This bug was fixed in the package linux-lts-backport-oneiric -
3.0.0-22.36~lucid1
---------------
linux-lts-backport-oneiric (3.0.0-22.36~lucid1) lucid-proposed; urgency=low
[Luis Henriques]
* Release Tracking Bug
- LP: #1012483
[ Herton Ronaldo Krzesinski ]
* SAUCE: fix get_gate_vma call in i386 NX emulation code
- LP: #1009200
[ Upstream Kernel Changes ]
* Avoid reading past buffer when calling GETACL
- LP: #1002505
- CVE-2012-2375
* Avoid beyond bounds copy while caching ACL
- LP: #1002505
- CVE-2012-2375
* Fix length of buffer copied in __nfs4_get_acl_uncached
- LP: #1002505
- CVE-2012-2375
* tilegx: enable SYSCALL_WRAPPERS support
- LP: #1008697
* block: fix buffer overflow when printing partition UUIDs
- LP: #1008697
* block: don't mark buffers beyond end of disk as mapped
- LP: #1008697
* PARISC: fix PA1.1 oops on boot
- LP: #1008697
* PARISC: fix crash in flush_icache_page_asm on PA1.1
- LP: #1008697
* PARISC: fix panic on prefetch(NULL) on PA7300LC
- LP: #1008697
* isdn/gigaset: ratelimit CAPI message dumps
- LP: #1008697
* vfs: make AIO use the proper rw_verify_area() area helpers
- LP: #1008697
* cfg80211: warn if db.txt is empty with CONFIG_CFG80211_INTERNAL_REGDB
- LP: #1008697
* Fix blocking allocations called very early during bootup
- LP: #1008697
* s390/pfault: fix task state race
- LP: #1008697
* SCSI: mpt2sas: Fix for panic happening because of improper memory
allocation
- LP: #1008697
* RDMA/cxgb4: Drop peer_abort when no endpoint found
- LP: #1008697
* KEYS: Use the compat keyctl() syscall wrapper on Sparc64 for Sparc32
compat
- LP: #1008697
* SELinux: if sel_make_bools errors don't leave inconsistent state
- LP: #1008697
* drivers/staging/comedi/comedi_fops.c: add missing vfree
- LP: #1008697
* perf/x86: Update event scheduling constraints for AMD family 15h models
- LP: #1008697
* mtd: sm_ftl: fix typo in major number.
- LP: #1008697
* ahci: Detect Marvell 88SE9172 SATA controller
- LP: #1008697
* um: Fix __swp_type()
- LP: #1008697
* um: Implement a custom pte_same() function
- LP: #1008697
* docs: update HOWTO for 2.6.x -> 3.x versioning
- LP: #1008697
* USB: cdc-wdm: poll must return POLLHUP if device is gone
- LP: #1008697
* workqueue: skip nr_running sanity check in worker_enter_idle() if
trustee is active
- LP: #1008697
* mm: mempolicy: Let vma_merge and vma_split handle vma->vm_policy
linkages
- LP: #1008697
* md: using GFP_NOIO to allocate bio for flush request
- LP: #1008697
* Add missing call to uart_update_timeout()
- LP: #1008697
* tty: Allow uart_register/unregister/register
- LP: #1008697
* USB: ftdi-sio: add support for Physik Instrumente E-861
- LP: #1008697
* usb-storage: unusual_devs entry for Yarvik PMP400 MP4 player
- LP: #1008697
* USB: ffs-test: fix length argument of out function call
- LP: #1008697
* drivers/rtc/rtc-pl031.c: configure correct wday for 2000-01-01
- LP: #1008697
* SCSI: hpsa: Fix problem with MSA2xxx devices
- LP: #1008697
* usb: usbtest: two super speed fixes for usbtest
- LP: #1008697
* USB: Remove races in devio.c
- LP: #1008697
* USB: serial: ti_usb_3410_5052: Add support for the FRI2 serial console
- LP: #1008697
* usb: gadget: fsl_udc_core: dTD's next dtd pointer need to be updated
once written
- LP: #1008697
* usb: add USB_QUIRK_RESET_RESUME for M-Audio 88es
- LP: #1008697
* xhci: Add Lynx Point to list of Intel switchable hosts.
- LP: #1008697
* usb-xhci: Handle COMP_TX_ERR for isoc tds
- LP: #1008697
* xhci: Reset reserved command ring TRBs on cleanup.
- LP: #1008697
* xhci: Add new short TX quirk for Fresco Logic host.
- LP: #1008697
* drm/i915: Avoid a double-read of PCH_IIR during interrupt handling
- LP: #1008697
* drm/i915: [GEN7] Use HW scheduler for fixed function shaders
- LP: #1008697
* drm/i915: don't clobber the pipe param in sanitize_modesetting
- LP: #1008697
* nouveau: nouveau_set_bo_placement takes TTM flags
- LP: #1008697
* smsusb: add autodetection support for USB ID 2040:c0a0
- LP: #1008697
* media: uvcvideo: Fix ENUMINPUT handling
- LP: #1008697
* x86/mce: Fix check for processor context when machine check was taken.
- LP: #1008697
* mmc: sdio: avoid spurious calls to interrupt handlers
- LP: #1008697
* tile: fix bug where fls(0) was not returning 0
- LP: #1008697
* isci: fix oem parameter validation on single controller skus
- LP: #1008697
* ARM: 7365/1: drop unused parameter from flush_cache_user_range
- LP: #1008697
* ARM: 7409/1: Do not call flush_cache_user_range with mmap_sem held
- LP: #1008697
* i2c: davinci: Free requested IRQ in remove
- LP: #1008697
* Linux 3.0.33
- LP: #1008697
-- Luis Henriques <luis.henriq...@canonical.com> Wed, 13 Jun 2012 09:59:23
+0100
** Changed in: linux (Ubuntu Natty)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1002505
Title:
CVE-2012-2375
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1002505/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
