp: handle invalid feature options length, CVE-2011-1770
 - LP: #806375
 - CVE-2011-1770
 * pagemap: close races with suid execve, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * report errors in /proc/*/*map* sanely, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * close race in /proc/*/environ, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * auxv: require the target to be tracable (or yourself), CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * dccp: fix oops on Reset after close, CVE-2011-1093
 - LP: #814087
 - CVE-2011-1093
 * Bluetooth: sco: fix information leak to userspace, CVE-2011-1078
 - LP: #816542
 - CVE-2011-1078
 * Bluetooth: bnep: fix buffer overflow, CVE-2011-1079
 - LP: #816544
 - CVE-2011-1079
 * bridge: netfilter: fix information leak, CVE-2011-1080
 - LP: #816545
 - CVE-2011-1080
 * gro: Reset dev pointer on reuse, CVE-2011-1478
 - LP: #816549
 - CVE-2011-1478
 * gro: reset skb_iif on reuseu, CVE-2011-1478
 - LP: #816549
 - CVE-2011-1478
 * char/tpm: Fix unitialized usage of data buffer, CVE-2011-1160
 - LP: #816546
 - CVE-2011-1160
 * irda: validate peer name and attribute lengths, CVE-2011-1180
 - LP: #816547
 - CVE-2011-1180
 * ROSE: prevent heap corruption with bad facilities, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
 - LP: #819569
 - CVE-2011-2492
 * Add mount option to check uid of device being mounted = expect uid,
 CVE-2011-1833
 - LP: #732628
 - CVE-2011-1833
 -- Paolo Pisati <paolo.pisati@canonical.com> 2011年8月31日 16:46:35 +0200

Changed in linux-ti-omap4 (Ubuntu Maverick):

status: Fix Committed → Fix Released

Marc Deslauriers (mdeslaur) on 2011年09月19日

Changed in linux-mvl-dove (Ubuntu Maverick):

status: Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年09月21日: #9

Download full text (38.0 KiB)

This bug was fixed in the package linux-ti-omap4 - 2.6.38-1209.15

---------------
linux-ti-omap4 (2.6.38-1209.15) natty-proposed; urgency=low

* Release tracking bug
- LP: #837761

[ Paolo Pisati ]

* [Config] Turn on CONFIG_USER_NS and DEVPTS_MULTIPLE_INSTANCES.
- LP: #787749

[ Tim Gardner ]

* [Config] Add enic/fnic to nic-modules udeb, CVE-2011-1020
- LP: #801610

[ Upstream Kernel Changes ]

* mpt2sas: prevent heap overflows and unchecked reads
- LP: #780546
* agp: fix arbitrary kernel memory writes
- LP: #775809
* can: add missing socket check in can/raw release
- LP: #780546
* agp: fix OOM and buffer overflow
- LP: #775809
* bonding: Incorrect TX queue offset, CVE-2011-1581
- LP: #792312
- CVE-2011-1581
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* can: Add missing socket check in can/bcm release.
- LP: #796502
- CVE-2011-1598
* USB: ehci: remove structure packing from ehci_def
- LP: #791552
* taskstats: don't allow duplicate entries in listener mode,
CVE-2011-2484
- LP: #806390
- CVE-2011-2484
* ext4: init timer earlier to avoid a kernel panic in __save_error_info,
CVE-2011-2493
- LP: #806929
- CVE-2011-2493
* dccp: handle invalid feature options length, CVE-2011-1770
- LP: #806375
- CVE-2011-1770
* pagemap: close races with suid execve, CVE-2011-1020
- LP: #813026
- CVE-2011-1020
* report errors in /proc/*/*map* sanely, CVE-2011-1020
- LP: #813026
- CVE-2011-1020
* close race in /proc/*/environ, CVE-2011-1020
- LP: #813026
- CVE-2011-1020
* auxv: require the target to be tracable (or yourself), CVE-2011-1020
- LP: #813026
- CVE-2011-1020
* deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
- LP: #813026
- CVE-2011-1020
* rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
- LP: #816550
- CVE-2011-1493
* GFS2: make sure fallocate bytes is a multiple of blksize, CVE-2011-2689
- LP: #819572
- CVE-2011-2689
* Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
- LP: #819569
- CVE-2011-2492
* Add mount option to check uid of device being mounted = expect uid,
CVE-2011-1833
- LP: #732628
- CVE-2011-1833
* ipv6: make fragment identifications less predictable, CVE-2011-2699
- LP: #827685
- CVE-2011-2699
* perf: Fix software event overflow, CVE-2011-2918
- LP: #834121
- CVE-2011-2918
* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
- LP: #813026
- CVE-2011-1020

linux-ti-omap4 (2.6.38-1209.13) natty; urgency=low

[ Tim Gardner ]

* Release Tracking Bug
- LP: #772381

[ Brad Figg ]

* Ubuntu-2.6.38-9.43

[ Bryan Wu ]

* merge Ubuntu-2.6.38-9.43
* cherry-pick 6 patches from u2 of 'for-ubuntu' branch
* [Config] Sync up configs for 2.6.38.4

[ Herton Ronaldo Krzesinski ]

* SAUCE: Revert "x86, hibernate: Initialize mmu_cr4_features during boot"
- LP: #764758

[ Leann Ogasawara ]

* [Config] updateconfigs for 2.6.38.4

[ Paolo Pisati ]

* [Conf...

This bug was fixed in the package linux-ti-omap4 - 2.6.38-1209.15
---------------
linux-ti-omap4 (2.6.38-1209.15) natty-proposed; urgency=low
 * Release tracking bug
 - LP: #837761
 [ Paolo Pisati ]
 * [Config] Turn on CONFIG_USER_NS and DEVPTS_MULTIPLE_INSTANCES.
 - LP: #787749
 [ Tim Gardner ]
 * [Config] Add enic/fnic to nic-modules udeb, CVE-2011-1020
 - LP: #801610
 [ Upstream Kernel Changes ]
 * mpt2sas: prevent heap overflows and unchecked reads
 - LP: #780546
 * agp: fix arbitrary kernel memory writes
 - LP: #775809
 * can: add missing socket check in can/raw release
 - LP: #780546
 * agp: fix OOM and buffer overflow
 - LP: #775809
 * bonding: Incorrect TX queue offset, CVE-2011-1581
 - LP: #792312
 - CVE-2011-1581
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * can: Add missing socket check in can/bcm release.
 - LP: #796502
 - CVE-2011-1598
 * USB: ehci: remove structure packing from ehci_def
 - LP: #791552
 * taskstats: don't allow duplicate entries in listener mode,
 CVE-2011-2484
 - LP: #806390
 - CVE-2011-2484
 * ext4: init timer earlier to avoid a kernel panic in __save_error_info,
 CVE-2011-2493
 - LP: #806929
 - CVE-2011-2493
 * dccp: handle invalid feature options length, CVE-2011-1770
 - LP: #806375
 - CVE-2011-1770
 * pagemap: close races with suid execve, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * report errors in /proc/*/*map* sanely, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * close race in /proc/*/environ, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * auxv: require the target to be tracable (or yourself), CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * GFS2: make sure fallocate bytes is a multiple of blksize, CVE-2011-2689
 - LP: #819572
 - CVE-2011-2689
 * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
 - LP: #819569
 - CVE-2011-2492
 * Add mount option to check uid of device being mounted = expect uid,
 CVE-2011-1833
 - LP: #732628
 - CVE-2011-1833
 * ipv6: make fragment identifications less predictable, CVE-2011-2699
 - LP: #827685
 - CVE-2011-2699
 * perf: Fix software event overflow, CVE-2011-2918
 - LP: #834121
 - CVE-2011-2918
 * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
linux-ti-omap4 (2.6.38-1209.13) natty; urgency=low
 [ Tim Gardner ]
 * Release Tracking Bug
 - LP: #772381
 [ Brad Figg ]
 * Ubuntu-2.6.38-9.43
 [ Bryan Wu ]
 * merge Ubuntu-2.6.38-9.43
 * cherry-pick 6 patches from u2 of 'for-ubuntu' branch
 * [Config] Sync up configs for 2.6.38.4
 [ Herton Ronaldo Krzesinski ]
 * SAUCE: Revert "x86, hibernate: Initialize mmu_cr4_features during boot"
 - LP: #764758
 [ Leann Ogasawara ]
 * [Config] updateconfigs for 2.6.38.4
 [ Paolo Pisati ]
 * [Config] s/USB_MUSB_TUSB6010/USB_MUSB_OMAP2PLUS/ on omap3 to get musb
 - LP: #759913
 [ Serge E. Hallyn ]
 * SAUCE: kvm: fix push of wrong eip when doing softint
 - LP: #747090
 [ Tim Gardner ]
 * [Config] Add cachefiles.ko to virtual flavour
 - LP: #770430
 [ Upstream Kernel Changes ]
 * Revert "net/sunrpc: Use static const char arrays"
 - LP: #761134
 * Revert "x86: Cleanup highmap after brk is concluded"
 - LP: #761134
 * ALSA: hda - Fix SPDIF out regression on ALC889
 - LP: #761134
 * ALSA: Fix yet another race in disconnection
 - LP: #761134
 * ALSA: vmalloc buffers should use normal mmap
 - LP: #761134
 * perf: Better fit max unprivileged mlock pages for tools needs
 - LP: #761134
 * myri10ge: fix rmmod crash
 - LP: #761134
 * cciss: fix lost command issue
 - LP: #761134
 * ath9k: Fix kernel panic in AR2427
 - LP: #761134
 * sound/oss/opl3: validate voice and channel indexes
 - LP: #761134
 * mac80211: initialize sta->last_rx in sta_info_alloc
 - LP: #761134
 * ses: show devices for enclosures with no page 7
 - LP: #761134
 * ses: Avoid kernel panic when lun 0 is not mapped
 - LP: #761134
 * PCI/ACPI: Report ASPM support to BIOS if not disabled from command line
 - LP: #761134
 * eCryptfs: Unlock page in write_begin error path
 - LP: #761134
 * eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
 - LP: #761134
 * crypto: aesni-intel - fixed problem with packets that are not multiple
 of 64bytes
 - LP: #761134
 * staging: usbip: bugfixes related to kthread conversion
 - LP: #761134
 * staging: usbip: bugfix add number of packets for isochronous frames
 - LP: #761134
 * staging: usbip: bugfix for isochronous packets and optimization
 - LP: #761134
 * staging: hv: use sync_bitops when interacting with the hypervisor
 - LP: #761134
 * staging: hv: Fix GARP not sent after Quick Migration
 - LP: #761134
 * xfs: register the inode cache shrinker before quotachecks
 - LP: #761134
 * amd64_edac: Fix potential memleak
 - LP: #761134
 * watchdog: s3c2410_wdt.c: Convert release_resource to
 release_region/release_mem_region
 - LP: #761134
 * watchdog: Convert release_resource to release_region/release_mem_region
 - LP: #761134
 * irda: validate peer name and attribute lengths
 - LP: #761134
 * irda: prevent heap corruption on invalid nickname
 - LP: #761134
 * powerpc: Fix accounting of softirq time when idle
 - LP: #761134
 * nilfs2: fix data loss in mmap page write for hole blocks
 - LP: #761134
 * ASoC: Explicitly say registerless widgets have no register
 - LP: #761134
 * ASoC: imx: set watermarks for mx2-dma
 - LP: #761134
 * ASoC: imx: fix burstsize for DMA
 - LP: #761134
 * ASoC: Fix CODEC device name for Corgi
 - LP: #761134
 * ALSA: ens1371: fix Creative Ectiva support
 - LP: #761134
 * ALSA: hda - HDMI: Fix MCP7x audio infoframe checksums
 - LP: #761134
 * ALSA: HDA: Fix single internal mic on ALC275 (Sony Vaio VPCSB1C5E)
 - LP: #752792, #761134
 * net: fix ethtool->set_flags not intended -EINVAL return value
 - LP: #761134
 * drm/radeon/kms: add some new ontario pci ids
 - LP: #761134
 * drm/radeon/kms: add some sanity checks to obj info record parsingi (v2)
 - LP: #761134
 * inotify: fix double free/corruption of stuct user
 - LP: #761134
 * HID: hid-magicmouse: Increase evdev buffer size
 - LP: #761134
 * perf: Fix task_struct reference leak
 - LP: #761134
 * perf: Rebase max unprivileged mlock threshold on top of page size
 - LP: #761134
 * ROSE: prevent heap corruption with bad facilities
 - LP: #761134
 * Btrfs: Fix uninitialized root flags for subvolumes
 - LP: #761134
 * x86, mtrr, pat: Fix one cpu getting out of sync during resume
 - LP: #761134
 * Input: synaptics - fix crash in synaptics_module_init()
 - LP: #761134
 * ath9k: fix a chip wakeup related crash in ath9k_start
 - LP: #761134
 * mac80211: fix a crash in minstrel_ht in HT mode with no supported MCS
 rates
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Fix up SPI messages cs_change behavior
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Add delay after self test
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Fix addresses of GYRO and ACCEL
 calibration offset
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Make sure only enabled scan_elements are
 pushed into the ring
 - LP: #761134
 * UBIFS: do not read flash unnecessarily
 - LP: #761134
 * UBIFS: fix oops on error path in read_pnode
 - LP: #761134
 * UBIFS: fix debugging failure in dbg_check_space_info
 - LP: #761134
 * quota: Don't write quota info in dquot_commit()
 - LP: #761134
 * mm: avoid wrapping vm_pgoff in mremap()
 - LP: #761134
 * iwlwifi: accept EEPROM version 0x423 for iwl6000
 - LP: #761134
 * p54usb: IDs for two new devices
 - LP: #761134
 * rt2x00: Fix radio off hang issue for PCIE interface
 - LP: #662288, #761134
 * rt2x00: fix cancelling uninitialized work
 - LP: #761134
 * wl12xx: fix potential buffer overflow in testmode nvs push
 - LP: #761134
 * media/radio/wl1273: fix build errors
 - LP: #761134
 * b43: allocate receive buffers big enough for max frame len + offset
 - LP: #761134
 * Bluetooth: sco: fix information leak to userspace
 - LP: #761134
 * bridge: netfilter: fix information leak
 - LP: #761134
 * Bluetooth: bnep: fix buffer overflow
 - LP: #761134
 * Bluetooth: add support for Apple MacBook Pro 8,2
 - LP: #761134
 * Treat writes as new when holes span across page boundaries
 - LP: #761134
 * char/tpm: Fix unitialized usage of data buffer
 - LP: #761134
 * netfilter: ip_tables: fix infoleak to userspace
 - LP: #761134
 * netfilter: xtables: fix reentrancy
 - LP: #761134
 * netfilter: arp_tables: fix infoleak to userspace
 - LP: #761134
 * netfilter: ipt_CLUSTERIP: fix buffer overflow
 - LP: #761134
 * ipv6: netfilter: ip6_tables: fix infoleak to userspace
 - LP: #761134
 * scsi_transport_iscsi: make priv_sess file writeable only by root
 - LP: #761134
 * mfd: ab8500: world-writable debugfs register-* files
 - LP: #761134
 * mfd: ab3500: world-writable debugfs register-* files
 - LP: #761134
 * mfd: ab3100: world-writable debugfs *_priv files
 - LP: #761134
 * drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
 - LP: #761134
 * drivers/misc/ep93xx_pwm.c: world-writable sysfs files
 - LP: #761134
 * drivers/leds/leds-lp5523.c: world-writable engine* sysfs files
 - LP: #761134
 * drivers/leds/leds-lp5521.c: world-writable sysfs engine* files
 - LP: #761134
 * econet: 4 byte infoleak to the network
 - LP: #761134
 * netfilter: h323: bug in parsing of ASN1 SEQOF field
 - LP: #761134
 * sound/oss: remove offset from load_patch callbacks
 - LP: #761134
 * drivers/media/video/tlg2300/pd-video.c: Remove second mutex_unlock in
 pd_vidioc_s_fmt
 - LP: #761134
 * acer-wmi: does not set persistence state by rfkill_init_sw_state
 - LP: #761134
 * Squashfs: Use vmalloc rather than kmalloc for zlib workspace
 - LP: #761134
 * Squashfs: handle corruption of directory structure
 - LP: #761134
 * atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
 - LP: #761134
 * atm/solos-pci: Don't flap VCs when carrier state changes
 - LP: #761134
 * ext4: fix a double free in ext4_register_li_request
 - LP: #761134
 * ext4: fix credits computing for indirect mapped files
 - LP: #761134
 * nfsd: fix auth_domain reference leak on nlm operations
 - LP: #761134
 * nfsd4: fix oops on lock failure
 - LP: #761134
 * Linux 2.6.38.3
 - LP: #761134
 * vm: fix vm_pgoff wrap in stack expansion
 - LP: #769042
 * drm/radeon/kms: pll tweaks for rv6xx
 - LP: #769042
 * drm/radeon/kms: fix suspend on rv530 asics
 - LP: #769042
 * cifs: always do is_path_accessible check in cifs_mount
 - LP: #769042
 * cifs: check for private_data before trying to put it
 - LP: #769042
 * cifs: set ra_pages in backing_dev_info
 - LP: #769042
 * cifs: wrap received signature check in srv_mutex
 - LP: #769042
 * video: sn9c102: world-wirtable sysfs files
 - LP: #769042
 * UBIFS: restrict world-writable debugfs files
 - LP: #769042
 * ALSA: hda - Fix pin-config of Gigabyte mobo
 - LP: #769042
 * NET: cdc-phonet, handle empty phonet header
 - LP: #769042
 * x86: Fix a bogus unwind annotation in lib/semaphore_32.S
 - LP: #769042
 * tioca: Fix assignment from incompatible pointer warnings
 - LP: #769042
 * mca.c: Fix cast from integer to pointer warning
 - LP: #769042
 * vm: fix mlock() on stack guard page
 - LP: #769042
 * UBIFS: fix assertion warnings
 - LP: #769042
 * perf: Fix task context scheduling
 - LP: #769042
 * bridge: Fix possibly wrong MLD queries' ethernet source address
 - LP: #769042
 * fib: add rtnl locking in ip_fib_net_exit
 - LP: #769042
 * gianfar: Fall back to software tcp/udp checksum on older controllers
 - LP: #769042
 * l2tp: fix possible oops on l2tp_eth module unload
 - LP: #769042
 * net ipv6: Fix duplicate /proc/sys/net/ipv6/neigh directory entries.
 - LP: #769042
 * net_sched: fix ip_tos2prio
 - LP: #769042
 * pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev
 - LP: #769042
 * sctp: Pass __GFP_NOWARN to hash table allocation attempts.
 - LP: #769042
 * tcp: avoid cwnd moderation in undo
 - LP: #769042
 * xfrm: Refcount destination entry on xfrm_lookup
 - LP: #769042
 * vlan: should take into account needed_headroom
 - LP: #769042
 * bridge: Reset IPCB when entering IP stack on NF_FORWARD
 - LP: #769042
 * sparc: Fix .size directive for do_int_load
 - LP: #769042
 * sparc32: Fix might-be-used-uninitialized warning in do_sparc_fault().
 - LP: #769042
 * sparc32: Pass task_struct to schedule_tail() in ret_from_fork
 - LP: #769042
 * sparc64: Fix build errors with gcc-4.6.0
 - LP: #769042
 * futex: Set FLAGS_HAS_TIMEOUT during futex_wait restart setup
 - LP: #769042
 * kstrto*: converting strings to integers done (hopefully) right
 - LP: #769042
 * mm/thp: use conventional format for boolean attributes
 - LP: #769042
 * ramfs: fix memleak on no-mmu arch
 - LP: #769042
 * oom-kill: remove boost_dying_task_prio()
 - LP: #769042
 * MAINTAINERS: update STABLE BRANCH info
 - LP: #769042
 * UBIFS: fix oops when R/O file-system is fsync'ed
 - LP: #769042
 * x86, AMD: Set ARAT feature on AMD processors
 - LP: #769042
 * x86, amd: Disable GartTlbWlkErr when BIOS forgets it
 - LP: #769042
 * vfs: Fix absolute RCU path walk failures due to uninitialized seq
 number
 - LP: #769042
 * ARM: 6864/1: hw_breakpoint: clear DBGVCR out of reset
 - LP: #769042
 * i2c-algo-bit: Call pre/post_xfer for bit_test
 - LP: #769042
 * RTC: add missing "return 0" in new alarm func for rtc-bfin.c
 - LP: #769042
 * sched: Fix erroneous all_pinned logic
 - LP: #769042
 * vmscan: all_unreclaimable() use zone->all_unreclaimable as a name
 - LP: #769042
 * brk: COMPAT_BRK: fix detection of randomized brk
 - LP: #769042
 * usb: musb: temporarily make it bool
 - LP: #769042
 * USB: ftdi_sio: Added IDs for CTI USB Serial Devices
 - LP: #769042
 * USB: ftdi_sio: add PID for OCT DK201 docking station
 - LP: #769042
 * USB: ftdi_sio: add ids for Hameg HO720 and HO730
 - LP: #769042
 * USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
 - LP: #769042
 * next_pidmap: fix overflow condition
 - LP: #769042
 * proc: do proper range check on readdir offset
 - LP: #769042
 * powerpc: Fix oops if scan_dispatch_log is called too early
 - LP: #769042
 * powerpc/perf_event: Skip updating kernel counters if register value
 shrinks
 - LP: #769042
 * usb: Fix qcserial memory leak on rmmod
 - LP: #769042
 * usb: qcserial avoid pointing to freed memory
 - LP: #769042
 * usb: qcserial add missing errorpath kfrees
 - LP: #769042
 * USB: EHCI: unlink unused QHs when the controller is stopped
 - LP: #769042
 * USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
 - LP: #769042
 * USB: xhci - fix unsafe macro definitions
 - LP: #769042
 * USB: xhci - fix math in xhci_get_endpoint_interval()
 - LP: #769042
 * USB: xhci - also free streams when resetting devices
 - LP: #769042
 * USB: Fix unplug of device with active streams
 - LP: #769042
 * radeon: Fix KMS CP writeback on big endian machines.
 - LP: #769042
 * Bluetooth: Fix HCI_RESET command synchronization
 - LP: #700292, #769042
 * perf tool: Fix gcc 4.6.0 issues
 - LP: #769042
 * bridge: reset IPCB in br_parse_ip_options
 - LP: #769042
 * ip: ip_options_compile() resilient to NULL skb route
 - LP: #769042
 * Linux 2.6.38.4
 - LP: #769042
 * (pre stable) ath9k_hw: partially revert "fix dma descriptor rx error
 bit parsing"
 - LP: #735171
 * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
 CVE-2011-1017
 - LP: #771382
 - CVE-2011-1017
 * (pre-stable) drm/i915: Sanitize the output registers after resume
 - LP: #745304
 * ARM: EXYNOS4: Register HSMMC2 before HSMMC0 on SMDKV310 board
 * ARM: vexpress: add basic DT platform matching support
 * ARM: vexpress: add basic dts DT source
 * OMAP: Fixed gpio polarity of gpio USB-phy reset.
 * arm/dt: Fix broken dtbs rule.
 * arm/dt: vexpress: Update basic DT to use skeleton.dtsi file.
 [ u2 of for-ubuntu ]
 * arm/dt: vexpress: Update basic DT to use skeleton.dtsi file.
 * arm/dt: Fix broken dtbs rule.
 * OMAP: Fixed gpio polarity of gpio USB-phy reset.
 * ARM: vexpress: add basic dts DT source
 * ARM: vexpress: add basic DT platform matching support
 * ARM: EXYNOS4: Register HSMMC2 before HSMMC0 on SMDKV310 board
 [ Ubuntu: 2.6.38-9.43 ]
 * Release Tracking Bug
 - LP: #772096
 * SAUCE: Revert "x86, hibernate: Initialize mmu_cr4_features during boot"
 - LP: #764758
 * [Config] updateconfigs for 2.6.38.4
 * [Config] s/USB_MUSB_TUSB6010/USB_MUSB_OMAP2PLUS/ on omap3 to get musb
 - LP: #759913
 * SAUCE: kvm: fix push of wrong eip when doing softint
 - LP: #747090
 * [Config] Add cachefiles.ko to virtual flavour
 - LP: #770430
 * Revert "net/sunrpc: Use static const char arrays"
 - LP: #761134
 * Revert "x86: Cleanup highmap after brk is concluded"
 - LP: #761134
 * ALSA: hda - Fix SPDIF out regression on ALC889
 - LP: #761134
 * ALSA: Fix yet another race in disconnection
 - LP: #761134
 * ALSA: vmalloc buffers should use normal mmap
 - LP: #761134
 * perf: Better fit max unprivileged mlock pages for tools needs
 - LP: #761134
 * myri10ge: fix rmmod crash
 - LP: #761134
 * cciss: fix lost command issue
 - LP: #761134
 * ath9k: Fix kernel panic in AR2427
 - LP: #761134
 * sound/oss/opl3: validate voice and channel indexes
 - LP: #761134
 * mac80211: initialize sta->last_rx in sta_info_alloc
 - LP: #761134
 * ses: show devices for enclosures with no page 7
 - LP: #761134
 * ses: Avoid kernel panic when lun 0 is not mapped
 - LP: #761134
 * PCI/ACPI: Report ASPM support to BIOS if not disabled from command line
 - LP: #761134
 * eCryptfs: Unlock page in write_begin error path
 - LP: #761134
 * eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
 - LP: #761134
 * crypto: aesni-intel - fixed problem with packets that are not multiple
 of 64bytes
 - LP: #761134
 * staging: usbip: bugfixes related to kthread conversion
 - LP: #761134
 * staging: usbip: bugfix add number of packets for isochronous frames
 - LP: #761134
 * staging: usbip: bugfix for isochronous packets and optimization
 - LP: #761134
 * staging: hv: use sync_bitops when interacting with the hypervisor
 - LP: #761134
 * staging: hv: Fix GARP not sent after Quick Migration
 - LP: #761134
 * xfs: register the inode cache shrinker before quotachecks
 - LP: #761134
 * amd64_edac: Fix potential memleak
 - LP: #761134
 * watchdog: s3c2410_wdt.c: Convert release_resource to
 release_region/release_mem_region
 - LP: #761134
 * watchdog: Convert release_resource to release_region/release_mem_region
 - LP: #761134
 * irda: validate peer name and attribute lengths
 - LP: #761134
 * irda: prevent heap corruption on invalid nickname
 - LP: #761134
 * powerpc: Fix accounting of softirq time when idle
 - LP: #761134
 * nilfs2: fix data loss in mmap page write for hole blocks
 - LP: #761134
 * ASoC: Explicitly say registerless widgets have no register
 - LP: #761134
 * ASoC: imx: set watermarks for mx2-dma
 - LP: #761134
 * ASoC: imx: fix burstsize for DMA
 - LP: #761134
 * ASoC: Fix CODEC device name for Corgi
 - LP: #761134
 * ALSA: ens1371: fix Creative Ectiva support
 - LP: #761134
 * ALSA: hda - HDMI: Fix MCP7x audio infoframe checksums
 - LP: #761134
 * ALSA: HDA: Fix single internal mic on ALC275 (Sony Vaio VPCSB1C5E)
 - LP: #752792, #761134
 * net: fix ethtool->set_flags not intended -EINVAL return value
 - LP: #761134
 * drm/radeon/kms: add some new ontario pci ids
 - LP: #761134
 * drm/radeon/kms: add some sanity checks to obj info record parsingi (v2)
 - LP: #761134
 * inotify: fix double free/corruption of stuct user
 - LP: #761134
 * HID: hid-magicmouse: Increase evdev buffer size
 - LP: #761134
 * perf: Fix task_struct reference leak
 - LP: #761134
 * perf: Rebase max unprivileged mlock threshold on top of page size
 - LP: #761134
 * ROSE: prevent heap corruption with bad facilities
 - LP: #761134
 * Btrfs: Fix uninitialized root flags for subvolumes
 - LP: #761134
 * x86, mtrr, pat: Fix one cpu getting out of sync during resume
 - LP: #761134
 * Input: synaptics - fix crash in synaptics_module_init()
 - LP: #761134
 * ath9k: fix a chip wakeup related crash in ath9k_start
 - LP: #761134
 * mac80211: fix a crash in minstrel_ht in HT mode with no supported MCS
 rates
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Fix up SPI messages cs_change behavior
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Add delay after self test
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Fix addresses of GYRO and ACCEL
 calibration offset
 - LP: #761134
 * staging: IIO: IMU: ADIS16400: Make sure only enabled scan_elements are
 pushed into the ring
 - LP: #761134
 * UBIFS: do not read flash unnecessarily
 - LP: #761134
 * UBIFS: fix oops on error path in read_pnode
 - LP: #761134
 * UBIFS: fix debugging failure in dbg_check_space_info
 - LP: #761134
 * quota: Don't write quota info in dquot_commit()
 - LP: #761134
 * mm: avoid wrapping vm_pgoff in mremap()
 - LP: #761134
 * iwlwifi: accept EEPROM version 0x423 for iwl6000
 - LP: #761134
 * p54usb: IDs for two new devices
 - LP: #761134
 * rt2x00: Fix radio off hang issue for PCIE interface
 - LP: #662288, #761134
 * rt2x00: fix cancelling uninitialized work
 - LP: #761134
 * wl12xx: fix potential buffer overflow in testmode nvs push
 - LP: #761134
 * media/radio/wl1273: fix build errors
 - LP: #761134
 * b43: allocate receive buffers big enough for max frame len + offset
 - LP: #761134
 * Bluetooth: sco: fix information leak to userspace
 - LP: #761134
 * bridge: netfilter: fix information leak
 - LP: #761134
 * Bluetooth: bnep: fix buffer overflow
 - LP: #761134
 * Bluetooth: add support for Apple MacBook Pro 8,2
 - LP: #761134
 * Treat writes as new when holes span across page boundaries
 - LP: #761134
 * char/tpm: Fix unitialized usage of data buffer
 - LP: #761134
 * netfilter: ip_tables: fix infoleak to userspace
 - LP: #761134
 * netfilter: xtables: fix reentrancy
 - LP: #761134
 * netfilter: arp_tables: fix infoleak to userspace
 - LP: #761134
 * netfilter: ipt_CLUSTERIP: fix buffer overflow
 - LP: #761134
 * ipv6: netfilter: ip6_tables: fix infoleak to userspace
 - LP: #761134
 * scsi_transport_iscsi: make priv_sess file writeable only by root
 - LP: #761134
 * mfd: ab8500: world-writable debugfs register-* files
 - LP: #761134
 * mfd: ab3500: world-writable debugfs register-* files
 - LP: #761134
 * mfd: ab3100: world-writable debugfs *_priv files
 - LP: #761134
 * drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
 - LP: #761134
 * drivers/misc/ep93xx_pwm.c: world-writable sysfs files
 - LP: #761134
 * drivers/leds/leds-lp5523.c: world-writable engine* sysfs files
 - LP: #761134
 * drivers/leds/leds-lp5521.c: world-writable sysfs engine* files
 - LP: #761134
 * econet: 4 byte infoleak to the network
 - LP: #761134
 * netfilter: h323: bug in parsing of ASN1 SEQOF field
 - LP: #761134
 * sound/oss: remove offset from load_patch callbacks
 - LP: #761134
 * drivers/media/video/tlg2300/pd-video.c: Remove second mutex_unlock in
 pd_vidioc_s_fmt
 - LP: #761134
 * acer-wmi: does not set persistence state by rfkill_init_sw_state
 - LP: #761134
 * Squashfs: Use vmalloc rather than kmalloc for zlib workspace
 - LP: #761134
 * Squashfs: handle corruption of directory structure
 - LP: #761134
 * atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
 - LP: #761134
 * atm/solos-pci: Don't flap VCs when carrier state changes
 - LP: #761134
 * ext4: fix a double free in ext4_register_li_request
 - LP: #761134
 * ext4: fix credits computing for indirect mapped files
 - LP: #761134
 * nfsd: fix auth_domain reference leak on nlm operations
 - LP: #761134
 * nfsd4: fix oops on lock failure
 - LP: #761134
 * Linux 2.6.38.3
 - LP: #761134
 * vm: fix vm_pgoff wrap in stack expansion
 - LP: #769042
 * drm/radeon/kms: pll tweaks for rv6xx
 - LP: #769042
 * drm/radeon/kms: fix suspend on rv530 asics
 - LP: #769042
 * cifs: always do is_path_accessible check in cifs_mount
 - LP: #769042
 * cifs: check for private_data before trying to put it
 - LP: #769042
 * cifs: set ra_pages in backing_dev_info
 - LP: #769042
 * cifs: wrap received signature check in srv_mutex
 - LP: #769042
 * video: sn9c102: world-wirtable sysfs files
 - LP: #769042
 * UBIFS: restrict world-writable debugfs files
 - LP: #769042
 * ALSA: hda - Fix pin-config of Gigabyte mobo
 - LP: #769042
 * NET: cdc-phonet, handle empty phonet header
 - LP: #769042
 * x86: Fix a bogus unwind annotation in lib/semaphore_32.S
 - LP: #769042
 * tioca: Fix assignment from incompatible pointer warnings
 - LP: #769042
 * mca.c: Fix cast from integer to pointer warning
 - LP: #769042
 * vm: fix mlock() on stack guard page
 - LP: #769042
 * UBIFS: fix assertion warnings
 - LP: #769042
 * perf: Fix task context scheduling
 - LP: #769042
 * bridge: Fix possibly wrong MLD queries' ethernet source address
 - LP: #769042
 * fib: add rtnl locking in ip_fib_net_exit
 - LP: #769042
 * gianfar: Fall back to software tcp/udp checksum on older controllers
 - LP: #769042
 * l2tp: fix possible oops on l2tp_eth module unload
 - LP: #769042
 * net ipv6: Fix duplicate /proc/sys/net/ipv6/neigh directory entries.
 - LP: #769042
 * net_sched: fix ip_tos2prio
 - LP: #769042
 * pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev
 - LP: #769042
 * sctp: Pass __GFP_NOWARN to hash table allocation attempts.
 - LP: #769042
 * tcp: avoid cwnd moderation in undo
 - LP: #769042
 * xfrm: Refcount destination entry on xfrm_lookup
 - LP: #769042
 * vlan: should take into account needed_headroom
 - LP: #769042
 * bridge: Reset IPCB when entering IP stack on NF_FORWARD
 - LP: #769042
 * sparc: Fix .size directive for do_int_load
 - LP: #769042
 * sparc32: Fix might-be-used-uninitialized warning in do_sparc_fault().
 - LP: #769042
 * sparc32: Pass task_struct to schedule_tail() in ret_from_fork
 - LP: #769042
 * sparc64: Fix build errors with gcc-4.6.0
 - LP: #769042
 * futex: Set FLAGS_HAS_TIMEOUT during futex_wait restart setup
 - LP: #769042
 * kstrto*: converting strings to integers done (hopefully) right
 - LP: #769042
 * mm/thp: use conventional format for boolean attributes
 - LP: #769042
 * ramfs: fix memleak on no-mmu arch
 - LP: #769042
 * oom-kill: remove boost_dying_task_prio()
 - LP: #769042
 * MAINTAINERS: update STABLE BRANCH info
 - LP: #769042
 * UBIFS: fix oops when R/O file-system is fsync'ed
 - LP: #769042
 * x86, AMD: Set ARAT feature on AMD processors
 - LP: #769042
 * x86, amd: Disable GartTlbWlkErr when BIOS forgets it
 - LP: #769042
 * vfs: Fix absolute RCU path walk failures due to uninitialized seq
 number
 - LP: #769042
 * ARM: 6864/1: hw_breakpoint: clear DBGVCR out of reset
 - LP: #769042
 * i2c-algo-bit: Call pre/post_xfer for bit_test
 - LP: #769042
 * RTC: add missing "return 0" in new alarm func for rtc-bfin.c
 - LP: #769042
 * sched: Fix erroneous all_pinned logic
 - LP: #769042
 * vmscan: all_unreclaimable() use zone->all_unreclaimable as a name
 - LP: #769042
 * brk: COMPAT_BRK: fix detection of randomized brk
 - LP: #769042
 * usb: musb: temporarily make it bool
 - LP: #769042
 * USB: ftdi_sio: Added IDs for CTI USB Serial Devices
 - LP: #769042
 * USB: ftdi_sio: add PID for OCT DK201 docking station
 - LP: #769042
 * USB: ftdi_sio: add ids for Hameg HO720 and HO730
 - LP: #769042
 * USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
 - LP: #769042
 * next_pidmap: fix overflow condition
 - LP: #769042
 * proc: do proper range check on readdir offset
 - LP: #769042
 * powerpc: Fix oops if scan_dispatch_log is called too early
 - LP: #769042
 * powerpc/perf_event: Skip updating kernel counters if register value
 shrinks
 - LP: #769042
 * usb: Fix qcserial memory leak on rmmod
 - LP: #769042
 * usb: qcserial avoid pointing to freed memory
 - LP: #769042
 * usb: qcserial add missing errorpath kfrees
 - LP: #769042
 * USB: EHCI: unlink unused QHs when the controller is stopped
 - LP: #769042
 * USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
 - LP: #769042
 * USB: xhci - fix unsafe macro definitions
 - LP: #769042
 * USB: xhci - fix math in xhci_get_endpoint_interval()
 - LP: #769042
 * USB: xhci - also free streams when resetting devices
 - LP: #769042
 * USB: Fix unplug of device with active streams
 - LP: #769042
 * radeon: Fix KMS CP writeback on big endian machines.
 - LP: #769042
 * Bluetooth: Fix HCI_RESET command synchronization
 - LP: #700292, #769042
 * perf tool: Fix gcc 4.6.0 issues
 - LP: #769042
 * bridge: reset IPCB in br_parse_ip_options
 - LP: #769042
 * ip: ip_options_compile() resilient to NULL skb route
 - LP: #769042
 * Linux 2.6.38.4
 - LP: #769042
 * (pre stable) ath9k_hw: partially revert "fix dma descriptor rx error
 bit parsing"
 - LP: #735171
 * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
 CVE-2011-1017
 - LP: #771382
 - CVE-2011-1017
 * (pre-stable) drm/i915: Sanitize the output registers after resume
 - LP: #745304
linux-ti-omap4 (2.6.38-1208.12) natty; urgency=low
 [ Tim Gardner ]
 * Release Tracking Bug
 - LP: #770368
 [ Bryan Wu ]
 * merge Ubuntu-2.6.38-8.41
 * merge Ubuntu-2.6.38-8.42
 * merge u1 of 'for-ubuntu' branch
 * [Config] sync up configs
 [ David Henningsson ]
 * SAUCE: (drop after 2.6.38) ALSA: HDA: Fix dock mic for Lenovo
 X220-tablet
 - LP: #751033
 [ Gustavo F. Padovan ]
 * SAUCE: Revert "Bluetooth: Add new PID for Atheros 3011"
 - LP: #720949
 [ Herton Ronaldo Krzesinski ]
 * SAUCE: (drop after 2.6.39) v4l: make sure drivers supply a zeroed
 struct v4l2_subdev
 - LP: #745213
 [ John Johansen ]
 * AppArmor: Fix masking of capabilities in complain mode
 - LP: #748656
 [ Kees Cook ]
 * SAUCE: nx-emu: further clarify dmesg reporting
 - LP: #745181
 [ Leann Ogasawara ]
 * Ubuntu-2.6.38-8.40
 * Ubuntu-2.6.38-8.41
 * [Config] Disable CONFIG_RTS_PSTOR for armel, powerpc
 * Ubuntu-2.6.38-8.42
 [ Luke Yelavich ]
 * [Config] Disable CONFIG_CRASH_DUMP on 32-bit powerpc kernels
 - LP: #745358
 * [Config] Disable CONFIG_DRM_RADEON_KMS on powerpc kernels
 * [Config] Build some framebuffer drivers as modules for powerpc kernels.
 [ Manoj Iyer ]
 * SAUCE: thinkpad-acpi: module autoloading for newer Lenovo ThinkPads.
 - LP: #745217
 * SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
 - LP: #746652
 [ Seth Forshee ]
 * SAUCE: (drop after 2.6.38) eeepc-wmi: Add support for T101MT
 Home/Express Gate key
 [ Steve Langasek ]
 * [Config] Make linux-libc-dev coinstallable under multiarch
 - LP: #750585
 [ Tim Gardner ]
 * SAUCE: Increase the default hard limit for open FDs to 4096
 - LP: #663090
 * [Config] CONFIG_RTS_PSTOR=m
 - LP: #698006
 [ Upstream Kernel Changes ]
 * Revert "tcp: disallow bind() to reuse addr/port"
 - LP: #731878
 * ALSA: pcm: fix infinite loop in snd_pcm_update_hw_ptr0()
 * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
 * ALSA: HDA: Add dock mic quirk for Lenovo Thinkpad X220
 - LP: #746259
 * ALSA: HDA: New AD1984A model for Dell Precision R5500
 - LP: #741516
 * Input: sparse-keymap - report scancodes with key events
 * Input: sparse-keymap - report KEY_UNKNOWN for unknown scan codes
 * KVM: SVM: Load %gs earlier if CONFIG_X86_32_LAZY_GS=n
 - LP: #729085
 * watchdog: sp5100_tco.c: Check if firmware has set correct value in
 tcobase.
 - LP: #740011
 * staging: add rts_pstor for Realtek PCIE cardreader
 - LP: #698006
 * staging: fix rts_pstor build errors
 - LP: #698006
 * Staging: rts_pstor: fixed some brace code styling issues
 - LP: #698006
 * staging: rts_pstor: potential NULL dereference
 - LP: #698006
 * Staging: rts_pstor: fix read past end of buffer
 - LP: #698006
 * staging: rts_pstor: delete a function
 - LP: #698006
 * staging: rts_pstor: fix sparse warning
 - LP: #698006
 * staging: rts_pstor: fix a bug that a greenhouse sd card can't be
 recognized
 - LP: #698006
 * staging: rts_pstor: optimize kmalloc to kzalloc
 - LP: #698006
 * staging: rts_pstor: MSXC card power class
 - LP: #698006
 * staging: rts_pstor: modify initial card clock
 - LP: #698006
 * staging: rts_pstor: set lun_mode in a different place
 - LP: #698006
 * x86, hibernate: Initialize mmu_cr4_features during boot
 - LP: #752870
 * ARM: EXYNOS4: CPUIDLE Support
 * ARM: EXYNOS4: Fix incorrect mapping of gpio pull-up macro to register
 setting
 * ARM: EXYNOS4: Fix card insert/removal event detection on smdkv310 board
 * ARM: 6864/1: hw_breakpoint: clear DBGVCR out of reset
 * ARM: 6865/1: perf: ensure pass through zero is counted on overflow
 * ARM: 6866/1: Do not restrict HIGHPTE to !OUTER_CACHE
 * ARM: 6867/1: Introduce THREAD_NOTIFY_COPY for copy_thread() hooks
 * ARM: 6868/1: Preserve the VFP state during fork
 * ARM: EXYNOS4: CPUIDLE Support
 * config slim down reference defconfig
 * MAKEFILE correct using shawn dtb method
 * omap2 sdp4430 protect hdmi with hdmi sound config
 * Subject: [PATCH 3/3] usb: musb: Moving the Vbus enable function call
 from to workqueue.
 * omap2 4430sdp board file rearrange
 * alsa soc implement abe constraint test
 * omap2 panda neutral reodering of structs
 * omap2 hwmod 44xx neutral reordering
 * alsa panda hdmi audio ensure cpu dai gets built
 * omap2 hwmod 2420 mmc devattr name fix
 * enable build omap3 boards
 [ u1 of for-ubuntu ]
 * ARM: EXYNOS4: CPUIDLE Support
 * ARM: EXYNOS4: Fix incorrect mapping of gpio pull-up macro to register
 setting
 * ARM: EXYNOS4: Fix card insert/removal event detection on smdkv310 board
 * ARM: 6864/1: hw_breakpoint: clear DBGVCR out of reset
 * ARM: 6865/1: perf: ensure pass through zero is counted on overflow
 * ARM: 6866/1: Do not restrict HIGHPTE to !OUTER_CACHE
 * ARM: 6867/1: Introduce THREAD_NOTIFY_COPY for copy_thread() hooks
 * ARM: 6868/1: Preserve the VFP state during fork
 * ARM: EXYNOS4: CPUIDLE Support
 * config slim down reference defconfig
 * MAKEFILE correct using shawn dtb method
 * omap2 sdp4430 protect hdmi with hdmi sound config
 * Subject: [PATCH 3/3] usb: musb: Moving the Vbus enable function call
 from to workqueue.
 * omap2 4430sdp board file rearrange
 * alsa soc implement abe constraint test
 * omap2 panda neutral reodering of structs
 * omap2 hwmod 44xx neutral reordering
 * alsa panda hdmi audio ensure cpu dai gets built
 * omap2 hwmod 2420 mmc devattr name fix
 * enable build omap3 boards
 [ Ubuntu: 2.6.38-8.42 ]
 * SAUCE: (drop after 2.6.38) ALSA: HDA: Fix dock mic for Lenovo
 X220-tablet
 - LP: #751033
 * SAUCE: Revert "Bluetooth: Add new PID for Atheros 3011"
 - LP: #720949
 * SAUCE: (drop after 2.6.39) v4l: make sure drivers supply a zeroed
 struct v4l2_subdev
 - LP: #745213
 * AppArmor: Fix masking of capabilities in complain mode
 - LP: #748656
 * [Config] Disable CONFIG_RTS_PSTOR for armel, powerpc
 * SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
 - LP: #746652
 * [Config] Make linux-libc-dev coinstallable under multiarch
 - LP: #750585
 * [Config] CONFIG_RTS_PSTOR=m
 - LP: #698006
 * Revert "tcp: disallow bind() to reuse addr/port"
 - LP: #731878
 * ALSA: HDA: Add dock mic quirk for Lenovo Thinkpad X220
 - LP: #746259
 * ALSA: HDA: New AD1984A model for Dell Precision R5500
 - LP: #741516
 * Input: sparse-keymap - report scancodes with key events
 * Input: sparse-keymap - report KEY_UNKNOWN for unknown scan codes
 * KVM: SVM: Load %gs earlier if CONFIG_X86_32_LAZY_GS=n
 - LP: #729085
 * watchdog: sp5100_tco.c: Check if firmware has set correct value in
 tcobase.
 - LP: #740011
 * staging: add rts_pstor for Realtek PCIE cardreader
 - LP: #698006
 * staging: fix rts_pstor build errors
 - LP: #698006
 * Staging: rts_pstor: fixed some brace code styling issues
 - LP: #698006
 * staging: rts_pstor: potential NULL dereference
 - LP: #698006
 * Staging: rts_pstor: fix read past end of buffer
 - LP: #698006
 * staging: rts_pstor: delete a function
 - LP: #698006
 * staging: rts_pstor: fix sparse warning
 - LP: #698006
 * staging: rts_pstor: fix a bug that a greenhouse sd card can't be
 recognized
 - LP: #698006
 * staging: rts_pstor: optimize kmalloc to kzalloc
 - LP: #698006
 * staging: rts_pstor: MSXC card power class
 - LP: #698006
 * staging: rts_pstor: modify initial card clock
 - LP: #698006
 * staging: rts_pstor: set lun_mode in a different place
 - LP: #698006
 * x86, hibernate: Initialize mmu_cr4_features during boot
 - LP: #752870
 [ Ubuntu: 2.6.38-8.41 ]
 * [Config] Disable CONFIG_CRASH_DUMP on 32-bit powerpc kernels
 - LP: #745358
 * [Config] Disable CONFIG_DRM_RADEON_KMS on powerpc kernels
 * [Config] Build some framebuffer drivers as modules for powerpc kernels.
 * SAUCE: (drop after 2.6.38) eeepc-wmi: Add support for T101MT
 Home/Express Gate key
 * SAUCE: Increase the default hard limit for open FDs to 4096
 - LP: #663090
 * ALSA: pcm: fix infinite loop in snd_pcm_update_hw_ptr0()
 * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
 -- Paolo Pisati <paolo.pisati@canonical.com> 2011年8月31日 18:34:36 +0200

Changed in linux-ti-omap4 (Ubuntu Natty):

status: Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年09月26日: #10

Download full text (16.4 KiB)

This bug was fixed in the package linux-ec2 - 2.6.32-318.38

---------------
linux-ec2 (2.6.32-318.38) lucid-proposed; urgency=low

[ Stefan Bader ]

* Rebased to 2.6.32-34.76
* Release Tracking Bug
- LP: #837804

[ Ubuntu: 2.6.32-34.76 ]

* Revert "drm/nv50-nvc0: work around an evo channel hang that some people
see"
* Revert "eCryptfs: Handle failed metadata read in lookup"
* Revert "tunnels: fix netns vs proto registration ordering"

[ Ubuntu: 2.6.32-34.75 ]

* drm/i915: Remove BUG_ON from i915_gem_evict_something
- LP: #828550

linux-ec2 (2.6.32-318.37) lucid-proposed; urgency=low

[ Stefan Bader ]

* Release Tracking Bug
- LP: #829162
* XEN: exec: delay address limit change until point of no return
- LP: #802383
* Rebased to 2.6.32-34.74

[ Ubuntu: 2.6.32-34.74 ]

* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
- LP: #813026
- CVE-2011-1020

[ Ubuntu: 2.6.32-34.73 ]

* SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
- LP: #805494
* [Config] Add enic/fnic to udebs
- LP: #801610
* tty: icount changeover for other main devices, CVE-2010-4076,
CVE-2010-4077
- LP: #720189
- CVE-2010-4077
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* ftrace: Only update the function code on write to filter files
- LP: #802383
* kmemleak: Do not return a pointer to an object that kmemleak did not
get
- LP: #802383
* CPU hotplug, re-create sysfs directory and symlinks
- LP: #802383
* Fix memory leak in cpufreq_stat
- LP: #802383
* powerpc/kexec: Fix memory corruption from unallocated slaves
- LP: #802383
* powerpc/oprofile: Handle events that raise an exception without
overflowing
- LP: #802383
* mtd: mtdconcat: fix NAND OOB write
- LP: #802383
* x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
limit
- LP: #802383
* ext3: Fix fs corruption when make_indexed_dir() fails
- LP: #802383
* jbd: Fix forever sleeping process in do_get_write_access()
- LP: #802383
* jbd: fix fsync() tid wraparound bug
- LP: #802383
* ext4: release page cache in ext4_mb_load_buddy error path
- LP: #802383
* Fix Ultrastor asm snippet
- LP: #802383
* x86, amd: Do not enable ARAT feature on AMD processors below family
0x12
- LP: #802383
* x86, amd: Use _safe() msr access for GartTlbWlk disable code
- LP: #802383
* rcu: Fix unpaired rcu_irq_enter() from locking selftests
- LP: #802383
* staging: usbip: fix wrong endian conversion
- LP: #802383
* Fix for buffer overflow in ldm_frag_add not sufficient
- LP: #802383
* seqlock: Don't smp_rmb in seqlock reader spin loop
- LP: #802383
* ALSA: HDA: Use one dmic only for Dell Studio 1558
- LP: #731706, #802383
* ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
- LP: #802383
* ASoC: Add some missing volume update bit sets for wm_hubs devices
- LP: #802383
* mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
- LP: #802383
* loop: limit 'max_part' module param to D...

This bug was fixed in the package linux-ec2 - 2.6.32-318.38
---------------
linux-ec2 (2.6.32-318.38) lucid-proposed; urgency=low
 [ Stefan Bader ]
 * Rebased to 2.6.32-34.76
 * Release Tracking Bug
 - LP: #837804
 [ Ubuntu: 2.6.32-34.76 ]
 * Revert "drm/nv50-nvc0: work around an evo channel hang that some people
 see"
 * Revert "eCryptfs: Handle failed metadata read in lookup"
 * Revert "tunnels: fix netns vs proto registration ordering"
 [ Ubuntu: 2.6.32-34.75 ]
 * drm/i915: Remove BUG_ON from i915_gem_evict_something
 - LP: #828550
linux-ec2 (2.6.32-318.37) lucid-proposed; urgency=low
 [ Stefan Bader ]
 * Release Tracking Bug
 - LP: #829162
 * XEN: exec: delay address limit change until point of no return
 - LP: #802383
 * Rebased to 2.6.32-34.74
 [ Ubuntu: 2.6.32-34.74 ]
 * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 [ Ubuntu: 2.6.32-34.73 ]
 * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
 - LP: #805494
 * [Config] Add enic/fnic to udebs
 - LP: #801610
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * ftrace: Only update the function code on write to filter files
 - LP: #802383
 * kmemleak: Do not return a pointer to an object that kmemleak did not
 get
 - LP: #802383
 * CPU hotplug, re-create sysfs directory and symlinks
 - LP: #802383
 * Fix memory leak in cpufreq_stat
 - LP: #802383
 * powerpc/kexec: Fix memory corruption from unallocated slaves
 - LP: #802383
 * powerpc/oprofile: Handle events that raise an exception without
 overflowing
 - LP: #802383
 * mtd: mtdconcat: fix NAND OOB write
 - LP: #802383
 * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
 limit
 - LP: #802383
 * ext3: Fix fs corruption when make_indexed_dir() fails
 - LP: #802383
 * jbd: Fix forever sleeping process in do_get_write_access()
 - LP: #802383
 * jbd: fix fsync() tid wraparound bug
 - LP: #802383
 * ext4: release page cache in ext4_mb_load_buddy error path
 - LP: #802383
 * Fix Ultrastor asm snippet
 - LP: #802383
 * x86, amd: Do not enable ARAT feature on AMD processors below family
 0x12
 - LP: #802383
 * x86, amd: Use _safe() msr access for GartTlbWlk disable code
 - LP: #802383
 * rcu: Fix unpaired rcu_irq_enter() from locking selftests
 - LP: #802383
 * staging: usbip: fix wrong endian conversion
 - LP: #802383
 * Fix for buffer overflow in ldm_frag_add not sufficient
 - LP: #802383
 * seqlock: Don't smp_rmb in seqlock reader spin loop
 - LP: #802383
 * ALSA: HDA: Use one dmic only for Dell Studio 1558
 - LP: #731706, #802383
 * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
 - LP: #802383
 * ASoC: Add some missing volume update bit sets for wm_hubs devices
 - LP: #802383
 * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
 - LP: #802383
 * loop: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #802383
 * loop: handle on-demand devices correctly
 - LP: #802383
 * USB: CP210x Add 4 Device IDs for AC-Services Devices
 - LP: #802383
 * USB: moto_modem: Add USB identifier for the Motorola VE240.
 - LP: #802383
 * USB: serial: ftdi_sio: adding support for TavIR STK500
 - LP: #802383
 * USB: gamin_gps: Fix for data transfer problems in native mode
 - LP: #802383
 * usb/gadget: at91sam9g20 fix end point max packet size
 - LP: #802383
 * usb: gadget: rndis: don't test against req->length
 - LP: #802383
 * OHCI: fix regression caused by nVidia shutdown workaround
 - LP: #802383
 * p54usb: add zoom 4410 usbid
 - LP: #802383
 * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
 - LP: #802383
 * UBIFS: fix a rare memory leak in ro to rw remounting path
 - LP: #802383
 * i8k: Avoid lahf in 64-bit code
 - LP: #802383
 * cpuidle: menu: fixed wrapping timers at 4.294 seconds
 - LP: #802383
 * dm table: reject devices without request fns
 - LP: #802383
 * atm: expose ATM device index in sysfs
 - LP: #802383
 * brd: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #802383
 * brd: handle on-demand devices correctly
 - LP: #802383
 * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
 callback...
 - LP: #802383
 * PCI: Add quirk for setting valid class for TI816X Endpoint
 - LP: #802383
 * xen mmu: fix a race window causing leave_mm BUG()
 - LP: #802383
 * netfilter: nf_conntrack_reasm: properly handle packets fragmented into
 a single fragment
 - LP: #802383
 * fix memory leak in scsi_report_lun_scan
 - LP: #802383
 * fix refcounting bug in scsi_get_host_dev
 - LP: #802383
 * fix duplicate removal on error path in scsi_sysfs_add_sdev
 - LP: #802383
 * UBIFS: fix shrinker object count reports
 - LP: #802383
 * UBIFS: fix memory leak on error path
 - LP: #802383
 * nbd: limit module parameters to a sane value
 - LP: #802383
 * mm: fix ENOSPC returned by handle_mm_fault()
 - LP: #802383
 * PCI: Set PCIE maxpayload for card during hotplug insertion
 - LP: #802383
 * nl80211: fix check for valid SSID size in scan operations
 - LP: #802383
 * lockdep: Fix lock_is_held() on recursion
 - LP: #802383
 * drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
 - LP: #802383
 * drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
 - LP: #802383
 * fat: Fix corrupt inode flags when remove ATTR_SYS flag
 - LP: #802383
 * xen: off by one errors in multicalls.c
 - LP: #802383
 * x86/amd-iommu: Fix 3 possible endless loops
 - LP: #802383
 * USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
 - LP: #802383
 * USB: core: Tolerate protocol stall during hub and port status read
 - LP: #802383
 * USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
 - LP: #802383
 * ALSA: hda: Fix quirk for Dell Inspiron 910
 - LP: #792712, #802383
 * oprofile, dcookies: Fix possible circular locking dependency
 - LP: #802383
 * CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
 - LP: #802383
 * md: check ->hot_remove_disk when removing disk
 - LP: #802383
 * md/raid5: fix raid5_set_bi_hw_segments
 - LP: #802383
 * md/raid5: fix FUA request handling in ops_run_io()
 - LP: #802383
 * ata: use pci_dev->revision
 - LP: #802383
 * pata_cmd64x: fix PIO setup
 - LP: #802383
 * pata_cmd64x: cmd648_bmdma_stop() fix
 - LP: #802383
 * pata_cmd64x: remove unused definitions
 - LP: #802383
 * pata_cm64x: fix boot crash on parisc
 - LP: #802383
 * ACPI: use _HID when supplied by root-level devices
 - LP: #802383
 * xfs: properly account for reclaimed inodes
 - LP: #802383
 * exec: delay address limit change until point of no return
 - LP: #802383
 * netfilter: IPv6: initialize TOS field in REJECT target module
 - LP: #802383
 * netfilter: IPv6: fix DSCP mangle code
 - LP: #802383
 * genirq: Add IRQF_FORCE_RESUME
 - LP: #802383
 * xen: Use IRQF_FORCE_RESUME
 - LP: #802383
 * time: Compensate for rounding on odd-frequency clocksources
 - LP: #802383
 * Linux 2.6.32.42
 - LP: #802383
 * taskstats: don't allow duplicate entries in listener mode,
 CVE-2011-2484
 - LP: #806390
 - CVE-2011-2484
 * drm_mm: extract check_free_mm_node
 - LP: #599017, #807508
 * drm: implement helper functions for scanning lru list
 - LP: #599017, #807508
 * drm/i915: prepare for fair lru eviction
 - LP: #599017, #807508
 * drm/i915: Move the eviction logic to its own file.
 - LP: #599017, #807508
 * drm/i915: Implement fair lru eviction across both rings. (v2)
 - LP: #599017, #807508
 * drm/i915: Maintain LRU order of inactive objects upon access by CPU
 (v2)
 - LP: #599017, #807508
 * drm/i915/evict: Ensure we completely cleanup on failure
 - LP: #599017, #807508
 * drm/i915: Periodically flush the active lists and requests
 - LP: #599017, #807508
 * Linux 2.6.32.42+drm33.19
 - LP: #807508
 * net: add limit for socket backlog CVE-2010-4251
 - LP: #807462
 * tcp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * ipv6: udp: Optimise multicast reception
 - LP: #807462
 * ipv4: udp: Optimise multicast reception
 - LP: #807462
 * udp: multicast RX should increment SNMP/sk_drops counter in allocation
 failures CVE-2010-4251
 - LP: #807462
 * udp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * llc: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * sctp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * tipc: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * x25: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * net: backlog functions rename CVE-2010-4251
 - LP: #807462
 * net: sk_add_backlog() take rmem_alloc into account CVE-2010-4805
 - LP: #809318
 * ksm: fix NULL pointer dereference in scan_get_next_rmap_item()
 - LP: #810425
 * migrate: don't account swapcache as shmem
 - LP: #810425
 * clocksource: Make watchdog robust vs. interruption
 - LP: #810425
 * TTY: ldisc, do not close until there are readers
 - LP: #810425
 * xhci: Reject double add of active endpoints.
 - LP: #810425
 * PM: Free memory bitmaps if opening /dev/snapshot fails
 - LP: #810425
 * ath5k: fix memory leak when fewer than N_PD_CURVES are in use
 - LP: #810425
 * mm: fix negative commitlimit when gigantic hugepages are allocated
 - LP: #810425
 * uvcvideo: Remove buffers from the queues when freeing
 - LP: #810425
 * watchdog: mtx1-wdt: request gpio before using it
 - LP: #810425
 * debugobjects: Fix boot crash when kmemleak and debugobjects enabled
 - LP: #810425
 * cfq-iosched: fix locking around ioc->ioc_data assignment
 - LP: #810425
 * cfq-iosched: fix a rcu warning
 - LP: #810425
 * i2c-taos-evm: Fix log messages
 - LP: #810425
 * md: avoid endless recovery loop when waiting for fail device to
 complete.
 - LP: #810425
 * SUNRPC: Ensure the RPC client only quits on fatal signals
 - LP: #810425
 * 6pack,mkiss: fix lock inconsistency
 - LP: #810425
 * USB: don't let errors prevent system sleep
 - LP: #810425
 * USB: don't let the hub driver prevent system sleep
 - LP: #810425
 * uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
 - LP: #810425
 * um: os-linux/mem.c needs sys/stat.h
 - LP: #810425
 * inet_diag: fix inet_diag_bc_audit()
 - LP: #810425
 * PM / Hibernate: Avoid hitting OOM during preallocation of memory
 - LP: #810425
 * PM / Hibernate: Fix free_unnecessary_pages()
 - LP: #810425
 * bug.h: Add WARN_RATELIMIT
 - LP: #810425
 * net: filter: Use WARN_RATELIMIT
 - LP: #810425
 * af_packet: prevent information leak
 - LP: #810425
 * net/ipv4: Check for mistakenly passed in non-IPv4 address
 - LP: #810425
 * ipv6/udp: Use the correct variable to determine non-blocking condition
 - LP: #810425
 * udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
 - LP: #810425
 * mm: prevent concurrent unmap_mapping_range() on the same inode
 - LP: #810425
 * xen: set max_pfn_mapped to the last pfn mapped
 - LP: #810425
 * xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
 - LP: #810425
 * Linux 2.6.32.43
 - LP: #810425
 * eCryptfs: Handle failed metadata read in lookup
 - LP: #509180
 * pagemap: close races with suid execve, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * report errors in /proc/*/*map* sanely, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * close race in /proc/*/environ, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * auxv: require the target to be tracable (or yourself), CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * rose_loopback_timer sets VC number <= ROSE_DEFAULT_MAXVC, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
 - LP: #819569
 - CVE-2011-2492
 * drm/nv50-nvc0: work around an evo channel hang that some people see
 - LP: #583760
 * ASoC: Fix Blackfin I2S _pointer() implementation return in bounds
 values
 - LP: #823296
 * v4l2-ioctl.c: prefill tuner type for g_frequency and g/s_tuner
 - LP: #823296
 * pvrusb2: fix g/s_tuner support
 - LP: #823296
 * bttv: fix s_tuner for radio
 - LP: #823296
 * gro: Only reset frag0 when skb can be pulled
 - LP: #823296
 * NFSv4.1: update nfs4_fattr_bitmap_maxsz
 - LP: #823296
 * SUNRPC: Fix a race between work-queue and rpc_killall_tasks
 - LP: #823296
 * SUNRPC: Fix use of static variable in rpcb_getport_async
 - LP: #823296
 * si4713-i2c: avoid potential buffer overflow on si4713
 - LP: #823296
 * hwmon: (max1111) Fix race condition causing NULL pointer exception
 - LP: #823296
 * bridge: send proper message_age in config BPDU
 - LP: #823296
 * davinci: DM365 EVM: fix video input mux bits
 - LP: #823296
 * libata: fix unexpectedly frozen port after ata_eh_reset()
 - LP: #823296
 * x86: Make Dell Latitude E5420 use reboot=pci
 - LP: #823296
 * USB: pl2303: add AdLink ND-6530 USB IDs
 - LP: #823296
 * USB: pl2303.h: checkpatch cleanups
 - LP: #823296
 * USB: serial: add IDs for WinChipHead USB->RS232 adapter
 - LP: #823296
 * staging: comedi: fix infoleak to userspace
 - LP: #823296
 * USB: OHCI: fix another regression for NVIDIA controllers
 - LP: #823296
 * usb: musb: restore INDEX register in resume path
 - LP: #823296
 * USB: dummy-hcd needs the has_tt flag
 - LP: #823296
 * ARM: pxa/cm-x300: fix V3020 RTC functionality
 - LP: #823296
 * jme: Fix unmap error (Causing system freeze)
 - LP: #823296
 * libsas: remove expander from dev list on error
 - LP: #823296
 * mac80211: Restart STA timers only on associated state
 - LP: #823296
 * Blacklist Traxdata CDR4120 and IOMEGA Zip drive to avoid lock ups.
 - LP: #823296
 * ses: requesting a fault indication
 - LP: #823296
 * pmcraid: reject negative request size
 - LP: #823296
 * kexec, x86: Fix incorrect jump back address if not preserving context
 - LP: #823296
 * powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
 - LP: #823296
 * PCI: ARI is a PCIe v2 feature
 - LP: #823296
 * cciss: do not attempt to read from a write-only register
 - LP: #823296
 * xtensa: prevent arbitrary read in ptrace
 - LP: #823296
 * ext3: Fix oops in ext3_try_to_allocate_with_rsv()
 - LP: #823296
 * svcrpc: fix list-corrupting race on nfsd shutdown
 - LP: #823296
 * EHCI: only power off port if over-current is active
 - LP: #823296
 * EHCI: fix direction handling for interrupt data toggles
 - LP: #823296
 * powerpc/pseries/hvconsole: Fix dropped console output
 - LP: #823296
 * x86: Hpet: Avoid the comparator readback penalty
 - LP: #823296
 * x86: HPET: Chose a paranoid safe value for the ETIME check
 - LP: #823296
 * cifs: clean up cifs_find_smb_ses (try #2)
 - LP: #823296
 * cifs: fix NULL pointer dereference in cifs_find_smb_ses
 - LP: #823296
 * cifs: check for NULL session password
 - LP: #823296
 * gre: fix netns vs proto registration ordering
 - LP: #823296
 * netns xfrm: fixup xfrm6_tunnel error propagation
 - LP: #823296
 * tunnels: fix netns vs proto registration ordering
 - LP: #823296
 * alpha: fix several security issues
 - LP: #823296
 * proc: restrict access to /proc/PID/io
 - LP: #823296
 * ALSA: sound/core/pcm_compat.c: adjust array index
 - LP: #823296
 * dm mpath: fix potential NULL pointer in feature arg processing
 - LP: #823296
 * dm: fix idr leak on module removal
 - LP: #823296
 * perf: overflow/perf_count_sw_cpu_clock crashes recent kernels
 - LP: #823296
 * atm: [br2684] allow routed mode operation again
 - LP: #823296
 * Linux 2.6.32.44
 - LP: #823296
 [ Ubuntu: 2.6.32-33.72 ]
 * Revert "fix oops in scsi_run_queue()"
 - LP: #811745
 * Revert "put stricter guards on queue dead checks"
 - LP: #811745
 [ Ubuntu: 2.6.32-33.71 ]
 * splice: direct_splice_actor() should not use pos in sd
 - LP: #588861
 -- Stefan Bader <stefan.bader@canonical.com> 2011年9月01日 16:20:32 +0200

Changed in linux-ec2 (Ubuntu Lucid):

status: Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011年09月29日: #11

Download full text (16.9 KiB)

This bug was fixed in the package linux - 2.6.32-34.77

---------------
linux (2.6.32-34.77) lucid-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #849228

[ Upstream Kernel Changes ]

* Revert "drm/i915: Remove BUG_ON from i915_gem_evict_something"
* Revert "drm/i915: Periodically flush the active lists and requests"
* Revert "drm/i915/evict: Ensure we completely cleanup on failure"
* Revert "drm/i915: Maintain LRU order of inactive objects upon access by
CPU (v2)"
* Revert "drm/i915: Implement fair lru eviction across both rings. (v2)"
* Revert "drm/i915: Move the eviction logic to its own file."
* Revert "drm/i915: prepare for fair lru eviction"

linux (2.6.32-34.76) lucid-proposed; urgency=low

[Steve Conklin]

* Release Tracking Bug
- LP: #836914

[ Upstream Kernel Changes ]

* Revert "drm/nv50-nvc0: work around an evo channel hang that some people
see"
* Revert "eCryptfs: Handle failed metadata read in lookup"
* Revert "tunnels: fix netns vs proto registration ordering"

linux (2.6.32-34.75) lucid-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #832332

[ Upstream Kernel Changes ]

* drm/i915: Remove BUG_ON from i915_gem_evict_something
- LP: #828550

linux (2.6.32-34.74) lucid-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #828375

[ Upstream Kernel Changes ]

* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
- LP: #813026
- CVE-2011-1020

linux (2.6.32-34.73) lucid-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #824148

[ Tim Gardner ]

* SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
- LP: #805494
* [Config] Add enic/fnic to udebs
- LP: #801610

[ Upstream Kernel Changes ]

* tty: icount changeover for other main devices, CVE-2010-4076,
CVE-2010-4077
- LP: #720189
- CVE-2010-4077
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #795418
- CVE-2011-1577
* ftrace: Only update the function code on write to filter files
- LP: #802383
* kmemleak: Do not return a pointer to an object that kmemleak did not
get
- LP: #802383
* CPU hotplug, re-create sysfs directory and symlinks
- LP: #802383
* Fix memory leak in cpufreq_stat
- LP: #802383
* powerpc/kexec: Fix memory corruption from unallocated slaves
- LP: #802383
* powerpc/oprofile: Handle events that raise an exception without
overflowing
- LP: #802383
* mtd: mtdconcat: fix NAND OOB write
- LP: #802383
* x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
limit
- LP: #802383
* ext3: Fix fs corruption when make_indexed_dir() fails
- LP: #802383
* jbd: Fix forever sleeping process in do_get_write_access()
- LP: #802383
* jbd: fix fsync() tid wraparound bug
- LP: #802383
* ext4: release page cache in ext4_mb_load_buddy error path
- LP: #802383
* Fix Ultrastor asm snippet
- LP: #802383
* x86, amd: Do not enable ARAT feature on AMD processors below family
0x12
- LP: #802383
* x86, ...

This bug was fixed in the package linux - 2.6.32-34.77
---------------
linux (2.6.32-34.77) lucid-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #849228
 [ Upstream Kernel Changes ]
 * Revert "drm/i915: Remove BUG_ON from i915_gem_evict_something"
 * Revert "drm/i915: Periodically flush the active lists and requests"
 * Revert "drm/i915/evict: Ensure we completely cleanup on failure"
 * Revert "drm/i915: Maintain LRU order of inactive objects upon access by
 CPU (v2)"
 * Revert "drm/i915: Implement fair lru eviction across both rings. (v2)"
 * Revert "drm/i915: Move the eviction logic to its own file."
 * Revert "drm/i915: prepare for fair lru eviction"
linux (2.6.32-34.76) lucid-proposed; urgency=low
 [Steve Conklin]
 * Release Tracking Bug
 - LP: #836914
 [ Upstream Kernel Changes ]
 * Revert "drm/nv50-nvc0: work around an evo channel hang that some people
 see"
 * Revert "eCryptfs: Handle failed metadata read in lookup"
 * Revert "tunnels: fix netns vs proto registration ordering"
linux (2.6.32-34.75) lucid-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #832332
 [ Upstream Kernel Changes ]
 * drm/i915: Remove BUG_ON from i915_gem_evict_something
 - LP: #828550
linux (2.6.32-34.74) lucid-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #828375
 [ Upstream Kernel Changes ]
 * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
linux (2.6.32-34.73) lucid-proposed; urgency=low
 [Herton R. Krzesinski]
 * Release Tracking Bug
 - LP: #824148
 [ Tim Gardner ]
 * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
 - LP: #805494
 * [Config] Add enic/fnic to udebs
 - LP: #801610
 [ Upstream Kernel Changes ]
 * tty: icount changeover for other main devices, CVE-2010-4076,
 CVE-2010-4077
 - LP: #720189
 - CVE-2010-4077
 * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
 oops
 - LP: #795418
 - CVE-2011-1577
 * ftrace: Only update the function code on write to filter files
 - LP: #802383
 * kmemleak: Do not return a pointer to an object that kmemleak did not
 get
 - LP: #802383
 * CPU hotplug, re-create sysfs directory and symlinks
 - LP: #802383
 * Fix memory leak in cpufreq_stat
 - LP: #802383
 * powerpc/kexec: Fix memory corruption from unallocated slaves
 - LP: #802383
 * powerpc/oprofile: Handle events that raise an exception without
 overflowing
 - LP: #802383
 * mtd: mtdconcat: fix NAND OOB write
 - LP: #802383
 * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
 limit
 - LP: #802383
 * ext3: Fix fs corruption when make_indexed_dir() fails
 - LP: #802383
 * jbd: Fix forever sleeping process in do_get_write_access()
 - LP: #802383
 * jbd: fix fsync() tid wraparound bug
 - LP: #802383
 * ext4: release page cache in ext4_mb_load_buddy error path
 - LP: #802383
 * Fix Ultrastor asm snippet
 - LP: #802383
 * x86, amd: Do not enable ARAT feature on AMD processors below family
 0x12
 - LP: #802383
 * x86, amd: Use _safe() msr access for GartTlbWlk disable code
 - LP: #802383
 * rcu: Fix unpaired rcu_irq_enter() from locking selftests
 - LP: #802383
 * staging: usbip: fix wrong endian conversion
 - LP: #802383
 * Fix for buffer overflow in ldm_frag_add not sufficient
 - LP: #802383
 * seqlock: Don't smp_rmb in seqlock reader spin loop
 - LP: #802383
 * ALSA: HDA: Use one dmic only for Dell Studio 1558
 - LP: #731706, #802383
 * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
 - LP: #802383
 * ASoC: Add some missing volume update bit sets for wm_hubs devices
 - LP: #802383
 * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
 - LP: #802383
 * loop: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #802383
 * loop: handle on-demand devices correctly
 - LP: #802383
 * USB: CP210x Add 4 Device IDs for AC-Services Devices
 - LP: #802383
 * USB: moto_modem: Add USB identifier for the Motorola VE240.
 - LP: #802383
 * USB: serial: ftdi_sio: adding support for TavIR STK500
 - LP: #802383
 * USB: gamin_gps: Fix for data transfer problems in native mode
 - LP: #802383
 * usb/gadget: at91sam9g20 fix end point max packet size
 - LP: #802383
 * usb: gadget: rndis: don't test against req->length
 - LP: #802383
 * OHCI: fix regression caused by nVidia shutdown workaround
 - LP: #802383
 * p54usb: add zoom 4410 usbid
 - LP: #802383
 * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
 - LP: #802383
 * UBIFS: fix a rare memory leak in ro to rw remounting path
 - LP: #802383
 * i8k: Avoid lahf in 64-bit code
 - LP: #802383
 * cpuidle: menu: fixed wrapping timers at 4.294 seconds
 - LP: #802383
 * dm table: reject devices without request fns
 - LP: #802383
 * atm: expose ATM device index in sysfs
 - LP: #802383
 * brd: limit 'max_part' module param to DISK_MAX_PARTS
 - LP: #802383
 * brd: handle on-demand devices correctly
 - LP: #802383
 * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
 callback...
 - LP: #802383
 * PCI: Add quirk for setting valid class for TI816X Endpoint
 - LP: #802383
 * xen mmu: fix a race window causing leave_mm BUG()
 - LP: #802383
 * netfilter: nf_conntrack_reasm: properly handle packets fragmented into
 a single fragment
 - LP: #802383
 * fix memory leak in scsi_report_lun_scan
 - LP: #802383
 * fix refcounting bug in scsi_get_host_dev
 - LP: #802383
 * fix duplicate removal on error path in scsi_sysfs_add_sdev
 - LP: #802383
 * UBIFS: fix shrinker object count reports
 - LP: #802383
 * UBIFS: fix memory leak on error path
 - LP: #802383
 * nbd: limit module parameters to a sane value
 - LP: #802383
 * mm: fix ENOSPC returned by handle_mm_fault()
 - LP: #802383
 * PCI: Set PCIE maxpayload for card during hotplug insertion
 - LP: #802383
 * nl80211: fix check for valid SSID size in scan operations
 - LP: #802383
 * lockdep: Fix lock_is_held() on recursion
 - LP: #802383
 * drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
 - LP: #802383
 * drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
 - LP: #802383
 * fat: Fix corrupt inode flags when remove ATTR_SYS flag
 - LP: #802383
 * xen: off by one errors in multicalls.c
 - LP: #802383
 * x86/amd-iommu: Fix 3 possible endless loops
 - LP: #802383
 * USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
 - LP: #802383
 * USB: core: Tolerate protocol stall during hub and port status read
 - LP: #802383
 * USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
 - LP: #802383
 * ALSA: hda: Fix quirk for Dell Inspiron 910
 - LP: #792712, #802383
 * oprofile, dcookies: Fix possible circular locking dependency
 - LP: #802383
 * CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
 - LP: #802383
 * md: check ->hot_remove_disk when removing disk
 - LP: #802383
 * md/raid5: fix raid5_set_bi_hw_segments
 - LP: #802383
 * md/raid5: fix FUA request handling in ops_run_io()
 - LP: #802383
 * ata: use pci_dev->revision
 - LP: #802383
 * pata_cmd64x: fix PIO setup
 - LP: #802383
 * pata_cmd64x: cmd648_bmdma_stop() fix
 - LP: #802383
 * pata_cmd64x: remove unused definitions
 - LP: #802383
 * pata_cm64x: fix boot crash on parisc
 - LP: #802383
 * ACPI: use _HID when supplied by root-level devices
 - LP: #802383
 * xfs: properly account for reclaimed inodes
 - LP: #802383
 * exec: delay address limit change until point of no return
 - LP: #802383
 * netfilter: IPv6: initialize TOS field in REJECT target module
 - LP: #802383
 * netfilter: IPv6: fix DSCP mangle code
 - LP: #802383
 * genirq: Add IRQF_FORCE_RESUME
 - LP: #802383
 * xen: Use IRQF_FORCE_RESUME
 - LP: #802383
 * time: Compensate for rounding on odd-frequency clocksources
 - LP: #802383
 * Linux 2.6.32.42
 - LP: #802383
 * taskstats: don't allow duplicate entries in listener mode,
 CVE-2011-2484
 - LP: #806390
 - CVE-2011-2484
 * drm_mm: extract check_free_mm_node
 - LP: #599017, #807508
 * drm: implement helper functions for scanning lru list
 - LP: #599017, #807508
 * drm/i915: prepare for fair lru eviction
 - LP: #599017, #807508
 * drm/i915: Move the eviction logic to its own file.
 - LP: #599017, #807508
 * drm/i915: Implement fair lru eviction across both rings. (v2)
 - LP: #599017, #807508
 * drm/i915: Maintain LRU order of inactive objects upon access by CPU
 (v2)
 - LP: #599017, #807508
 * drm/i915/evict: Ensure we completely cleanup on failure
 - LP: #599017, #807508
 * drm/i915: Periodically flush the active lists and requests
 - LP: #599017, #807508
 * Linux 2.6.32.42+drm33.19
 - LP: #807508
 * net: add limit for socket backlog CVE-2010-4251
 - LP: #807462
 * tcp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * ipv6: udp: Optimise multicast reception
 - LP: #807462
 * ipv4: udp: Optimise multicast reception
 - LP: #807462
 * udp: multicast RX should increment SNMP/sk_drops counter in allocation
 failures CVE-2010-4251
 - LP: #807462
 * udp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * llc: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * sctp: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * tipc: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * x25: use limited socket backlog CVE-2010-4251
 - LP: #807462
 * net: backlog functions rename CVE-2010-4251
 - LP: #807462
 * net: sk_add_backlog() take rmem_alloc into account CVE-2010-4805
 - LP: #809318
 * ksm: fix NULL pointer dereference in scan_get_next_rmap_item()
 - LP: #810425
 * migrate: don't account swapcache as shmem
 - LP: #810425
 * clocksource: Make watchdog robust vs. interruption
 - LP: #810425
 * TTY: ldisc, do not close until there are readers
 - LP: #810425
 * xhci: Reject double add of active endpoints.
 - LP: #810425
 * PM: Free memory bitmaps if opening /dev/snapshot fails
 - LP: #810425
 * ath5k: fix memory leak when fewer than N_PD_CURVES are in use
 - LP: #810425
 * mm: fix negative commitlimit when gigantic hugepages are allocated
 - LP: #810425
 * uvcvideo: Remove buffers from the queues when freeing
 - LP: #810425
 * watchdog: mtx1-wdt: request gpio before using it
 - LP: #810425
 * debugobjects: Fix boot crash when kmemleak and debugobjects enabled
 - LP: #810425
 * cfq-iosched: fix locking around ioc->ioc_data assignment
 - LP: #810425
 * cfq-iosched: fix a rcu warning
 - LP: #810425
 * i2c-taos-evm: Fix log messages
 - LP: #810425
 * md: avoid endless recovery loop when waiting for fail device to
 complete.
 - LP: #810425
 * SUNRPC: Ensure the RPC client only quits on fatal signals
 - LP: #810425
 * 6pack,mkiss: fix lock inconsistency
 - LP: #810425
 * USB: don't let errors prevent system sleep
 - LP: #810425
 * USB: don't let the hub driver prevent system sleep
 - LP: #810425
 * uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
 - LP: #810425
 * um: os-linux/mem.c needs sys/stat.h
 - LP: #810425
 * inet_diag: fix inet_diag_bc_audit()
 - LP: #810425
 * PM / Hibernate: Avoid hitting OOM during preallocation of memory
 - LP: #810425
 * PM / Hibernate: Fix free_unnecessary_pages()
 - LP: #810425
 * bug.h: Add WARN_RATELIMIT
 - LP: #810425
 * net: filter: Use WARN_RATELIMIT
 - LP: #810425
 * af_packet: prevent information leak
 - LP: #810425
 * net/ipv4: Check for mistakenly passed in non-IPv4 address
 - LP: #810425
 * ipv6/udp: Use the correct variable to determine non-blocking condition
 - LP: #810425
 * udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
 - LP: #810425
 * mm: prevent concurrent unmap_mapping_range() on the same inode
 - LP: #810425
 * xen: set max_pfn_mapped to the last pfn mapped
 - LP: #810425
 * xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
 - LP: #810425
 * Linux 2.6.32.43
 - LP: #810425
 * eCryptfs: Handle failed metadata read in lookup
 - LP: #509180
 * pagemap: close races with suid execve, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * report errors in /proc/*/*map* sanely, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * close race in /proc/*/environ, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * auxv: require the target to be tracable (or yourself), CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
 - LP: #813026
 - CVE-2011-1020
 * rose_loopback_timer sets VC number <= ROSE_DEFAULT_MAXVC, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
 - LP: #816550
 - CVE-2011-1493
 * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
 - LP: #819569
 - CVE-2011-2492
 * drm/nv50-nvc0: work around an evo channel hang that some people see
 - LP: #583760
 * ASoC: Fix Blackfin I2S _pointer() implementation return in bounds
 values
 - LP: #823296
 * v4l2-ioctl.c: prefill tuner type for g_frequency and g/s_tuner
 - LP: #823296
 * pvrusb2: fix g/s_tuner support
 - LP: #823296
 * bttv: fix s_tuner for radio
 - LP: #823296
 * gro: Only reset frag0 when skb can be pulled
 - LP: #823296
 * NFSv4.1: update nfs4_fattr_bitmap_maxsz
 - LP: #823296
 * SUNRPC: Fix a race between work-queue and rpc_killall_tasks
 - LP: #823296
 * SUNRPC: Fix use of static variable in rpcb_getport_async
 - LP: #823296
 * si4713-i2c: avoid potential buffer overflow on si4713
 - LP: #823296
 * hwmon: (max1111) Fix race condition causing NULL pointer exception
 - LP: #823296
 * bridge: send proper message_age in config BPDU
 - LP: #823296
 * davinci: DM365 EVM: fix video input mux bits
 - LP: #823296
 * libata: fix unexpectedly frozen port after ata_eh_reset()
 - LP: #823296
 * x86: Make Dell Latitude E5420 use reboot=pci
 - LP: #823296
 * USB: pl2303: add AdLink ND-6530 USB IDs
 - LP: #823296
 * USB: pl2303.h: checkpatch cleanups
 - LP: #823296
 * USB: serial: add IDs for WinChipHead USB->RS232 adapter
 - LP: #823296
 * staging: comedi: fix infoleak to userspace
 - LP: #823296
 * USB: OHCI: fix another regression for NVIDIA controllers
 - LP: #823296
 * usb: musb: restore INDEX register in resume path
 - LP: #823296
 * USB: dummy-hcd needs the has_tt flag
 - LP: #823296
 * ARM: pxa/cm-x300: fix V3020 RTC functionality
 - LP: #823296
 * jme: Fix unmap error (Causing system freeze)
 - LP: #823296
 * libsas: remove expander from dev list on error
 - LP: #823296
 * mac80211: Restart STA timers only on associated state
 - LP: #823296
 * Blacklist Traxdata CDR4120 and IOMEGA Zip drive to avoid lock ups.
 - LP: #823296
 * ses: requesting a fault indication
 - LP: #823296
 * pmcraid: reject negative request size
 - LP: #823296
 * kexec, x86: Fix incorrect jump back address if not preserving context
 - LP: #823296
 * powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
 - LP: #823296
 * PCI: ARI is a PCIe v2 feature
 - LP: #823296
 * cciss: do not attempt to read from a write-only register
 - LP: #823296
 * xtensa: prevent arbitrary read in ptrace
 - LP: #823296
 * ext3: Fix oops in ext3_try_to_allocate_with_rsv()
 - LP: #823296
 * svcrpc: fix list-corrupting race on nfsd shutdown
 - LP: #823296
 * EHCI: only power off port if over-current is active
 - LP: #823296
 * EHCI: fix direction handling for interrupt data toggles
 - LP: #823296
 * powerpc/pseries/hvconsole: Fix dropped console output
 - LP: #823296
 * x86: Hpet: Avoid the comparator readback penalty
 - LP: #823296
 * x86: HPET: Chose a paranoid safe value for the ETIME check
 - LP: #823296
 * cifs: clean up cifs_find_smb_ses (try #2)
 - LP: #823296
 * cifs: fix NULL pointer dereference in cifs_find_smb_ses
 - LP: #823296
 * cifs: check for NULL session password
 - LP: #823296
 * gre: fix netns vs proto registration ordering
 - LP: #823296
 * netns xfrm: fixup xfrm6_tunnel error propagation
 - LP: #823296
 * tunnels: fix netns vs proto registration ordering
 - LP: #823296
 * alpha: fix several security issues
 - LP: #823296
 * proc: restrict access to /proc/PID/io
 - LP: #823296
 * ALSA: sound/core/pcm_compat.c: adjust array index
 - LP: #823296
 * dm mpath: fix potential NULL pointer in feature arg processing
 - LP: #823296
 * dm: fix idr leak on module removal
 - LP: #823296
 * perf: overflow/perf_count_sw_cpu_clock crashes recent kernels
 - LP: #823296
 * atm: [br2684] allow routed mode operation again
 - LP: #823296
 * Linux 2.6.32.44
 - LP: #823296
 -- Steve Conklin <sconklin@canonical.com> 2011年9月13日 13:04:10 -0500

Changed in linux (Ubuntu Lucid):

status: Fix Committed → Fix Released

Marc Deslauriers (mdeslaur) on 2011年10月25日

Changed in linux-lts-backport-oneiric (Ubuntu Oneiric):

status: New → Invalid

importance: Undecided → Medium

Changed in linux-lts-backport-oneiric (Ubuntu Lucid):

status: New → Invalid

importance: Undecided → Medium

Changed in linux-lts-backport-oneiric (Ubuntu Precise):

status: New → Invalid

importance: Undecided → Medium

Changed in linux-lts-backport-oneiric (Ubuntu Hardy):

status: New → Invalid

importance: Undecided → Medium

Changed in linux-lts-backport-oneiric (Ubuntu Maverick):

status: New → Invalid

importance: Undecided → Medium

Changed in linux-lts-backport-oneiric (Ubuntu Natty):

status: New → Invalid

importance: Undecided → Medium

Paolo Pisati (p-pisati) on 2011年12月21日

Changed in linux-ti-omap4 (Ubuntu Precise):

status: Fix Committed → Fix Released

Changed in linux-ti-omap4 (Ubuntu Oneiric):

status: Fix Committed → Fix Released

See full activity log

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are not directly subscribed to this bug's notifications.

Subscribing...

Edit bug mail

Other bug subscribers

Subscribe someone else

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntu linux package

CVE-2011-1577

Bug Description

Related branches

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux package