← Back to team overview

kernel-packages team mailing list archive

[Bug 1257002] Re: Quantal update to 3.5.7.26 stable release

 

This bug was fixed in the package linux - 3.5.0-45.68

---------------
linux (3.5.0-45.68) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1257035

  [ Kamal Mostafa ]

  * SAUCE: (no-up) drm/i915: i915.disable_pch_pwm overrides PCH_PWM_ENABLE
    quirk
    - LP: #1163720

  [ Upstream Kernel Changes ]

  * nfs: don't allow nfs_find_actor to match inodes of the wrong type
    - LP: #1257002
  * jfs: fix error path in ialloc
    - LP: #1257002
  * mac80211: drop spoofed packets in ad-hoc mode
    - LP: #1257002
  * mac80211: use sta_info_get_bss() for nl80211 tx and client probing
    - LP: #1257002
  * mac80211: update sta->last_rx on acked tx frames
    - LP: #1257002
  * iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series
    - LP: #1257002
  * libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures
    - LP: #1257002
  * mac80211: correctly close cancelled scans
    - LP: #1257002
  * rtlwifi: rtl8192cu: Fix error in pointer arithmetic
    - LP: #1257002
  * wireless: radiotap: fix parsing buffer overrun
    - LP: #1257002
  * drm/vmwgfx: Don't kill clients on VT switch
    - LP: #1257002
  * ecryptfs: Fix memory leakage in keystore.c
    - LP: #1257002
  * drm: Prevent overwriting from userspace underallocating core ioctl
    structs
    - LP: #1257002
  * drm: Pad drm_mode_get_connector to 64-bit boundary
    - LP: #1257002
  * drm/radeon/atom: workaround vbios bug in transmitter table on rs780
    - LP: #1257002
  * md: Fix skipping recovery for read-only arrays.
    - LP: #1257002
  * md: avoid deadlock when md_set_badblocks.
    - LP: #1257002
  * target/pscsi: fix return value check
    - LP: #1257002
  * parisc: Do not crash 64bit SMP kernels on machines with >= 4GB RAM
    - LP: #1257002
  * USB: serial: ftdi_sio: add id for Z3X Box device
    - LP: #1257002
  * clockevents: Sanitize ticks to nsec conversion
    - LP: #1257002
  * perf: Fix perf ring buffer memory ordering
    - LP: #1257002
  * xtensa: don't use alternate signal stack on threads
    - LP: #1257002
  * ASoC: dapm: Fix source list debugfs outputs
    - LP: #1257002
  * ASoC: wm_hubs: Add missing break in hp_supply_event()
    - LP: #1257002
  * uml: check length in exitcode_proc_write()
    - LP: #1257002
  * staging: ozwpan: prevent overflow in oz_cdev_write()
    - LP: #1257002
  * aacraid: missing capable() check in compat ioctl
    - LP: #1257002
  * staging: wlags49_h2: buffer overflow setting station name
    - LP: #1257002
  * Staging: bcm: info leak in ioctl
    - LP: #1257002
  * ALSA: fix oops in snd_pcm_info() caused by ASoC DPCM
    - LP: #1257002
  * lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
    - LP: #1257002
  * scripts/kallsyms: filter symbols not in kernel address space
    - LP: #1257002
  * xen-netback: use jiffies_64 value to calculate credit timeout
    - LP: #1257002
  * net: flow_dissector: fail on evil iph->ihl
    - LP: #1257002
  * PCI/PM: Clear state_saved during suspend
    - LP: #1257002
  * ALSA: hda - Move one-time init codes from generic_hdmi_init()
    - LP: #1212160, #1257002
  * NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
    - LP: #1257002
  * USB: mos7840: fix tiocmget error handling
    - LP: #1257002
  * usb: Disable USB 2.0 Link PM before device reset.
    - LP: #1257002
  * usb: hub: Clear Port Reset Change during init/resume
    - LP: #1257002
  * rt2400pci: fix RSSI read
    - LP: #1257002
  * rt2x00: check if device is still available on rt2x00mac_flush()
    - LP: #1257002
  * rt2800usb: slow down TX status polling
    - LP: #1257002
  * alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist
    - LP: #1257002
  * ARM: OMAP2+: irq, AM33XX add missing register check
    - LP: #1257002
  * USB:add new zte 3g-dongle's pid to option.c
    - LP: #1257002
  * libata: Fix display of sata speed
    - LP: #1257002
  * ahci: disabled FBS prior to issuing software reset
    - LP: #1257002
  * drivers/libata: Set max sector to 65535 for Slimtype DVD A DS8A9SH
    drive
    - LP: #1257002
  * ALSA: 6fire: Fix probe of multiple cards
    - LP: #1257002
  * usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
    - LP: #1257002
  * usb: wusbcore: change WA_SEGS_MAX to a legal value
    - LP: #1257002
  * powerpc/vio: use strcpy in modalias_show
    - LP: #1257002
  * can: c_can: Fix RX message handling, handle lost message before EOB
    - LP: #1257002
  * ASoC: ak4642: prevent un-necessary changes to SG_SL1
    - LP: #1257002
  * ahci: Add Device IDs for Intel Wildcat Point-LP
    - LP: #1257002
  * powerpc/powernv: Add PE to its own PELTV
    - LP: #1257002
  * perf/ftrace: Fix paranoid level for enabling function tracer
    - LP: #1257002
  * ALSA: hda - Add support for CX20952
    - LP: #1257002
  * qeth: avoid buffer overflow in snmp ioctl
    - LP: #1257002
  * cris: media platform drivers: fix build
    - LP: #1257002
  * mm: ensure get_unmapped_area() returns higher address than
    mmap_min_addr
    - LP: #1257002
  * vsprintf: check real user/group id for %pK
    - LP: #1257002
  * backlight: atmel-pwm-bl: fix reported brightness
    - LP: #1257002
  * backlight: atmel-pwm-bl: fix gpio polarity in remove
    - LP: #1257002
  * devpts: plug the memory leak in kill_sb
    - LP: #1257002
  * netfilter: nf_ct_sip: don't drop packets with offsets pointing outside
    the packet
    - LP: #1257002
  * tracing: Fix potential out-of-bounds in trace_get_user()
    - LP: #1257002
  * ARM: 7668/1: fix memset-related crashes caused by recent GCC (4.7.2)
    optimizations
    - LP: #1257002
  * ARM: 7670/1: fix the memset fix
    - LP: #1257002
  * usb: fix cleanup after failure in hub_configure()
    - LP: #1257002
  * include/linux/fs.h: disable preempt when acquire i_size_seqcount write
    lock
    - LP: #1257002
  * 8139cp: re-enable interrupts after tx timeout
    - LP: #1257002
  * SUNRPC handle EKEYEXPIRED in call_refreshresult
    - LP: #1257002
  * Fix a few incorrectly checked [io_]remap_pfn_range() calls
    - LP: #1257002
  * crypto: ansi_cprng - Fix off by one error in non-block size request
    - LP: #1257002
  * Linux 3.5.7.26
    - LP: #1257002
 -- Steve Conklin <sconklin@xxxxxxxxxxxxx>   Mon, 02 Dec 2013 13:52:30 -0600

** Changed in: linux (Ubuntu Quantal)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1257002

Title:
  Quantal update to 3.5.7.26 stable release

Status in “linux” package in Ubuntu:
  Invalid
Status in “linux” source package in Quantal:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from Linus' tree or in a minimally
         backported form of that patch. The 3.5.7.26 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://kernel.ubuntu.com/ubuntu/linux.git

      TEST CASE: TBD

         The following patches are in the 3.5.7.26 stable release:
              Linux 3.5.7.26
              crypto: ansi_cprng - Fix off by one error in non-block size request
              Fix a few incorrectly checked [io_]remap_pfn_range() calls
              SUNRPC handle EKEYEXPIRED in call_refreshresult
              8139cp: re-enable interrupts after tx timeout
              include/linux/fs.h: disable preempt when acquire i_size_seqcount write lock
              usb: fix cleanup after failure in hub_configure()
              ARM: 7670/1: fix the memset fix
              ARM: 7668/1: fix memset-related crashes caused by recent GCC (4.7.2) optimizations
              tracing: Fix potential out-of-bounds in trace_get_user()
              netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet
              devpts: plug the memory leak in kill_sb
              backlight: atmel-pwm-bl: fix gpio polarity in remove
              backlight: atmel-pwm-bl: fix reported brightness
              vsprintf: check real user/group id for %pK
              mm: ensure get_unmapped_area() returns higher address than mmap_min_addr
              cris: media platform drivers: fix build
              qeth: avoid buffer overflow in snmp ioctl
              ALSA: hda - Add support for CX20952
              perf/ftrace: Fix paranoid level for enabling function tracer
              powerpc/powernv: Add PE to its own PELTV
              ahci: Add Device IDs for Intel Wildcat Point-LP
              ASoC: ak4642: prevent un-necessary changes to SG_SL1
              can: c_can: Fix RX message handling, handle lost message before EOB
              powerpc/vio: use strcpy in modalias_show
              usb: wusbcore: change WA_SEGS_MAX to a legal value
              usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
              ALSA: 6fire: Fix probe of multiple cards
              drivers/libata: Set max sector to 65535 for Slimtype DVD A DS8A9SH drive
              ahci: disabled FBS prior to issuing software reset
              libata: Fix display of sata speed
              USB:add new zte 3g-dongle's pid to option.c
              ARM: OMAP2+: irq, AM33XX add missing register check
              alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist
              rt2800usb: slow down TX status polling
              rt2x00: check if device is still available on rt2x00mac_flush()
              rt2400pci: fix RSSI read
              usb: hub: Clear Port Reset Change during init/resume
              usb: Disable USB 2.0 Link PM before device reset.
              USB: mos7840: fix tiocmget error handling
              NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
              ALSA: hda - Move one-time init codes from generic_hdmi_init()
              PCI/PM: Clear state_saved during suspend
              net: flow_dissector: fail on evil iph->ihl
              xen-netback: use jiffies_64 value to calculate credit timeout
              scripts/kallsyms: filter symbols not in kernel address space
              lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
              ALSA: fix oops in snd_pcm_info() caused by ASoC DPCM
              Staging: bcm: info leak in ioctl
              staging: wlags49_h2: buffer overflow setting station name
              aacraid: missing capable() check in compat ioctl
              staging: ozwpan: prevent overflow in oz_cdev_write()
              uml: check length in exitcode_proc_write()
              ASoC: wm_hubs: Add missing break in hp_supply_event()
              ALSA: hda - Add a fixup for ASUS N76VZ
              ASoC: dapm: Fix source list debugfs outputs
              xtensa: don't use alternate signal stack on threads
              perf: Fix perf ring buffer memory ordering
              clockevents: Sanitize ticks to nsec conversion
              USB: serial: ftdi_sio: add id for Z3X Box device
              parisc: Do not crash 64bit SMP kernels on machines with >= 4GB RAM
              target/pscsi: fix return value check
              md: avoid deadlock when md_set_badblocks.
              md: Fix skipping recovery for read-only arrays.
              drm/radeon/atom: workaround vbios bug in transmitter table on rs780
              drm: Pad drm_mode_get_connector to 64-bit boundary
              drm: Prevent overwriting from userspace underallocating core ioctl structs
              ecryptfs: Fix memory leakage in keystore.c
              drm/vmwgfx: Don't kill clients on VT switch
              wireless: radiotap: fix parsing buffer overrun
              rtlwifi: rtl8192cu: Fix error in pointer arithmetic
              mac80211: correctly close cancelled scans
              libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures
              iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series
              mac80211: update sta->last_rx on acked tx frames
              mac80211: use sta_info_get_bss() for nl80211 tx and client probing
              mac80211: drop spoofed packets in ad-hoc mode
              jfs: fix error path in ialloc
              nfs: don't allow nfs_find_actor to match inodes of the wrong type

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1257002/+subscriptions


References