lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20130610101557.GA3235@1wt.eu>
Date:	Mon, 10 Jun 2013 12:15:57 +0200
From:	Willy Tarreau <w@....eu>
To:	linux-kernel@...r.kernel.org, stable@...r.kernel.org
Subject: Linux 2.6.32.61

I've just released Linux 2.6.32.61.

This version include backports from the 3.0.y branch up to and including
3.0.80. The following CVE IDs were fixed since 2.6.32.60 :

    CVE-2011-2695 CVE-2011-2699 CVE-2012-2390 CVE-2012-3430 CVE-2012-3552
    CVE-2012-4398 CVE-2012-4444 CVE-2012-4461 CVE-2012-4508 CVE-2012-4530
    CVE-2012-4565 CVE-2012-6537 CVE-2012-6539 CVE-2012-6540 CVE-2012-6542
    CVE-2012-6544 CVE-2012-6545 CVE-2012-6546 CVE-2012-6548 CVE-2012-6549
    CVE-2013-0228 CVE-2013-0268 CVE-2013-0349 CVE-2013-0871 CVE-2013-0914
    CVE-2013-1767 CVE-2013-1773 CVE-2013-1774 CVE-2013-1792 CVE-2013-1796
    CVE-2013-1798 CVE-2013-1826 CVE-2013-1860 CVE-2013-1928 CVE-2013-2015
    CVE-2013-2634 CVE-2013-3222 CVE-2013-3223 CVE-2013-3224 CVE-2013-3225
    CVE-2013-3228 CVE-2013-3229 CVE-2013-3231 CVE-2013-3234 CVE-2013-3235

The patch and changelog will appear soon at the following locations:
  ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/
  ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.bz2
  ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.xz
  ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.gz
  ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.61

The updated 2.6.32.y git tree can be found at:
   git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-2.6.32.y
  http://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-2.6.32.y

The tree can be browsed on the gitweb interface:
  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?id=refs/heads/linux-2.6.32.y

  Testing status (build/boot, OK/FAIL, otherwise not tested) :

         ARCH  |         CONFIGURATION
       --------+-----------------------------------
               |  allmodconfig     other-config
        x86_64 |    build:OK            -
          i386 |    build:OK            -
           arm |    build:OK            -

Thanks to all reviewers, Moritz for the long list of security fixes, Ben for
the careful review and to Greg for the final packaging.

Willy

---------
 Makefile                                       |   2 +-
 arch/alpha/kernel/sys_nautilus.c               |   5 +
 arch/arm/include/asm/signal.h                  |   1 +
 arch/avr32/include/asm/signal.h                |   1 +
 arch/cris/include/asm/signal.h                 |   1 +
 arch/h8300/include/asm/signal.h                |   1 +
 arch/m32r/include/asm/signal.h                 |   1 +
 arch/m68k/include/asm/signal.h                 |   1 +
 arch/mips/Makefile                             |   2 +-
 arch/mips/kernel/Makefile                      |   2 +-
 arch/mn10300/include/asm/signal.h              |   1 +
 arch/parisc/kernel/signal32.c                  |   6 +-
 arch/powerpc/include/asm/signal.h              |   1 +
 arch/s390/include/asm/signal.h                 |   1 +
 arch/sparc/include/asm/signal.h                |   1 +
 arch/x86/Kconfig                               |   2 +-
 arch/x86/include/asm/pgtable.h                 |   5 +
 arch/x86/include/asm/ptrace.h                  |   5 +-
 arch/x86/include/asm/signal.h                  |   2 +
 arch/x86/kernel/apic/io_apic.c                 |   9 +-
 arch/x86/kernel/cpu/mcheck/mce.c               |   9 +-
 arch/x86/kernel/efi.c                          |   3 -
 arch/x86/kernel/msr.c                          |   3 +
 arch/x86/kvm/x86.c                             |   9 +
 arch/x86/mm/fault.c                            |   6 +-
 arch/x86/mm/init_64.c                          |   3 +
 arch/x86/xen/enlighten.c                       |  18 +-
 arch/x86/xen/xen-asm_32.S                      |  14 +-
 arch/xtensa/include/asm/signal.h               |   1 +
 block/blk-core.c                               |  14 +-
 block/blk-exec.c                               |   7 +
 block/scsi_ioctl.c                             |   5 +-
 crypto/cryptd.c                                |  11 +-
 drivers/acpi/processor_idle.c                  |   3 +
 drivers/ata/libata-scsi.c                      |   6 +-
 drivers/base/bus.c                             |   4 +-
 drivers/char/ipmi/ipmi_bt_sm.c                 |   4 +-
 drivers/firmware/pcdp.c                        |   4 +-
 drivers/infiniband/ulp/ipoib/ipoib_main.c      |   2 +-
 drivers/infiniband/ulp/ipoib/ipoib_multicast.c |  19 +-
 drivers/isdn/isdnloop/isdnloop.c               |  12 -
 drivers/net/bonding/bonding.h                  |   4 +-
 drivers/net/r8169.c                            |  30 +--
 drivers/net/tg3.c                              |   4 +
 drivers/net/wireless/b43legacy/main.c          |   2 +
 drivers/scsi/bnx2i/bnx2i_hwi.c                 |   3 +
 drivers/scsi/mpt2sas/mpt2sas_ctl.c             |   7 +-
 drivers/scsi/scsi_lib.c                        |   2 +
 drivers/serial/8250.c                          |   2 +-
 drivers/staging/comedi/comedi_fops.c           |  13 +-
 drivers/staging/comedi/drivers/comedi_test.c   |   2 +-
 drivers/staging/comedi/drivers/das08.c         |   2 +-
 drivers/staging/comedi/drivers/jr3_pci.c       |   2 +-
 drivers/staging/comedi/drivers/ni_labpc.c      |  35 +--
 drivers/staging/comedi/drivers/s626.c          |   2 +-
 drivers/staging/vt6656/rf.c                    |   3 +
 drivers/telephony/ixj.c                        |  24 +-
 drivers/usb/class/cdc-wdm.c                    |  23 +-
 drivers/usb/host/ehci-hcd.c                    |   8 +-
 drivers/usb/host/ehci-q.c                      |  82 +++---
 drivers/usb/host/ehci.h                        |   3 +-
 drivers/usb/host/pci-quirks.c                  |  12 +-
 drivers/usb/serial/ftdi_sio.c                  |   4 +
 drivers/usb/serial/garmin_gps.c                |   7 +-
 drivers/usb/serial/io_ti.c                     |   3 +
 drivers/usb/serial/mos7840.c                   |   2 +-
 drivers/usb/serial/sierra.c                    |   1 +
 drivers/usb/serial/whiteheat.c                 |   1 +
 drivers/w1/w1.c                                |   3 +-
 fs/binfmt_elf.c                                |  19 +-
 fs/binfmt_em86.c                               |   1 -
 fs/binfmt_misc.c                               |  11 +-
 fs/binfmt_script.c                             |   8 +-
 fs/btrfs/volumes.c                             |   6 +
 fs/cifs/cifs_dfs_ref.c                         |   2 +
 fs/compat_ioctl.c                              |   3 +
 fs/eventpoll.c                                 |  22 +-
 fs/exec.c                                      |  25 +-
 fs/ext4/acl.c                                  |   6 +-
 fs/ext4/ext4_extents.h                         |   7 +-
 fs/ext4/extents.c                              | 106 ++++++--
 fs/ext4/inode.c                                |   8 +-
 fs/ext4/mballoc.c                              |  12 +-
 fs/ext4/move_extent.c                          |  17 +-
 fs/ext4/namei.c                                |  26 +-
 fs/ext4/super.c                                |  17 +-
 fs/fat/inode.c                                 |   2 +-
 fs/fat/namei_vfat.c                            |   9 +-
 fs/fscache/stats.c                             |   2 +-
 fs/hfsplus/extents.c                           |   2 +-
 fs/isofs/export.c                              |   1 +
 fs/jbd/commit.c                                |  43 +++-
 fs/jbd/transaction.c                           |  99 ++++++--
 fs/nfsd/nfs4xdr.c                              |  11 +-
 fs/nls/nls_base.c                              |  43 +++-
 fs/splice.c                                    |   7 +-
 fs/sysfs/dir.c                                 |  16 +-
 fs/udf/inode.c                                 |   4 +
 fs/udf/namei.c                                 |   1 +
 fs/udf/udf_sb.h                                |   2 +-
 include/asm-generic/signal.h                   |   4 +
 include/linux/binfmts.h                        |   3 +-
 include/linux/blkdev.h                         |   4 +-
 include/linux/kmod.h                           |   2 +
 include/linux/mempolicy.h                      |   2 +-
 include/linux/msdos_fs.h                       |   3 +-
 include/linux/nls.h                            |   5 +-
 include/linux/page-flags.h                     |   8 +-
 include/linux/sched.h                          |  11 +-
 include/linux/socket.h                         |   2 +-
 include/net/inet_sock.h                        |  14 +-
 include/net/ip.h                               |  11 +-
 include/net/ipv6.h                             |  12 +-
 include/net/transp_v6.h                        |   2 +
 include/scsi/scsi.h                            |   8 +-
 include/scsi/scsi_netlink.h                    |   4 +-
 include/trace/events/kmem.h                    |   4 +-
 kernel/async.c                                 |  13 +-
 kernel/cgroup.c                                |   2 -
 kernel/kmod.c                                  |  89 ++++++-
 kernel/posix-cpu-timers.c                      |  23 +-
 kernel/ptrace.c                                |  71 ++++--
 kernel/resource.c                              |  50 +++-
 kernel/sched.c                                 |   3 +-
 kernel/signal.c                                |  21 +-
 kernel/softirq.c                               |  17 +-
 kernel/sys.c                                   |   1 +
 kernel/time/tick-broadcast.c                   |   3 +-
 kernel/time/tick-sched.c                       |   2 +-
 kernel/time/timekeeping.c                      |   3 +-
 kernel/timer.c                                 |   2 +-
 kernel/trace/ftrace.c                          |   1 -
 kernel/trace/ring_buffer.c                     |   2 +
 lib/genalloc.c                                 |   2 +-
 mm/hugetlb.c                                   |  29 ++-
 mm/mempolicy.c                                 |  37 ++-
 mm/shmem.c                                     |  10 +-
 mm/truncate.c                                  |   3 +-
 mm/vmscan.c                                    |   2 +
 net/atm/common.c                               |   3 +
 net/atm/pvc.c                                  |   1 +
 net/ax25/af_ax25.c                             |   1 +
 net/bluetooth/af_bluetooth.c                   |   4 +-
 net/bluetooth/hci_sock.c                       |   1 +
 net/bluetooth/hidp/core.c                      |   2 +-
 net/bluetooth/l2cap.c                          |   1 +
 net/bluetooth/rfcomm/sock.c                    |   2 +
 net/bridge/br_stp_bpdu.c                       |   2 +
 net/core/dev.c                                 |   9 +-
 net/core/sock.c                                |   3 +-
 net/dcb/dcbnl.c                                |   1 +
 net/dccp/ipv4.c                                |  15 +-
 net/dccp/ipv6.c                                |   2 +-
 net/ipv4/af_inet.c                             |  16 +-
 net/ipv4/cipso_ipv4.c                          | 113 +++++----
 net/ipv4/icmp.c                                |  23 +-
 net/ipv4/inet_connection_sock.c                |   8 +-
 net/ipv4/ip_options.c                          |  38 ++-
 net/ipv4/ip_output.c                           |  50 ++--
 net/ipv4/ip_sockglue.c                         |  35 ++-
 net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c |   8 +
 net/ipv4/raw.c                                 |  19 +-
 net/ipv4/route.c                               |  17 +-
 net/ipv4/syncookies.c                          |   4 +-
 net/ipv4/tcp.c                                 |   2 +-
 net/ipv4/tcp_illinois.c                        |   8 +-
 net/ipv4/tcp_ipv4.c                            |  33 +--
 net/ipv4/tcp_output.c                          |   7 +-
 net/ipv4/udp.c                                 |  21 +-
 net/ipv6/af_inet6.c                            |   2 +
 net/ipv6/ip6_output.c                          |  40 ++-
 net/ipv6/reassembly.c                          |  74 ++----
 net/ipv6/tcp_ipv6.c                            |   2 +-
 net/ipv6/udp.c                                 |   2 +-
 net/irda/af_irda.c                             |   2 +
 net/iucv/af_iucv.c                             |   2 +
 net/llc/af_llc.c                               |   5 +-
 net/netfilter/ipvs/ip_vs_ctl.c                 |   1 +
 net/netfilter/ipvs/ip_vs_xmit.c                |  33 ++-
 net/packet/af_packet.c                         |   1 -
 net/rds/recv.c                                 |   3 +
 net/rose/af_rose.c                             |   1 +
 net/sched/act_gact.c                           |  14 +-
 net/sched/sch_htb.c                            |   2 +-
 net/sctp/auth.c                                |   2 +-
 net/sctp/chunk.c                               |   7 +-
 net/sctp/endpointola.c                         |   5 +
 net/sctp/socket.c                              |   2 +-
 net/socket.c                                   |   6 +-
 net/sunrpc/rpc_pipe.c                          |   2 +-
 net/tipc/socket.c                              |   7 +
 net/unix/af_unix.c                             |   7 +-
 net/xfrm/xfrm_user.c                           |  15 +-
 scripts/Kbuild.include                         |  12 +-
 scripts/gcc-version.sh                         |   6 +-
 scripts/gcc-x86_32-has-stack-protector.sh      |   2 +-
 scripts/gcc-x86_64-has-stack-protector.sh      |   2 +-
 scripts/kconfig/check.sh                       |   2 +-
 scripts/kconfig/lxdialog/check-lxdialog.sh     |   2 +-
 security/keys/process_keys.c                   |   2 +-
 sound/core/seq/seq_timer.c                     |   8 +-
 sound/pci/ac97/ac97_codec.c                    |   2 +
 sound/pci/hda/patch_realtek.c                  | 329 +++++++++++++++++++++++--
 usr/gen_init_cpio.c                            |  43 ++--
 virt/kvm/ioapic.c                              |   7 +-
 205 files changed, 1800 insertions(+), 819 deletions(-)

Summary of changes from 2.6.32.60 to 2.6.32.61
==============================================
Al Viro (1):
      PARISC: fix user-triggerable panic on parisc

Alan Cox (1):
      x86/msr: Add capabilities check

Alan Stern (2):
      USB: EHCI: go back to using the system clock for QH unlinks
      NLS: improve UTF8 -> UTF16 string conversion routine

Alexey Khoroshilov (1):
      net/core: Fix potential memory leak in dev_set_alias()

Allison Henderson (1):
      ext4: don't dereference null pointer when make_indexed_dir() fails

Anatol Pomozov (1):
      ext4: make orphan functions be no-op in no-journal mode

Anderson Lizardo (1):
      Bluetooth: Fix incorrect strncpy() in hidp_setup_hid()

Andi Kleen (1):
      MCE: Fix vm86 handling for 32bit mce handler

Andrew Morton (1):
      kernel/signal.c: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER

Andrew Worsley (1):
      USB: serial: ftdi_sio: Handle the old_termios == 0 case e.g. uart_resume_port()

Andy Honig (2):
      KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796)
      KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)

Anurup m (1):
      fs/fscache/stats.c: fix memory leak

Ben Hutchings (2):
      Revert "pcdp: use early_ioremap/early_iounmap to access pcdp table"
      signal: Define __ARCH_HAS_SA_RESTORER so we know whether to clear sa_restorer

Benjamin LaHaise (1):
      ipv4: check rt_genid in dst_check

Bernd Schubert (1):
      ext4: always set i_op in ext4_mknod()

Bjorn Helgaas (1):
      Driver core: treat unregistered bus_types as having no devices

Chen Gang (1):
      drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow

Christoffer Dall (1):
      mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED

Cong Ding (1):
      fs/cifs/cifs_dfs_ref.c: fix potential memory leakage

Cong Wang (1):
      net: prevent setting ttl=0 via IP_TTL

Dan Carpenter (1):
      telephony: ijx: buffer overflow in ixj_write_cid()

Daniel Borkmann (3):
      net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
      net: sctp: sctp_endpoint_free: zero out secret key data
      net: sctp: sctp_auth_key_put: use kzfree instead of kfree

Dave Hansen (2):
      hugetlb: fix resv_map leak in error path
      mm: fix vma_resv_map() NULL pointer

David Howells (1):
      keys: fix race with concurrent install_user_keyrings()

Denys Vlasenko (1):
      coredump: prevent double-free on an error path in core dumper

Dmitry Monakhov (1):
      ext4: online defrag is not supported for journaled files

Eddie Wai (1):
      SCSI: bnx2i: Fixed NULL ptr deference for 1G bnx2 Linux iSCSI offload

Emese Revfy (1):
      kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

Eric Dumazet (8):
      net: reduce net_rx_action() latency to 2 HZ
      softirq: reduce latencies
      net: guard tcp_set_keepalive() to tcp sockets
      inet: add RCU protection to inet->opt
      tcp: allow splice() to build full TSO packets
      tcp: fix MSG_SENDPAGE_NOTLAST logic
      tcp: preserve ACK clocking in TSO
      ipv6: make fragment identifications less predictable

Eric Sandeen (1):
      btrfs: use rcu_barrier() to wait for bdev puts at unmount

Eric Wong (1):
      epoll: prevent missed events on EPOLL_CTL_MOD

Eugene Shatokhin (1):
      ext4: fix memory leak in ext4_xattr_set_acl()'s error path

Francois Romieu (1):
      r8169: incorrect identifier for a 8168dp

Geert Uytterhoeven (1):
      sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()

Greg Thelen (1):
      tmpfs: fix use-after-free of mempolicy object

Hayes Wang (1):
      r8169: correct settings of rtl8102e.

Hillf Danton (1):
      bonding: Fix slave selection bug.

Hiroaki SHIMODA (1):
      net_sched: gact: Fix potential panic in tcf_gact().

Hugh Dickins (1):
      mm: fix invalidate_complete_page2() lock ordering

Ian Abbott (9):
      staging: comedi: ni_labpc: correct differential channel sequence for AI commands
      staging: comedi: ni_labpc: set up command4 register *after* command3
      staging: comedi: comedi_test: fix race when cancelling command
      staging: comedi: fix memory leak for saved channel list
      staging: comedi: s626: don't dereference insn->data
      staging: comedi: jr3_pci: fix iomem dereference
      staging: comedi: don't dereference user memory for INSN_INTTRIG
      staging: comedi: check s->async for poll(), read() and write()
      staging: comedi: das08: Correct AO output for das08jr-16-ao

J. Bruce Fields (1):
      nfsd4: fix oops on unusual readlike compound

James Bottomley (1):
      fix crash in scsi_dispatch_cmd()

Jamie Iles (1):
      CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure

Jan Beulich (1):
      x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS.

Jan Kara (7):
      scsi: Silence unnecessary warnings about ioctl to partition
      jbd: Delay discarding buffers in journal_unmap_buffer
      jbd: Fix assertion failure in commit code due to lacking transaction credits
      jbd: Fix lock ordering bug in journal_unmap_buffer()
      ext4: Fix fs corruption when make_indexed_dir() fails
      ext4: fix fdatasync() for files with only i_size changes
      udf: Fix bitmap overflow on large filesystems with small block size

Jay Estabrook (1):
      alpha: Add irongate_io to PCI bus resources

Jean Delvare (1):
      kbuild: Fix gcc -x syntax

Jens Axboe (1):
      Revert "block: improve queue_should_plug() by looking at IO depths"

Jesper Dangaard Brouer (2):
      net: fix divide by zero in tcp algorithm illinois
      ipvs: IPv6 MTU checking cleanup and bugfix

Jiri Slaby (1):
      serial: 8250, increase PASS_LIMIT

Johan Hovold (4):
      USB: whiteheat: fix memory leak in error path
      USB: mos7840: fix urb leak at release
      USB: mos7840: fix port-device leak in error path
      USB: garmin_gps: fix memory leak on disconnect

John Johansen (1):
      ptrace: Fix ptrace when task is in task_is_stopped() state

John Stultz (1):
      2.6.32.y: timekeeping: Fix nohz issue with commit 61b76840ddee647c0c223365378c3f394355b7d7

Jozsef Kadlecsik (1):
      netfilter: nf_ct_ipv4: packets with wrong ihl are invalid

Jussi Kivilinna (1):
      crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent data corruption

Kailang Yang (1):
      ALSA: hda - More ALC663 fixes and support of compatible chips

Kashyap, Desai (1):
      mpt2sas: Send default descriptor for RAID pass through in mpt2ctl

Kees Cook (5):
      gen_init_cpio: avoid stack overflow when expanding
      exec: do not leave bprm->interp on stack
      exec: use -ELOOP for max recursion depth
      signal: always clear sa_restorer on execve
      fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check

Kevin Dankwardt (1):
      fat: Fix stat->f_namelen

Konrad Rzeszutek Wilk (3):
      xen/bootup: allow read_tscp call for Xen PV guests.
      xen/bootup: allow {read|write}_cr8 pvops call.
      ACPI / cpuidle: Fix NULL pointer issues when cpuidle is disabled

Lachlan McIlroy (1):
      ext4: limit group search loop for non-extent files

Larry Finger (1):
      b43legacy: Fix crash on unload when firmware not available

Lennart Sorensen (2):
      r8169: Add support for D-Link 530T rev C1 (Kernel Bug 38862)
      USB: serial: Fix memory leak in sierra_release()

Li Zhong (1):
      Fix a dead loop in async_synchronize_full()

Lukas Czerner (1):
      ext4: Fix max file size and logical block counting of extent format file

Malcolm Priestley (1):
      staging: vt6656: [BUG] out of bound array reference in RFbSetPower.

Marcelo Tosatti (1):
      KVM: x86: relax MSR_KVM_SYSTEM_TIME alignment check

Marcin Jurkowski (1):
      w1: fix oops when w1_search is called from netlink connector

Mark Rutland (1):
      clockevents: Don't allow dummy broadcast timers

Mathias Krause (25):
      xfrm_user: fix info leak in copy_to_user_state()
      xfrm_user: fix info leak in copy_to_user_policy()
      xfrm_user: fix info leak in copy_to_user_tmpl()
      xfrm_user: return error pointer instead of NULL
      xfrm_user: return error pointer instead of NULL #2
      Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)
      Bluetooth: RFCOMM - Fix info leak via getsockname()
      Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()
      Bluetooth: L2CAP - Fix info leak via getsockname()
      Bluetooth: fix possible info leak in bt_sock_recvmsg()
      udf: avoid info leak on export
      isofs: avoid info leak on export
      net: fix info leak in compat dev_ifconf()
      dcbnl: fix various netlink info leaks
      ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)
      atm: update msg_namelen in vcc_recvmsg()
      atm: fix info leak via getsockname()
      atm: fix info leak in getsockopt(SO_ATMPVC)
      ax25: fix info leak via msg_name in ax25_recvmsg()
      iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
      llc: fix info leak via getsockname()
      llc: Fix missing msg_namelen update in llc_ui_recvmsg()
      rose: fix info leak via msg_name in rose_recvmsg()
      irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
      tipc: fix info leaks via msg_name in recv_msg/recv_stream

Matthew Garrett (2):
      x86: Don't use the EFI reboot method by default
      xhci: Make handover code more robust

Mel Gorman (2):
      mempolicy: fix a race in shared_policy_replace()
      x86/mm: Check if PUD is large when validating a kernel address

Namhyung Kim (1):
      tracing: Fix double free when function profile init failed

Namjae Jeon (1):
      udf: fix memory leak while allocating blocks during write

Nicolas Dichtel (1):
      ipv6: discard overlapping fragment

Nithin Nayak Sujir (1):
      tg3: Avoid null pointer dereference in tg3_interrupt in netconsole mode

Niu Yawei (1):
      ext4: fix race in ext4_mb_add_n_trim()

Oleg Nesterov (9):
      usermodehelper: introduce umh_complete(sub_info)
      usermodehelper: implement UMH_KILLABLE
      usermodehelper: ____call_usermodehelper() doesn't need do_exit()
      kmod: introduce call_modprobe() helper
      kmod: make __request_module() killable
      ptrace: ptrace_resume() shouldn't wake up !TASK_TRACED thread
      ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
      ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
      wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED task

Oliver Neukum (1):
      USB: cdc-wdm: fix buffer overflow

Patrick McHardy (1):
      IPoIB: Fix use-after-free of multicast object

Paul Moore (1):
      unix: fix a race condition in unix_release()

Peter Korsgaard (1):
      scsi: use __uX types for headers exported to user space

Petr Matousek (1):
      KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set (CVE-2012-4461)

Romain Francoise (1):
      x86, random: make ARCH_RANDOM prompt if EMBEDDED, not EXPERT

Samu Kallio (1):
      x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates

Shawn Guo (1):
      kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()

Simon Horman (1):
      ipvs: allow transmit of GRO aggregated skbs

Stanislaw Gruszka (1):
      posix-cpu-timers: Fix nanosleep task_struct leak

Stefan Hasko (1):
      net: sched: integer overflow fix

Stephen Hemminger (1):
      bridge: set priority of STP packets

Steven Rostedt (1):
      ring-buffer: Fix race between integrity check and readers

Suresh Siddha (1):
      x86, ioapic: initialize nr_ioapic_registers early in mp_register_ioapic()

T Makphaibulchoke (1):
      kernel/resource.c: fix stack overflow in __reserve_region_with_split()

Takamori Yamaguchi (1):
      mm: bugfix: set current->reclaim_state to NULL while returning from kswapd()

Takashi Iwai (3):
      ALSA: hda - Add a pin-fix for FSC Amilo Pi1505
      ALSA: seq: Fix missing error handling in snd_seq_timer_open()
      ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()

Tejun Heo (1):
      cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()

Thadeu Lima de Souza Cascardo (1):
      genalloc: stop crashing the system when destroying a pool

Theodore Ts'o (2):
      ext4: lock i_mutex when truncating orphan inodes
      ext4: avoid hang when mounting non-journal filesystems with orphan list

Thomas Gleixner (1):
      tick: Cleanup NOHZ per cpu data on cpu down

Timo Teräs (1):
      r8169: remove the obsolete and incorrect AMD workaround

Tirupathi Reddy (1):
      timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE

Tommi Rantala (1):
      sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails

Trond Myklebust (1):
      kernel panic when mount NFSv4

Vyacheslav Dubeyko (1):
      hfsplus: fix potential overflow in hfsplus_file_truncate()

Weiping Pan (1):
      rds: set correct msg_namelen

Wen Congyang (1):
      tracing: Don't call page_to_pfn() if page is NULL

Willy Tarreau (2):
      x86, ptrace: fix build breakage with gcc 4.7
      Linux 2.6.32.61

Wolfgang Frisch (1):
      USB: io_ti: Fix NULL dereference in chase_port()

Wu Fengguang (1):
      isdnloop: fix and simplify isdnloop_init()

Xiaotian Feng (1):
      libata: fix Null pointer dereference on disk error

Ying Xue (1):
      USB: ftdi_sio: Quiet sparse noise about using plain integer was NULL pointer

danborkmann@...earbox.net (1):
      af_packet: remove BUG statement in tpacket_destruct_skb

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ