Ubuntu kernel development ()

Mainline Builds | 1 Mar 2012 03:00

Mainline Build v3.0.23

The mainline build for v3.0.23 is now complete and available at the URL
below:

    http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.0.23-oneiric/

See the CHANGES file for the list of changes from the previous version:

    http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.0.23-oneiric/CHANGES

Note that these builds do not contain any Ubuntu specific patches and
are not supported.

Kernel Team

Mainline Builds | 1 Mar 2012 03:30

Mainline Build v3.2.9

The mainline build for v3.2.9 is now complete and available at the URL
below:

    http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.2.9-precise/

See the CHANGES file for the list of changes from the previous version:

    http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.2.9-precise/CHANGES

Note that these builds do not contain any Ubuntu specific patches and
are not supported.

Kernel Team

Tim Gardner | 1 Mar 2012 04:50

Picon

ALSA conflicts with 3.2.9 stable

David - the Precise rebase against 3.2.9 stable is causing some compile 
issues with the jack detection patches. In order to keep things building 
correctly I've simply ripped out all of the driver/sound/hda patches 
that appear after v3.2.9 and pushed that to master-next. I created a 
branch for you that exhibits the compile issues in master-next-alsa. If 
you would, please sort these jack detection patches and propose a pull 
request against master-next. Thanks.

git://kernel.ubuntu.com/ubuntu/ubuntu-precise.git master-next-alsa

rtg
--

-- 
Tim Gardner tim.gardner <at> canonical.com

David Henningsson | 1 Mar 2012 06:44

Re: ALSA conflicts with 3.2.9 stable

On 03/01/2012 04:50 AM, Tim Gardner wrote:
> David - the Precise rebase against 3.2.9 stable is causing some compile
> issues with the jack detection patches. In order to keep things building
> correctly I've simply ripped out all of the driver/sound/hda patches
> that appear after v3.2.9 and pushed that to master-next. I created a
> branch for you that exhibits the compile issues in master-next-alsa. If
> you would, please sort these jack detection patches and propose a pull
> request against master-next. Thanks.
>
> git://kernel.ubuntu.com/ubuntu/ubuntu-precise.git master-next-alsa

Hi,

This commit should be reverted:

 From 2a8e5e8a2df18812c60720fa0534c29c9f1c17b6 Mon Sep 17 00:00:00 2001
From: Takashi Iwai <tiwai <at> suse.de>
Date: Wed, 22 Feb 2012 17:02:38 +0100
Subject: [PATCH] ALSA: hda - Fix redundant jack creations for cx5051

As the patch commit text says,
"The fix is needed only up to 3.2 kernel, since the HD-audio jack layer
was redesigned in the 3.3 kernel."

As we carry that redesigned jack layer, the problem addressed by this 
patch does not apply to our kernel.

Moreover, it seems like one of my patches (ALSA: hda - Integrate 
input-jack stuff into kctl-jack) was modified somehow in this branch to 
make it apply, it seems easier for everybody if I just tell you what to

(Continue reading)

brad.figg | 1 Mar 2012 08:00

The Daily Bug Report for Thursday, 01. March 2012 06:36 UTC

The Daily Bug Report
Thursday, 01. March 2012 06:36 UTC

The linux package acquired 10 new bugs in the last 24 hrs.

Bug       Title                                                           Series      Importance      Status           Assignee
-------   ------------------------------------------------------------    --------    ------------   
-------------    ---------------------
943119    aufs.ko missing from the Precise kernels                        precise     Undecided       In Progress      Tim Gardner
943170    tty output of MSP430 garbled                                                Undecided       Incomplete       Unassigned
943181    BUG: unable to handle kernel NULL pointer dereference at ...    precise     Medium          Confirmed        Unassigned
943205    BUG: unable to handle kernel paging request at ffffffff7b...    precise     Medium          Confirmed        Unassigned
943263    PC display will not turn on in Oneiric with Llano APUs co...    oneiric     Undecided       Confirmed        Unassigned
943498    [HP Compaq 6000 Pro] - Wireless NOT working in 10.04.4          lucid       High            Confirmed        Unassigned
943516    Linux freeze when compiling                                     lucid       Medium          Confirmed        Unassigned
943585    All kernel's after 2.6.35-32-generic fail to boot               maverick    High            Incomplete       Unassigned
943625    [drm:drm_mode_getfb] *ERROR* invalid framebuffer id             precise     Medium          Confirmed        Unassigned
943673    Lenovo SL300 does not suspend when SD card is present           oneiric     Undecided       Confirmed        Unassigned

An online version of this report can be found at: http://people.canonical.com/~kernel/reports/1-day-new.html

The Top 10 Hot List Bugs (based on bug heat)

Bug       Title                                                           Series      Importance      Status           Heat     Assignee
-------   ------------------------------------------------------------    --------    ------------   
-------------    -----    ---------------------
818830    [Sandy Bridge] serious power regression from kernel 3.0.0...    oneiric     Medium          Triaged          674     
Canonical Kernel Team
914319    NULL pointer dereference at sd_revalidate_disk+0x30/0x2a0       precise     High            Triaged          136      Unknown
924400    kernel NULL pointer dereference at 00000000000001f0             precise     High            Confirmed        48       Unknown

(Continue reading)

Andy Whitcroft | 1 Mar 2012 15:45

[lucid, lucid/fsl-imx51 CVE 1/2] block: Fix io_context leak after clone with CLONE_IO

From: Louis Rilling <louis.rilling <at> kerlabs.com>

With CLONE_IO, copy_io() increments both ioc->refcount and ioc->nr_tasks.
However exit_io_context() only decrements ioc->refcount if ioc->nr_tasks
reaches 0.

Always call put_io_context() in exit_io_context().

Signed-off-by: Louis Rilling <louis.rilling <at> kerlabs.com>
Signed-off-by: Jens Axboe <jens.axboe <at> oracle.com>

(cherry picked from commit 61cc74fbb87af6aa551a06a370590c9bc07e29d9)
CVE-2012-0879
BugLink: http://bugs.launchpad.net/bugs/940743
Signed-off-by: Andy Whitcroft <apw <at> canonical.com>
---
 block/blk-ioc.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/block/blk-ioc.c b/block/blk-ioc.c
index d4ed600..dcd0412 100644
--- a/block/blk-ioc.c
+++ b/block/blk-ioc.c
 <at>  <at>  -80,8 +80,8  <at>  <at>  void exit_io_context(void)
 			ioc->aic->exit(ioc->aic);
 		cfq_exit(ioc);

-		put_io_context(ioc);
 	}
+	put_io_context(ioc);

(Continue reading)

Andy Whitcroft | 1 Mar 2012 15:45

[lucid, lucid/fsl-imx51 CVE 2/2] block: Fix io_context leak after failure of clone with CLONE_IO

From: Louis Rilling <louis.rilling <at> kerlabs.com>

With CLONE_IO, parent's io_context->nr_tasks is incremented, but never
decremented whenever copy_process() fails afterwards, which prevents
exit_io_context() from calling IO schedulers exit functions.

Give a task_struct to exit_io_context(), and call exit_io_context() instead of
put_io_context() in copy_process() cleanup path.

Signed-off-by: Louis Rilling <louis.rilling <at> kerlabs.com>
Signed-off-by: Jens Axboe <jens.axboe <at> oracle.com>

(cherry picked from commit b69f2292063d2caf37ca9aec7d63ded203701bf3)
CVE-2012-0879
BugLink: http://bugs.launchpad.net/bugs/940743
Signed-off-by: Andy Whitcroft <apw <at> canonical.com>
---
 block/blk-ioc.c           |   10 +++++-----
 include/linux/iocontext.h |    5 +++--
 kernel/exit.c             |    2 +-
 kernel/fork.c             |    3 ++-
 4 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/block/blk-ioc.c b/block/blk-ioc.c
index dcd0412..cbdabb0 100644
--- a/block/blk-ioc.c
+++ b/block/blk-ioc.c
 <at>  <at>  -66,14 +66,14  <at>  <at>  static void cfq_exit(struct io_context *ioc)
 }

(Continue reading)

Andy Whitcroft | 1 Mar 2012 15:45

[CVE-2012-0879] CLONE_IO reference counting error

CVE-2012-0879
	With CLONE_IO, copy_io() increments both ioc->refcount and
	ioc->nr_tasks.	However exit_io_context() only decrements
	ioc->refcount if ioc->nr_tasks reaches 0. With CLONE_IO, parent's
	io_context->nr_tasks is incremented, but never decremented whenever
	copy_process() fails afterwards, which prevents exit_io_context()
	from calling IO schedulers exit functions. An unprivileged local
	user could use these flaws cause denial of service.

This was not introduced until after hardy, and fixes for this have hit
maverick and later via mainline and stable.  Following this email is a 2
patch series for lucid and lucid/fsl-imx51; both are trivial cherry-picks
from mainline.

Proposing for lucid and lucid/fsl-imx51.

-apw

Herton Ronaldo Krzesinski | 1 Mar 2012 16:13

Ack: Re: [CVE-2012-0879] CLONE_IO reference counting error

On Thu, Mar 01, 2012 at 02:45:41PM +0000, Andy Whitcroft wrote:
> CVE-2012-0879
> 	With CLONE_IO, copy_io() increments both ioc->refcount and
> 	ioc->nr_tasks.	However exit_io_context() only decrements
> 	ioc->refcount if ioc->nr_tasks reaches 0. With CLONE_IO, parent's
> 	io_context->nr_tasks is incremented, but never decremented whenever
> 	copy_process() fails afterwards, which prevents exit_io_context()
> 	from calling IO schedulers exit functions. An unprivileged local
> 	user could use these flaws cause denial of service.
> 
> This was not introduced until after hardy, and fixes for this have hit
> maverick and later via mainline and stable.  Following this email is a 2
> patch series for lucid and lucid/fsl-imx51; both are trivial cherry-picks
> from mainline.
> 
> Proposing for lucid and lucid/fsl-imx51.
> 
> -apw
> 
> -- 
> kernel-team mailing list
> kernel-team <at> lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>

Stefan Bader | 1 Mar 2012 16:22

ACK: [CVE-2012-0879] CLONE_IO reference counting error

On 01.03.2012 15:45, Andy Whitcroft wrote:
> CVE-2012-0879
> 	With CLONE_IO, copy_io() increments both ioc->refcount and
> 	ioc->nr_tasks.	However exit_io_context() only decrements
> 	ioc->refcount if ioc->nr_tasks reaches 0. With CLONE_IO, parent's
> 	io_context->nr_tasks is incremented, but never decremented whenever
> 	copy_process() fails afterwards, which prevents exit_io_context()
> 	from calling IO schedulers exit functions. An unprivileged local
> 	user could use these flaws cause denial of service.
>
> This was not introduced until after hardy, and fixes for this have hit
> maverick and later via mainline and stable.  Following this email is a 2
> patch series for lucid and lucid/fsl-imx51; both are trivial cherry-picks
> from mainline.
>
> Proposing for lucid and lucid/fsl-imx51.
>
> -apw
>
Looks ok

-Stefan

Group

gmane.linux.ubuntu.devel.kernel.general.

Project Web Page

Ubuntu kernel development ()

Search Archive

Page

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 55

Articles in period: 545

March 2012

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

Mainline Build v3.10-rc2 (21 May 2013)
Upcoming Ubuntu Kernel Team Meeting - Tuesday, 21st of May - 17:00 (UT (20 May 2013)
[PULL REQUEST][Lucid] CVEs fixes (20 May 2013)
[PATCH] netrom: fix info leak via msg_name in nr_recvmsg() (20 May 2013)
[PATCH] llc: Fix missing msg_namelen update in llc_ui_recvmsg() (20 May 2013)
[PATCH] KVM: Fix bounds checking in ioapic indirect register reads (CV (20 May 2013)
[PATCH] iucv: Fix missing msg_namelen update in iucv_sock_recvmsg() (20 May 2013)
[PATCH] irda: Fix missing msg_namelen update in irda_recvmsg_dgram() (20 May 2013)
[ 3.5.y.z extended stable ] Linux 3.5.7.13 stable review (20 May 2013)
[PATCH Raring SRU] drm/i915: don't intel_crt_init on any ULT machines (20 May 2013)
Mainline Build v3.9.3 (19 May 2013)
Mainline Build v3.4.46 (19 May 2013)
Mainline Build v3.0.79 (19 May 2013)
[precise] linux-lowlatency 3.2.0-44.48 uploaded (ABI bump) (19 May 2013)
[quantal] linux-lowlatency 3.5.0-31.34 uploaded (ABI bump) (19 May 2013)
[raring] linux-lowlatency 3.8.0-22.15 uploaded (ABI bump) (19 May 2013)
Add to list (18 May 2013)
[precise] linux-lts-quantal 3.5.0-31.52~precise1 uploaded (ABI bump) (18 May 2013)
[precise] linux-lts-raring 3.8.0-22.33~precise1 uploaded (ABI bump) (18 May 2013)
[precise] linux-armadaxp 3.2.0-1619.29 uploaded (ABI bump) (18 May 2013)
[quantal] linux-armadaxp 3.5.0-1614.21 uploaded (ABI bump) (18 May 2013)

Archives

569	May 2013
663	April 2013
833	March 2013
876	February 2013
972	January 2013
724	December 2012
739	November 2012
405	October 2012
368	September 2012
368	August 2012
360	July 2012
444	June 2012
373	May 2012
449	April 2012
545	March 2012
365	February 2012
346	January 2012
348	December 2011
428	November 2011
389	October 2011
305	September 2011
377	August 2011
468	July 2011
295	June 2011
227	May 2011
267	April 2011
477	March 2011
446	February 2011
351	January 2011
204	December 2010
323	November 2010
253	October 2010
423	September 2010
526	August 2010
436	July 2010
509	June 2010
434	May 2010
566	April 2010
598	March 2010
453	February 2010
328	January 2010
271	December 2009
152	November 2009
340	October 2009
249	September 2009
348	August 2009
468	July 2009
327	June 2009
207	May 2009
466	April 2009
536	March 2009
244	February 2009
258	January 2009
274	December 2008
253	November 2008
157	October 2008
191	September 2008
185	August 2008
126	July 2008
163	June 2008
128	May 2008
98	April 2008
81	March 2008
103	February 2008
99	January 2008
38	December 2007
42	November 2007
60	October 2007
88	September 2007
113	August 2007
52	July 2007
48	June 2007
75	May 2007
69	April 2007
55	March 2007
24	February 2007
21	January 2007
11	December 2006
38	November 2006
82	October 2006
30	September 2006
84	August 2006
25	July 2006
51	June 2006
34	May 2006
62	April 2006
100	March 2006
25	February 2006
20	January 2006
24	December 2005
20	November 2005
27	October 2005
17	September 2005
8	August 2005
5	July 2005
17	June 2005
33	May 2005
25	April 2005
3	March 2005

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template