Maverick update to 2.6.35.12 stable release

Bug #747520 reported by Tim Gardner
262
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Maverick
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 2.6.35.12 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/pub/scm/linux/kernel/git/longterm/linux-2.6.35.y.git

    TEST CASE: TBD

       The following patches are _not_ applied from the 2.6.35.12 stable release since they were already in Maverick:

thinkpad-acpi: lock down size of hotkey keymap
thinkpad-acpi: add support for model-specific keymaps
thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
thinkpad-acpi: avoid keymap pitfall
Revert "KVM: Correct ordering of ldt reload wrt fs/gs reload"
KVM: Fix fs/gs reload oops with invalid ldt
KVM: Correct ordering of ldt reload wrt fs/gs reload
sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac()
NFS: fix the return value of nfs_file_fsync()
PM / Hibernate: Improve comments in hibernate_preallocate_memory()
PM / Hibernate: Make default image size depend on total RAM size

       The following patches are in the 2.6.35.12 stable release:

perf session: Invalidate last_match when removing threads from rb_tree
Fix cred leak in AF_NETLINK
staging: usbip: remove double giveback of URB
USB: EHCI: ASPM quirk of ISOC on AMD SB800
rt2x00: add device id for windy31 usb device
ALSA: snd-usb-us122l: Fix missing NULL checks
hwmon: (via686a) Initialize fan_div values
USB: serial: handle Data Carrier Detect changes
USB: CP210x Add two device IDs
USB: CP210x Removed incorrect device ID
USB: usb-storage: unusual_devs update for Cypress ATACB
USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u external hard drive enclosure
USB: usb-storage: unusual_devs entry for CamSport Evo
USB: usb-storage: unusual_devs entry for Coby MP3 player
USB: serial: Updated support for ICOM devices
USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
USB: EHCI: ASPM quirk of ISOC on AMD Hudson
USB: EHCI: fix DMA deallocation bug
USB: g_printer: fix bug in module parameter definitions
USB: io_edgeport: fix the reported firmware major and minor
USB: ti_usb: fix module removal
USB: Storage: Add unusual_devs entry for VTech Kidizoom
USB: ftdi_sio: add ST Micro Connect Lite uart support
USB: cdc-acm: Adding second ACM channel support for Nokia N8
USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research spectrograph
USB: prevent buggy hubs from crashing the USB stack
staging: comedi: add support for newer jr3 1-channel pci board
staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
Staging: hv: fix sysfs symlink on hv block device
staging: hv: Enable sending GARP packet after live migration
iwlagn: enable only rfkill interrupt when device is down
ath9k: Fix bug in delimiter padding computation
fix medium error problems with some arrays which can cause data corruption
libsas: fix runaway error handler problem
mpt2sas: Fix device removal handshake for zoned devices
mpt2sas: Correct resizing calculation for max_queue_depth
mpt2sas: Kernel Panic during Large Topology discovery
radio-aimslab.c: Fix gcc 4.5+ bug
em28xx: Fix audio input for Terratec Grabby
ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
ALSA: HDA: Fix dmesg output of HDMI supported bits
ALSA: hda - Fix memory leaks in conexant jack arrays
input: bcm5974: Add support for MacBookAir3
ALSA: hrtimer: handle delayed timer interrupts
ASoC: WM8990: msleep() takes milliseconds not jiffies
ASoC: Blackfin AC97: fix build error after multi-component update
NFS: Fix "kernel BUG at fs/aio.c:554!"
rtc-cmos: fix suspend/resume
iwlagn: Re-enable RF_KILL interrupt when down
rapidio: fix hang on RapidIO doorbell queue full condition
PCI: pci-stub: ignore zero-length id parameters
virtio: remove virtio-pci root device
ds2760_battery: Fix calculation of time_to_empty_now
p54: fix sequence no. accounting off-by-one error
i2c: Unregister dummy devices last on adapter removal
serial: unbreak billionton CF card
ptrace: use safer wake up on ptrace_detach()
x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
fix jiffy calculations in calibrate_delay_direct to handle overflow
drivers: update to pl2303 usb-serial to support Motorola cables
klist: Fix object alignment on 64-bit.
powerpc: Fix some 6xx/7xxx CPU setup functions
parisc : Remove broken line wrapping handling pdc_iodc_print()
kernel/smp.c: fix smp_call_function_many() SMP race
hostap_cs: fix sleeping function called from invalid context
md: fix regression with re-adding devices to arrays with no metadata
pata_mpc52xx: inherit from ata_bmdma_port_ops
TPM: Long default timeout fix
tpm_tis: Use timeouts returned from TPM
SELinux: define permissions for DCB netlink messages
SELinux: do not compute transition labels on mountpoint labeled filesystems
ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
dm: dont take i_mutex to change device size
dm mpath: disable blk_abort_queue
drm/radeon/kms: add quirk for Mac Radeon HD 2600 card
drm/radeon/kms: make the mac rv630 quirk generic
drm/radeon/kms: add pll debugging output
drm/radeon: remove 0x4243 pci id
drm/radeon/kms: fix s/r issues with bios scratch regs
drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
drm/i915: Add dependency on CONFIG_TMPFS
x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask after switching mm
usb: Realloc xHCI structures after a hub is verified.
sched: Move sched_avg_update() to update_cpu_load()
sched: Increment cache_nice_tries only on periodic lb
sched: Try not to migrate higher priority RT tasks
sched: Give CPU bound RT tasks preference
sched: suppress RCU lockdep splat in task_fork_fair
sched: Do not consider SCHED_IDLE tasks to be cache hot
sched: Set group_imb only a task can be pulled from the busiest cpu
sched: Force balancing on newidle balance if local group has capacity
sched: Drop group_capacity to 1 only if local group has extra capacity
sched: Fix softirq time accounting
sched: Consolidate account_system_vtime extern declaration
sched: Remove unused PF_ALIGNWARN flag
sched: Add a PF flag for ksoftirqd identification
sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
x86: Add IRQ_TIME_ACCOUNTING
sched: Do not account irq time to current task
sched: Remove irq time from available CPU power
sched: Call tick_check_idle before __irq_enter
sched: Export account_system_vtime()
sched, cgroup: Fixup broken cgroup movement
sched: Use group weight, idle cpu metrics to fix imbalances during idle
kernel/user.c: add lock release annotation on free_user()
NFSD: memory corruption due to writing beyond the stat array
mptfusion: mptctl_release is required in mptctl.c
mptfusion: Fix Incorrect return value in mptscsih_dev_reset
ocfs2_connection_find() returns pointer to bad structure
x86/pvclock: Zero last_value on resume
av7110: check for negative array offset
bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
CRED: Fix kernel panic upon security_file_alloc() failure.
CRED: Fix BUG() upon security_cred_alloc_blank() failure
CRED: Fix memory and refcount leaks upon security_prepare_creds() failure
isdn: hisax: Replace the bogus access to irq stats
scsi_dh_alua: add netapp to dev list
scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
nfsd: correctly handle return value from nfsd_map_name_to_*
s390: remove task_show_regs
PM / Hibernate: Return error code when alloc_image_page() fails
fs/partitions: Validate map_count in Mac partition tables
ALSA: HDA: Add position_fix quirk for an Asus device
ALSA: caiaq - Fix possible string-buffer overflow
radio-aimslab.c needs #include <linux/delay.h>
ARM: Ensure predictable endian state on signal handler entry
acer-wmi: Fix capitalisation of GUID
eCryptfs: Copy up lower inode attrs in getattr
platform: x86: acer-wmi: world-writable sysfs threeg file
platform: x86: asus_acpi: world-writable procfs files
platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial files
genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
usb: musb: omap2430: fix kernel panic on reboot
USB: add quirks entry for Keytouch QWERTY Panel
USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
USB: Add quirk for Samsung Android phone modem
p54pci: update receive dma buffers before and after processing
sierra: add new ID for Airprime/Sierra USB IP modem
staging: usbip: vhci: update reference count for usb_device
staging: usbip: vhci: give back URBs from in-flight unlink requests
staging: usbip: vhci: refuse to enqueue for dead connections
staging: usbip: vhci: use urb->dev->portnum to find port
epoll: prevent creating circular epoll structures
ldm: corrupted partition table can cause kernel oops
md: correctly handle probe of an 'mdp' device.
x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
xhci: Avoid BUG() in interrupt context
xhci: Clarify some expressions in the TRB math
xhci: Fix errors in the running total calculations in the TRB math
xhci: Fix an error in count_sg_trbs_needed()
x25: Do not reference freed memory.
Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in a right number.
drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
x86: Use u32 instead of long to set reset vector back to 0
fuse: fix hang of single threaded fuseblk filesystem
clockevents: Prevent oneshot mode when broadcast device is periodic
ext2: Fix link count corruption under heavy link+rename load
p54usb: add Senao NUB-350 usbid
dccp: fix oops on Reset after close
e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup instead
r8169: disable ASPM
usb: iowarrior: don't trust report_size for buffer size
arp_notify: unconditionally send gratuitous ARP for NETDEV_NOTIFY_PEERS.
CIFS: Fix oplock break handling (try #2)
cpuset: add a missing unlock in cpuset_write_resmask()
keyboard: integer underflow bug
RxRPC: Fix v1 keys
ixgbe: fix for 82599 erratum on Header Splitting
mm: fix possible cause of a page_mapped BUG
powerpc/kexec: Fix orphaned offline CPUs across kexec
netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
nfsd: wrong index used in inner loop
r8169: use RxFIFO overflow workaround for 8168c chipset.
net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
ip6ip6-autoload-ip6-tunnel
hwmon/f71882fg: Set platform drvdata to NULL later
mtd: add "platform:" prefix for platform modalias
libata: no special completion processing for EH commands
MIPS: MTX-1: Make au1000_eth probe all PHY addresses
x86/mm: Handle mm_fault_error() in kernel space
ftrace: Fix memory leak with function graph and cpu hotplug
x86: Fix panic when handling "mem={invalid}" param
x86: Emit "mem=nopentium ignored" warning when not supported
ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
RDMA/cma: Fix crash in request handlers
IB/cm: Bump reference count on cm_id before invoking callback
x86, quirk: Fix SB600 revision check
ath9k_hw: Fix incorrect macversion and macrev checks
USB: serial/kobil_sct, fix potential tty NULL dereference
USB: serial: ch341: add new id
xhci: Fix cycle bit calculation during stall handling.
ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
PCI: add more checking to ICH region quirks
PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
PCI: sysfs: Fix failure path for addition of "vpd" attribute
ALSA: ctxfi - Fix incorrect SPDIF status bit mask
ALSA: ctxfi - Fix SPDIF status retrieval
ALSA: ctxfi - Clear input settings before initialization
SUNRPC: Ensure we always run the tk_callback before tk_action
perf, powerpc: Handle events that raise an exception without overflowing
ext3: Always set dx_node's fake_dirent explicitly.
call_function_many: fix list delete vs add race
call_function_many: add missing ordering
x86: Flush TLB if PGD entry is changed in i386 PAE mode
smp_call_function_many: handle concurrent clearing of mask
fix per-cpu flag problem in the cpu affinity checkers
i2c: Fix typo in instantiating-devices document
mmc: sdio: remember new card RCA when redetecting card
x86, binutils, xen: Fix another wrong size directive
hwmon: (sht15) Fix integer overflow in humidity calculation
aio: wake all waiters when destroying ctx
shmem: let shared anonymous be nonlinear again
PCI hotplug: acpiphp: set current_state to D0 in register_slot
xen: set max_pfn_mapped to the last pfn mapped
Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code
ext3: skip orphan cleanup on rocompat fs
procfs: fix /proc/<pid>/maps heap check
proc: protect mm start_code/end_code in /proc/pid/stat
fbcon: Bugfix soft cursor detection in Tile Blitting
nfsd41: modify the members value of nfsd4_op_flags
uvcvideo: Fix uvc_fixup_video_ctrl() format search
ehci-hcd: Bug fix: don't set a QH's Halt bit
USB: uss720 fixup refcount position
USB: cdc-acm: fix memory corruption / panic
USB: cdc-acm: fix potential null-pointer dereference
USB: cdc-acm: fix potential null-pointer dereference on disconnect
Input: xen-kbdfront - advertise either absolute or relative coordinates
SUNRPC: Never reuse the socket port after an xs_close()
fs: call security_d_instantiate in d_obtain_alias V2
dcdbas: force SMI to happen when expected
ALSA: hda - Fix SPDIF out regression on ALC889
ALSA: Fix yet another race in disconnection
perf: Better fit max unprivileged mlock pages for tools needs
myri10ge: fix rmmod crash
cciss: fix lost command issue
sound/oss/opl3: validate voice and channel indexes
mac80211: initialize sta->last_rx in sta_info_alloc
ses: show devices for enclosures with no page 7
ses: Avoid kernel panic when lun 0 is not mapped
eCryptfs: Unlock page in write_begin error path
eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
classmate-laptop: depends on RFKILL or RFKILL=n
netfilter: arpt_mangle: fix return values of checkentry
Patch cab9e9848b9a8283b0504a2d7c435a9f5ba026de to the 2.6.35.y stable tree
revert misc: uss720.c: add another vendor/product ID
cfg80211: fix can_beacon_sec_chan, reenable HT40
USB: isp1760: Implement solution for erratum 2
xhci: Update internal dequeue pointers after stalls.
perf: Fix tear-down of inherited group events
Revert "slab: Fix missing DEBUG_SLAB last user"
net: Fix ip link add netns oops
hwmon: (w83627ehf) Driver cleanup
md: Fix - again - partition detection when array becomes active
iwl3945: remove plcp check
KVM: enlarge number of possible CPUID leaves
KVM: i8259: initialize isr_ack
KVM: VMX: Fix host userspace gsbase corruption
Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
Release 2.6.35.12

Tim Gardner (timg-tpi)
tags: added: kernel-stable-tracking-bug
description: updated
Tim Gardner (timg-tpi)
description: updated
Tim Gardner (timg-tpi)
description: updated
Tim Gardner (timg-tpi)
Changed in linux (Ubuntu Maverick):
status: New → Fix Committed
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Maverick):
assignee: nobody → Ubuntu Stable Release Updates Team (ubuntu-sru)
description: updated
Tim Gardner (timg-tpi)
security vulnerability: no → yes
Revision history for this message
Martin Pitt (pitti) wrote : Please test proposed package

Accepted linux into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Martin Pitt (pitti)
Changed in linux (Ubuntu Maverick):
assignee: Ubuntu Stable Release Updates Team (ubuntu-sru) → nobody
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (30.0 KiB)

This bug was fixed in the package linux - 2.6.35-30.54

---------------
linux (2.6.35-30.54) maverick-proposed; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #794114

  [ Upstream Kernel Changes ]

  * Revert "xhci: Fix full speed bInterval encoding."
  * Revert "USB: xhci - also free streams when resetting devices"
  * Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
  * Revert "USB: xhci - fix unsafe macro definitions"

linux (2.6.35-30.53) maverick-proposed; urgency=low

  [ Upstream Kernel Changes ]

  * xhci: Fix full speed bInterval encoding.
    - LP: #792959

linux (2.6.35-30.52) maverick-proposed; urgency=low

  [ Herton R. Krzesinski ]

  * Release Tracking Bug
    - LP: #790653

  [ Stefan Bader ]

  * Include nls_iso8859-1 for virtual images
    - LP: #732046

  [ Thomas Schlichter ]

  * SAUCE: vesafb: mtrr module parameter is uint, not bool
    - LP: #778043

  [ Tim Gardner ]

  * [Config] Add cachefiles.ko to virtual flavour
    - LP: #770430

  [ Upstream Kernel Changes ]

  * Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
    hang"
    - LP: #772560
  * Revert "TPM: Long default timeout fix"
    - LP: #772560
  * Revert "tpm_tis: Use timeouts returned from TPM"
    - LP: #772560
  * Revert "xen: set max_pfn_mapped to the last pfn mapped"
  * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
    - LP: #765007
    - CVE-2010-4565
  * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
    CVE-2011-0711
    - LP: #767740
    - CVE-2011-0711
  * Treat writes as new when holes span across page boundaries,
    CVE-2011-0463
    - LP: #770483
    - CVE-2011-0463
  * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
    CVE-2011-1017
    - LP: #771382
    - CVE-2011-1017
  * qla2xxx: Make the FC port capability mutual exclusive.
    - LP: #772560
  * staging: usbip: bugfixes related to kthread conversion
    - LP: #772560
  * staging: usbip: bugfix add number of packets for isochronous frames
    - LP: #772560
  * staging: usbip: bugfix for isochronous packets and optimization
    - LP: #772560
  * staging: hv: Fix GARP not sent after Quick Migration
    - LP: #772560
  * staging: hv: use sync_bitops when interacting with the hypervisor
    - LP: #772560
  * irda: validate peer name and attribute lengths
    - LP: #772560
  * irda: prevent heap corruption on invalid nickname
    - LP: #772560
  * nilfs2: fix data loss in mmap page write for hole blocks
    - LP: #772560
  * ASoC: Explicitly say registerless widgets have no register
    - LP: #772560
  * ALSA: ens1371: fix Creative Ectiva support
    - LP: #772560
  * ROSE: prevent heap corruption with bad facilities
    - LP: #772560
  * Btrfs: Fix uninitialized root flags for subvolumes
    - LP: #772560
  * x86, mtrr, pat: Fix one cpu getting out of sync during resume
    - LP: #772560
  * UBIFS: do not read flash unnecessarily
    - LP: #772560
  * UBIFS: fix oops on error path in read_pnode
    - LP: #772560
  * UBIFS: fix debugging failure in dbg_check_space_info
    - LP: #772560
  * quota: Don't write quota info in dquot_commit()
    - LP: #772560
  * mm: avoid wrapping vm_...

Changed in linux (Ubuntu Maverick):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.