linux-mvl-dove 2.6.32-215.32 source package in Ubuntu

Changelog

linux-mvl-dove (2.6.32-215.32) lucid; urgency=low

  [ Tim Gardner ]

  * Tracking Bug
    -LP: #712610

  [Paolo Pisati]

  * UBUNTU: SAUCE: Clear new_profile in error path
    Fixes kernel oops.
    -LP: #732700

  * Revert "dove: enable lcd0 by default"
    Fixes screen corruption regression.
    -LP: #732721

linux-mvl-dove (2.6.32-215.31) lucid; urgency=low

  [ Tim Gardner ]

  * Tracking Bug
    - LP: #712610

  * rebasing to 2.6.32-29.57 was a really bad idea.
    lets forget it ever happened, start afresh
    from Ubuntu-2.6.32-213.29, and just apply CVE patches.

  * inet_diag: Make sure we actually run the same bytecode we audited, CVE-2010-3880
    -LP: #711341
    CVE-2010-3880
  * net: tipc: fix information leak to userland, CVE-2010-3877
    -LP: #711291
    CVE-2010-3877
  * net: packet: fix information leak to userland, CVE-2010-3876
    -LP: #711045
    CVE-2010-3876
  * net: ax25: fix information leak to userland harder, CVE-2010-3875
    -LP: #710714
    CVE-2010-3875
  * net: ax25: fix information leak to userland, CVE-2010-3875
    -LP: #710714
    CVE-2010-3875
  * net: fix rds_iovec page count overflow, CVE-2010-3865
    -LP: #709153
    CVE-2010-3865
  * KVM: VMX: fix vmx null pointer dereference on debug register access, CVE-2010-0435
    -LP: #712615
    CVE-2010-0435
  * af_unix: limit unix_tot_inflight, CVE-2010-4249
    -LP: #720959
    CVE-2010-4249
  * perf_events: Fix perf_counter_mmap() hook in mprotect(), CVE-2010-4169
    -LP: #720966
    CVE-2010-4169
  * tcp: Increase TCP_MAXSEG socket option minimum., CVE-2010-4165
    -LP: #720967
    CVE-2010-4165
  * ipc: initialize structure memory to zero for compat functions, CVE-2010-4073
    -LP: #720968
    CVE-2010-4073

linux-mvl-dove (2.6.32-214.30) lucid; urgency=low

  * This version was really bad. Pretend it never happened.

linux-mvl-dove (2.6.32-213.29) lucid-proposed; urgency=low

  [ Brad Figg ]

  * Rebased to 2.6.32-27.49

  [ Ubuntu: 2.6.32-27.49 ]

  * Revert "SAUCE: AF_ECONET prevent kernel stack overflow"
  * Revert "SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges"
  * Revert "SAUCE: AF_ECONET saddr->cookie prevent NULL pointer
    dereference"
  * [Config] Added be2net, be2scsi to udebs
    - LP: #628776
  * [Config] Use correct be2iscsi module name in d-i/modules/scsi-modules
    - LP: #628776
  * Revert "(pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
    PCIEXP_WAKE_STS on resume"
  * Revert "mm: (pre-stable) Move vma_stack_continue into mm.h"
  * x86, cpu: After uncapping CPUID, re-run CPU feature detection
    - LP: #668380
  * ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
    - LP: #668380
  * ALSA: oxygen: fix analog capture on Claro halo cards
    - LP: #668380
  * ALSA: hda - Add Dell Latitude E6400 model quirk
    - LP: #643891, #668380
  * ALSA: rawmidi: fix oops (use after free) when unloading a driver module
    - LP: #668380
  * USB: fix bug in initialization of interface minor numbers
    - LP: #668380
  * usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX
    style
    - LP: #668380
  * usb: musb: gadget: restart request on clearing endpoint halt
    - LP: #668380
  * oprofile: Add Support for Intel CPU Family 6 / Model 29
    - LP: #668380
  * RDMA/cxgb3: Turn off RX coalescing for iWARP connections
    - LP: #668380
  * mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
    - LP: #668380
  * x86/amd-iommu: Set iommu configuration flags in enable-loop
    - LP: #668380
  * x86/amd-iommu: Fix rounding-bug in __unmap_single
    - LP: #668380
  * x86/amd-iommu: Work around S3 BIOS bug
    - LP: #668380
  * tracing/x86: Don't use mcount in pvclock.c
    - LP: #668380
  * tracing/x86: Don't use mcount in kvmclock.c
    - LP: #668380
  * v4l1: fix 32-bit compat microcode loading translation
    - LP: #668380
  * V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
    - LP: #668380
  * V4L/DVB (13966): DVB-T regression fix for saa7134 cards
    - LP: #668380
  * Input: joydev - fix JSIOCSAXMAP ioctl
    - LP: #668380
  * x86, hpet: Fix bogus error check in hpet_assign_irq()
    - LP: #668380
  * x86, irq: Plug memory leak in sparse irq
    - LP: #668380
  * ubd: fix incorrect sector handling during request restart
    - LP: #668380
  * ring-buffer: Fix typo of time extends per page
    - LP: #668380
  * dmaengine: fix interrupt clearing for mv_xor
    - LP: #668380
  * hrtimer: Preserve timer state in remove_hrtimer()
    - LP: #668380
  * i2c-pca: Fix waitforcompletion() return value
    - LP: #668380
  * wext: fix potential private ioctl memory content leak
    - LP: #668380
  * atl1: fix resume
    - LP: #668380
  * x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
    - LP: #668380
  * De-pessimize rds_page_copy_user
    - LP: #668380
  * xfrm4: strip ECN and IP Precedence bits in policy lookup
    - LP: #668380
  * tcp: Fix >4GB writes on 64-bit.
    - LP: #668380
  * net: Fix the condition passed to sk_wait_event()
    - LP: #668380
  * Phonet: Correct header retrieval after pskb_may_pull
    - LP: #668380
  * net: Fix IPv6 PMTU disc. w/ asymmetric routes
    - LP: #668380
  * ip: fix truesize mismatch in ip fragmentation
    - LP: #668380
  * net: clear heap allocations for privileged ethtool actions
    - LP: #668380
  * tcp: Fix race in tcp_poll
    - LP: #668380
  * netxen: dont set skb->truesize
    - LP: #668380
  * net: blackhole route should always be recalculated
    - LP: #668380
  * skge: add quirk to limit DMA
    - LP: #668380
  * r8169: allocate with GFP_KERNEL flag when able to sleep
    - LP: #668380
  * bsg: fix incorrect device_status value
    - LP: #668380
  * r6040: fix r6040_multicast_list
    - LP: #668380
  * r6040: Fix multicast list iteration when hash filter is used
    - LP: #668380
  * powerpc: Initialise paca->kstack before early_setup_secondary
    - LP: #668380
  * powerpc: Don't use kernel stack with translation off
    - LP: #668380
  * b44: fix carrier detection on bind
    - LP: #668380
  * ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on
    resume
    - LP: #613381, #668380
  * intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot hang
    - LP: #668380
  * ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite
    L355
    - LP: #668380
  * ACPI: delete ZEPTO idle=nomwait DMI quirk
    - LP: #668380
  * ACPI: Disable Windows Vista compatibility for Toshiba P305D
    - LP: #668380
  * x86: detect scattered cpuid features earlier
    - LP: #668380
  * fix 2.6.32.23 suspend regression caused by commit 6f6198a
    - LP: #668380
  * setup_arg_pages: diagnose excessive argument size
    - LP: #668380
  * execve: improve interactivity with large arguments
    - LP: #668380
  * execve: make responsive to SIGKILL with large arguments
    - LP: #668380
  * Phonet: disable network namespace support
    - LP: #668380
  * mm: Move vma_stack_continue into mm.h
    - LP: #668380
  * Linux 2.6.32.25
    - LP: #668380
  * xfs: validate untrusted inode numbers during lookup
    - CVE-2010-2943
  * xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED
    - CVE-2010-2943
  * xfs: remove block number from inode lookup code
    - CVE-2010-2943
  * xfs: fix untrusted inode number lookup
    - CVE-2010-2943
  * drm/i915: Sanity check pread/pwrite
    - CVE-2010-2962
  * drm/i915: Rephrase pwrite bounds checking to avoid any potential
    overflow
    - CVE-2010-2962
  * net: clear heap allocation for ETHTOOL_GRXCLSRLALL
    - CVE-2010-3861
  * ipc: shm: fix information leak to userland
    - CVE-2010-4072
  * staging: usbip: Notify usb core of port status changes
    - LP: #681132
  * staging: usbip: Process event flags without delay
    - LP: #681132
  * powerpc/perf: Fix sampling enable for PPC970
    - LP: #681132
  * pcmcia: synclink_cs: fix information leak to userland
    - LP: #681132
  * sched: Fix string comparison in /proc/sched_features
    - LP: #681132
  * bluetooth: Fix missing NULL check
    - LP: #681132
  * futex: Fix errors in nested key ref-counting
    - LP: #681132
  * mm, x86: Saving vmcore with non-lazy freeing of vmas
    - LP: #681132
  * x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
    - LP: #681132
  * x86, kexec: Make sure to stop all CPUs before exiting the kernel
    - LP: #681132
  * x86, olpc: Don't retry EC commands forever
    - LP: #681132
  * x86, mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD
    CPUs
    - LP: #681132
  * x86, intr-remap: Set redirection hint in the IRTE
    - LP: #681132
  * x86, kdump: Change copy_oldmem_page() to use cached addressing
    - LP: #681132
  * KVM: SVM: Fix wrong intercept masks on 32 bit
    - LP: #681132
  * KVM: MMU: fix direct sps access corrupted
    - LP: #681132
  * KVM: MMU: fix conflict access permissions in direct sp
    - LP: #681132
  * KVM: VMX: Fix host GDT.LIMIT corruption
    - LP: #681132
  * KVM: SVM: Adjust tsc_offset only if tsc_unstable
    - LP: #681132
  * KVM: x86: Fix SVM VMCB reset
    - LP: #681132
  * KVM: x86: Move TSC reset out of vmcb_init
    - LP: #681132
  * KVM: Fix fs/gs reload oops with invalid ldt
    - LP: #681132
  * KVM: Correct ordering of ldt reload wrt fs/gs reload
  * KVM: VMX: Fix host userspace gsbase corruption
  * pipe: fix failure to return error code on ->confirm()
    - LP: #681132
  * p54usb: fix off-by-one on !CONFIG_PM
    - LP: #681132
  * p54usb: add five more USBIDs
    - LP: #681132
  * drivers/net/wireless/p54/eeprom.c: Return -ENOMEM on memory allocation
    failure
    - LP: #681132
  * USB: ftdi_sio: Add PID for accesio products
    - LP: #681132
  * USB: add PID for FTDI based OpenDCC hardware
    - LP: #681132
  * USB: ftdi_sio: new VID/PIDs for various Papouch devices
    - LP: #681132
  * USB: ftdi_sio: add device ids for ScienceScope
    - LP: #681132
  * usb: musb: blackfin: call gpio_free() on error path in
    musb_platform_init()
    - LP: #681132
  * USB: option: Add more ZTE modem USB id's
    - LP: #681132
  * USB: cp210x: Add Renesas RX-Stick device ID
    - LP: #681132
  * USB: cp210x: Add WAGO 750-923 Service Cable device ID
    - LP: #681132
  * USB: atmel_usba_udc: force vbus_pin at -EINVAL when gpio_request
    failled
    - LP: #681132
  * USB: disable endpoints after unbinding interfaces, not before
    - LP: #681132
  * USB: opticon: Fix long-standing bugs in opticon driver
    - LP: #681132
  * USB: accept some invalid ep0-maxpacket values
    - LP: #681132
  * sd name space exhaustion causes system hang
    - LP: #681132
  * libsas: fix NCQ mixing with non-NCQ
    - LP: #681132
  * gdth: integer overflow in ioctl
    - LP: #681132
  * Fix race when removing SCSI devices
    - LP: #681132
  * Fix regressions in scsi_internal_device_block
    - LP: #681132
  * sgi-xp: incoming XPC channel messages can come in after the channel's
    partition structures have been torn down
    - LP: #681132
  * Linux 2.6.32.26
    - LP: #681132
  * drm/radeon: fix PCI ID 5657 to be an RV410
    - LP: #683257
  * Linux 2.6.32.26+drm33.12
    - LP: #683257
  * econet: disallow NULL remote addr for sendmsg(), fixes CVE-2010-3849
    - CVE-2010-3849
  * econet: fix CVE-2010-3850
    - CVE-2010-3850
  * econet: fix CVE-2010-3848
    - CVE-2010-3848

  [ Ubuntu: 2.6.32-26.48 ]

  * SAUCE: AF_ECONET prevent kernel stack overflow
    - CVE-2010-3848
  * SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges
    - CVE-2010-3850
  * SAUCE: AF_ECONET saddr->cookie prevent NULL pointer dereference
    - CVE-2010-3849

  [ Ubuntu: 2.6.32-26.47 ]

  * Revert "SAUCE: ALSA: HDA: Enable internal mic on Dell E6410 and Dell
    E6510"
  * Revert "[Config] Added be2net, be2scsi to udebs"
  * Revert "(ore-stable) ALSA: hda - Apply ALC269 VAIO fix-up to all Sony
    laptops with ALC269"
  * Revert "(pre-stable) ALSA: HDA: Correctly apply position_fix quirks for
    ATI and VIA controllers"
  * Revert "ALSA: hda: Use LPIB for another mainboard"
  * Revert "ALSA: hda: Use LPIB for ASUS M2V"
  * Revert "ALSA: hda: Use LPIB for an ASUS device"
  * Buglink Fixup for reverted unverified fixes

  [ Ubuntu: 2.6.32-26.46 ]

  * SAUCE: ALSA: HDA: Enable internal mic on Dell E6410 and Dell E6510
    - See: #605047, #628961
  * [Config] Added be2net, be2scsi to udebs
    - See: #628776
  * Revert "(pre-stable) drm/i915: add PANEL_UNLOCK_REGS definition"
    - LP: #645444
  * Revert "(pre-stable) drm/i915: make sure we shut off the panel in eDP
    configs"
    - LP: #645444
  * Revert "(pre-stable) drm/i915: make sure eDP panel is turned on"
    - LP: #645444
  * Revert "(pre-stable) drm/radeon/kms: initialize set_surface_reg reg for
    rs600 asic"
    - LP: #645371
  * Revert "drm/nouveau: Fix fbcon corruption with font width not divisible
    by 8"
    - LP: #663176
  * mmc: fix all hangs related to mmc/sd card insert/removal during
    suspend/resume
    - LP: #477106
  * mmc: build fix: mmc_pm_notify is only available with CONFIG_PM=y
    - LP: #477106
  * hwmon: (k8temp) Differentiate between AM2 and ASB1
    - LP: #644694
  * xen: handle events as edge-triggered
    - LP: #644694
  * xen: use percpu interrupts for IPIs and VIRQs
    - LP: #644694
  * ALSA: hda - Rename iMic to Int Mic on Lenovo NB0763
    - LP: #605101, #644694
  * sata_mv: fix broken DSM/TRIM support (v2)
    - LP: #644694
  * x86, tsc, sched: Recompute cyc2ns_offset's during resume from sleep
    states
    - LP: #644694
  * PCI: MSI: Remove unsafe and unnecessary hardware access
    - LP: #644694
  * PCI: MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc()
    - LP: #644694
  * sched: kill migration thread in CPU_POST_DEAD instead of CPU_DEAD
    - LP: #644694
  * sched: revert stable c6fc81a sched: Fix a race between ttwu() and
    migrate_task()
    - LP: #644694
  * staging: hv: Fix missing functions for net_device_ops
    - LP: #644694
  * staging: hv: Fixed bounce kmap problem by using correct index
    - LP: #644694
  * staging: hv: Fixed the value of the 64bit-hole inside ring buffer
    - LP: #644694
  * staging: hv: Increased storvsc ringbuffer and max_io_requests
    - LP: #644694
  * staging: hv: Fixed lockup problem with bounce_buffer scatter list
    - LP: #644694
  * fuse: flush background queue on connection close
    - LP: #644694
  * ath9k_hw: fix parsing of HT40 5 GHz CTLs
    - LP: #644694
  * ocfs2: Fix incorrect checksum validation error
    - LP: #644694
  * USB: ehci-ppc-of: problems in unwind
    - LP: #644694
  * USB: Fix kernel oops with g_ether and Windows
    - LP: #644694
  * USB: CP210x Add new device ID
    - LP: #644694
  * USB: cp210x: Add B&G H3000 link cable ID
    - LP: #644694
  * USB: ftdi_sio: Added custom PIDs for ChamSys products
    - LP: #644694
  * USB: serial: Extra device/vendor ID for mos7840 driver
    - LP: #644694
  * usb: serial: mos7840: Add USB ID to support the B&B Electronics
    USOPTL4-2P.
    - LP: #644694
  * USB: mos7840: fix DMA buffers on stack and endianess bugs
    - LP: #644694
  * usb: serial: mos7840: Add USB IDs to support more B&B USB/RS485
    converters.
    - LP: #644694
  * USB: Exposing second ACM channel as tty for Nokia S60 phones.
    - LP: #644694
  * USB: cdc-acm: add another device quirk
    - LP: #644694
  * USB: Expose vendor-specific ACM channel on Nokia 5230
    - LP: #644694
  * USB: cdc-acm: Adding second ACM channel support for various Nokia and
    one Samsung phones
    - LP: #644694
  * USB: cdc-acm: Add pseudo modem without AT command capabilities
    - LP: #644694
  * USB: cdc-acm: Fixing crash when ACM probing interfaces with no endpoint
    descriptors.
    - LP: #644694
  * ALSA: hda - Fix auto-parser of ALC269vb for HP pin NID 0x21
    - LP: #644694
  * ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open()
    - LP: #644694
  * sysfs: checking for NULL instead of ERR_PTR
    - LP: #644694
  * tun: Don't add sysfs attributes to devices without sysfs directories
    - LP: #644694
  * oprofile: fix crash when accessing freed task structs
    - LP: #644694
  * oprofile, x86: fix init_sysfs error handling
    - LP: #644694
  * oprofile, x86: fix init_sysfs() function stub
    - LP: #644694
  * HID: usbhid: initialize interface pointers early enough
    - LP: #644694
  * HID: fix suspend crash by moving initializations earlier
    - LP: #644694
  * libata: skip EH autopsy and recovery during suspend
    - LP: #644694
  * tracing: Fix a race in function profile
    - LP: #644694
  * tracing: Do not allow llseek to set_ftrace_filter
    - LP: #644694
  * tracing: t_start: reset FTRACE_ITER_HASH in case of seek/pread
    - LP: #644694
  * irda: off by one
    - LP: #644694
  * gcov: fix null-pointer dereference for certain module types
    - LP: #644694
  * tmio_mmc: don't clear unhandled pending interrupts
    - LP: #644694
  * mmc: fix the use of kunmap_atomic() in tmio_mmc.h
    - LP: #644694
  * bounce: call flush_dcache_page() after bounce_copy_vec()
    - LP: #644694
  * kernel/groups.c: fix integer overflow in groups_search
    - LP: #644694
  * binfmt_misc: fix binfmt_misc priority
    - LP: #644694
  * Input: i8042 - fix device removal on unload
    - LP: #644694
  * memory hotplug: fix next block calculation in is_removable
    - LP: #644694
  * perf: Initialize callchains roots's childen hits
    - LP: #644694
  * p54: fix tx feedback status flag check
    - LP: #644694
  * ath5k: check return value of ieee80211_get_tx_rate
    - LP: #644694
  * wireless extensions: fix kernel heap content leak
    - LP: #644694
  * x86, tsc: Fix a preemption leak in restore_sched_clock_state()
    - LP: #644694
  * sched: Protect task->cpus_allowed access in sched_getaffinity()
    - LP: #644694
  * sched: Protect sched_rr_get_param() access to task->sched_class
    - LP: #644694
  * sched: Consolidate select_task_rq() callers
    - LP: #644694
  * sched: Remove unused cpu_nr_migrations()
    - LP: #644694
  * sched: Remove rq->clock coupling from set_task_cpu()
    - LP: #644694
  * sched: Clean up ttwu() rq locking
    - LP: #644694
  * sched: Sanitize fork() handling
    - LP: #644694
  * sched: Remove forced2_migrations stats
    - LP: #644694
  * sched: Make wakeup side and atomic variants of completion API irq safe
    - LP: #644694
  * sched: Use rcu in sys_sched_getscheduler/sys_sched_getparam()
    - LP: #644694
  * sched: Use rcu in sched_get/set_affinity()
    - LP: #644694
  * sched: Use rcu in sched_get_rr_param()
    - LP: #644694
  * sched: Fix set_cpu_active() in cpu_down()
    - LP: #644694
  * sched: Use TASK_WAKING for fork wakups
    - LP: #644694
  * sched: Ensure set_task_cpu() is never called on blocked tasks
    - LP: #644694
  * sched: Make warning less noisy
    - LP: #644694
  * sched: Fix broken assertion
    - LP: #644694
  * sched: Fix sched_exec() balancing
    - LP: #644694
  * sched: Fix select_task_rq() vs hotplug issues
    - LP: #644694
  * sched: Add pre and post wakeup hooks
    - LP: #644694
  * sched: Remove the cfs_rq dependency from set_task_cpu()
    - LP: #644694
  * sched: Fix hotplug hang
    - LP: #644694
  * sched: Fix fork vs hotplug vs cpuset namespaces
    - LP: #644694
  * sched: Fix incorrect sanity check
    - LP: #644694
  * sched: Fix race between ttwu() and task_rq_lock()
    - LP: #644694
  * sched: Extend enqueue_task to allow head queueing
    - LP: #644694
  * sched: Implement head queueing for sched_rt
    - LP: #644694
  * sched: Queue a deboosted task to the head of the RT prio queue
    - LP: #644694
  * sched: set_cpus_allowed_ptr(): Don't use rq->migration_thread after
    unlock
    - LP: #644694
  * sched: Kill the broken and deadlockable
    cpuset_lock/cpuset_cpus_allowed_locked code
    - LP: #644694
  * sched: move_task_off_dead_cpu(): Take rq->lock around
    select_fallback_rq()
    - LP: #644694
  * sched: move_task_off_dead_cpu(): Remove retry logic
    - LP: #644694
  * sched: sched_exec(): Remove the select_fallback_rq() logic
    - LP: #644694
  * sched: _cpu_down(): Don't play with current->cpus_allowed
    - LP: #644694
  * sched: Make select_fallback_rq() cpuset friendly
    - LP: #644694
  * sched: Fix TASK_WAKING vs fork deadlock
    - LP: #644694
  * sched: Optimize task_rq_lock()
    - LP: #644694
  * sched: Fix nr_uninterruptible count
    - LP: #644694
  * sched: Fix rq->clock synchronization when migrating tasks
    - LP: #644694
  * sched: Remove unnecessary RCU exclusion
    - LP: #644694
  * sched: apply RCU protection to wake_affine()
    - LP: #644694
  * sched: Cleanup select_task_rq_fair()
    - LP: #644694
  * sched: More generic WAKE_AFFINE vs select_idle_sibling()
    - LP: #644694
  * sched: Fix vmark regression on big machines
    - LP: #644694
  * sched: Fix select_idle_sibling()
    - LP: #644694
  * sched: Pre-compute cpumask_weight(sched_domain_span(sd))
    - LP: #644694
  * sched: Fix select_idle_sibling() logic in select_task_rq_fair()
    - LP: #644694
  * sched: cpuacct: Use bigger percpu counter batch values for stats
    counters
    - LP: #644694
  * ALSA: hda - Handle missing NID 0x1b on ALC259 codec
    - LP: #644694
  * ALSA: hda - Handle pin NID 0x1a on ALC259/269
    - LP: #644694
  * arm: fix really nasty sigreturn bug
    - LP: #644694
  * hwmon: (f75375s) Shift control mode to the correct bit position
    - LP: #644694
  * hwmon: (f75375s) Do not overwrite values read from registers
    - LP: #644694
  * apm_power: Add missing break statement
    - LP: #644694
  * NFS: Fix a typo in nfs_sockaddr_match_ipaddr6
    - LP: #644694
  * SUNRPC: Fix race corrupting rpc upcall
    - LP: #644694
  * Linux 2.6.32.22
    - LP: #644694
  * drm/i915: don't access FW_BLC_SELF on 965G
    - LP: #645444
  * drm/i915: gen3 page flipping fixes
    - LP: #645444
  * drm/i915: don't queue flips during a flip pending event
    - LP: #645444
  * drm/i915: Hold the spinlock whilst resetting unpin_work along error
    path
    - LP: #645444
  * drm/i915: handle shared framebuffers when flipping
    - LP: #645444
  * drm/i915: add PANEL_UNLOCK_REGS definition
    - LP: #645444
  * drm/i915: make sure eDP panel is turned on
    - LP: #645444
  * drm/i915: make sure we shut off the panel in eDP configs
    - LP: #645444
  * Linux 2.6.32.22+drm33.9
    - LP: #645444
  * drm/radeon/kms/igp: sideport is AMD only
    - LP: #645371
  * drm/radeon/kms: flush HDP cache on GART table updates.
    - LP: #645371
  * drm/radeon/kms/r7xx: add workaround for hw issue with HDP flush
    - LP: #645371
  * drm/i915: Check overlay stride errata for i830 and i845
    - LP: #645371
  * i915: fix ironlake edp panel setup (v4)
    - LP: #645371
  * drm/radeon/kms: add additional quirk for Acer rv620 laptop
    - LP: #645371
  * drm/i915: fixup pageflip ringbuffer commands for i8xx
    - LP: #645371
  * drm/i915: i8xx also doesn't like multiple oustanding pageflips
    - LP: #645371
  * drm/i915/edp: Flush the write before waiting for PLLs
    - LP: #645371
  * drm/radeon/kms: disable MSI on IGP chips
    - LP: #645371
  * drm/radeon/kms: don't enable MSIs on AGP boards
    - LP: #645371
  * drm/radeon/kms: fix typo in radeon_compute_pll_gain
    - LP: #645371
  * drm/radeon/kms/DCE3+: switch pads to ddc mode when going i2c
    - LP: #645371
  * drm/radeon/kms: fix sideport detection on newer rs880 boards
    - LP: #645371
  * drm/i915: Don't touch PORT_HOTPLUG_EN in intel_dp_detect()
    - LP: #645371
  * drm/i915: Kill dangerous pending-flip debugging
    - LP: #645371
  * drm/radeon/kms: release AGP bridge at suspend
    - LP: #645371
  * drm/radeon/kms: initialize set_surface_reg reg for rs600 asic
    - LP: #645371
  * drm/radeon/kms: fix a regression on r7xx AGP due to the HDP flush fix
    - LP: #645371
  * Linux 2.6.32.22+drm33.10
    - LP: #645371
  * USB: serial/mos*: prevent reading uninitialized stack memory
    - LP: #649483
  * sparc: Provide io{read,write}{16,32}be().
    - LP: #649483
  * gro: fix different skb headrooms
    - LP: #649483
  * gro: Re-fix different skb headrooms
    - LP: #649483
  * irda: Correctly clean up self->ias_obj on irda_bind() failure.
    - LP: #649483
  * tcp: select(writefds) don't hang up when a peer close connection
    - LP: #649483
  * tcp: Combat per-cpu skew in orphan tests.
    - LP: #649483
  * tcp: fix three tcp sysctls tuning
    - LP: #649483
  * bridge: Clear IPCB before possible entry into IP stack
    - LP: #649483
  * bridge: Clear INET control block of SKBs passed into ip_fragment().
    - LP: #649483
  * net: Fix oops from tcp_collapse() when using splice()
    - LP: #649483
  * rds: fix a leak of kernel memory
    - LP: #649483
  * tcp: Prevent overzealous packetization by SWS logic.
    - LP: #649483
  * UNIX: Do not loop forever at unix_autobind().
    - LP: #649483
  * r8169: fix random mdio_write failures
    - LP: #649483
  * r8169: fix mdio_read and update mdio_write according to hw specs
    - LP: #649483
  * sparc64: Get rid of indirect p1275 PROM call buffer.
    - LP: #649483
  * drivers/net/usb/hso.c: prevent reading uninitialized memory
    - LP: #649483
  * drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack
    memory
    - LP: #649483
  * drivers/net/eql.c: prevent reading uninitialized stack memory
    - LP: #649483
  * bonding: correctly process non-linear skbs
    - LP: #649483
  * Staging: vt6655: fix buffer overflow
    - LP: #649483
  * net/llc: make opt unsigned in llc_ui_setsockopt()
    - LP: #649483
  * pid: make setpgid() system call use RCU read-side critical section
    - LP: #649483
  * sched: Fix user time incorrectly accounted as system time on 32-bit
    - LP: #649483
  * oprofile: Add Support for Intel CPU Family 6 / Model 22 (Intel Celeron
    540)
    - LP: #649483
  * char: Mark /dev/zero and /dev/kmem as not capable of writeback
    - LP: #649483
  * drivers/pci/intel-iommu.c: fix build with older gcc's
    - LP: #649483
  * drivers/video/sis/sis_main.c: prevent reading uninitialized stack
    memory
    - LP: #649483
  * percpu: fix pcpu_last_unit_cpu
    - LP: #649483
  * aio: check for multiplication overflow in do_io_submit
    - LP: #649483
  * inotify: send IN_UNMOUNT events
    - LP: #649483
  * SCSI: mptsas: fix hangs caused by ATA pass-through
    - LP: #649483
  * ext4: Fix remaining racy updates of EXT4_I(inode)->i_flags
    - LP: #649483
  * IA64: fix siglock
    - LP: #649483
  * IA64: Optimize ticket spinlocks in fsys_rt_sigprocmask
    - LP: #649483
  * KEYS: Fix RCU no-lock warning in keyctl_session_to_parent()
    - LP: #649483
  * KEYS: Fix bug in keyctl_session_to_parent() if parent has no session
    keyring
    - LP: #649483
  * xfs: prevent reading uninitialized stack memory
    - LP: #649483
  * drivers/video/via/ioctl.c: prevent reading uninitialized stack memory
    - LP: #649483
  * ACPI: disable _OSI(Windows 2009) on Asus K50IJ
    - LP: #649483
  * bnx2: Fix netpoll crash.
    - LP: #649483
  * bnx2: Fix hang during rmmod bnx2.
    - LP: #649483
  * AT91: change dma resource index
    - LP: #649483
  * cxgb3: fix hot plug removal crash
    - LP: #649483
  * mm: page allocator: drain per-cpu lists after direct reclaim allocation
    fails
    - LP: #649483
  * mm: page allocator: calculate a better estimate of NR_FREE_PAGES when
    memory is low and kswapd is awake
    - LP: #649483
  * mm: page allocator: update free page counters after pages are placed on
    the free list
    - LP: #649483
  * guard page for stacks that grow upwards
    - LP: #649483
  * Fix unprotected access to task credentials in waitid()
    - LP: #649483
  * sctp: Do not reset the packet during sctp_packet_config().
    - LP: #649483
  * 3c503: Fix IRQ probing
    - LP: #649483
  * asix: fix setting mac address for AX88772
    - LP: #649483
  * dasd: use correct label location for diag fba disks
    - LP: #649483
  * clocksource: sh_tmu: compute mult and shift before registration
    - LP: #649483
  * gro: Fix bogus gso_size on the first fraglist entry
    - LP: #649483
  * hostap_pci: set dev->base_addr during probe
    - LP: #649483
  * inotify: fix inotify oneshot support
    - LP: #649483
  * Input: add compat support for sysfs and /proc capabilities output
    - LP: #649483
  * MIPS: Quit using undefined behavior of ADDU in 64-bit atomic
    operations.
    - LP: #649483
  * MIPS: Set io_map_base for several PCI bridges lacking it
    - LP: #649483
  * MIPS: uasm: Add OR instruction.
    - LP: #649483
  * pata_pdc202xx_old: fix UDMA mode for Promise UDMA33 cards
    - LP: #649483
  * pata_pdc202xx_old: fix UDMA mode for PDC2026x chipsets
    - LP: #649483
  * MIPS: Sibyte: Fix M3 TLB exception handler workaround.
    - LP: #649483
  * sis-agp: Remove SIS 760, handled by amd64-agp
    - LP: #649483
  * alpha: Fix printk format errors
    - LP: #649483
  * x86: Add memory modify constraints to xchg() and cmpxchg()
    - LP: #649483
  * Linux 2.6.32.23
    - LP: #649483
  * (pre-stable) [SCSI] megaraid_sas: Add new megaraid SAS 2 controller
    support to the driver
    - LP: #546091
  * (pre-stable) [SCSI] megaraid_sas: allocate the application cmds to sas2
    controller
    - LP: #546091
  * Xen: fix typo in previous patch
    - LP: #655456
  * Linux 2.6.32.24
    - LP: #655456
  * (ore-stable) ALSA: hda - Apply ALC269 VAIO fix-up to all Sony laptops
    with ALC269
    - See: #546769, #598938, #637291, #642892, #648871, #655386
  * (pre-stable) ALSA: HDA: Correctly apply position_fix quirks for ATI and
    VIA controllers
    - See: #465942, #580749, #587546
  * (pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
    PCIEXP_WAKE_STS on resume
    - LP: #613381
  * i915: return -EFAULT if copy_to_user fails
    - LP: #663176
  * i915_gem: return -EFAULT if copy_to_user fails
    - LP: #663176
  * drm/i915: Prevent double dpms on
    - LP: #663176
  * drm: Only decouple the old_fb from the crtc is we call mode_set*
    - LP: #663176
  * drm/radeon/kms: fix potential segfault in r600_ioctl_wait_idle
    - LP: #663176
  * drm/i915: Unset cursor if out-of-bounds upon mode change (v4)
    - LP: #586325, #663176
  * drm/i915: disable FBC when more than one pipe is active
    - LP: #663176
  * drm/radeon/kms: fix macbookpro connector quirk
    - LP: #663176
  * drm/nouveau: use ALIGN instead of open coding it
    - LP: #663176
  * drm/nouveau: Fix fbcon corruption with font width not divisible by 8
    - LP: #663176
  * drm/i915,agp/intel: Add second set of PCI-IDs for B43
    - LP: #640214, #663176
  * Linux 2.6.32.24+drm33.11
    - LP: #663176

  [ Ubuntu: 2.6.32-25.45 ]

  * v4l: disable dangerous buggy compat function
    - CVE-2010-2963
  * Local privilege escalation vulnerability in RDS sockets
    - CVE-2010-3904
  * mm: (pre-stable) Move vma_stack_continue into mm.h
    - LP: #646114
  * net sched: fix some kernel memory leaks
    - CVE-2010-2942
  * irda: Correctly clean up self->ias_obj on irda_bind() failure.
    - CVE-2010-2954
  * wireless extensions: fix kernel heap content leak
    - CVE-2010-2955
  * KEYS: Fix RCU no-lock warning in keyctl_session_to_parent()
    - CVE-2010-2960
  * KEYS: Fix bug in keyctl_session_to_parent() if parent has no session
    keyring
    - CVE-2010-2960
  * aio: check for multiplication overflow in do_io_submit
    - CVE-2010-3067
  * xfs: prevent reading uninitialized stack memory
    - CVE-2010-3078
  * ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open()
    - CVE-2010-3080
  * niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL
    - CVE-2010-3084
  * rose: Fix signedness issues wrt. digi count.
    - CVE-2010-3310
  * sctp: Do not reset the packet during sctp_packet_config().
    - CVE-2010-3432
  * Fix pktcdvd ioctl dev_minor range check
    - CVE-2010-3437
  * ALSA: prevent heap corruption in snd_ctl_new()
    - CVE-2010-3442
  * net sched: fix kernel leak in act_police
    - CVE-2010-3477
  * Fix out-of-bounds reading in sctp_asoc_get_hmac()
    - CVE-2010-3705
  * ocfs2: Don't walk off the end of fast symlinks.
    - CVE-2010-NNN2

linux-mvl-dove (2.6.32-212.28) lucid-proposed; urgency=low

  [ Eric Miao ]

  * Sync config with LSP 5.3.6
    - LP: #677498

  [ Upstream Kernel Changes ]

  * IDT clock: Clear all output in default
  * idt clock: add sysfs files for accessing registers
  * cs42l51 codec: provide back the set_bias_level
  * Force return stack off
  * bmm: export bmm alloc memory to kernel
  * bmm: fix module reinset get physical address 0 issue
  * bmm: support highmem
  * fix potential bug in coverity report
  * bmm: mutex replace spin_lock
  * NAND: add support for Samsung 2G devices
  * sdio: rework cis tuple parsing
  * sdio: fix reference counting in sdio_remove_func()
  * sdio: initialise SDIO functions and update card->sdio_funcs in lockstep
  * mmc: allow for MMC v4.4
  * sdio: add quirk to clamp byte mode transfer
  * sdio: introduce API for special power management features
  * sdio: don't use CMD[357] as part of a powered SDIO resume
  * sdio: kick the interrupt thread upon a resume
  * sdio: put active devices into 1-bit mode during suspend
  * sdio: recognize io card without powercycle
  * mmc: fix incorrect interpretation of card type bits
  * mmc: sd: clean up redundant memset
  * mmc: remove the "state" argument to mmc_suspend_host()
  * sdio: add new function for RAW (Read after Write) operation
  * mmc: fix all hangs related to mmc/sd card insert/removal during
    suspend/resume
  * mmc: build fix: mmc_pm_notify is only available with CONFIG_PM=y
  * pmem: Add cache flush ioctl for pmem buffers
  * dove: enable lcd0 by default
  * Dove: detect 1GHz clocks
  * Fix rt5611_ts touch screen driver to solve touch insenstive issue, that
    occur in a special timing condition, driver will not be easy to sample
    X or Y but Busy instead.
  * remove rt5611_ts.c debug message
  * update dove_android_defconfig based on dove_defconfig
  * vmeta uio driver support multi-instance decoding
  * update vmeta uio driver version to build-004
  * vmeta uio driver add suspend unset control func
  * update dove_android_defconfig
  * usb gadget: Fix mismatch on commit
    2c7c4829ac40fd18852a0c8bf0521a30a2ef2098 Author: Mike Lockwood
    <email address hidden> Date: Tue Dec 2 22:01:33 2008 -0500
  * drivers: usb: gadget: Add helper function for installing ACM gadget
    function.
  * USB: gadget: android: android USB gadget improvements:
  * drivers: usb: gadget: handle NULL descriptors in composite config_buf
  * USB: composite: Fix USB WHQL Certification Issues
  * USB: android gadget: mass storage: Fix format issue for Vista Host
  * USB: composite: Add flag to usb_function to hide its interface during
    enumeration
  * USB: composite: Allow configurations to handle unhandled setup requests
  * USB: gadget: android: android USB gadget improvements:
  * USB: composite: Add class driver for enabling and disabling USB
    functions.
  * USB: gadget: Disable RNDIS function by default if
    CONFIG_USB_ANDROID_RNDIS is set
  * USB: composite: Compute interface numbers correctly when functions are
    hidden.
  * USB: gadget: android: Fix special case for RNDIS ethernet function
  * Add USB_ANDROID_RNDIS_WCEIS option.
  * USB: gadget: android: Disable UMS when RNDIS ethernet is active.
  * USB: gadget: composite: Don't call set_alt() on functions that are
    hidden.
  * USB: gadget: composite: Don't increment interface number for alt
    settings.
  * USB: gadget: android: check for null _android_dev in
    android_register_function()
  * USB: gadget: composite: Add userspace notifications for USB state
    changes
  * USB: gadget: composite: Move switch_set_state calls to a work queue
  * USB: composite: Add usb_composite_force_reset utility to force
    enumeration
  * dove android : support adb function
  * dove: disable write coalescing
 -- Tim Gardner <email address hidden>   Mon, 14 Mar 2011 11:29:35 -0600