| 2010-12-10 18:46:29 |
Brad Figg |
description |
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from Linus' tree or in a minimally
backported form of that patch. The 2.6.32.27+drm33.12 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/pub/scm/linux/kernel/git/smb/linux-2.6.32.y-drm33.z.git
http://git.kernel.org/?p=linux/kernel/git/smb/linux-2.6.32.y-drm33.z.git;a=summary
TEST CASE: TBD
The following 126 patches are in the 2.6.32.19 stable release:
* block: Ensure physical block size is unsigned int
* block: limit vec count in bio_kmalloc() and bio_alloc_map_data()
* block: take care not to overflow when calculating total iov length
* block: check for proper length of iov entries in blk_rq_map_user_iov()
* jme: Fix PHY power-off error
* irda: Fix parameter extraction stack overflow
* irda: Fix heap memory corruption in iriap.c
* i2c-pca-platform: Change device name of request_irq
* microblaze: Fix build with make 3.82
* net: clear heap allocation for ETHTOOL_GRXCLSRLALL
* Staging: asus_oled: fix up some sysfs attribute permissions
* Staging: asus_oled: fix up my fixup for some sysfs attribute permissions
* Staging: line6: fix up some sysfs attribute permissions
* hpet: fix unwanted interrupt due to stale irq status bit
* hpet: unmap unused I/O space
* olpc_battery: Fix endian neutral breakage for s16 values
* percpu: fix list_head init bug in __percpu_counter_init()
* um: remove PAGE_SIZE alignment in linker script causing kernel segfault.
* um: fix global timer issue when using CONFIG_NO_HZ
* numa: fix slab_node(MPOL_BIND)
* hwmon: (lm85) Fix ADT7468 frequency table
* mm: fix return value of scan_lru_pages in memory unplug
* mm: fix is_mem_section_removable() page_order BUG_ON check
* ahci,ata_generic: let ata_generic handle new MBP w/ MCP89
* ata_generic: implement ATA_GEN_* flags and force enable DMA on MBP 7,1
* ssb: b43-pci-bridge: Add new vendor for BCM4318
* sgi-xpc: XPC fails to discover partitions with all nasids above 128
* xen: ensure that all event channels start off bound to VCPU 0
* xen: don't bother to stop other cpus on shutdown/reboot
* ipc: initialize structure memory to zero for compat functions
* ipc: shm: fix information leak to userland
* sys_semctl: fix kernel stack leakage
* net: NETIF_F_HW_CSUM does not imply FCoE CRC offload
* drivers/char/vt_ioctl.c: fix VT_OPENQRY error value
* viafb: use proper register for colour when doing fill ops
* eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
* md/raid1: really fix recovery looping when single good device fails.
* md: fix return value of rdev_size_change()
* x86: AMD Northbridge: Verify NB's node is online
* tty: prevent DOS in the flush_to_ldisc
* TTY: restore tty_ldisc_wait_idle
* tty_ldisc: Fix BUG() on hangup
* TTY: ldisc, fix open flag handling
* KVM: VMX: fix vmx null pointer dereference on debug register access
* KVM: x86: fix information leak to userland
* KVM: VMX: Fix host userspace gsbase corruption
* firewire: cdev: fix information leak
* firewire: core: fix an information leak
* firewire: ohci: fix buffer overflow in AR split packet handling
* firewire: ohci: fix race in AR split packet handling
* ALSA: ac97: Apply quirk for Dell Latitude D610 binding Master and Headphone controls
* ALSA: HDA: Add an extra DAC for Realtek ALC887-VD
* ALSA: hda: Use "alienware" model quirk for another SSID
* netfilter: nf_conntrack: allow nf_ct_alloc_hashtable() to get highmem pages
* latencytop: fix per task accumulator
* mm/vfs: revalidate page->mapping in do_generic_file_read()
* bio: take care not overflow page count when mapping/copying user data
* libata-scsi passthru: fix bug which truncated LBA48 return values
* libata: fix NULL sdev dereference race in atapi_qc_complete()
* PCI: fix size checks for mmap() on /proc/bus/pci files
* PCI: fix offset check for sysfs mmapped files
* efifb: check that the base address is plausible on pci systems
* USB: gadget: AT91: fix typo in atmel_usba_udc driver
* USB: ftdi_sio: add device IDs for Milkymist One JTAG/serial
* USB: option: fix when the driver is loaded incorrectly for some Huawei devices.
* usb: misc: sisusbvga: fix information leak to userland
* usb: misc: iowarrior: fix information leak to userland
* usb: core: fix information leak to userland
* USB: EHCI: fix obscure race in ehci_endpoint_disable
* USB: storage: sierra_ms: fix sysfs file attribute
* USB: atm: ueagle-atm: fix up some permissions on the sysfs files
* USB: misc: cypress_cy7c63: fix up some sysfs attribute permissions
* USB: misc: usbled: fix up some sysfs attribute permissions
* USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
* USB: misc: trancevibrator: fix up a sysfs attribute permission
* USB: misc: usbsevseg: fix up some sysfs attribute permissions
* USB: ftdi_sio: Add ID for RT Systems USB-29B radio cable
* USB: serial: ftdi_sio: Vardaan USB RS422/485 converter PID added
* acpi-cpufreq: fix a memleak when unloading driver
* ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite L355
* fuse: fix attributes after open(O_TRUNC)
* do_exit(): make sure that we run with get_fs() == USER_DS
* uml: disable winch irq before freeing handler data
* backlight: grab ops_lock before testing bd->ops
* nommu: yield CPU while disposing VM
* DECnet: don't leak uninitialized stack byte
* perf_events: Fix perf_counter_mmap() hook in mprotect()
* ARM: 6489/1: thumb2: fix incorrect optimisation in usracc
* ARM: 6482/2: Fix find_next_zero_bit and related assembly
* Staging: frontier: fix up some sysfs attribute permissions
* staging: rtl8187se: Change panic to warn when RF switch turned off
* net sched: fix kernel leak in act_police
* HID: hidraw, fix a NULL pointer dereference in hidraw_ioctl
* HID: hidraw, fix a NULL pointer dereference in hidraw_write
* gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New: linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
* Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer overflows.
* sparc64: Fix race in signal instruction flushing.
* sparc: Don't mask signal when we can't setup signal frame.
* sparc: Prevent no-handler signal syscall restart recursion.
* x86, UV: Delete unneeded boot messages
* x86, UV: Fix initialization of max_pnode
* drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook Pro 5,1
* efifb: support the EFI framebuffer on more Apple hardware
* V4L/DVB (13154): uvcvideo: Handle garbage at the end of streaming interface descriptors
* Input: i8042 - add Sony VAIO VPCZ122GX to nomux list
* x25: Patch to fix bug 15678 - x25 accesses fields beyond end of packet.
* memory corruption in X.25 facilities parsing
* can-bcm: fix minor heap overflow
* V4L/DVB: ivtvfb: prevent reading uninitialized stack memory
* x25: Prevent crashing when parsing bad X.25 facilities
* crypto: padlock - Fix AES-CBC handling on odd-block-sized input
* x86-32: Separate 1:1 pagetables from swapper_pg_dir
* x86, mm: Fix CONFIG_VMSPLIT_1G and 2G_OPT trampoline
* x86-32: Fix dummy trampoline-related inline stubs
* econet: disallow NULL remote addr for sendmsg(), fixes CVE-2010-3849
* econet: fix CVE-2010-3850
* rds: Integer overflow in RDS cmsg handling
* net: Truncate recvfrom and sendto length to INT_MAX.
* net: Limit socket I/O iovec total length to INT_MAX.
* nmi: fix clock comparator revalidation
* act_nat: use stack variable
* net sched: fix some kernel memory leaks
* UV - XPC: pass nasid instead of nid to gru_create_message_queue
* x86: uv: XPC receive message reuse triggers invalid BUG_ON()
* X86: uv: xpc_make_first_contact hang due to not accepting ACTIVE state
* x86: uv: xpc NULL deref when mesq becomes empty
* Linux 2.6.32.27 |
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from Linus' tree or in a minimally
backported form of that patch. The 2.6.32.27+drm33.12 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/pub/scm/linux/kernel/git/smb/linux-2.6.32.y-drm33.z.git
http://git.kernel.org/?p=linux/kernel/git/smb/linux-2.6.32.y-drm33.z.git;a=summary
TEST CASE: TBD
The following 126 patches are in the 2.6.32.27+drm33.12 stable release:
* block: Ensure physical block size is unsigned int
* block: limit vec count in bio_kmalloc() and bio_alloc_map_data()
* block: take care not to overflow when calculating total iov length
* block: check for proper length of iov entries in blk_rq_map_user_iov()
* jme: Fix PHY power-off error
* irda: Fix parameter extraction stack overflow
* irda: Fix heap memory corruption in iriap.c
* i2c-pca-platform: Change device name of request_irq
* microblaze: Fix build with make 3.82
* net: clear heap allocation for ETHTOOL_GRXCLSRLALL
* Staging: asus_oled: fix up some sysfs attribute permissions
* Staging: asus_oled: fix up my fixup for some sysfs attribute permissions
* Staging: line6: fix up some sysfs attribute permissions
* hpet: fix unwanted interrupt due to stale irq status bit
* hpet: unmap unused I/O space
* olpc_battery: Fix endian neutral breakage for s16 values
* percpu: fix list_head init bug in __percpu_counter_init()
* um: remove PAGE_SIZE alignment in linker script causing kernel segfault.
* um: fix global timer issue when using CONFIG_NO_HZ
* numa: fix slab_node(MPOL_BIND)
* hwmon: (lm85) Fix ADT7468 frequency table
* mm: fix return value of scan_lru_pages in memory unplug
* mm: fix is_mem_section_removable() page_order BUG_ON check
* ahci,ata_generic: let ata_generic handle new MBP w/ MCP89
* ata_generic: implement ATA_GEN_* flags and force enable DMA on MBP 7,1
* ssb: b43-pci-bridge: Add new vendor for BCM4318
* sgi-xpc: XPC fails to discover partitions with all nasids above 128
* xen: ensure that all event channels start off bound to VCPU 0
* xen: don't bother to stop other cpus on shutdown/reboot
* ipc: initialize structure memory to zero for compat functions
* ipc: shm: fix information leak to userland
* sys_semctl: fix kernel stack leakage
* net: NETIF_F_HW_CSUM does not imply FCoE CRC offload
* drivers/char/vt_ioctl.c: fix VT_OPENQRY error value
* viafb: use proper register for colour when doing fill ops
* eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
* md/raid1: really fix recovery looping when single good device fails.
* md: fix return value of rdev_size_change()
* x86: AMD Northbridge: Verify NB's node is online
* tty: prevent DOS in the flush_to_ldisc
* TTY: restore tty_ldisc_wait_idle
* tty_ldisc: Fix BUG() on hangup
* TTY: ldisc, fix open flag handling
* KVM: VMX: fix vmx null pointer dereference on debug register access
* KVM: x86: fix information leak to userland
* KVM: VMX: Fix host userspace gsbase corruption
* firewire: cdev: fix information leak
* firewire: core: fix an information leak
* firewire: ohci: fix buffer overflow in AR split packet handling
* firewire: ohci: fix race in AR split packet handling
* ALSA: ac97: Apply quirk for Dell Latitude D610 binding Master and Headphone controls
* ALSA: HDA: Add an extra DAC for Realtek ALC887-VD
* ALSA: hda: Use "alienware" model quirk for another SSID
* netfilter: nf_conntrack: allow nf_ct_alloc_hashtable() to get highmem pages
* latencytop: fix per task accumulator
* mm/vfs: revalidate page->mapping in do_generic_file_read()
* bio: take care not overflow page count when mapping/copying user data
* libata-scsi passthru: fix bug which truncated LBA48 return values
* libata: fix NULL sdev dereference race in atapi_qc_complete()
* PCI: fix size checks for mmap() on /proc/bus/pci files
* PCI: fix offset check for sysfs mmapped files
* efifb: check that the base address is plausible on pci systems
* USB: gadget: AT91: fix typo in atmel_usba_udc driver
* USB: ftdi_sio: add device IDs for Milkymist One JTAG/serial
* USB: option: fix when the driver is loaded incorrectly for some Huawei devices.
* usb: misc: sisusbvga: fix information leak to userland
* usb: misc: iowarrior: fix information leak to userland
* usb: core: fix information leak to userland
* USB: EHCI: fix obscure race in ehci_endpoint_disable
* USB: storage: sierra_ms: fix sysfs file attribute
* USB: atm: ueagle-atm: fix up some permissions on the sysfs files
* USB: misc: cypress_cy7c63: fix up some sysfs attribute permissions
* USB: misc: usbled: fix up some sysfs attribute permissions
* USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
* USB: misc: trancevibrator: fix up a sysfs attribute permission
* USB: misc: usbsevseg: fix up some sysfs attribute permissions
* USB: ftdi_sio: Add ID for RT Systems USB-29B radio cable
* USB: serial: ftdi_sio: Vardaan USB RS422/485 converter PID added
* acpi-cpufreq: fix a memleak when unloading driver
* ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite L355
* fuse: fix attributes after open(O_TRUNC)
* do_exit(): make sure that we run with get_fs() == USER_DS
* uml: disable winch irq before freeing handler data
* backlight: grab ops_lock before testing bd->ops
* nommu: yield CPU while disposing VM
* DECnet: don't leak uninitialized stack byte
* perf_events: Fix perf_counter_mmap() hook in mprotect()
* ARM: 6489/1: thumb2: fix incorrect optimisation in usracc
* ARM: 6482/2: Fix find_next_zero_bit and related assembly
* Staging: frontier: fix up some sysfs attribute permissions
* staging: rtl8187se: Change panic to warn when RF switch turned off
* net sched: fix kernel leak in act_police
* HID: hidraw, fix a NULL pointer dereference in hidraw_ioctl
* HID: hidraw, fix a NULL pointer dereference in hidraw_write
* gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New: linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
* Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer overflows.
* sparc64: Fix race in signal instruction flushing.
* sparc: Don't mask signal when we can't setup signal frame.
* sparc: Prevent no-handler signal syscall restart recursion.
* x86, UV: Delete unneeded boot messages
* x86, UV: Fix initialization of max_pnode
* drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook Pro 5,1
* efifb: support the EFI framebuffer on more Apple hardware
* V4L/DVB (13154): uvcvideo: Handle garbage at the end of streaming interface descriptors
* Input: i8042 - add Sony VAIO VPCZ122GX to nomux list
* x25: Patch to fix bug 15678 - x25 accesses fields beyond end of packet.
* memory corruption in X.25 facilities parsing
* can-bcm: fix minor heap overflow
* V4L/DVB: ivtvfb: prevent reading uninitialized stack memory
* x25: Prevent crashing when parsing bad X.25 facilities
* crypto: padlock - Fix AES-CBC handling on odd-block-sized input
* x86-32: Separate 1:1 pagetables from swapper_pg_dir
* x86, mm: Fix CONFIG_VMSPLIT_1G and 2G_OPT trampoline
* x86-32: Fix dummy trampoline-related inline stubs
* econet: disallow NULL remote addr for sendmsg(), fixes CVE-2010-3849
* econet: fix CVE-2010-3850
* rds: Integer overflow in RDS cmsg handling
* net: Truncate recvfrom and sendto length to INT_MAX.
* net: Limit socket I/O iovec total length to INT_MAX.
* nmi: fix clock comparator revalidation
* act_nat: use stack variable
* net sched: fix some kernel memory leaks
* UV - XPC: pass nasid instead of nid to gru_create_message_queue
* x86: uv: XPC receive message reuse triggers invalid BUG_ON()
* X86: uv: xpc_make_first_contact hang due to not accepting ACTIVE state
* x86: uv: xpc NULL deref when mesq becomes empty
* Linux 2.6.32.27
|
|
