This bug was fixed in the package linux - 2.6.31-17.54
---------------
linux (2.6.31-17.54) karmic-proposed; urgency=low
[ John Johansen ]
* SAUCE: AppArmor: Fix oops after profile removal
- LP: #475619
* SAUCE: AppArmor: Fix Oops when in apparmor_bprm_set_creds
- LP: #437258
* SAUCE: AppArmor: Fix cap audit_caching preemption disabling
- LP: #479102
* SAUCE: AppArmor: Fix refcounting bug causing leak of creds
- LP: #479115
* SAUCE: AppArmor: Fix oops there is no tracer and doing unsafe
transition.
- LP: #480112
[ Leann Ogasawara ]
* Revert "[Upstream] (drop after 2.6.31) usb-storage: Workaround devices
with bogus sense size"
- LP: #461556
* Revert "[Upstream] (drop after 2.6.31) Input: synaptics - add another
Protege M300 to rate blacklist"
- LP: #480144
[ Tim Gardner ]
* [Config] udeb: Add squashfs to fs-core-modules
- LP: #352615
[ Upstream Kernel Changes ]
* Revert "e1000e: swap max hw supported frame size between 82574 and
82583"
- LP: #461556
* Revert "drm/i915: Fix FDI M/N setting according with correct color
depth"
- LP: #480144
* Revert "agp/intel: Add B43 chipset support"
- LP: #480144
* Revert "drm/i915: add B43 chipset support"
- LP: #480144
* Revert "ACPI: Attach the ACPI device to the ACPI handle as early as
possible"
- LP: #327499, #480144
* SCSI: Retry ADD_TO_MLQUEUE return value for EH commands
- LP: #461556
* SCSI: Fix protection scsi_data_buffer leak
- LP: #461556
* SCSI: sg: Free data buffers after calling blk_rq_unmap_user
- LP: #461556
* ARM: pxa: workaround errata #37 by not using half turbo switching
- LP: #461556
* tracing/filters: Fix memory leak when setting a filter
- LP: #461556
* x86/paravirt: Use normal calling sequences for irq enable/disable
- LP: #461556
* USB: ftdi_sio: remove tty->low_latency
- LP: #461556
* USB: ftdi_sio: remove unused rx_byte counter
- LP: #461556
* USB: ftdi_sio: clean up read completion handler
- LP: #461556
* USB: ftdi_sio: re-implement read processing
- LP: #461556
* USB: pl2303: fix error characters not being reported to ldisc
- LP: #461556
* USB: digi_acceleport: Fix broken unthrottle.
- LP: #461556
* USB: serial: don't call release without attach
- LP: #461556
* USB: option: Toshiba G450 device id
- LP: #461556
* USB: ipaq: fix oops when device is plugged in
- LP: #461556
* USB: cp210x: Add support for the DW700 UART
- LP: #461556
* USB: Fix throttling in generic usbserial driver
- LP: #461556
* USB: storage: When a device returns no sense data, call it a Hardware
Error
- LP: #400652, #461556
* arm, cris, mips, sparc, powerpc, um, xtensa: fix build with bash 4.0
- LP: #461556
* intel-iommu: Cope with broken HP DC7900 BIOS
- LP: #461556
* futex: Detect mismatched requeue targets
- LP: #461556
* futex: Fix wakeup race by setting TASK_INTERRUPTIBLE before queue_me()
- LP: #461556
* tpm-fixup-pcrs-sysfs-file-update
- LP: #461556
* TPM: fix pcrread
- LP: #461556
* Bluetooth: Disconnect HIDRAW devices on disconnect
- LP: #461556
* Bluetooth: Add extra device reference counting for connections
- LP: #461556
* Bluetooth: Let HIDP grab the device reference for connections
- LP: #461556
* connector: Keep the skb in cn_callback_data
- LP: #461556
* connector: Provide the sender's credentials to the callback
- LP: #461556
* connector: Removed the destruct_data callback since it is always
kfree_skb()
- LP: #461556
* dm/connector: Only process connector packages from privileged processes
- LP: #461556
* dst/connector: Disallow unpliviged users to configure dst
- LP: #461556
* pohmelfs/connector: Disallow unpliviged users to configure pohmelfs
- LP: #461556
* uvesafb/connector: Disallow unpliviged users to send netlink packets
- LP: #461556
* e1000e: swap max hw supported frame size between 82574 and 82583
- LP: #461556, #445572
* MAINTAINERS: Fix Riku Voipio's address
- LP: #461556
* macintosh: Don't assume i2c device probing always succeeds
- LP: #461556
* i2c: Hide probe errors caused by ACPI resource conflicts
- LP: #461556
* ALSA: Don't assume i2c device probing always succeeds
- LP: #461556
* bsdacct: switch credentials for writing to the accounting file
- LP: #461556
* sysfs: Allow sysfs_notify_dirent to be called from interrupt context.
- LP: #461556
* Staging: rt2860sta: prevent a panic when disabling when associated
- LP: #461556, #404626
* usb-storage: Workaround devices with bogus sense size
- LP: #461556, #446146
* iwlwifi: incorrect method used for finding valid OTP blocks
- LP: #461556
* mac80211: fix vlan and optimise RX
- LP: #461556
* tty: Make flush_to_ldisc() locking more robust
- LP: #461556
* Linux 2.6.31.5
- LP: #461556
* fs: pipe.c null pointer dereference
- LP: #480144
* pci: increase alignment to make more space for hidden code
- LP: #407824, #480144, #474577
* libata: fix internal command failure handling
- LP: #480144
* libata: fix PMP initialization
- LP: #480144
* sata_nv: make sure link is brough up online when skipping hardreset
- LP: #480144
* nfs: Fix nfs_parse_mount_options() kfree() leak
- LP: #480144
* KVM: use proper hrtimer function to retrieve expiration time
- LP: #480144
* KVM: ignore reads from AMDs C1E enabled MSR
- LP: #480144
* futex: Handle spurious wake up
- LP: #480144
* futex: Check for NULL keys in match_futex
- LP: #480144
* futex: Move drop_futex_key_refs out of spinlock'ed region
- LP: #480144
* futex: Fix spurious wakeup for requeue_pi really
- LP: #480144
* ahci: revert "Restore SB600 sata controller 64 bit DMA"
- LP: #480144
* sparc64: Set IRQF_DISABLED on LDC channel IRQs.
- LP: #480144
* watchdog: Fix rio watchdog probe function
- LP: #480144
* Input: synaptics - add another Protege M300 to rate blacklist
- LP: #480144
* dm snapshot: free exception store on init failure
- LP: #480144
* dm snapshot: sort by chunk size to fix race
- LP: #480144
* dm log: userspace fix incorrect luid cast in userspace_ctr
- LP: #480144
* dm: add missing del_gendisk to alloc_dev error path
- LP: #480144
* dm: dec_pending needs locking to save error value
- LP: #480144
* dm exception store: fix failed set_chunk_size error path
- LP: #480144
* dm snapshot: lock snapshot while supplying status
- LP: #480144
* dm snapshot: require non zero chunk size by end of ctr
- LP: #480144
* dm snapshot: use unsigned integer chunk size
- LP: #480144
* ray_cs: Fix copy_from_user handling
- LP: #480144
* mbind(): fix leak of never putback pages
- LP: #480144
* do_mbind(): fix memory leak
- LP: #480144
* 8250_pci: add IBM Saturn serial card
- LP: #480144
* dpt_i2o: Fix up copy*user
- LP: #480144
* dpt_i2o: Fix typo of EINVAL
- LP: #480144
* hfsplus: refuse to mount volumes larger than 2TB
- LP: #480144
* Driver core: fix driver_register() return value
- LP: #480144
* param: fix lots of bugs with writing charp params from sysfs, by
leaking mem.
- LP: #480144
* param: fix NULL comparison on oom
- LP: #480144
* param: fix setting arrays of bool
- LP: #480144
* USB: serial: sierra driver send_setup() autopm fix
- LP: #480144
* USB: option: Patch for Huawei Mobile Broadband E270+ Modem
- LP: #480144
* USB: option: Support for AIRPLUS MCD650 Datacard
- LP: #480144
* USB: option: TLAYTECH TUE800 support
- LP: #456264, #480144
* libertas if_usb: Fix crash on 64-bit machines
- LP: #480144
* cpuidle: always return with interrupts enabled
- LP: #480144
* virtio: order used ring after used index read
- LP: #480144
* CIFS: Fixing to avoid invalid kfree() in cifs_get_tcp_session()
- LP: #480144
* mac80211: fix for incorrect sequence number on hostapd injected frames
- LP: #480144
* mac80211: check interface is down before type change
- LP: #480144
* x86, UV: Fix information in __uv_hub_info structure
- LP: #480144
* x86, UV: Set DELIVERY_MODE=4 for vector=NMI_VECTOR in uv_hub_send_ipi()
- LP: #480144
* NOMMU: Don't pass NULL pointers to fput() in do_mmap_pgoff()
- LP: #480144
* mm: remove incorrect swap_count() from try_to_unuse()
- LP: #480144
* x86-64: Fix register leak in 32-bit syscall audting
- LP: #480144
* nilfs2: fix dirty page accounting leak causing hang at write
- LP: #480144
* drm/i915: Fix FDI M/N setting according with correct color depth
- LP: #480144
* drm/i915: fix to setup display reference clock control on Ironlake
- LP: #480144
* drm/i915: fix panel fitting filter coefficient select for Ironlake
- LP: #480144
* agp/intel: Add B43 chipset support
- LP: #480144
* drm/i915: add B43 chipset support
- LP: #480144
* xen/hvc: make sure console output is always emitted, with explicit
polling
- LP: #480144
* xen: mask extended topology info in cpuid
- LP: #480144
* sgi-gru: decrapfiy options_write() function
- LP: #480144
* KVM: get_tss_base_addr() should return a gpa_t
- LP: #480144
* fuse: prevent fuse_put_request on invalid pointer
- LP: #480144
* fuse: fix kunmap in fuse_ioctl_copy_user
- LP: #480144
* x86/amd-iommu: Workaround for erratum 63
- LP: #480144
* fsnotify: do not set group for a mark before it is on the i_list
- LP: #480144
* mips: fix build of vmlinux.lds
- LP: #480144
* alpha: fix build after vmlinux.lds.S cleanup
- LP: #480144
* ACPI / PCI: Fix NULL pointer dereference in acpi_get_pci_dev() (rev. 2)
- LP: #480144
* KEYS: get_instantiation_keyring() should inc the keyring refcount in
all cases
- LP: #480144
* b43: Fix Bugzilla #14181 and the bug from the previous 'fix'
- LP: #476154, #480144
* pata_sc1200: Fix crash on boot
- LP: #480144
* AF_UNIX: Fix deadlock on connecting to shutdown socket (CVE-2009-3621)
- LP: #480144
* ALSA: ice1724 - Make call to set hw params succeed on ESI Juli@
- LP: #480144
* bonding: fix a race condition in calls to slave MII ioctls
- LP: #480144
* hwmon: (it87) Fix VID reading on IT8718F/IT8720F
- LP: #480144
* netlink: fix typo in initialization (CVE-2009-3612)
- LP: #480144
* nfs: Avoid overrun when copying client IP address string
- LP: #480144
* nfs: Panic when commit fails
- LP: #480144
* NFSv4: Fix a bug when the server returns NFS4ERR_RESOURCE
- LP: #480144
* NFSv4: Fix two unbalanced put_rpccred() issues.
- LP: #459265, #480144
* NFSv4: Kill nfs4_renewd_prepare_shutdown()
- LP: #480144
* NFSv4: The link() operation should return any delegation on the file
- LP: #480144
* powerpc: Remove SMP warning from PowerMac cpufreq
- LP: #480144
* vmscan: limit VM_EXEC protection to file pages
- LP: #480144
* x86: mce: Clean up thermal throttling state tracking code
- LP: #480144
* x86: mce: Fix thermal throttling message storm
- LP: #453444, #480144
* iwlwifi: fix potential rx buffer loss
- LP: #480144
* iwlwifi: reduce noise when skb allocation fails
- LP: #480144
* x86/amd-iommu: Un__init function required on shutdown
- LP: #480144
* KVM: Prevent kvm_init from corrupting debugfs structures
- LP: #480144
* powerpc/pmac: Fix PowerSurge SMP IPI allocation
- LP: #480144
* powerpc/pmac: Fix issues with sleep on some powerbooks
- LP: #480144
* powerpc/pci: Fix regression in powerpc MSI-X
- LP: #480144
* powerpc: Fix some late PowerMac G5 with PCIe ATI graphics
- LP: #480144
* sata_via: Remove redundant device ID for VIA VT8261
- LP: #480144
* pata_via: extend the rev_max for VT6330
- LP: #480144
* PM / yenta: Split resume into early and late parts (rev. 4)
- LP: #480144
* Linux 2.6.31.6
- LP: #480144
-- Stefan Bader <stefan.ba...@canonical.com> Thu, 03 Dec 2009 22:57:36 +0100
** Changed in: linux (Ubuntu Karmic)
Status: Fix Committed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2009-3612
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2009-3621
--
Please provide squashfs-modules udeb
https://bugs.launchpad.net/bugs/352615
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
