We (the -stable team) are announcing the release of the 2.6.19.2 kernel. There's a long list of fixes, not the least of which is the data corruption fix from Linus and some security fixes:
d4ea7f9f: Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106) eaca4fd8: handle ext3 directory corruption better (CVE-2006-6053) fe89cf78: corrupted cramfs filesystems cause kernel oops (CVE-2006-5823) 8d312ae1: ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054) 54e25b04: VM: Fix nasty and subtle race in shared mmap'ed page writeback e26353af: Fix incorrect user space access locking in mincore() (CVE-2006-4814) The diffstat and short summary of the fixes are below. I'll also be replying to this message with a copy of the patch between 2.6.19.1 and 2.6.19.2, as it is small enough to do so. The updated 2.6.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.19.y.git and can be browsed at the normal kernel.org git web browser: www.kernel.org/git/ thanks, -chris -------- Makefile | 2 arch/arm/kernel/calls.S | 13 + arch/i386/kernel/apm.c | 6 arch/i386/kernel/process.c | 7 arch/i386/kernel/smpboot.c | 2 arch/ia64/kernel/process.c | 10 + arch/sparc/kernel/ioport.c | 3 arch/sparc64/kernel/isa.c | 20 +- arch/sparc64/mm/init.c | 147 ++++++++++++++++---- arch/x86_64/kernel/process.c | 6 arch/x86_64/kernel/setup.c | 5 crypto/sha512.c | 2 drivers/acpi/processor_idle.c | 12 + drivers/ata/libata-core.c | 30 ++-- drivers/block/aoe/aoecmd.c | 13 - drivers/block/cciss.c | 2 drivers/char/mem.c | 12 + drivers/connector/cn_proc.c | 11 - drivers/i2c/chips/ds1337.c | 8 - drivers/ieee1394/ohci1394.c | 21 ++ drivers/infiniband/ulp/srp/ib_srp.c | 2 drivers/infiniband/ulp/srp/ib_srp.h | 2 drivers/md/Kconfig | 1 drivers/media/dvb/dvb-core/dvb_net.c | 4 drivers/media/dvb/frontends/lgdt330x.c | 6 drivers/media/video/cx88/cx88-cards.c | 2 drivers/media/video/tuner-simple.c | 2 drivers/media/video/tuner-types.c | 14 - drivers/net/bonding/bond_main.c | 2 drivers/net/smc911x.c | 2 drivers/net/wireless/zd1211rw/zd_ieee80211.h | 2 drivers/net/wireless/zd1211rw/zd_mac.c | 93 +++++++++--- drivers/net/wireless/zd1211rw/zd_mac.h | 10 - drivers/net/wireless/zd1211rw/zd_usb.c | 4 drivers/net/wireless/zd1211rw/zd_usb.h | 14 - drivers/scsi/scsi_lib.c | 1 drivers/usb/net/asix.c | 2 fs/cramfs/inode.c | 2 fs/ext2/dir.c | 8 + fs/ext3/dir.c | 3 fs/ext3/namei.c | 9 + fs/ramfs/file-mmu.c | 4 fs/ramfs/file-nommu.c | 4 include/asm-arm/unistd.h | 13 + include/linux/libata.h | 9 - include/linux/net.h | 2 include/media/cx2341x.h | 2 kernel/sched.c | 2 mm/memory.c | 32 ++-- mm/mincore.c | 183 ++++++++++--------------- mm/oom_kill.c | 12 - mm/page-writeback.c | 39 ++++- mm/rmap.c | 23 +-- mm/shmem.c | 7 mm/vmscan.c | 2 net/bluetooth/cmtp/capi.c | 39 ++++- net/bridge/netfilter/ebtables.c | 3 net/core/pktgen.c | 20 ++ net/ieee80211/softmac/ieee80211softmac_assoc.c | 14 + net/ieee80211/softmac/ieee80211softmac_auth.c | 2 net/ieee80211/softmac/ieee80211softmac_priv.h | 2 net/ieee80211/softmac/ieee80211softmac_wx.c | 2 net/ipv4/devinet.c | 5 net/ipv4/udp.c | 13 + net/ipv6/addrconf.c | 4 net/netlabel/netlabel_cipso_v4.c | 9 + scripts/Kbuild.include | 19 +- sound/sparc/cs4231.c | 26 +-- 68 files changed, 673 insertions(+), 336 deletions(-) Summary of changes from v2.6.19.1 to v2.6.19.2 ============================================ Andy Gospodarek (1): bonding: incorrect bonding state reported via ioctl Ang Way Chuang (1): dvb-core: fix bug in CRC-32 checking on 64-bit systems Arjan van de Ven (1): x86-64: Mark rdtsc as sync only for netburst, not for core2 Badari Pulavarty (1): Fix for shmem_truncate_range() BUG_ON() Chris Wright (1): Linux 2.6.19.2 Chuck Ebbert (1): ebtables: don't compute gap before checking struct type David Hollis (1): asix: Fix typo for AX88772 PHY Selection David L Stevens (1): IPV4/IPV6: Fix inet{,6} device initialization order. David Miller (4): UDP: Fix reversed logic in udp_get_port() SPARC64: Fix "mem=xxx" handling. SPARC64: Handle ISA devices with no 'regs' property. SOUND: Sparc CS4231: Use 64 for period_bytes_min David Woodhouse (1): NET: Don't export linux/random.h outside __KERNEL__ Dimitri Gorokhovik (1): ramfs breaks without CONFIG_BLOCK Dirk Eibach (1): i2c: fix broken ds1337 initialization Ed L Cashin (1): fix aoe without scatter-gather [Bug 7662] Eric Sandeen (2): handle ext3 directory corruption better (CVE-2006-6053) ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054) Erik Jacobson (1): connector: some fixes for ia64 unaligned access errors Georg Chini (1): SOUND: Sparc CS4231: Fix IRQ return value and initialization. Hans Verkuil (2): V4L: Fix broken TUNER_LG_NTSC_TAPE radio support V4L: cx2341x: audio_properties is an u16, not u8 Herbert Xu (2): dm-crypt: Select CRYPTO_CBC sha512: Fix sha384 block size Hugh Dickins (2): read_zero_pagealigned() locking fix fix OOM killing of swapoff Ingo Molnar (1): sched: fix bad missed wakeups in the i386, x86_64, ia64, ACPI and APM idle code Jan Andersson (1): sparc32: add offset in pci_map_sg() Jean Delvare (1): V4L: cx88: Fix leadtek_eeprom tagging John W. Linville (1): Revert "zd1211rw: Removed unneeded packed attributes" Linus Torvalds (2): VM: Fix nasty and subtle race in shared mmap'ed page writeback Fix incorrect user space access locking in mincore() (CVE-2006-4814) Marcel Holtmann (1): Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106) Michael Krufky (1): DVB: lgdt330x: fix signal / lock status detection bug Mike Miller (1): cciss: fix XFER_READ/XFER_WRITE in do_cciss_request Paul Moore (1): NetLabel: correctly fill in unused CIPSOv4 level and category mappings Peter Zijlstra (1): Fix up page_mkclean_one(): virtual caches, s390 Phillip Lougher (1): corrupted cramfs filesystems cause kernel oops (CVE-2006-5823) Robert Olsson (1): PKTGEN: Fix module load/unload races. Roland Dreier (1): IB/srp: Fix FMR mapping for 32-bit kernels and addresses above 4G Roman Zippel (1): kbuild: don't put temp files in source Russell King (1): ARM: Add sys_*at syscalls Shantanu Goel (1): Buglet in vmscan.c Shaohua Li (1): i386: CPU hotplug broken with 2GB VMSPLIT Stefan Richter (1): ieee1394: ohci1394: add PPC_PMAC platform code to driver probe Tejun Heo (2): libata: handle 0xff status properly SCSI: add missing cdb clearing in scsi_execute() Tim Chen (1): sched: remove __cpuinitdata anotation to cpu_isolated_map Ulrich Kunitz (3): ieee80211softmac: Fix mutex_lock at exit of ieee80211_softmac_get_genie softmac: Fixed handling of deassociation from AP zd1211rw: Call ieee80211_rx in tasklet Vitaly Wool (1): smc911x: fix netpoll compilation faliure - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/