This bug was fixed in the package linux - 3.5.0-34.55 --------------- linux (3.5.0-34.55) quantal; urgency=low [Steve Conklin] * Release Tracking Bug - LP: #1187926 [ Upstream Kernel Changes ] * iwlwifi: dvm: fix zero LQ CMD sending avoidance - LP: #1186932 linux (3.5.0-33.54) quantal; urgency=low [Steve Conklin] * Release Tracking Bug - LP: #1186271 [ Upstream Kernel Changes ] * crypto: algif - suppress sending source address information in recvmsg - LP: #1172363 - CVE-2013-3076 * ax25: fix info leak via msg_name in ax25_recvmsg() - LP: #1172366 - CVE-2013-3223 * Bluetooth: fix possible info leak in bt_sock_recvmsg() - LP: #1172368 - CVE-2013-3224 * tipc: fix info leaks via msg_name in recv_msg/recv_stream - LP: #1172403 - CVE-2013-3235 * rose: fix info leak via msg_name in rose_recvmsg() - LP: #1172394 - CVE-2013-3234 * Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg() - LP: #1172369 - CVE-2013-3225 * atm: update msg_namelen in vcc_recvmsg() - LP: #1172365 - CVE-2013-3222 * iwlwifi: add new pci id for 6x35 series - LP: #1180256 * ath9k_htc: accept 1.x firmware newer than 1.3 - LP: #1186062 * ssb: implement spurious tone avoidance - LP: #1186062 * can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq - LP: #1186062 * can: sja1000: fix handling on dt properties on little endian systems - LP: #1186062 * ath9k_hw: change AR9580 initvals to fix a stability issue - LP: #1186062 * ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon - LP: #1186062 * ARM: 7698/1: perf: fix group validation when using enable_on_exec - LP: #1186062 * hugetlbfs: add swap entry check in follow_hugetlb_page() - LP: #1186062 * kernel/signal.c: stop info leak via the tkill and the tgkill syscalls - LP: #1186062 * hfsplus: fix potential overflow in hfsplus_file_truncate() - LP: #1186062 * sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s - LP: #1186062 * perf/x86: Fix offcore_rsp valid mask for SNB/IVB - LP: #1186062 * vm: add vm_iomap_memory() helper function - LP: #1186062 * vm: convert HPET mmap to vm_iomap_memory() helper - LP: #1186062 * vm: convert fb_mmap to vm_iomap_memory() helper - LP: #1186062 * vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper - LP: #1186062 * vm: convert mtdchar mmap to vm_iomap_memory() helper - LP: #1186062 * regulator: fixed regulator_bulk_enable unwinding code - LP: #1186062 * perf: Fix error return code - LP: #1186062 * xen/smp: Fix leakage of timer interrupt line for every CPU online/offline. - LP: #1186062 * xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every CPU online/offline - LP: #1186062 * xen/time: Fix kasprintf splat when allocating timer%d IRQ line. - LP: #1186062 * s390/memory hotplug: prevent offline of active memory increments - LP: #1186062 * aio: fix possible invalid memory access when DEBUG is enabled - LP: #1186062 * TTY: do not update atime/mtime on read/write - LP: #1186062 * TTY: fix atime/mtime regression - LP: #1186062 * caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg() - LP: #1186062 * irda: Fix missing msg_namelen update in irda_recvmsg_dgram() - LP: #1186062 * iucv: Fix missing msg_namelen update in iucv_sock_recvmsg() - LP: #1186062 * llc: Fix missing msg_namelen update in llc_ui_recvmsg() - LP: #1186062 * netrom: fix info leak via msg_name in nr_recvmsg() - LP: #1186062 * netrom: fix invalid use of sizeof in nr_recvmsg() - LP: #1186062 * NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg() - LP: #1186062 * cbq: incorrect processing of high limits - LP: #1186062 * net IPv6 : Fix broken IPv6 routing table after loopback down-up - LP: #1186062 * net: count hw_addr syncs so that unsync works properly. - LP: #1186062 * atl1e: limit gso segment size to prevent generation of wrong ip length fields - LP: #1186062 * bonding: fix bonding_masters race condition in bond unloading - LP: #1186062 * bonding: IFF_BONDING is not stripped on enslave failure - LP: #1186062 * af_unix: If we don't care about credentials coallesce all messages - LP: #1186062 * netfilter: don't reset nf_trace in nf_reset() - LP: #1186062 * rtnetlink: Call nlmsg_parse() with correct header length - LP: #1186062 * tcp: incoming connections might use wrong route under synflood - LP: #1186062 * tcp: Reallocate headroom if it would overflow csum_start - LP: #1186062 * esp4: fix error return code in esp_output() - LP: #1186062 * net: sctp: sctp_auth_key_put: use kzfree instead of kfree - LP: #1186062 * tcp: call tcp_replace_ts_recent() from tcp_ack() - LP: #1186062 * net: rate-limit warn-bad-offload splats. - LP: #1186062 * net: fix incorrect credentials passing - LP: #1186062 * net: drop dst before queueing fragments - LP: #1186062 * sparc64: Fix race in TLB batch processing. - LP: #1186062 * l2tp: fix info leak in l2tp_ip6_recvmsg() - LP: #1186062 * tracing: Use stack of calling function for stack tracer - LP: #1186062 * tracing: Fix stack tracer with fentry use - LP: #1186062 * tracing: Remove most or all of stack tracer stack size from stack_max_size - LP: #1186062 * tracing: Fix ftrace_dump() - LP: #1186062 * Wrong asm register contraints in the futex implementation - LP: #1186062 * Wrong asm register contraints in the kvm implementation - LP: #1186062 * cgroup: fix an off-by-one bug which may trigger BUG_ON() - LP: #1186062 * PCI / ACPI: Don't query OSC support with all possible controls - LP: #1186062 * Fix initialization of CMCI/CMCP interrupts - LP: #1186062 * sysfs: fix use after free in case of concurrent read/write and readdir - LP: #1186062 * usb/misc/appledisplay: Add 24" LED Cinema display - LP: #1186062 * ext4/jbd2: don't wait (forever) for stale tid caused by wraparound - LP: #1186062 * jbd2: fix race between jbd2_journal_remove_checkpoint and ->j_commit_callback - LP: #1186062 * ext4: fix journal callback list traversal - LP: #1186062 * usb: chipidea: udc: fix memory access of shared memory on armv5 machines - LP: #1186062 * NFSv4: Handle NFS4ERR_DELAY and NFS4ERR_GRACE in nfs4_open_delegation_recall - LP: #1186062 * usb: chipidea: udc: fix memory leak in _ep_nuke - LP: #1186062 * USB: add ftdi_sio USB ID for GDM Boost V1.x - LP: #1186062 * hrtimer: Add expiry time overflow check in hrtimer_interrupt - LP: #1186062 * hrtimer: Fix ktime_add_ns() overflow on 32bit architectures - LP: #1186062 * ARM: omap3: cpuidle: enable time keeping - LP: #1186062 * tracing: Fix off-by-one on allocating stat->pages - LP: #1186062 * USB: option: add a D-Link DWM-156 variant - LP: #1186062 * ext4: fix big-endian bug in metadata checksum calculations - LP: #1186062 * tracing: Reset ftrace_graph_filter_enabled if count is zero - LP: #1186062 * tracing: Check return value of tracing_init_dentry() - LP: #1186062 * serial_core.c: add put_device() after device_find_child() - LP: #1186062 * PCI/PM: Fix fallback to PCI_D0 in pci_platform_power_transition() - LP: #1186062 * wireless: regulatory: fix channel disabling race condition - LP: #1186062 * usbfs: Always allow ctrl requests with USB_RECIP_ENDPOINT on the ctrl ep - LP: #1186062 * iwlwifi: fix freeing uninitialized pointer - LP: #1186062 * iwlwifi: dvm: don't send zeroed LQ cmd - LP: #1186062 * LOCKD: Ensure that nlmclnt_block resets block->b_status after a server reboot - LP: #1186062 * ext4: fix online resizing for ext3-compat file systems - LP: #1186062 * ext4: fix Kconfig documentation for CONFIG_EXT4_DEBUG - LP: #1186062 * rt2x00: Fix transmit power troubles on some Ralink RT30xx cards - LP: #1186062 * USB: ftdi_sio: correct ST Micro Connect Lite PIDs - LP: #1186062 * USB: serial: option: Added support Olivetti Olicard 145 - LP: #1186062 * usb-storage: CY7C68300A chips do not support Cypress ATACB - LP: #1186062 * USB: ftdi_sio: enable two UART ports on ST Microconnect Lite - LP: #1186062 * gianfar: do not advertise any alarm capability. - LP: #1186062 * clockevents: Set dummy handler on CPU_DEAD shutdown - LP: #1186062 * ixgbe: fix EICR write in ixgbe_msix_other - LP: #1186062 * mwifiex: Use pci_release_region() instead of a pci_release_regions() - LP: #1186062 * mwifiex: Call pci_release_region after calling pci_disable_device - LP: #1186062 * fs/fscache/stats.c: fix memory leak - LP: #1186062 * mm: allow arch code to control the user page table ceiling - LP: #1186062 * arm: set the page table freeing ceiling to TASK_SIZE - LP: #1186062 * drivers/rtc/rtc-cmos.c: don't disable hpet emulation on suspend - LP: #1186062 * drivers/rtc/rtc-at91rm9200.c: fix missing iounmap - LP: #1186062 * md: bad block list should default to disabled. - LP: #1186062 * inotify: invalid mask should return a error number but not set it - LP: #1186062 * fs/dcache.c: add cond_resched() to shrink_dcache_parent() - LP: #1186062 * exec: do not abuse ->cred_guard_mutex in threadgroup_lock() - LP: #1186062 * tty: fix up atime/mtime mess, take three - LP: #1186062 * ipc: sysv shared memory limited to 8TiB - LP: #1186062 * ARM: 7699/1: sched_clock: Add more notrace to prevent recursion - LP: #1186062 * Linux 3.5.7.12 - LP: #1186062 * mmc: at91/avr32/atmel-mci: fix DMA-channel leak on module unload - LP: #1186062 * ARM: at91: Fix typo in restart code panic message - LP: #1186062 * drm/radeon: don't use get_engine_clock() on APUs - LP: #1186062 * nfsd: don't run get_file if nfs4_preprocess_stateid_op return error - LP: #1186062 * mmc: core: Fix bit width test failing on old eMMC cards - LP: #1186062 * drm/i915: Add no-lvds quirk for Fujitsu Esprimo Q900 - LP: #1186062 * mfd: adp5520: Restore mode bits on resume - LP: #1186062 * mmc: atmel-mci: pio hang on block errors - LP: #1186062 * nfsd4: don't close read-write opens too soon - LP: #1186062 * drm/radeon/dce6: add missing display reg for tiling setup - LP: #1186062 * ALSA: usb: Add quirk for 192KHz recording on E-Mu devices - LP: #1186062 * ALSA: usb-audio: disable autopm for MIDI devices - LP: #1186062 * drm/radeon/evergreen+: don't enable HPD interrupts on eDP/LVDS - LP: #1186062 * drm/radeon: cleanup properly if mmio mapping fails - LP: #1186062 * ASoC: max98088: Fix logging of hardware revision. - LP: #1186062 * drm/i915: Workaround incoherence between fences and LLC across multiple CPUs - LP: #1186062 * drm/i915: Fall back to bit banging mode for DVO transmitter detection - LP: #1186062 * drm/radeon: fix hdmi mode enable on RS600/RS690/RS740 - LP: #1186062 * i2c: xiic: must always write 16-bit words to TX_FIFO - LP: #1186062 * nfsd: Decode and send 64bit time values - LP: #1186062 * drm/radeon: fix typo in si_select_se_sh() - LP: #1186062 * fbcon: when font is freed, clear also vc_font.data - LP: #1186062 * powerpc/spufs: Initialise inode->i_ino in spufs_new_inode() - LP: #1186062 * ALSA: snd-usb: try harder to find USB_DT_CS_ENDPOINT - LP: #1186062 * ALSA: usb-audio: Fix autopm error during probing - LP: #1186062 * drm/gma500: fix backlight hotkeys behaviour on netbooks - LP: #1186062 * powerpc: Add isync to copy_and_flush - LP: #1186062 * ARM: u300: fix ages old copy/paste bug - LP: #1186062 * x86: Eliminate irq_mis_count counted in arch_irq_stat - LP: #1186062 * drm/prime: keep a reference from the handle to exported dma-buf (v6) - LP: #1186062 * drm/mgag200: deal with bo reserve fail in dirty update path - LP: #1186062 * drm/ast: deal with bo reserve fail in dirty update path - LP: #1186062 * drm/cirrus: deal with bo reserve fail in dirty update path - LP: #1186062 * drm/radeon: fix endian bugs in atom_allocate_fb_scratch() - LP: #1186062 * drm/radeon: fix possible segfault when parsing pm tables - LP: #1186062 * drm/radeon: add some new SI PCI ids - LP: #1186062 * drm/radeon: add new richland pci ids - LP: #1186062 * drm/radeon: fix handling of v6 power tables - LP: #1186062 * perf/x86/intel/lbr: Fix LBR filter - LP: #1186062 * perf/x86/intel/lbr: Demand proper privileges for PERF_SAMPLE_BRANCH_KERNEL - LP: #1186062 * net/eth/ibmveth: Fixup retrieval of MAC address - LP: #1186062 * autofs - remove autofs dentry mount check - LP: #1186062 * drm/radeon: properly lock disp in mc_stop/resume for evergreen+ - LP: #1186062 * drm/radeon: disable the crtcs in mc_stop (evergreen+) (v2) - LP: #1186062 * powerpc: fix numa distance for form0 device tree - LP: #1186062 * kernel/audit_tree.c: tree will leak memory when failure occurs in audit_trim_trees() - LP: #1186062 * xhci: Don't warn on empty ring for suspended devices. - LP: #1186062 * cpufreq: exynos: Get booting freq value in exynos_cpufreq_init - LP: #1186062 * ARM: 7692/1: iop3xx: move IOP3XX_PERIPHERAL_VIRT_BASE - LP: #1186062 * drm/i915: ensure single initialization and cleanup of backlight device - LP: #1186062 * drm/radeon: use frac fb div on RS780/RS880 - LP: #1186062 * r8169: fix vlan tag read ordering. - LP: #1186062 * r8169: honor jumbo settings when chipset is requested to start. - LP: #1186062 * drm/i915: Fix detection of base of stolen memory - LP: #1186062 * s390: move dummy io_remap_pfn_range() to asm/pgtable.h - LP: #1186062 * x86/mm: account for PGDIR_SIZE alignment - LP: #1186062 * drbd: fix for deadlock when using automatic split-brain-recovery - LP: #1186062 * cpufreq / Longhaul: Disable driver by default - LP: #1186062 * ext4: add check for inodes_count overflow in new resize ioctl - LP: #1186062 * powerpc: Emulate non privileged DSCR read and write - LP: #1186062 * audit: Syscall rules are not applied to existing processes on non-x86 - LP: #1186062 * ASoC: wm8994: missing break in wm8994_aif3_hw_params() - LP: #1186062 * tile: support new Tilera hypervisor - LP: #1186062 * sd: fix array cache flushing bug causing performance problems - LP: #1186062 * ath9k: fix key allocation error handling for powersave keys - LP: #1186062 * nfsd4: don't allow owner override on 4.1 CLAIM_FH opens - LP: #1186062 * xen/vcpu/pvhvm: Fix vcpu hotplugging hanging. - LP: #1186062 * ALSA: HDA: Fix Oops caused by dereference NULL pointer - LP: #1186062 * ACPICA: Fix possible buffer overflow during a field unit read operation - LP: #1186062 * qmi_wwan/cdc_ether: add device IDs for Dell 5804 (Novatel E371) WWAN card - LP: #1186062 * B43: Handle DMA RX descriptor underrun - LP: #1186062 * mwifiex: clear is_suspended flag when interrupt is received early - LP: #1186062 * mwifiex: fix setting of multicast filter - LP: #1186062 * ARM: OMAP: RX-51: change probe order of touchscreen and panel SPI devices - LP: #1186062 * hp_accel: Ignore the error from lis3lv02d_poweron() at resume - LP: #1186062 * KVM: VMX: fix halt emulation while emulating invalid guest sate - LP: #1186062 * dm snapshot: fix error return code in snapshot_ctr - LP: #1186062 * drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register - LP: #1186062 * drm/mgag200: Fix framebuffer base address programming - LP: #1186062 * hugetlbfs: fix mmap failure in unaligned size request - LP: #1186062 * net: qmi_wwan: fixup missing ethernet header (firmware bug workaround) - LP: #1186062 * net: qmi_wwan: fixup destination address (firmware bug workaround) - LP: #1186062 * net: qmi_wwan: prevent duplicate mac address on link (firmware bug workaround) - LP: #1186062 * tcp: force a dst refcount when prequeue packet - LP: #1186062 * sfc: Fix naming of MTD partitions for FPGA bitfiles - LP: #1186062 * 3c509.c: call SET_NETDEV_DEV for all device types (ISA/ISAPnP/EISA) - LP: #1186062 * net_sched: act_ipt forward compat with xtables - LP: #1186062 * net: use netdev_features_t in skb_needs_linearize() - LP: #1186062 * net: vlan,ethtool: netdev_features_t is more than 32 bit - LP: #1186062 * bridge: fix race with topology change timer - LP: #1186062 * packet: tpacket_v3: do not trigger bug() on wrong header status - LP: #1186062 * 3c59x: fix freeing nonexistent resource on driver unload - LP: #1186062 * 3c59x: fix PCI resource management - LP: #1186062 * if_cablemodem.h: Add parenthesis around ioctl macros - LP: #1186062 * macvlan: fix passthru mode race between dev removal and rx path - LP: #1186062 * ipv6: do not clear pinet6 field - LP: #1186062 * xfrm6: release dev before returning error - LP: #1186062 * ext4: limit group search loop for non-extent files - LP: #1186062 * iscsi-target: Fix processing of OOO commands - LP: #1186062 * tick: Cleanup NOHZ per cpu data on cpu down - LP: #1186062 * ACPI / EC: Restart transaction even when the IBF flag set - LP: #1186062 * drm/radeon: check incoming cliprects pointer - LP: #1186062 * ARM: 7720/1: ARM v6/v7 cmpxchg64 shouldn't clear upper 32 bits of the old/new value - LP: #1186062 * powerpc: Bring all threads online prior to migration/hibernation - LP: #1186062 * timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE - LP: #1186062 * tracing: Fix leaks of filter preds - LP: #1186062 * usermodehelper: check subprocess_info->path != NULL - LP: #1186062 * drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow - LP: #1186062 * ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex - LP: #1186062 * dm thin: do not set discard_zeroes_data - LP: #1186062 * drivers/rtc/rtc-pcf2123.c: fix error return code in pcf2123_probe() - LP: #1186062 * pch_dma: Use GFP_ATOMIC because called from interrupt context - LP: #1186062 * ARM: EXYNOS5: Fix kernel dump in AFTR idle mode - LP: #1186062 * watchdog: Fix race condition in registration code - LP: #1186062 * Linux 3.5.7.13 - LP: #1186062 -- Steve Conklin