kernel-packages team mailing list archive

Thread
Date
[Bug 1369711] Re: Precise update to v3.2.63 stable release

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1369711@xxxxxxxxxxxxxxxxxx>
Date: Wed, 08 Oct 2014 18:45:19 -0000
Reply-to: Bug 1369711 <1369711@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
This bug was fixed in the package linux - 3.2.0-70.105

---------------
linux (3.2.0-70.105) precise; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - re-used previous tracking bug

  [ Upstream Kernel Changes ]

  * udf: Avoid infinite loop when processing indirect ICBs
    - LP: #1370042
    - CVE-2014-6410

linux (3.2.0-70.104) precise; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1372522

  [ Tim Gardner ]

  * SAUCE: Fix nfs oops stable regression
    - LP: #1348670
  * [Config] updateconfigs
    - LP: #1369711

  [ Upstream Kernel Changes ]

  * Revert "x86-64, modify_ldt: Make support for 16-bit segments a runtime
    option"
    - LP: #1369711
  * KVM: x86: Inter-privilege level ret emulation is not implemeneted
    - LP: #1369711
  * ASoC: samsung: Correct I2S DAI suspend/resume ops
    - LP: #1369711
  * block: don't assume last put of shared tags is for the host
    - LP: #1369711
  * stable_kernel_rules: Add pointer to netdev-FAQ for network patches
    - LP: #1369711
  * debugfs: Fix corrupted loop in debugfs_remove_recursive
    - LP: #1369711
  * serial: core: Preserve termios c_cflag for console resume
    - LP: #1369711
  * tda10071: force modulation to QPSK on DVB-S
    - LP: #1369711
  * gspca_pac7302: Add new usb-id for Genius i-Look 317
    - LP: #1369711
  * mtd/ftl: fix the double free of the buffers allocated in build_maps()
    - LP: #1369711
  * x86: don't exclude low BIOS area when allocating address space for
    non-PCI cards
    - LP: #1369711
  * Bluetooth: never linger on process exit
    - LP: #1369711
  * scsi: handle flush errors properly
    - LP: #1369711
  * USB: OHCI: don't lose track of EDs when a controller dies
    - LP: #1369711
  * ahci: add support for the Promise FastTrak TX8660 SATA HBA (ahci mode)
    - LP: #1369711
  * usbcore: don't log on consecutive debounce failures of the same port
    - LP: #1369711
  * USB: Fix persist resume of some SS USB devices
    - LP: #1369711
  * drm/radeon: fix irq ring buffer overflow handling
    - LP: #1369711
  * hwmon: (smsc47m192) Fix temperature limit and vrm write operations
    - LP: #1369711
  * staging: vt6655: Fix Warning on boot handle_irq_event_percpu.
    - LP: #1369711
  * staging: vt6655: Fix disassociated messages every 10 seconds
    - LP: #1369711
  * bfa: Fix undefined bit shift on big-endian architectures with 32-bit
    DMA address
    - LP: #1369711
  * hpsa: fix bad -ENOMEM return value in hpsa_big_passthru_ioctl
    - LP: #1369711
  * Drivers: scsi: storvsc: Implement a eh_timed_out handler
    - LP: #1369711
  * Fix gcc-4.9.0 miscompilation of load_balance() in scheduler
    - LP: #1369711
  * iommu/vt-d: Exclude devices using RMRRs from IOMMU API domains
    - LP: #1369711
  * net: sendmsg: fix NULL pointer dereference
    - LP: #1369711
  * tpm: Provide a generic means to override the chip returned timeouts
    - LP: #1369711
  * hwmon: (ads1015) Fix off-by-one for valid channel index checking
    - LP: #1369711
  * MIPS: tlbex: Fix a missing statement for HUGETLB
    - LP: #1369711
  * MIPS: Prevent user from setting FCSR cause bits
    - LP: #1369711
  * mm, thp: do not allow thp faults to avoid cpuset restrictions
    - LP: #1369711
  * md/raid1,raid10: always abort recover on write error.
    - LP: #1369711
  * ext4: cleanup in ext4_discard_allocated_blocks()
    - LP: #1369711
  * ext4: fix ext4_discard_allocated_blocks() if we can't allocate the pa
    struct
    - LP: #1369711
  * hwmon: (lm85) Fix various errors on attribute writes
    - LP: #1369711
  * hwmon: (lm78) Fix overflow problems seen when writing large temperature
    limits
    - LP: #1369711
  * hwmon: (amc6821) Fix return value
    - LP: #1369711
  * hwmon: (amc6821) Fix possible race condition bug
    - LP: #1369711
  * MIPS: GIC: Prevent array overrun
    - LP: #1369711
  * crypto: af_alg - properly label AF_ALG socket
    - LP: #1369711
  * mnt: Change the default remount atime from relatime to the existing
    value
    - LP: #1369711
  * ARM: OMAP3: Fix choice of omap3_restore_es function in OMAP34XX
    rev3.1.2 case.
    - LP: #1369711
  * netlabel: use GFP flags from caller instead of GFP_ATOMIC
    - LP: #1369711
  * netlabel: fix a problem when setting bits below the previously lowest
    bit
    - LP: #1369711
  * USB: serial: ftdi_sio: Annotate the current Xsens PID assignments
    - LP: #1369711
  * USB: serial: ftdi_sio: Add support for new Xsens devices
    - LP: #1369711
  * ALSA: virtuoso: Xonar DSX support
    - LP: #1369711
  * ALSA: virtuoso: add Xonar Essence STX II support
    - LP: #1369711
  * hwmon: (gpio-fan) Prevent overflow problem when writing large limits
    - LP: #1369711
  * hwmon: (sis5595) Prevent overflow problem when writing large limits
    - LP: #1369711
  * drm/ttm: Fix possible stack overflow by recursive shrinker calls.
    - LP: #1369711
  * powerpc/mm/numa: Fix break placement
    - LP: #1369711
  * drm/radeon: load the lm63 driver for an lm64 thermal chip.
    - LP: #1369711
  * RDMA/iwcm: Use a default listen backlog if needed
    - LP: #1369711
  * hwmon: (lm92) Prevent overflow problem when writing large limits
    - LP: #1369711
  * hwmon: (ads1015) Fix out-of-bounds array access
    - LP: #1369711
  * s390/locking: Reenable optimistic spinning
    - LP: #1369711
  * ring-buffer: Up rb_iter_peek() loop count to 3
    - LP: #1369711
  * ring-buffer: Always reset iterator to reader page
    - LP: #1369711
  * x86/xen: resume timer irqs early
    - LP: #1369711
  * carl9170: fix sending URBs with wrong type when using full-speed
    - LP: #1369711
  * reiserfs: Fix use after free in journal teardown
    - LP: #1369711
  * powerpc: Fix build errors STRICT_MM_TYPECHECKS
    - LP: #1369711
  * powerpc/mm: Use read barrier when creating real_pte
    - LP: #1369711
  * ASoC: pxa-ssp: drop SNDRV_PCM_FMTBIT_S24_LE
    - LP: #1369711
  * Btrfs: fix csum tree corruption, duplicate and outdated checksums
    - LP: #1369711
  * ALSA: hda/realtek - Avoid setting wrong COEF on ALC269 & co
    - LP: #1369711
  * CIFS: Fix wrong directory attributes after rename
    - LP: #1369711
  * md/raid6: avoid data corruption during recovery of double-degraded
    RAID6
    - LP: #1369711
  * USB: option: add VIA Telecom CDS7 chipset device id
    - LP: #1369711
  * USB: ftdi_sio: add Basic Micro ATOM Nano USB2Serial PID
    - LP: #1369711
  * USB: serial: pl2303: add device id for ztek device
    - LP: #1369711
  * USB: ftdi_sio: Added PID for new ekey device
    - LP: #1369711
  * iommu/amd: Fix cleanup_domain for mass device removal
    - LP: #1369711
  * pata_scc: propagate return value of scc_wait_after_reset
    - LP: #1369711
  * xhci: Treat not finding the event_seg on COMP_STOP the same as
    COMP_STOP_INVAL
    - LP: #1369711
  * usb: xhci: amd chipset also needs short TX quirk
    - LP: #1369711
  * MIPS: OCTEON: make get_system_type() thread-safe
    - LP: #1369711
  * xhci: rework cycle bit checking for new dequeue pointers
    - LP: #1369711
  * HID: logitech: perform bounds checking on device_id early enough
    - LP: #1369711
  * HID: fix a couple of off-by-ones
    - LP: #1369711
  * USB: whiteheat: Added bounds checking for bulk command response
    - LP: #1369711
  * HID: logitech-dj: prevent false errors to be shown
    - LP: #1369711
  * ACPI / EC: Add support to disallow QR_EC to be issued when SCI_EVT
    isn't set
    - LP: #1369711
  * USB: sisusb: add device id for Magic Control USB video
    - LP: #1369711
  * NFSv4: Fix problems with close in the presence of a delegation
    - LP: #1369711
  * HID: magicmouse: sanity check report size in raw_event() callback
    - LP: #1369711
  * HID: picolcd: sanity check report size in raw_event() callback
    - LP: #1369711
  * ARM: 8128/1: abort: don't clear the exclusive monitors
    - LP: #1369711
  * ARM: 8129/1: errata: work around Cortex-A15 erratum 830321 using dummy
    strex
    - LP: #1369711
  * USB: serial: fix potential stack buffer overflow
    - LP: #1369711
  * USB: serial: fix potential heap buffer overflow
    - LP: #1369711
  * openrisc: add missing header inclusion
    - LP: #1369711
  * MIPS: perf: Fix build error caused by unused
    counters_per_cpu_to_total()
    - LP: #1369711
  * MIPS: Fix accessing to per-cpu data when flushing the cache
    - LP: #1369711
  * openrisc: include export.h for EXPORT_SYMBOL
    - LP: #1369711
  * inetpeer: get rid of ip_id_count
    - LP: #1369711
  * ip: make IP identifiers less predictable
    - LP: #1369711
  * tcp: Fix integer-overflows in TCP veno
    - LP: #1369711
  * tcp: Fix integer-overflow in TCP vegas
    - LP: #1369711
  * macvlan: Initialize vlan_features to turn on offload support.
    - LP: #1369711
  * iovec: make sure the caller actually wants anything in
    memcpy_fromiovecend
    - LP: #1369711
  * sctp: fix possible seqlock seadlock in sctp_packet_transmit()
    - LP: #1369711
  * sparc64: Fix argument sign extension for compat_sys_futex().
    - LP: #1369711
  * sparc64: Make itc_sync_lock raw
    - LP: #1369711
  * sparc64: Handle 32-bit tasks properly in compute_effective_address().
    - LP: #1369711
  * sparc64: Fix top-level fault handling bugs.
    - LP: #1369711
  * sparc64: Don't bark so loudly about 32-bit tasks generating 64-bit
    fault addresses.
    - LP: #1369711
  * sparc64: Fix huge TSB mapping on pre-UltraSPARC-III cpus.
    - LP: #1369711
  * sparc64: Add membar to Niagara2 memcpy code.
    - LP: #1369711
  * sparc64: Do not insert non-valid PTEs into the TSB hash table.
    - LP: #1369711
  * sparc64: Guard against flushing openfirmware mappings.
    - LP: #1369711
  * bbc-i2c: Fix BBC I2C envctrl on SunBlade 2000
    - LP: #1369711
  * sunsab: Fix detection of BREAK on sunsab serial console
    - LP: #1369711
  * sparc64: ldc_connect() should not return EINVAL when handshake is in
    progress.
    - LP: #1369711
  * arch/sparc/math-emu/math_32.c: drop stray break operator
    - LP: #1369711
  * slab/mempolicy: always use local policy from interrupt context
    - LP: #1369711
  * sparc: use asm-generic version of types.h
    - LP: #1369711
  * x86-64, espfix: Don't leak bits 31:16 of %esp returning to 16-bit stack
    - LP: #1369711
  * x86, espfix: Move espfix definitions into a separate header file
    - LP: #1369711
  * x86, espfix: Fix broken header guard
    - LP: #1369711
  * x86, espfix: Make espfix64 a Kconfig option, fix UML
    - LP: #1369711
  * x86, espfix: Make it possible to disable 16-bit support
    - LP: #1369711
  * x86_64/entry/xen: Do not invoke espfix64 on Xen
    - LP: #1369711
  * x86/espfix/xen: Fix allocation of pages for paravirt page tables
    - LP: #1369711
  * microblaze: Fix makefile to work with latest toolchain
    - LP: #1369711
  * Linux 3.2.63
    - LP: #1369711
  * libceph: add process_one_ticket() helper
    - LP: #1370044, #1370046, #1370047
    - CVE-2014-6418
  * libceph: do not hard code max auth ticket len
    - LP: #1370044, #1370046, #1370047
    - CVE-2014-6418
 -- Kamal Mostafa <kamal@xxxxxxxxxxxxx>   Wed, 24 Sep 2014 12:16:42 -0700

** Changed in: linux (Ubuntu Precise)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-6410

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-6418

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1369711

Title:
  Precise update to v3.2.63 stable release

Status in “linux” package in Ubuntu:
  Invalid
Status in “linux” source package in Precise:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from Linus' tree or in a minimally
         backported form of that patch. The v3.2.63 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches are in the v3.2.63 stable release:

  UBUNTU: [Config] updateconfigs
  KVM: x86: Inter-privilege level ret emulation is not implemeneted
  ASoC: samsung: Correct I2S DAI suspend/resume ops
  block: don't assume last put of shared tags is for the host
  stable_kernel_rules: Add pointer to netdev-FAQ for network patches
  debugfs: Fix corrupted loop in debugfs_remove_recursive
  serial: core: Preserve termios c_cflag for console resume
  tda10071: force modulation to QPSK on DVB-S
  gspca_pac7302: Add new usb-id for Genius i-Look 317
  mtd/ftl: fix the double free of the buffers allocated in build_maps()
  x86: don't exclude low BIOS area when allocating address space for non-PCI cards
  Bluetooth: never linger on process exit
  scsi: handle flush errors properly
  USB: OHCI: don't lose track of EDs when a controller dies
  ahci: add support for the Promise FastTrak TX8660 SATA HBA (ahci mode)
  usbcore: don't log on consecutive debounce failures of the same port
  USB: Fix persist resume of some SS USB devices
  drm/radeon: fix irq ring buffer overflow handling
  hwmon: (smsc47m192) Fix temperature limit and vrm write operations
  staging: vt6655: Fix Warning on boot handle_irq_event_percpu.
  staging: vt6655: Fix disassociated messages every 10 seconds
  bfa: Fix undefined bit shift on big-endian architectures with 32-bit DMA address
  hpsa: fix bad -ENOMEM return value in hpsa_big_passthru_ioctl
  Drivers: scsi: storvsc: Implement a eh_timed_out handler
  Fix gcc-4.9.0 miscompilation of load_balance() in scheduler
  iommu/vt-d: Exclude devices using RMRRs from IOMMU API domains
  net: sendmsg: fix NULL pointer dereference
  tpm: Provide a generic means to override the chip returned timeouts
  hwmon: (ads1015) Fix off-by-one for valid channel index checking
  MIPS: tlbex: Fix a missing statement for HUGETLB
  MIPS: Prevent user from setting FCSR cause bits
  mm, thp: do not allow thp faults to avoid cpuset restrictions
  md/raid1,raid10: always abort recover on write error.
  ext4: cleanup in ext4_discard_allocated_blocks()
  ext4: fix ext4_discard_allocated_blocks() if we can't allocate the pa struct
  hwmon: (lm85) Fix various errors on attribute writes
  hwmon: (lm78) Fix overflow problems seen when writing large temperature limits
  hwmon: (amc6821) Fix return value
  hwmon: (amc6821) Fix possible race condition bug
  MIPS: GIC: Prevent array overrun
  crypto: af_alg - properly label AF_ALG socket
  mnt: Change the default remount atime from relatime to the existing value
  ARM: OMAP3: Fix choice of omap3_restore_es function in OMAP34XX rev3.1.2 case.
  netlabel: use GFP flags from caller instead of GFP_ATOMIC
  netlabel: fix a problem when setting bits below the previously lowest bit
  USB: serial: ftdi_sio: Annotate the current Xsens PID assignments
  USB: serial: ftdi_sio: Add support for new Xsens devices
  ALSA: virtuoso: Xonar DSX support
  ALSA: virtuoso: add Xonar Essence STX II support
  hwmon: (gpio-fan) Prevent overflow problem when writing large limits
  hwmon: (sis5595) Prevent overflow problem when writing large limits
  drm/ttm: Fix possible stack overflow by recursive shrinker calls.
  powerpc/mm/numa: Fix break placement
  drm/radeon: load the lm63 driver for an lm64 thermal chip.
  RDMA/iwcm: Use a default listen backlog if needed
  hwmon: (lm92) Prevent overflow problem when writing large limits
  hwmon: (ads1015) Fix out-of-bounds array access
  s390/locking: Reenable optimistic spinning
  ring-buffer: Up rb_iter_peek() loop count to 3
  ring-buffer: Always reset iterator to reader page
  x86/xen: resume timer irqs early
  carl9170: fix sending URBs with wrong type when using full-speed
  reiserfs: Fix use after free in journal teardown
  powerpc: Fix build errors STRICT_MM_TYPECHECKS
  powerpc/mm: Use read barrier when creating real_pte
  ASoC: pxa-ssp: drop SNDRV_PCM_FMTBIT_S24_LE
  Btrfs: fix csum tree corruption, duplicate and outdated checksums
  ALSA: hda/realtek - Avoid setting wrong COEF on ALC269 & co
  CIFS: Fix wrong directory attributes after rename
  md/raid6: avoid data corruption during recovery of double-degraded RAID6
  USB: option: add VIA Telecom CDS7 chipset device id
  USB: ftdi_sio: add Basic Micro ATOM Nano USB2Serial PID
  USB: serial: pl2303: add device id for ztek device
  USB: ftdi_sio: Added PID for new ekey device
  iommu/amd: Fix cleanup_domain for mass device removal
  pata_scc: propagate return value of scc_wait_after_reset
  xhci: Treat not finding the event_seg on COMP_STOP the same as COMP_STOP_INVAL
  usb: xhci: amd chipset also needs short TX quirk
  MIPS: OCTEON: make get_system_type() thread-safe
  xhci: rework cycle bit checking for new dequeue pointers
  HID: logitech: perform bounds checking on device_id early enough
  HID: fix a couple of off-by-ones
  USB: whiteheat: Added bounds checking for bulk command response
  HID: logitech-dj: prevent false errors to be shown
  ACPI / EC: Add support to disallow QR_EC to be issued when SCI_EVT isn't set
  USB: sisusb: add device id for Magic Control USB video
  NFSv4: Fix problems with close in the presence of a delegation
  HID: magicmouse: sanity check report size in raw_event() callback
  HID: picolcd: sanity check report size in raw_event() callback
  ARM: 8128/1: abort: don't clear the exclusive monitors
  ARM: 8129/1: errata: work around Cortex-A15 erratum 830321 using dummy strex
  USB: serial: fix potential stack buffer overflow
  USB: serial: fix potential heap buffer overflow
  openrisc: add missing header inclusion
  MIPS: perf: Fix build error caused by unused counters_per_cpu_to_total()
  MIPS: Fix accessing to per-cpu data when flushing the cache
  openrisc: include export.h for EXPORT_SYMBOL
  inetpeer: get rid of ip_id_count
  ip: make IP identifiers less predictable
  tcp: Fix integer-overflows in TCP veno
  tcp: Fix integer-overflow in TCP vegas
  macvlan: Initialize vlan_features to turn on offload support.
  iovec: make sure the caller actually wants anything in memcpy_fromiovecend
  sctp: fix possible seqlock seadlock in sctp_packet_transmit()
  sparc64: Fix argument sign extension for compat_sys_futex().
  sparc64: Make itc_sync_lock raw
  sparc64: Handle 32-bit tasks properly in compute_effective_address().
  sparc64: Fix top-level fault handling bugs.
  sparc64: Don't bark so loudly about 32-bit tasks generating 64-bit fault addresses.
  sparc64: Fix huge TSB mapping on pre-UltraSPARC-III cpus.
  sparc64: Add membar to Niagara2 memcpy code.
  sparc64: Do not insert non-valid PTEs into the TSB hash table.
  sparc64: Guard against flushing openfirmware mappings.
  bbc-i2c: Fix BBC I2C envctrl on SunBlade 2000
  sunsab: Fix detection of BREAK on sunsab serial console
  sparc64: ldc_connect() should not return EINVAL when handshake is in progress.
  arch/sparc/math-emu/math_32.c: drop stray break operator
  slab/mempolicy: always use local policy from interrupt context
  sparc: use asm-generic version of types.h
  Revert "x86-64, modify_ldt: Make support for 16-bit segments a runtime option"
  x86-64, espfix: Don't leak bits 31:16 of %esp returning to 16-bit stack
  x86, espfix: Move espfix definitions into a separate header file
  x86, espfix: Fix broken header guard
  x86, espfix: Make espfix64 a Kconfig option, fix UML
  x86, espfix: Make it possible to disable 16-bit support
  x86_64/entry/xen: Do not invoke espfix64 on Xen
  x86/espfix/xen: Fix allocation of pages for paravirt page tables
  microblaze: Fix makefile to work with latest toolchain
  Linux 3.2.63

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1369711/+subscriptions
References

[Bug 1369711] [NEW] Precise update to v3.2.63 stable release
From: Tim Gardner, 2014-09-15