Maverick update to 2.6.35.9 stable release

Bug #686158 reported by Brad Figg
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Maverick
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

Impact:

The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch.

The 2.6.35.9 upstream stable patch set is now available. It should be
included in the Ubuntu kernel as well.

    http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.9
    http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.35.9.bz2

The following patches are in the 2.6.35.9 stable release:

* Linux 2.6.35.9
* KVM: x86 emulator: fix regression with cmpxchg8b on i386 hosts
* isdn: avoid calling tty_ldisc_flush() in atomic context
* sgi-xp: incoming XPC channel messages can come in after the channel's partition structures have been torn down
* ARM: cns3xxx: Fixup the missing second parameter to addruart macro to allow them to build.
* secmark: do not return early if there was no error
* xfrm4: strip ECN bits from tos field
* net/core: Allow tagged VLAN packets to flow through VETH devices.
* net: add a recursion limit in xmit path
* Revert d88dca79d3852a3623f606f781e013d61486828a
* Revert c6537d6742985da1fbf12ae26cde6a096fd35b5c
* net-2.6: SYN retransmits: Add new parameter to retransmits_timed_out()
* tcp: Fix race in tcp_poll
* Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer overflows.
* net: Fix the condition passed to sk_wait_event()
* rose: Fix signedness issues wrt. digi count.
* r6040: Fix multicast filter some more
* Phonet: Correct header retrieval after pskb_may_pull
* qlcnic: dont set skb->truesize
* netxen: dont set skb->truesize
* net: Fix IPv6 PMTU disc. w/ asymmetric routes
* ipv6: fix refcnt problem related to POSTDAD state
* ip: fix truesize mismatch in ip fragmentation
* gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New: linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
* gianfar: fix double lock typo
* net: clear heap allocations for privileged ethtool actions
* Fix regressions in scsi_internal_device_block
* Fix race when removing SCSI devices
* gdth: integer overflow in ioctl
* libsas: fix NCQ mixing with non-NCQ
* sd name space exhaustion causes system hang
* asus-laptop: fix gps rfkill
* USB: accept some invalid ep0-maxpacket values
* usb: r8a66597-hcd: Change mistake of the outsw function
* USB: opticon: Fix long-standing bugs in opticon driver
* USB: visor: fix initialisation of UX50/TH55 devices
* USB: disable endpoints after unbinding interfaces, not before
* USB: atmel_usba_udc: force vbus_pin at -EINVAL when gpio_request failled
* USB: cp210x: Add WAGO 750-923 Service Cable device ID
* USB: cp210x: Add Renesas RX-Stick device ID
* USB: option: Add more ZTE modem USB id's
* USB: Change acm_iad_descriptor bFunctionProtocol to USB_CDC_ACM_PROTO_AT_V25TER
* usb: musb: blackfin: call gpio_free() on error path in musb_platform_init()
* usb: musb: blackfin: call usb_nop_xceiv_unregister() in musb_platform_exit()
* USB: MUSB: fix kernel WARNING/oops when unloading module in OTG mode
* USB: ftdi_sio: add device ids for ScienceScope
* USB: ftdi_sio: new VID/PIDs for various Papouch devices
* USB: add PID for FTDI based OpenDCC hardware
* USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
* USB: ftdi_sio: Add PID for accesio products
* USB: gadget: g_multi: fixed vendor and product ID
* USB: gadget: g_ffs: fixed vendor and product ID
* usb gadget: composite: prevent OOPS for non-standard control request
* drivers/net/wireless/p54/eeprom.c: Return -ENOMEM on memory allocation failure
* p54usb: add five more USBIDs
* p54usb: fix off-by-one on !CONFIG_PM
* pipe: fix failure to return error code on ->confirm()
* USB: mct_u232: fix broken close
* KVM: SVM: Restore correct registers after sel_cr0 intercept emulation
* KVM: X86: Report SVM bit to userspace only when supported
* x86, vm86: Fix preemption bug for int1 debug and int3 breakpoint handlers.
* x86, kdump: Change copy_oldmem_page() to use cached addressing
* x86, intr-remap: Set redirection hint in the IRTE
* x86, mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs
* x86, olpc: Don't retry EC commands forever
* x86, kexec: Make sure to stop all CPUs before exiting the kernel
* x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
* mm, x86: Saving vmcore with non-lazy freeing of vmas
* intel_idle: do not use the LAPIC timer for ATOM C2
* libahci: fix result_tf handling after an ATA PIO data-in command
* cifs: fix broken oplock handling
* futex: Fix errors in nested key ref-counting
* bluetooth: Fix missing NULL check
* sched: Fix string comparison in /proc/sched_features
* sched: Drop all load weight manipulation for RT tasks
* pcmcia: synclink_cs: fix information leak to userland
* powerpc/perf: Fix sampling enable for PPC970
* perf_events: Fix bogus context time tracking
* perf_events: Fix bogus AMD64 generic TLB events
* Staging: phison: fix problem caused by libata change
* staging: usbip: Process event flags without delay
* staging: usbip: Notify usb core of port status changes

CVE References

Brad Figg (brad-figg)
tags: added: kernel-tracking-bug
tags: added: kernel-series-unknown
Tim Gardner (timg-tpi)
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Maverick):
status: New → Fix Committed
Revision history for this message
Martin Pitt (pitti) wrote : Please test proposed package

Accepted into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

tags: added: verification-needed
Revision history for this message
David Hunter (david-hunter) wrote :

Confirmed that patch "USB: mct_u232: fix broken close" fixes bug #705681.

Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (24.4 KiB)

This bug was fixed in the package linux - 2.6.35-25.44

---------------
linux (2.6.35-25.44) maverick-proposed; urgency=low

  [ Upstream Kernel Changes ]

  * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
    - LP: #703553

linux (2.6.35-25.43) maverick-proposed; urgency=low

  [ Brad Figg ]

  - LP: #697948

  [ Andy Whitcroft ]

  * [Config] add vmware-balloon driver to -virtual flavour
    - LP: #592039

  [ Manoj Iyer ]

  * SAUCE: Enable jack sense for Thinkpad Edge 13
    - LP: #685015

  [ Robert Hooker ]

  * Revert "(pre-stable): input: Support Clickpad devices in ClickZone
    mode"
    - LP: #669399

  [ Stefan Bader ]

  * Set virtual flavour maximum of domain visible memory to 70G
    - LP: #667796

  [ Takashi Iwai ]

  * SAUCE: input: Support Clickpad devices in ClickZone mode
    - LP: #516329

  [ Tim Gardner ]

  * [Config] Add nfsd modules to -virtual flavour
    - LP: #688070
  * [Config] Added autofs4.ko to -virtual flavour
    - LP: #692917

  [ Upstream Kernel Changes ]

  * intel_idle: delete substates DEBUG modparam
    - LP: #684888
  * intel_idle: delete power_policy modparam, and choose substate functions
    - LP: #684888
  * intel_idle: add support for Westmere-EX
    - LP: #684888
  * intel_idle: recognize Lincroft Atom Processor
    - LP: #684888
  * x86, mwait: Move mwait constants to a common header file
    - LP: #684888
  * intel_idle: Change mode 755 => 644
    - LP: #684888
  * intel_idle: add missing __percpu markup
    - LP: #684888
  * cpuidle: extend cpuidle and menu governor to handle dynamic states
    - LP: #684888
  * intel_idle: Voluntary leave_mm before entering deeper
    - LP: #684888
  * intel_idle: enable Atom C6
    - LP: #684888
  * intel_idle: simplify test for leave_mm()
    - LP: #684888
  * intel_idle: delete bogus data from cpuidle_state.power_usage
    - LP: #684888
  * intel_idle: add initial Sandy Bridge support
    - LP: #684888
  * intel_idle: do not use the LAPIC timer for ATOM C2
    - LP: #684888
  * staging: usbip: Notify usb core of port status changes
    - LP: #686158
  * staging: usbip: Process event flags without delay
    - LP: #686158
  * Staging: phison: fix problem caused by libata change
    - LP: #686158
  * perf_events: Fix bogus AMD64 generic TLB events
    - LP: #686158
  * perf_events: Fix bogus context time tracking
    - LP: #686158
  * powerpc/perf: Fix sampling enable for PPC970
    - LP: #686158
  * pcmcia: synclink_cs: fix information leak to userland
    - LP: #686158
  * sched: Drop all load weight manipulation for RT tasks
    - LP: #686158
  * sched: Fix string comparison in /proc/sched_features
    - LP: #686158
  * bluetooth: Fix missing NULL check
    - LP: #686158
  * futex: Fix errors in nested key ref-counting
    - LP: #686158
  * cifs: fix broken oplock handling
    - LP: #686158
  * libahci: fix result_tf handling after an ATA PIO data-in command
    - LP: #686158
  * mm, x86: Saving vmcore with non-lazy freeing of vmas
    - LP: #686158
  * x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
    - LP: #686158
  * x86, kexec: Make sure to stop all CPUs before exiting the kernel
    - LP: #686158
  * x86, olpc: Don...

Changed in linux (Ubuntu Maverick):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.