This bug was fixed in the package linux - 2.6.31-17.54 --------------- linux (2.6.31-17.54) karmic-proposed; urgency=low
[ John Johansen ] * SAUCE: AppArmor: Fix oops after profile removal - LP: #475619 * SAUCE: AppArmor: Fix Oops when in apparmor_bprm_set_creds - LP: #437258 * SAUCE: AppArmor: Fix cap audit_caching preemption disabling - LP: #479102 * SAUCE: AppArmor: Fix refcounting bug causing leak of creds - LP: #479115 * SAUCE: AppArmor: Fix oops there is no tracer and doing unsafe transition. - LP: #480112 [ Leann Ogasawara ] * Revert "[Upstream] (drop after 2.6.31) usb-storage: Workaround devices with bogus sense size" - LP: #461556 * Revert "[Upstream] (drop after 2.6.31) Input: synaptics - add another Protege M300 to rate blacklist" - LP: #480144 [ Tim Gardner ] * [Config] udeb: Add squashfs to fs-core-modules - LP: #352615 [ Upstream Kernel Changes ] * Revert "e1000e: swap max hw supported frame size between 82574 and 82583" - LP: #461556 * Revert "drm/i915: Fix FDI M/N setting according with correct color depth" - LP: #480144 * Revert "agp/intel: Add B43 chipset support" - LP: #480144 * Revert "drm/i915: add B43 chipset support" - LP: #480144 * Revert "ACPI: Attach the ACPI device to the ACPI handle as early as possible" - LP: #327499, #480144 * SCSI: Retry ADD_TO_MLQUEUE return value for EH commands - LP: #461556 * SCSI: Fix protection scsi_data_buffer leak - LP: #461556 * SCSI: sg: Free data buffers after calling blk_rq_unmap_user - LP: #461556 * ARM: pxa: workaround errata #37 by not using half turbo switching - LP: #461556 * tracing/filters: Fix memory leak when setting a filter - LP: #461556 * x86/paravirt: Use normal calling sequences for irq enable/disable - LP: #461556 * USB: ftdi_sio: remove tty->low_latency - LP: #461556 * USB: ftdi_sio: remove unused rx_byte counter - LP: #461556 * USB: ftdi_sio: clean up read completion handler - LP: #461556 * USB: ftdi_sio: re-implement read processing - LP: #461556 * USB: pl2303: fix error characters not being reported to ldisc - LP: #461556 * USB: digi_acceleport: Fix broken unthrottle. - LP: #461556 * USB: serial: don't call release without attach - LP: #461556 * USB: option: Toshiba G450 device id - LP: #461556 * USB: ipaq: fix oops when device is plugged in - LP: #461556 * USB: cp210x: Add support for the DW700 UART - LP: #461556 * USB: Fix throttling in generic usbserial driver - LP: #461556 * USB: storage: When a device returns no sense data, call it a Hardware Error - LP: #400652, #461556 * arm, cris, mips, sparc, powerpc, um, xtensa: fix build with bash 4.0 - LP: #461556 * intel-iommu: Cope with broken HP DC7900 BIOS - LP: #461556 * futex: Detect mismatched requeue targets - LP: #461556 * futex: Fix wakeup race by setting TASK_INTERRUPTIBLE before queue_me() - LP: #461556 * tpm-fixup-pcrs-sysfs-file-update - LP: #461556 * TPM: fix pcrread - LP: #461556 * Bluetooth: Disconnect HIDRAW devices on disconnect - LP: #461556 * Bluetooth: Add extra device reference counting for connections - LP: #461556 * Bluetooth: Let HIDP grab the device reference for connections - LP: #461556 * connector: Keep the skb in cn_callback_data - LP: #461556 * connector: Provide the sender's credentials to the callback - LP: #461556 * connector: Removed the destruct_data callback since it is always kfree_skb() - LP: #461556 * dm/connector: Only process connector packages from privileged processes - LP: #461556 * dst/connector: Disallow unpliviged users to configure dst - LP: #461556 * pohmelfs/connector: Disallow unpliviged users to configure pohmelfs - LP: #461556 * uvesafb/connector: Disallow unpliviged users to send netlink packets - LP: #461556 * e1000e: swap max hw supported frame size between 82574 and 82583 - LP: #461556, #445572 * MAINTAINERS: Fix Riku Voipio's address - LP: #461556 * macintosh: Don't assume i2c device probing always succeeds - LP: #461556 * i2c: Hide probe errors caused by ACPI resource conflicts - LP: #461556 * ALSA: Don't assume i2c device probing always succeeds - LP: #461556 * bsdacct: switch credentials for writing to the accounting file - LP: #461556 * sysfs: Allow sysfs_notify_dirent to be called from interrupt context. - LP: #461556 * Staging: rt2860sta: prevent a panic when disabling when associated - LP: #461556, #404626 * usb-storage: Workaround devices with bogus sense size - LP: #461556, #446146 * iwlwifi: incorrect method used for finding valid OTP blocks - LP: #461556 * mac80211: fix vlan and optimise RX - LP: #461556 * tty: Make flush_to_ldisc() locking more robust - LP: #461556 * Linux 2.6.31.5 - LP: #461556 * fs: pipe.c null pointer dereference - LP: #480144 * pci: increase alignment to make more space for hidden code - LP: #407824, #480144, #474577 * libata: fix internal command failure handling - LP: #480144 * libata: fix PMP initialization - LP: #480144 * sata_nv: make sure link is brough up online when skipping hardreset - LP: #480144 * nfs: Fix nfs_parse_mount_options() kfree() leak - LP: #480144 * KVM: use proper hrtimer function to retrieve expiration time - LP: #480144 * KVM: ignore reads from AMDs C1E enabled MSR - LP: #480144 * futex: Handle spurious wake up - LP: #480144 * futex: Check for NULL keys in match_futex - LP: #480144 * futex: Move drop_futex_key_refs out of spinlock'ed region - LP: #480144 * futex: Fix spurious wakeup for requeue_pi really - LP: #480144 * ahci: revert "Restore SB600 sata controller 64 bit DMA" - LP: #480144 * sparc64: Set IRQF_DISABLED on LDC channel IRQs. - LP: #480144 * watchdog: Fix rio watchdog probe function - LP: #480144 * Input: synaptics - add another Protege M300 to rate blacklist - LP: #480144 * dm snapshot: free exception store on init failure - LP: #480144 * dm snapshot: sort by chunk size to fix race - LP: #480144 * dm log: userspace fix incorrect luid cast in userspace_ctr - LP: #480144 * dm: add missing del_gendisk to alloc_dev error path - LP: #480144 * dm: dec_pending needs locking to save error value - LP: #480144 * dm exception store: fix failed set_chunk_size error path - LP: #480144 * dm snapshot: lock snapshot while supplying status - LP: #480144 * dm snapshot: require non zero chunk size by end of ctr - LP: #480144 * dm snapshot: use unsigned integer chunk size - LP: #480144 * ray_cs: Fix copy_from_user handling - LP: #480144 * mbind(): fix leak of never putback pages - LP: #480144 * do_mbind(): fix memory leak - LP: #480144 * 8250_pci: add IBM Saturn serial card - LP: #480144 * dpt_i2o: Fix up copy*user - LP: #480144 * dpt_i2o: Fix typo of EINVAL - LP: #480144 * hfsplus: refuse to mount volumes larger than 2TB - LP: #480144 * Driver core: fix driver_register() return value - LP: #480144 * param: fix lots of bugs with writing charp params from sysfs, by leaking mem. - LP: #480144 * param: fix NULL comparison on oom - LP: #480144 * param: fix setting arrays of bool - LP: #480144 * USB: serial: sierra driver send_setup() autopm fix - LP: #480144 * USB: option: Patch for Huawei Mobile Broadband E270+ Modem - LP: #480144 * USB: option: Support for AIRPLUS MCD650 Datacard - LP: #480144 * USB: option: TLAYTECH TUE800 support - LP: #456264, #480144 * libertas if_usb: Fix crash on 64-bit machines - LP: #480144 * cpuidle: always return with interrupts enabled - LP: #480144 * virtio: order used ring after used index read - LP: #480144 * CIFS: Fixing to avoid invalid kfree() in cifs_get_tcp_session() - LP: #480144 * mac80211: fix for incorrect sequence number on hostapd injected frames - LP: #480144 * mac80211: check interface is down before type change - LP: #480144 * x86, UV: Fix information in __uv_hub_info structure - LP: #480144 * x86, UV: Set DELIVERY_MODE=4 for vector=NMI_VECTOR in uv_hub_send_ipi() - LP: #480144 * NOMMU: Don't pass NULL pointers to fput() in do_mmap_pgoff() - LP: #480144 * mm: remove incorrect swap_count() from try_to_unuse() - LP: #480144 * x86-64: Fix register leak in 32-bit syscall audting - LP: #480144 * nilfs2: fix dirty page accounting leak causing hang at write - LP: #480144 * drm/i915: Fix FDI M/N setting according with correct color depth - LP: #480144 * drm/i915: fix to setup display reference clock control on Ironlake - LP: #480144 * drm/i915: fix panel fitting filter coefficient select for Ironlake - LP: #480144 * agp/intel: Add B43 chipset support - LP: #480144 * drm/i915: add B43 chipset support - LP: #480144 * xen/hvc: make sure console output is always emitted, with explicit polling - LP: #480144 * xen: mask extended topology info in cpuid - LP: #480144 * sgi-gru: decrapfiy options_write() function - LP: #480144 * KVM: get_tss_base_addr() should return a gpa_t - LP: #480144 * fuse: prevent fuse_put_request on invalid pointer - LP: #480144 * fuse: fix kunmap in fuse_ioctl_copy_user - LP: #480144 * x86/amd-iommu: Workaround for erratum 63 - LP: #480144 * fsnotify: do not set group for a mark before it is on the i_list - LP: #480144 * mips: fix build of vmlinux.lds - LP: #480144 * alpha: fix build after vmlinux.lds.S cleanup - LP: #480144 * ACPI / PCI: Fix NULL pointer dereference in acpi_get_pci_dev() (rev. 2) - LP: #480144 * KEYS: get_instantiation_keyring() should inc the keyring refcount in all cases - LP: #480144 * b43: Fix Bugzilla #14181 and the bug from the previous 'fix' - LP: #476154, #480144 * pata_sc1200: Fix crash on boot - LP: #480144 * AF_UNIX: Fix deadlock on connecting to shutdown socket (CVE-2009-3621) - LP: #480144 * ALSA: ice1724 - Make call to set hw params succeed on ESI Juli@ - LP: #480144 * bonding: fix a race condition in calls to slave MII ioctls - LP: #480144 * hwmon: (it87) Fix VID reading on IT8718F/IT8720F - LP: #480144 * netlink: fix typo in initialization (CVE-2009-3612) - LP: #480144 * nfs: Avoid overrun when copying client IP address string - LP: #480144 * nfs: Panic when commit fails - LP: #480144 * NFSv4: Fix a bug when the server returns NFS4ERR_RESOURCE - LP: #480144 * NFSv4: Fix two unbalanced put_rpccred() issues. - LP: #459265, #480144 * NFSv4: Kill nfs4_renewd_prepare_shutdown() - LP: #480144 * NFSv4: The link() operation should return any delegation on the file - LP: #480144 * powerpc: Remove SMP warning from PowerMac cpufreq - LP: #480144 * vmscan: limit VM_EXEC protection to file pages - LP: #480144 * x86: mce: Clean up thermal throttling state tracking code - LP: #480144 * x86: mce: Fix thermal throttling message storm - LP: #453444, #480144 * iwlwifi: fix potential rx buffer loss - LP: #480144 * iwlwifi: reduce noise when skb allocation fails - LP: #480144 * x86/amd-iommu: Un__init function required on shutdown - LP: #480144 * KVM: Prevent kvm_init from corrupting debugfs structures - LP: #480144 * powerpc/pmac: Fix PowerSurge SMP IPI allocation - LP: #480144 * powerpc/pmac: Fix issues with sleep on some powerbooks - LP: #480144 * powerpc/pci: Fix regression in powerpc MSI-X - LP: #480144 * powerpc: Fix some late PowerMac G5 with PCIe ATI graphics - LP: #480144 * sata_via: Remove redundant device ID for VIA VT8261 - LP: #480144 * pata_via: extend the rev_max for VT6330 - LP: #480144 * PM / yenta: Split resume into early and late parts (rev. 4) - LP: #480144 * Linux 2.6.31.6 - LP: #480144 -- Stefan Bader <stefan.ba...@canonical.com> Thu, 03 Dec 2009 22:57:36 +0100 ** Changed in: linux (Ubuntu Karmic) Status: Fix Committed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-3612 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-3621 -- [Karmic] Update to 2.6.31.5 Stable Kernel https://bugs.launchpad.net/bugs/461556 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs