*** This bug is a duplicate of bug 1097912 *** https://bugs.launchpad.net/bugs/1097912
This bug was fixed in the package linux-ti-omap4 - 3.5.0-217.25 --------------- linux-ti-omap4 (3.5.0-217.25) quantal-proposed; urgency=low * Release Tracking Bug - LP: #1097912 [ Paolo Pisati ] * rebased on Ubuntu-3.5.0-22.34 [ Ubuntu: 3.5.0-22.34 ] * Release Tracking Bug - LP: #1097343 * Revert "SAUCE: fsnotify: dont put marks on temporary list when clearing marks by group" - LP: #1096137 * Revert "SAUCE: fsnotify: introduce locked versions of fsnotify_add_mark() and fsnotify_remove_mark()" - LP: #1096137 * Revert "SAUCE: fsnotify: pass group to fsnotify_destroy_mark()" - LP: #1096137 * Revert "SAUCE: fsnotify: use a mutex instead of a spinlock to protect a groups mark list" - LP: #1096137 * Revert "SAUCE: fanotify: add an extra flag to mark_remove_from_mask that indicates wheather a mark should be destroyed" - LP: #1096137 * Revert "SAUCE: fsnotify: take groups mark_lock before mark lock" - LP: #1096137 * Revert "SAUCE: fsnotify: use reference counting for groups" - LP: #1096137 * Revert "SAUCE: fsnotify: introduce fsnotify_get_group()" - LP: #1096137 * fsnotify: introduce fsnotify_get_group() - LP: #1096137 * fsnotify: use reference counting for groups - LP: #1096137 * fsnotify: take groups mark_lock before mark lock - LP: #1096137 * fanotify: add an extra flag to mark_remove_from_mask that indicates wheather a mark should be destroyed - LP: #1096137 * fsnotify: use a mutex instead of a spinlock to protect a groups mark list - LP: #1096137 * fsnotify: pass group to fsnotify_destroy_mark() - LP: #1096137 * fsnotify: introduce locked versions of fsnotify_add_mark() and fsnotify_remove_mark() - LP: #1096137 * fsnotify: dont put marks on temporary list when clearing marks by group - LP: #1096137 * fsnotify: change locking order - LP: #1096137 linux-ti-omap4 (3.5.0-217.24) quantal-proposed; urgency=low * Release Tracking Bug - LP: #1095810 [ Paolo Pisati ] * rebased on Ubuntu-3.5.0-22.33 [ Ubuntu: 3.5.0-22.33 ] * Release Tracking Bug - LP: #1095349 * SAUCE: add eeprom_bad_csum_allow module parameter - LP: #1070182 * SAUCE: samsung-laptop: disable in UEFI mode - LP: #1040557 * SAUCE: exec: do not leave bprm->interp on stack - LP: #1068888 - CVE-2012-4530 * Add ceph to linux-image for virtual instances - LP: #1063784 * SAUCE: fsnotify: introduce fsnotify_get_group() - LP: #922906 * SAUCE: fsnotify: use reference counting for groups - LP: #922906 * SAUCE: fsnotify: take groups mark_lock before mark lock - LP: #922906 * SAUCE: fanotify: add an extra flag to mark_remove_from_mask that indicates wheather a mark should be destroyed - LP: #922906 * SAUCE: fsnotify: use a mutex instead of a spinlock to protect a groups mark list - LP: #922906 * SAUCE: fsnotify: pass group to fsnotify_destroy_mark() - LP: #922906 * SAUCE: fsnotify: introduce locked versions of fsnotify_add_mark() and fsnotify_remove_mark() - LP: #922906 * SAUCE: fsnotify: dont put marks on temporary list when clearing marks by group - LP: #922906 * SAUCE: tools: hv: Netlink source address validation allows DoS - LP: #1084777 - CVE-2012-5532 * Revert "Staging: Android alarm: IOCTL command encoding fix" - LP: #1091251 * Revert "sched, autogroup: Stop going ahead if autogroup is disabled" - LP: #1091251 * Revert "serial: omap: fix software flow control" - LP: #1091251 * drm/i915: EBUSY status handling added to i915_gem_fault(). - LP: #1087302 * MISC: hpilo, remove pci_disable_device - LP: #1087860 * asix: Adds support for Lenovo 10/100 USB dongle. - LP: #1087480 * hpsa: gen8plus Smart Array IDs - LP: #1089623 * KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set (CVE-2012-4461) - LP: #1089604 - CVE-2012-4461 * gpio-timberdale: fix a potential wrapping issue - LP: #1091251 * cfg80211: fix antenna gain handling - LP: #1091251 * drm/i915: fix overlay on i830M - LP: #1091251 * drm/i915: clear the entire sdvo infoframe buffer - LP: #1091251 * mac80211: use blacklist for duplicate IE check - LP: #1091251 * mac80211: Only process mesh config header on frames that RA_MATCH - LP: #1091251 * mac80211: don't inspect Sequence Control field on control frames - LP: #1091251 * gpiolib: Don't return -EPROBE_DEFER to sysfs, or for invalid gpios - LP: #1091251 * qla2xxx: Update target lookup session tables when a target session changes - LP: #1091251 * mac80211: fix SSID copy on IBSS JOIN - LP: #1091251 * wireless: drop invalid mesh address extension frames - LP: #1091251 * mac80211: check management frame header length - LP: #1091251 * mac80211: verify that skb data is present - LP: #1091251 * mac80211: make sure data is accessible in EAPOL check - LP: #1091251 * target: Fix double-free of se_cmd in target_complete_tmr_failure - LP: #1091251 * ext4: fix unjournaled inode bitmap modification - LP: #1091251 * ath9k: fix stale pointers potentially causing access to free'd skbs - LP: #1091251 * floppy: don't call alloc_ordered_workqueue inside the alloc_disk loop - LP: #1091251 * floppy: do put_disk on current dr if blk_init_queue fails - LP: #1091251 * floppy: properly handle failure on add_disk loop - LP: #1091251 * ALSA: PCM: Fix some races at disconnection - LP: #1091251 * ALSA: usb-audio: Fix races at disconnection - LP: #1091251 * ALSA: usb-audio: Use rwsem for disconnect protection - LP: #1091251 * ALSA: usb-audio: Fix races at disconnection in mixer_quirks.c - LP: #1091251 * ALSA: Add a reference counter to card instance - LP: #1091251 * ALSA: Avoid endless sleep after disconnect - LP: #1091251 * xen/gntdev: don't leak memory from IOCTL_GNTDEV_MAP_GRANT_REF - LP: #1091251 * rt2800: validate step value for temperature compensation - LP: #1091251 * ath9k: Test for TID only in BlockAcks while checking tx status - LP: #1091251 * md/raid1: Fix assembling of arrays containing Replacements. - LP: #1091251 * Input: tsc40 - remove wrong announcement of pressure support - LP: #1091251 * HID: microsoft: fix invalid rdesc for 3k kbd - LP: #1091251 * xen/mmu: Use Xen specific TLB flush instead of the generic one. - LP: #1091251 * NFS: Wait for session recovery to finish before returning - LP: #1091251 * NFSv4.1: We must release the sequence id when we fail to get a session slot - LP: #1091251 * NFSv4: nfs4_locku_done must release the sequence id - LP: #1091251 * NFS: fix bug in legacy DNS resolver. - LP: #1091251 * nfsv3: Make v3 mounts fail with ETIMEDOUTs instead EIO on mountd timeouts - LP: #1091251 * nfs: Show original device name verbatim in /proc/*/mount{s,info} - LP: #1091251 * target: Don't return success from module_init() if setup fails - LP: #1091251 * target: Avoid integer overflow in se_dev_align_max_sectors() - LP: #1091251 * iscsi-target: Fix missed wakeup race in TX thread - LP: #1091251 * target: Fix incorrect usage of nested IRQ spinlocks in ABORT_TASK path - LP: #1091251 * DRM/Radeon: Fix Load Detection on legacy primary DAC. - LP: #1091251 * ixgbe: PTP get_ts_info missing software support - LP: #1091251 * drm/udl: fix stride issues scanning out stride != width*bpp - LP: #1091251 * crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent data corruption - LP: #1091251 * module: fix out-by-one error in kallsyms - LP: #1091251 * cifs: fix potential buffer overrun in cifs.idmap handling code - LP: #1091251 * ptp: update adjfreq callback description - LP: #1091251 * ALSA: hda: Cirrus: Fix coefficient index for beep configuration - LP: #1091251 * ALSA: HDA: Fix digital microphone on CS420x - LP: #1091251 * ALSA: hda - Force to reset IEC958 status bits for AD codecs - LP: #1091251, #359361 * hwmon: (w83627ehf) Force initial bank selection - LP: #1091251 * drm: restore open_count if drm_setup fails - LP: #1091251 * ALSA: hda - Fix empty DAC filling in patch_via.c - LP: #1091251 * ALSA: hda - Fix invalid connections in VT1802 codec - LP: #1091251 * xen/events: fix RCU warning, or Call idle notifier after irq_enter() - LP: #1091251 * mmc: sdhci: fix NULL dereference in sdhci_request() tuning - LP: #1091251 * ALSA: hda - Improve HP depop when system enter to S3 - LP: #1091251 * ALSA: hda - Add new codec ALC668 and ALC900 (default name ALC1150) - LP: #1091251 * ALSA: Fix card refcount unbalance - LP: #1091251 * drm/radeon/cayman: add some missing regs to the VM reg checker - LP: #1091251 * drm/radeon/si: add some missing regs to the VM reg checker - LP: #1091251 * xfs: fix buffer shudown reference count mismatch - LP: #1091251 * xfs: fix reading of wrapped log data - LP: #1091251 * virtio: Don't access index after unregister. - LP: #1091251 * fanotify: fix missing break - LP: #1091251 * mm: bugfix: set current->reclaim_state to NULL while returning from kswapd() - LP: #1091251 * drm/vmwgfx: Fix hibernation device reset - LP: #1091251 * drm/vmwgfx: Fix a case where the code would BUG when trying to pin GMR memory - LP: #1091251 * UBIFS: introduce categorized lprops counter - LP: #1091251 * UBIFS: fix mounting problems after power cuts - LP: #1091251 * USB: usb_wwan: fix bulk-urb allocation - LP: #1091251 * ARM: dt: tegra: fix length of pad control and mux registers - LP: #1091251 * futex: Handle futex_pi OWNER_DIED take over correctly - LP: #1091251 * mac80211: sync acccess to tx_filtered/ps_tx_buf queues - LP: #1091251 * iwlwifi: handle DMA mapping failures - LP: #1091251 * ASoC: wm8978: pll incorrectly configured when codec is master - LP: #1091251 * ASoC: cs42l52: fix the return value of cs42l52_set_fmt() - LP: #1091251 * Bluetooth: Fix having bogus entries in mgmt_read_index_list reply - LP: #1091251 * mac80211: don't send null data packet when not associated - LP: #1091251 * ASoC: dapm: Use card_list during DAPM shutdown - LP: #1091251 * ASoC: core: Double control update err for snd_soc_put_volsw_sx - LP: #1091251 * mac80211: call skb_dequeue/ieee80211_free_txskb instead of __skb_queue_purge - LP: #1091251 * ALSA: hda - Add a missing quirk entry for iMac 9,1 - LP: #1091251 * s390/signal: set correct address space control - LP: #1091251 * wireless: allow 40 MHz on world roaming channels 12/13 - LP: #1091251 * drm/i915/sdvo: clean up connectors on intel_sdvo_init() failures - LP: #1091251 * s390/gup: add missing TASK_SIZE check to get_user_pages_fast() - LP: #1091251 * USB: option: add Novatel E362 and Dell Wireless 5800 USB IDs - LP: #1091251 * USB: option: add Alcatel X220/X500D USB IDs - LP: #1091251 * i2c-mux-pinctrl: Fix probe error path - LP: #1091251 * ALSA: usb-audio: Fix mutex deadlock at disconnection - LP: #1091251 * drm/radeon: fix logic error in atombios_encoders.c - LP: #1091251 * ttm: Clear the ttm page allocated from high memory zone correctly - LP: #1091251 * ARM: imx: ehci: fix host power mask bit - LP: #1091251 * memcg: oom: fix totalpages calculation for memory.swappiness==0 - LP: #1091251 * memcg: fix hotplugged memory zone oops - LP: #1091251 * tmpfs: fix shmem_getpage_gfp() VM_BUG_ON - LP: #1091251 * tmpfs: change final i_blocks BUG to WARNING - LP: #1091251 * mtd: ofpart: Fix incorrect NULL check in parse_ofoldpart_partitions() - LP: #1091251 * mtd: slram: invalid checking of absolute end address - LP: #1091251 * jffs2: Fix lock acquisition order bug in jffs2_write_begin - LP: #1091251 * isci: copy fis 0x34 response into proper buffer - LP: #1091251 * mac80211: deinitialize ibss-internals after emptiness check - LP: #1091251 * iwlwifi: fix monitor mode FCS flag - LP: #1091251 * fix virtual aliasing issue in get_shared_area() - LP: #1091251 * rtlwifi: rtl8192cu: Add new USB ID - LP: #1091251 * mwifiex: fix system hang issue in cmd timeout error case - LP: #1091251 * mwifiex: report error to MMC core if we cannot suspend - LP: #1091251 * xfs: drop buffer io reference when a bad bio is built - LP: #1091251 * m68k: fix sigset_t accessor functions - LP: #1091251 * ALSA: ua101, usx2y: fix broken MIDI output - LP: #1091251 * sparc64: not any error from do_sigaltstack() should fail rt_sigreturn() - LP: #1091251 * reiserfs: Fix lock ordering during remount - LP: #1091251 * reiserfs: Protect reiserfs_quota_on() with write lock - LP: #1091251 * reiserfs: Protect reiserfs_quota_write() with write lock - LP: #1091251 * reiserfs: Move quota calls out of write lock - LP: #1091251 * md: Reassigned the parameters if read_seqretry returned true in func md_is_badblock. - LP: #1091251 * md: Avoid write invalid address if read_seqretry returned true. - LP: #1091251 * drm/radeon/dce4+: don't use radeon_crtc for vblank callback - LP: #1091251 * drm/radeon: properly handle mc_stop/mc_resume on evergreen+ (v2) - LP: #1091251 * drm/radeon: properly track the crtc not_enabled case evergreen_mc_stop() - LP: #1091251 * radeon: add AGPMode 1 quirk for RV250 - LP: #1091251 * x86, efi: Fix processor-specific memcpy() build error - LP: #1091251 * x86-32: Fix invalid stack address while in softirq - LP: #1091251 * x86-32: Export kernel_stack_pointer() for modules - LP: #1091251 * x86, microcode, AMD: Add support for family 16h processors - LP: #1091251 * ALSA: hda - Add new codec ALC283 ALC290 support - LP: #1091251 * ALSA: hda - Add support for Realtek ALC292 - LP: #1081466, #1091251 * selinux: fix sel_netnode_insert() suspicious rcu dereference - LP: #1091251 * drm/radeon: add new SI pci id - LP: #1091251 * md/raid10: close race that lose writes lost when replacement completes. - LP: #1091251 * md/raid10: decrement correct pending counter when writing to replacement. - LP: #1091251 * fix user-triggerable panic on parisc - LP: #1091251 * dm: fix deadlock with request based dm and queue request_fn recursion - LP: #1091251 * block: Don't access request after it might be freed - LP: #1091251 * PM / QoS: fix wrong error-checking condition - LP: #1091251 * i7300_edac: Fix error flag testing - LP: #1091251 * iwlwifi: fix the basic CCK rates calculation - LP: #1091251 * Dove: Attempt to fix PMU/RTC interrupts - LP: #1091251 * Dove: Fix irq_to_pmu() - LP: #1091251 * ARM: Kirkwood: Update PCI-E fixup - LP: #1091251 * jbd: Fix lock ordering bug in journal_unmap_buffer() - LP: #1091251 * can: peak_usb: fix hwtstamp assignment - LP: #1091251 * can: bcm: initialize ifindex for timeouts without previous frame reception - LP: #1091251 * writeback: put unused inodes to LRU after writeback completion - LP: #1091251 * futex: avoid wake_futex() for a PI futex_q - LP: #1091251 * mm/vmemmap: fix wrong use of virt_to_page - LP: #1091251 * mm: vmscan: fix endless loop in kswapd balancing - LP: #1091251 * mm: soft offline: split thp at the beginning of soft_offline_page() - LP: #1091251 * x86, fpu: Avoid FPU lazy restore after suspend - LP: #1091251 * workqueue: exit rescuer_thread() as TASK_RUNNING - LP: #1091251 * Revert misapplied "mmc: sh-mmcif: avoid oops on spurious interrupts" - LP: #1091251 * mmc: sh-mmcif: avoid oops on spurious interrupts (second try) - LP: #1091251 * tmpfs: fix shared mempolicy leak - LP: #1091251 * HID: microsoft: do not use compound literal - fix build - LP: #1091251 * ACPI video: Ignore errors after _DOD evaluation. - LP: #1091251 * SUNRPC: Fix a UDP transport regression - LP: #1091251 * SUNRPC: Set alloc_slot for backchannel tcp ops - LP: #1091251 * sparc64: fix ptrace interaction with force_successful_syscall_return() - LP: #1091251 * sparc64: Like x86 we should check current->mm during perf backtrace generation. - LP: #1091251 * sparc64: Fix bit twiddling in sparc_pmu_enable_event(). - LP: #1091251 * sparc64: do not clobber personality flags in sys_sparc64_personality() - LP: #1091251 * sparc64: Be less verbose during vmemmap population. - LP: #1091251 * netlink: add reference of module in netlink_dump_start - LP: #1091251 * infiniband: pass rdma_cm module to netlink_dump_start - LP: #1091251 * net: remove skb recycling - LP: #1091251 * net: Fix skb_under_panic oops in neigh_resolve_output - LP: #1091251 * skge: Add DMA mask quirk for Marvell 88E8001 on ASUS P5NSLI motherboard - LP: #1091251 * vlan: don't deliver frames for unknown vlans to protocols - LP: #1091251 * RDS: fix rds-ping spinlock recursion - LP: #1091251 * tcp: resets are misrouted - LP: #1091251 * ipv6: addrconf: fix /proc/net/if_inet6 - LP: #1091251 * drm/i915: Use cpu relocations if the object is in the GTT but not mappable - LP: #1091251 * floppy: destroy floppy workqueue before cleaning up the queue - LP: #1091251 * drm/nouveau: silence modesetting spam on pre-gf8 chipsets - LP: #1091251 * drm/nouveau: fix suspend/resume when in headless mode - LP: #1091251 * drm/nouveau: headless mode by default if pci class != vga display - LP: #1091251 * sky2: Fix for interrupt handler - LP: #1091251 * batman-adv: Fix broadcast packet CRC calculation - LP: #1091251 * drm/radeon: fix typo in evergreen_mc_resume() - LP: #1091251 * GFS2: Test bufdata with buffer locked and gfs2_log_lock held - LP: #1091251 * USB: mos7840: remove unused variable - LP: #1091251 * sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter() - LP: #1091251 * netlink: use kfree_rcu() in netlink_release() - LP: #1091251 * tcp: fix FIONREAD/SIOCINQ - LP: #1091251 * ipv6: Set default hoplimit as zero. - LP: #1091251 * net: usb: Fix memory leak on Tx data path - LP: #1091251 * drivers/net/ethernet/nxp/lpc_eth.c: Call mdiobus_unregister before mdiobus_free - LP: #1091251 * l2tp: fix oops in l2tp_eth_create() error path - LP: #1091251 * tcp-repair: Handle zero-length data put in rcv queue - LP: #1091251 * net: inet_diag -- Return error code if protocol handler is missed - LP: #1091251 * af-packet: fix oops when socket is not present - LP: #1091251 * ipv6: send unsolicited neighbour advertisements to all-nodes - LP: #1091251 * r8169: allow multicast packets on sub-8168f chipset. - LP: #1091251 * r8169: Fix WoL on RTL8168d/8111d. - LP: #1091251 * r8169: use unlimited DMA burst for TX - LP: #1091251 * netfilter: Mark SYN/ACK packets as invalid from original direction - LP: #1091251 * netfilter: Validate the sequence number of dataless ACK packets as well - LP: #1091251 * netfilter: nf_nat: don't check for port change on ICMP tuples - LP: #1091251 * ipv4: avoid undefined behavior in do_ip_setsockopt() - LP: #1091251 * ipv6: setsockopt(IPIPPROTO_IPV6, IPV6_MINHOPCOUNT) forgot to set return value - LP: #1091251 * net: correct check in dev_addr_del() - LP: #1091251 * net-rps: Fix brokeness causing OOO packets - LP: #1091251 * tcp: fix retransmission in repair mode - LP: #1091251 * GFS2: Don't call file_accessed() with a shared glock - LP: #1091251 * get_dvb_firmware: fix download site for tda10046 firmware - LP: #1091251 * ixgbe: add support for X540-AT1 - LP: #1091251 * fimc-lite: Don't use mutex_lock_interruptible() in device release() - LP: #1091251 * NFC: pn533: Fix use after free - LP: #1091251 * NFC: pn533: Fix mem leak in pn533_in_dep_link_up - LP: #1091251 * HID: add quirk for Freescale i.MX28 ROM recovery - LP: #1091251 * NFC: Fix nfc_llcp_local chained list insertion - LP: #1091251 * bas_gigaset: fix pre_reset handling - LP: #1091251 * watchdog: using u64 in get_sample_period() - LP: #1091251 * sata_svw: check DMA start bit before reset - LP: #1091251 * bnx2x: remove redundant warning log - LP: #1091251 * x86, amd: Disable way access filter on Piledriver CPUs - LP: #1091251 * telephony: ijx: buffer overflow in ixj_write_cid() - LP: #1091251 * i915: Quirk no_lvds on Gigabyte GA-D525TUD ITX motherboard - LP: #1091251 * drm/i915: Add no-lvds quirk for Supermicro X7SPA-H - LP: #1091251 * ACPI: missing break - LP: #1091251 * 8139cp: revert "set ring address before enabling receiver" - LP: #1091251 * ASoC: dmaengine: Correct Makefile when sound is built as module - LP: #1091251 * i82975x_edac: Fix dimm label initialization - LP: #1091251 * drm/i915: do not ignore eDP bpc settings from vbt - LP: #1091251 * drm/i915: do not default to 18 bpp for eDP if missing from VBT - LP: #1091251 * Input: matrix-keymap - provide proper module license - LP: #1091251 * Linux 3.5.7.2 - LP: #1091251 * exec: use -ELOOP for max recursion depth - LP: #1068888 - CVE-2012-4530 * ALSA: hda - bug fix for invalid connection list of Haswell HDMI codec pins - LP: #1095242 [ Ubuntu: 3.5.0-21.32 ] * Release Tracking Bug - LP: #1088979 * SAUCE: i915_hsw: move i915_hsw_enabled symbol to intel_ips - LP: #1087622 -- Paolo Pisati <paolo.pis...@canonical.com> Fri, 11 Jan 2013 15:02:20 +0100 ** Changed in: linux-ti-omap4 (Ubuntu Quantal) Status: New => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-4461 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-4530 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-5532 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1095810 Title: linux-ti-omap4: 3.5.0-217.24 -proposed tracker To manage notifications about this bug go to: https://bugs.launchpad.net/kernel-sru-workflow/+bug/1095810/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs