lp://staging/ubuntu/maverick-proposed/linux-ti-omap4

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #653002: omapdss DISPC error: GFX_FIFO_UNDERFLOW, disabling GFX	Undecided	New
Bug #829655: linux-ti-omap4: 2.6.35-903.23 -proposed tracker	Undecided	In Progress
Bug #866021: CVE-2011-2494	Undecided	New
Bug #869237: CVE-2011-2491	Undecided	New
Bug #869243: CVE-2011-2496	Undecided	New
Bug #869245: CVE-2011-2517	Undecided	New
Bug #887298: CVE-2011-4077	Low	Fix Committed
Bug #887299: CVE-2011-4081	Low	Fix Committed
Bug #893148: CVE-2011-4132	Low	Fix Committed
Bug #894369: CVE-2011-4110	Medium	Fix Committed
Bug #894373: CVE-2011-4326	Undecided	New
Bug #894374: CVE-2011-4330	Low	Fix Committed
Bug #899463: CVE-2011-1162	Low	Fix Committed
Bug #899466: CVE-2011-2203	Medium	Fix Committed
Bug #917706: CVE-2012-0038	Medium	Fix Committed
Bug #917838: CVE-2012-0044	Undecided	New
Bug #932237: linux-ti-omap4: 2.6.35-903.31 -proposed tracker	Undecided	Incomplete
Bug #949905: CVE-2012-1097	Medium	Fix Committed
Bug #952828: CVE-2012-1146	Undecided	New

Link a bug report

Related blueprints

32. By Paolo Pisati on 2012-03-30

* Release Tracking Bug
  - LP: #967065

[ Upstream Kernel Changes ]

* regset: Prevent null pointer reference on readonly regsets
  - LP: #949905
  - CVE-2012-1097
* regset: Return -EFAULT, not -EIO, on host-side memory fault
  - LP: #949905
  - CVE-2012-1097
* mm: memcg: Correct unregistring of events attached to the same eventfd
  - LP: #952828
  - CVE-2012-1146

31. By Herton R. Krzesinski on 2012-02-28

[Herton R. Krzesinski]

* Release Tracking Bug
  - LP: #942766

[ Paolo Pisati ]

* [Config] Move to a 3G/1G memory split
  - LP: #861296

30. By Paolo Pisati on 2012-02-20

* Release Tracking Bug
  - LP: #932237

[ Upstream Kernel Changes ]

* net: ip_expire() must revalidate route
  - LP: #922051
  - CVE-2011-1927
* inotify: stop kernel memory leak on file creation failure
  - LP: #917797
  - CVE-2010-4250
* inotify: fix double free/corruption of stuct user
  - LP: #869203
  - CVE-2011-1479
* fuse: verify ioctl retries
  - LP: #917804
  - CVE-2010-4650
* ima: fix add LSM rule bug
  - LP: #917808
  - CVE-2011-0006
* bridge: Fix mglist corruption that leads to memory corruption
  - LP: #917813
  - CVE-2011-0716
* sound/oss: remove offset from load_patch callbacks
  - LP: #925337
  - CVE-2011-1476
* ARM: 6891/1: prevent heap corruption in OABI semtimedop
  - LP: #925373
  - CVE-2011-1759
* sound/oss/opl3: validate voice and channel indexes
  - LP: #925335
  - CVE-2011-1477
* Fix for buffer overflow in ldm_frag_add not sufficient
  - LP: #922371
  - CVE-2011-2182
* AppArmor: fix oops in apparmor_setprocattr
  - LP: #789409
  - CVE-2011-3619

29. By Paolo Pisati on 2012-01-26

* Release Tracking Bug
  - LP: #921471

[ Upstream Kernel Changes ]

* Sched: fix skip_clock_update optimization
  - LP: #911401
  - CVE-2011-4621
* xfs: validate acl count
  - LP: #917706
  - CVE-2012-0038
* xfs: fix acl count validation in xfs_acl_from_disk()
  - LP: #917706
  - CVE-2012-0038
* drm: integer overflow in drm_mode_dirtyfb_ioctl()
  - LP: #917838
  - CVE-2012-0044

28. By Paolo Pisati on 2012-01-04

* Release Tracking Bug
  - LP: #911245

[ Upstream Kernel Changes ]

* Revert "core: Fix memory leak/corruption on VLAN GRO_DROP,
  CVE-2011-1576"
* use cache type functions for arch_get_unmapped_area
* topdown mmap support
* TPM: Zero buffer after copying to userspace, CVE-2011-1162
  - LP: #899463
  - CVE-2011-1162
* hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
  - LP: #899466
  - CVE-2011-2203
* KEYS: Fix a NULL pointer deref in the user-defined key type,
  CVE-2011-4110
  - LP: #894369
  - CVE-2011-4110
* gro: reset vlan_tci on reuse
  - LP: #844361
  - CVE-2011-1576
* b43: allocate receive buffers big enough for max frame len + offset
  - LP: #905060
  - CVE-2011-3359
* fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message, CVE-2011-3353
  - LP: #905058
  - CVE-2011-3353

27. By Paolo Pisati on 2011-12-02

* Release Tracking Bug
  - LP: #897740

[ Upstream Kernel Changes ]

* crypto: ghash - Avoid null pointer dereference if no key is set
  - LP: #887299
  - CVE-2011-4081
* xfs: Fix possible memory corruption in xfs_readlink, CVE-2011-4077
  - LP: #887298
  - CVE-2011-4077
* jbd/jbd2: validate sb->s_first in journal_get_superblock()
  - LP: #893148
  - CVE-2011-4132
* hfs: add sanity check for file name length, CVE-2011-4330
  - LP: #894374
  - CVE-2011-4330
* ipv6: udp: fix the wrong headroom check
  - LP: #894373
  - CVE-2011-4326
* mm: make the vma list be doubly linked
  - LP: #893190
* mm: make the mlock() stack guard page checks stricter
  - LP: #893190
* mm: make stack guard page logic use vm_prev pointer
  - LP: #893190
* mm: Move vma_stack_continue into mm.h
  - LP: #672664, #893190
* Yama: fix default relationship to check thread group
  - LP: #737676, #893190
* Yama: use thread group leader when creating match
  - LP: #729839, #893190

26. By Paolo Pisati on 2011-11-11

* Release Tracking Bug
  - LP: #888569

[ Upstream Kernel Changes ]

* mm: avoid wrapping vm_pgoff in mremap(), CVE-2011-2496
  - LP: #869243
  - CVE-2011-2496
* cifs: clean up cifs_find_smb_ses (try #2), CVE-2011-1585
  - LP: #869208
  - CVE-2011-1585
* cifs: fix NULL pointer dereference in cifs_find_smb_ses, CVE-2011-1585
  - LP: #869208
  - CVE-2011-1585
* cifs: check for NULL session password, CVE-2011-1585
  - LP: #869208
  - CVE-2011-1585

25. By Paolo Pisati on 2011-10-18

* Release tracking bug
  - LP: #872658

[ Upstream Kernel Changes ]

* ext4: Fix max file size and logical block counting of extent format
  file, CVE-2011-2695
  - LP: #819574
  - CVE-2011-2695
* memory corruption in X.25 facilities parsing, CVE-2010-3873
  - LP: #709372
  - CVE-2010-3873
* cifs: always do is_path_accessible check in cifs_mount, CVE-2011-3363
  - LP: #866034
  - CVE-2011-3363
* cifs: add fallback in is_path_accessible for old servers, CVE-2011-3363
  - LP: #866034
  - CVE-2011-3363
* Make TASKSTATS require root access, CVE-2011-2494
  - LP: #866021
  - CVE-2011-2494
* proc: restrict access to /proc/PID/io, CVE-2011-2495
  - LP: #866025
  - CVE-2011-2495
* proc: fix a race in do_io_accounting(), CVE-2011-2495
  - LP: #866025
  - CVE-2011-2495
* staging: comedi: fix infoleak to userspace, CVE-2011-2909
  - LP: #869261
  - CVE-2011-2909
* perf tools: do not look at ./config for configuration, CVE-2011-2905
  - LP: #869259
  - CVE-2011-2905
* nl80211: fix overflow in ssid_len - CVE-2011-2517
  - LP: #869245
  - CVE-2011-2517
* vm: fix vm_pgoff wrap in stack expansion - CVE-2011-2496
  - LP: #869243
  - CVE-2011-2496
* vm: fix vm_pgoff wrap in upward expansion - CVE-2011-2496
  - LP: #869243
  - CVE-2011-2496
* ksm: fix NULL pointer dereference in scan_get_next_rmap_item() -
  CVE-2011-2183
  - LP: #869227
  - CVE-2011-2183
* NLM: Don't hang forever on NLM unlock requests - CVE-2011-2491
  - LP: #869237
  - CVE-2011-2491

24. By Paolo Pisati on 2011-09-20

[ Ming Lei ]

* SAUCE: usb: ehci: make HC see up-to-date qh/qtd descriptor ASAP
  - LP: #709245

[ Upstream Kernel Changes ]

* cifs: fix possible memory corruption in CIFSFindNext, CVE-2011-3191
  - LP: #834135
  - CVE-2011-3191
* befs: Validate length of long symbolic links, CVE-2011-2928
  - LP: #834124
  - CVE-2011-2928
* gro: Only reset frag0 when skb can be pulled, CVE-2011-2723
  - LP: #844371
  - CVE-2011-2723
* Validate size of EFI GUID partition entries, CVE-2011-1776
  - LP: #844365
  - CVE-2011-1776
* inet_diag: fix inet_diag_bc_audit(), CVE-2011-2213
  - LP: #838421
  - CVE-2011-2213
* si4713-i2c: avoid potential buffer overflow on si4713, CVE-2011-2700
  - LP: #844370
  - CVE-2011-2700
* Bluetooth: Prevent buffer overflow in l2cap config request,
  CVE-2011-2497
  - LP: #838423
  - CVE-2011-2497
* core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576
  - LP: #844361
  - CVE-2011-1576
* crypto: Move md5_transform to lib/md5.c, CVE-2011-3188
  - LP: #834129
  - CVE-2011-3188
* net: Compute protocol sequence numbers and fragment IDs using MD5,
  CVE-2011-3188
  - LP: #834129
  - CVE-2011-3188

23. By Paolo Pisati on 2011-08-31

* Release tracking bug
  - LP: #838037

[ Upstream Kernel Changes ]

* ipv6: make fragment identifications less predictable, CVE-2011-2699
  - LP: #827685
  - CVE-2011-2699
* perf: Fix software event overflow, CVE-2011-2918
  - LP: #834121
  - CVE-2011-2918
* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020