From patchwork Wed Jun 22 14:17:30 2011 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: [maverick/ti-omap4,pull,request] CVE fixes X-Patchwork-Submitter: Paolo Pisati X-Patchwork-Id: 101483 Message-Id: <4E01F97A.6010601@canonical.com> To: kernel-team@lists.ubuntu.com Date: Wed, 22 Jun 2011 16:17:30 +0200 From: Paolo Pisati List-Id: Kernel team discussions The following changes since commit c72707ca9d1a6098190da1b1cb84f029761bc27d: can: Add missing socket check in can/bcm release. (2011-06-14 09:21:42 +0100) are available in the git repository at: git://kernel.ubuntu.com/ppisati/ubuntu-maverick.git ti-omap4 Alan Cox (1): tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077 Andy Whitcroft (1): tty: icount changeover for other main devices, CVE-2010-4076, CVE-2010-4077 Dan Carpenter (1): IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4649 Linus Torvalds (2): Rename 'pipe_info()' to 'get_pipe_info()' CVE-2010-4256 Export 'get_pipe_info()' to other users CVE-2010-4256 Oleg Nesterov (1): posix-cpu-timers: workaround to suppress the problems with mt exec, CVE-2010-4248 arch/ia64/hp/sim/simserial.c | 12 +---- drivers/char/amiserial.c | 56 ++++++++++-------- drivers/char/cyclades.c | 49 +++++++++-------- drivers/char/ip2/ip2main.c | 72 ++++++++++++++---------- drivers/char/mxser.c | 62 ++++++++++++--------- drivers/char/nozomi.c | 37 ++++++------ drivers/char/pcmcia/synclink_cs.c | 60 +++++++++----------- drivers/char/synclink.c | 73 +++++++++++------------- drivers/char/synclink_gt.c | 56 ++++++++++--------- drivers/char/synclinkmp.c | 61 +++++++++----------- drivers/char/tty_io.c | 21 +++++++ drivers/infiniband/core/uverbs_cmd.c | 101 +++++++++++++++++++--------------- drivers/serial/68360serial.c | 51 ++++++++--------- drivers/serial/serial_core.c | 37 ++++++------- drivers/usb/serial/usb-serial.c | 13 ++++ fs/pipe.c | 2 +- fs/splice.c | 24 ++------ include/linux/pipe_fs_i.h | 12 ++++ include/linux/tty_driver.h | 9 +++ include/linux/usb/serial.h | 2 + kernel/exit.c | 8 +++ net/bluetooth/rfcomm/tty.c | 4 - 22 files changed, 443 insertions(+), 379 deletions(-) All commits cherry-picked from maverick/master, upstream sha, buglink pointing to the real lp bug and kteam ack included.