This bug was fixed in the package linux - 3.2.0-29.46 --------------- linux (3.2.0-29.46) precise-proposed; urgency=low
[ Tim Gardner ] * No change upload to fix armel/armhf FTBS caused by 'UBUNTU: [Config] SND_OMAP_SOC, SND_OMAP_SOC_MCBSP and SND_OMAP_SOC_OMAP3_BEAGLE =y' Added ignore and ignore.module files to ABI directories. [Luis Henriques] * Release Tracking Bug - LP: #1029507 linux (3.2.0-29.45) precise-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #1029507 [ Andy Whitcroft ] * SAUCE: rds_ib_send() -- prevent local pings triggering BUG_ON() - LP: #1016299 - CVE-2012-2372 [ Upstream Kernel Changes ] * Revert "samsung-laptop: make the dmi check less strict" - LP: #1029431 * samsung-laptop: make the dmi check less strict - LP: #1029431 * raid5: delayed stripe fix - LP: #1029431 * tcp: drop SYN+FIN messages - LP: #1029431 * tg3: Apply short DMA frag workaround to 5906 - LP: #1029431 * rtl8187: ->brightness_set can not sleep - LP: #1029431 * net/wireless: ipw2x00: add supported cipher suites to wiphy initialization - LP: #1029431 * kbuild: do not check for ancient modutils tools - LP: #1029431 * brcmsmac: "INTERMEDIATE but not AMPDU" only when tracing - LP: #1029431 * ext4: Report max_batch_time option correctly - LP: #1029431 * NFSv4: Reduce the footprint of the idmapper - LP: #1029431 * NFSv4: Further reduce the footprint of the idmapper - LP: #1029431 * macvtap: zerocopy: fix offset calculation when building skb - LP: #1029431 * macvtap: zerocopy: fix truesize underestimation - LP: #1029431 * macvtap: zerocopy: put page when fail to get all requested user pages - LP: #1029431 * macvtap: zerocopy: set SKBTX_DEV_ZEROCOPY only when skb is built successfully - LP: #1029431 * macvtap: zerocopy: validate vectors before building skb - LP: #1029431 * KVM: Fix buffer overflow in kvm_set_irq() - LP: #1029431 * scsi: Silence unnecessary warnings about ioctl to partition - LP: #1029431 * iommu/amd: Fix missing iommu_shutdown initialization in passthrough mode - LP: #1029431 * iommu/amd: Initialize dma_ops for hotplug and sriov devices - LP: #1029431 * usb: Add support for root hub port status CAS - LP: #1029431 * gpiolib: wm8994: Pay attention to the value set when enabling as output - LP: #1029431 * sched/nohz: Rewrite and fix load-avg computation -- again - LP: #1029431 * USB: option: add ZTE MF60 - LP: #1029431 * USB: option: Add MEDIATEK product ids - LP: #1029431 * USB: cdc-wdm: fix lockup on error in wdm_read - LP: #1029431 * mtd: nandsim: don't open code a do_div helper - LP: #1029431 * dvb-core: Release semaphore on error path dvb_register_device() - LP: #1029431 * hwspinlock/core: use global ID to register hwspinlocks on multiple devices - LP: #1029431 * libsas: fix taskfile corruption in sas_ata_qc_fill_rtf - LP: #1029431 * md/raid1: fix use-after-free bug in RAID1 data-check code. - LP: #1029431 * PCI: EHCI: fix crash during suspend on ASUS computers - LP: #1029431 * memory hotplug: fix invalid memory access caused by stale kswapd pointer - LP: #1029431 * mm, thp: abort compaction if migration page cannot be charged to memcg - LP: #1029431 * drivers/rtc/rtc-mxc.c: fix irq enabled interrupts warning - LP: #1029431 * fs: ramfs: file-nommu: add SetPageUptodate() - LP: #1029431 * cpufreq / ACPI: Fix not loading acpi-cpufreq driver regression - LP: #1029431 * hwmon: (it87) Preserve configuration register bits on init - LP: #1029431 * ARM: SAMSUNG: fix race in s3c_adc_start for ADC - LP: #1029431 * block: fix infinite loop in __getblk_slow - LP: #1029431 * Remove easily user-triggerable BUG from generic_setlease - LP: #1029431 * NFC: Export nfc.h to userland - LP: #1029431 * PM / Hibernate: Hibernate/thaw fixes/improvements - LP: #1029431 * cfg80211: check iface combinations only when iface is running - LP: #1029431 * intel_ips: blacklist HP ProBook laptops - LP: #1029431 * atl1c: fix issue of transmit queue 0 timed out - LP: #1029431 * rt2x00usb: fix indexes ordering on RX queue kick - LP: #1029431 * iwlegacy: always monitor for stuck queues - LP: #1029431 * iwlegacy: don't mess up the SCD when removing a key - LP: #1029431 * e1000e: Correct link check logic for 82571 serdes - LP: #1029431 * tcm_fc: Fix crash seen with aborts and large reads - LP: #1029431 * fifo: Do not restart open() if it already found a partner - LP: #1029431 * target: Clean up returning errors in PR handling code - LP: #1029431 * target: Fix range calculation in WRITE SAME emulation when num blocks == 0 - LP: #1029431 * cifs: on CONFIG_HIGHMEM machines, limit the rsize/wsize to the kmap space - LP: #1029431 * cifs: always update the inode cache with the results from a FIND_* - LP: #1029431 * mm: fix lost kswapd wakeup in kswapd_stop() - LP: #1029431 * md: avoid crash when stopping md array races with closing other open fds. - LP: #1029431 * md/raid1: close some possible races on write errors during resync - LP: #1029431 * MIPS: Properly align the .data..init_task section. - LP: #1029431 * UBIFS: fix a bug in empty space fix-up - LP: #1029431 * ore: Fix NFS crash by supporting any unaligned RAID IO - LP: #1029431 * ore: Remove support of partial IO request (NFS crash) - LP: #1029431 * pnfs-obj: don't leak objio_state if ore_write/read fails - LP: #1029431 * pnfs-obj: Fix __r4w_get_page when offset is beyond i_size - LP: #1029431 * dm raid1: fix crash with mirror recovery and discard - LP: #1029431 * dm raid1: set discard_zeroes_data_unsupported - LP: #1029431 * ntp: Fix leap-second hrtimer livelock - LP: #1029431 * ntp: Correct TAI offset during leap second - LP: #1029431 * timekeeping: Fix CLOCK_MONOTONIC inconsistency during leapsecond - LP: #1029431 * time: Move common updates to a function - LP: #1029431 * hrtimer: Provide clock_was_set_delayed() - LP: #1029431 * timekeeping: Fix leapsecond triggered load spike issue - LP: #1029431 * timekeeping: Maintain ktime_t based offsets for hrtimers - LP: #1029431 * hrtimers: Move lock held region in hrtimer_interrupt() - LP: #1029431 * timekeeping: Provide hrtimer update function - LP: #1029431 * hrtimer: Update hrtimer base offsets each hrtimer_interrupt - LP: #1029431 * timekeeping: Add missing update call in timekeeping_resume() - LP: #1029431 * powerpc: Fix wrong divisor in usecs_to_cputime - LP: #1029431 * vhost: don't forget to schedule() - LP: #1029431 * r8169: call netif_napi_del at errpaths and at driver unload - LP: #1029431 * bnx2x: fix checksum validation - LP: #1029431 * bnx2x: fix panic when TX ring is full - LP: #1029431 * net: remove skb_orphan_try() - LP: #1029431 * ACPI: Make acpi_skip_timer_override cover all source_irq==0 cases - LP: #1029431 * ACPI: Remove one board specific WARN when ignoring timer overriding - LP: #1029431 * ACPI: Add a quirk for "AMILO PRO V2030" to ignore the timer overriding - LP: #1029431 * ACPI, x86: fix Dell M6600 ACPI reboot regression via DMI - LP: #1029431 * ACPI sysfs.c strlen fix - LP: #1029431 * eCryptfs: Gracefully refuse miscdev file ops on inherited/passed files - LP: #1029431 * eCryptfs: Fix lockdep warning in miscdev operations - LP: #1029431 * eCryptfs: Properly check for O_RDONLY flag before doing privileged open - LP: #1029431 * ipheth: add support for iPad - LP: #1029431 * stmmac: Fix for nfs hang on multiple reboot - LP: #1029431 * bonding: debugfs and network namespaces are incompatible - LP: #1029431 * bonding: Manage /proc/net/bonding/ entries from the netdev events - LP: #1029431 * Input: bcm5974 - Add support for 2012 MacBook Pro Retina - LP: #1029431 * Input: xpad - handle all variations of Mad Catz Beat Pad - LP: #1029431 * Input: xpad - add signature for Razer Onza Tournament Edition - LP: #1029431 * Input: xpad - add Andamiro Pump It Up pad - LP: #1029431 * HID: add support for 2012 MacBook Pro Retina - LP: #1029431 * Linux 3.2.24 - LP: #1029431 linux (3.2.0-28.44) precise-proposed; urgency=low ## Note 3.2.0-28.44 was never uploaded and superceded by 3.2.0-29.45 ## [Luis Henriques] * Release Tracking Bug - LP: #1027881 [ Andy Whitcroft ] * [Packaging] getabis should be extracting all packages - LP: #1021174 * getabis -- series uses linux-image-extra - LP: #1021174 [ Herton Ronaldo Krzesinski ] * SAUCE: (drop after 3.2) ALSA: hda - restrict bass configuration on Dell Inspiron 17 - LP: #994685 [ Leann Ogasawara ] * [Config] Enable CONFIG_RT2800USB_RT35XX and CONFIG_RT2800USB_RT53XX - LP: #1019561 [ Manoj Iyer ] * SAUCE: Bluetooth: btusb: Add vendor specific ID (0a5c:21f4) BCM20702A0 - LP: #1010281 [ Paolo Pisati ] * [Config] SND_OMAP_SOC, SND_OMAP_SOC_MCBSP and SND_OMAP_SOC_OMAP3_BEAGLE =y - LP: #1019321 [ Stefan Bader ] * SAUCE: sched: Fix race in task_group() - LP: #999755 [ Tim Gardner ] * [Config] retrieve ABIs from PPA as a last attempt [ Upstream Kernel Changes ] * staging:iio:ad7606: Re-add missing scale attribute - LP: #1022747 * Tools: hv: verify origin of netlink connector message - LP: #1022747 - CVE-2012-2669 * edac: avoid mce decoding crash after edac driver unloaded - LP: #1022747 * hwrng: atmel-rng - fix data valid check - LP: #1022747 * staging: r8712u: Add new USB IDs - LP: #1022747 * hwmon: (applesmc) Limit key length in warning messages - LP: #1022747 * mm: pmd_read_atomic: fix 32bit PAE pmd walk vs pmd_populate SMP race condition - LP: #1022747 * thp: avoid atomic64_read in pmd_read_atomic for 32bit PAE - LP: #1022747 * nilfs2: ensure proper cache clearing for gc-inodes - LP: #1022747 * e1000e: Disable ASPM L1 on 82574 - LP: #1022747 * e1000e: Remove special case for 82573/82574 ASPM L1 disablement - LP: #1022747 * staging:rts_pstor:Fix possible panic by NULL pointer dereference - LP: #1022747 * gspca-core: Fix buffers staying in queued state after a stream_off - LP: #1022747 * smsusb: add autodetection support for USB ID 2040:f5a0 - LP: #1022747 * drm/edid: don't return stack garbage from supports_rb - LP: #1022747 * drm/nouveau/fbcon: using nv_two_heads is not a good idea - LP: #1022747 * dm thin: reinstate missing mempool_free in cell_release_singleton - LP: #1022747 * ath9k: Fix a WARNING on suspend/resume with IBSS - LP: #1022747 * cfg80211: fix potential deadlock in regulatory - LP: #1022747 * ath9k: Fix softlockup in AR9485 - LP: #1022747 * can: c_can: precedence error in c_can_chip_config() - LP: #1022747 * ath9k: fix a tx rate duration calculation bug - LP: #1022747 * batman-adv: fix skb->data assignment - LP: #1022747 * ARM: SAMSUNG: Should check for IS_ERR(clk) instead of NULL - LP: #1022747 * ath9k_hw: avoid possible infinite loop in ar9003_get_pll_sqsum_dvc - LP: #1022747 * iwlwifi: remove log_event debugfs file debugging is disabled - LP: #1022747 * ARM: SAMSUNG: Fix for S3C2412 EBI memory mapping - LP: #1022747 * USB: option: add id for Cellient MEN-200 - LP: #1022747 * oprofile: perf: use NR_CPUS instead or nr_cpumask_bits for static array - LP: #1022747 * drm/i915: Refactor the deferred PM_IIR handling into a single function - LP: #1022747 * drm/i915: rip out the PM_IIR WARN - LP: #1022747 * drm/i915: Fix eDP blank screen after S3 resume on HP desktops - LP: #1022747 * PM / Sleep: Prevent waiting forever on asynchronous suspend after abort - LP: #1022747 * x86, cpufeature: Rename X86_FEATURE_DTS to X86_FEATURE_DTHERM - LP: #1022747 * stable: Allow merging of backports for serious user-visible performance issues - LP: #1022747 * ALSA: hda - Add Realtek ALC280 codec support - LP: #1017017, #1022747 * USB: option: Add USB ID for Novatel Ovation MC551 - LP: #1022747 * USB: CP210x Add 10 Device IDs - LP: #1022747 * xen/netfront: teardown the device before unregistering it. - LP: #1022747 * can: flexcan: use be32_to_cpup to handle the value of dt entry - LP: #1022747 * acpi_pad: fix power_saving thread deadlock - LP: #1022747 * batman-adv: only drop packets of known wifi clients - LP: #1022747 * Linux 3.2.22 - LP: #1022747 * ACPI / PM: Make acpi_pm_device_sleep_state() follow the specification - LP: #904261 * net: sock: validate data_len before allocating skb in sock_alloc_send_pskb() - LP: #1006622 - CVE-2012-2136 * epoll: clear the tfile_check_list on -ELOOP - LP: #1021811 - CVE-2012-3375 * splice: fix racy pipe->buffers uses - LP: #1024020 * umem: fix up unplugging - LP: #1024020 * mwifiex: fix 11n rx packet drop issue - LP: #1024020 * mwifiex: fix WPS eapol handshake failure - LP: #1024020 * NFC: Prevent multiple buffer overflows in NCI - LP: #1024020 * ath9k: fix dynamic WEP related regression - LP: #1024020 * NFC: Return from rawsock_release when sk is NULL - LP: #1024020 * rtlwifi: rtl8192cu: New USB IDs - LP: #1024020 * ath9k: enable serialize_regmode for non-PCIE AR9287 - LP: #1024020 * mac80211: correct behaviour on unrecognised action frames - LP: #1024020 * ASoC: tlv320aic3x: Fix codec pll configure bug - LP: #1024020 * powerpc/xmon: Use cpumask iterator to avoid warning - LP: #1024020 * powerpc/kvm: sldi should be sld - LP: #1024020 * md/raid10: Don't try to recovery unmatched (and unused) chunks. - LP: #1024020 * md/raid5: Do not add data_offset before call to is_badblock - LP: #1024020 * md/raid5: In ops_run_io, inc nr_pending before calling md_wait_for_blocked_rdev - LP: #1024020 * md/raid10: fix failure when trying to repair a read error. - LP: #1024020 * drm/i915: kick any firmware framebuffers before claiming the gtt - LP: #1024020 * dm persistent data: fix shadow_info_leak on dm_tm_destroy - LP: #1024020 * dm persistent data: handle space map checker creation failure - LP: #1024020 * dm persistent data: fix allocation failure in space map checker init - LP: #1024020 * tracing: change CPU ring buffer state from tracing_cpumask - LP: #1024020 * mwifiex: fix wrong return values in add_virtual_intf() error cases - LP: #1024020 * udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() - LP: #1024020 * udf: Avoid run away loop when partition table length is corrupted - LP: #1024020 * udf: Fortify loading of sparing table - LP: #1024020 * ARM: fix rcu stalls on SMP platforms - LP: #1024020 * cipso: handle CIPSO options correctly when NetLabel is disabled - LP: #1024020 * net: l2tp_eth: fix kernel panic on rmmod l2tp_eth - LP: #1024020 * l2tp: fix a race in l2tp_ip_sendmsg() - LP: #1024020 * sky2: fix checksum bit management on some chips - LP: #1024020 * be2net: fix a race in be_xmit() - LP: #1024020 * dummy: fix rcu_sched self-detected stalls - LP: #1024020 * bonding: Fix corrupted queue_mapping - LP: #1024020 * ethtool: allow ETHTOOL_GSSET_INFO for users - LP: #1024020 * netpoll: fix netpoll_send_udp() bugs - LP: #1024020 * ipv6: Move ipv6 proc file registration to end of init order - LP: #1024020 * bridge: Assign rtnl_link_ops to bridge devices created via ioctl (v2) - LP: #1024020 * Btrfs: run delayed directory updates during log replay - LP: #1024020 * cifs: when server doesn't set CAP_LARGE_READ_X, cap default rsize at MaxBufferSize - LP: #1024020 * ocfs2: clear unaligned io flag when dio fails - LP: #1024020 * aio: make kiocb->private NUll in init_sync_kiocb() - LP: #1024020 * mtd: cafe_nand: fix an & vs | mistake - LP: #1024020 * mm: Hold a file reference in madvise_remove - LP: #1024020 * tcm_fc: Resolve suspicious RCU usage warnings - LP: #1024020 * vfs: make O_PATH file descriptors usable for 'fchdir()' - LP: #1024020 * Linux 3.2.23 - LP: #1024020 * asix: asix_rx_fixup surgery to reduce skb truesizes - LP: #947723 * ALSA: hda - Fix internal mic for Lenovo Ideapad U300s - LP: #903853 * ALSA: hda - Fix oops caused by recent commit "Fix internal mic for Lenovo Ideapad U300s" - LP: #903853 -- Luis Henriques <luis.henriq...@canonical.com> Fri, 27 Jul 2012 17:08:57 +0100 ** Changed in: linux (Ubuntu Precise) Status: Fix Committed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-2669 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-3375 ** Changed in: linux-armadaxp (Ubuntu Quantal) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1016299 Title: CVE-2012-2372 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1016299/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs