This bug was fixed in the package linux-lts-quantal -
3.5.0-34.55~precise1
---------------
linux-lts-quantal (3.5.0-34.55~precise1) precise; urgency=low
[Steve Conklin]
* Release Tracking Bug
- LP: #1188496
[ Upstream Kernel Changes ]
* iwlwifi: dvm: fix zero LQ CMD sending avoidance
- LP: #1186932
linux (3.5.0-33.54) quantal; urgency=low
[Steve Conklin]
* Release Tracking Bug
- LP: #1186271
[ Upstream Kernel Changes ]
* crypto: algif - suppress sending source address information in recvmsg
- LP: #1172363
- CVE-2013-3076
* ax25: fix info leak via msg_name in ax25_recvmsg()
- LP: #1172366
- CVE-2013-3223
* Bluetooth: fix possible info leak in bt_sock_recvmsg()
- LP: #1172368
- CVE-2013-3224
* tipc: fix info leaks via msg_name in recv_msg/recv_stream
- LP: #1172403
- CVE-2013-3235
* rose: fix info leak via msg_name in rose_recvmsg()
- LP: #1172394
- CVE-2013-3234
* Bluetooth: RFCOMM - Fix missing msg_namelen update in
rfcomm_sock_recvmsg()
- LP: #1172369
- CVE-2013-3225
* atm: update msg_namelen in vcc_recvmsg()
- LP: #1172365
- CVE-2013-3222
* iwlwifi: add new pci id for 6x35 series
- LP: #1180256
* ath9k_htc: accept 1.x firmware newer than 1.3
- LP: #1186062
* ssb: implement spurious tone avoidance
- LP: #1186062
* can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq
- LP: #1186062
* can: sja1000: fix handling on dt properties on little endian systems
- LP: #1186062
* ath9k_hw: change AR9580 initvals to fix a stability issue
- LP: #1186062
* ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon
- LP: #1186062
* ARM: 7698/1: perf: fix group validation when using enable_on_exec
- LP: #1186062
* hugetlbfs: add swap entry check in follow_hugetlb_page()
- LP: #1186062
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
- LP: #1186062
* hfsplus: fix potential overflow in hfsplus_file_truncate()
- LP: #1186062
* sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
- LP: #1186062
* perf/x86: Fix offcore_rsp valid mask for SNB/IVB
- LP: #1186062
* vm: add vm_iomap_memory() helper function
- LP: #1186062
* vm: convert HPET mmap to vm_iomap_memory() helper
- LP: #1186062
* vm: convert fb_mmap to vm_iomap_memory() helper
- LP: #1186062
* vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper
- LP: #1186062
* vm: convert mtdchar mmap to vm_iomap_memory() helper
- LP: #1186062
* regulator: fixed regulator_bulk_enable unwinding code
- LP: #1186062
* perf: Fix error return code
- LP: #1186062
* xen/smp: Fix leakage of timer interrupt line for every CPU
online/offline.
- LP: #1186062
* xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every
CPU online/offline
- LP: #1186062
* xen/time: Fix kasprintf splat when allocating timer%d IRQ line.
- LP: #1186062
* s390/memory hotplug: prevent offline of active memory increments
- LP: #1186062
* aio: fix possible invalid memory access when DEBUG is enabled
- LP: #1186062
* TTY: do not update atime/mtime on read/write
- LP: #1186062
* TTY: fix atime/mtime regression
- LP: #1186062
* caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
- LP: #1186062
* irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
- LP: #1186062
* iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
- LP: #1186062
* llc: Fix missing msg_namelen update in llc_ui_recvmsg()
- LP: #1186062
* netrom: fix info leak via msg_name in nr_recvmsg()
- LP: #1186062
* netrom: fix invalid use of sizeof in nr_recvmsg()
- LP: #1186062
* NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg()
- LP: #1186062
* cbq: incorrect processing of high limits
- LP: #1186062
* net IPv6 : Fix broken IPv6 routing table after loopback down-up
- LP: #1186062
* net: count hw_addr syncs so that unsync works properly.
- LP: #1186062
* atl1e: limit gso segment size to prevent generation of wrong ip length
fields
- LP: #1186062
* bonding: fix bonding_masters race condition in bond unloading
- LP: #1186062
* bonding: IFF_BONDING is not stripped on enslave failure
- LP: #1186062
* af_unix: If we don't care about credentials coallesce all messages
- LP: #1186062
* netfilter: don't reset nf_trace in nf_reset()
- LP: #1186062
* rtnetlink: Call nlmsg_parse() with correct header length
- LP: #1186062
* tcp: incoming connections might use wrong route under synflood
- LP: #1186062
* tcp: Reallocate headroom if it would overflow csum_start
- LP: #1186062
* esp4: fix error return code in esp_output()
- LP: #1186062
* net: sctp: sctp_auth_key_put: use kzfree instead of kfree
- LP: #1186062
* tcp: call tcp_replace_ts_recent() from tcp_ack()
- LP: #1186062
* net: rate-limit warn-bad-offload splats.
- LP: #1186062
* net: fix incorrect credentials passing
- LP: #1186062
* net: drop dst before queueing fragments
- LP: #1186062
* sparc64: Fix race in TLB batch processing.
- LP: #1186062
* l2tp: fix info leak in l2tp_ip6_recvmsg()
- LP: #1186062
* tracing: Use stack of calling function for stack tracer
- LP: #1186062
* tracing: Fix stack tracer with fentry use
- LP: #1186062
* tracing: Remove most or all of stack tracer stack size from
stack_max_size
- LP: #1186062
* tracing: Fix ftrace_dump()
- LP: #1186062
* Wrong asm register contraints in the futex implementation
- LP: #1186062
* Wrong asm register contraints in the kvm implementation
- LP: #1186062
* cgroup: fix an off-by-one bug which may trigger BUG_ON()
- LP: #1186062
* PCI / ACPI: Don't query OSC support with all possible controls
- LP: #1186062
* Fix initialization of CMCI/CMCP interrupts
- LP: #1186062
* sysfs: fix use after free in case of concurrent read/write and readdir
- LP: #1186062
* usb/misc/appledisplay: Add 24" LED Cinema display
- LP: #1186062
* ext4/jbd2: don't wait (forever) for stale tid caused by wraparound
- LP: #1186062
* jbd2: fix race between jbd2_journal_remove_checkpoint and
->j_commit_callback
- LP: #1186062
* ext4: fix journal callback list traversal
- LP: #1186062
* usb: chipidea: udc: fix memory access of shared memory on armv5
machines
- LP: #1186062
* NFSv4: Handle NFS4ERR_DELAY and NFS4ERR_GRACE in
nfs4_open_delegation_recall
- LP: #1186062
* usb: chipidea: udc: fix memory leak in _ep_nuke
- LP: #1186062
* USB: add ftdi_sio USB ID for GDM Boost V1.x
- LP: #1186062
* hrtimer: Add expiry time overflow check in hrtimer_interrupt
- LP: #1186062
* hrtimer: Fix ktime_add_ns() overflow on 32bit architectures
- LP: #1186062
* ARM: omap3: cpuidle: enable time keeping
- LP: #1186062
* tracing: Fix off-by-one on allocating stat->pages
- LP: #1186062
* USB: option: add a D-Link DWM-156 variant
- LP: #1186062
* ext4: fix big-endian bug in metadata checksum calculations
- LP: #1186062
* tracing: Reset ftrace_graph_filter_enabled if count is zero
- LP: #1186062
* tracing: Check return value of tracing_init_dentry()
- LP: #1186062
* serial_core.c: add put_device() after device_find_child()
- LP: #1186062
* PCI/PM: Fix fallback to PCI_D0 in pci_platform_power_transition()
- LP: #1186062
* wireless: regulatory: fix channel disabling race condition
- LP: #1186062
* usbfs: Always allow ctrl requests with USB_RECIP_ENDPOINT on the ctrl
ep
- LP: #1186062
* iwlwifi: fix freeing uninitialized pointer
- LP: #1186062
* iwlwifi: dvm: don't send zeroed LQ cmd
- LP: #1186062
* LOCKD: Ensure that nlmclnt_block resets block->b_status after a server
reboot
- LP: #1186062
* ext4: fix online resizing for ext3-compat file systems
- LP: #1186062
* ext4: fix Kconfig documentation for CONFIG_EXT4_DEBUG
- LP: #1186062
* rt2x00: Fix transmit power troubles on some Ralink RT30xx cards
- LP: #1186062
* USB: ftdi_sio: correct ST Micro Connect Lite PIDs
- LP: #1186062
* USB: serial: option: Added support Olivetti Olicard 145
- LP: #1186062
* usb-storage: CY7C68300A chips do not support Cypress ATACB
- LP: #1186062
* USB: ftdi_sio: enable two UART ports on ST Microconnect Lite
- LP: #1186062
* gianfar: do not advertise any alarm capability.
- LP: #1186062
* clockevents: Set dummy handler on CPU_DEAD shutdown
- LP: #1186062
* ixgbe: fix EICR write in ixgbe_msix_other
- LP: #1186062
* mwifiex: Use pci_release_region() instead of a pci_release_regions()
- LP: #1186062
* mwifiex: Call pci_release_region after calling pci_disable_device
- LP: #1186062
* fs/fscache/stats.c: fix memory leak
- LP: #1186062
* mm: allow arch code to control the user page table ceiling
- LP: #1186062
* arm: set the page table freeing ceiling to TASK_SIZE
- LP: #1186062
* drivers/rtc/rtc-cmos.c: don't disable hpet emulation on suspend
- LP: #1186062
* drivers/rtc/rtc-at91rm9200.c: fix missing iounmap
- LP: #1186062
* md: bad block list should default to disabled.
- LP: #1186062
* inotify: invalid mask should return a error number but not set it
- LP: #1186062
* fs/dcache.c: add cond_resched() to shrink_dcache_parent()
- LP: #1186062
* exec: do not abuse ->cred_guard_mutex in threadgroup_lock()
- LP: #1186062
* tty: fix up atime/mtime mess, take three
- LP: #1186062
* ipc: sysv shared memory limited to 8TiB
- LP: #1186062
* ARM: 7699/1: sched_clock: Add more notrace to prevent recursion
- LP: #1186062
* Linux 3.5.7.12
- LP: #1186062
* mmc: at91/avr32/atmel-mci: fix DMA-channel leak on module unload
- LP: #1186062
* ARM: at91: Fix typo in restart code panic message
- LP: #1186062
* drm/radeon: don't use get_engine_clock() on APUs
- LP: #1186062
* nfsd: don't run get_file if nfs4_preprocess_stateid_op return error
- LP: #1186062
* mmc: core: Fix bit width test failing on old eMMC cards
- LP: #1186062
* drm/i915: Add no-lvds quirk for Fujitsu Esprimo Q900
- LP: #1186062
* mfd: adp5520: Restore mode bits on resume
- LP: #1186062
* mmc: atmel-mci: pio hang on block errors
- LP: #1186062
* nfsd4: don't close read-write opens too soon
- LP: #1186062
* drm/radeon/dce6: add missing display reg for tiling setup
- LP: #1186062
* ALSA: usb: Add quirk for 192KHz recording on E-Mu devices
- LP: #1186062
* ALSA: usb-audio: disable autopm for MIDI devices
- LP: #1186062
* drm/radeon/evergreen+: don't enable HPD interrupts on eDP/LVDS
- LP: #1186062
* drm/radeon: cleanup properly if mmio mapping fails
- LP: #1186062
* ASoC: max98088: Fix logging of hardware revision.
- LP: #1186062
* drm/i915: Workaround incoherence between fences and LLC across multiple
CPUs
- LP: #1186062
* drm/i915: Fall back to bit banging mode for DVO transmitter detection
- LP: #1186062
* drm/radeon: fix hdmi mode enable on RS600/RS690/RS740
- LP: #1186062
* i2c: xiic: must always write 16-bit words to TX_FIFO
- LP: #1186062
* nfsd: Decode and send 64bit time values
- LP: #1186062
* drm/radeon: fix typo in si_select_se_sh()
- LP: #1186062
* fbcon: when font is freed, clear also vc_font.data
- LP: #1186062
* powerpc/spufs: Initialise inode->i_ino in spufs_new_inode()
- LP: #1186062
* ALSA: snd-usb: try harder to find USB_DT_CS_ENDPOINT
- LP: #1186062
* ALSA: usb-audio: Fix autopm error during probing
- LP: #1186062
* drm/gma500: fix backlight hotkeys behaviour on netbooks
- LP: #1186062
* powerpc: Add isync to copy_and_flush
- LP: #1186062
* ARM: u300: fix ages old copy/paste bug
- LP: #1186062
* x86: Eliminate irq_mis_count counted in arch_irq_stat
- LP: #1186062
* drm/prime: keep a reference from the handle to exported dma-buf (v6)
- LP: #1186062
* drm/mgag200: deal with bo reserve fail in dirty update path
- LP: #1186062
* drm/ast: deal with bo reserve fail in dirty update path
- LP: #1186062
* drm/cirrus: deal with bo reserve fail in dirty update path
- LP: #1186062
* drm/radeon: fix endian bugs in atom_allocate_fb_scratch()
- LP: #1186062
* drm/radeon: fix possible segfault when parsing pm tables
- LP: #1186062
* drm/radeon: add some new SI PCI ids
- LP: #1186062
* drm/radeon: add new richland pci ids
- LP: #1186062
* drm/radeon: fix handling of v6 power tables
- LP: #1186062
* perf/x86/intel/lbr: Fix LBR filter
- LP: #1186062
* perf/x86/intel/lbr: Demand proper privileges for
PERF_SAMPLE_BRANCH_KERNEL
- LP: #1186062
* net/eth/ibmveth: Fixup retrieval of MAC address
- LP: #1186062
* autofs - remove autofs dentry mount check
- LP: #1186062
* drm/radeon: properly lock disp in mc_stop/resume for evergreen+
- LP: #1186062
* drm/radeon: disable the crtcs in mc_stop (evergreen+) (v2)
- LP: #1186062
* powerpc: fix numa distance for form0 device tree
- LP: #1186062
* kernel/audit_tree.c: tree will leak memory when failure occurs in
audit_trim_trees()
- LP: #1186062
* xhci: Don't warn on empty ring for suspended devices.
- LP: #1186062
* cpufreq: exynos: Get booting freq value in exynos_cpufreq_init
- LP: #1186062
* ARM: 7692/1: iop3xx: move IOP3XX_PERIPHERAL_VIRT_BASE
- LP: #1186062
* drm/i915: ensure single initialization and cleanup of backlight device
- LP: #1186062
* drm/radeon: use frac fb div on RS780/RS880
- LP: #1186062
* r8169: fix vlan tag read ordering.
- LP: #1186062
* r8169: honor jumbo settings when chipset is requested to start.
- LP: #1186062
* drm/i915: Fix detection of base of stolen memory
- LP: #1186062
* s390: move dummy io_remap_pfn_range() to asm/pgtable.h
- LP: #1186062
* x86/mm: account for PGDIR_SIZE alignment
- LP: #1186062
* drbd: fix for deadlock when using automatic split-brain-recovery
- LP: #1186062
* cpufreq / Longhaul: Disable driver by default
- LP: #1186062
* ext4: add check for inodes_count overflow in new resize ioctl
- LP: #1186062
* powerpc: Emulate non privileged DSCR read and write
- LP: #1186062
* audit: Syscall rules are not applied to existing processes on non-x86
- LP: #1186062
* ASoC: wm8994: missing break in wm8994_aif3_hw_params()
- LP: #1186062
* tile: support new Tilera hypervisor
- LP: #1186062
* sd: fix array cache flushing bug causing performance problems
- LP: #1186062
* ath9k: fix key allocation error handling for powersave keys
- LP: #1186062
* nfsd4: don't allow owner override on 4.1 CLAIM_FH opens
- LP: #1186062
* xen/vcpu/pvhvm: Fix vcpu hotplugging hanging.
- LP: #1186062
* ALSA: HDA: Fix Oops caused by dereference NULL pointer
- LP: #1186062
* ACPICA: Fix possible buffer overflow during a field unit read operation
- LP: #1186062
* qmi_wwan/cdc_ether: add device IDs for Dell 5804 (Novatel E371) WWAN
card
- LP: #1186062
* B43: Handle DMA RX descriptor underrun
- LP: #1186062
* mwifiex: clear is_suspended flag when interrupt is received early
- LP: #1186062
* mwifiex: fix setting of multicast filter
- LP: #1186062
* ARM: OMAP: RX-51: change probe order of touchscreen and panel SPI
devices
- LP: #1186062
* hp_accel: Ignore the error from lis3lv02d_poweron() at resume
- LP: #1186062
* KVM: VMX: fix halt emulation while emulating invalid guest sate
- LP: #1186062
* dm snapshot: fix error return code in snapshot_ctr
- LP: #1186062
* drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register
- LP: #1186062
* drm/mgag200: Fix framebuffer base address programming
- LP: #1186062
* hugetlbfs: fix mmap failure in unaligned size request
- LP: #1186062
* net: qmi_wwan: fixup missing ethernet header (firmware bug workaround)
- LP: #1186062
* net: qmi_wwan: fixup destination address (firmware bug workaround)
- LP: #1186062
* net: qmi_wwan: prevent duplicate mac address on link (firmware bug
workaround)
- LP: #1186062
* tcp: force a dst refcount when prequeue packet
- LP: #1186062
* sfc: Fix naming of MTD partitions for FPGA bitfiles
- LP: #1186062
* 3c509.c: call SET_NETDEV_DEV for all device types (ISA/ISAPnP/EISA)
- LP: #1186062
* net_sched: act_ipt forward compat with xtables
- LP: #1186062
* net: use netdev_features_t in skb_needs_linearize()
- LP: #1186062
* net: vlan,ethtool: netdev_features_t is more than 32 bit
- LP: #1186062
* bridge: fix race with topology change timer
- LP: #1186062
* packet: tpacket_v3: do not trigger bug() on wrong header status
- LP: #1186062
* 3c59x: fix freeing nonexistent resource on driver unload
- LP: #1186062
* 3c59x: fix PCI resource management
- LP: #1186062
* if_cablemodem.h: Add parenthesis around ioctl macros
- LP: #1186062
* macvlan: fix passthru mode race between dev removal and rx path
- LP: #1186062
* ipv6: do not clear pinet6 field
- LP: #1186062
* xfrm6: release dev before returning error
- LP: #1186062
* ext4: limit group search loop for non-extent files
- LP: #1186062
* iscsi-target: Fix processing of OOO commands
- LP: #1186062
* tick: Cleanup NOHZ per cpu data on cpu down
- LP: #1186062
* ACPI / EC: Restart transaction even when the IBF flag set
- LP: #1186062
* drm/radeon: check incoming cliprects pointer
- LP: #1186062
* ARM: 7720/1: ARM v6/v7 cmpxchg64 shouldn't clear upper 32 bits of the
old/new value
- LP: #1186062
* powerpc: Bring all threads online prior to migration/hibernation
- LP: #1186062
* timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE
- LP: #1186062
* tracing: Fix leaks of filter preds
- LP: #1186062
* usermodehelper: check subprocess_info->path != NULL
- LP: #1186062
* drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory
overflow
- LP: #1186062
* ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex
- LP: #1186062
* dm thin: do not set discard_zeroes_data
- LP: #1186062
* drivers/rtc/rtc-pcf2123.c: fix error return code in pcf2123_probe()
- LP: #1186062
* pch_dma: Use GFP_ATOMIC because called from interrupt context
- LP: #1186062
* ARM: EXYNOS5: Fix kernel dump in AFTR idle mode
- LP: #1186062
* watchdog: Fix race condition in registration code
- LP: #1186062
* Linux 3.5.7.13
- LP: #1186062
-- Steve Conklin <sconk...@canonical.com> Wed, 05 Jun 2013 15:27:36 -0500
** Changed in: linux-ti-omap4 (Ubuntu Precise)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1172369
Title:
CVE-2013-3225
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1172369/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
