This bug was fixed in the package linux-mvl-dove - 2.6.32-419.37
---------------
linux-mvl-dove (2.6.32-419.37) maverick-proposed; urgency=low
* Release Tracking Bug
- LP: #872659
[ Paolo Pisati ]
* Rebased to 2.6.32-35.78
[ Ubuntu: 2.6.32-35.78 ]
* Release Tracking Bug
- LP: #871899
* SAUCE: sched: Prevent divide by zero when cpu_power is 0
- LP: #614853
* [Config] Force perf to use libiberty for demangling
- LP: #783660
* [Config] Simplify binary-udebs dependencies
- LP: #832352
* [Config] kernel preparation cannot be parallelized
- LP: #832352
* [Config] Linearize module/abi checks
- LP: #832352
* [Config] Linearize and simplify tree preparation rules
- LP: #832352
* [Config] Build kernel image in parallel with modules
- LP: #832352
* [Config] Set concurrency for kmake invocations
- LP: #832352
* [Config] Improve install-arch-headers speed
- LP: #832352
* [Config] Fix binary-perarch dependencies
- LP: #832352
* [Config] Removed stamp-flavours target
- LP: #832352
* [Config] Serialize binary indep targets
- LP: #832352
* [Config] Use build stamp directly
- LP: #832352
* [Config] Restore prepare-% target
- LP: #832352
* [Config] Fix binary-% build target
* [Config] Fix install-headers target
- LP: #832352
* SAUCE: igb: Protect stats update
- LP: #829566
* SAUCE: rtl8192se spams log
- LP: #859702
* Add mount option to check uid of device being mounted = expect uid,
CVE-2011-1833
- LP: #732628
- CVE-2011-1833
* crypto: Move md5_transform to lib/md5.c
- LP: #827462
* net: Compute protocol sequence numbers and fragment IDs using MD5.
- LP: #827462
* ALSA: timer - Fix Oops at closing slave timer
- LP: #827462
* ALSA: snd-usb-caiaq: Fix keymap for RigKontrol3
- LP: #827462
* powerpc: Fix device tree claim code
- LP: #827462
* powerpc: pseries: Fix kexec on machines with more than 4TB of RAM
- LP: #827462
* Linux 2.6.32.45+drm33.19
- LP: #827462
* ipv6: make fragment identifications less predictable, CVE-2011-2699
- LP: #827685
- CVE-2011-2699
* tunnels: fix netns vs proto registration ordering
- LP: #823296
* Fix broken backport for IPv6 tunnels in 2.6.32-longterm kernels.
* USB: xhci: fix OS want to own HC
- LP: #837669
* USB: assign instead of equal in usbtmc.c
- LP: #837669
* USB: usb-storage: unusual_devs entry for ARM V2M motherboard.
- LP: #837669
* USB: Serial: Added device ID for Qualcomm Modem in Sagemcom's HiLo3G
- LP: #837669
* atm: br2864: sent packets truncated in VC routed mode
- LP: #837669
* hwmon: (ibmaem) add missing kfree
- LP: #837669
* ALSA: snd-usb-caiaq: Correct offset fields of outbound iso_frame_desc
- LP: #837669
* mm: fix wrong vmap address calculations with odd NR_CPUS values
- LP: #837669
* perf tools: do not look at ./config for configuration
- LP: #837669
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
oops
- LP: #837669
* befs: Validate length of long symbolic links.
- LP: #837669
* ALSA: snd_usb_caiaq: track submitted output urbs
- LP: #837669
* ALSA: ac97: Add HP Compaq dc5100 SFF(PT003AW) to Headphone Jack Sense
whitelist
- LP: #826081, #837669
* futex: Fix regression with read only mappings
- LP: #837669
* x86-32, vdso: On system call restart after SYSENTER, use int $0x80
- LP: #837669
* x86, UV: Remove UV delay in starting slave cpus
- LP: #837669
* drm/ttm: fix ttm_bo_add_ttm(user) failure path
- LP: #837669
* fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
- LP: #837669
* igb: Fix lack of flush after register write and before delay
- LP: #837669
* Linux 2.6.32.46
- LP: #837669
* cifs: fix possible memory corruption in CIFSFindNext, CVE-2011-3191
- LP: #834135
- CVE-2011-3191
* Bluetooth: Prevent buffer overflow in l2cap config request,
CVE-2011-2497
- LP: #838423
- CVE-2011-2497
* core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576
- LP: #844361
- CVE-2011-1576
* ext4: Fix max file size and logical block counting of extent format
file, CVE-2011-2695
- LP: #819574
- CVE-2011-2695
* drm/i915: prepare for fair lru eviction
- LP: #843904
* drm/i915: Move the eviction logic to its own file.
- LP: #843904
* drm/i915: Implement fair lru eviction across both rings. (v2)
- LP: #843904
* drm/i915: Maintain LRU order of inactive objects upon access by CPU
(v2)
- LP: #843904
* drm/i915/evict: Ensure we completely cleanup on failure
- LP: #843904
* drm/i915: Periodically flush the active lists and requests
- LP: #843904
* Make TASKSTATS require root access, CVE-2011-2494
- LP: #866021
- CVE-2011-2494
* proc: fix a race in do_io_accounting(), CVE-2011-2495
- LP: #866025
- CVE-2011-2495
* drm/i915: Remove BUG_ON from i915_gem_evict_something
- LP: #828550
* drm/i915: Hold a reference to the object whilst unbinding the eviction
list
- LP: #843904
* drm/i915: Fix refleak during eviction.
- LP: #843904
* Linux 2.6.32.46+drm33.20
[ Ubuntu: 2.6.32-34.77 ]
* Release Tracking Bug
- LP: #849228
* Revert "drm/i915: Remove BUG_ON from i915_gem_evict_something"
* Revert "drm/i915: Periodically flush the active lists and requests"
* Revert "drm/i915/evict: Ensure we completely cleanup on failure"
* Revert "drm/i915: Maintain LRU order of inactive objects upon access by
CPU (v2)"
* Revert "drm/i915: Implement fair lru eviction across both rings. (v2)"
* Revert "drm/i915: Move the eviction logic to its own file."
* Revert "drm/i915: prepare for fair lru eviction"
-- Paolo Pisati <paolo.pis...@canonical.com> Thu, 13 Oct 2011 11:02:06 +0200
** Changed in: linux-mvl-dove (Ubuntu Maverick)
Status: Fix Committed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2494
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2495
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2695
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/827685
Title:
CVE-2011-2699
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/827685/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
