Maverick update to 2.6.35.9 stable release

Bug #686158 reported by Brad Figg on 2010-12-06
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Maverick
Undecided
Unassigned

Bug Description

SRU Justification

Impact:

The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch.

The 2.6.35.9 upstream stable patch set is now available. It should be
included in the Ubuntu kernel as well.

    http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.9
    http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.35.9.bz2

The following patches are in the 2.6.35.9 stable release:

* Linux 2.6.35.9
* KVM: x86 emulator: fix regression with cmpxchg8b on i386 hosts
* isdn: avoid calling tty_ldisc_flush() in atomic context
* sgi-xp: incoming XPC channel messages can come in after the channel's partition structures have been torn down
* ARM: cns3xxx: Fixup the missing second parameter to addruart macro to allow them to build.
* secmark: do not return early if there was no error
* xfrm4: strip ECN bits from tos field
* net/core: Allow tagged VLAN packets to flow through VETH devices.
* net: add a recursion limit in xmit path
* Revert d88dca79d3852a3623f606f781e013d61486828a
* Revert c6537d6742985da1fbf12ae26cde6a096fd35b5c
* net-2.6: SYN retransmits: Add new parameter to retransmits_timed_out()
* tcp: Fix race in tcp_poll
* Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer overflows.
* net: Fix the condition passed to sk_wait_event()
* rose: Fix signedness issues wrt. digi count.
* r6040: Fix multicast filter some more
* Phonet: Correct header retrieval after pskb_may_pull
* qlcnic: dont set skb->truesize
* netxen: dont set skb->truesize
* net: Fix IPv6 PMTU disc. w/ asymmetric routes
* ipv6: fix refcnt problem related to POSTDAD state
* ip: fix truesize mismatch in ip fragmentation
* gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New: linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
* gianfar: fix double lock typo
* net: clear heap allocations for privileged ethtool actions
* Fix regressions in scsi_internal_device_block
* Fix race when removing SCSI devices
* gdth: integer overflow in ioctl
* libsas: fix NCQ mixing with non-NCQ
* sd name space exhaustion causes system hang
* asus-laptop: fix gps rfkill
* USB: accept some invalid ep0-maxpacket values
* usb: r8a66597-hcd: Change mistake of the outsw function
* USB: opticon: Fix long-standing bugs in opticon driver
* USB: visor: fix initialisation of UX50/TH55 devices
* USB: disable endpoints after unbinding interfaces, not before
* USB: atmel_usba_udc: force vbus_pin at -EINVAL when gpio_request failled
* USB: cp210x: Add WAGO 750-923 Service Cable device ID
* USB: cp210x: Add Renesas RX-Stick device ID
* USB: option: Add more ZTE modem USB id's
* USB: Change acm_iad_descriptor bFunctionProtocol to USB_CDC_ACM_PROTO_AT_V25TER
* usb: musb: blackfin: call gpio_free() on error path in musb_platform_init()
* usb: musb: blackfin: call usb_nop_xceiv_unregister() in musb_platform_exit()
* USB: MUSB: fix kernel WARNING/oops when unloading module in OTG mode
* USB: ftdi_sio: add device ids for ScienceScope
* USB: ftdi_sio: new VID/PIDs for various Papouch devices
* USB: add PID for FTDI based OpenDCC hardware
* USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
* USB: ftdi_sio: Add PID for accesio products
* USB: gadget: g_multi: fixed vendor and product ID
* USB: gadget: g_ffs: fixed vendor and product ID
* usb gadget: composite: prevent OOPS for non-standard control request
* drivers/net/wireless/p54/eeprom.c: Return -ENOMEM on memory allocation failure
* p54usb: add five more USBIDs
* p54usb: fix off-by-one on !CONFIG_PM
* pipe: fix failure to return error code on ->confirm()
* USB: mct_u232: fix broken close
* KVM: SVM: Restore correct registers after sel_cr0 intercept emulation
* KVM: X86: Report SVM bit to userspace only when supported
* x86, vm86: Fix preemption bug for int1 debug and int3 breakpoint handlers.
* x86, kdump: Change copy_oldmem_page() to use cached addressing
* x86, intr-remap: Set redirection hint in the IRTE
* x86, mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs
* x86, olpc: Don't retry EC commands forever
* x86, kexec: Make sure to stop all CPUs before exiting the kernel
* x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
* mm, x86: Saving vmcore with non-lazy freeing of vmas
* intel_idle: do not use the LAPIC timer for ATOM C2
* libahci: fix result_tf handling after an ATA PIO data-in command
* cifs: fix broken oplock handling
* futex: Fix errors in nested key ref-counting
* bluetooth: Fix missing NULL check
* sched: Fix string comparison in /proc/sched_features
* sched: Drop all load weight manipulation for RT tasks
* pcmcia: synclink_cs: fix information leak to userland
* powerpc/perf: Fix sampling enable for PPC970
* perf_events: Fix bogus context time tracking
* perf_events: Fix bogus AMD64 generic TLB events
* Staging: phison: fix problem caused by libata change
* staging: usbip: Process event flags without delay
* staging: usbip: Notify usb core of port status changes

CVE References

Brad Figg (brad-figg) on 2010-12-06
tags: added: kernel-tracking-bug
tags: added: kernel-series-unknown
Tim Gardner (timg-tpi) on 2011-01-03
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Maverick):
status: New → Fix Committed

Accepted into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

tags: added: verification-needed
David Hunter (david-hunter) wrote :

Confirmed that patch "USB: mct_u232: fix broken close" fixes bug #705681.

Launchpad Janitor (janitor) wrote :
Download full text (24.4 KiB)

This bug was fixed in the package linux - 2.6.35-25.44

---------------
linux (2.6.35-25.44) maverick-proposed; urgency=low

  [ Upstream Kernel Changes ]

  * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
    - LP: #703553

linux (2.6.35-25.43) maverick-proposed; urgency=low

  [ Brad Figg ]

  - LP: #697948

  [ Andy Whitcroft ]

  * [Config] add vmware-balloon driver to -virtual flavour
    - LP: #592039

  [ Manoj Iyer ]

  * SAUCE: Enable jack sense for Thinkpad Edge 13
    - LP: #685015

  [ Robert Hooker ]

  * Revert "(pre-stable): input: Support Clickpad devices in ClickZone
    mode"
    - LP: #669399

  [ Stefan Bader ]

  * Set virtual flavour maximum of domain visible memory to 70G
    - LP: #667796

  [ Takashi Iwai ]

  * SAUCE: input: Support Clickpad devices in ClickZone mode
    - LP: #516329

  [ Tim Gardner ]

  * [Config] Add nfsd modules to -virtual flavour
    - LP: #688070
  * [Config] Added autofs4.ko to -virtual flavour
    - LP: #692917

  [ Upstream Kernel Changes ]

  * intel_idle: delete substates DEBUG modparam
    - LP: #684888
  * intel_idle: delete power_policy modparam, and choose substate functions
    - LP: #684888
  * intel_idle: add support for Westmere-EX
    - LP: #684888
  * intel_idle: recognize Lincroft Atom Processor
    - LP: #684888
  * x86, mwait: Move mwait constants to a common header file
    - LP: #684888
  * intel_idle: Change mode 755 => 644
    - LP: #684888
  * intel_idle: add missing __percpu markup
    - LP: #684888
  * cpuidle: extend cpuidle and menu governor to handle dynamic states
    - LP: #684888
  * intel_idle: Voluntary leave_mm before entering deeper
    - LP: #684888
  * intel_idle: enable Atom C6
    - LP: #684888
  * intel_idle: simplify test for leave_mm()
    - LP: #684888
  * intel_idle: delete bogus data from cpuidle_state.power_usage
    - LP: #684888
  * intel_idle: add initial Sandy Bridge support
    - LP: #684888
  * intel_idle: do not use the LAPIC timer for ATOM C2
    - LP: #684888
  * staging: usbip: Notify usb core of port status changes
    - LP: #686158
  * staging: usbip: Process event flags without delay
    - LP: #686158
  * Staging: phison: fix problem caused by libata change
    - LP: #686158
  * perf_events: Fix bogus AMD64 generic TLB events
    - LP: #686158
  * perf_events: Fix bogus context time tracking
    - LP: #686158
  * powerpc/perf: Fix sampling enable for PPC970
    - LP: #686158
  * pcmcia: synclink_cs: fix information leak to userland
    - LP: #686158
  * sched: Drop all load weight manipulation for RT tasks
    - LP: #686158
  * sched: Fix string comparison in /proc/sched_features
    - LP: #686158
  * bluetooth: Fix missing NULL check
    - LP: #686158
  * futex: Fix errors in nested key ref-counting
    - LP: #686158
  * cifs: fix broken oplock handling
    - LP: #686158
  * libahci: fix result_tf handling after an ATA PIO data-in command
    - LP: #686158
  * mm, x86: Saving vmcore with non-lazy freeing of vmas
    - LP: #686158
  * x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
    - LP: #686158
  * x86, kexec: Make sure to stop all CPUs before exiting the kernel
    - LP: #686158
  * x86, olpc: Don...

Changed in linux (Ubuntu Maverick):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers