Change log for linux-2.6 package in Debian

linux-2.6 (2.6.26-12) unstable; urgency=high


  [ Ian Campbell ]
  * xen: fix ACPI processor throttling for when processor id is -1. (closes: #502849)

  [ dann frazier ]
  * Make sendmsg() block during UNIX garbage collection (CVE-2008-5300)
  * Fix race conditions between inotify removal and umount (CVE-2008-5182)
  * Fix DoS when calling svc_listen twice on the same socket while reading
    /proc/net/atm/*vc (CVE-2008-5079)

  [ Bastian Blank ]
  * [openvz, vserver] Fix descriptions.
  * [sparc] Enable Sun Logical Domains support. (closes: #501684)
  * Fix coexistence of pata_marvell and ahci. (closes: #507432)
  * [sparc] Support Intergraph graphics chips. (closes: #508108)

 -- Bastian Blank <email address hidden>  Mon, 15 Dec 2008 12:57:18 +0100

linux-2.6 (2.6.26-11) unstable; urgency=low


  [ Bastian Blank ]
  * [sparc] Reintroduce dummy PCI host controller to workaround broken X.org.
  * [sparc] Fix size checks in PCI maps.
  * Add stable release 2.6.26.8:
    - netfilter: restore lost ifdef guarding defrag exception
    - netfilter: snmp nat leaks memory in case of failure
    - netfilter: xt_iprange: fix range inversion match
    - ACPI: dock: avoid check _STA method
    - ACPI: video: fix brightness allocation
    - sparc64: Fix race in arch/sparc64/kernel/trampoline.S
    - math-emu: Fix signalling of underflow and inexact while packing result.
    - tcpv6: fix option space offsets with md5
    - net: Fix netdev_run_todo dead-lock
    - scx200_i2c: Add missing class parameter
    - DVB: s5h1411: Power down s5h1411 when not in use
    - DVB: s5h1411: Perform s5h1411 soft reset after tuning
    - DVB: s5h1411: bugfix: Setting serial or parallel mode could destroy bits
    - V4L: pvrusb2: Keep MPEG PTSs from drifting away
    - ACPI: Always report a sync event after a lid state change
    - ALSA: use correct lock in snd_ctl_dev_disconnect()
    - file caps: always start with clear bprm->caps_*
    - libertas: fix buffer overrun
    - net: Fix recursive descent in __scm_destroy().
    - SCSI: qla2xxx: Skip FDMI registration on ISP21xx/22xx parts.
      (Closes: #502552)
    - edac cell: fix incorrect edac_mode
    - ext[234]: Avoid printk floods in the face of directory corruption
      (CVE-2008-3528)
    - gpiolib: fix oops in gpio_get_value_cansleep()
  * Override ABI changes.
  * [xen] Update description. (closes: #505961)
  * Revert parts of 2.6.26.6 to fix resume breakage. (closes: #504167)
    - clockevents: prevent multiple init/shutdown
    - clockevents: broadcast fixup possible waiters

  [ dann frazier ]
  * Fix buffer overflow in hfsplus (CVE-2008-4933)
  * Fix BUG() in hfsplus (CVE-2008-4934)
  * Fix stack corruption in hfs (CVE-2008-5025)
  * Fix oops in tvaudio when controlling bass/treble (CVE-2008-5033)

  [ Martin Michlmayr ]
  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Enable support for more partition
    tables, including MAC_PARTITION (requested by Benoît Knecht).
  * leds-pca9532: Fix memory leak and properly handle errors (Sven Wegener)
  * leds-pca9532: Move i2c work to a workqueque (Riku Voipio). (closes:
    #506116)

 -- Bastian Blank <email address hidden>  Wed, 26 Nov 2008 11:43:48 +0100

linux-2.6 (2.6.26-10) unstable; urgency=low


  [ dann frazier ]
  * sctp: Fix possible kernel panic in sctp_sf_abort_violation (CVE-2008-4618)

  [ Martin Michlmayr ]
  * DNS-323: add support for revision B1 machines (Matthew Palmer).
  * ext3/ext4: Add support for non-native signed/unsigned htree hash
    algorithms (Theodore Ts'o). (closes: #493957)
  * [arm/ixp4xx] Enable USB_ACM (closes: #504723).

  [ Bastian Blank ]
  * agp: Fix stolen memory counting on Intel G4X. (closes: #502606)
  * Add stable release 2.6.26.7:
    - security: avoid calling a NULL function pointer in drivers/video/tvaudio.c
    - DVB: au0828: add support for another USB id for Hauppauge HVR950Q
    - drm/i915: fix ioremap of a user address for non-root (CVE-2008-3831)
    - ACPI: Ignore _BQC object when registering backlight device
    - hwmon: (it87) Prevent power-off on Shuttle SN68PT
    - Check mapped ranges on sysfs resource files
    - x86: avoid dereferencing beyond stack + THREAD_SIZE
    - PCI: disable ASPM on pre-1.1 PCIe devices
    - PCI: disable ASPM per ACPI FADT setting
    - V4L/DVB (9053): fix buffer overflow in uvc-video
    - V4L/DVB (8617): uvcvideo: don't use stack-based buffers for USB transfers.
    - V4L/DVB (8498): uvcvideo: Return sensible min and max values when querying
      a boolean control.
    - V4L: zr36067: Fix RGBR pixel format
    - V4L: bttv: Prevent NULL pointer dereference in radio_open
    - libata: fix EH action overwriting in ata_eh_reset()
    - libata: always do follow-up SRST if hardreset returned -EAGAIN
    - fbcon_set_all_vcs: fix kernel crash when switching the rotated consoles
    - modules: fix module "notes" kobject leak
    - b43legacy: Fix failure in rate-adjustment mechanism
    - CIFS: make sure we have the right resume info before calling CIFSFindNext
    - sched_rt.c: resch needed in rt_rq_enqueue() for the root rt_rq
    - tty: Termios locking - sort out real_tty confusions and lock reads
    - x86, early_ioremap: fix fencepost error
    - x86: improve UP kernel when CPU-hotplug and SMP is enabled
    - x86: Reserve FIRST_DEVICE_VECTOR in used_vectors bitmap.
  * [xen] Remove pte file workaround.

  [ Ian Campbell ]
  * [xen] Disable usage of PAT. (closes: #503821)

 -- Bastian Blank <email address hidden>  Sat, 08 Nov 2008 10:50:58 +0100

linux-2.6 (2.6.26-9) unstable; urgency=low


  [ Bastian Blank ]
  * Add stable release 2.6.26.6:
    - mm owner: fix race between swapoff and exit
    - rtc: fix kernel panic on second use of SIGIO nofitication
    - fbcon: fix monochrome color value calculation
    - ALSA: snd-powermac: HP detection for 1st iMac G3 SL
    - ALSA: snd-powermac: mixers for PowerMac G4 AGP
    - sparc64: Fix missing devices due to PCI bridge test in
      of_create_pci_dev().
    - sparc64: Fix disappearing PCI devices on e3500.
    - sparc64: Fix OOPS in psycho_pcierr_intr_other().
    - sparc64: Fix interrupt register calculations on Psycho and Sabre.
    - sparc64: Fix PCI error interrupt registry on PSYCHO.
    - udp: Fix rcv socket locking
    - sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH
      (CVE-2008-4576)
    - sctp: do not enable peer features if we can't do them.
    - ipsec: Fix pskb_expand_head corruption in xfrm_state_check_space
    - netlink: fix overrun in attribute iteration
    - niu: panic on reset
    - ipv6: Fix OOPS in ip6_dst_lookup_tail().
    - XFRM,IPv6: initialize ip6_dst_blackhole_ops.kmem_cachep
    - af_key: Free dumping state on socket close
    - pcmcia: Fix broken abuse of dev->driver_data
    - clockevents: remove WARN_ON which was used to gather information
    - ntp: fix calculation of the next jiffie to trigger RTC sync
    - x86: HPET: read back compare register before reading counter
    - x86: HPET fix moronic 32/64bit thinko
    - clockevents: broadcast fixup possible waiters
    - HPET: make minimum reprogramming delta useful
    - clockevents: prevent endless loop lockup
    - clockevents: prevent multiple init/shutdown
    - clockevents: enforce reprogram in oneshot setup
    - clockevents: prevent endless loop in periodic broadcast handler
    - clockevents: prevent clockevent event_handler ending up handler_noop
    - x86: fix memmap=exactmap boot argument
    - x86: add io delay quirk for Presario F700
    - ACPI: Avoid bogus EC timeout when EC is in Polling mode
    - x86: fix SMP alternatives: use mutex instead of spinlock, text_poke is
      sleepable
    - rtc: fix deadlock
    - mm: dirty page tracking race fix
    - x86-64: fix overlap of modules and fixmap areas
    - x86: PAT proper tracking of set_memory_uc and friends
    - x86: fix oprofile + hibernation badness
    - x86: fdiv bug detection fix
    - rt2x00: Use ieee80211_hw->workqueue again
    - x86: Fix 27-rc crash on vsmp due to paravirt during module load
    - sg: disable interrupts inside sg_copy_buffer
    - ocfs2: Increment the reference count of an already-active stack.
    - APIC routing fix
    - sched: fix process time monotonicity
    - block: submit_bh() inadvertently discards barrier flag on a sync write
    - x64, fpu: fix possible FPU leakage in error conditions
    - x86-64: Clean up save/restore_i387() usage
    - KVM: SVM: fix guest global tlb flushes with NPT
    - KVM: SVM: fix random segfaults with NPT enabled
    - ALSA: remove unneeded power_mutex lock in snd_pcm_drop
    - ALSA: fix locking in snd_pcm_open*() and snd_rawmidi_open*()
    - ALSA: oxygen: fix distorted output on AK4396-based cards
    - ALSA: hda - Fix model for Dell Inspiron 1525
    - SCSI: qla2xxx: Defer enablement of RISC interrupts until ISP
      initialization completes.
    - USB: fix hcd interrupt disabling
    - smb.h: do not include linux/time.h in userspace
    - pxa2xx_spi: fix build breakage
    - pxa2xx_spi: chipselect bugfixes
    - pxa2xx_spi: dma bugfixes
    - mm: mark the correct zone as full when scanning zonelists
    - async_tx: fix the bug in async_tx_run_dependencies
    - drivers/mmc/card/block.c: fix refcount leak in mmc_block_open()
    - ixgbe: initialize interrupt throttle rate
    - i2c-dev: Return correct error code on class_create() failure
    - x86-32: AMD c1e force timer broadcast late
  * [x86] Update patch to detect not properly announced cmos RTC devices.
  * [xen] Overtake hvc console by default.

  [ maximilian attems ]
  * [openvz] ip: NULL pointer dereferrence in tcp_v(4|6)_send_ack
    (closes: #500472)
  * [openvz] unset NF_CONNTRACK_IPV6 for now until abi bump.

  [ Stephen R. Marenka ]
  * [m68k] add patches to fix atari ethernec per Michael Schmitz:
    atari-ethernec-IRQF_SHARED.diff and atari-ethernec-fixes.diff.
  * [m68k] add mac-esp-fix-for-quadras-with-two-esp-chips.diff to fix macs 
    with dual scsi busses and a problem with xorg, per Finn Thain.
  * [m68k] add atari-atari_keyb_init-operator-precedence.diff per
    Michael Schmitz.
  * [m68k] more mac patches, per Finn Thain.

  [ Martin Michlmayr ]
  * [arm/ixp4xx] Enable USB_ATM and USB_SPEEDTOUCH (closes: #502182).
  * [arm/iop32x, arm/orion5x] Likewise.
  * DNS-323: read MAC address from flash (Matthew Palmer).

  [ dann frazier ]
  * Restrict access to the DRM_I915_HWS_ADDR ioctl (CVE-2008-3831)
  * Don't allow splicing to files opened with O_APPEND (CVE-2008-4554)

 -- Bastian Blank <email address hidden>  Sat, 18 Oct 2008 12:14:22 +0200

linux-2.6 (2.6.26-8) unstable; urgency=medium


  [ dann frazier ]
  * [x86] Fix broken LDT access in VMI (CVE-2008-4410)
  * ata: Fix off-by-one-error that causes errors when reading a
    block on the LBA28-LBA48 boundary
  * [s390] prevent ptrace padding area read/write in 31-bit mode
    (CVE-2008-1514)

  [ Bastian Blank ]
  * Fix generation of i386 Xen image information.
  * [i386] Restrict the usage of long NOPs. (closes: #464962)
  * Fix access to uninitialized user keyring. (closes: #500279)
  * [x86] Fix detection of non-PNP RTC devices. (closes: #499230)

 -- Bastian Blank <email address hidden>  Thu, 09 Oct 2008 12:07:21 +0200