Ubuntu
linux-raspi2 package

CVE-2014-4943

Bug #1341472 reported by Luis Henriques on 2014-07-14

260

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Fix Released	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-armadaxp (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-ec2 (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-flo (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-goldfish (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-raring (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Fix Committed	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-mako (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-manta (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned
linux-raspi2 (Ubuntu)	New	High	Unassigned
Precise	Invalid	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	New	High	Unassigned
Xenial	New	High	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	High	Unassigned
Trusty	Invalid	High	Unassigned
Vivid	Invalid	High	Unassigned
Wily	Invalid	High	Unassigned
Xenial	Invalid	High	Unassigned

Bug Description

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Break-Fix: - 3cf521f7dc87c031617fd47e4b7aa2593c2f3daf

See original description

Tags:

Related branches

lp://staging/ubuntu/precise-proposed/linux-lts-trusty

lp://staging/ubuntu/trusty-proposed/linux-keystone

lp://staging/ubuntu/precise-security/linux-lts-trusty

CVE References

Andy Whitcroft (apw) on 2014-07-14

Changed in linux-ec2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Lucid):
status:	New → Invalid

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

This bug was fixed in the package linux - 2.6.32-64.128

---------------
linux (2.6.32-64.128) lucid; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (2.6.32-64.127) lucid; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-2.6.32-62.126 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338946

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux (2.6.32-63.126) lucid; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1335875

[ Upstream Kernel Changes ]

  * net: check net.core.somaxconn sysctl values
    - LP: #1321293
  * sysctl net: Keep tcp_syn_retries inside the boundary
    - LP: #1321293
  * ethtool: Report link-down while interface is down
    - LP: #1335049
  * futex: Prevent attaching to kernel threads
    - LP: #1335049
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1335049
  * net: fix regression introduced in 2.6.32.62 by sysctl fixes
    - LP: #1335049
  * Linux 2.6.32.63
    - LP: #1335049
  * lib/lzo: Rename lzo1x_decompress.c to lzo1x_decompress_safe.c
    - LP: #1335313
    - CVE-2014-4608
  * lib/lzo: Update LZO compression to current upstream version
    - LP: #1335313
    - CVE-2014-4608
  * lzo: properly check for overruns
    - LP: #1335313
    - CVE-2014-4608
-- Luis Henriques <email address hidden> Mon, 14 Jul 2014 16:33:33 +0100

Changed in linux (Ubuntu Lucid):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

This bug was fixed in the package linux-ec2 - 2.6.32-368.84

---------------
linux-ec2 (2.6.32-368.84) lucid; urgency=low

[ Andy Whitcroft ]

* pull in missing CVE changelog
* Ubuntu-2.6.32-368.84

[ Ubuntu: 2.6.32-64.128 ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux-ec2 (2.6.32-368.83) lucid; urgency=low

[ Stefan Bader ]

  * Rebased to Ubuntu-2.6.32-64.127
  * Release Tracking Bug
    - LP: #1339215

[ Ubuntu: 2.6.32-64.127 ]

  * Merged back Ubuntu-2.6.32-62.126 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux-ec2 (2.6.32-367.82) lucid; urgency=low

[ Stefan Bader ]

  * Rebased to Ubuntu-2.6.32-63.126
  * Release Tracking Bug
    - LP: #1336142

[ Ubuntu: 2.6.32-63.126 ]

  * net: check net.core.somaxconn sysctl values
    - LP: #1321293
  * sysctl net: Keep tcp_syn_retries inside the boundary
    - LP: #1321293
  * ethtool: Report link-down while interface is down
    - LP: #1335049
  * futex: Prevent attaching to kernel threads
    - LP: #1335049
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1335049
  * net: fix regression introduced in 2.6.32.62 by sysctl fixes
    - LP: #1335049
  * Linux 2.6.32.63
    - LP: #1335049
  * lib/lzo: Rename lzo1x_decompress.c to lzo1x_decompress_safe.c
    - LP: #1335313
    - CVE-2014-4608
  * lib/lzo: Update LZO compression to current upstream version
    - LP: #1335313
    - CVE-2014-4608
  * lzo: properly check for overruns
    - LP: #1335313
    - CVE-2014-4608
-- Andy Whitcroft <email address hidden> Mon, 14 Jul 2014 17:31:51 +0100

Changed in linux-ec2 (Ubuntu Lucid):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

This bug was fixed in the package linux - 3.2.0-67.101

---------------
linux (3.2.0-67.101) precise; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.2.0-67.100) precise; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-3.2.0-65.99 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338654

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux (3.2.0-66.99) precise; urgency=low

* Release Tracking Bug
- LP: #1335906

[ Upstream Kernel Changes ]

  * skbuff: export skb_copy_ubufs
    - LP: #1298119
    - CVE-2014-0131
  * skbuff: add an api to orphan frags
    - LP: #1298119
    - CVE-2014-0131
  * skbuff: skb_segment: orphan frags before copying
    - LP: #1298119
    - CVE-2014-0131
  * lib/lzo: Rename lzo1x_decompress.c to lzo1x_decompress_safe.c
    - CVE-2014-4608
  * lib/lzo: Update LZO compression to current upstream version
    - CVE-2014-4608
  * lzo: properly check for overruns
    - CVE-2014-4608
  * KVM: x86 emulator: add support for vector alignment
    - LP: #1330177
  * KVM: x86: emulate movdqa
    - LP: #1330177
-- Luis Henriques <email address hidden> Mon, 14 Jul 2014 16:07:35 +0100

Changed in linux (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

This bug was fixed in the package linux-lts-quantal - 3.5.0-54.81~precise1

---------------
linux-lts-quantal (3.5.0-54.81~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux-lts-quantal (3.5.0-54.80~precise1) precise; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-lts-3.5.0-52.79 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338611

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux-lts-quantal (3.5.0-53.79~precise1) precise; urgency=low

[ Joseph Salisbury ]

* Release Tracking Bug
- LP: #1336400

[ Upstream Kernel Changes ]

  * skbuff: export skb_copy_ubufs
    - LP: #1298119
    - CVE-2014-0131
  * skbuff: add an api to orphan frags
    - LP: #1298119
    - CVE-2014-0131
  * skbuff: skb_segment: orphan frags before copying
    - LP: #1298119
    - CVE-2014-0131
  * media-device: fix infoleak in ioctl media_enum_entities()
    - LP: #1333609
    - CVE-2014-1739
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1325941
    - CVE-2014-3917
  * userns: Allow chown and setgid preservation
    - LP: #1329103
    - CVE-2014-4014
  * fs,userns: Change inode_capable to capable_wrt_inode_uidgid
    - LP: #1329103
    - CVE-2014-4014
  * target/rd: Refactor rd_build_device_space + rd_release_device_space
    - LP: #1333612
    - CVE-2014-4027
  * lib/lzo: Rename lzo1x_decompress.c to lzo1x_decompress_safe.c
    - CVE-2014-4608
  * lib/lzo: Update LZO compression to current upstream version
    - CVE-2014-4608
  * lzo: properly check for overruns
    - CVE-2014-4608
-- Luis Henriques <email address hidden> Mon, 14 Jul 2014 15:28:36 +0100

Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

Download full text (7.9 KiB)

This bug was fixed in the package linux-lts-saucy - 3.11.0-26.45~precise1

---------------
linux-lts-saucy (3.11.0-26.45~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.11.0-26.44) saucy; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-3.11.0-24.42 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338556

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux (3.11.0-25.43) saucy; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1336203

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-saucy - 3.11.0-26.45~precise1

---------------
linux-lts-saucy (3.11.0-26.45~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

* l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.11.0-26.44) saucy; urgency=low

[ Luis Henriques ]

* Merged back Ubuntu-3.11.0-24.42 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338556

[ Upstream Kernel Changes ]

* ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux (3.11.0-25.43) saucy; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1336203

[ Upstream Kernel Changes ]

* cfg80211: free sme on connection failures
    - LP: #1335084
  * sched: Sanitize irq accounting madness
    - LP: #1335084
  * sched: Use CPUPRI_NR_PRIORITIES instead of MAX_RT_PRIO in cpupri check
    - LP: #1335084
  * net: cpsw: fix null dereference at probe
    - LP: #1335084
  * mac80211: fix suspend vs. association race
    - LP: #1335084
  * mac80211: fix on-channel remain-on-channel
    - LP: #1335084
  * af_iucv: wrong mapping of sent and confirmed skbs
    - LP: #1335084
  * net: filter: s390: fix JIT address randomization
    - LP: #1335084
  * perf: Limit perf_event_attr::sample_period to 63 bits
    - LP: #1335084
  * perf: Prevent false warning in perf_swevent_add
    - LP: #1335084
  * drm/gf119-/disp: fix nasty bug which can clobber SOR0's clock setup
    - LP: #1335084
  * drm/radeon: also try GART for CPU accessed buffers
    - LP: #1335084
  * drm/radeon: handle non-VGA class pci devices with ATRM
    - LP: #1335084
  * drm/radeon: fix register typo on si
    - LP: #1335084
  * drm/radeon: avoid segfault on device open when accel is not working.
    - LP: #1335084
  * can: peak_pci: prevent use after free at netdev removal
    - LP: #1335084
  * nfsd4: remove lockowner when removing lock stateid
    - LP: #1335084
  * nfsd4: warn on finding lockowner without stateid's
    - LP: #1335084
  * hwpoison, hugetlb: lock_page/unlock_page does not match for handling a
    free hugepage
    - LP: #1335084
  * mm/memory-failure.c: fix memory leak by race between poison and
    unpoison
    - LP: #1335084
  * netfilter: ipv4: defrag: set local_df flag on defragmented skb
    - LP: #1335084
  * ARM: OMAP3: clock: Back-propagate rate change from cam_mclk to dpll4_m5
    on all OMAP3 platforms
    - LP: #1335084
  * dma: dw: allow shared interrupts
    - LP: #1335084
  * dmaengine: dw: went back to plain {request,free}_irq() calls
    - LP: #1335084
  * ARM: omap5: hwmod_data: Correct IDLEMODE for McPDM
    - LP: #1335084
  * Input: synaptics - add min/max quirk for the ThinkPad W540
    - LP: #1335084
  * futex: Add another early deadlock detection check
    - LP: #1335084
  * futex: Prevent attaching to kernel threads
    - LP: #1335084
  * ARM: OMAP4: Fix the boot regression with CPU_IDLE enabled
    - LP: #1335084
  * cpufreq: remove race while accessing cur_policy
    - LP: #1335084
  * cpufreq: cpu0: drop wrong devm usage
    - LP: #1335084
  * ARM: imx: fix error handling in ipu device registration
    - LP: #1335084
  * ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets
    - LP: #1335084
  * ARM: 8051/1: put_user: fix possible data corruption in put_user
    - LP: #1335084
  * ARM: 8064/1: fix v7-M signal return
    - LP: #1335084
  * Input: synaptics - T540p - unify with other LEN0034 models
    - LP: #1335084
  * drm/i915: Only copy back the modified fields to userspace from
    execbuffer
    - LP: #1335084
  * dm cache: always split discards on cache block boundaries
    - LP: #1335084
  * powerpc: Fix 64 bit builds with binutils 2.24
    - LP: #1335084
  * powerpc, kexec: Fix "Processor X is stuck" issue during kexec from ST
    mode
    - LP: #1335084
  * rtmutex: Fix deadlock detector for real
    - LP: #1335084
  * drm/radeon: don't allow RADEON_GEM_DOMAIN_CPU for command submission
    - LP: #1335084
  * audit: restore order of tty and ses fields in log output
    - LP: #1335084
  * drm/nouveau/pm/fan: drop the fan lock in fan_update() before
    rescheduling
    - LP: #1335084
  * leds: leds-pwm: properly clean up after probe failure
    - LP: #1335084
  * clk: vexpress: NULL dereference on error path
    - LP: #1335084
  * fix our current target reap infrastructure
    - LP: #1335084
  * dual scan thread bug fix
    - LP: #1335084
  * genirq: Provide irq_force_affinity fallback for non-SMP
    - LP: #1335084
  * i2c: designware: Mask all interrupts during i2c controller enable
    - LP: #1335084
  * crypto: s390 - fix aes,des ctr mode concurrency finding.
    - LP: #1335084
  * Staging: speakup: Move pasting into a work item
    - LP: #1335084
  * USB: Avoid runtime suspend loops for HCDs that can't handle
    suspend/resume
    - LP: #1335084
  * can: only rename enabled led triggers when changing the netdev name
    - LP: #1335084
  * USB: io_ti: fix firmware download on big-endian machines (part 2)
    - LP: #1335084
  * USB: ftdi_sio: add NovaTech OrionLXm product ID
    - LP: #1335084
  * USB: serial: option: add support for Novatel E371 PCIe card
    - LP: #1335084
  * USB: cdc-wdm: properly include types.h
    - LP: #1335084
  * md: always set MD_RECOVERY_INTR when aborting a reshape or other
    "resync".
    - LP: #1335084
  * xhci: delete endpoints from bandwidth list before freeing whole device
    - LP: #1335084
  * md: always set MD_RECOVERY_INTR when interrupting a reshape thread.
    - LP: #1335084
  * ALSA: hda/analog - Fix silent output on ASUS A8JN
    - LP: #1335084
  * ALSA: hda/realtek - Correction of fixup codes for PB V7900 laptop
    - LP: #1335084
  * ALSA: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup
    - LP: #1335084
  * iser-target: Add missing target_put_sess_cmd for ImmedateData failure
    - LP: #1335084
  * iscsi-target: Fix wrong buffer / buffer overrun in
    iscsi_change_param_value()
    - LP: #1335084
  * percpu-refcount: fix usage of this_cpu_ops
    - LP: #1335084
  * target: Fix alua_access_state attribute OOPs for un-configured devices
    - LP: #1335084
  * mm: rmap: fix use-after-free in __put_anon_vma
    - LP: #1335084
  * usb: cdc-wdm: export cdc-wdm uapi header
    - LP: #1335084
  * staging: comedi: ni_daq_700: add mux settling delay
    - LP: #1335084
  * kvm: free resources after canceling async_pf
    - LP: #1335084
  * kvm: remove .done from struct kvm_async_pf
    - LP: #1335084
  * KVM: async_pf: mm->mm_users can not pin apf->mm
    - LP: #1335084
  * mm/page-writeback.c: fix divide by zero in pos_ratio_polynom
    - LP: #1335084
  * dma: mv_xor: Flush descriptors before activating a channel
    - LP: #1335084
  * skbuff: skb_segment: orphan frags before copying
    - LP: #1335084
  * Target/iscsi,iser: Avoid accepting transport connections during stop
    stage
    - LP: #1335084
  * iser-target: Fix multi network portal shutdown regression
    - LP: #1335084
  * target: Allow READ_CAPACITY opcode in ALUA Standby access state
    - LP: #1335084
  * mm: compaction: reset cached scanner pfn's before reading them
    - LP: #1335084
  * mm: compaction: detect when scanners meet in isolate_freepages
    - LP: #1335084
  * MIPS: asm: thread_info: Add _TIF_SECCOMP flag
    - LP: #1335084
  * perf: Fix race in removing an event
    - LP: #1335084
  * hwmon: (ntc_thermistor) Fix dependencies
    - LP: #1335084
  * hwmon: (ntc_thermistor) Fix OF device ID mapping
    - LP: #1335084
  * fs,userns: Change inode_capable to capable_wrt_inode_uidgid
    - LP: #1335084
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1335084
  * megaraid: Use resource_size_t for PCI resources, not long
    - LP: #1335084
  * Linux 3.11.10.12
    - LP: #1335084
  * lzo: properly check for overruns
    - LP: #1335313
    - CVE-2014-4608
  * lz4: ensure length does not wrap
    - LP: #1335314
    - CVE-2014-4611
 -- Luis Henriques <luis.henriques@canonical.com>   Mon, 14 Jul 2014 14:23:48 +0100

Changed in linux-lts-saucy (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

Download full text (35.8 KiB)

This bug was fixed in the package linux-lts-trusty - 3.13.0-32.57~precise1

---------------
linux-lts-trusty (3.13.0-32.57~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.13.0-32.56) trusty; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-3.13.0-30.55 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338524

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699
  * hpsa: add new Smart Array PCI IDs (May 2014)
    - LP: #1337516

linux (3.13.0-31.55) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1336278

[ Andy Whitcroft ]

  * [Config] switch hyper-keyboard to virtual
    - LP: #1325306
  * [Packaging] linux-udeb-flavour -- standardise on linux prefix

[ dann frazier ]

* [Config] CONFIG_GPIO_DWAPB=m
- LP: #1334823

[ Feng Kan ]

  * SAUCE: (no-up) arm64: dts: Add Designware GPIO dts binding to APM
    X-Gene platform
    - LP: #1334823

[ John Johansen ]

* SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
- LP: #1308761

[ Kamal Mostafa ]

* [Config] updateconfigs ACPI_PROCFS_POWER=y after v3.13.11.4 rebase

[ Loc Ho ]

* SAUCE: (no-up) phy-xgene: Use correct tuning for Mustang
- LP: #1335636

[ Michael Ellerman ]

  * SAUCE: (no-up) powerpc/perf: Ensure all EBB register state is cleared
    on fork()
    - LP: #1328914

[ Ming Lei ]

* Revert "SAUCE: (no-up) rtc: Add X-Gene SoC Real Time Clock Driver"
- LP: #1274305

[ Suman Tripathi ]

  * SAUCE: (no-up) libahci: Implement the function ahci_restart_engine to
    restart the port dma engine.
    - LP: #1335645
  * SAUCE: (no-up) ata: Fix the dma state machine lockup for the IDENTIFY
    DEVICE PIO mode command.
    - LP: #1335645

[ Tim Gardner ]

  * [Config] CONFIG_POWERNV_CPUFREQ=y for powerpc, ppc64el
    - LP: #1324571
  * [Debian] Add UTS_UBUNTU_RELEASE_ABI to utsrelease.h
    - LP: #1327619
  * [Config] CONFIG_HAVE_MEMORYLESS_NODES=y
    - LP: #1332063
  * [Config] CONFIG_HID_RMI=m
    - LP: #1305522

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-trusty - 3.13.0-32.57~precise1

---------------
linux-lts-trusty (3.13.0-32.57~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

* l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.13.0-32.56) trusty; urgency=low

[ Luis Henriques ]

* Merged back Ubuntu-3.13.0-30.55 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338524

[ Upstream Kernel Changes ]

* ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699
  * hpsa: add new Smart Array PCI IDs (May 2014)
    - LP: #1337516

linux (3.13.0-31.55) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1336278

[ Andy Whitcroft ]

* [Config] switch hyper-keyboard to virtual
    - LP: #1325306
  * [Packaging] linux-udeb-flavour -- standardise on linux prefix

[ dann frazier ]

* [Config] CONFIG_GPIO_DWAPB=m
    - LP: #1334823

[ Feng Kan ]

* SAUCE: (no-up) arm64: dts: Add Designware GPIO dts binding to APM
    X-Gene platform
    - LP: #1334823

[ John Johansen ]

* SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
    - LP: #1308761

[ Kamal Mostafa ]

* [Config] updateconfigs ACPI_PROCFS_POWER=y after v3.13.11.4 rebase

[ Loc Ho ]

* SAUCE: (no-up) phy-xgene: Use correct tuning for Mustang
    - LP: #1335636

[ Michael Ellerman ]

* SAUCE: (no-up) powerpc/perf: Ensure all EBB register state is cleared
    on fork()
    - LP: #1328914

[ Ming Lei ]

* Revert "SAUCE: (no-up) rtc: Add X-Gene SoC Real Time Clock Driver"
    - LP: #1274305

[ Suman Tripathi ]

[ Tim Gardner ]

[ Upstream Kernel Changes ]

* Revert "offb: Add palette hack for little endian"
    - LP: #1333430
  * Revert "net: mvneta: fix usage as a module on RGMII configurations"
    - LP: #1333837
  * Revert "USB: serial: add usbid for dell wwan card to sierra.c"
    - LP: #1333837
  * Revert "macvlan : fix checksums error when we are in bridge mode"
    - LP: #1333838
  * serial: uart: add hw flow control support configuration
    - LP: #1328295
  * mm/numa: Remove BUG_ON() in __handle_mm_fault()
    - LP: #1323165
  * Tools: hv: Handle the case when the target file exists correctly
    - LP: #1306215
  * Documentation/devicetree/bindings: add documentation for the APM X-Gene
    SoC RTC DTS binding
    - LP: #1274305
  * drivers/rtc: add APM X-Gene SoC RTC driver
    - LP: #1274305
  * arm64: add APM X-Gene SoC RTC DTS entry
    - LP: #1274305
  * powerpc/perf: Add Power8 cache & TLB events
    - LP: #1328914
  * powerpc/perf: Configure BHRB filter before enabling PMU interrupts
    - LP: #1328914
  * powerpc/perf: Define perf_event_print_debug() to print PMU register
    values
    - LP: #1328914
  * powerpc: Add a cpu feature CPU_FTR_PMAO_BUG
    - LP: #1328914
  * powerpc/perf: Add lost exception workaround
    - LP: #1328914
  * powerpc/perf: Reject EBB events which specify a sample_type
    - LP: #1328914
  * powerpc/perf: Clean up the EBB hash defines a little
    - LP: #1328914
  * powerpc/perf: Avoid mutating event in power8_get_constraint()
    - LP: #1328914
  * powerpc/perf: Add BHRB constraint and IFM MMCRA handling for EBB
    - LP: #1328914
  * powerpc/perf: Enable BHRB access for EBB events
    - LP: #1328914
  * powerpc/perf: Fix handling of L3 events with bank == 1
    - LP: #1328914
  * Bluetooth: Add support for Intel Bluetooth device [8087:0a2a]
    - LP: #1329184
  * iwlwifi: mvm: disable beacon filtering
    - LP: #1293569
  * SUNRPC: Ensure that call_connect times out correctly
    - LP: #1322407
  * SUNRPC: Ensure call_connect_status() deals correctly with SOFTCONN
    tasks
    - LP: #1322407
  * bitops: Fix signedness of compile-time hweight implementations
    - LP: #1321791
  * cpumask.h: silence warning with -Wsign-compare
    - LP: #1321791
  * fbdev/fb.h: silence warning with -Wsign-compare
    - LP: #1321791
  * rtlwifi: make MSI support a module parameter
    - LP: #1296591
  * rtlwifi: rtl8188ee: add msi module parameter
    - LP: #1296591
  * rtlwifi: rtl8723be: add msi module parameter
    - LP: #1296591
  * net: avoid dependency of net_get_random_once on nop patching
    - LP: #1330671
  * x86-64, modify_ldt: Make support for 16-bit segments a runtime option
    - LP: #1328965
  * ALSA: usb-audio: Prevent printk ratelimiting from spamming kernel log
    while DEBUG not defined
    - LP: #1319457
  * btrfs: fix defrag 32-bit integer overflow
    - LP: #1324953
  * dell-laptop: Only install the i8042 filter when rfkill is active
    - LP: #1289238
  * kthread: ensure locality of task_struct allocations
    - LP: #1332063
  * slub: search partial list on numa_mem_id(), instead of numa_node_id()
    - LP: #1332063
  * powerpc/numa: Enable USE_PERCPU_NUMA_NODE_ID
    - LP: #1332063
  * powerpc/numa: Enable CONFIG_HAVE_MEMORYLESS_NODES
    - LP: #1332063
  * drm/i915: Allow user modes to exceed DVI 165MHz limit
    - LP: #1332220
  * HID: rmi: introduce RMI driver for Synaptics touchpads
    - LP: #1305522
  * HID: rmi: do not stop the device at the end of probe
    - LP: #1305522
  * HID: rmi: check for the existence of some optional queries before
    reading query 12
    - LP: #1305522
  * HID: rmi: do not fetch more than 16 bytes in a query
    - LP: #1305522
  * HID: rmi: fix wrong struct field name
    - LP: #1305522
  * HID: rmi: fix masks for x and w_x data
    - LP: #1305522
  * HID: rmi: do not handle touchscreens through hid-rmi
    - LP: #1305522
  * ipv6: Fix regression caused by efe4208 in udp_v6_mcast_next()
    - LP: #1332420
  * HID: core: do not scan constant input report
    - LP: #1333837
  * drm/radeon: fix audio pin counts for DCE6+ (v2)
    - LP: #1333837
  * mac80211: fix software remain-on-channel implementation
    - LP: #1333837
  * mac80211: exclude AP_VLAN interfaces from tx power calculation
    - LP: #1333837
  * iwlwifi: add new 7265 HW IDs
    - LP: #1333837
  * parisc: fix epoll_pwait syscall on compat kernel
    - LP: #1333837
  * iwlwifi: add MODULE_FIRMWARE for 7265
    - LP: #1333837
  * dma: edma: fix incorrect SG list handling
    - LP: #1333837
  * ALSA: hda/realtek - Add support of ALC288 codec
    - LP: #1333837
  * xen/spinlock: Don't enable them unconditionally.
    - LP: #1333837
  * tick-common: Fix wrong check in tick_check_replacement()
    - LP: #1333837
  * tick-sched: Check tick_nohz_enabled in tick_nohz_switch_to_nohz()
    - LP: #1333837
  * ALSA: hda - add headset mic detect quirk for a Dell laptop
    - LP: #1297581, #1333837
  * ALSA: hda/realtek - Add headset Mic support for Dell machine
    - LP: #1333837
  * staging: r8188eu: Calling rtw_get_stainfo() with a NULL sta_addr will
    return NULL
    - LP: #1333837
  * cifs: Wait for writebacks to complete before attempting write.
    - LP: #1333837
  * mlx4_en: don't use napi_synchronize inside mlx4_en_netpoll
    - LP: #1333837
  * mei: ignore client writing state during cb completion
    - LP: #1333837
  * staging: r8712u: Fix case where ethtype was never obtained and always
    be checked against 0
    - LP: #1333837
  * staging: r8188eu: Fix case where ethtype was never obtained and always
    be checked against 0
    - LP: #1333837
  * USB: serial: ftdi_sio: add id for Brainboxes serial cards
    - LP: #1333837
  * usb: option driver, add support for Telit UE910v2
    - LP: #1333837
  * USB: cp210x: Add 8281 (Nanotec Plug & Drive)
    - LP: #1333837
  * USB: pl2303: add ids for Hewlett-Packard HP POS pole displays
    - LP: #1333837
  * USB: usb_wwan: fix handling of missing bulk endpoints
    - LP: #1333837
  * USB: fix crash during hotplug of PCI USB controller card
    - LP: #1333837
  * USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM
    driver
    - LP: #1333837
  * Drivers: hv: vmbus: Negotiate version 3.0 when running on ws2012r2
    hosts
    - LP: #1333837
  * serial: omap: Fix missing pm_runtime_resume handling by simplifying
    code
    - LP: #1333837
  * drm/radeon: disable mclk dpm on R7 260X
    - LP: #1333837
  * drm/radeon: fix runpm handling on APUs (v4)
    - LP: #1333837
  * drm/radeon: add support for newer mc ucode on SI (v2)
    - LP: #1333837
  * drm/radeon: add support for newer mc ucode on CI (v2)
    - LP: #1333837
  * drm/radeon: re-enable mclk dpm on R7 260X asics
    - LP: #1333837
  * drm/radeon: memory leak on bo reservation failure. v2
    - LP: #1333837
  * drm/radeon/si: make sure mc ucode is loaded before checking the size
    - LP: #1333837
  * drm/radeon/ci: make sure mc ucode is loaded before checking the size
    - LP: #1333837
  * init/Kconfig: move the trusted keyring config option to general setup
    - LP: #1333837
  * mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
    - LP: #1333837
  * thp: close race between split and zap huge pages
    - LP: #1333837
  * coredump: fix va_list corruption
    - LP: #1333837
  * powerpc/tm: Disable IRQ in tm_recheckpoint
    - LP: #1333837
  * ACPI / EC: Process rather than discard events in acpi_ec_clear
    - LP: #1333837
  * ath9k: Fix sequence number assignment for non-data frames
    - LP: #1333837
  * xhci: Switch Intel Lynx Point ports to EHCI on shutdown.
    - LP: #1333837
  * iio: adc: at91_adc: Repair broken platform_data support
    - LP: #1333837
  * iio: querying buffer scan_mask should return 0/1
    - LP: #1333837
  * iio: cm36651: Fix i2c client leak and possible NULL pointer dereference
    - LP: #1333837
  * libata: Update queued trim blacklist for M5x0 drives
    - LP: #1333837
  * pata_at91: fix ata_host_activate() failure handling
    - LP: #1333837
  * ext4: avoid possible overflow in ext4_map_blocks()
    - LP: #1333837
  * ext4: FIBMAP ioctl causes BUG_ON due to handle EXT_MAX_BLOCKS
    - LP: #1333837
  * ext4: note the error in ext4_end_bio()
    - LP: #1333837
  * ext4: fix jbd2 warning under heavy xattr load
    - LP: #1333837
  * ext4: move ext4_update_i_disksize() into mpage_map_and_submit_extent()
    - LP: #1333837
  * ext4: use i_size_read in ext4_unaligned_aio()
    - LP: #1333837
  * locks: allow __break_lease to sleep even when break_time is 0
    - LP: #1333837
  * usb: gadget: zero: Fix SuperSpeed enumeration for alternate setting 1
    - LP: #1333837
  * ahci: do not request irq for dummy port
    - LP: #1333837
  * genirq: Allow forcing cpu affinity of interrupts
    - LP: #1333837
  * irqchip: Gic: Support forced affinity setting
    - LP: #1333837
  * clocksource: Exynos_mct: Use irq_force_affinity() in cpu bringup
    - LP: #1333837
  * clocksource: Exynos_mct: Register clock event after request_irq()
    - LP: #1333837
  * nfsd: set timeparms.to_maxval in setup_callback_client
    - LP: #1333837
  * ahci: Do not receive interrupts sent by dummy ports
    - LP: #1333837
  * libata/ahci: accommodate tag ordered controllers
    - LP: #1333837
  * drm/radeon: disable dpm on rv770 by default
    - LP: #1333837
  * Input: synaptics - add min/max quirk for ThinkPad T431s, L440, L540, S1
    Yoga and X1
    - LP: #1333837
  * drm/radeon: fix count in cik_sdma_ring_test()
    - LP: #1333837
  * drm/radeon: properly unregister hwmon interface (v2)
    - LP: #1333837
  * drm/radeon/pm: don't walk the crtc list before it has been initialized
    (v2)
    - LP: #1333837
  * drm/radeon: fix ATPX detection on non-VGA GPUs
    - LP: #1333837
  * drm/radeon: don't allow runpm=1 on systems with out ATPX
    - LP: #1333837
  * mm: make fixup_user_fault() check the vma access rights too
    - LP: #1333837
  * ARM: 8027/1: fix do_div() bug in big-endian systems
    - LP: #1333837
  * ARM: 8030/1: ARM : kdump : add arch_crash_save_vmcoreinfo
    - LP: #1333837
  * ARM: pxa: hx4700.h: include "irqs.h" for PXA_NR_BUILTIN_GPIO
    - LP: #1333837
  * ARM: tegra: remove UART5/UARTE from tegra124.dtsi
    - LP: #1333837
  * USB: serial: fix sysfs-attribute removal deadlock
    - LP: #1333837
  * 8250_core: Fix unwanted TX chars write
    - LP: #1333837
  * serial: 8250: Fix thread unsafe __dma_tx_complete function
    - LP: #1333837
  * Btrfs: fix inode caching vs tree log
    - LP: #1333837
  * xhci: For streams the css flag most be read from the stream-ctx on ep
    stop
    - LP: #1333837
  * usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb
    - LP: #1333837
  * USB: io_ti: fix firmware download on big-endian machines
    - LP: #1333837
  * usb: qcserial: add Sierra Wireless EM7355
    - LP: #1333837
  * usb: qcserial: add Sierra Wireless MC73xx
    - LP: #1333837
  * usb: qcserial: add Sierra Wireless MC7305/MC7355
    - LP: #1333837
  * usb: option: add Olivetti Olicard 500
    - LP: #1333837
  * usb: option: add Alcatel L800MA
    - LP: #1333837
  * usb: option: add and update a number of CMOTech devices
    - LP: #1333837
  * word-at-a-time: avoid undefined behaviour in zero_bytemask macro
    - LP: #1333837
  * s390/chsc: fix SEI usage on old FW levels
    - LP: #1333837
  * irqchip: armada-370-xp: fix invalid cast of signed value into unsigned
    variable
    - LP: #1333837
  * irqchip: armada-370-xp: implement the ->check_device() msi_chip
    operation
    - LP: #1333837
  * irqchip: armada-370-xp: Fix releasing of MSIs
    - LP: #1333837
  * ASoC: dapm: Fix widget double free with auto-disable DAPM kcontrol
    - LP: #1333837
  * drm/i915: Don't check gmch state on inherited configs
    - LP: #1333837
  * drm/vmwgfx: Make sure user-space can't DMA across buffer object
    boundaries v2
    - LP: #1333837
  * of/irq: do irq resolution in platform_get_irq
    - LP: #1333837
  * s390/bpf,jit: initialize A register if 1st insn is BPF_S_LDX_B_MSH
    - LP: #1333837
  * drm/i915: Don't WARN nor handle unexpected hpd interrupts on gmch
    platforms
    - LP: #1333837
  * module: remove warning about waiting module removal.
    - LP: #1333837
  * ALSA: hda - add headset mic detect quirk for a Dell laptop
    - LP: #1297581, #1333837
  * arm: KVM: fix possible misalignment of PGDs and bounce page
    - LP: #1333837
  * KVM: ARM: vgic: Fix sgi dispatch problem
    - LP: #1333837
  * KVM: async_pf: mm->mm_users can not pin apf->mm
    - LP: #1333837
  * ftrace/module: Hardcode ftrace_module_init() call into load_module()
    - LP: #1333837
  * [SCSI] mpt2sas: Don't disable device twice at suspend.
    - LP: #1333837
  * [SCSI] virtio-scsi: Skip setting affinity on uninitialized vq
    - LP: #1333837
  * drivercore: deferral race condition fix
    - LP: #1333837
  * hrtimer: Prevent all reprogramming if hang detected
    - LP: #1333837
  * hrtimer: Prevent remote enqueue of leftmost timers
    - LP: #1333837
  * timer: Prevent overflow in apply_slack
    - LP: #1333837
  * ARC: !PREEMPT: Ensure Return to kernel mode is IRQ safe
    - LP: #1333837
  * aio: fix potential leak in aio_run_iocb().
    - LP: #1333837
  * dm cache: fix writethrough mode quiescing in cache_map
    - LP: #1333837
  * fix races between __d_instantiate() and checks of dentry flags
    - LP: #1333837
  * net: Fix ns_capable check in sock_diag_put_filterinfo
    - LP: #1333837
  * rt2x00: fix beaconing on USB
    - LP: #1333837
  * rtlwifi: rtl8188ee: initialize packet_beacon
    - LP: #1333837
  * Input: synaptics - add min/max quirk for ThinkPad Edge E431
    - LP: #1333837
  * Input: atkbd - fix keyboard not working on some LG laptops
    - LP: #1333837
  * Bluetooth: Fix triggering BR/EDR L2CAP Connect too early
    - LP: #1333837
  * drm/i915: Break encoder->crtc link separately in intel_sanitize_crtc()
    - LP: #1333837
  * iio:imu:mpu6050: Fixed segfault in Invensens MPU driver due to null
    dereference
    - LP: #1333837
  * ALSA: hda - add headset mic detect quirk for a Dell laptop
    - LP: #1297581, #1333837
  * rtlwifi: rtl8192se: Fix regression due to commit 1bf4bbb
    - LP: #1333837
  * rtl8192cu: Fix unbalanced irq enable in error path of rtl92cu_hw_init()
    - LP: #1333837
  * drm/radeon/uvd: use lower clocks on old UVD to boot v2
    - LP: #1333837
  * drm/radeon: use pflip irq on R600+ v2
    - LP: #1333837
  * drm/radeon: check buffer relocation offset
    - LP: #1333837
  * drm/nouveau/acpi: allow non-optimus setups to load vbios from acpi
    - LP: #1333837
  * drm/nouveau: fix another lock unbalance in nouveau_crtc_page_flip
    - LP: #1333837
  * ALSA: usb-audio: work around corrupted TEAC UD-H01 feedback data
    - LP: #1333837
  * USB: OHCI: fix problem with global suspend on ATI controllers
    - LP: #1333837
  * usb: qcserial: add a number of Dell devices
    - LP: #1333837
  * usb: storage: shuttle_usbat: fix discs being detected twice
    - LP: #1333837
  * fsl-usb: do not test for PHY_CLK_VALID bit on controller version 1.6
    - LP: #1333837
  * tty: serial: 8250_core.c Bug fix for Exar chips.
    - LP: #1333837
  * drivers/tty/hvc: don't free hvc_console_setup after init
    - LP: #1333837
  * tty: Fix lockless tty buffer race
    - LP: #1333837
  * USB: Nokia 305 should be treated as unusual dev
    - LP: #1333837
  * USB: Nokia 5300 should be treated as unusual dev
    - LP: #1333837
  * HID: add NO_INIT_REPORTS quirk for Synaptics Touch Pad V 103S
    - LP: #1333837
  * ALSA: hda - hdmi: Set converter channel count even without sink
    - LP: #1333837
  * Input: elantech - fix touchpad initialization on Gigabyte U2442
    - LP: #1333837
  * posix_acl: handle NULL ACL in posix_acl_equiv_mode
    - LP: #1333837
  * mm/page-writeback.c: fix divide by zero in pos_ratio_polynom
    - LP: #1333837
  * mm: compaction: detect when scanners meet in isolate_freepages
    - LP: #1333837
  * mm/compaction: make isolate_freepages start at pageblock boundary
    - LP: #1333837
  * autofs: fix lockref lookup
    - LP: #1333837
  * libata: Blacklist queued trim for Crucial M500
    - LP: #1333837
  * Linux 3.13.11.3
    - LP: #1333837
  * net: sctp: wake up all assocs if sndbuf policy is per socket
    - LP: #1333838
  * net: sctp: test if association is dead in sctp_wake_up_waiters
    - LP: #1333838
  * l2tp: take PMTU from tunnel UDP socket
    - LP: #1333838
  * net: core: don't account for udp header size when computing seglen
    - LP: #1333838
  * bonding: Remove debug_fs files when module init fails
    - LP: #1333838
  * bridge: Fix double free and memory leak around br_allowed_ingress
    - LP: #1333838
  * ipv6: Limit mtu to 65575 bytes
    - LP: #1333838
  * gre: don't allow to add the same tunnel twice
    - LP: #1333838
  * vti: don't allow to add the same tunnel twice
    - LP: #1333838
  * ipv4: return valid RTA_IIF on ip route get
    - LP: #1333838
  * filter: prevent nla extensions to peek beyond the end of the message
    - LP: #1333838
  * ip6_gre: don't allow to remove the fb_tunnel_dev
    - LP: #1333838
  * vlan: Fix lockdep warning when vlan dev handle notification
    - LP: #1333838
  * net: Find the nesting level of a given device by type.
    - LP: #1333838
  * net: Allow for more then a single subclass for netif_addr_lock
    - LP: #1333838
  * vlan: Fix lockdep warning with stacked vlan devices.
    - LP: #1333838
  * macvlan: Fix lockdep warnings with stacked macvlan devices
    - LP: #1333838
  * tg3: update rx_jumbo_pending ring param only when jumbo frames are
    enabled
    - LP: #1333838
  * net: sctp: cache auth_enable per endpoint
    - LP: #1333838
  * rtnetlink: Warn when interface's information won't fit in our packet
    - LP: #1333838
  * rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF
    is set
    - LP: #1333838
  * ipv6: fib: fix fib dump restart
    - LP: #1333838
  * bridge: Handle IFLA_ADDRESS correctly when creating bridge device
    - LP: #1333838
  * sctp: reset flowi4_oif parameter on route lookup
    - LP: #1333838
  * net: qmi_wwan: add Sierra Wireless EM7355
    - LP: #1333838
  * net: qmi_wwan: add Sierra Wireless MC73xx
    - LP: #1333838
  * net: qmi_wwan: add Sierra Wireless MC7305/MC7355
    - LP: #1333838
  * net: qmi_wwan: add Olivetti Olicard 500
    - LP: #1333838
  * net: qmi_wwan: add Alcatel L800MA
    - LP: #1333838
  * net: qmi_wwan: add a number of CMOTech devices
    - LP: #1333838
  * net: qmi_wwan: add a number of Dell devices
    - LP: #1333838
  * slip: fix spinlock variant
    - LP: #1333838
  * net: sctp: Potentially-Failed state should not be reached from
    unconfirmed state
    - LP: #1333838
  * net: sctp: Don't transition to PF state when transport has exhausted
    'Path.Max.Retrans'.
    - LP: #1333838
  * mactap: Fix checksum errors for non-gso packets in bridge mode
    - LP: #1333838
  * tcp_cubic: fix the range of delayed_ack
    - LP: #1333838
  * vsock: Make transport the proto owner
    - LP: #1333838
  * net: cdc_ncm: fix buffer overflow
    - LP: #1333838
  * ip_tunnel: Set network header properly for IP_ECN_decapsulate()
    - LP: #1333838
  * net: cdc_mbim: __vlan_find_dev_deep need rcu_read_lock
    - LP: #1333838
  * net: ipv4: ip_forward: fix inverted local_df test
    - LP: #1333838
  * net: ipv6: send pkttoobig immediately if orig frag size > mtu
    - LP: #1333838
  * ipv4: fib_semantics: increment fib_info_cnt after fib_info allocation
    - LP: #1333838
  * net: cdc_mbim: handle unaccelerated VLAN tagged frames
    - LP: #1333838
  * macvlan: Don't propagate IFF_ALLMULTI changes on down interfaces.
    - LP: #1333838
  * sfc: fix calling of free_irq with already free vector
    - LP: #1333838
  * ip6_tunnel: fix potential NULL pointer dereference
    - LP: #1333838
  * net: filter: x86: fix JIT address randomization
    - LP: #1333838
  * net: filter: s390: fix JIT address randomization
    - LP: #1333838
  * ipv6: fix calculation of option len in ip6_append_data
    - LP: #1333838
  * rtnetlink: wait for unregistering devices in rtnl_link_unregister()
    - LP: #1333838
  * net: gro: make sure skb->cb[] initial content has not to be zero
    - LP: #1333838
  * batman-adv: fix reference counting imbalance while sending fragment
    - LP: #1333838
  * batman-adv: increase orig refcount when storing ref in gw_node
    - LP: #1333838
  * batman-adv: fix local TT check for outgoing arp requests in DAT
    - LP: #1333838
  * ip_tunnel: Initialize the fallback device properly
    - LP: #1333838
  * ipv4: initialise the itag variable in __mkroute_input
    - LP: #1333838
  * net-gro: reset skb->truesize in napi_reuse_skb()
    - LP: #1333838
  * netfilter: ipv4: defrag: set local_df flag on defragmented skb
    - LP: #1333838
  * ima: introduce ima_kernel_read()
    - LP: #1333838
  * ima: audit log files opened with O_DIRECT flag
    - LP: #1333838
  * percpu: make pcpu_alloc_chunk() use pcpu_mem_free() instead of kfree()
    - LP: #1333838
  * workqueue: fix bugs in wq_update_unbound_numa() failure path
    - LP: #1333838
  * [media] fc2580: fix tuning failure on 32-bit arch
    - LP: #1333838
  * memory: mvebu-devbus: fix the conversion of the bus width
    - LP: #1333838
  * ARM: orion5x: fix target ID for crypto SRAM window
    - LP: #1333838
  * workqueue: make rescuer_thread() empty wq->maydays list before exiting
    - LP: #1333838
  * workqueue: fix a possible race condition between rescuer and
    pwq-release
    - LP: #1333838
  * spi: core: Ignore unsupported Dual/Quad Transfer Mode bits
    - LP: #1333838
  * device_cgroup: rework device access check and exception checking
    - LP: #1333838
  * PCI: mvebu: fix off-by-one in the computed size of the mbus windows
    - LP: #1333838
  * bus: mvebu-mbus: allow several windows with the same target/attribute
    - LP: #1333838
  * PCI: mvebu: split PCIe BARs into multiple MBus windows when needed
    - LP: #1333838
  * ARM: mvebu: fix NOR bus-width in Armada XP GP Device Tree
    - LP: #1333838
  * ARM: mvebu: fix NOR bus-width in Armada XP DB Device Tree
    - LP: #1333838
  * ARM: mvebu: fix NOR bus-width in Armada XP OpenBlocks AX3 Device Tree
    - LP: #1333838
  * crypto: caam - add allocation failure handling in SPRINTFCAT macro
    - LP: #1333838
  * ARM: common: edma: Fix xbar mapping
    - LP: #1333838
  * clk: Fix double free due to devm_clk_register()
    - LP: #1333838
  * [media] media-device: fix infoleak in ioctl media_enum_entities()
    - LP: #1333838
  * ARM: dts: kirkwood: fix mislocated pcie-controller nodes
    - LP: #1333838
  * device_cgroup: check if exception removal is allowed
    - LP: #1333838
  * md: avoid possible spinning md thread at shutdown.
    - LP: #1333838
  * ACPI: Remove Kconfig symbol ACPI_PROCFS
    - LP: #1333838
  * ACPI: Revert "ACPI: Remove CONFIG_ACPI_PROCFS_POWER and cm_sbsc.c"
    - LP: #1333838
  * ACPI: Revert "ACPI / Battery: Remove battery's proc directory"
    - LP: #1333838
  * NFSd: Move default initialisers from create_client() to alloc_client()
    - LP: #1333838
  * NFSd: call rpc_destroy_wait_queue() from free_client()
    - LP: #1333838
  * genirq: Provide irq_force_affinity fallback for non-SMP
    - LP: #1333838
  * libata: clean up ZPODD when a port is detached
    - LP: #1333838
  * ACPI / blacklist: Add dmi_enable_osi_linux quirk for Asus EEE PC 1015PX
    - LP: #1333838
  * ACPI: Revert "ACPI / AC: convert ACPI ac driver to platform bus"
    - LP: #1333838
  * ACPI / processor: do not mark present at boot but not onlined CPU as
    onlined
    - LP: #1333838
  * NFSD: Call ->set_acl with a NULL ACL structure if no entries
    - LP: #1333838
  * ALSA: hda - add headset mic detect quirks for three Dell laptops
    - LP: #1297581, #1333838
  * gpio: mcp23s08: Bug fix of SPI device tree registration.
    - LP: #1333838
  * drm/i915/vlv: reset VLV media force wake request register
    - LP: #1333838
  * ARM: dts: i.MX53: Fix ipu register space size
    - LP: #1333838
  * mm, thp: close race between mremap() and split_huge_page()
    - LP: #1333838
  * intel_pstate: Set turbo VID for BayTrail
    - LP: #1333838
  * powerpc/powernv: Reset root port in firmware
    - LP: #1333838
  * hrtimer: Set expiry time before switch_hrtimer_base()
    - LP: #1333838
  * hwmon: (emc1403) fix inverted store_hyst()
    - LP: #1333838
  * hwmon: (emc1403) Fix resource leak on module unload
    - LP: #1333838
  * hwmon: (emc1403) Support full range of known chip revision numbers
    - LP: #1333838
  * iommu/amd: Fix interrupt remapping for aliased devices
    - LP: #1333838
  * ASoC: wm8962: Update register CLASS_D_CONTROL_1 to be non-volatile
    - LP: #1333838
  * [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel
    from user-space
    - LP: #1333838
  * [media] V4L2: fix VIDIOC_CREATE_BUFS in 64- / 32-bit compatibility mode
    - LP: #1333838
  * x86, mm, hugetlb: Add missing TLB page invalidation for hugetlb_cow()
    - LP: #1333838
  * i2c: designware: Mask all interrupts during i2c controller enable
    - LP: #1333838
  * i2c: s3c2410: resume race fix
    - LP: #1333838
  * i2c: rcar: bail out on zero length transfers
    - LP: #1333838
  * dm crypt: fix cpu hotplug crash by removing per-cpu structure
    - LP: #1333838
  * metag: fix memory barriers
    - LP: #1333838
  * metag: Reduce maximum stack size to 256MB
    - LP: #1333838
  * drm/i915: restore backlight precision when converting from ACPI
    - LP: #1333838
  * drm/i915: Increase WM memory latency values on SNB
    - LP: #1333838
  * PCI: shpchp: Check bridge's secondary (not primary) bus speed
    - LP: #1333838
  * parisc: ratelimit userspace segfault printing
    - LP: #1333838
  * parisc: Improve LWS-CAS performance
    - LP: #1333838
  * Target/iser: Fix wrong connection requests list addition
    - LP: #1333838
  * Target/iser: Fix iscsit_accept_np and rdma_cm racy flow
    - LP: #1333838
  * iscsi-target: Change BUG_ON to REJECT in iscsit_process_nop_out
    - LP: #1333838
  * tcm_fc: Fix free-after-use regression in ft_free_cmd
    - LP: #1333838
  * target: Don't allow setting WC emulation if device doesn't support
    - LP: #1333838
  * arm: dts: Fix missing device_type="memory" for ste-ccu8540
    - LP: #1333838
  * mips: dts: Fix missing device_type="memory" property in memory nodes
    - LP: #1333838
  * arm64: fix pud_huge() for 2-level pagetables
    - LP: #1333838
  * libceph: fix corruption when using page_count 0 page in rbd
    - LP: #1333838
  * clk: tegra: use pll_ref as the pll_e parent
    - LP: #1333838
  * clk: tegra: Fix wrong value written to PLLE_AUX
    - LP: #1333838
  * target: fix memory leak on XCOPY
    - LP: #1333838
  * sysfs: make sure read buffer is zeroed
    - LP: #1333838
  * cfg80211: free sme on connection failures
    - LP: #1333838
  * sched: Sanitize irq accounting madness
    - LP: #1333838
  * sched: Use CPUPRI_NR_PRIORITIES instead of MAX_RT_PRIO in cpupri check
    - LP: #1333838
  * mac80211: fix suspend vs. association race
    - LP: #1333838
  * mac80211: fix on-channel remain-on-channel
    - LP: #1333838
  * af_iucv: wrong mapping of sent and confirmed skbs
    - LP: #1333838
  * perf: Limit perf_event_attr::sample_period to 63 bits
    - LP: #1333838
  * perf: Prevent false warning in perf_swevent_add
    - LP: #1333838
  * drm/gf119-/disp: fix nasty bug which can clobber SOR0's clock setup
    - LP: #1333838
  * drm/radeon: also try GART for CPU accessed buffers
    - LP: #1333838
  * drm/radeon: handle non-VGA class pci devices with ATRM
    - LP: #1333838
  * drm/radeon: fix register typo on si
    - LP: #1333838
  * drm/radeon: avoid segfault on device open when accel is not working.
    - LP: #1333838
  * drm/radeon/pm: don't allow debugfs/sysfs access when PX card is off
    (v2)
    - LP: #1333838
  * can: peak_pci: prevent use after free at netdev removal
    - LP: #1333838
  * nfsd4: remove lockowner when removing lock stateid
    - LP: #1333838
  * nfsd4: warn on finding lockowner without stateid's
    - LP: #1333838
  * dma: mv_xor: Flush descriptors before activating a channel
    - LP: #1333838
  * dmaengine: fix dmaengine_unmap failure
    - LP: #1333838
  * hwpoison, hugetlb: lock_page/unlock_page does not match for handling a
    free hugepage
    - LP: #1333838
  * mm/memory-failure.c: fix memory leak by race between poison and
    unpoison
    - LP: #1333838
  * ARM: OMAP3: clock: Back-propagate rate change from cam_mclk to dpll4_m5
    on all OMAP3 platforms
    - LP: #1333838
  * dmaengine: dw: went back to plain {request,free}_irq() calls
    - LP: #1333838
  * ARM: omap5: hwmod_data: Correct IDLEMODE for McPDM
    - LP: #1333838
  * Input: synaptics - add min/max quirk for the ThinkPad W540
    - LP: #1333838
  * ARM: OMAP2+: nand: Fix NAND on OMAP2 and OMAP3 boards
    - LP: #1333838
  * futex: Add another early deadlock detection check
    - LP: #1333838
  * futex: Prevent attaching to kernel threads
    - LP: #1333838
  * ARM: OMAP4: Fix the boot regression with CPU_IDLE enabled
    - LP: #1333838
  * cpufreq: remove race while accessing cur_policy
    - LP: #1333838
  * cpufreq: cpu0: drop wrong devm usage
    - LP: #1333838
  * ARM: imx: fix error handling in ipu device registration
    - LP: #1333838
  * ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets
    - LP: #1333838
  * ARM: 8051/1: put_user: fix possible data corruption in put_user
    - LP: #1333838
  * ARM: 8064/1: fix v7-M signal return
    - LP: #1333838
  * Input: synaptics - T540p - unify with other LEN0034 models
    - LP: #1333838
  * drm/i915: Only copy back the modified fields to userspace from
    execbuffer
    - LP: #1333838
  * dm cache: always split discards on cache block boundaries
    - LP: #1333838
  * virtio_blk: don't crash, report error if virtqueue is broken.
    - LP: #1333838
  * virtio_blk: fix race between start and stop queue
    - LP: #1333838
  * powerpc: Fix 64 bit builds with binutils 2.24
    - LP: #1333838
  * powerpc, kexec: Fix "Processor X is stuck" issue during kexec from ST
    mode
    - LP: #1333838
  * rtmutex: Fix deadlock detector for real
    - LP: #1333838
  * drm/radeon: avoid crash if VM command submission isn't available
    - LP: #1333838
  * drm/radeon: don't allow RADEON_GEM_DOMAIN_CPU for command submission
    - LP: #1333838
  * iwlwifi: mvm: fix setting channel in monitor mode
    - LP: #1333838
  * Staging: speakup: Move pasting into a work item
    - LP: #1333838
  * USB: Avoid runtime suspend loops for HCDs that can't handle
    suspend/resume
    - LP: #1333838
  * can: only rename enabled led triggers when changing the netdev name
    - LP: #1333838
  * USB: io_ti: fix firmware download on big-endian machines (part 2)
    - LP: #1333838
  * USB: ftdi_sio: add NovaTech OrionLXm product ID
    - LP: #1333838
  * USB: serial: option: add support for Novatel E371 PCIe card
    - LP: #1333838
  * USB: cdc-wdm: properly include types.h
    - LP: #1333838
  * md: always set MD_RECOVERY_INTR when aborting a reshape or other
    "resync".
    - LP: #1333838
  * xhci: delete endpoints from bandwidth list before freeing whole device
    - LP: #1333838
  * md: always set MD_RECOVERY_INTR when interrupting a reshape thread.
    - LP: #1333838
  * ALSA: hda/analog - Fix silent output on ASUS A8JN
    - LP: #1333838
  * drm/radeon/dpm: resume fixes for some systems
    - LP: #1333838
  * drm/radeon: use the CP DMA on CIK
    - LP: #1333838
  * ALSA: hda/realtek - Correction of fixup codes for PB V7900 laptop
    - LP: #1333838
  * ALSA: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup
    - LP: #1333838
  * iser-target: Add missing target_put_sess_cmd for ImmedateData failure
    - LP: #1333838
  * iscsi-target: Fix wrong buffer / buffer overrun in
    iscsi_change_param_value()
    - LP: #1333838
  * percpu-refcount: fix usage of this_cpu_ops
    - LP: #1333838
  * target: Fix alua_access_state attribute OOPs for un-configured devices
    - LP: #1333838
  * mm: rmap: fix use-after-free in __put_anon_vma
    - LP: #1333838
  * mm: add !pte_present() check on existing hugetlb_entry callbacks
    - LP: #1333838
  * target: Fix NULL pointer dereference for XCOPY in target_put_sess_cmd
    - LP: #1333838
  * Linux 3.13.11.4
    - LP: #1333838
  * powerpc/powernv: Infrastructure to read opal messages in generic
    format.
    - LP: #1334268
  * powerpc/powernv: Infrastructure to support OPAL async completion
    - LP: #1334268
  * powerpc/powernv: Enable fetching of platform sensor data
    - LP: #1334268
  * powerpc/powernv: Fix endian issues with sensor code
    - LP: #1334268
  * powerpc/powernv: Add OPAL message log interface
    - LP: #1334268
  * powerpc/powernv: Fix kexec races going back to OPAL
    - LP: #1334268
  * powerpc/powernv: Fix little endian issues in OPAL flash code
    - LP: #1334268
  * powerpc/powernv: Fix little endian issues with opal_do_notifier calls
    - LP: #1334268
  * powerpc/powernv: Fix little endian issues in OPAL error log code
    - LP: #1334268
  * powerpc/powernv: Create OPAL sglist helper functions and fix endian
    issues
    - LP: #1334268
  * powerpc/powernv: Fix little endian issues in OPAL dump code
    - LP: #1334268
  * powerpc: Fix error return in rtas_flash module init
    - LP: #1334268
  * powerpc/powernv: Increase candidate fw image size
    - LP: #1334268
  * powerpc/powernv: Return secondary CPUs to firmware before FW update
    - LP: #1334268
  * powerpc/powernv: Pass buffer size to OPAL validate flash call
    - LP: #1334268
  * gpio: add a driver for the Synopsys DesignWare APB GPIO block
    - LP: #1334823
  * gpio: dwapb: drop irq_setup_generic_chip()
    - LP: #1334823
  * gpio: dwapb: use a second irq chip
    - LP: #1334823
  * lzo: properly check for overruns
    - LP: #1335313
    - CVE-2014-4608
  * lz4: ensure length does not wrap
    - LP: #1335314
    - CVE-2014-4611
  * netfilter: nf_nat: fix oops on netns removal
    - LP: #1314274
  * ALSA: hda - add device ID for Broadwell display audio controller
    - LP: #1188091
  * ALSA: hda - add codec ID for Broadwell display audio codec
    - LP: #1188091
  * ALSA: hda/hdmi - apply all Haswell fix-ups to Broadwell display codec
    - LP: #1188091
  * ALSA: hda - using POS_FIX_LPIB on Broadwell HDMI Audio
    - LP: #1188091
 -- Luis Henriques <luis.henriques@canonical.com>   Mon, 14 Jul 2014 11:48:23 +0100

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

Download full text (15.7 KiB)

This bug was fixed in the package linux-lts-raring - 3.8.0-44.66~precise1

---------------
linux-lts-raring (3.8.0-44.66~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux-lts-raring (3.8.0-44.65~precise1) precise; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-lts-3.8.0-42.63 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338579

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux-lts-raring (3.8.0-43.64~precise1) precise; urgency=low

[ Kamal Mostafa ]

  * Revert "ARM: OMAP3: clock: Back-propagate rate change from
    cam_mclk to dpll4_m5 on all OMAP3 platforms"
  * Release Tracking Bug
    - re-used previous tracking bug

linux-lts-raring (3.8.0-43.63~precise1) precise; urgency=low

[ Kamal Mostafa ]

  * [Config] add debian/gbp.conf
  * Release Tracking Bug
    - LP: #1335912

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-raring - 3.8.0-44.66~precise1

---------------
linux-lts-raring (3.8.0-44.66~precise1) precise; urgency=low

[ Upstream Kernel Changes ]

* l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux-lts-raring (3.8.0-44.65~precise1) precise; urgency=low

[ Luis Henriques ]

* Merged back Ubuntu-lts-3.8.0-42.63 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338579

[ Upstream Kernel Changes ]

* ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux-lts-raring (3.8.0-43.64~precise1) precise; urgency=low

[ Kamal Mostafa ]

* Revert "ARM: OMAP3: clock: Back-propagate rate change from
    cam_mclk to dpll4_m5 on all OMAP3 platforms"
  * Release Tracking Bug
    - re-used previous tracking bug

linux-lts-raring (3.8.0-43.63~precise1) precise; urgency=low

[ Kamal Mostafa ]

* [Config] add debian/gbp.conf
  * Release Tracking Bug
    - LP: #1335912

[ Upstream Kernel Changes ]

* Revert "USB: serial: add usbid for dell wwan card to sierra.c"
    - LP: #1333900
  * Revert "macvlan : fix checksums error when we are in bridge mode"
    - LP: #1333900
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1325941
    - CVE-2014-3917
  * fs, userns: Change inode_capable to capable_wrt_inode_uidgid
    - LP: #1329103
    - CVE-2014-4014
  * ACPI / EC: Clear stale EC events on Samsung systems
    - LP: #1333900
  * ACPI / EC: Process rather than discard events in acpi_ec_clear
    - LP: #1333900
  * mac80211: fix software remain-on-channel implementation
    - LP: #1333900
  * mac80211: exclude AP_VLAN interfaces from tx power calculation
    - LP: #1333900
  * parisc: fix epoll_pwait syscall on compat kernel
    - LP: #1333900
  * ALSA: hda/realtek - Add support of ALC288 codec
    - LP: #1333900
  * user namespace: fix incorrect memory barriers
    - LP: #1333900
  * mlx4_en: don't use napi_synchronize inside mlx4_en_netpoll
    - LP: #1333900
  * mei: ignore client writing state during cb completion
    - LP: #1333900
  * staging: r8712u: Fix case where ethtype was never obtained and always
    be checked against 0
    - LP: #1333900
  * USB: serial: ftdi_sio: add id for Brainboxes serial cards
    - LP: #1333900
  * usb: option driver, add support for Telit UE910v2
    - LP: #1333900
  * USB: cp210x: Add 8281 (Nanotec Plug & Drive)
    - LP: #1333900
  * USB: pl2303: add ids for Hewlett-Packard HP POS pole displays
    - LP: #1333900
  * USB: usb_wwan: fix handling of missing bulk endpoints
    - LP: #1333900
  * USB: fix crash during hotplug of PCI USB controller card
    - LP: #1333900
  * USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM
    driver
    - LP: #1333900
  * drm/radeon: memory leak on bo reservation failure. v2
    - LP: #1333900
  * drm/radeon/si: make sure mc ucode is loaded before checking the size
    - LP: #1333900
  * mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
    - LP: #1333900
  * mm: use paravirt friendly ops for NUMA hinting ptes
    - LP: #1333900
  * iio: querying buffer scan_mask should return 0/1
    - LP: #1333900
  * pata_at91: fix ata_host_activate() failure handling
    - LP: #1333900
  * ext4: note the error in ext4_end_bio()
    - LP: #1333900
  * ext4: fix jbd2 warning under heavy xattr load
    - LP: #1333900
  * ext4: use i_size_read in ext4_unaligned_aio()
    - LP: #1333900
  * locks: allow __break_lease to sleep even when break_time is 0
    - LP: #1333900
  * genirq: Allow forcing cpu affinity of interrupts
    - LP: #1333900
  * nfsd: set timeparms.to_maxval in setup_callback_client
    - LP: #1333900
  * libata/ahci: accommodate tag ordered controllers
    - LP: #1333900
  * Input: synaptics - add min/max quirk for ThinkPad T431s, L440, L540, S1
    Yoga and X1
    - LP: #1333900
  * drm/radeon: fix ATPX detection on non-VGA GPUs
    - LP: #1333900
  * mm: make fixup_user_fault() check the vma access rights too
    - LP: #1333900
  * ARM: 8027/1: fix do_div() bug in big-endian systems
    - LP: #1333900
  * ARM: 8030/1: ARM : kdump : add arch_crash_save_vmcoreinfo
    - LP: #1333900
  * USB: serial: fix sysfs-attribute removal deadlock
    - LP: #1333900
  * Btrfs: fix inode caching vs tree log
    - LP: #1333900
  * xhci: Switch Intel Lynx Point ports to EHCI on shutdown.
    - LP: #1333900
  * USB: io_ti: fix firmware download on big-endian machines
    - LP: #1333900
  * usb: qcserial: add Sierra Wireless EM7355
    - LP: #1333900
  * usb: qcserial: add Sierra Wireless MC73xx
    - LP: #1333900
  * usb: qcserial: add Sierra Wireless MC7305/MC7355
    - LP: #1333900
  * usb: option: add Olivetti Olicard 500
    - LP: #1333900
  * usb: option: add Alcatel L800MA
    - LP: #1333900
  * usb: option: add and update a number of CMOTech devices
    - LP: #1333900
  * list: introduce list_next_entry() and list_prev_entry()
    - LP: #1333900
  * net: sctp: wake up all assocs if sndbuf policy is per socket
    - LP: #1333900
  * net: sctp: test if association is dead in sctp_wake_up_waiters
    - LP: #1333900
  * l2tp: take PMTU from tunnel UDP socket
    - LP: #1333900
  * net: core: don't account for udp header size when computing seglen
    - LP: #1333900
  * bonding: Remove debug_fs files when module init fails
    - LP: #1333900
  * ipv6: Limit mtu to 65575 bytes
    - LP: #1333900
  * ipv4: return valid RTA_IIF on ip route get
    - LP: #1333900
  * filter: prevent nla extensions to peek beyond the end of the message
    - LP: #1333900
  * ip6_gre: don't allow to remove the fb_tunnel_dev
    - LP: #1333900
  * vlan: Fix lockdep warning when vlan dev handle notification
    - LP: #1333900
  * tg3: update rx_jumbo_pending ring param only when jumbo frames are
    enabled
    - LP: #1333900
  * net: sctp: cache auth_enable per endpoint
    - LP: #1333900
  * rtnetlink: Warn when interface's information won't fit in our packet
    - LP: #1333900
  * rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF
    is set
    - LP: #1333900
  * ipv6: fib: fix fib dump restart
    - LP: #1333900
  * bridge: Handle IFLA_ADDRESS correctly when creating bridge device
    - LP: #1333900
  * sctp: reset flowi4_oif parameter on route lookup
    - LP: #1333900
  * tcp_cubic: fix the range of delayed_ack
    - LP: #1333900
  * net: ipv4: ip_forward: fix inverted local_df test
    - LP: #1333900
  * netfilter: ipv4: defrag: set local_df flag on defragmented skb
    - LP: #1333900
  * net: ipv6: send pkttoobig immediately if orig frag size > mtu
    - LP: #1333900
  * ipv4: fib_semantics: increment fib_info_cnt after fib_info allocation
    - LP: #1333900
  * net: cdc_mbim: handle unaccelerated VLAN tagged frames
    - LP: #1333900
  * macvlan: Don't propagate IFF_ALLMULTI changes on down interfaces.
    - LP: #1333900
  * ip6_tunnel: fix potential NULL pointer dereference
    - LP: #1333900
  * ipv4: initialise the itag variable in __mkroute_input
    - LP: #1333900
  * net-gro: reset skb->truesize in napi_reuse_skb()
    - LP: #1333900
  * net: qmi_wwan: fixup Sierra Wireless MC8305 entry
    - LP: #1333900
  * net: qmi_wwan: add Option GTM681W
    - LP: #1333900
  * net: qmi_wwan: add TP-LINK MA260
    - LP: #1333900
  * qmi_wwan: add ONDA MT689DC device ID (fwd)
    - LP: #1333900
  * net: qmi_wwan: add Telit LE920 newer firmware support
    - LP: #1333900
  * net: qmi_wwan: fix Cinterion PLXX product ID
    - LP: #1333900
  * net: qmi_wwan: Olivetti Olicard 200 support
    - LP: #1333900
  * net: qmi_wwan: add ZTE MF667
    - LP: #1333900
  * net: qmi_wwan: add support for Cinterion PXS8 and PHS8
    - LP: #1333900
  * net: qmi_wwan: add Sierra Wireless EM7355
    - LP: #1333900
  * net: qmi_wwan: add Sierra Wireless MC73xx
    - LP: #1333900
  * net: qmi_wwan: add Sierra Wireless MC7305/MC7355
    - LP: #1333900
  * net: qmi_wwan: add Olivetti Olicard 500
    - LP: #1333900
  * net: qmi_wwan: add Alcatel L800MA
    - LP: #1333900
  * net: qmi_wwan: add a number of CMOTech devices
    - LP: #1333900
  * net: qmi_wwan: add a number of Dell devices
    - LP: #1333900
  * xhci: For streams the css flag most be read from the stream-ctx on ep
    stop
    - LP: #1333900
  * usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb
    - LP: #1333900
  * skbuff: skb_segment: orphan frags before copying
    - LP: #1298119, #1333900
    - CVE-2014-0131
  * drm/vmwgfx: Make sure user-space can't DMA across buffer object
    boundaries v2
    - LP: #1333900
  * s390/bpf,jit: initialize A register if 1st insn is BPF_S_LDX_B_MSH
    - LP: #1333900
  * ftrace/module: Hardcode ftrace_module_init() call into load_module()
    - LP: #1333900
  * [SCSI] mpt2sas: Don't disable device twice at suspend.
    - LP: #1333900
  * drivercore: deferral race condition fix
    - LP: #1333900
  * hrtimer: Prevent all reprogramming if hang detected
    - LP: #1333900
  * hrtimer: Prevent remote enqueue of leftmost timers
    - LP: #1333900
  * timer: Prevent overflow in apply_slack
    - LP: #1333900
  * rt2x00: fix beaconing on USB
    - LP: #1333900
  * Input: synaptics - add min/max quirk for ThinkPad Edge E431
    - LP: #1333900
  * Bluetooth: Fix triggering BR/EDR L2CAP Connect too early
    - LP: #1333900
  * Bluetooth: Add support for Lite-on [04ca:3007]
    - LP: #1333900
  * drm/i915: Break encoder->crtc link separately in intel_sanitize_crtc()
    - LP: #1333900
  * rtl8192cu: Fix unbalanced irq enable in error path of rtl92cu_hw_init()
    - LP: #1333900
  * drm/nouveau/acpi: allow non-optimus setups to load vbios from acpi
    - LP: #1333900
  * ALSA: usb-audio: work around corrupted TEAC UD-H01 feedback data
    - LP: #1333900
  * usb: qcserial: add a number of Dell devices
    - LP: #1333900
  * usb: storage: shuttle_usbat: fix discs being detected twice
    - LP: #1333900
  * fsl-usb: do not test for PHY_CLK_VALID bit on controller version 1.6
    - LP: #1333900
  * drivers/tty/hvc: don't free hvc_console_setup after init
    - LP: #1333900
  * USB: Nokia 305 should be treated as unusual dev
    - LP: #1333900
  * USB: Nokia 5300 should be treated as unusual dev
    - LP: #1333900
  * HID: add NO_INIT_REPORTS quirk for Synaptics Touch Pad V 103S
    - LP: #1333900
  * Input: elantech - fix touchpad initialization on Gigabyte U2442
    - LP: #1333900
  * posix_acl: handle NULL ACL in posix_acl_equiv_mode
    - LP: #1333900
  * mm/compaction: make isolate_freepages start at pageblock boundary
    - LP: #1333900
  * Linux 3.8.13.24
    - LP: #1333900
  * lib/lzo: Rename lzo1x_decompress.c to lzo1x_decompress_safe.c
    - CVE-2014-4608
  * lib/lzo: Update LZO compression to current upstream version
    - CVE-2014-4608
  * lzo: properly check for overruns
    - CVE-2014-4608
  * percpu: make pcpu_alloc_chunk() use pcpu_mem_free() instead of kfree()
    - LP: #1335893
  * [media] fc2580: fix tuning failure on 32-bit arch
    - LP: #1335893
  * crypto: caam - add allocation failure handling in SPRINTFCAT macro
    - LP: #1335893
  * [media] media-device: fix infoleak in ioctl media_enum_entities()
    - LP: #1335893
  * md: avoid possible spinning md thread at shutdown.
    - LP: #1335893
  * NFSd: call rpc_destroy_wait_queue() from free_client()
    - LP: #1335893
  * genirq: Provide irq_force_affinity fallback for non-SMP
    - LP: #1335893
  * ACPI / blacklist: Add dmi_enable_osi_linux quirk for Asus EEE PC 1015PX
    - LP: #1335893
  * NFSD: Call ->set_acl with a NULL ACL structure if no entries
    - LP: #1335893
  * ARM: dts: i.MX53: Fix ipu register space size
    - LP: #1335893
  * mm, thp: close race between mremap() and split_huge_page()
    - LP: #1335893
  * hrtimer: Set expiry time before switch_hrtimer_base()
    - LP: #1335893
  * hwmon: (emc1403) fix inverted store_hyst()
    - LP: #1335893
  * hwmon: (emc1403) Support full range of known chip revision numbers
    - LP: #1335893
  * iommu/amd: Fix interrupt remapping for aliased devices
    - LP: #1335893
  * ASoC: wm8962: Update register CLASS_D_CONTROL_1 to be non-volatile
    - LP: #1335893
  * [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel
    from user-space
    - LP: #1335893
  * [media] V4L2: fix VIDIOC_CREATE_BUFS in 64- / 32-bit compatibility mode
    - LP: #1335893
  * x86, mm, hugetlb: Add missing TLB page invalidation for hugetlb_cow()
    - LP: #1335893
  * i2c: designware: Mask all interrupts during i2c controller enable
    - LP: #1335893
  * i2c: s3c2410: resume race fix
    - LP: #1335893
  * i2c: rcar: bail out on zero length transfers
    - LP: #1335893
  * dm crypt: fix cpu hotplug crash by removing per-cpu structure
    - LP: #1335893
  * x86-64, modify_ldt: Make support for 16-bit segments a runtime option
    - LP: #1335893
  * PCI: shpchp: Check bridge's secondary (not primary) bus speed
    - LP: #1335893
  * libceph: fix corruption when using page_count 0 page in rbd
    - LP: #1335893
  * sched: Sanitize irq accounting madness
    - LP: #1335893
  * sched: Use CPUPRI_NR_PRIORITIES instead of MAX_RT_PRIO in cpupri check
    - LP: #1335893
  * net: cpsw: fix null dereference at probe
    - LP: #1335893
  * perf: Limit perf_event_attr::sample_period to 63 bits
    - LP: #1335893
  * perf: Prevent false warning in perf_swevent_add
    - LP: #1335893
  * drm/radeon: also try GART for CPU accessed buffers
    - LP: #1335893
  * drm/radeon: handle non-VGA class pci devices with ATRM
    - LP: #1335893
  * drm/radeon: avoid segfault on device open when accel is not working.
    - LP: #1335893
  * can: peak_pci: prevent use after free at netdev removal
    - LP: #1335893
  * nfsd4: remove lockowner when removing lock stateid
    - LP: #1335893
  * nfsd4: warn on finding lockowner without stateid's
    - LP: #1335893
  * dma: mv_xor: Flush descriptors before activating a channel
    - LP: #1335893
  * hwpoison, hugetlb: lock_page/unlock_page does not match for handling a
    free hugepage
    - LP: #1335893
  * mm/memory-failure.c: fix memory leak by race between poison and
    unpoison
    - LP: #1335893
  * ARM: OMAP3: clock: Back-propagate rate change from cam_mclk to dpll4_m5
    on all OMAP3 platforms
    - LP: #1335893
  * Input: synaptics - add min/max quirk for the ThinkPad W540
    - LP: #1335893
  * futex: Add another early deadlock detection check
    - LP: #1335893
  * futex: Prevent attaching to kernel threads
    - LP: #1335893
  * ARM: imx: fix error handling in ipu device registration
    - LP: #1335893
  * sched/deadline: Change sched_getparam() behaviour vs SCHED_DEADLINE
    - LP: #1335893
  * ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets
    - LP: #1335893
  * ARM: 8051/1: put_user: fix possible data corruption in put_user
    - LP: #1335893
  * Input: synaptics - T540p - unify with other LEN0034 models
    - LP: #1335893
  * powerpc: Fix 64 bit builds with binutils 2.24
    - LP: #1335893
  * Staging: speakup: Move pasting into a work item
    - LP: #1335893
  * USB: Avoid runtime suspend loops for HCDs that can't handle
    suspend/resume
    - LP: #1335893
  * USB: io_ti: fix firmware download on big-endian machines (part 2)
    - LP: #1335893
  * USB: ftdi_sio: add NovaTech OrionLXm product ID
    - LP: #1335893
  * USB: serial: option: add support for Novatel E371 PCIe card
    - LP: #1335893
  * md: always set MD_RECOVERY_INTR when aborting a reshape or other
    "resync".
    - LP: #1335893
  * xhci: delete endpoints from bandwidth list before freeing whole device
    - LP: #1335893
  * ALSA: hda/realtek - Correction of fixup codes for PB V7900 laptop
    - LP: #1335893
  * ALSA: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup
    - LP: #1335893
  * target: Fix alua_access_state attribute OOPs for un-configured devices
    - LP: #1335893
  * mm: rmap: fix use-after-free in __put_anon_vma
    - LP: #1335893
  * Linux 3.8.13.25
    - LP: #1335893
 -- Luis Henriques <luis.henriques@canonical.com>   Mon, 14 Jul 2014 14:52:11 +0100

Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-07-16:

Download full text (7.9 KiB)

This bug was fixed in the package linux - 3.11.0-26.45

---------------
linux (3.11.0-26.45) saucy; urgency=low

[ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.11.0-26.44) saucy; urgency=low

[ Luis Henriques ]

  * Merged back Ubuntu-3.11.0-24.42 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338556

[ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699

linux (3.11.0-25.43) saucy; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1336203

[ Upstream Kernel Changes ]

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Committed
importance:	Undecided → High
Changed in linux-armadaxp (Ubuntu Saucy):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-armadaxp (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-armadaxp (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Precise):
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Lucid):
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Utopic):
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Precise):
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Lucid):
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Utopic):
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Saucy):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Precise):
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Lucid):
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Utopic):
importance:	Undecided → High
Changed in linux (Ubuntu Precise):
importance:	Undecided → High
Changed in linux (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux (Ubuntu Lucid):
importance:	Undecided → High
Changed in linux (Ubuntu Utopic):
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Saucy):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Precise):
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Saucy):
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Lucid):
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Utopic):
importance:	Undecided → High
description:	updated

no longer affects:	linux-armadaxp (Ubuntu Saucy)
no longer affects:	linux-ec2 (Ubuntu Saucy)
no longer affects:	linux-lts-saucy (Ubuntu Saucy)
no longer affects:	linux-lts-quantal (Ubuntu Saucy)
no longer affects:	linux-mvl-dove (Ubuntu Saucy)
no longer affects:	linux (Ubuntu Saucy)
no longer affects:	linux-fsl-imx51 (Ubuntu Saucy)
no longer affects:	linux-ti-omap4 (Ubuntu Saucy)
no longer affects:	linux-lts-raring (Ubuntu Saucy)
Changed in linux-armadaxp (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux (Ubuntu Utopic):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released

Changed in linux (Ubuntu Utopic):
status:	Fix Committed → Invalid
Changed in linux (Ubuntu):
status:	Fix Committed → Invalid

no longer affects:	linux-lts-trusty (Ubuntu Lucid)
no longer affects:	linux-lts-trusty (Ubuntu Saucy)
no longer affects:	linux-armadaxp (Ubuntu Lucid)
no longer affects:	linux-ec2 (Ubuntu Lucid)
no longer affects:	linux-goldfish (Ubuntu Lucid)
no longer affects:	linux-lts-saucy (Ubuntu Lucid)
no longer affects:	linux-lts-quantal (Ubuntu Lucid)
no longer affects:	linux-mvl-dove (Ubuntu Lucid)
no longer affects:	linux-ti-omap4 (Ubuntu Lucid)
no longer affects:	linux-lts-vivid (Ubuntu Lucid)
no longer affects:	linux (Ubuntu Lucid)
no longer affects:	linux-mako (Ubuntu Lucid)
no longer affects:	linux-fsl-imx51 (Ubuntu Lucid)
no longer affects:	linux-lts-utopic (Ubuntu Lucid)
no longer affects:	linux-flo (Ubuntu Lucid)
no longer affects:	linux-lts-raring (Ubuntu Lucid)
no longer affects:	linux-manta (Ubuntu Lucid)
Changed in linux-lts-trusty (Ubuntu Precise):
importance:	Undecided → High
Changed in linux-lts-trusty (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux-lts-trusty (Ubuntu Wily):
importance:	Undecided → High
Changed in linux-lts-trusty (Ubuntu Utopic):
importance:	Undecided → High
Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-quantal (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-ti-omap4 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-raring (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-armadaxp (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mvl-dove (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-saucy (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-manta (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-manta (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-manta (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-ec2 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-vivid (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Fix Committed
importance:	Undecided → High
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mako (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mako (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-mako (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-fsl-imx51 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-utopic (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-utopic (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-goldfish (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-goldfish (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-goldfish (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-flo (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-flo (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-flo (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High

Changed in linux-flo (Ubuntu Utopic):
status:	Invalid → Fix Committed
Changed in linux-mako (Ubuntu Utopic):
status:	Invalid → Fix Committed
Changed in linux-manta (Ubuntu Utopic):
status:	Invalid → Fix Committed
Changed in linux-goldfish (Ubuntu Utopic):
status:	Invalid → Fix Committed

no longer affects:	linux-lts-trusty (Ubuntu Utopic)
no longer affects:	linux-armadaxp (Ubuntu Utopic)
no longer affects:	linux-ec2 (Ubuntu Utopic)
no longer affects:	linux-goldfish (Ubuntu Utopic)
no longer affects:	linux-lts-saucy (Ubuntu Utopic)
no longer affects:	linux-lts-quantal (Ubuntu Utopic)
no longer affects:	linux-raspi2 (Ubuntu Utopic)
no longer affects:	linux-mvl-dove (Ubuntu Utopic)
no longer affects:	linux-ti-omap4 (Ubuntu Utopic)
no longer affects:	linux-lts-vivid (Ubuntu Utopic)
no longer affects:	linux (Ubuntu Utopic)
no longer affects:	linux-mako (Ubuntu Utopic)
no longer affects:	linux-fsl-imx51 (Ubuntu Utopic)
no longer affects:	linux-lts-utopic (Ubuntu Utopic)
no longer affects:	linux-flo (Ubuntu Utopic)
no longer affects:	linux-lts-raring (Ubuntu Utopic)
no longer affects:	linux-manta (Ubuntu Utopic)
Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → High
Changed in linux-raspi2 (Ubuntu Wily):
importance:	Undecided → High
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → High

Changed in linux-raspi2 (Ubuntu Xenial):
importance:	Undecided → High

Ubuntulinux-raspi2 package

CVE-2014-4943

Bug Description

Related branches

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-raspi2 package