Changelog
linux (3.12.6-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
- net: x86: bpf: don't forget to free sk_filter (v2)
- net: Fix "ip rule delete table 256" (Closes: #724783)
- net-tcp: fix panic in tcp_fastopen_cache_set()
- inet: prevent leakage of uninitialized memory to user in recv syscalls
(CVE-2013-6405)
- ping: prevent NULL pointer dereference on write to msg_name
(CVE-2013-6432)
- ipv6: fix leaking uninitialized port number of offender sockaddr
- netfilter: push reasm skb through instead of original frag skbs
- packet: fix use after free race in send path when dev is released
- gso: handle new frag_list of frags GRO packets
- net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
- xfs: add capability check to free eofblocks ioctl
- iommu/vt-d: Fixed interaction of VFIO_IOMMU_MAP_DMA with IOMMU address
limits
- aio: Fix a trinity splat
- aio: prevent double free in ioctx_alloc
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.5
- [s390,s390x] crypto: Fix aes-xts parameter corruption
- crypto: scatterwalk - Set the chain pointer indication bit
- crypto: ccm - Fix handling of zero plaintext when computing mac
- crypto: authenc - Find proper IV address in ablkcipher callback
- [armhf] mvebu: use the virtual CPU registers to access coherency
registers
- vfs: fix subtle use-after-free of pipe_inode_info
- SCSI: bfa: Fix crash when symb name set for offline vport
- SCSI: hpsa: do not discard scsi status on aborted commands
- [hppa] fix mmap(MAP_FIXED|MAP_SHARED) to already mmapped address
- net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
- SCSI: Disable WRITE SAME for RAID and virtual host adapter drivers
- tg3: avoid double-freeing of rx data memory
- crypto: scatterwalk - Use sg_chain_ptr on chain entries
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.6
- ALSA: memalloc.h - fix wrong truncation of dma_addr_t
- [arm] 7912/1: check stack pointer in get_wchan
- [arm] 7913/1: fix framepointer check in unwind_frame
- KVM: Improve create VCPU parameter (CVE-2013-4587)
- [x86] KVM: Fix potential divide by 0 in lapic (CVE-2013-6367)
- [x86] KVM: Convert vapic synchronization to _cached functions
(CVE-2013-6368)
- [x86] KVM: fix guest-initiated crash with x2apic (CVE-2013-6376)
- xfs: growfs overruns AGFL buffer on V4 filesystems
- futex: fix handling of read-only-mapped hugepages
- nfsd: when reusing an existing repcache entry, unhash it first
- [armhf] usb: musb: musb_cppi41: handle pre-mature TX complete interrupt
- powerpc: Fix PTE page address mismatch in pgtable ctor/dtor
- mm: memcg: do not allow task about to OOM kill to bypass the limit
- mm: memcg: fix race condition between memcg teardown and swapin
- cfg80211: disable 5/10 MHz support for all drivers
- Revert "mac80211: allow disable power save in mesh"
- mac80211: fix scheduled scan rtnl deadlock
- iwlwifi: mvm: check sta_id/drain values in debugfs
- Btrfs: fix access_ok() check in btrfs_ioctl_send()
- dm snapshot: avoid snapshot space leak on crash
- dm array: fix a reference counting bug in shadow_ablock
- dm space map metadata: return on failure in sm_metadata_new_block
- dm space map: disallow decrementing a reference count below zero
- dm table: fail dm_table_create on dm_round_up overflow
- dm thin: switch to read only mode if a mapping insert fails
- dm thin: switch to read-only mode if metadata space is exhausted
- dm thin: always fallback the pool mode if commit fails
- dm thin: re-establish read-only state when switching to fail mode
- dm thin: allow pool in read-only mode to transition to read-write mode
- media/cxd2820r_core: Fix regression in 3.12.3
- sched: Avoid throttle_cfs_rq() racing with period_timer stopping
- Btrfs: do a full search everytime in btrfs_search_old_slot
- Btrfs: reset intwrite on transaction abort
- Btrfs: fix memory leak of chunks' extent map
- Btrfs: fix hole check in log_one_extent
- Btrfs: fix incorrect inode acl reset
- Btrfs: take ordered root lock when removing ordered operations inode
- Btrfs: do not run snapshot-aware defragment on error
- Btrfs: fix a crash when running balance and defrag concurrently
- Btrfs: fix lockdep error in async commit
[ Ben Hutchings ]
* udeb: Add ohci-pci to usb-modules (Closes: #730789)
* cifs: Enable CIFS_SMB2
* [hppa] Update flavours and configuration, thanks to Helge Deller
(Closes: #721191)
- Remove parisc-smp and parisc64 (UP) flavours
- Build with gcc-4.8
- rtc: Enable HP_SDC_RTC as module
- megaraid: Enable MEGARAID_NEWGEN
- [/parisc64-smp] Enable MLONGCALLS, DISCONTIGMEM_MANUAL
- [/parisc64-smp] Enable PATA_SIL680, AGP, AGP_PARISC, DRM,
DRM_RADEON as modules
* firmware: Disable FW_LOADER_USER_HELPER (see #725714)
* firmware: Improve logging of success/failure for direct file loading
* media: az6007: support Technisat Cablestar Combo HDCI (minus remote)
(Closes: #732106)
* linux-source: Compress with gzip -1 (Closes: #725492)
* [alpha] Prevent a NULL ptr dereference in csum_partial_copy
* Set ABI to 1
* [ia64] Enable PSTORE, EFI_VARS_PSTORE
* [x86,ia64] udeb: Remove zlib-modules as zlib is now built-in
* [rt] Update to 3.12.5-rt7:
- ptrace: fix ptrace vs tasklist_lock race
- migrate_disable pushd down in atomic_dec_and_spin_lock
- migrate_disable pushd down in rt_spin_trylock_irqsave
- migrate_disable pushd down in rt_write_trylock_irqsave
- Revert "sched/rt: Fix wait_task_interactive() to test rt_spin_lock state"
- seqlock: consolidate spin_lock/unlock waiting with spin_unlock_wait
- softirq: make migrate disable/enable conditioned on softirq_nestcnt
[ Ian Campbell ]
* [armel/kirkwood+orion] Reenable MARVELL_PHY (Closes: #723177)
-- Ben Hutchings <email address hidden> Sat, 21 Dec 2013 03:12:38 +0000
