Changelog
linux (3.2.51-1) wheezy; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.47
- xfs: kill suid/sgid through the truncate path.
- ALSA: usb-audio: fix possible hang and overflow in
parse_uac2_sample_rate_range()
- ALSA: usb-audio: avoid integer overflow in create_fixed_stream_quirk()
- xen-netfront: reduce gso_max_size to account for max TCP header
- jfs: fix a couple races
- USB: revert periodic scheduling bugfix (fixes regression in 3.2.39)
- USB: keyspan: fix bogus array index
- Bluetooth: Fix missing length checks for L2CAP signalling PDUs
- swap: avoid read_swap_cache_async() race to deadlock while waiting on
discard I/O completion
- mm: migration: add migrate_entry_wait_huge()
- USB: spcp8x5: fix device initialisation at open
- USB: pl2303: fix device initialisation at open
- md/raid1: consider WRITE as successful only if at least one non-Faulty
and non-rebuilding drive completed it.
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.48
- ARM: 7755/1: handle user space mapped pages in flush_kernel_dcache_page
- ARM: 7772/1: Fix missing flush_kernel_dcache_page() for noMMU
- [x86] Modify UEFI anti-bricking code
- tcp: fix tcp_md5_hash_skb_data()
- ipv6: fix possible crashes in ip6_cork_release()
- r8169: fix 8168evl frame padding.
- ip_tunnel: fix kernel panic with icmp_dest_unreach
- net: Block MSG_CMSG_COMPAT in send(m)msg and recv(m)msg
- net: force a reload of first item in hlist_nulls_for_each_entry_rcu
- net: sctp: fix NULL pointer dereference in socket destruction
- l2tp: Fix PPP header erasure and memory leak
- ncpfs: fix rmdir returns Device or resource busy (regression in 3.1)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.49
- zram: avoid invalid memory access in zram_exit()
- zram: use zram->lock to protect zram_free_page() in swap free notify path
- zram: avoid access beyond the zram device
- zram: protect sysfs handler from invalid memory access
- Bluetooth: Fix crash in l2cap_build_cmd() with small MTU
- xhci: check for failed dma pool allocation
- drivers: hv: switch to use mb() instead of smp_mb()
- media: dmxdev: remove dvb_ringbuffer_flush() on writer side
- hw_breakpoint: Use cpu_possible_mask in {reserve,release}_bp_slot()
- iommu/amd: Only unmap large pages from the first pte
- futex: Take hugepages into account when generating futex_key
- perf: Disable monitoring on setuid processes for regular users
- cgroup: fix RCU accesses to task->cgroups
- dlci: acquire rtnl_lock before calling __dev_get_by_name()
- dlci: validate the net device in dlci_del()
- genirq: Fix can_request_irq() for IRQs without an action
(Closes: #709647)
- writeback: Fix periodic writeback after fs mount
- UBIFS: fix a horrid bug - data race between readdir and llseek
- powerpc/smp: Section mismatch from smp_release_cpus to __initdata
spinning_secondaries
- ext3,ext4: don't mess with dir_file->f_pos in htree_dirblock_to_tree()
- jbd2: fix theoretical race in jbd2__journal_restart
- drivers/dma/pl330.c: fix locking in pl330_free_chan_resources()
- ocfs2: xattr: fix inlined xattr reflink
- crypto: sanitize argument for format string
- hpfs: better test for errors
- iscsi-target: Fix tfc_tpg_nacl_auth_cit configfs length overflow
- perf: Clone child context from parent context pmu
- perf: Remove WARN_ON_ONCE() check in __perf_event_enable() for valid
scenario
- perf: Fix perf_lock_task_context() vs RCU
- perf: Fix perf mmap bugs
- perf: Fix mmap() accounting hole
- ext4: fix overflow when counting used blocks on 32-bit architectures
- ext4: fix data offset overflow in ext4_xattr_fiemap() on 32-bit archs
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.50
- macvtap: fix recovery from gup errors
- neighbour: fix a race in neigh_destroy()
- net: Swap ver and type in pppoe_hdr
- ipv6,mcast: always hold idev->lock before mca_lock
- macvtap: correctly linearize skb when zerocopy is used
- 9p: fix off by one causing access violations and memory corruption
- atl1e: fix dma mapping warnings
- atl1e: unmap partially mapped skb on dma error and free skb
- vlan: fix a race in egress prio management
- [sparc] tsb must be flushed before tlb
- virtio_net: fix race in RX VQ processing
- bnx2fc: Fix incorrect memset in bnx2fc_parse_fcp_rsp
- xen/blkback: Check for insane amounts of request on the ring (v6).
- lockd: protect nlm_blocked access in nlmsvc_retry_blocked
- ext4: don't allow ext4_free_blocks() to fail due to ENOMEM
- ACPI / memhotplug: Fix a stale pointer in error path
- ALSA: Fix unlocked snd_pcm_stop() calls in various drivers
- Btrfs: fix lock leak when resuming snapshot deletion
- Btrfs: re-add root to dead root list if we stop dropping it
- ALSA: usb-audio: 6fire: return correct XRUN indication
- [x86] isci: Fix a race condition in the SSP task management path
- sd: fix crash when UA received on DIF enabled device
- nfsd: nfsd_open: when dentry_open returns an error do not propagate as
struct file
- staging: comedi: fix a race between do_cmd_ioctl() and read/write
- usb: host: xhci: Enable XHCI_SPURIOUS_SUCCESS for all controllers with
xhci 1.0
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.51
- sctp: fully initialize sctp_outq in sctp_outq_init
- ipv6: take rtnl_lock and mark mrt6 table as freed on namespace cleanup
- net_sched: Fix stack info leak in cbq_dump_wrr().
- af_key: more info leaks in pfkey messages
- net_sched: info leak in atm_tc_dump_class()
- ALSA: ak4xx-adda: info leak in ak4xxx_capture_source_info()
- NFSv4.1: integer overflow in decode_cb_sequence_args()
- jfs: fix readdir cookie incompatibility with NFSv4 (Closes: #714974)
- mac80211: fix duplicate retransmission detection
- [arm] 7791/1: a.out: remove partial a.out support
- [x86] fpu: correct the asm constraints for fxsave, unbreak mxcsr.daz
- USB: mos7840: fix race in register handling
- serial/mxs-auart: fix race condition in interrupt handler
- serial/mxs-auart: increase time to wait for transmitter to become idle
- ixgbe: Fix Tx Hang issue with lldpad on 82598EB
- virtio: console: fix race with port unplug and open/close
- virtio: console: fix race in port_fops_open() and port unplug
- virtio: console: clean up port data immediately at time of unplug
- ACPI / battery: Fix parsing _BIX return value (Closes: #721468)
- cifs: extend the buffer length enought for sprintf() using
- iwlwifi: dvm: fix calling ieee80211_chswitch_done() with NULL
- ALSA: 6fire: fix DMA issues with URB transfer_buffer usage
- cifs: don't instantiate new dentries in readdir for inodes that need
to be revalidated immediately (fixes regression in 3.2.46)
- hwmon: (adt7470) Fix incorrect return code check
- zd1201: do not use stack as URB transfer_buffer
- Hostap: copying wrong data prism2_ioctl_giwaplist()
- ALSA: 6fire: make buffers DMA-able (pcm)
- ALSA: 6fire: make buffers DMA-able (midi)
- jbd2: Fix use after free after error in jbd2_journal_dirty_metadata()
- [arm] 7809/1: perf: fix event validation for software group leaders
- [arm] perf: Fix armpmu_map_hw_event()
- fs/proc/task_mmu.c: fix buffer overflow in add_page_map()
- USB: mos7720: fix broken control requests
- USB: keyspan: fix null-deref at disconnect and release
- block: Add bio_for_each_segment_all()
- sg: Fix user memory corruption when SG_IO is interrupted by a signal
- of: fdt: fix memory initialization for expanded DT
- nilfs2: remove double bio_put() in nilfs_end_bio_write() for
BIO_EOPNOTSUPP error
- nilfs2: fix issue with counting number of bio requests for
BIO_EOPNOTSUPP error detection
- ath9k_htc: Restore skb headroom when returning skb to mac80211
- [powerpc] Don't Oops when accessing /proc/powerpc/lparcfg without
hypervisor
- [powerpc] Work around gcc miscompilation of __pa() on 64-bit
- SUNRPC: Fix memory corruption issue on 32-bit highmem systems
- drivers/base/memory.c: fix show_mem_removable() to handle missing sections
- [x86] get_unmapped_area: Access mmap_legacy_base through mm_struct member
- [s390] KVM: move kvm_guest_enter,exit closer to sie
[ Ben Hutchings ]
* cassini: Make missing firmware non-fatal (Closes: #714128)
* drm, agp: Update to 3.4.61:
- drm/radeon: fix card_posted check for newer asics
- radeon: Fix system hang issue when using KMS with older cards
- drm/radeon: don't allow audio on DCE6
- drm: fix a use-after-free when GPU acceleration disabled
- drm/i915/sdvo: Use &intel_sdvo->ddc instead of intel_sdvo->i2c for DDC.
- drm/i915: no lvds quirk for hp t5740
- drm/gma500: Increase max resolution for mode setting
- drm/gma500/psb: Unpin framebuffer on crtc disable
- drm/gma500/cdv: Unpin framebuffer on crtc disable
- drm/i915: prefer VBT modes for SVDO-LVDS over EDID
- drm/radeon: fix endian issues with DP handling (v3)
- drm/radeon: fix combios tables on older cards
- drm/radeon: improve dac adjust heuristics for legacy pdac
- drm/radeon/atom: initialize more atom interpretor elements to 0
- drm/i915: quirk no PCH_PWM_ENABLE for Dell XPS13 backlight
- drm/i915/lvds: ditch ->prepare special case
- drm/i915: Invalidate TLBs for the rings after a reset
- drm/vmwgfx: Split GMR2_REMAP commands if they are to large
- drm/i915: ivb: fix edp voltage swing reg val
* m25p80: Add support for Micron N25Q128 including 3V variant
(Closes: #714092)
* [x86] Revert "drm/i915: GFX_MODE Flush TLB Invalidate Mode must be '1'
for scanline waits" (possibly fixes: #703715, #704987 and others)
* ata: Disable SATA_INIC162X - this driver corrupts data and is not
expected to be fixed (Closes: #714295)
* Update debconf template translations:
- Update Brazilian Portugese (Fernando Ike de Oliveira) (Closes: #719725)
- Update Japanese ('victory') (Closes: #719939)
* [x86] efivars: Enable the improved check for free space; this should
avoid either risk of bricking Samsung systems or refusing to set the
boot configuration on Asus systems
* mvsas: Recognise device/subsystem 9485/9485 as 88SE9485
* ipv6: remove max_addresses check from ipv6_create_tempaddr (CVE-2013-0343)
* Revert "zram: use zram->lock to protect zram_free_page() in swap free
notify path" (regression in 3.2.49)
* HID: validate HID report id size (CVE-2013-2888)
* HID: pantherlord: validate output report details (CVE-2013-2892)
* HID: ntrig: validate feature report details (CVE-2013-2896)
* HID: picolcd_core: validate output report details (CVE-2013-2899)
* HID: check for NULL field when setting values
* [rt] Update to 3.2.51-rt72:
- sched/workqueue: Only wake up idle workers if not blocked on sleeping
spin lock
- x86/mce: fix mce timer interval
- genirq: Set irq thread to RT priority on creation
- list_bl.h: make list head locking RT safe
- list_bl.h: fix it for for !SMP && !DEBUG_SPINLOCK
- timers: prepare for full preemption improve
- kernel/cpu: fix cpu down problem if kthread's cpu is going down
- kernel/hotplug: restore original cpu mask oncpu/down
- drm/i915: drop trace_i915_gem_ring_dispatch on rt
- rt,ntp: Move call to schedule_delayed_work() to helper thread
- hwlat-detector: Update hwlat_detector to add outer loop detection
- hwlat-detect/trace: Export trace_clock_local for hwlat-detector
- hwlat-detector: Use trace_clock_local if available
- hwlat-detector: Use thread instead of stop machine
- genirq: do not invoke the affinity callback via a workqueue
* linux-doc: Include aufs documentation
* aufs: Apply bug fixes from 3.2.x branch:
- Update Sourceforge URLs in documentation
- Fix build with CONFIG_AUFS_DEBUG=y
- Make sure the target branch is upper before copy-up
- Fix error handling in au_reopen_nondir()
- Track pseudo-links with hlist, addressing poor performance and
WARNING during package installation
- Add necessary memory barriers around i_nlink updates
- Fix unbalanced au_unpin() in au_file_refresh_by_inode()
- Do not copy-up the S_AUTOMOUNT inode flag
* kernel-doc: bugfix - multi-line macros (fixes build failure in 3.2.51)
[ Aurelien Jarno ]
* [s390] Revert "s390: Use direct ktime path for s390 clockevent device"
to fix kernel hard hang after a few hours (Closes: #719993).
-- Ben Hutchings <email address hidden> Wed, 18 Sep 2013 14:22:20 +0100
