Package: linux-2.6 Version: 2.6.32-35 66e6986 ftrace: Only update the function code on write to filter files
Appears to fix a local denial-of-service. The files are world-readable and the bug allows readers to cause performance degradation. b2300b3 kmemleak: Do not return a pointer to an object that kmemleak did not get Fixes possible memory corruption; could be a local denial-of-service as the file is world-readable. 1c6d087 CPU hotplug, re-create sysfs directory and symlinks Keeps cpufreq userland interface working in some cases where one CPU core is taken offline. The bug doesn't appear to affect physical hotplugging and I don't know what it would affect. 301808c Fix memory leak in cpufreq_stat Fixes small memory leak when any CPU goes offline. This affects suspend on SMP systems, as suspend takes all but one CPU offline. c3bf529 powerpc/kexec: Fix memory corruption from unallocated slaves Fixes yet another regression of this feature in longterm (specifically 2.6.32.34). 24fb3f4 powerpc/oprofile: Handle events that raise an exception without overflowing Fixes potential crash (?) on POWER7 system. 5b2745d block: rescan partitions on invalidated devices on -ENOMEDIA too Fixes automatic removal of partitions after device removal, for some devices. Doesn't look like more than an annoyance, but maybe I'm missing something. 5e4c1db block: add proper state guards to __elv_next_request I think this fixes a race condition on device removal which would lead to a crash. d9296ae mtd: mtdconcat: fix NAND OOB write Feature didn't work at all for NAND devices. This possibly counts as hardware support. 45b0dfa x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address limit Fixes EFAULT error return for valid buffer. I doubt this affects real programs, but the fix is trivial. d23b7b6 ext3: Fix fs corruption when make_indexed_dir() fails Fixes potential data loss in (I think) disk-full or low-memory situation. 538e7bf jbd: Fix forever sleeping process in do_get_write_access() Fixes potential hang. cdc57f8 jbd: fix fsync() tid wraparound bug Fixes crash (BUG); appears to be local denial-of-service. 5252bdb ext4: release page cache in ext4_mb_load_buddy error path Fairly straightforward fix but I don't know what the impact of the bug is. 4efd0b0 Fix Ultrastor asm snippet I think this change is redundant with the use of 'asm volatile', but it doesn't do any harm. 9407375 x86, amd: Do not enable ARAT feature on AMD processors below family 0x12 Fixes regression in 2.6.32.39 that would cause hang when idle on some processor models. I correctly predicted the regression in the original change, and deferred it. The original change and subsequent fixes including this one are included in 2.6.32-35. 03710bb x86, amd: Use _safe() msr access for GartTlbWlk disable code Fixes regression in 2.6.32.39 that causes immediate crash in KVM guests on AMD family 10h processors; possibly only on SMP guests. This regression has already made its way into 2.6.32-34squeeze1 but so far I don't think we've had any bug reports. 6fa3d71 rcu: Fix unpaired rcu_irq_enter() from locking selftests Only effects custom kernels with this debug option. 353be24 staging: usbip: fix wrong endian conversion No functional change. 8bdae89 Fix for buffer overflow in ldm_frag_add not sufficient CVE-2011-2182. Already cherry-picked in 2.6.32-35. ff3af58 seqlock: Don't smp_rmb in seqlock reader spin loop Fixes hang on some powerpc systems. ce9f8da ALSA: HDA: Use one dmic only for Dell Studio 1558 Hides non-functional mixer control on this model. 01b242a ASoC: Ensure output PGA is enabled for line outputs in wm_hubs c4d634f ASoC: Add some missing volume update bit sets for wm_hubs devices Driver is not enabled in Debian packages. 864fce8 mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath() Fixes hang; apparently affects machines with lots of memory and high memory pressure. d93bd2d PCI: allow matching of prefetchable resources to non-prefetchable windows This makes the matching more consistent (it already was allowed!) and avoids some possibly alarming error messages about address conflicts. The commit message doesn't explain much; see <http://thread.gmane.org/gmane.linux.kernel/872162/focus=872694>. 2a140e3 loop: limit 'max_part' module param to DISK_MAX_PARTS 1569390 brd: limit 'max_part' module param to DISK_MAX_PARTS 6091e05 nbd: limit module parameters to a sane value Fixes kernel oops on out-of-range module parameter. e4eb3c8 loop: handle on-demand devices correctly 33a5ae1 brd: handle on-demand devices correctly Fixes combination of on-demand feature with partitions on these devices. Current behaviour could result in data loss. 56344ef USB: CP210x Add 4 Device IDs for AC-Services Devices e658945 USB: moto_modem: Add USB identifier for the Motorola VE240. 15b8466 USB: serial: ftdi_sio: adding support for TavIR STK500 5b7dafb USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7 68fdcd2 USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver 773b988 p54usb: add zoom 4410 usbid Hardware enablement; trivial. f8ef28d USB: gamin_gps: Fix for data transfer problems in native mode Fixes data loss (sort of). fae4005 usb/gadget: at91sam9g20 fix end point max packet size 24bf807 usb: gadget: rndis: don't test against req->length Subsystem is not enabled in Debian packages. 4779c5e xhci: Fix full speed bInterval encoding. e103cc4 USB: xhci - fix interval calculation for FS isoc endpoints Fix regressions in 2.6.32.39 which broke some full speed (12 Mbps) devices on some XHCI controllers. a53267c OHCI: fix regression caused by nVidia shutdown workaround Fixes regression in 2.6.32.30 which results in USB devices being powered after system shutdown. (The earlier change was needed to fix the same behaviour for a different set of Nvidia OHCIs!) ee4a3a8 eCryptfs: Allow 2 scatterlist entries for encrypted filenames Fixes unreliable filename lookup (userspace gets ENOMEM and kernel logs errors). Not sure how the failure would occur. b5914de UBIFS: fix a rare memory leak in ro to rw remounting path Summary is clear enough. c8b6153 i8k: Avoid lahf in 64-bit code Fixes crash in this driver on early x86-64 CPUs. af73c7b cpuidle: menu: fixed wrapping timers at 4.294 seconds Fixes overflow in sleep timer calculation when able to sleep for a long time. Unlikely to be relevant to Debian systems, but looks safe enough. a4401a6 dm table: reject devices without request fns Fixes crash (oops) on attempt to set up some invalid dm configurations. 9e9c1e7 atm: expose ATM device index in sysfs Needed to distinguish ATM adapters; probably counts as hardware enablement. 62a5c72 SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change callback... Fixes incrementing of connection cookies. It looks like multiple connections to the same service, or multiple connection states, do not get properly distinguished. Not sure what the ultimate impact of this is. 41524e9 PCI: Add quirk for setting valid class for TI816X Endpoint Fixes PCI resource setup for this non-compliant device. Hardware enablement. 35fd0fd xen mmu: fix a race window causing leave_mm BUG() Summary is clear enough. 0a4f14e netfilter: nf_conntrack_reasm: properly handle packets fragmented into a single fragment Fixes a bug that prevents some IPv6 connections being tracked. This presumably can result in those connections being blocked in some firewall configurations. 3c08ee4 fix memory leak in scsi_report_lun_scan Summary is clear enough. 6e3a404 fix refcounting bug in scsi_get_host_dev No idea what the impact of this bug is. 8b75b31 fix duplicate removal on error path in scsi_sysfs_add_sdev Presumably fixes a crash in the error case, which I think would only occur in a low-memory situation. 439aa7d UBIFS: fix shrinker object count reports Fixes alarming log message. 8d9ba4b UBIFS: fix memory leak on error path Summary is clear enough. d1e0c2e block: export blk_{get,put}_queue() Prerequisite for next fix. 8354a9e Fix oops caused by queue refcounting failure Fix oops in some cases where userland attempts I/O on SCSI device that has been removed. 263b8d5 mm: fix ENOSPC returned by handle_mm_fault() Fixes incorrect error return values; don't know what the impact is. 2d3b027 PCI: Set PCIE maxpayload for card during hotplug insertion Fixes DMA configuration for hotplugged cards in some situations. 946ea1c nl80211: fix check for valid SSID size in scan operations Fixes heap buffer overflow. Exploitable by users with CAP_NET_ADMIN. eef1d4d lockdep: Fix lock_is_held() on recursion Only affects custom kernels with this debugging feature on. 75013df fat: Fix corrupt inode flags when remove ATTR_SYS flag Summary is clear enough. d11e39e xen: off by one errors in multicalls.c Don't know what the impact of this is. c3280ce x86/amd-iommu: Fix 3 possible endless loops Summary is clear enough. 5fe935a USB: core: Tolerate protocol stall during hub and port status read Fixes compatibility with some hubs. Hardware enablement? fdb1e4e ALSA: hda: Fix quirk for Dell Inspiron 910 Fixes very low speaker volume on this model. Hardware enablement? e9a60e2 oprofile, dcookies: Fix possible circular locking dependency Fixes potential hang. 21dfd57 CPUFREQ: Remove cpufreq_stats sysfs entries on module unload. Fixes crash after unloading this module and accessing the orphaned files. 58d1604 md: check ->hot_remove_disk when removing disk Fixes crash on invalid attempt to remove disk from e.g. linear array. 6f4976a md/raid5: fix raid5_set_bi_hw_segments Obvious fix though I don't know what the likely impact of the bug is. c0877c4 md/raid5: fix FUA request handling in ops_run_io() Should have no effect, as md does not support FUA requests at all in 2.6.32.y. This was even commented as suitable for 2.6.37+! 26b6b31 ata: use pci_dev->revision ef83f5d pata_cmd64x: fix PIO setup 554bd15 pata_cmd64x: cmd648_bmdma_stop() fix 3950dcf pata_cmd64x: remove unused definitions Preparation for following fix. 255e15a pata_cm64x: fix boot crash on parisc Closes: #622997, #622745 bfbf76d ACPI: use _HID when supplied by root-level devices I think this fixes ACPI device matching on some systems. Hardware enablement. 7eae68f xfs: properly account for reclaimed inodes It sounds like this fixes potentially severe performance degradation. 651f1d2 exec: delay address limit change until point of no return Fixes fallback through init search path in some failure cases. Not an issue for Debian systems, so far as I can see. The address limit is, of course, critical to security, so we may wish to defer this just in case it has a regression. e49b7ca netfilter: IPv6: initialize TOS field in REJECT target module Fixes random TOS/DSCP values produced by many IPv6 firewalls. Bug could result in these packets being wrongly prioritised or dropped. b698075 netfilter: IPv6: fix DSCP mangle code Fixes masking of IPv6 TOS/DSCP values where they're intentionally modified. Bug could result in these packets being wrongly prioritised or dropped. f9f0932 xen: events: do not unmask event channels on resume 8ff753b genirq: Add IRQF_FORCE_RESUME 652c98b xen: Use IRQF_FORCE_RESUME Fixes crash (BUG) on resume under Xen. a6d553a time: Compensate for rounding on odd-frequency clocksources Fixes high rate of system time skew (example given is 127 ppm, or 11 seconds per day) on some systems. 2a96ae7 Revert "iwlagn: Support new 5000 microcode." Fixes regression in 2.6.32.40 for this driver and device. The driver would not work with this device if the new microcode was available (in Debian, firmware-iwlwifi version 0.29 or later). Ben. -- Ben Hutchings I'm always amazed by the number of people who take up solipsism because they heard someone else explain it. - E*Borg on alt.fan.pratchett
signature.asc
Description: This is a digitally signed message part