This bug was fixed in the package linux-ppc - 3.8.0-18.24 --------------- linux-ppc (3.8.0-18.24) raring; urgency=low [ Andy Whitcroft ] * Release Tracking Bug - LP: #1250627 * rebase to Ubuntu-3.8.0-34.49 [ Ubuntu: 3.8.0-34.49 ] * Release Tracking Bug - LP: #1250558 * SAUCE: Work around broken ACPI backlight on Dell Inspiron 5537 - LP: #1231305 * be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd - LP: #1234019 * random: run random_int_secret_init() run after all late_initcalls - LP: #1249058 * tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT - LP: #1249058 * ALSA: snd-usb-usx2y: remove bogus frame checks - LP: #1249058 * drm/i915/hsw: Disable L3 caching of atomic memory operations. - LP: #1249058 * drm/i915: Only apply DPMS to the encoder if enabled - LP: #1249058 * ALSA: hda - hdmi: Fix channel map switch not taking effect - LP: #1249058 * ALSA: hda - Add fixup for ASUS N56VZ - LP: #1249058 * hwmon: (applesmc) Always read until end of data - LP: #1249058 * drm/radeon: fix typo in CP DMA register headers - LP: #1249058 * drm/radeon: fix hw contexts for SUMO2 asics - LP: #1249058 * drm/radeon: forever loop on error in radeon_do_test_moves() - LP: #1249058 * i2c: omap: Clear ARDY bit twice - LP: #1249058 * KVM: PPC: Book3S HV: Fix typo in saving DSCR - LP: #1249058 * random: allow architectures to optionally define random_get_entropy() - LP: #1249058 * Btrfs: use right root when checking for hash collision - LP: #1249058 * compiler-gcc4.h: Reorder macros based upon gcc ver - LP: #1249058 * compiler-gcc.h: Add gcc-recommended GCC_VERSION macro - LP: #1249058 * compiler/gcc4: Add quirk for 'asm goto' miscompilation bug - LP: #1249058 * ALSA: hda - Fix microphone for Sony VAIO Pro 13 (Haswell model) - LP: #1227093, #1249058 * ext4: fix memory leak in xattr - LP: #1249058 * vfs: allow O_PATH file descriptors for fstatfs() - LP: #1249058 * parisc: fix interruption handler to respect pagefault_disable() - LP: #1249058 * xen-blkfront: use a different scatterlist for each request - LP: #1249058 * can: flexcan: fix flexcan_chip_start() on imx6 - LP: #1249058 * can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX - LP: #1249058 * caif: Add missing braces to multiline if in cfctrl_linkup_request - LP: #1249058 * tcp: Add missing braces to do_tcp_setsockopt - LP: #1249058 * ipv6/exthdrs: accept tlv which includes only padding - LP: #1249058 * net: fib: fib6_add: fix potential NULL pointer dereference - LP: #1249058 * net: sctp: fix smatch warning in sctp_send_asconf_del_ip - LP: #1249058 * net: flow_dissector: fix thoff for IPPROTO_AH - LP: #1249058 * net_sched: htb: fix a typo in htb_change_class() - LP: #1249058 * r8169: enforce RX_MULTI_EN for the 8168f. - LP: #1249058 * netpoll: fix NULL pointer dereference in netpoll_cleanup - LP: #1249058 * net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit - LP: #1249058 * xen-netback: count number required slots for an skb more carefully - LP: #1249058 * resubmit bridge: fix message_age_timer calculation - LP: #1249058 * bridge: Clamp forward_delay when enabling STP - LP: #1249058 * bridge: use br_port_get_rtnl within rtnl lock - LP: #1249058 * bridge: fix NULL pointer deref of br_port_get_rcu - LP: #1249058 * ip6_tunnels: raddr and laddr are inverted in nl msg - LP: #1249058 * net: sctp: rfc4443: do not report ICMP redirects to user space - LP: #1249058 * net:dccp: do not report ICMP redirects to user space - LP: #1249058 * ip: use ip_hdr() in __ip_make_skb() to retrieve IP header - LP: #1249058 * ip: generate unique IP identificator if local fragmentation is allowed - LP: #1249058 * ipv6: udp packets following an UFO enqueued packet need also be handled by UFO - LP: #1249058 * via-rhine: fix VLAN priority field (PCP, IEEE 802.1p) - LP: #1249058 * dm9601: fix IFF_ALLMULTI handling - LP: #1249058 * bonding: Fix broken promiscuity reference counting issue - LP: #1249058 * ipv6: gre: correct calculation of max_headroom - LP: #1249058 * ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put - LP: #1249058 * ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put - LP: #1249058 * ll_temac: Reset dma descriptors indexes on ndo_open - LP: #1249058 * sit: allow to use rtnl ops on fb tunnel - LP: #1249058 * ip6tnl: allow to use rtnl ops on fb tunnel - LP: #1249058 * esp_scsi: Fix tag state corruption when autosensing. - LP: #1249058 * sparc64: Fix ITLB handler of null page - LP: #1249058 * sparc64: Remove RWSEM export leftovers - LP: #1249058 * sparc64: Fix off by one in trampoline TLB mapping installation loop. - LP: #1249058 * sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall - LP: #1249058 * sparc32: Fix exit flag passed from traced sys_sigreturn - LP: #1249058 * cifs: Fix inability to write files >2GB to SMB2/3 shares - LP: #1249058 * xhci: quirk for extra long delay for S4 - LP: #1249058 * xhci: Fix spurious wakeups after S5 on Haswell - LP: #1249058 * USB: support new huawei devices in option.c - LP: #1249058 * USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well. - LP: #1249058 * USB: serial: option: add support for Inovia SEW858 device - LP: #1249058 * ARM: 7851/1: check for number of arguments in syscall_get/set_arguments() - LP: #1249058 * USB: quirks.c: add one device that cannot deal with suspension - LP: #1249058 * ALSA: us122l: Fix pcm_usb_stream mmapping regression - LP: #1249058 * dm snapshot: fix data corruption - LP: #1249058 - CVE-2013-4299 * USB: quirks: add touchscreen that is dazzeled by remote wakeup - LP: #1249058 * serial: vt8500: Fix range-checking on vt8500_uart_ports - LP: #1249058 * serial: vt8500: add missing braces - LP: #1249058 * usb: serial: option: blacklist Olivetti Olicard200 - LP: #1249058 * usb-storage: add quirk for mandatory READ_CAPACITY_16 - LP: #1249058 * writeback: fix negative bdi max pause - LP: #1249058 * mm: fix BUG in __split_huge_page_pmd - LP: #1249058 * Linux 3.8.13.12 - LP: #1249058 [ Ubuntu: 3.8.0-33.48 ] * Release Tracking Bug - LP: #1242849 * SAUCE: (no-up) Only let characters through when there are active readers. - LP: #1208740 * cciss: fix info leak in cciss_ioctl32_passthru() - LP: #1188355 - CVE-2013-2147 * cpqarray: fix info leak in ida_locked_ioctl() - LP: #1188355 - CVE-2013-2147 * mount: consolidate permission checks - LP: #1226726 * get rid of full-hash scan on detaching vfsmounts - LP: #1226726 * Smack: Fix the bug smackcipso can't set CIPSO correctly - LP: #1236743 * ipvs: add backup_only flag to avoid loops - LP: #1238494 * tuntap: correctly handle error in tun_set_iff() - LP: #1229975 - CVE-2013-4343 * htb: fix sign extension bug - LP: #1240580 * net: avoid to hang up on sending due to sysctl configuration overflow. - LP: #1240580 * net: check net.core.somaxconn sysctl values - LP: #1240580 * macvlan: validate flags - LP: #1240580 * neighbour: populate neigh_parms on alloc before calling ndo_neigh_setup - LP: #1240580 * bonding: modify only neigh_parms owned by us - LP: #1240580 * fib_trie: remove potential out of bound access - LP: #1240580 * bridge: don't try to update timers in case of broken MLD queries - LP: #1240580 * tcp: cubic: fix overflow error in bictcp_update() - LP: #1240580 * tcp: cubic: fix bug in bictcp_acked() - LP: #1240580 * ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not match - LP: #1240580 * 8139cp: Fix skb leak in rx_status_loop failure path. - LP: #1240580 * tun: signedness bug in tun_get_user() - LP: #1240580 * ipv6: remove max_addresses check from ipv6_create_tempaddr - LP: #1240580 * ipv6: Store Router Alert option in IP6CB directly. - LP: #1240580 * ipv6: drop packets with multiple fragmentation headers - LP: #1240580 * tcp: set timestamps for restored skb-s - LP: #1240580 * net: usb: Add HP hs2434 device to ZLP exception table - LP: #1240580 * tcp: initialize rcv_tstamp for restored sockets - LP: #1240580 * ipv4: sendto/hdrincl: don't use destination address found in header - LP: #1240580 * tcp: tcp_make_synack() should use sock_wmalloc - LP: #1240580 * tipc: set sk_err correctly when connection fails - LP: #1240580 * net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for max_delay - LP: #1240580 * ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO - LP: #1240580 * tg3: Don't turn off led on 5719 serdes port 0 - LP: #1240580 * vhost_net: poll vhost queue after marking DMA is done - LP: #1240580 * net: ipv6: tcp: fix potential use after free in tcp_v6_do_rcv - LP: #1240580 * drm/radeon/si: Add support for CP DMA to CS checker for compute v2 - LP: #1240580 * sfc: Fix efx_rx_buf_offset() for recycled pages - LP: #1240580 * cfq: explicitly use 64bit divide operation for 64bit arguments - LP: #1240580 * drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2) - LP: #1240580 * drm/ast: fix the ast open key function - LP: #1240580 * sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones - LP: #1240580 * tg3: Expand led off fix to include 5720 - LP: #1240580 * HID: provide a helper for validating hid reports - LP: #1240580 * HID: zeroplus: validate output report details - LP: #1240580 - CVE-2013-2889 * HID: LG: validate HID output report details - LP: #1240580 - CVE-2013-2893 * HID: lenovo-tpkbd: validate output report details - LP: #1240580 - CVE-2013-2894 * HID: validate feature and input report details - LP: #1240580 - CVE-2013-2897 * HID: logitech-dj: validate output report details - LP: #1240580 - CVE-2013-2895 * HID: multitouch: validate indexes details - LP: #1240580 - CVE-2013-2897 * HID: lenovo-tpkbd: fix leak if tpkbd_probe_tp fails - LP: #1240580 * drm/radeon: fix panel scaling with eDP and LVDS bridges - LP: #1240580 * cifs: fix filp leak in cifs_atomic_open() - LP: #1240580 * net: usb: cdc_ether: Use wwan interface for Telit modules - LP: #1240580 * usb: gadget: fix a bug and a WARN_ON in dummy-hcd - LP: #1240580 * drm/i915: do not update cursor in crtc mode set - LP: #1240580 * drm/i915: Don't enable the cursor on a disable pipe - LP: #1240580 * drm/ttm: fix the tt_populated check in ttm_tt_destroy() - LP: #1240580 * PCI / ACPI / PM: Clear pme_poll for devices in D3cold on wakeup - LP: #1240580 * serial: pch_uart: fix tty-kref leak in dma-rx path - LP: #1240580 * x86, efi: Don't map Boot Services on i386 - LP: #1240580 * ALSA: compress: Fix compress device unregister. - LP: #1240580 * dm snapshot: workaround for a false positive lockdep warning - LP: #1240580 * dm-snapshot: fix performance degradation due to small hash size - LP: #1240580 * drm/radeon: Make r100_cp_ring_info() and radeon_ring_gfx() safe (v2) - LP: #1240580 * ARM: 7837/3: fix Thumb-2 bug in AES assembler code - LP: #1240580 * x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically - LP: #1240580 * drm/radeon: disable tests/benchmarks if accel is disabled - LP: #1240580 * xhci: Fix oops happening after address device timeout - LP: #1240580 * xhci: Ensure a command structure points to the correct trb on the command ring - LP: #1240580 * drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER - LP: #1240580 * staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier. - LP: #1240580 * staging: vt6656: [BUG] iwctl_siwencodeext return if device not open - LP: #1240580 * USB: UHCI: accept very late isochronous URBs - LP: #1240580 * USB: OHCI: accept very late isochronous URBs - LP: #1240580 * USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd - LP: #1240580 * usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit - LP: #1240580 * hwmon: (applesmc) Check key count before proceeding - LP: #1240580 * fsl/usb: Resolve PHY_CLK_VLD instability issue for ULPI phy - LP: #1240580 * driver core : Fix use after free of dev->parent in device_shutdown - LP: #1240580 * USB: Fix breakage in ffs_fs_mount() - LP: #1240580 * usb: dwc3: pci: add support for BayTrail - LP: #1240580 * usb: dwc3: add support for Merrifield - LP: #1240580 * ASoC: max98095: a couple array underflows - LP: #1240580 * ASoC: ab8500-codec: info leak in anc_status_control_put() - LP: #1240580 * ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st() - LP: #1240580 * Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012. - LP: #1240580 * Bluetooth: Fix security level for peripheral role - LP: #1240580 * Bluetooth: Fix encryption key size for peripheral role - LP: #1240580 * Bluetooth: Add support for BCM20702A0 [0b05, 17cb] - LP: #1240580 * Bluetooth: Introduce a new HCI_RFKILLED flag - LP: #1240580 * rtlwifi: Align private space in rtl_priv struct - LP: #1240580 * p54usb: add USB ID for Corega WLUSB2GTST USB adapter - LP: #1240580 * mwifiex: fix hang issue for USB chipsets - LP: #1240580 * mwifiex: fix NULL pointer dereference in usb suspend handler - LP: #1240580 * fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing - LP: #1240580 * nilfs2: fix issue with race condition of competition between segments for dirty blocks - LP: #1240580 * mm: avoid reinserting isolated balloon pages into LRU lists - LP: #1240580 * USB: serial: option: Ignore card reader interface on Huawei E1750 - LP: #1240580 * gpio/omap: maintain GPIO and IRQ usage separately - LP: #1240580 * gpio/omap: auto-setup a GPIO when used as an IRQ - LP: #1240580 * ib_srpt: Destroy cm_id before destroying QP. - LP: #1240580 * powerpc: Fix parameter clobber in csum_partial_copy_generic() - LP: #1240580 * powerpc: Restore registers on error exit from csum_partial_copy_generic() - LP: #1240580 * powerpc/sysfs: Disable writing to PURR in guest mode - LP: #1240580 * powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() - LP: #1240580 * powerpc/vio: Fix modalias_show return values - LP: #1240580 * ib_srpt: always set response for task management - LP: #1240580 * xen/hvc: allow xenboot console to be used again - LP: #1240580 * net: Update the sysctl permissions handler to test effective uid/gid - LP: #1240580 * Linux 3.8.13.11 - LP: #1240580 -- Andy Whitcroft