Maverick update to 2.6.35.12 stable release

Bug #747520 reported by Tim Gardner on 2011-04-01
262
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Maverick
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 2.6.35.12 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/pub/scm/linux/kernel/git/longterm/linux-2.6.35.y.git

    TEST CASE: TBD

       The following patches are _not_ applied from the 2.6.35.12 stable release since they were already in Maverick:

thinkpad-acpi: lock down size of hotkey keymap
thinkpad-acpi: add support for model-specific keymaps
thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
thinkpad-acpi: avoid keymap pitfall
Revert "KVM: Correct ordering of ldt reload wrt fs/gs reload"
KVM: Fix fs/gs reload oops with invalid ldt
KVM: Correct ordering of ldt reload wrt fs/gs reload
sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac()
NFS: fix the return value of nfs_file_fsync()
PM / Hibernate: Improve comments in hibernate_preallocate_memory()
PM / Hibernate: Make default image size depend on total RAM size

       The following patches are in the 2.6.35.12 stable release:

perf session: Invalidate last_match when removing threads from rb_tree
Fix cred leak in AF_NETLINK
staging: usbip: remove double giveback of URB
USB: EHCI: ASPM quirk of ISOC on AMD SB800
rt2x00: add device id for windy31 usb device
ALSA: snd-usb-us122l: Fix missing NULL checks
hwmon: (via686a) Initialize fan_div values
USB: serial: handle Data Carrier Detect changes
USB: CP210x Add two device IDs
USB: CP210x Removed incorrect device ID
USB: usb-storage: unusual_devs update for Cypress ATACB
USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u external hard drive enclosure
USB: usb-storage: unusual_devs entry for CamSport Evo
USB: usb-storage: unusual_devs entry for Coby MP3 player
USB: serial: Updated support for ICOM devices
USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
USB: EHCI: ASPM quirk of ISOC on AMD Hudson
USB: EHCI: fix DMA deallocation bug
USB: g_printer: fix bug in module parameter definitions
USB: io_edgeport: fix the reported firmware major and minor
USB: ti_usb: fix module removal
USB: Storage: Add unusual_devs entry for VTech Kidizoom
USB: ftdi_sio: add ST Micro Connect Lite uart support
USB: cdc-acm: Adding second ACM channel support for Nokia N8
USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research spectrograph
USB: prevent buggy hubs from crashing the USB stack
staging: comedi: add support for newer jr3 1-channel pci board
staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
Staging: hv: fix sysfs symlink on hv block device
staging: hv: Enable sending GARP packet after live migration
iwlagn: enable only rfkill interrupt when device is down
ath9k: Fix bug in delimiter padding computation
fix medium error problems with some arrays which can cause data corruption
libsas: fix runaway error handler problem
mpt2sas: Fix device removal handshake for zoned devices
mpt2sas: Correct resizing calculation for max_queue_depth
mpt2sas: Kernel Panic during Large Topology discovery
radio-aimslab.c: Fix gcc 4.5+ bug
em28xx: Fix audio input for Terratec Grabby
ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
ALSA: HDA: Fix dmesg output of HDMI supported bits
ALSA: hda - Fix memory leaks in conexant jack arrays
input: bcm5974: Add support for MacBookAir3
ALSA: hrtimer: handle delayed timer interrupts
ASoC: WM8990: msleep() takes milliseconds not jiffies
ASoC: Blackfin AC97: fix build error after multi-component update
NFS: Fix "kernel BUG at fs/aio.c:554!"
rtc-cmos: fix suspend/resume
iwlagn: Re-enable RF_KILL interrupt when down
rapidio: fix hang on RapidIO doorbell queue full condition
PCI: pci-stub: ignore zero-length id parameters
virtio: remove virtio-pci root device
ds2760_battery: Fix calculation of time_to_empty_now
p54: fix sequence no. accounting off-by-one error
i2c: Unregister dummy devices last on adapter removal
serial: unbreak billionton CF card
ptrace: use safer wake up on ptrace_detach()
x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
fix jiffy calculations in calibrate_delay_direct to handle overflow
drivers: update to pl2303 usb-serial to support Motorola cables
klist: Fix object alignment on 64-bit.
powerpc: Fix some 6xx/7xxx CPU setup functions
parisc : Remove broken line wrapping handling pdc_iodc_print()
kernel/smp.c: fix smp_call_function_many() SMP race
hostap_cs: fix sleeping function called from invalid context
md: fix regression with re-adding devices to arrays with no metadata
pata_mpc52xx: inherit from ata_bmdma_port_ops
TPM: Long default timeout fix
tpm_tis: Use timeouts returned from TPM
SELinux: define permissions for DCB netlink messages
SELinux: do not compute transition labels on mountpoint labeled filesystems
ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
dm: dont take i_mutex to change device size
dm mpath: disable blk_abort_queue
drm/radeon/kms: add quirk for Mac Radeon HD 2600 card
drm/radeon/kms: make the mac rv630 quirk generic
drm/radeon/kms: add pll debugging output
drm/radeon: remove 0x4243 pci id
drm/radeon/kms: fix s/r issues with bios scratch regs
drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
drm/i915: Add dependency on CONFIG_TMPFS
x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask after switching mm
usb: Realloc xHCI structures after a hub is verified.
sched: Move sched_avg_update() to update_cpu_load()
sched: Increment cache_nice_tries only on periodic lb
sched: Try not to migrate higher priority RT tasks
sched: Give CPU bound RT tasks preference
sched: suppress RCU lockdep splat in task_fork_fair
sched: Do not consider SCHED_IDLE tasks to be cache hot
sched: Set group_imb only a task can be pulled from the busiest cpu
sched: Force balancing on newidle balance if local group has capacity
sched: Drop group_capacity to 1 only if local group has extra capacity
sched: Fix softirq time accounting
sched: Consolidate account_system_vtime extern declaration
sched: Remove unused PF_ALIGNWARN flag
sched: Add a PF flag for ksoftirqd identification
sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
x86: Add IRQ_TIME_ACCOUNTING
sched: Do not account irq time to current task
sched: Remove irq time from available CPU power
sched: Call tick_check_idle before __irq_enter
sched: Export account_system_vtime()
sched, cgroup: Fixup broken cgroup movement
sched: Use group weight, idle cpu metrics to fix imbalances during idle
kernel/user.c: add lock release annotation on free_user()
NFSD: memory corruption due to writing beyond the stat array
mptfusion: mptctl_release is required in mptctl.c
mptfusion: Fix Incorrect return value in mptscsih_dev_reset
ocfs2_connection_find() returns pointer to bad structure
x86/pvclock: Zero last_value on resume
av7110: check for negative array offset
bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
CRED: Fix kernel panic upon security_file_alloc() failure.
CRED: Fix BUG() upon security_cred_alloc_blank() failure
CRED: Fix memory and refcount leaks upon security_prepare_creds() failure
isdn: hisax: Replace the bogus access to irq stats
scsi_dh_alua: add netapp to dev list
scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
nfsd: correctly handle return value from nfsd_map_name_to_*
s390: remove task_show_regs
PM / Hibernate: Return error code when alloc_image_page() fails
fs/partitions: Validate map_count in Mac partition tables
ALSA: HDA: Add position_fix quirk for an Asus device
ALSA: caiaq - Fix possible string-buffer overflow
radio-aimslab.c needs #include <linux/delay.h>
ARM: Ensure predictable endian state on signal handler entry
acer-wmi: Fix capitalisation of GUID
eCryptfs: Copy up lower inode attrs in getattr
platform: x86: acer-wmi: world-writable sysfs threeg file
platform: x86: asus_acpi: world-writable procfs files
platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial files
genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
usb: musb: omap2430: fix kernel panic on reboot
USB: add quirks entry for Keytouch QWERTY Panel
USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
USB: Add quirk for Samsung Android phone modem
p54pci: update receive dma buffers before and after processing
sierra: add new ID for Airprime/Sierra USB IP modem
staging: usbip: vhci: update reference count for usb_device
staging: usbip: vhci: give back URBs from in-flight unlink requests
staging: usbip: vhci: refuse to enqueue for dead connections
staging: usbip: vhci: use urb->dev->portnum to find port
epoll: prevent creating circular epoll structures
ldm: corrupted partition table can cause kernel oops
md: correctly handle probe of an 'mdp' device.
x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
xhci: Avoid BUG() in interrupt context
xhci: Clarify some expressions in the TRB math
xhci: Fix errors in the running total calculations in the TRB math
xhci: Fix an error in count_sg_trbs_needed()
x25: Do not reference freed memory.
Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in a right number.
drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
x86: Use u32 instead of long to set reset vector back to 0
fuse: fix hang of single threaded fuseblk filesystem
clockevents: Prevent oneshot mode when broadcast device is periodic
ext2: Fix link count corruption under heavy link+rename load
p54usb: add Senao NUB-350 usbid
dccp: fix oops on Reset after close
e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup instead
r8169: disable ASPM
usb: iowarrior: don't trust report_size for buffer size
arp_notify: unconditionally send gratuitous ARP for NETDEV_NOTIFY_PEERS.
CIFS: Fix oplock break handling (try #2)
cpuset: add a missing unlock in cpuset_write_resmask()
keyboard: integer underflow bug
RxRPC: Fix v1 keys
ixgbe: fix for 82599 erratum on Header Splitting
mm: fix possible cause of a page_mapped BUG
powerpc/kexec: Fix orphaned offline CPUs across kexec
netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
nfsd: wrong index used in inner loop
r8169: use RxFIFO overflow workaround for 8168c chipset.
net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
ip6ip6-autoload-ip6-tunnel
hwmon/f71882fg: Set platform drvdata to NULL later
mtd: add "platform:" prefix for platform modalias
libata: no special completion processing for EH commands
MIPS: MTX-1: Make au1000_eth probe all PHY addresses
x86/mm: Handle mm_fault_error() in kernel space
ftrace: Fix memory leak with function graph and cpu hotplug
x86: Fix panic when handling "mem={invalid}" param
x86: Emit "mem=nopentium ignored" warning when not supported
ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
RDMA/cma: Fix crash in request handlers
IB/cm: Bump reference count on cm_id before invoking callback
x86, quirk: Fix SB600 revision check
ath9k_hw: Fix incorrect macversion and macrev checks
USB: serial/kobil_sct, fix potential tty NULL dereference
USB: serial: ch341: add new id
xhci: Fix cycle bit calculation during stall handling.
ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
PCI: add more checking to ICH region quirks
PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
PCI: sysfs: Fix failure path for addition of "vpd" attribute
ALSA: ctxfi - Fix incorrect SPDIF status bit mask
ALSA: ctxfi - Fix SPDIF status retrieval
ALSA: ctxfi - Clear input settings before initialization
SUNRPC: Ensure we always run the tk_callback before tk_action
perf, powerpc: Handle events that raise an exception without overflowing
ext3: Always set dx_node's fake_dirent explicitly.
call_function_many: fix list delete vs add race
call_function_many: add missing ordering
x86: Flush TLB if PGD entry is changed in i386 PAE mode
smp_call_function_many: handle concurrent clearing of mask
fix per-cpu flag problem in the cpu affinity checkers
i2c: Fix typo in instantiating-devices document
mmc: sdio: remember new card RCA when redetecting card
x86, binutils, xen: Fix another wrong size directive
hwmon: (sht15) Fix integer overflow in humidity calculation
aio: wake all waiters when destroying ctx
shmem: let shared anonymous be nonlinear again
PCI hotplug: acpiphp: set current_state to D0 in register_slot
xen: set max_pfn_mapped to the last pfn mapped
Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code
ext3: skip orphan cleanup on rocompat fs
procfs: fix /proc/<pid>/maps heap check
proc: protect mm start_code/end_code in /proc/pid/stat
fbcon: Bugfix soft cursor detection in Tile Blitting
nfsd41: modify the members value of nfsd4_op_flags
uvcvideo: Fix uvc_fixup_video_ctrl() format search
ehci-hcd: Bug fix: don't set a QH's Halt bit
USB: uss720 fixup refcount position
USB: cdc-acm: fix memory corruption / panic
USB: cdc-acm: fix potential null-pointer dereference
USB: cdc-acm: fix potential null-pointer dereference on disconnect
Input: xen-kbdfront - advertise either absolute or relative coordinates
SUNRPC: Never reuse the socket port after an xs_close()
fs: call security_d_instantiate in d_obtain_alias V2
dcdbas: force SMI to happen when expected
ALSA: hda - Fix SPDIF out regression on ALC889
ALSA: Fix yet another race in disconnection
perf: Better fit max unprivileged mlock pages for tools needs
myri10ge: fix rmmod crash
cciss: fix lost command issue
sound/oss/opl3: validate voice and channel indexes
mac80211: initialize sta->last_rx in sta_info_alloc
ses: show devices for enclosures with no page 7
ses: Avoid kernel panic when lun 0 is not mapped
eCryptfs: Unlock page in write_begin error path
eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
classmate-laptop: depends on RFKILL or RFKILL=n
netfilter: arpt_mangle: fix return values of checkentry
Patch cab9e9848b9a8283b0504a2d7c435a9f5ba026de to the 2.6.35.y stable tree
revert misc: uss720.c: add another vendor/product ID
cfg80211: fix can_beacon_sec_chan, reenable HT40
USB: isp1760: Implement solution for erratum 2
xhci: Update internal dequeue pointers after stalls.
perf: Fix tear-down of inherited group events
Revert "slab: Fix missing DEBUG_SLAB last user"
net: Fix ip link add netns oops
hwmon: (w83627ehf) Driver cleanup
md: Fix - again - partition detection when array becomes active
iwl3945: remove plcp check
KVM: enlarge number of possible CPUID leaves
KVM: i8259: initialize isr_ack
KVM: VMX: Fix host userspace gsbase corruption
Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
Release 2.6.35.12

Tim Gardner (timg-tpi) on 2011-04-01
tags: added: kernel-stable-tracking-bug
description: updated
Tim Gardner (timg-tpi) on 2011-04-01
description: updated
Tim Gardner (timg-tpi) on 2011-04-01
description: updated
Tim Gardner (timg-tpi) on 2011-04-01
Changed in linux (Ubuntu Maverick):
status: New → Fix Committed
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Maverick):
assignee: nobody → Ubuntu Stable Release Updates Team (ubuntu-sru)
description: updated
Tim Gardner (timg-tpi) on 2011-04-01
security vulnerability: no → yes

Accepted linux into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Martin Pitt (pitti) on 2011-06-09
Changed in linux (Ubuntu Maverick):
assignee: Ubuntu Stable Release Updates Team (ubuntu-sru) → nobody
Launchpad Janitor (janitor) wrote :
Download full text (30.0 KiB)

This bug was fixed in the package linux - 2.6.35-30.54

---------------
linux (2.6.35-30.54) maverick-proposed; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #794114

  [ Upstream Kernel Changes ]

  * Revert "xhci: Fix full speed bInterval encoding."
  * Revert "USB: xhci - also free streams when resetting devices"
  * Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
  * Revert "USB: xhci - fix unsafe macro definitions"

linux (2.6.35-30.53) maverick-proposed; urgency=low

  [ Upstream Kernel Changes ]

  * xhci: Fix full speed bInterval encoding.
    - LP: #792959

linux (2.6.35-30.52) maverick-proposed; urgency=low

  [ Herton R. Krzesinski ]

  * Release Tracking Bug
    - LP: #790653

  [ Stefan Bader ]

  * Include nls_iso8859-1 for virtual images
    - LP: #732046

  [ Thomas Schlichter ]

  * SAUCE: vesafb: mtrr module parameter is uint, not bool
    - LP: #778043

  [ Tim Gardner ]

  * [Config] Add cachefiles.ko to virtual flavour
    - LP: #770430

  [ Upstream Kernel Changes ]

  * Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
    hang"
    - LP: #772560
  * Revert "TPM: Long default timeout fix"
    - LP: #772560
  * Revert "tpm_tis: Use timeouts returned from TPM"
    - LP: #772560
  * Revert "xen: set max_pfn_mapped to the last pfn mapped"
  * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
    - LP: #765007
    - CVE-2010-4565
  * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
    CVE-2011-0711
    - LP: #767740
    - CVE-2011-0711
  * Treat writes as new when holes span across page boundaries,
    CVE-2011-0463
    - LP: #770483
    - CVE-2011-0463
  * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
    CVE-2011-1017
    - LP: #771382
    - CVE-2011-1017
  * qla2xxx: Make the FC port capability mutual exclusive.
    - LP: #772560
  * staging: usbip: bugfixes related to kthread conversion
    - LP: #772560
  * staging: usbip: bugfix add number of packets for isochronous frames
    - LP: #772560
  * staging: usbip: bugfix for isochronous packets and optimization
    - LP: #772560
  * staging: hv: Fix GARP not sent after Quick Migration
    - LP: #772560
  * staging: hv: use sync_bitops when interacting with the hypervisor
    - LP: #772560
  * irda: validate peer name and attribute lengths
    - LP: #772560
  * irda: prevent heap corruption on invalid nickname
    - LP: #772560
  * nilfs2: fix data loss in mmap page write for hole blocks
    - LP: #772560
  * ASoC: Explicitly say registerless widgets have no register
    - LP: #772560
  * ALSA: ens1371: fix Creative Ectiva support
    - LP: #772560
  * ROSE: prevent heap corruption with bad facilities
    - LP: #772560
  * Btrfs: Fix uninitialized root flags for subvolumes
    - LP: #772560
  * x86, mtrr, pat: Fix one cpu getting out of sync during resume
    - LP: #772560
  * UBIFS: do not read flash unnecessarily
    - LP: #772560
  * UBIFS: fix oops on error path in read_pnode
    - LP: #772560
  * UBIFS: fix debugging failure in dbg_check_space_info
    - LP: #772560
  * quota: Don't write quota info in dquot_commit()
    - LP: #772560
  * mm: avoid wrapping vm_...

Changed in linux (Ubuntu Maverick):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers