Quantal update to 3.5.7.27 stable release

Bug #1265562 reported by Brad Figg on 2014-01-02
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Quantal
Undecided
Brad Figg

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.5.7.27 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.5.7.27 stable release:
            Linux 3.5.7.27
            misc: atmel_pwm: add deferred-probing support
            Input: i8042 - add PNP modaliases
            ftrace: Fix function graph with loading of modules
            SUNRPC: don't map EKEYEXPIRED to EACCES in call_refreshresult
            exec/ptrace: fix get_dumpable() incorrect tests
            staging: vt6656: [BUG] Fix for TX USB resets from vendors driver.
            cpuset: Fix memory allocator deadlock
            Staging: tidspbridge: disable driver
            tracing: Allow events to have NULL strings
            ALSA: hda/realtek - Set pcbeep amp for ALC668
            ALSA: hda/realtek - Add support of ALC231 codec
            staging: zsmalloc: Ensure handle is never 0 on success
            powerpc/signals: Improved mark VSX not saved with small contexts fix
            ahci: add Marvell 9230 to the AHCI PCI device list
            PCI: Define macro for Marvell vendor ID
            iio:accel:kxsd9 fix missing mutex unlock
            crypto: s390 - Fix aes-cbc IV corruption
            ARM: i.MX6q: fix the wrong parent of can_root clock
            KVM: Fix iommu map/unmap to handle memory slot moves
            KVM: perform an invalid memslot step for gpa base change
            configfs: fix race between dentry put and lookup
            iscsi-target: chap auth shouldn't match username with trailing garbage
            iscsi-target: fix extract_param to handle buffer length corner case
            powerpc/signals: Mark VSX not saved with small contexts
            powerpc/pseries: Duplicate dtl entries sometimes sent to userspace
            PCI: Remove duplicate pci_disable_device() from pcie_portdrv_remove()
            avr32: fix out-of-range jump in large kernels
            avr32: setup crt for early panic()
            nfsd4: fix xdr decoding of large non-write compounds
            nfsd: make sure to balance get/put_write_access
            nfsd: split up nfsd_setattr
            drm/radeon: add semaphore trace point
            radeon: workaround pinning failure on low ram gpu
            rtlwifi: rtl8192cu: Fix more pointer arithmetic errors
            drm/i915: flush cursors harder
            md: fix calculation of stacking limits on level change.
            target: Fix delayed Task Aborted Status (TAS) handling bug
            audit: use nlmsg_len() to get message payload length
            audit: fix info leak in AUDIT_GET requests
            audit: printk USER_AVC messages when audit isn't enabled
            Revert "ima: policy for RAMFS"
            selinux: correct locking in selinux_netlbl_socket_connect)
            prism54: set netdev type to "wlan"
            mwifiex: correct packet length for packets from SDIO interface
            rtlwifi: rtl8192de: Fix incorrect signal strength for unassociated AP
            rtlwifi: rtl8192cu: Fix incorrect signal strength for unassociated AP
            rtlwifi: rtl8192se: Fix incorrect signal strength for unassociated AP
            rtlwifi: Fix endian error in extracting packet type
            rtlwifi: rtl8192se: Fix wrong assignment
            IB/ipath: Convert ipath_user_sdma_pin_pages() to use get_user_pages_fast()
            setfacl removes part of ACL when setting POSIX ACLs to Samba
            ARM: OMAP2+: omap_device: maintain sane runtime pm status around suspend/resume
            ASoC: cs42l52: Correct MIC CTL mask
            hwmon: (lm90) Fix max6696 alarm handling
            ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD
            ASoC: wm8962: Turn on regcache_cache_only before disabling regulator
            ALSA: pcsp: Fix the order of input device unregistration
            ASoC: fsl: imx-pcm-fiq: omit fiq counter to avoid harm in unbalanced situations
            drm/nouveau: when bailing out of a pushbuf ioctl, do not remove previous fence
            ASoC: blackfin: Fix missing break
            ALSA: hda - Don't clear the power state at snd_hda_codec_reset()
            SUNRPC: Avoid deep recursion in rpc_release_client
            x86/microcode/amd: Tone down printk(), don't treat a missing firmware file as an error
            ALSA: msnd: Avoid duplicated driver name
            mtd: gpmi: fix kernel BUG due to racing DMA operations
            SUNRPC: Fix a data corruption issue when retransmitting RPC calls
            loop: fix crash when using unassigned loop device
            xen/blkback: fix reference counting
            block: properly stack underlying max_segment_size to DM device
            block: fix a probe argument to blk_register_region
            loop: fix crash if blk_alloc_queue fails
            blk-core: Fix memory corruption if blkcg_init_queue fails
            block: fix race between request completion and timeout handling
            mtd: m25p80: fix allocation size
            mtd: map: fixed bug in 64-bit systems
            mtd: nand: hack ONFI for non-power-of-2 dimensions
            PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
            drm/ttm: Fix memory type compatibility check
            drm/ttm: Fix ttm_bo_move_memcpy
            drm/ttm: Handle in-memory region copies
            drm/radeon/si: fix define for MC_SEQ_TRAIN_WAKEUP_CNTL
            ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
            dm: allocate buffer for messages with small number of arguments using GFP_NOIO
            ARM: sa11x0/assabet: ensure CS2 is configured appropriately
            libertas: potential oops in debugfs
            aacraid: prevent invalid pointer dereference
            ACPICA: Fix for a Store->ArgX when ArgX contains a reference to a field.
            ACPICA: Return error if DerefOf resolves to a null package element.
            ACPICA: DeRefOf operator: Update to fully resolve FieldUnit and BufferField refs.
            ACPICA: Interpreter: Fix Store() when implicit conversion is not possible.

CVE References

Brad Figg (brad-figg) on 2014-01-02
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg) on 2014-01-02
Changed in linux (Ubuntu Quantal):
status: New → Fix Committed
assignee: nobody → Brad Figg (brad-figg)
Changed in linux (Ubuntu):
status: New → Invalid
description: updated
Launchpad Janitor (janitor) wrote :
Download full text (7.6 KiB)

This bug was fixed in the package linux - 3.5.0-46.70

---------------
linux (3.5.0-46.70) quantal; urgency=low

  [ Brad Figg ]

  * UBUNTU: Disable abi and module checking due to broken modules being
    disabled and we have bumped the abi.

linux (3.5.0-46.69) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1266857

  [ Sergey Popovich ]

  * SAUCE: (no-up) netfilter: xt_hashlimit: fix proc entry leak in netns
    destroy path
    - LP: #1256988

  [ Tim Gardner ]

  * [Config] Enable CONFIG_VT6656
    - LP: #162671

  [ Upstream Kernel Changes ]

  * Revert "ima: policy for RAMFS"
    - LP: #1265562
  * netfilter: xt_recent: fix namespace destroy path
    - LP: #1256988
  * netfilter: xt_hashlimit: fix namespace destroy path
    - LP: #1256988
  * ACPICA: Interpreter: Fix Store() when implicit conversion is not
    possible.
    - LP: #1265562
  * ACPICA: DeRefOf operator: Update to fully resolve FieldUnit and
    BufferField refs.
    - LP: #1265562
  * ACPICA: Return error if DerefOf resolves to a null package element.
    - LP: #1265562
  * ACPICA: Fix for a Store->ArgX when ArgX contains a reference to a
    field.
    - LP: #1265562
  * aacraid: prevent invalid pointer dereference
    - LP: #1265562
  * libertas: potential oops in debugfs
    - LP: #1265562
  * ARM: sa11x0/assabet: ensure CS2 is configured appropriately
    - LP: #1265562
  * dm: allocate buffer for messages with small number of arguments using
    GFP_NOIO
    - LP: #1265562
  * ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
    - LP: #1265562
  * drm/radeon/si: fix define for MC_SEQ_TRAIN_WAKEUP_CNTL
    - LP: #1265562
  * drm/ttm: Handle in-memory region copies
    - LP: #1265562
  * drm/ttm: Fix ttm_bo_move_memcpy
    - LP: #1265562
  * drm/ttm: Fix memory type compatibility check
    - LP: #1265562
  * PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
    - LP: #1265562
  * mtd: nand: hack ONFI for non-power-of-2 dimensions
    - LP: #1265562
  * mtd: map: fixed bug in 64-bit systems
    - LP: #1265562
  * mtd: m25p80: fix allocation size
    - LP: #1265562
  * block: fix race between request completion and timeout handling
    - LP: #1265562
  * blk-core: Fix memory corruption if blkcg_init_queue fails
    - LP: #1265562
  * loop: fix crash if blk_alloc_queue fails
    - LP: #1265562
  * block: fix a probe argument to blk_register_region
    - LP: #1265562
  * block: properly stack underlying max_segment_size to DM device
    - LP: #1265562
  * xen/blkback: fix reference counting
    - LP: #1265562
  * loop: fix crash when using unassigned loop device
    - LP: #1265562
  * SUNRPC: Fix a data corruption issue when retransmitting RPC calls
    - LP: #1265562
  * mtd: gpmi: fix kernel BUG due to racing DMA operations
    - LP: #1265562
  * ALSA: msnd: Avoid duplicated driver name
    - LP: #1265562
  * x86/microcode/amd: Tone down printk(), don't treat a missing firmware
    file as an error
    - LP: #1265562
  * SUNRPC: Avoid deep recursion in rpc_release_client
    - LP: #1265562
  * ALSA: hda - Don't clear the power state at snd_hda_codec_reset()
    - LP: #1265562
  * ASoC: blackfin: Fix missing ...

Read more...

Changed in linux (Ubuntu Quantal):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers