Lucid update to 2.6.32.25 stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
| linux (Ubuntu) |
Medium
|
Unassigned | ||
| Lucid |
Medium
|
Leann Ogasawara | ||
| Maverick |
Undecided
|
Unassigned | ||
| linux-mvl-dove (Ubuntu) |
Undecided
|
Unassigned | ||
| Lucid |
Undecided
|
Unassigned | ||
| Maverick |
Undecided
|
Unassigned |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch. The 2.6.32.25 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well.
http://
http://
Test Case: TBD
The following 3 patches in the 2.6.32.25 stable update were already release in a security update. Therefore, we will omit these 3 patches from the 2.6.32.25 stable update:
* ALSA: prevent heap corruption in snd_ctl_new
* ocfs2: Don't walk off the end of fast symlinks.
* rose: Fix signedness issues wrt. digi count.
Additionally, 2 patches which were applied as "pre-stable" have landed in this 2.6.32.25 update. Therefore, we will drop the pre-stable patches in favor of the official patches from the 2.6.32.25 patch set:
* ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on resume
* mm: (pre-stable) Move vma_stack_continue into mm.h
I'd also note that it appears somewhere along the way that updateconfigs and updateportsconfigs needed but be run but never was. Thus, I've also included 2 additional patches which update the configs and portsconfigs.
The following is the complete list of patches in the 2.6.32.25 stable release:
* x86, cpu: After uncapping CPUID, re-run CPU feature detection
* ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
* ALSA: oxygen: fix analog capture on Claro halo cards
* ALSA: hda - Add Dell Latitude E6400 model quirk
* ALSA: prevent heap corruption in snd_ctl_new()
* ALSA: rawmidi: fix oops (use after free) when unloading a driver module
* USB: fix bug in initialization of interface minor numbers
* usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX style
* usb: musb: gadget: restart request on clearing endpoint halt
* oprofile: Add Support for Intel CPU Family 6 / Model 29
* RDMA/cxgb3: Turn off RX coalescing for iWARP connections
* mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
* x86/amd-iommu: Set iommu configuration flags in enable-loop
* x86/amd-iommu: Fix rounding-bug in __unmap_single
* x86/amd-iommu: Work around S3 BIOS bug
* tracing/x86: Don't use mcount in pvclock.c
* tracing/x86: Don't use mcount in kvmclock.c
* v4l1: fix 32-bit compat microcode loading translation
* V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
* V4L/DVB (13966): DVB-T regression fix for saa7134 cards
* Input: joydev - fix JSIOCSAXMAP ioctl
* x86, hpet: Fix bogus error check in hpet_assign_irq()
* x86, irq: Plug memory leak in sparse irq
* ubd: fix incorrect sector handling during request restart
* ring-buffer: Fix typo of time extends per page
* dmaengine: fix interrupt clearing for mv_xor
* hrtimer: Preserve timer state in remove_hrtimer()
* i2c-pca: Fix waitforcompletion() return value
* ocfs2: Don't walk off the end of fast symlinks.
* wext: fix potential private ioctl memory content leak
* atl1: fix resume
* x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
* De-pessimize rds_page_copy_user
* drm/radeon: fix PCI ID 5657 to be an RV410
* xfrm4: strip ECN and IP Precedence bits in policy lookup
* tcp: Fix >4GB writes on 64-bit.
* net: Fix the condition passed to sk_wait_event()
* Phonet: Correct header retrieval after pskb_may_pull
* net: Fix IPv6 PMTU disc. w/ asymmetric routes
* ip: fix truesize mismatch in ip fragmentation
* net: clear heap allocations for privileged ethtool actions
* tcp: Fix race in tcp_poll
* netxen: dont set skb->truesize
* rose: Fix signedness issues wrt. digi count.
* net: blackhole route should always be recalculated
* skge: add quirk to limit DMA
* r8169: allocate with GFP_KERNEL flag when able to sleep
* bsg: fix incorrect device_status value
* r6040: fix r6040_multicast
* r6040: Fix multicast list iteration when hash filter is used
* powerpc: Initialise paca->kstack before early_setup_
* powerpc: Don't use kernel stack with translation off
* b44: fix carrier detection on bind
* ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on resume
* intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot hang
* ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite L355
* ACPI: delete ZEPTO idle=nomwait DMI quirk
* ACPI: Disable Windows Vista compatibility for Toshiba P305D
* x86: detect scattered cpuid features earlier
* fix 2.6.32.23 suspend regression caused by commit 6f6198a
* setup_arg_pages: diagnose excessive argument size
* execve: improve interactivity with large arguments
* execve: make responsive to SIGKILL with large arguments
* Phonet: disable network namespace support
* mm: Move vma_stack_continue into mm.h
* Linux 2.6.32.25
Related branches
CVE References
- 2010-0435
- 2010-2942
- 2010-2943
- 2010-2954
- 2010-2955
- 2010-2960
- 2010-2962
- 2010-2963
- 2010-3067
- 2010-3078
- 2010-3080
- 2010-3084
- 2010-3310
- 2010-3432
- 2010-3437
- 2010-3442
- 2010-3477
- 2010-3705
- 2010-3848
- 2010-3849
- 2010-3850
- 2010-3861
- 2010-3865
- 2010-3875
- 2010-3876
- 2010-3877
- 2010-3880
- 2010-3904
- 2010-4072
- 2010-4073
- 2010-4076
- 2010-4077
- 2010-4158
- 2010-4163
- 2010-4165
- 2010-4169
- 2010-4175
Changed in linux (Ubuntu): | |
assignee: | nobody → Leann Ogasawara (leannogasawara) |
importance: | Undecided → Medium |
status: | New → In Progress |
tags: | added: 2.6.32.25 |
Changed in linux (Ubuntu): | |
assignee: | Leann Ogasawara (leannogasawara) → nobody |
status: | In Progress → Fix Released |
Changed in linux (Ubuntu Lucid): | |
assignee: | nobody → Leann Ogasawara (leannogasawara) |
importance: | Undecided → Medium |
status: | New → In Progress |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in linux (Ubuntu Lucid): | |
status: | In Progress → Fix Committed |
tags: | added: verification-needed |
tags: | added: kernel-tracking-bug |
Scott Moser (smoser) wrote : | #2 |
I ran the kernel-* tests from lp:qa-regression-testing against the -proposed kernel on -ec2 (this is the linux-ec2 variant) under both x86_64 and i386 and did not see any regressions. Minimal test, but something.
Launchpad Janitor (janitor) wrote : | #3 |
This bug was fixed in the package linux - 2.6.32-27.49
---------------
linux (2.6.32-27.49) lucid-proposed; urgency=low
[ Leann Ogasawara ]
- LP: #683425
* Revert "SAUCE: AF_ECONET prevent kernel stack overflow"
* Revert "SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges"
* Revert "SAUCE: AF_ECONET saddr->cookie prevent NULL pointer
dereference"
[ Tim Gardner ]
* [Config] Added be2net, be2scsi to udebs
- LP: #628776
* [Config] Use correct be2iscsi module name in d-i/modules/
- LP: #628776
[ Upstream Kernel Changes ]
* Revert "(pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
PCIEXP_WAKE_STS on resume"
* Revert "mm: (pre-stable) Move vma_stack_continue into mm.h"
* x86, cpu: After uncapping CPUID, re-run CPU feature detection
- LP: #668380
* ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
- LP: #668380
* ALSA: oxygen: fix analog capture on Claro halo cards
- LP: #668380
* ALSA: hda - Add Dell Latitude E6400 model quirk
- LP: #643891, #668380
* ALSA: rawmidi: fix oops (use after free) when unloading a driver module
- LP: #668380
* USB: fix bug in initialization of interface minor numbers
- LP: #668380
* usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX
style
- LP: #668380
* usb: musb: gadget: restart request on clearing endpoint halt
- LP: #668380
* oprofile: Add Support for Intel CPU Family 6 / Model 29
- LP: #668380
* RDMA/cxgb3: Turn off RX coalescing for iWARP connections
- LP: #668380
* mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
- LP: #668380
* x86/amd-iommu: Set iommu configuration flags in enable-loop
- LP: #668380
* x86/amd-iommu: Fix rounding-bug in __unmap_single
- LP: #668380
* x86/amd-iommu: Work around S3 BIOS bug
- LP: #668380
* tracing/x86: Don't use mcount in pvclock.c
- LP: #668380
* tracing/x86: Don't use mcount in kvmclock.c
- LP: #668380
* v4l1: fix 32-bit compat microcode loading translation
- LP: #668380
* V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
- LP: #668380
* V4L/DVB (13966): DVB-T regression fix for saa7134 cards
- LP: #668380
* Input: joydev - fix JSIOCSAXMAP ioctl
- LP: #668380
* x86, hpet: Fix bogus error check in hpet_assign_irq()
- LP: #668380
* x86, irq: Plug memory leak in sparse irq
- LP: #668380
* ubd: fix incorrect sector handling during request restart
- LP: #668380
* ring-buffer: Fix typo of time extends per page
- LP: #668380
* dmaengine: fix interrupt clearing for mv_xor
- LP: #668380
* hrtimer: Preserve timer state in remove_hrtimer()
- LP: #668380
* i2c-pca: Fix waitforcompletion() return value
- LP: #668380
* wext: fix potential private ioctl memory content leak
- LP: #668380
* atl1: fix resume
- LP: #668380
* x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
- LP: #668380
* De-pessimize rds_page_copy_user
- LP: #668380
* xfrm4: strip ECN and IP Precedence bits in policy lookup
- LP: #668380
* tcp: Fix >4GB writes on 64-bit.
- LP: #668380
* ne...
Changed in linux (Ubuntu Lucid): | |
status: | Fix Committed → Fix Released |
Changed in linux (Ubuntu Maverick): | |
status: | New → Invalid |
Changed in linux-mvl-dove (Ubuntu): | |
status: | New → Invalid |
Launchpad Janitor (janitor) wrote : | #4 |
This bug was fixed in the package linux-mvl-dove - 2.6.32-216.33
---------------
linux-mvl-dove (2.6.32-216.33) lucid-proposed; urgency=low
[ Ubuntu: 2.6.32-31.60 ]
* Release Tracking Bug
- LP: #734950
* SAUCE: Clear new_profile in error path
- LP: #732700
* [Config] CONFIG_
- LP: #733191
* Revert "drm/radeon/bo: add some fallback placements for VRAM only
objects."
- LP: #652934
* drm/radeon: fall back to GTT if bo creation/validation in VRAM fails.
- LP: #652934
* drm/radeon/kms: Fix retrying ttm_bo_init() after it failed once.
- LP: #652934
* xfs: always use iget in bulkstat
- LP: #692848
* drm/radeon/kms: make the mac rv630 quirk generic
- LP: #728687
* drm/radeon/kms: add pll debugging output
- LP: #728687
* drm/radeon: remove 0x4243 pci id
- LP: #728687
* drm/radeon/kms: fix s/r issues with bios scratch regs
- LP: #728687
* drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
- LP: #728687
* drm/i915: Add dependency on CONFIG_TMPFS
- LP: #728687
* Linux 2.6.32.29+drm33.14
- LP: #728687
* NFSD: memory corruption due to writing beyond the stat array
- LP: #728687
* mptfusion: mptctl_release is required in mptctl.c
- LP: #728687
* mptfusion: Fix Incorrect return value in mptscsih_dev_reset
- LP: #728687
* ocfs2_connectio
- LP: #728687
* x25: decrement netdev reference counts on unload
- LP: #728687
* x86, hpet: Disable per-cpu hpet timer if ARAT is supported
- LP: #728687
* OHCI: work around for nVidia shutdown problem
- LP: #728687
* x86/pvclock: Zero last_value on resume
- LP: #728687
* av7110: check for negative array offset
- LP: #728687
* CRED: Fix get_task_cred() and task_state() to not resurrect dead
credentials
- LP: #728687
* bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
- LP: #728687
* CRED: Fix kernel panic upon security_
- LP: #728687
* CRED: Fix BUG() upon security_
- LP: #728687
* CRED: Fix memory and refcount leaks upon security_
failure
- LP: #728687
* sendfile(): check f_op.splice_write() rather than f_op.sendpage()
- LP: #728687
* isdn: hisax: Replace the bogus access to irq stats
- LP: #728687
* ixgbe: add support for 82599 based Express Module X520-P2
- LP: #728687
* ixgbe: prevent speculative processing of descriptors before ready
- LP: #728687
* scsi_dh_alua: add netapp to dev list
- LP: #728687
* scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
- LP: #728687
* dm raid1: fail writes if errors are not handled and log fails
- LP: #728687
* GFS2: Fix bmap allocation corner-case bug
- LP: #728687
* dm raid1: fix null pointer dereference in suspend
- LP: #728687
* sunrpc/cache: fix module refcnt leak in a failure path
- LP: #728687
* be2net: Maintain tx and rx counters in driver
- LP: #728687
* tcp: Make TCP_MAXSEG minimum more correct.
- LP: #728687
* nfsd: correctly handle return value from ...
Changed in linux-mvl-dove (Ubuntu Lucid): | |
status: | New → Fix Released |
Changed in linux-mvl-dove (Ubuntu Maverick): | |
status: | New → Fix Released |
Accepted linux into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation how to enable and use -proposed. Thank you in advance!