Change logs for linux-lts-backport-maverick source package in Lucid

  • linux-lts-backport-maverick (2.6.35-32.68~lucid1) lucid-proposed; urgency=low
    
      [ Luis Henriques ]
    
      * Release Tracking Bug
        - LP: #967068
    
      [ Andy Whitcroft ]
    
      * [Config] restore build-% shortcut
    
      [ Upstream Kernel Changes ]
    
      * bsg: fix sysfs link remove warning
        - LP: #946928
      * regset: Prevent null pointer reference on readonly regsets
        - LP: #949905
        - CVE-2012-1097
      * regset: Return -EFAULT, not -EIO, on host-side memory fault
        - LP: #949905
        - CVE-2012-1097
      * mm: memcg: Correct unregistring of events attached to the same eventfd
        - LP: #952828
        - CVE-2012-1146
      * KVM: Remove ability to assign a device without iommu support
        - LP: #897812
        - CVE-2011-4347
      * KVM: x86: extend "struct x86_emulate_ops" with "get_cpuid"
        - LP: #917842
        - CVE-2012-0045
      * KVM: x86: fix missing checks in syscall emulation
        - LP: #917842
        - CVE-2012-0045
      * eCryptfs: Clear ECRYPTFS_NEW_FILE flag during truncate
        - LP: #745836
     -- Luis Henriques <email address hidden>   Wed, 28 Mar 2012 16:24:53 +0100
  • linux-lts-backport-maverick (2.6.35-32.67~lucid1) lucid-proposed; urgency=low
    
      [Luis Henriques]
    
      * Release Tracking Bug
        - LP: #947898
    
      [ Upstream Kernel Changes ]
    
      * KVM: Device assignment permission checks
        - LP: #897812
        - CVE-2011-4347
    
    linux (2.6.35-32.66) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #931600
    
      [ Upstream Kernel Changes ]
    
      * net: ip_expire() must revalidate route
        - LP: #922051
        - CVE-2011-1927
      * bridge: Fix mglist corruption that leads to memory corruption
        - LP: #917813
        - CVE-2011-0716
      * AppArmor: fix oops in apparmor_setprocattr
        - LP: #789409
        - CVE-2011-3619
     -- Luis Henriques <email address hidden>   Tue, 06 Mar 2012 15:51:10 +0000
  • linux-lts-backport-maverick (2.6.35-32.66~lucid1) lucid-proposed; urgency=low
    
      [Brad Figg]
    
      * Release Tracking Bug
        - LP: #931795
    
      [ Upstream Kernel Changes ]
    
      * net: ip_expire() must revalidate route
        - LP: #922051
        - CVE-2011-1927
      * bridge: Fix mglist corruption that leads to memory corruption
        - LP: #917813
        - CVE-2011-0716
      * AppArmor: fix oops in apparmor_setprocattr
        - LP: #789409
        - CVE-2011-3619
    
    linux (2.6.35-32.65) maverick-proposed; urgency=low
    
      [Brad Figg]
    
      * Release Tracking Bug
        - LP: #920677
    
      [ Upstream Kernel Changes ]
    
      * fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message, CVE-2011-3353
        - LP: #905058
        - CVE-2011-3353
      * KVM: x86: Prevent starting PIT timers in the absence of irqchip support
        - LP: #911303
        - CVE-2011-4622
      * sched, x86: Avoid unnecessary overflow in sched_clock
        - LP: #805341
      * use cache type functions for arch_get_unmapped_area
        - LP: #861296
      * topdown mmap support
        - LP: #861296
      * xfs: validate acl count
        - LP: #917706
        - CVE-2012-0038
      * xfs: fix acl count validation in xfs_acl_from_disk()
        - LP: #917706
        - CVE-2012-0038
      * drm: integer overflow in drm_mode_dirtyfb_ioctl()
        - LP: #917838
        - CVE-2012-0044
      * x86/PCI: amd: factor out MMCONFIG discovery
        - LP: #647043
      * PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB
        - LP: #647043
    
    linux (2.6.35-32.64) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #910919
    
      [ Seth Forshee ]
    
      * SAUCE: dell-wmi: Demote unknown WMI event message to pr_debug
        - LP: #581312
    
      [ Upstream Kernel Changes ]
    
      * Revert "Revert "xen: set max_pfn_mapped to the last pfn mapped""
        - LP: #898139
      * Revert "core: Fix memory leak/corruption on VLAN GRO_DROP,
        CVE-2011-1576"
        - LP: #844361
      * kbuild: Disable -Wunused-but-set-variable for gcc 4.6.0
        - LP: #898139
      * kbuild: Fix passing -Wno-* options to gcc 4.4+
        - LP: #898139
      * maintainer
        - LP: #898139
      * Remove the old V4L1 v4lgrab.c file
        - LP: #898139
      * i8k: Tell gcc that *regs gets clobbered
        - LP: #898139
      * Fix gcc 4.5.1 miscompiling drivers/char/i8k.c (again)
        - LP: #898139
      * USB: serial/usb_wwan, fix tty NULL dereference
        - LP: #898139
      * ipv6: add special mode accept_ra=2 to accept RA while configured as
        router
        - LP: #898139
      * set memory ranges in N_NORMAL_MEMORY when onlined
        - LP: #898139
      * FLEXCOP-PCI: fix __xlate_proc_name-warning for flexcop-pci
        - LP: #898139
      * m68k/mm: Set all online nodes in N_NORMAL_MEMORY
        - LP: #898139
      * nfs: don't lose MS_SYNCHRONOUS on remount of noac mount
        - LP: #898139
      * NFSv4.1: Ensure state manager thread dies on last umount
        - LP: #898139
      * Input: xen-kbdfront - fix mouse getting stuck after save/restore
        - LP: #898139
      * pmcraid: reject negative request size
        - LP: #898139
      * mmc: sdhci-pci: Fix error case in sdhci_pci_probe_slot()
        - LP: #898139
      * mmc: sdhci: Check mrq->cmd in sdhci_tasklet_finish
        - LP: #898139
      * mmc: sdhci: Check mrq != NULL in sdhci_tasklet_finish
        - LP: #898139
      * USB: fix regression in usbip by setting has_tt flag
        - LP: #898139
      * ARM: 6891/1: prevent heap corruption in OABI semtimedop
        - LP: #898139
      * Open with O_CREAT flag set fails to open existing files on non writable
        directories
        - LP: #898139
      * Input: elantech - discard the first 2 positions on some firmwares
        - LP: #898139
      * Staging: rtl8192su: Clean up in case of an error in module
        initialisation
        - LP: #898139
      * Staging: rtl8192su: Fix procfs code for interfaces not named wlan0
        - LP: #898139
      * USB: teach "devices" file about Wireless and SuperSpeed USB
        - LP: #898139
      * SUNRPC: fix NFS client over TCP hangs due to packet loss (Bug 16494)
        - LP: #898139
      * nfs: fix compilation warning
        - LP: #898139
      * Increase OSF partition limit from 8 to 18
        - LP: #898139
      * hwmon: (applesmc) Add MacBookAir3,1(3,2) support
        - LP: #898139
      * ALSA: emux: Add trivial compat ioctl handler
        - LP: #898139
      * ALSA: hda - MacBookPro 5,3 line-in support
        - LP: #898139
      * ALSA: hda - Add model=mbp55 entry for MacBookPro 7,1
        - LP: #898139
      * ALSA: hda - MacBookAir3,1(3,2) alsa support
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 6,2
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 7,1
        - LP: #898139
      * Bluetooth: Add MacBookAir3,1(2) support
        - LP: #898139
      * btrfs: Require CAP_SYS_ADMIN for filesystem rebalance
        - LP: #898139
      * backlight: MacBookAir3,1(3,2) mbp-nvidia-bl support
        - LP: #898139
      * bonding: Ensure that we unshare skbs prior to calling pskb_may_pull
        - LP: #898139
      * HID: add MacBookAir 3,1 and 3,2 support
        - LP: #898139
      * ipv6: Silence privacy extensions initialization
        - LP: #898139
      * MIPS: DMA: Fix computation of DMA flags from device's
        coherent_dma_mask.
        - LP: #898139
      * niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL
        - LP: #898139
      * Phonet: device notifier only runs on initial namespace
        - LP: #898139
      * powerpc/boot/dts: Install dts from the right directory
        - LP: #898139
      * rt2500usb: fallback to SW encryption for TKIP+AES
        - LP: #898139
      * libata: set queue DMA alignment to sector size for ATAPI too
        - LP: #898139
      * usb: musb: core: set has_tt flag
        - LP: #898139
      * cifs: check for bytes_remaining going to zero in CIFS_SessSetup
        - LP: #898139
      * CIFS: Fix memory over bound bug in cifs_parse_mount_options
        - LP: #898139
      * ehea: fix wrongly reported speed and port
        - LP: #898139
      * NET: slip, fix ldisc->open retval
        - LP: #898139
      * ne-h8300: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * hydra: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * libertas: fix cmdpendingq locking
        - LP: #898139
      * zorro8390: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * x86, AMD: Fix ARAT feature setting again
        - LP: #898139
      * clocksource: Install completely before selecting
        - LP: #898139
      * tick: Clear broadcast active bit when switching to oneshot
        - LP: #898139
      * x86, apic: Fix spurious error interrupts triggering on all non-boot APs
        - LP: #898139
      * x86, mce, AMD: Fix leaving freed data in a list
        - LP: #898139
      * megaraid_sas: Sanity check user supplied length before passing it to
        dma_alloc_coherent()
        - LP: #898139
      * vmxnet3: Fix inconsistent LRO state after initialization
        - LP: #898139
      * netxen: Remove references to unified firmware file
        - LP: #898139
      * ftrace: Only update the function code on write to filter files
        - LP: #898139
      * kmemleak: Do not return a pointer to an object that kmemleak did not
        get
        - LP: #898139
      * CPU hotplug, re-create sysfs directory and symlinks
        - LP: #898139
      * Fix memory leak in cpufreq_stat
        - LP: #898139
      * powerpc/kexec: Fix memory corruption from unallocated slaves
        - LP: #898139
      * powerpc/oprofile: Handle events that raise an exception without
        overflowing
        - LP: #898139
      * mtd: mtdconcat: fix NAND OOB write
        - LP: #898139
      * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
        limit
        - LP: #898139
      * ext3: Fix fs corruption when make_indexed_dir() fails
        - LP: #898139
      * jbd: Fix forever sleeping process in do_get_write_access()
        - LP: #898139
      * jbd: fix fsync() tid wraparound bug
        - LP: #898139
      * ext4: release page cache in ext4_mb_load_buddy error path
        - LP: #898139
      * Fix Ultrastor asm snippet
        - LP: #898139
      * x86, amd: Do not enable ARAT feature on AMD processors below family
        0x12
        - LP: #898139
      * x86, amd: Use _safe() msr access for GartTlbWlk disable code
        - LP: #898139
      * rcu: Fix unpaired rcu_irq_enter() from locking selftests
        - LP: #898139
      * staging: usbip: fix wrong endian conversion
        - LP: #898139
      * Fix for buffer overflow in ldm_frag_add not sufficient
        - LP: #898139
      * seqlock: Don't smp_rmb in seqlock reader spin loop
        - LP: #898139
      * ALSA: HDA: Use one dmic only for Dell Studio 1558
        - LP: #731706, #898139
      * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
        - LP: #898139
      * ASoC: Add some missing volume update bit sets for wm_hubs devices
        - LP: #898139
      * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
        - LP: #898139
      * loop: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * loop: handle on-demand devices correctly
        - LP: #898139
      * USB: CP210x Add 4 Device IDs for AC-Services Devices
        - LP: #898139
      * USB: moto_modem: Add USB identifier for the Motorola VE240.
        - LP: #898139
      * USB: serial: ftdi_sio: adding support for TavIR STK500
        - LP: #898139
      * USB: gamin_gps: Fix for data transfer problems in native mode
        - LP: #898139
      * usb/gadget: at91sam9g20 fix end point max packet size
        - LP: #898139
      * usb: gadget: rndis: don't test against req->length
        - LP: #898139
      * OHCI: work around for nVidia shutdown problem
        - LP: #898139
      * OHCI: fix regression caused by nVidia shutdown workaround
        - LP: #898139
      * p54usb: add zoom 4410 usbid
        - LP: #898139
      * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
        - LP: #898139
      * UBIFS: fix a rare memory leak in ro to rw remounting path
        - LP: #898139
      * i8k: Avoid lahf in 64-bit code
        - LP: #898139
      * cpuidle: menu: fixed wrapping timers at 4.294 seconds
        - LP: #898139
      * dm table: reject devices without request fns
        - LP: #898139
      * atm: expose ATM device index in sysfs
        - LP: #898139
      * brd: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * brd: handle on-demand devices correctly
        - LP: #898139
      * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
        callback...
        - LP: #898139
      * PCI: Add quirk for setting valid class for TI816X Endpoint
        - LP: #898139
      * xen mmu: fix a race window causing leave_mm BUG()
        - LP: #898139
      * UBIFS: fix shrinker object count reports
        - LP: #898139
      * UBIFS: fix memory leak on error path
        - LP: #898139
      * nbd: limit module parameters to a sane value
        - LP: #898139
      * mm: fix ENOSPC returned by handle_mm_fault()
        - LP: #898139
      * PCI: Set PCIE maxpayload for card during hotplug insertion
        - LP: #898139
      * lockdep: Fix lock_is_held() on recursion
        - LP: #898139
      * drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
        - LP: #898139
      * drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
        - LP: #898139
      * fat: Fix corrupt inode flags when remove ATTR_SYS flag
        - LP: #898139
      * xen: off by one errors in multicalls.c
        - LP: #898139
      * x86/amd-iommu: Fix 3 possible endless loops
        - LP: #898139
      * USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
        - LP: #898139
      * USB: core: Tolerate protocol stall during hub and port status read
        - LP: #898139
      * USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
        - LP: #898139
      * ALSA: hda: Fix quirk for Dell Inspiron 910
        - LP: #792712, #898139
      * oprofile, dcookies: Fix possible circular locking dependency
        - LP: #898139
      * CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
        - LP: #898139
      * md: check ->hot_remove_disk when removing disk
        - LP: #898139
      * md/raid5: fix raid5_set_bi_hw_segments
        - LP: #898139
      * exec: delay address limit change until point of no return
        - LP: #898139
      * netfilter: IPv6: initialize TOS field in REJECT target module
        - LP: #898139
      * netfilter: IPv6: fix DSCP mangle code
        - LP: #898139
      * time: Compensate for rounding on odd-frequency clocksources
        - LP: #898139
      * migrate: don't account swapcache as shmem
        - LP: #898139
      * xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
        - LP: #898139
      * clocksource: Make watchdog robust vs. interruption
        - LP: #898139
      * xhci: Reject double add of active endpoints.
        - LP: #898139
      * PM: Free memory bitmaps if opening /dev/snapshot fails
        - LP: #898139
      * ath5k: fix memory leak when fewer than N_PD_CURVES are in use
        - LP: #898139
      * mm: fix negative commitlimit when gigantic hugepages are allocated
        - LP: #898139
      * uvcvideo: Remove buffers from the queues when freeing
        - LP: #898139
      * watchdog: mtx1-wdt: request gpio before using it
        - LP: #898139
      * debugobjects: Fix boot crash when kmemleak and debugobjects enabled
        - LP: #898139
      * cfq-iosched: fix locking around ioc->ioc_data assignment
        - LP: #898139
      * cfq-iosched: fix a rcu warning
        - LP: #898139
      * i2c-taos-evm: Fix log messages
        - LP: #898139
      * md: avoid endless recovery loop when waiting for fail device to
        complete.
        - LP: #898139
      * SUNRPC: Ensure the RPC client only quits on fatal signals
        - LP: #898139
      * 6pack,mkiss: fix lock inconsistency
        - LP: #898139
      * USB: don't let errors prevent system sleep
        - LP: #898139
      * USB: don't let the hub driver prevent system sleep
        - LP: #898139
      * uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
        - LP: #898139
      * PM / Hibernate: Fix free_unnecessary_pages()
        - LP: #898139
      * bug.h: Add WARN_RATELIMIT
        - LP: #898139
      * net: filter: Use WARN_RATELIMIT
        - LP: #898139
      * af_packet: prevent information leak
        - LP: #898139
      * net/ipv4: Check for mistakenly passed in non-IPv4 address
        - LP: #898139
      * ipv6/udp: Use the correct variable to determine non-blocking condition
        - LP: #898139
      * udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
        - LP: #898139
      * mm: prevent concurrent unmap_mapping_range() on the same inode
        - LP: #898139
      * alpha: fix several security issues
        - LP: #898139
      * x86: Make Dell Latitude E5420 use reboot=pci
        - LP: #898139
      * x86: Make Dell Latitude E6420 use reboot=pci
        - LP: #898139
      * mm/futex: fix futex writes on archs with SW tracking of
        - LP: #898139
      * mm/backing-dev.c: reset bdi min_ratio in bdi_unregister()
        - LP: #898139
      * xtensa: prevent arbitrary read in ptrace
        - LP: #898139
      * ipc/sem.c: fix race with concurrent semtimedop() timeouts
        - LP: #898139
      * jme: Fix unmap error (Causing system freeze)
        - LP: #898139
      * mmc: Add PCI fixup quirks for Ricoh 1180:e823 reader
        - LP: #898139
      * mmc: Added quirks for Ricoh 1180:e823 lower base clock
        - LP: #898139
      * Drop -Werror in perf
        - LP: #898139
      * kexec, x86: Fix incorrect jump back address if not
        - LP: #898139
      * USB: serial: add IDs for WinChipHead USB->RS232 adapter
        - LP: #898139
      * davinci: DM365 EVM: fix video input mux bits
        - LP: #898139
      * powerpc/pseries/hvconsole: Fix dropped console output
        - LP: #898139
      * hvc_console: Improve tty/console put_chars handling
        - LP: #898139
      * powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
        - LP: #898139
      * hwmon: (max1111) Fix race condition causing NULL pointer
        - LP: #898139
      * hwmon: (asus_atk0110) Fix memory leak
        - LP: #898139
      * USB: OHCI: fix another regression for NVIDIA controllers
        - LP: #898139
      * firewire: cdev: prevent race between first get_info ioctl
        - LP: #898139
      * firewire: cdev: return -ENOTTY for unimplemented ioctls, not
        - LP: #898139
      * svcrpc: fix list-corrupting race on nfsd shutdown
        - LP: #898139
      * x86: Look for IA32_ENERGY_PERF_BIAS support
        - LP: #898139
      * x86, intel, power: Initialize MSR_IA32_ENERGY_PERF_BIAS
        - LP: #898139
      * SUNRPC: Fix use of static variable in rpcb_getport_async
        - LP: #898139
      * ARM: pxa/cm-x300: fix V3020 RTC functionality
        - LP: #898139
      * firewire: ohci: do not bind to Pinnacle cards, avert panic
        - LP: #898139
      * mm/nommu.c: fix remap_pfn_range()
        - LP: #898139
      * EHCI: only power off port if over-current is active
        - LP: #898139
      * mac80211: Restart STA timers only on associated state
        - LP: #898139
      * SUNRPC: Fix a race between work-queue and rpc_killall_tasks
        - LP: #898139
      * bttv: fix s_tuner for radio
        - LP: #898139
      * pvrusb2: fix g/s_tuner support
        - LP: #898139
      * v4l2-ioctl.c: prefill tuner type for g_frequency and
        - LP: #898139
      * mac80211: fix TKIP replay vulnerability
        - LP: #898139
      * ASoC: ak4642: fixup snd_soc_update_bits mask for PW_MGMT2
        - LP: #898139
      * tracing: Fix bug when reading system filters on module
        - LP: #898139
      * tracing: Have "enable" file use refcounts like the "filter"
        - LP: #898139
      * ARM: pxa: fix PGSR register address calculation
        - LP: #898139
      * iommu/amd: Don't use MSI address range for DMA addresses
        - LP: #898139
      * staging: r8192e_pci: Handle duplicate PCI ID 0x10ec:0x8192
        - LP: #898139
      * Staging: hv: netvsc: Fix a bug in accounting transmit slots
        - LP: #898139
      * ARM: 6989/1: perf: do not start the PMU when no events are
        - LP: #898139
      * ASoC: Ensure we delay long enough for WM8994 FLL to lock
        - LP: #898139
      * SERIAL: SC26xx: Fix link error.
        - LP: #898139
      * x86, mtrr: lock stop machine during MTRR rendezvous sequence
        - LP: #898139
      * ipv6: add special mode forwarding=2 to send RS while
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv4 traffic
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv6 traffic
        - LP: #898139
      * release 2.6.35.14
        - LP: #898139
      * (pre-stable) x86, intel, power: Correct the MSR_IA32_ENERGY_PERF_BIAS
        message
        - LP: #898139
      * (pre-stable) mm: Fix fixup_user_fault() for MMU=n
        - LP: #898139
      * (pre-stable) USB: serial: pl2303: rm duplicate id
        - LP: #898139
      * TPM: Zero buffer after copying to userspace, CVE-2011-1162
        - LP: #899463
        - CVE-2011-1162
      * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
        - LP: #899466
        - CVE-2011-2203
      * net: ipv4: relax AF_INET check in bind()
        - LP: #900396
      * KEYS: Fix a NULL pointer deref in the user-defined key type,
        CVE-2011-4110
        - LP: #894369
        - CVE-2011-4110
      * gro: reset vlan_tci on reuse
        - LP: #844361
        - CVE-2011-1576
     -- Brad Figg <email address hidden>   Mon, 13 Feb 2012 16:04:52 -0800
  • linux-lts-backport-maverick (2.6.35-32.65~lucid1) lucid-proposed; urgency=low
    
      [Brad Figg]
    
      * Release Tracking Bug
        - LP: #921475
    
      [ Upstream Kernel Changes ]
    
      * fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message, CVE-2011-3353
        - LP: #905058
        - CVE-2011-3353
      * KVM: x86: Prevent starting PIT timers in the absence of irqchip support
        - LP: #911303
        - CVE-2011-4622
      * sched, x86: Avoid unnecessary overflow in sched_clock
        - LP: #805341
      * use cache type functions for arch_get_unmapped_area
        - LP: #861296
      * topdown mmap support
        - LP: #861296
      * xfs: validate acl count
        - LP: #917706
        - CVE-2012-0038
      * xfs: fix acl count validation in xfs_acl_from_disk()
        - LP: #917706
        - CVE-2012-0038
      * drm: integer overflow in drm_mode_dirtyfb_ioctl()
        - LP: #917838
        - CVE-2012-0044
      * x86/PCI: amd: factor out MMCONFIG discovery
        - LP: #647043
      * PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB
        - LP: #647043
    
    linux (2.6.35-32.64) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #910919
    
      [ Seth Forshee ]
    
      * SAUCE: dell-wmi: Demote unknown WMI event message to pr_debug
        - LP: #581312
    
      [ Upstream Kernel Changes ]
    
      * Revert "Revert "xen: set max_pfn_mapped to the last pfn mapped""
        - LP: #898139
      * Revert "core: Fix memory leak/corruption on VLAN GRO_DROP,
        CVE-2011-1576"
        - LP: #844361
      * kbuild: Disable -Wunused-but-set-variable for gcc 4.6.0
        - LP: #898139
      * kbuild: Fix passing -Wno-* options to gcc 4.4+
        - LP: #898139
      * maintainer
        - LP: #898139
      * Remove the old V4L1 v4lgrab.c file
        - LP: #898139
      * i8k: Tell gcc that *regs gets clobbered
        - LP: #898139
      * Fix gcc 4.5.1 miscompiling drivers/char/i8k.c (again)
        - LP: #898139
      * USB: serial/usb_wwan, fix tty NULL dereference
        - LP: #898139
      * ipv6: add special mode accept_ra=2 to accept RA while configured as
        router
        - LP: #898139
      * set memory ranges in N_NORMAL_MEMORY when onlined
        - LP: #898139
      * FLEXCOP-PCI: fix __xlate_proc_name-warning for flexcop-pci
        - LP: #898139
      * m68k/mm: Set all online nodes in N_NORMAL_MEMORY
        - LP: #898139
      * nfs: don't lose MS_SYNCHRONOUS on remount of noac mount
        - LP: #898139
      * NFSv4.1: Ensure state manager thread dies on last umount
        - LP: #898139
      * Input: xen-kbdfront - fix mouse getting stuck after save/restore
        - LP: #898139
      * pmcraid: reject negative request size
        - LP: #898139
      * mmc: sdhci-pci: Fix error case in sdhci_pci_probe_slot()
        - LP: #898139
      * mmc: sdhci: Check mrq->cmd in sdhci_tasklet_finish
        - LP: #898139
      * mmc: sdhci: Check mrq != NULL in sdhci_tasklet_finish
        - LP: #898139
      * USB: fix regression in usbip by setting has_tt flag
        - LP: #898139
      * ARM: 6891/1: prevent heap corruption in OABI semtimedop
        - LP: #898139
      * Open with O_CREAT flag set fails to open existing files on non writable
        directories
        - LP: #898139
      * Input: elantech - discard the first 2 positions on some firmwares
        - LP: #898139
      * Staging: rtl8192su: Clean up in case of an error in module
        initialisation
        - LP: #898139
      * Staging: rtl8192su: Fix procfs code for interfaces not named wlan0
        - LP: #898139
      * USB: teach "devices" file about Wireless and SuperSpeed USB
        - LP: #898139
      * SUNRPC: fix NFS client over TCP hangs due to packet loss (Bug 16494)
        - LP: #898139
      * nfs: fix compilation warning
        - LP: #898139
      * Increase OSF partition limit from 8 to 18
        - LP: #898139
      * hwmon: (applesmc) Add MacBookAir3,1(3,2) support
        - LP: #898139
      * ALSA: emux: Add trivial compat ioctl handler
        - LP: #898139
      * ALSA: hda - MacBookPro 5,3 line-in support
        - LP: #898139
      * ALSA: hda - Add model=mbp55 entry for MacBookPro 7,1
        - LP: #898139
      * ALSA: hda - MacBookAir3,1(3,2) alsa support
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 6,2
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 7,1
        - LP: #898139
      * Bluetooth: Add MacBookAir3,1(2) support
        - LP: #898139
      * btrfs: Require CAP_SYS_ADMIN for filesystem rebalance
        - LP: #898139
      * backlight: MacBookAir3,1(3,2) mbp-nvidia-bl support
        - LP: #898139
      * bonding: Ensure that we unshare skbs prior to calling pskb_may_pull
        - LP: #898139
      * HID: add MacBookAir 3,1 and 3,2 support
        - LP: #898139
      * ipv6: Silence privacy extensions initialization
        - LP: #898139
      * MIPS: DMA: Fix computation of DMA flags from device's
        coherent_dma_mask.
        - LP: #898139
      * niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL
        - LP: #898139
      * Phonet: device notifier only runs on initial namespace
        - LP: #898139
      * powerpc/boot/dts: Install dts from the right directory
        - LP: #898139
      * rt2500usb: fallback to SW encryption for TKIP+AES
        - LP: #898139
      * libata: set queue DMA alignment to sector size for ATAPI too
        - LP: #898139
      * usb: musb: core: set has_tt flag
        - LP: #898139
      * cifs: check for bytes_remaining going to zero in CIFS_SessSetup
        - LP: #898139
      * CIFS: Fix memory over bound bug in cifs_parse_mount_options
        - LP: #898139
      * ehea: fix wrongly reported speed and port
        - LP: #898139
      * NET: slip, fix ldisc->open retval
        - LP: #898139
      * ne-h8300: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * hydra: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * libertas: fix cmdpendingq locking
        - LP: #898139
      * zorro8390: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * x86, AMD: Fix ARAT feature setting again
        - LP: #898139
      * clocksource: Install completely before selecting
        - LP: #898139
      * tick: Clear broadcast active bit when switching to oneshot
        - LP: #898139
      * x86, apic: Fix spurious error interrupts triggering on all non-boot APs
        - LP: #898139
      * x86, mce, AMD: Fix leaving freed data in a list
        - LP: #898139
      * megaraid_sas: Sanity check user supplied length before passing it to
        dma_alloc_coherent()
        - LP: #898139
      * vmxnet3: Fix inconsistent LRO state after initialization
        - LP: #898139
      * netxen: Remove references to unified firmware file
        - LP: #898139
      * ftrace: Only update the function code on write to filter files
        - LP: #898139
      * kmemleak: Do not return a pointer to an object that kmemleak did not
        get
        - LP: #898139
      * CPU hotplug, re-create sysfs directory and symlinks
        - LP: #898139
      * Fix memory leak in cpufreq_stat
        - LP: #898139
      * powerpc/kexec: Fix memory corruption from unallocated slaves
        - LP: #898139
      * powerpc/oprofile: Handle events that raise an exception without
        overflowing
        - LP: #898139
      * mtd: mtdconcat: fix NAND OOB write
        - LP: #898139
      * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
        limit
        - LP: #898139
      * ext3: Fix fs corruption when make_indexed_dir() fails
        - LP: #898139
      * jbd: Fix forever sleeping process in do_get_write_access()
        - LP: #898139
      * jbd: fix fsync() tid wraparound bug
        - LP: #898139
      * ext4: release page cache in ext4_mb_load_buddy error path
        - LP: #898139
      * Fix Ultrastor asm snippet
        - LP: #898139
      * x86, amd: Do not enable ARAT feature on AMD processors below family
        0x12
        - LP: #898139
      * x86, amd: Use _safe() msr access for GartTlbWlk disable code
        - LP: #898139
      * rcu: Fix unpaired rcu_irq_enter() from locking selftests
        - LP: #898139
      * staging: usbip: fix wrong endian conversion
        - LP: #898139
      * Fix for buffer overflow in ldm_frag_add not sufficient
        - LP: #898139
      * seqlock: Don't smp_rmb in seqlock reader spin loop
        - LP: #898139
      * ALSA: HDA: Use one dmic only for Dell Studio 1558
        - LP: #731706, #898139
      * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
        - LP: #898139
      * ASoC: Add some missing volume update bit sets for wm_hubs devices
        - LP: #898139
      * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
        - LP: #898139
      * loop: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * loop: handle on-demand devices correctly
        - LP: #898139
      * USB: CP210x Add 4 Device IDs for AC-Services Devices
        - LP: #898139
      * USB: moto_modem: Add USB identifier for the Motorola VE240.
        - LP: #898139
      * USB: serial: ftdi_sio: adding support for TavIR STK500
        - LP: #898139
      * USB: gamin_gps: Fix for data transfer problems in native mode
        - LP: #898139
      * usb/gadget: at91sam9g20 fix end point max packet size
        - LP: #898139
      * usb: gadget: rndis: don't test against req->length
        - LP: #898139
      * OHCI: work around for nVidia shutdown problem
        - LP: #898139
      * OHCI: fix regression caused by nVidia shutdown workaround
        - LP: #898139
      * p54usb: add zoom 4410 usbid
        - LP: #898139
      * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
        - LP: #898139
      * UBIFS: fix a rare memory leak in ro to rw remounting path
        - LP: #898139
      * i8k: Avoid lahf in 64-bit code
        - LP: #898139
      * cpuidle: menu: fixed wrapping timers at 4.294 seconds
        - LP: #898139
      * dm table: reject devices without request fns
        - LP: #898139
      * atm: expose ATM device index in sysfs
        - LP: #898139
      * brd: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * brd: handle on-demand devices correctly
        - LP: #898139
      * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
        callback...
        - LP: #898139
      * PCI: Add quirk for setting valid class for TI816X Endpoint
        - LP: #898139
      * xen mmu: fix a race window causing leave_mm BUG()
        - LP: #898139
      * UBIFS: fix shrinker object count reports
        - LP: #898139
      * UBIFS: fix memory leak on error path
        - LP: #898139
      * nbd: limit module parameters to a sane value
        - LP: #898139
      * mm: fix ENOSPC returned by handle_mm_fault()
        - LP: #898139
      * PCI: Set PCIE maxpayload for card during hotplug insertion
        - LP: #898139
      * lockdep: Fix lock_is_held() on recursion
        - LP: #898139
      * drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
        - LP: #898139
      * drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
        - LP: #898139
      * fat: Fix corrupt inode flags when remove ATTR_SYS flag
        - LP: #898139
      * xen: off by one errors in multicalls.c
        - LP: #898139
      * x86/amd-iommu: Fix 3 possible endless loops
        - LP: #898139
      * USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
        - LP: #898139
      * USB: core: Tolerate protocol stall during hub and port status read
        - LP: #898139
      * USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
        - LP: #898139
      * ALSA: hda: Fix quirk for Dell Inspiron 910
        - LP: #792712, #898139
      * oprofile, dcookies: Fix possible circular locking dependency
        - LP: #898139
      * CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
        - LP: #898139
      * md: check ->hot_remove_disk when removing disk
        - LP: #898139
      * md/raid5: fix raid5_set_bi_hw_segments
        - LP: #898139
      * exec: delay address limit change until point of no return
        - LP: #898139
      * netfilter: IPv6: initialize TOS field in REJECT target module
        - LP: #898139
      * netfilter: IPv6: fix DSCP mangle code
        - LP: #898139
      * time: Compensate for rounding on odd-frequency clocksources
        - LP: #898139
      * migrate: don't account swapcache as shmem
        - LP: #898139
      * xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
        - LP: #898139
      * clocksource: Make watchdog robust vs. interruption
        - LP: #898139
      * xhci: Reject double add of active endpoints.
        - LP: #898139
      * PM: Free memory bitmaps if opening /dev/snapshot fails
        - LP: #898139
      * ath5k: fix memory leak when fewer than N_PD_CURVES are in use
        - LP: #898139
      * mm: fix negative commitlimit when gigantic hugepages are allocated
        - LP: #898139
      * uvcvideo: Remove buffers from the queues when freeing
        - LP: #898139
      * watchdog: mtx1-wdt: request gpio before using it
        - LP: #898139
      * debugobjects: Fix boot crash when kmemleak and debugobjects enabled
        - LP: #898139
      * cfq-iosched: fix locking around ioc->ioc_data assignment
        - LP: #898139
      * cfq-iosched: fix a rcu warning
        - LP: #898139
      * i2c-taos-evm: Fix log messages
        - LP: #898139
      * md: avoid endless recovery loop when waiting for fail device to
        complete.
        - LP: #898139
      * SUNRPC: Ensure the RPC client only quits on fatal signals
        - LP: #898139
      * 6pack,mkiss: fix lock inconsistency
        - LP: #898139
      * USB: don't let errors prevent system sleep
        - LP: #898139
      * USB: don't let the hub driver prevent system sleep
        - LP: #898139
      * uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
        - LP: #898139
      * PM / Hibernate: Fix free_unnecessary_pages()
        - LP: #898139
      * bug.h: Add WARN_RATELIMIT
        - LP: #898139
      * net: filter: Use WARN_RATELIMIT
        - LP: #898139
      * af_packet: prevent information leak
        - LP: #898139
      * net/ipv4: Check for mistakenly passed in non-IPv4 address
        - LP: #898139
      * ipv6/udp: Use the correct variable to determine non-blocking condition
        - LP: #898139
      * udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
        - LP: #898139
      * mm: prevent concurrent unmap_mapping_range() on the same inode
        - LP: #898139
      * alpha: fix several security issues
        - LP: #898139
      * x86: Make Dell Latitude E5420 use reboot=pci
        - LP: #898139
      * x86: Make Dell Latitude E6420 use reboot=pci
        - LP: #898139
      * mm/futex: fix futex writes on archs with SW tracking of
        - LP: #898139
      * mm/backing-dev.c: reset bdi min_ratio in bdi_unregister()
        - LP: #898139
      * xtensa: prevent arbitrary read in ptrace
        - LP: #898139
      * ipc/sem.c: fix race with concurrent semtimedop() timeouts
        - LP: #898139
      * jme: Fix unmap error (Causing system freeze)
        - LP: #898139
      * mmc: Add PCI fixup quirks for Ricoh 1180:e823 reader
        - LP: #898139
      * mmc: Added quirks for Ricoh 1180:e823 lower base clock
        - LP: #898139
      * Drop -Werror in perf
        - LP: #898139
      * kexec, x86: Fix incorrect jump back address if not
        - LP: #898139
      * USB: serial: add IDs for WinChipHead USB->RS232 adapter
        - LP: #898139
      * davinci: DM365 EVM: fix video input mux bits
        - LP: #898139
      * powerpc/pseries/hvconsole: Fix dropped console output
        - LP: #898139
      * hvc_console: Improve tty/console put_chars handling
        - LP: #898139
      * powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
        - LP: #898139
      * hwmon: (max1111) Fix race condition causing NULL pointer
        - LP: #898139
      * hwmon: (asus_atk0110) Fix memory leak
        - LP: #898139
      * USB: OHCI: fix another regression for NVIDIA controllers
        - LP: #898139
      * firewire: cdev: prevent race between first get_info ioctl
        - LP: #898139
      * firewire: cdev: return -ENOTTY for unimplemented ioctls, not
        - LP: #898139
      * svcrpc: fix list-corrupting race on nfsd shutdown
        - LP: #898139
      * x86: Look for IA32_ENERGY_PERF_BIAS support
        - LP: #898139
      * x86, intel, power: Initialize MSR_IA32_ENERGY_PERF_BIAS
        - LP: #898139
      * SUNRPC: Fix use of static variable in rpcb_getport_async
        - LP: #898139
      * ARM: pxa/cm-x300: fix V3020 RTC functionality
        - LP: #898139
      * firewire: ohci: do not bind to Pinnacle cards, avert panic
        - LP: #898139
      * mm/nommu.c: fix remap_pfn_range()
        - LP: #898139
      * EHCI: only power off port if over-current is active
        - LP: #898139
      * mac80211: Restart STA timers only on associated state
        - LP: #898139
      * SUNRPC: Fix a race between work-queue and rpc_killall_tasks
        - LP: #898139
      * bttv: fix s_tuner for radio
        - LP: #898139
      * pvrusb2: fix g/s_tuner support
        - LP: #898139
      * v4l2-ioctl.c: prefill tuner type for g_frequency and
        - LP: #898139
      * mac80211: fix TKIP replay vulnerability
        - LP: #898139
      * ASoC: ak4642: fixup snd_soc_update_bits mask for PW_MGMT2
        - LP: #898139
      * tracing: Fix bug when reading system filters on module
        - LP: #898139
      * tracing: Have "enable" file use refcounts like the "filter"
        - LP: #898139
      * ARM: pxa: fix PGSR register address calculation
        - LP: #898139
      * iommu/amd: Don't use MSI address range for DMA addresses
        - LP: #898139
      * staging: r8192e_pci: Handle duplicate PCI ID 0x10ec:0x8192
        - LP: #898139
      * Staging: hv: netvsc: Fix a bug in accounting transmit slots
        - LP: #898139
      * ARM: 6989/1: perf: do not start the PMU when no events are
        - LP: #898139
      * ASoC: Ensure we delay long enough for WM8994 FLL to lock
        - LP: #898139
      * SERIAL: SC26xx: Fix link error.
        - LP: #898139
      * x86, mtrr: lock stop machine during MTRR rendezvous sequence
        - LP: #898139
      * ipv6: add special mode forwarding=2 to send RS while
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv4 traffic
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv6 traffic
        - LP: #898139
      * release 2.6.35.14
        - LP: #898139
      * (pre-stable) x86, intel, power: Correct the MSR_IA32_ENERGY_PERF_BIAS
        message
        - LP: #898139
      * (pre-stable) mm: Fix fixup_user_fault() for MMU=n
        - LP: #898139
      * (pre-stable) USB: serial: pl2303: rm duplicate id
        - LP: #898139
      * TPM: Zero buffer after copying to userspace, CVE-2011-1162
        - LP: #899463
        - CVE-2011-1162
      * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
        - LP: #899466
        - CVE-2011-2203
      * net: ipv4: relax AF_INET check in bind()
        - LP: #900396
      * KEYS: Fix a NULL pointer deref in the user-defined key type,
        CVE-2011-4110
        - LP: #894369
        - CVE-2011-4110
      * gro: reset vlan_tci on reuse
        - LP: #844361
        - CVE-2011-1576
     -- Herton Ronaldo Krzesinski <email address hidden>   Wed, 25 Jan 2012 16:12:38 -0200
  • linux-lts-backport-maverick (2.6.35-32.64~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #911248
    
      [ Seth Forshee ]
    
      * SAUCE: dell-wmi: Demote unknown WMI event message to pr_debug
        - LP: #581312
    
      [ Upstream Kernel Changes ]
    
      * Revert "Revert "xen: set max_pfn_mapped to the last pfn mapped""
        - LP: #898139
      * Revert "core: Fix memory leak/corruption on VLAN GRO_DROP,
        CVE-2011-1576"
        - LP: #844361
      * kbuild: Disable -Wunused-but-set-variable for gcc 4.6.0
        - LP: #898139
      * kbuild: Fix passing -Wno-* options to gcc 4.4+
        - LP: #898139
      * maintainer
        - LP: #898139
      * Remove the old V4L1 v4lgrab.c file
        - LP: #898139
      * i8k: Tell gcc that *regs gets clobbered
        - LP: #898139
      * Fix gcc 4.5.1 miscompiling drivers/char/i8k.c (again)
        - LP: #898139
      * USB: serial/usb_wwan, fix tty NULL dereference
        - LP: #898139
      * ipv6: add special mode accept_ra=2 to accept RA while configured as
        router
        - LP: #898139
      * set memory ranges in N_NORMAL_MEMORY when onlined
        - LP: #898139
      * FLEXCOP-PCI: fix __xlate_proc_name-warning for flexcop-pci
        - LP: #898139
      * m68k/mm: Set all online nodes in N_NORMAL_MEMORY
        - LP: #898139
      * nfs: don't lose MS_SYNCHRONOUS on remount of noac mount
        - LP: #898139
      * NFSv4.1: Ensure state manager thread dies on last umount
        - LP: #898139
      * Input: xen-kbdfront - fix mouse getting stuck after save/restore
        - LP: #898139
      * pmcraid: reject negative request size
        - LP: #898139
      * mmc: sdhci-pci: Fix error case in sdhci_pci_probe_slot()
        - LP: #898139
      * mmc: sdhci: Check mrq->cmd in sdhci_tasklet_finish
        - LP: #898139
      * mmc: sdhci: Check mrq != NULL in sdhci_tasklet_finish
        - LP: #898139
      * USB: fix regression in usbip by setting has_tt flag
        - LP: #898139
      * ARM: 6891/1: prevent heap corruption in OABI semtimedop
        - LP: #898139
      * Open with O_CREAT flag set fails to open existing files on non writable
        directories
        - LP: #898139
      * Input: elantech - discard the first 2 positions on some firmwares
        - LP: #898139
      * Staging: rtl8192su: Clean up in case of an error in module
        initialisation
        - LP: #898139
      * Staging: rtl8192su: Fix procfs code for interfaces not named wlan0
        - LP: #898139
      * USB: teach "devices" file about Wireless and SuperSpeed USB
        - LP: #898139
      * SUNRPC: fix NFS client over TCP hangs due to packet loss (Bug 16494)
        - LP: #898139
      * nfs: fix compilation warning
        - LP: #898139
      * Increase OSF partition limit from 8 to 18
        - LP: #898139
      * hwmon: (applesmc) Add MacBookAir3,1(3,2) support
        - LP: #898139
      * ALSA: emux: Add trivial compat ioctl handler
        - LP: #898139
      * ALSA: hda - MacBookPro 5,3 line-in support
        - LP: #898139
      * ALSA: hda - Add model=mbp55 entry for MacBookPro 7,1
        - LP: #898139
      * ALSA: hda - MacBookAir3,1(3,2) alsa support
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 6,2
        - LP: #898139
      * Bluetooth: Add support Bluetooth controller of MacbookPro 7,1
        - LP: #898139
      * Bluetooth: Add MacBookAir3,1(2) support
        - LP: #898139
      * btrfs: Require CAP_SYS_ADMIN for filesystem rebalance
        - LP: #898139
      * backlight: MacBookAir3,1(3,2) mbp-nvidia-bl support
        - LP: #898139
      * bonding: Ensure that we unshare skbs prior to calling pskb_may_pull
        - LP: #898139
      * HID: add MacBookAir 3,1 and 3,2 support
        - LP: #898139
      * ipv6: Silence privacy extensions initialization
        - LP: #898139
      * MIPS: DMA: Fix computation of DMA flags from device's
        coherent_dma_mask.
        - LP: #898139
      * niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL
        - LP: #898139
      * Phonet: device notifier only runs on initial namespace
        - LP: #898139
      * powerpc/boot/dts: Install dts from the right directory
        - LP: #898139
      * rt2500usb: fallback to SW encryption for TKIP+AES
        - LP: #898139
      * libata: set queue DMA alignment to sector size for ATAPI too
        - LP: #898139
      * usb: musb: core: set has_tt flag
        - LP: #898139
      * cifs: check for bytes_remaining going to zero in CIFS_SessSetup
        - LP: #898139
      * CIFS: Fix memory over bound bug in cifs_parse_mount_options
        - LP: #898139
      * ehea: fix wrongly reported speed and port
        - LP: #898139
      * NET: slip, fix ldisc->open retval
        - LP: #898139
      * ne-h8300: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * hydra: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * libertas: fix cmdpendingq locking
        - LP: #898139
      * zorro8390: Fix regression caused during net_device_ops conversion
        - LP: #898139
      * x86, AMD: Fix ARAT feature setting again
        - LP: #898139
      * clocksource: Install completely before selecting
        - LP: #898139
      * tick: Clear broadcast active bit when switching to oneshot
        - LP: #898139
      * x86, apic: Fix spurious error interrupts triggering on all non-boot APs
        - LP: #898139
      * x86, mce, AMD: Fix leaving freed data in a list
        - LP: #898139
      * megaraid_sas: Sanity check user supplied length before passing it to
        dma_alloc_coherent()
        - LP: #898139
      * vmxnet3: Fix inconsistent LRO state after initialization
        - LP: #898139
      * netxen: Remove references to unified firmware file
        - LP: #898139
      * ftrace: Only update the function code on write to filter files
        - LP: #898139
      * kmemleak: Do not return a pointer to an object that kmemleak did not
        get
        - LP: #898139
      * CPU hotplug, re-create sysfs directory and symlinks
        - LP: #898139
      * Fix memory leak in cpufreq_stat
        - LP: #898139
      * powerpc/kexec: Fix memory corruption from unallocated slaves
        - LP: #898139
      * powerpc/oprofile: Handle events that raise an exception without
        overflowing
        - LP: #898139
      * mtd: mtdconcat: fix NAND OOB write
        - LP: #898139
      * x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
        limit
        - LP: #898139
      * ext3: Fix fs corruption when make_indexed_dir() fails
        - LP: #898139
      * jbd: Fix forever sleeping process in do_get_write_access()
        - LP: #898139
      * jbd: fix fsync() tid wraparound bug
        - LP: #898139
      * ext4: release page cache in ext4_mb_load_buddy error path
        - LP: #898139
      * Fix Ultrastor asm snippet
        - LP: #898139
      * x86, amd: Do not enable ARAT feature on AMD processors below family
        0x12
        - LP: #898139
      * x86, amd: Use _safe() msr access for GartTlbWlk disable code
        - LP: #898139
      * rcu: Fix unpaired rcu_irq_enter() from locking selftests
        - LP: #898139
      * staging: usbip: fix wrong endian conversion
        - LP: #898139
      * Fix for buffer overflow in ldm_frag_add not sufficient
        - LP: #898139
      * seqlock: Don't smp_rmb in seqlock reader spin loop
        - LP: #898139
      * ALSA: HDA: Use one dmic only for Dell Studio 1558
        - LP: #731706, #898139
      * ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
        - LP: #898139
      * ASoC: Add some missing volume update bit sets for wm_hubs devices
        - LP: #898139
      * mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
        - LP: #898139
      * loop: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * loop: handle on-demand devices correctly
        - LP: #898139
      * USB: CP210x Add 4 Device IDs for AC-Services Devices
        - LP: #898139
      * USB: moto_modem: Add USB identifier for the Motorola VE240.
        - LP: #898139
      * USB: serial: ftdi_sio: adding support for TavIR STK500
        - LP: #898139
      * USB: gamin_gps: Fix for data transfer problems in native mode
        - LP: #898139
      * usb/gadget: at91sam9g20 fix end point max packet size
        - LP: #898139
      * usb: gadget: rndis: don't test against req->length
        - LP: #898139
      * OHCI: work around for nVidia shutdown problem
        - LP: #898139
      * OHCI: fix regression caused by nVidia shutdown workaround
        - LP: #898139
      * p54usb: add zoom 4410 usbid
        - LP: #898139
      * eCryptfs: Allow 2 scatterlist entries for encrypted filenames
        - LP: #898139
      * UBIFS: fix a rare memory leak in ro to rw remounting path
        - LP: #898139
      * i8k: Avoid lahf in 64-bit code
        - LP: #898139
      * cpuidle: menu: fixed wrapping timers at 4.294 seconds
        - LP: #898139
      * dm table: reject devices without request fns
        - LP: #898139
      * atm: expose ATM device index in sysfs
        - LP: #898139
      * brd: limit 'max_part' module param to DISK_MAX_PARTS
        - LP: #898139
      * brd: handle on-demand devices correctly
        - LP: #898139
      * SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
        callback...
        - LP: #898139
      * PCI: Add quirk for setting valid class for TI816X Endpoint
        - LP: #898139
      * xen mmu: fix a race window causing leave_mm BUG()
        - LP: #898139
      * UBIFS: fix shrinker object count reports
        - LP: #898139
      * UBIFS: fix memory leak on error path
        - LP: #898139
      * nbd: limit module parameters to a sane value
        - LP: #898139
      * mm: fix ENOSPC returned by handle_mm_fault()
        - LP: #898139
      * PCI: Set PCIE maxpayload for card during hotplug insertion
        - LP: #898139
      * lockdep: Fix lock_is_held() on recursion
        - LP: #898139
      * drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
        - LP: #898139
      * drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
        - LP: #898139
      * fat: Fix corrupt inode flags when remove ATTR_SYS flag
        - LP: #898139
      * xen: off by one errors in multicalls.c
        - LP: #898139
      * x86/amd-iommu: Fix 3 possible endless loops
        - LP: #898139
      * USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
        - LP: #898139
      * USB: core: Tolerate protocol stall during hub and port status read
        - LP: #898139
      * USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
        - LP: #898139
      * ALSA: hda: Fix quirk for Dell Inspiron 910
        - LP: #792712, #898139
      * oprofile, dcookies: Fix possible circular locking dependency
        - LP: #898139
      * CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
        - LP: #898139
      * md: check ->hot_remove_disk when removing disk
        - LP: #898139
      * md/raid5: fix raid5_set_bi_hw_segments
        - LP: #898139
      * exec: delay address limit change until point of no return
        - LP: #898139
      * netfilter: IPv6: initialize TOS field in REJECT target module
        - LP: #898139
      * netfilter: IPv6: fix DSCP mangle code
        - LP: #898139
      * time: Compensate for rounding on odd-frequency clocksources
        - LP: #898139
      * migrate: don't account swapcache as shmem
        - LP: #898139
      * xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
        - LP: #898139
      * clocksource: Make watchdog robust vs. interruption
        - LP: #898139
      * xhci: Reject double add of active endpoints.
        - LP: #898139
      * PM: Free memory bitmaps if opening /dev/snapshot fails
        - LP: #898139
      * ath5k: fix memory leak when fewer than N_PD_CURVES are in use
        - LP: #898139
      * mm: fix negative commitlimit when gigantic hugepages are allocated
        - LP: #898139
      * uvcvideo: Remove buffers from the queues when freeing
        - LP: #898139
      * watchdog: mtx1-wdt: request gpio before using it
        - LP: #898139
      * debugobjects: Fix boot crash when kmemleak and debugobjects enabled
        - LP: #898139
      * cfq-iosched: fix locking around ioc->ioc_data assignment
        - LP: #898139
      * cfq-iosched: fix a rcu warning
        - LP: #898139
      * i2c-taos-evm: Fix log messages
        - LP: #898139
      * md: avoid endless recovery loop when waiting for fail device to
        complete.
        - LP: #898139
      * SUNRPC: Ensure the RPC client only quits on fatal signals
        - LP: #898139
      * 6pack,mkiss: fix lock inconsistency
        - LP: #898139
      * USB: don't let errors prevent system sleep
        - LP: #898139
      * USB: don't let the hub driver prevent system sleep
        - LP: #898139
      * uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
        - LP: #898139
      * PM / Hibernate: Fix free_unnecessary_pages()
        - LP: #898139
      * bug.h: Add WARN_RATELIMIT
        - LP: #898139
      * net: filter: Use WARN_RATELIMIT
        - LP: #898139
      * af_packet: prevent information leak
        - LP: #898139
      * net/ipv4: Check for mistakenly passed in non-IPv4 address
        - LP: #898139
      * ipv6/udp: Use the correct variable to determine non-blocking condition
        - LP: #898139
      * udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
        - LP: #898139
      * mm: prevent concurrent unmap_mapping_range() on the same inode
        - LP: #898139
      * alpha: fix several security issues
        - LP: #898139
      * x86: Make Dell Latitude E5420 use reboot=pci
        - LP: #898139
      * x86: Make Dell Latitude E6420 use reboot=pci
        - LP: #898139
      * mm/futex: fix futex writes on archs with SW tracking of
        - LP: #898139
      * mm/backing-dev.c: reset bdi min_ratio in bdi_unregister()
        - LP: #898139
      * xtensa: prevent arbitrary read in ptrace
        - LP: #898139
      * ipc/sem.c: fix race with concurrent semtimedop() timeouts
        - LP: #898139
      * jme: Fix unmap error (Causing system freeze)
        - LP: #898139
      * mmc: Add PCI fixup quirks for Ricoh 1180:e823 reader
        - LP: #898139
      * mmc: Added quirks for Ricoh 1180:e823 lower base clock
        - LP: #898139
      * Drop -Werror in perf
        - LP: #898139
      * kexec, x86: Fix incorrect jump back address if not
        - LP: #898139
      * USB: serial: add IDs for WinChipHead USB->RS232 adapter
        - LP: #898139
      * davinci: DM365 EVM: fix video input mux bits
        - LP: #898139
      * powerpc/pseries/hvconsole: Fix dropped console output
        - LP: #898139
      * hvc_console: Improve tty/console put_chars handling
        - LP: #898139
      * powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
        - LP: #898139
      * hwmon: (max1111) Fix race condition causing NULL pointer
        - LP: #898139
      * hwmon: (asus_atk0110) Fix memory leak
        - LP: #898139
      * USB: OHCI: fix another regression for NVIDIA controllers
        - LP: #898139
      * firewire: cdev: prevent race between first get_info ioctl
        - LP: #898139
      * firewire: cdev: return -ENOTTY for unimplemented ioctls, not
        - LP: #898139
      * svcrpc: fix list-corrupting race on nfsd shutdown
        - LP: #898139
      * x86: Look for IA32_ENERGY_PERF_BIAS support
        - LP: #898139
      * x86, intel, power: Initialize MSR_IA32_ENERGY_PERF_BIAS
        - LP: #898139
      * SUNRPC: Fix use of static variable in rpcb_getport_async
        - LP: #898139
      * ARM: pxa/cm-x300: fix V3020 RTC functionality
        - LP: #898139
      * firewire: ohci: do not bind to Pinnacle cards, avert panic
        - LP: #898139
      * mm/nommu.c: fix remap_pfn_range()
        - LP: #898139
      * EHCI: only power off port if over-current is active
        - LP: #898139
      * mac80211: Restart STA timers only on associated state
        - LP: #898139
      * SUNRPC: Fix a race between work-queue and rpc_killall_tasks
        - LP: #898139
      * bttv: fix s_tuner for radio
        - LP: #898139
      * pvrusb2: fix g/s_tuner support
        - LP: #898139
      * v4l2-ioctl.c: prefill tuner type for g_frequency and
        - LP: #898139
      * mac80211: fix TKIP replay vulnerability
        - LP: #898139
      * ASoC: ak4642: fixup snd_soc_update_bits mask for PW_MGMT2
        - LP: #898139
      * tracing: Fix bug when reading system filters on module
        - LP: #898139
      * tracing: Have "enable" file use refcounts like the "filter"
        - LP: #898139
      * ARM: pxa: fix PGSR register address calculation
        - LP: #898139
      * iommu/amd: Don't use MSI address range for DMA addresses
        - LP: #898139
      * staging: r8192e_pci: Handle duplicate PCI ID 0x10ec:0x8192
        - LP: #898139
      * Staging: hv: netvsc: Fix a bug in accounting transmit slots
        - LP: #898139
      * ARM: 6989/1: perf: do not start the PMU when no events are
        - LP: #898139
      * ASoC: Ensure we delay long enough for WM8994 FLL to lock
        - LP: #898139
      * SERIAL: SC26xx: Fix link error.
        - LP: #898139
      * x86, mtrr: lock stop machine during MTRR rendezvous sequence
        - LP: #898139
      * ipv6: add special mode forwarding=2 to send RS while
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv4 traffic
        - LP: #898139
      * IGMP snooping: set mrouters_only flag for IPv6 traffic
        - LP: #898139
      * release 2.6.35.14
        - LP: #898139
      * (pre-stable) x86, intel, power: Correct the MSR_IA32_ENERGY_PERF_BIAS
        message
        - LP: #898139
      * (pre-stable) mm: Fix fixup_user_fault() for MMU=n
        - LP: #898139
      * (pre-stable) USB: serial: pl2303: rm duplicate id
        - LP: #898139
      * TPM: Zero buffer after copying to userspace, CVE-2011-1162
        - LP: #899463
        - CVE-2011-1162
      * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
        - LP: #899466
        - CVE-2011-2203
      * net: ipv4: relax AF_INET check in bind()
        - LP: #900396
      * KEYS: Fix a NULL pointer deref in the user-defined key type,
        CVE-2011-4110
        - LP: #894369
        - CVE-2011-4110
      * gro: reset vlan_tci on reuse
        - LP: #844361
        - CVE-2011-1576
    
    linux (2.6.35-31.63) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #897265
    
      [ Upstream Kernel Changes ]
    
      * crypto: ghash - Avoid null pointer dereference if no key is set
        - LP: #887299
        - CVE-2011-4081
      * xfs: Fix possible memory corruption in xfs_readlink, CVE-2011-4077
        - LP: #887298
        - CVE-2011-4077
      * jbd/jbd2: validate sb->s_first in journal_get_superblock()
        - LP: #893148
        - CVE-2011-4132
      * hfs: add sanity check for file name length, CVE-2011-4330
        - LP: #894374
        - CVE-2011-4330
      * ipv6: udp: fix the wrong headroom check
        - LP: #894373
        - CVE-2011-4326
     -- Herton Ronaldo Krzesinski <email address hidden>   Tue, 03 Jan 2012 12:41:36 -0200
  • linux-lts-backport-maverick (2.6.35-31.63~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #897744
    
      [ Upstream Kernel Changes ]
    
      * crypto: ghash - Avoid null pointer dereference if no key is set
        - LP: #887299
        - CVE-2011-4081
      * xfs: Fix possible memory corruption in xfs_readlink, CVE-2011-4077
        - LP: #887298
        - CVE-2011-4077
      * jbd/jbd2: validate sb->s_first in journal_get_superblock()
        - LP: #893148
        - CVE-2011-4132
      * hfs: add sanity check for file name length, CVE-2011-4330
        - LP: #894374
        - CVE-2011-4330
      * ipv6: udp: fix the wrong headroom check
        - LP: #894373
        - CVE-2011-4326
    
    linux (2.6.35-31.62) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #887378
    
      [ Upstream Kernel Changes ]
    
      * ipv6: restore correct ECN handling on TCP xmit
        - LP: #872179
      * nl80211: fix overflow in ssid_len - CVE-2011-2517
        - LP: #869245
        - CVE-2011-2517
      * vm: fix vm_pgoff wrap in stack expansion - CVE-2011-2496
        - LP: #869243
        - CVE-2011-2496
      * vm: fix vm_pgoff wrap in upward expansion - CVE-2011-2496
        - LP: #869243
        - CVE-2011-2496
      * ksm: fix NULL pointer dereference in scan_get_next_rmap_item() -
        CVE-2011-2183
        - LP: #869227
        - CVE-2011-2183
      * NLM: Don't hang forever on NLM unlock requests - CVE-2011-2491
        - LP: #869237
        - CVE-2011-2491
      * cifs: clean up cifs_find_smb_ses (try #2), CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
      * cifs: fix NULL pointer dereference in cifs_find_smb_ses, CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
      * cifs: check for NULL session password, CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
     -- Herton Ronaldo Krzesinski <email address hidden>   Tue, 29 Nov 2011 15:42:23 -0200
  • linux-lts-backport-maverick (2.6.35-31.62~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #888571
    
      [ Upstream Kernel Changes ]
    
      * ipv6: restore correct ECN handling on TCP xmit
        - LP: #872179
      * nl80211: fix overflow in ssid_len - CVE-2011-2517
        - LP: #869245
        - CVE-2011-2517
      * vm: fix vm_pgoff wrap in stack expansion - CVE-2011-2496
        - LP: #869243
        - CVE-2011-2496
      * vm: fix vm_pgoff wrap in upward expansion - CVE-2011-2496
        - LP: #869243
        - CVE-2011-2496
      * ksm: fix NULL pointer dereference in scan_get_next_rmap_item() -
        CVE-2011-2183
        - LP: #869227
        - CVE-2011-2183
      * NLM: Don't hang forever on NLM unlock requests - CVE-2011-2491
        - LP: #869237
        - CVE-2011-2491
      * cifs: clean up cifs_find_smb_ses (try #2), CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
      * cifs: fix NULL pointer dereference in cifs_find_smb_ses, CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
      * cifs: check for NULL session password, CVE-2011-1585
        - LP: #869208
        - CVE-2011-1585
    
    linux (2.6.35-30.61) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #871912
    
      [ Stefan Bader ]
    
      * [Config] Include all filesystem modules for virtual
        - LP: #761809
    
      [ Upstream Kernel Changes ]
    
      * crypto: Move md5_transform to lib/md5.c, CVE-2011-3188
        - LP: #834129
        - CVE-2011-3188
      * net: Compute protocol sequence numbers and fragment IDs using MD5,
        CVE-2011-3188
        - LP: #834129
        - CVE-2011-3188
      * ext4: Fix max file size and logical block counting of extent format
        file, CVE-2011-2695
        - LP: #819574
        - CVE-2011-2695
      * cifs: add fallback in is_path_accessible for old servers, CVE-2011-3363
        - LP: #866034
        - CVE-2011-3363
      * Make TASKSTATS require root access, CVE-2011-2494
        - LP: #866021
        - CVE-2011-2494
      * proc: restrict access to /proc/PID/io, CVE-2011-2495
        - LP: #866025
        - CVE-2011-2495
      * proc: fix a race in do_io_accounting(), CVE-2011-2495
        - LP: #866025
        - CVE-2011-2495
      * inotify: fix double free/corruption of stuct user
        - LP: #869203
        - CVE-2011-1479
      * staging: comedi: fix infoleak to userspace, CVE-2011-2909
        - LP: #869261
        - CVE-2011-2909
      * perf tools: do not look at ./config for configuration, CVE-2011-2905
        - LP: #869259
        - CVE-2011-2905
     -- Herton Ronaldo Krzesinski <email address hidden>   Thu, 10 Nov 2011 15:25:11 -0200
  • linux-lts-backport-maverick (2.6.35-30.61~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #872660
    
      [ Stefan Bader ]
    
      * [Config] Include all filesystem modules for virtual
        - LP: #761809
    
      [ Upstream Kernel Changes ]
    
      * crypto: Move md5_transform to lib/md5.c, CVE-2011-3188
        - LP: #834129
        - CVE-2011-3188
      * net: Compute protocol sequence numbers and fragment IDs using MD5,
        CVE-2011-3188
        - LP: #834129
        - CVE-2011-3188
      * ext4: Fix max file size and logical block counting of extent format
        file, CVE-2011-2695
        - LP: #819574
        - CVE-2011-2695
      * cifs: add fallback in is_path_accessible for old servers, CVE-2011-3363
        - LP: #866034
        - CVE-2011-3363
      * Make TASKSTATS require root access, CVE-2011-2494
        - LP: #866021
        - CVE-2011-2494
      * proc: restrict access to /proc/PID/io, CVE-2011-2495
        - LP: #866025
        - CVE-2011-2495
      * proc: fix a race in do_io_accounting(), CVE-2011-2495
        - LP: #866025
        - CVE-2011-2495
      * inotify: fix double free/corruption of stuct user
        - LP: #869203
        - CVE-2011-1479
      * staging: comedi: fix infoleak to userspace, CVE-2011-2909
        - LP: #869261
        - CVE-2011-2909
      * perf tools: do not look at ./config for configuration, CVE-2011-2905
        - LP: #869259
        - CVE-2011-2905
    
    linux (2.6.35-30.60) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #854092
    
      [ Stefan Bader ]
    
      * [Config] Force perf to use libiberty for demangling
        - LP: #783660
    
      [ Tim Gardner ]
    
      * [Config] Simplify binary-udebs dependencies
      * [Config] kernel preparation cannot be parallelized
      * [Config] Linearize module/abi checks
      * [Config] Linearize and simplify tree preparation rules
      * [Config] Build kernel image in parallel with modules
      * [Config] Set concurrency for kmake invocations
      * [Config] Improve install-arch-headers speed
      * [Config] Fix binary-perarch dependencies
      * [Config] Removed stamp-flavours target
      * [Config] Serialize binary indep targets
      * [Config] Use build stamp directly
      * [Config] Restore prepare-% target
      * [Config] Fix binary-% build target
    
      [ Upstream Kernel Changes ]
    
      * Add mount option to check uid of device being mounted = expect uid,
        CVE-2011-1833
        - LP: #732628
        - CVE-2011-1833
      * ipv6: make fragment identifications less predictable, CVE-2011-2699
        - LP: #827685
        - CVE-2011-2699
      * perf: Fix software event overflow, CVE-2011-2918
        - LP: #834121
        - CVE-2011-2918
      * cifs: fix possible memory corruption in CIFSFindNext, CVE-2011-3191
        - LP: #834135
        - CVE-2011-3191
      * befs: Validate length of long symbolic links, CVE-2011-2928
        - LP: #834124
        - CVE-2011-2928
      * gro: Only reset frag0 when skb can be pulled, CVE-2011-2723
        - LP: #844371
        - CVE-2011-2723
      * Validate size of EFI GUID partition entries, CVE-2011-1776
        - LP: #844365
        - CVE-2011-1776
      * inet_diag: fix inet_diag_bc_audit(), CVE-2011-2213
        - LP: #838421
        - CVE-2011-2213
      * si4713-i2c: avoid potential buffer overflow on si4713, CVE-2011-2700
        - LP: #844370
        - CVE-2011-2700
      * Bluetooth: Prevent buffer overflow in l2cap config request,
        CVE-2011-2497
        - LP: #838423
        - CVE-2011-2497
      * core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576
        - LP: #844361
        - CVE-2011-1576
     -- Herton Ronaldo Krzesinski <email address hidden>   Thu, 13 Oct 2011 14:45:27 -0300
  • linux-lts-backport-maverick (2.6.35-30.60~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #854430
    
      [ Stefan Bader ]
    
      * [Config] Force perf to use libiberty for demangling
        - LP: #783660
    
      [ Tim Gardner ]
    
      * [Config] Simplify binary-udebs dependencies
      * [Config] kernel preparation cannot be parallelized
      * [Config] Linearize module/abi checks
      * [Config] Linearize and simplify tree preparation rules
      * [Config] Build kernel image in parallel with modules
      * [Config] Set concurrency for kmake invocations
      * [Config] Improve install-arch-headers speed
      * [Config] Fix binary-perarch dependencies
      * [Config] Removed stamp-flavours target
      * [Config] Serialize binary indep targets
      * [Config] Use build stamp directly
      * [Config] Restore prepare-% target
      * [Config] Fix binary-% build target
    
      [ Upstream Kernel Changes ]
    
      * Add mount option to check uid of device being mounted = expect uid,
        CVE-2011-1833
        - LP: #732628
        - CVE-2011-1833
      * ipv6: make fragment identifications less predictable, CVE-2011-2699
        - LP: #827685
        - CVE-2011-2699
      * perf: Fix software event overflow, CVE-2011-2918
        - LP: #834121
        - CVE-2011-2918
      * cifs: fix possible memory corruption in CIFSFindNext, CVE-2011-3191
        - LP: #834135
        - CVE-2011-3191
      * befs: Validate length of long symbolic links, CVE-2011-2928
        - LP: #834124
        - CVE-2011-2928
      * gro: Only reset frag0 when skb can be pulled, CVE-2011-2723
        - LP: #844371
        - CVE-2011-2723
      * Validate size of EFI GUID partition entries, CVE-2011-1776
        - LP: #844365
        - CVE-2011-1776
      * inet_diag: fix inet_diag_bc_audit(), CVE-2011-2213
        - LP: #838421
        - CVE-2011-2213
      * si4713-i2c: avoid potential buffer overflow on si4713, CVE-2011-2700
        - LP: #844370
        - CVE-2011-2700
      * Bluetooth: Prevent buffer overflow in l2cap config request,
        CVE-2011-2497
        - LP: #838423
        - CVE-2011-2497
      * core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576
        - LP: #844361
        - CVE-2011-1576
    
    linux (2.6.35-30.59) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #837449
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/nv50-nvc0: work around an evo channel hang that some people
        see"
      * Revert "eCryptfs: Handle failed metadata read in lookup"
     -- Herton Ronaldo Krzesinski <email address hidden>   Tue, 20 Sep 2011 11:03:51 -0300
  • linux-lts-backport-maverick (2.6.35-30.59~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #838043
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/nv50-nvc0: work around an evo channel hang that some people
        see"
      * Revert "eCryptfs: Handle failed metadata read in lookup"
    
    linux (2.6.35-30.58) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #828376
    
      [ Upstream Kernel Changes ]
    
      * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
    
    linux (2.6.35-30.57) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #823306
    
      [ Tim Gardner ]
    
      * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
        - LP: #805494
      * [Config] Add enic/fnic to udebs
        - LP: #801610
    
      [ Upstream Kernel Changes ]
    
      * taskstats: don't allow duplicate entries in listener mode,
        CVE-2011-2484
        - LP: #806390
        - CVE-2011-2484
      * dccp: handle invalid feature options length, CVE-2011-1770
        - LP: #806375
        - CVE-2011-1770
      * eCryptfs: Handle failed metadata read in lookup
        - LP: #509180
      * pagemap: close races with suid execve, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * report errors in /proc/*/*map* sanely, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * close race in /proc/*/environ, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * auxv: require the target to be tracable (or yourself), CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
        - LP: #816550
        - CVE-2011-1493
      * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
        - LP: #819569
        - CVE-2011-2492
      * drm/nv50-nvc0: work around an evo channel hang that some people see
        - LP: #583760
    
    linux (2.6.35-30.56) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #808934
    
      [ Herton Ronaldo Krzesinski ]
    
      * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
    
      [ Upstream Kernel Changes ]
    
      * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
        - LP: #805209
     -- Herton Ronaldo Krzesinski <email address hidden>   Thu, 01 Sep 2011 13:40:57 -0300
  • linux-lts-backport-maverick (2.6.35-30.58~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #829658
    
      [ Upstream Kernel Changes ]
    
      * proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
    
    linux (2.6.35-30.57) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #823306
    
      [ Tim Gardner ]
    
      * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
        - LP: #805494
      * [Config] Add enic/fnic to udebs
        - LP: #801610
    
      [ Upstream Kernel Changes ]
    
      * taskstats: don't allow duplicate entries in listener mode,
        CVE-2011-2484
        - LP: #806390
        - CVE-2011-2484
      * dccp: handle invalid feature options length, CVE-2011-1770
        - LP: #806375
        - CVE-2011-1770
      * eCryptfs: Handle failed metadata read in lookup
        - LP: #509180
      * pagemap: close races with suid execve, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * report errors in /proc/*/*map* sanely, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * close race in /proc/*/environ, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * auxv: require the target to be tracable (or yourself), CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
        - LP: #816550
        - CVE-2011-1493
      * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
        - LP: #819569
        - CVE-2011-2492
      * drm/nv50-nvc0: work around an evo channel hang that some people see
        - LP: #583760
    
    linux (2.6.35-30.56) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #808934
    
      [ Herton Ronaldo Krzesinski ]
    
      * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
    
      [ Upstream Kernel Changes ]
    
      * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
        - LP: #805209
     -- Herton Ronaldo Krzesinski <email address hidden>   Fri, 19 Aug 2011 14:53:18 -0300
  • linux-lts-backport-maverick (2.6.35-30.57~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #824904
    
      [ Tim Gardner ]
    
      * SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
        - LP: #805494
      * [Config] Add enic/fnic to udebs
        - LP: #801610
    
      [ Upstream Kernel Changes ]
    
      * taskstats: don't allow duplicate entries in listener mode,
        CVE-2011-2484
        - LP: #806390
        - CVE-2011-2484
      * dccp: handle invalid feature options length, CVE-2011-1770
        - LP: #806375
        - CVE-2011-1770
      * eCryptfs: Handle failed metadata read in lookup
        - LP: #509180
      * pagemap: close races with suid execve, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * report errors in /proc/*/*map* sanely, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * close race in /proc/*/environ, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * auxv: require the target to be tracable (or yourself), CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
        - LP: #813026
        - CVE-2011-1020
      * rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
        - LP: #816550
        - CVE-2011-1493
      * Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
        - LP: #819569
        - CVE-2011-2492
      * drm/nv50-nvc0: work around an evo channel hang that some people see
        - LP: #583760
    
    linux (2.6.35-30.56) maverick-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #808934
    
      [ Herton Ronaldo Krzesinski ]
    
      * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
    
      [ Upstream Kernel Changes ]
    
      * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
        - LP: #805209
     -- Herton Ronaldo Krzesinski <email address hidden>   Fri, 12 Aug 2011 13:11:40 -0300
  • linux-lts-backport-maverick (2.6.35-30.56~lucid1) lucid-proposed; urgency=low
    
      [Herton R. Krzesinski]
    
      * Release Tracking Bug
        - LP: #811215
    
      [ Herton Ronaldo Krzesinski ]
    
      * Revert "SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]"
    
      [ Upstream Kernel Changes ]
    
      * Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
        - LP: #805209
    
    linux (2.6.35-30.55) maverick-proposed; urgency=low
    
      [Steve Conklin]
    
      * Release Tracking Bug
        - LP: #801690
    
      [ Jeremy Kerr ]
    
      * SAUCE: cx23885: Fix argument to videobuf_dma_unmap
        - LP: #800527
    
      [ Manoj Iyer ]
    
      * SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
        - LP: #790754
    
      [ Upstream Kernel Changes ]
    
      * agp: fix OOM and buffer overflow
        - LP: #791918
        - CVE-2011-1746
      * tty: icount changeover for other main devices, CVE-2010-4076,
        CVE-2010-4077
        - LP: #720189
        - CVE-2010-4077
      * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
        oops
        - LP: #795418
        - CVE-2011-1577
      * Fix corrupted OSF partition table parsing
        - LP: #796606
        - CVE-2011-1163
      * can: Add missing socket check in can/bcm release.
        - LP: #796502
        - CVE-2011-1598
      * nfs4: Ensure that ACL pages sent over NFS were not allocated from the
        slab (v3) CVE-2011-1090
        - LP: #800775
        - CVE-2011-1090
    
    linux (2.6.35-30.54) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #794114
    
      [ Upstream Kernel Changes ]
    
      * Revert "xhci: Fix full speed bInterval encoding."
      * Revert "USB: xhci - also free streams when resetting devices"
      * Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
      * Revert "USB: xhci - fix unsafe macro definitions"
    
    linux (2.6.35-30.53) maverick-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * xhci: Fix full speed bInterval encoding.
        - LP: #792959
    
    linux (2.6.35-30.52) maverick-proposed; urgency=low
    
      [ Herton R. Krzesinski ]
    
      * Release Tracking Bug
        - LP: #790653
    
      [ Stefan Bader ]
    
      * Include nls_iso8859-1 for virtual images
        - LP: #732046
    
      [ Thomas Schlichter ]
    
      * SAUCE: vesafb: mtrr module parameter is uint, not bool
        - LP: #778043
    
      [ Tim Gardner ]
    
      * [Config] Add cachefiles.ko to virtual flavour
        - LP: #770430
    
      [ Upstream Kernel Changes ]
    
      * Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
        hang"
        - LP: #772560
      * Revert "TPM: Long default timeout fix"
        - LP: #772560
      * Revert "tpm_tis: Use timeouts returned from TPM"
        - LP: #772560
      * Revert "xen: set max_pfn_mapped to the last pfn mapped"
      * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
        - LP: #765007
        - CVE-2010-4565
      * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
        CVE-2011-0711
        - LP: #767740
        - CVE-2011-0711
      * Treat writes as new when holes span across page boundaries,
        CVE-2011-0463
        - LP: #770483
        - CVE-2011-0463
      * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
        CVE-2011-1017
        - LP: #771382
        - CVE-2011-1017
      * qla2xxx: Make the FC port capability mutual exclusive.
        - LP: #772560
      * staging: usbip: bugfixes related to kthread conversion
        - LP: #772560
      * staging: usbip: bugfix add number of packets for isochronous frames
        - LP: #772560
      * staging: usbip: bugfix for isochronous packets and optimization
        - LP: #772560
      * staging: hv: Fix GARP not sent after Quick Migration
        - LP: #772560
      * staging: hv: use sync_bitops when interacting with the hypervisor
        - LP: #772560
      * irda: validate peer name and attribute lengths
        - LP: #772560
      * irda: prevent heap corruption on invalid nickname
        - LP: #772560
      * nilfs2: fix data loss in mmap page write for hole blocks
        - LP: #772560
      * ASoC: Explicitly say registerless widgets have no register
        - LP: #772560
      * ALSA: ens1371: fix Creative Ectiva support
        - LP: #772560
      * ROSE: prevent heap corruption with bad facilities
        - LP: #772560
      * Btrfs: Fix uninitialized root flags for subvolumes
        - LP: #772560
      * x86, mtrr, pat: Fix one cpu getting out of sync during resume
        - LP: #772560
      * UBIFS: do not read flash unnecessarily
        - LP: #772560
      * UBIFS: fix oops on error path in read_pnode
        - LP: #772560
      * UBIFS: fix debugging failure in dbg_check_space_info
        - LP: #772560
      * quota: Don't write quota info in dquot_commit()
        - LP: #772560
      * mm: avoid wrapping vm_pgoff in mremap()
        - LP: #772560
      * p54usb: IDs for two new devices
        - LP: #772560
      * b43: allocate receive buffers big enough for max frame len + offset
        - LP: #772560
      * Bluetooth: sco: fix information leak to userspace
        - LP: #772560
      * bridge: netfilter: fix information leak
        - LP: #772560
      * Bluetooth: bnep: fix buffer overflow
        - LP: #772560
      * Bluetooth: add support for Apple MacBook Pro 8,2
        - LP: #772560
      * char/tpm: Fix unitialized usage of data buffer
        - LP: #772560
      * netfilter: ip_tables: fix infoleak to userspace
        - LP: #772560
      * netfilter: arp_tables: fix infoleak to userspace
        - LP: #772560
      * netfilter: ipt_CLUSTERIP: fix buffer overflow
        - LP: #772560
      * ipv6: netfilter: ip6_tables: fix infoleak to userspace
        - LP: #772560
      * mfd: ab3100: world-writable debugfs *_priv files
        - LP: #772560
      * drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
        - LP: #772560
      * drivers/misc/ep93xx_pwm.c: world-writable sysfs files
        - LP: #772560
      * econet: 4 byte infoleak to the network
        - LP: #772560
      * sound/oss: remove offset from load_patch callbacks
        - LP: #772560
      * sound: oss: midi_synth: check get_user() return value
        - LP: #772560
      * gro: Reset dev pointer on reuse
        - LP: #772560
      * gro: reset skb_iif on reuse
        - LP: #772560
      * x86, microcode, AMD: Extend ucode size verification
        - LP: #772560
      * Squashfs: handle corruption of directory structure
        - LP: #772560
      * atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
        - LP: #772560
      * ext4: fix credits computing for indirect mapped files
        - LP: #772560
      * nfsd: fix auth_domain reference leak on nlm operations
        - LP: #772560
      * inet_diag: Make sure we actually run the same bytecode we audited.
        - LP: #772560
      * xfs: zero proper structure size for geometry calls
        - LP: #772560
      * cifs: always do is_path_accessible check in cifs_mount
        - LP: #772560
      * video: sn9c102: world-wirtable sysfs files
        - LP: #772560
      * UBIFS: restrict world-writable debugfs files
        - LP: #772560
      * NET: cdc-phonet, handle empty phonet header
        - LP: #772560
      * x86: Fix a bogus unwind annotation in lib/semaphore_32.S
        - LP: #772560
      * tioca: Fix assignment from incompatible pointer warnings
        - LP: #772560
      * mca.c: Fix cast from integer to pointer warning
        - LP: #772560
      * ramfs: fix memleak on no-mmu arch
        - LP: #772560
      * MAINTAINERS: update STABLE BRANCH info
        - LP: #772560
      * UBIFS: fix oops when R/O file-system is fsync'ed
        - LP: #772560
      * x86, cpu: AMD errata checking framework
        - LP: #772560
      * x86, cpu: Clean up AMD erratum 400 workaround
        - LP: #772560
      * x86, AMD: Set ARAT feature on AMD processors
        - LP: #772560
      * x86, amd: Disable GartTlbWlkErr when BIOS forgets it
        - LP: #772560
      * USB: ftdi_sio: Added IDs for CTI USB Serial Devices
        - LP: #772560
      * USB: ftdi_sio: add PID for OCT DK201 docking station
        - LP: #772560
      * USB: ftdi_sio: add ids for Hameg HO720 and HO730
        - LP: #772560
      * USB: option: Add new ONDA vendor id and product id for ONDA MT825UP
        - LP: #772560
      * USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
        - LP: #772560
      * next_pidmap: fix overflow condition
        - LP: #772560
      * proc: do proper range check on readdir offset
        - LP: #772560
      * USB: EHCI: unlink unused QHs when the controller is stopped
        - LP: #772560
      * USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
        - LP: #772560
      * USB: xhci - fix unsafe macro definitions
        - LP: #772560
      * USB: xhci - fix math in xhci_get_endpoint_interval()
        - LP: #772560
      * x86, cpu: Fix regression in AMD errata checking code
        - LP: #772560
      * Input: synaptics - fix crash in synaptics_module_init()
        - LP: #772560
      * ath9k: fix a chip wakeup related crash in ath9k_start
        - LP: #772560
      * ath: add missing regdomain pair 0x5c mapping
        - LP: #772560
      * block, blk-sysfs: Fix an err return path in blk_register_queue()
        - LP: #772560
      * p54: Initialize extra_len in p54_tx_80211
        - LP: #772560
      * x86, gart: Make sure GART does not map physmem above 1TB
        - LP: #772560
      * intel-iommu: Unlink domain from iommu
        - LP: #772560
      * intel-iommu: Fix get_domain_for_dev() error path
        - LP: #772560
      * drm/radeon/kms: fix bad shift in atom iio table parser
        - LP: #772560
      * NFS: nfs_wcc_update_inode() should set nfsi->attr_gencount
        - LP: #772560
      * serial/imx: read cts state only after acking cts change irq
        - LP: #772560
      * ASoC: Fix output PGA enabling in wm_hubs CODECs
        - LP: #772560
      * kconfig: Avoid buffer underrun in choice input
        - LP: #772560
      * UBIFS: fix master node recovery
        - LP: #772560
      * Remove extra struct page member from the buffer info structure
        - LP: #772560
      * dasd: correct device table
        - LP: #772560
      * iwlagn: Support new 5000 microcode.
        - LP: #772560
      * uvcvideo: Fix descriptor parsing for video output devices
        - LP: #772560
      * ALSA: hda - VIA: Add missing support for VT1718S in A-A path
        - LP: #772560
      * ALSA: hda - VIA: Fix stereo mixer recording no sound issue
        - LP: #772560
      * iwlwifi: fix skb usage after free
        - LP: #772560
      * intel-iommu: Fix use after release during device attach
        - LP: #772560
      * USB: Fix unplug of device with active streams
        - LP: #772560
      * USB: xhci - also free streams when resetting devices
        - LP: #772560
      * 2.6.35.y: Revert "SH: Add missing consts to sys_execve() declaration"
        - LP: #772560
      * 2.6.35.13 longterm review
        - LP: #772560
      * release-2.6.35.13
        - LP: #772560
      * xen: events: do not unmask event channels on resume
        - LP: #681083
      * ALSA: sound/pci/asihpi: check adapter index in hpi_ioctl, CVE-2011-1169
        - LP: #785331
        - CVE-2011-1169
      * mpt2sas: prevent heap overflows and unchecked reads, CVE-2011-1494
        - LP: #787145
        - CVE-2011-1494
      * can: add missing socket check in can/raw release, CVE-2011-1748
        - LP: #788694
        - CVE-2011-1748
      * agp: fix arbitrary kernel memory writes, CVE-1011-2022
        - LP: #788684
        - CVE-1011-2022
    
    linux (2.6.35-29.51) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Release Tracking Bug
        - LP: #760928
    
      [ Brad Figg ]
    
      * [Config] Set CONFIG_NR_CPUS=256 for amd64 generic
        - LP: #737124
    
      [ Kees Cook ]
    
      * SAUCE: nx-emu: further clarify dmesg reporting
        - LP: #745181
    
      [ Loïc Minier ]
    
      * Include nls_cp437 module in virtual for fat
        - LP: #732046
    
      [ Manoj Iyer ]
    
      * SAUCE: thinkpad-acpi: module autoloading for newer Lenovo ThinkPads.
        - LP: #745217
      * SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
        - LP: #746652
    
      [ Mel Gorman ]
    
      * (pre-stable) mm: page allocator: adjust the per-cpu counter threshold
        when memory is low
        - LP: #719446
    
      [ Tim Gardner ]
    
      * [Config] updateconfigs after 2.6.35.12
        - LP: #747520
      * SAUCE: staging: hv: Fixed issue with scheduling while atomic in
        hv_vmbus
        - LP: #752064
      * SAUCE: Backport of mainline loss of network fix for Hyper-V
        - LP: #752064
    
      [ Upstream Kernel Changes ]
    
      * Revert "slab: Fix missing DEBUG_SLAB last user"
        - LP: #747520
      * PM / Hibernate: Improve comments in hibernate_preallocate_memory()
        - LP: #737208
      * PM / Hibernate: Make default image size depend on total RAM size
        - LP: #737208
      * irda: prevent integer underflow in IRLMP_ENUMDEVICES, CVE-2010-4529
        - LP: #737823
        - CVE-2010-4529
      * perf session: Invalidate last_match when removing threads from rb_tree
        - LP: #747520
      * Fix cred leak in AF_NETLINK
        - LP: #747520
      * staging: usbip: remove double giveback of URB
        - LP: #747520
      * USB: EHCI: ASPM quirk of ISOC on AMD SB800
        - LP: #747520
      * rt2x00: add device id for windy31 usb device
        - LP: #747520
      * ALSA: snd-usb-us122l: Fix missing NULL checks
        - LP: #747520
      * hwmon: (via686a) Initialize fan_div values
        - LP: #747520
      * USB: serial: handle Data Carrier Detect changes
        - LP: #747520
      * USB: CP210x Add two device IDs
        - LP: #747520
      * USB: CP210x Removed incorrect device ID
        - LP: #747520
      * USB: usb-storage: unusual_devs update for Cypress ATACB
        - LP: #747520
      * USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u
        external hard drive enclosure
        - LP: #747520
      * USB: usb-storage: unusual_devs entry for CamSport Evo
        - LP: #747520
      * USB: usb-storage: unusual_devs entry for Coby MP3 player
        - LP: #747520
      * USB: serial: Updated support for ICOM devices
        - LP: #747520
      * USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
        - LP: #747520
      * USB: EHCI: ASPM quirk of ISOC on AMD Hudson
        - LP: #747520
      * USB: EHCI: fix DMA deallocation bug
        - LP: #747520
      * USB: g_printer: fix bug in module parameter definitions
        - LP: #747520
      * USB: io_edgeport: fix the reported firmware major and minor
        - LP: #747520
      * USB: ti_usb: fix module removal
        - LP: #747520
      * USB: Storage: Add unusual_devs entry for VTech Kidizoom
        - LP: #747520
      * USB: ftdi_sio: add ST Micro Connect Lite uart support
        - LP: #747520
      * USB: cdc-acm: Adding second ACM channel support for Nokia N8
        - LP: #747520
      * USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research
        spectrograph
        - LP: #747520
      * USB: prevent buggy hubs from crashing the USB stack
        - LP: #747520
      * staging: comedi: add support for newer jr3 1-channel pci board
        - LP: #747520
      * staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
        - LP: #747520
      * Staging: hv: fix sysfs symlink on hv block device
        - LP: #747520
      * staging: hv: Enable sending GARP packet after live migration
        - LP: #747520
      * iwlagn: enable only rfkill interrupt when device is down
        - LP: #747520
      * ath9k: Fix bug in delimiter padding computation
        - LP: #747520
      * fix medium error problems with some arrays which can cause data
        corruption
        - LP: #747520
      * libsas: fix runaway error handler problem
        - LP: #747520
      * mpt2sas: Fix device removal handshake for zoned devices
        - LP: #747520
      * mpt2sas: Correct resizing calculation for max_queue_depth
        - LP: #747520
      * mpt2sas: Kernel Panic during Large Topology discovery
        - LP: #747520
      * radio-aimslab.c: Fix gcc 4.5+ bug
        - LP: #747520
      * em28xx: Fix audio input for Terratec Grabby
        - LP: #747520
      * ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
        - LP: #747520
      * ALSA: HDA: Fix dmesg output of HDMI supported bits
        - LP: #747520
      * ALSA: hda - Fix memory leaks in conexant jack arrays
        - LP: #747520
      * input: bcm5974: Add support for MacBookAir3
        - LP: #747520
      * ALSA: hrtimer: handle delayed timer interrupts
        - LP: #747520
      * ASoC: WM8990: msleep() takes milliseconds not jiffies
        - LP: #747520
      * ASoC: Blackfin AC97: fix build error after multi-component update
        - LP: #747520
      * NFS: Fix "kernel BUG at fs/aio.c:554!"
        - LP: #747520
      * rtc-cmos: fix suspend/resume
        - LP: #747520
      * iwlagn: Re-enable RF_KILL interrupt when down
        - LP: #747520
      * rapidio: fix hang on RapidIO doorbell queue full condition
        - LP: #747520
      * PCI: pci-stub: ignore zero-length id parameters
        - LP: #747520
      * virtio: remove virtio-pci root device
        - LP: #747520
      * ds2760_battery: Fix calculation of time_to_empty_now
        - LP: #747520
      * p54: fix sequence no. accounting off-by-one error
        - LP: #747520
      * i2c: Unregister dummy devices last on adapter removal
        - LP: #747520
      * serial: unbreak billionton CF card
        - LP: #747520
      * ptrace: use safer wake up on ptrace_detach()
        - LP: #747520
      * x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
        - LP: #747520
      * fix jiffy calculations in calibrate_delay_direct to handle overflow
        - LP: #747520
      * drivers: update to pl2303 usb-serial to support Motorola cables
        - LP: #747520
      * klist: Fix object alignment on 64-bit.
        - LP: #747520
      * powerpc: Fix some 6xx/7xxx CPU setup functions
        - LP: #747520
      * parisc : Remove broken line wrapping handling pdc_iodc_print()
        - LP: #747520
      * kernel/smp.c: fix smp_call_function_many() SMP race
        - LP: #747520
      * hostap_cs: fix sleeping function called from invalid context
        - LP: #747520
      * md: fix regression with re-adding devices to arrays with no metadata
        - LP: #747520
      * pata_mpc52xx: inherit from ata_bmdma_port_ops
        - LP: #747520
      * TPM: Long default timeout fix
        - LP: #747520
      * tpm_tis: Use timeouts returned from TPM
        - LP: #747520
      * SELinux: define permissions for DCB netlink messages
        - LP: #747520
      * SELinux: do not compute transition labels on mountpoint labeled
        filesystems
        - LP: #747520
      * ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
        - LP: #747520
      * dm: dont take i_mutex to change device size
        - LP: #747520
      * dm mpath: disable blk_abort_queue
        - LP: #747520
      * drm/radeon/kms: add quirk for Mac Radeon HD 2600 card
        - LP: #747520
      * drm/radeon/kms: make the mac rv630 quirk generic
        - LP: #747520
      * drm/radeon/kms: add pll debugging output
        - LP: #747520
      * drm/radeon: remove 0x4243 pci id
        - LP: #747520
      * drm/radeon/kms: fix s/r issues with bios scratch regs
        - LP: #747520
      * drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
        - LP: #747520
      * drm/i915: Add dependency on CONFIG_TMPFS
        - LP: #747520
      * x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask
        after switching mm
        - LP: #747520
      * usb: Realloc xHCI structures after a hub is verified.
        - LP: #747520
      * sched: Move sched_avg_update() to update_cpu_load()
        - LP: #747520
      * sched: Increment cache_nice_tries only on periodic lb
        - LP: #747520
      * sched: Try not to migrate higher priority RT tasks
        - LP: #747520
      * sched: Give CPU bound RT tasks preference
        - LP: #747520
      * sched: suppress RCU lockdep splat in task_fork_fair
        - LP: #747520
      * sched: Do not consider SCHED_IDLE tasks to be cache hot
        - LP: #747520
      * sched: Set group_imb only a task can be pulled from the busiest cpu
        - LP: #747520
      * sched: Force balancing on newidle balance if local group has capacity
        - LP: #747520
      * sched: Drop group_capacity to 1 only if local group has extra capacity
        - LP: #747520
      * sched: Fix softirq time accounting
        - LP: #747520
      * sched: Consolidate account_system_vtime extern declaration
        - LP: #747520
      * sched: Remove unused PF_ALIGNWARN flag
        - LP: #747520
      * sched: Add a PF flag for ksoftirqd identification
        - LP: #747520
      * sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
        - LP: #747520
      * x86: Add IRQ_TIME_ACCOUNTING
        - LP: #747520
      * sched: Do not account irq time to current task
        - LP: #747520
      * sched: Remove irq time from available CPU power
        - LP: #747520
      * sched: Call tick_check_idle before __irq_enter
        - LP: #747520
      * sched: Export account_system_vtime()
        - LP: #747520
      * sched, cgroup: Fixup broken cgroup movement
        - LP: #747520
      * sched: Use group weight, idle cpu metrics to fix imbalances during idle
        - LP: #747520
      * kernel/user.c: add lock release annotation on free_user()
        - LP: #747520
      * NFSD: memory corruption due to writing beyond the stat array
        - LP: #747520
      * mptfusion: mptctl_release is required in mptctl.c
        - LP: #747520
      * mptfusion: Fix Incorrect return value in mptscsih_dev_reset
        - LP: #747520
      * ocfs2_connection_find() returns pointer to bad structure
        - LP: #747520
      * x86/pvclock: Zero last_value on resume
        - LP: #747520
      * av7110: check for negative array offset
        - LP: #747520
      * bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
        - LP: #747520
      * CRED: Fix kernel panic upon security_file_alloc() failure.
        - LP: #747520
      * CRED: Fix BUG() upon security_cred_alloc_blank() failure
        - LP: #747520
      * CRED: Fix memory and refcount leaks upon security_prepare_creds()
        failure
        - LP: #747520
      * isdn: hisax: Replace the bogus access to irq stats
        - LP: #747520
      * scsi_dh_alua: add netapp to dev list
        - LP: #747520
      * scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
        - LP: #747520
      * nfsd: correctly handle return value from nfsd_map_name_to_*
        - LP: #747520
      * s390: remove task_show_regs
        - LP: #747520
      * PM / Hibernate: Return error code when alloc_image_page() fails
        - LP: #747520
      * fs/partitions: Validate map_count in Mac partition tables
        - LP: #747520
      * ALSA: HDA: Add position_fix quirk for an Asus device
        - LP: #718402, #747520
      * ALSA: caiaq - Fix possible string-buffer overflow
        - LP: #747520
      * radio-aimslab.c needs #include <linux/delay.h>
        - LP: #747520
      * ARM: Ensure predictable endian state on signal handler entry
        - LP: #747520
      * acer-wmi: Fix capitalisation of GUID
        - LP: #747520
      * eCryptfs: Copy up lower inode attrs in getattr
        - LP: #747520
      * platform: x86: acer-wmi: world-writable sysfs threeg file
        - LP: #747520
      * platform: x86: asus_acpi: world-writable procfs files
        - LP: #747520
      * platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial
        files
        - LP: #747520
      * genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
        - LP: #747520
      * usb: musb: omap2430: fix kernel panic on reboot
        - LP: #747520
      * USB: add quirks entry for Keytouch QWERTY Panel
        - LP: #747520
      * USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
        - LP: #747520
      * USB: Add quirk for Samsung Android phone modem
        - LP: #747520
      * p54pci: update receive dma buffers before and after processing
        - LP: #747520
      * sierra: add new ID for Airprime/Sierra USB IP modem
        - LP: #747520
      * staging: usbip: vhci: update reference count for usb_device
        - LP: #747520
      * staging: usbip: vhci: give back URBs from in-flight unlink requests
        - LP: #747520
      * staging: usbip: vhci: refuse to enqueue for dead connections
        - LP: #747520
      * staging: usbip: vhci: use urb->dev->portnum to find port
        - LP: #747520
      * epoll: prevent creating circular epoll structures
        - LP: #747520
      * ldm: corrupted partition table can cause kernel oops
        - LP: #747520
      * md: correctly handle probe of an 'mdp' device.
        - LP: #747520
      * x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
        - LP: #747520
      * xhci: Avoid BUG() in interrupt context
        - LP: #747520
      * xhci: Clarify some expressions in the TRB math
        - LP: #747520
      * xhci: Fix errors in the running total calculations in the TRB math
        - LP: #747520
      * xhci: Fix an error in count_sg_trbs_needed()
        - LP: #747520
      * x25: Do not reference freed memory.
        - LP: #747520
      * Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in
        a right number.
        - LP: #747520
      * drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
        - LP: #747520
      * mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
        - LP: #747520
      * x86: Use u32 instead of long to set reset vector back to 0
        - LP: #747520
      * fuse: fix hang of single threaded fuseblk filesystem
        - LP: #747520
      * clockevents: Prevent oneshot mode when broadcast device is periodic
        - LP: #747520
      * ext2: Fix link count corruption under heavy link+rename load
        - LP: #747520
      * p54usb: add Senao NUB-350 usbid
        - LP: #747520
      * dccp: fix oops on Reset after close
        - LP: #747520
      * e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup
        instead
        - LP: #747520
      * r8169: disable ASPM
        - LP: #747520
      * usb: iowarrior: don't trust report_size for buffer size
        - LP: #747520
      * arp_notify: unconditionally send gratuitous ARP for
        NETDEV_NOTIFY_PEERS.
        - LP: #747520
      * CIFS: Fix oplock break handling (try #2)
        - LP: #747520
      * cpuset: add a missing unlock in cpuset_write_resmask()
        - LP: #747520
      * keyboard: integer underflow bug
        - LP: #747520
      * RxRPC: Fix v1 keys
        - LP: #747520
      * ixgbe: fix for 82599 erratum on Header Splitting
        - LP: #747520
      * mm: fix possible cause of a page_mapped BUG
        - LP: #747520
      * powerpc/kexec: Fix orphaned offline CPUs across kexec
        - LP: #747520
      * netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
        - LP: #747520
      * nfsd: wrong index used in inner loop
        - LP: #747520
      * r8169: use RxFIFO overflow workaround for 8168c chipset.
        - LP: #747520
      * net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
        - LP: #747520
      * ip6ip6-autoload-ip6-tunnel
        - LP: #747520
      * hwmon/f71882fg: Set platform drvdata to NULL later
        - LP: #747520
      * mtd: add "platform:" prefix for platform modalias
        - LP: #747520
      * libata: no special completion processing for EH commands
        - LP: #747520
      * MIPS: MTX-1: Make au1000_eth probe all PHY addresses
        - LP: #747520
      * x86/mm: Handle mm_fault_error() in kernel space
        - LP: #747520
      * ftrace: Fix memory leak with function graph and cpu hotplug
        - LP: #747520
      * x86: Fix panic when handling "mem={invalid}" param
        - LP: #553464, #747520
      * x86: Emit "mem=nopentium ignored" warning when not supported
        - LP: #553464, #747520
      * ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
        - LP: #747520
      * ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
        - LP: #747520
      * ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
        - LP: #747520
      * RDMA/cma: Fix crash in request handlers
        - LP: #747520
      * IB/cm: Bump reference count on cm_id before invoking callback
        - LP: #747520
      * x86, quirk: Fix SB600 revision check
        - LP: #747520
      * ath9k_hw: Fix incorrect macversion and macrev checks
        - LP: #747520
      * USB: serial/kobil_sct, fix potential tty NULL dereference
        - LP: #747520
      * USB: serial: ch341: add new id
        - LP: #747520
      * xhci: Fix cycle bit calculation during stall handling.
        - LP: #747520
      * ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
        - LP: #747520
      * PCI: add more checking to ICH region quirks
        - LP: #747520
      * PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
        - LP: #747520
      * PCI: sysfs: Fix failure path for addition of "vpd" attribute
        - LP: #747520
      * ALSA: ctxfi - Fix incorrect SPDIF status bit mask
        - LP: #747520
      * ALSA: ctxfi - Fix SPDIF status retrieval
        - LP: #747520
      * ALSA: ctxfi - Clear input settings before initialization
        - LP: #747520
      * SUNRPC: Ensure we always run the tk_callback before tk_action
        - LP: #747520
      * perf, powerpc: Handle events that raise an exception without
        overflowing
        - LP: #747520
      * ext3: Always set dx_node's fake_dirent explicitly.
        - LP: #747520
      * call_function_many: fix list delete vs add race
        - LP: #747520
      * call_function_many: add missing ordering
        - LP: #747520
      * x86: Flush TLB if PGD entry is changed in i386 PAE mode
        - LP: #747520
      * smp_call_function_many: handle concurrent clearing of mask
        - LP: #747520
      * fix per-cpu flag problem in the cpu affinity checkers
        - LP: #747520
      * i2c: Fix typo in instantiating-devices document
        - LP: #747520
      * mmc: sdio: remember new card RCA when redetecting card
        - LP: #747520
      * x86, binutils, xen: Fix another wrong size directive
        - LP: #747520
      * hwmon: (sht15) Fix integer overflow in humidity calculation
        - LP: #747520
      * aio: wake all waiters when destroying ctx
        - LP: #747520
      * shmem: let shared anonymous be nonlinear again
        - LP: #747520
      * PCI hotplug: acpiphp: set current_state to D0 in register_slot
        - LP: #747520
      * xen: set max_pfn_mapped to the last pfn mapped
        - LP: #747520
      * Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal
        code
        - LP: #747520
      * ext3: skip orphan cleanup on rocompat fs
        - LP: #747520
      * procfs: fix /proc/<pid>/maps heap check
        - LP: #747520
      * proc: protect mm start_code/end_code in /proc/pid/stat
        - LP: #747520
      * fbcon: Bugfix soft cursor detection in Tile Blitting
        - LP: #747520
      * nfsd41: modify the members value of nfsd4_op_flags
        - LP: #747520
      * uvcvideo: Fix uvc_fixup_video_ctrl() format search
        - LP: #747520
      * ehci-hcd: Bug fix: don't set a QH's Halt bit
        - LP: #747520
      * USB: uss720 fixup refcount position
        - LP: #747520
      * USB: cdc-acm: fix memory corruption / panic
        - LP: #747520
      * USB: cdc-acm: fix potential null-pointer dereference
        - LP: #747520
      * USB: cdc-acm: fix potential null-pointer dereference on disconnect
        - LP: #747520
      * Input: xen-kbdfront - advertise either absolute or relative coordinates
        - LP: #747520
      * SUNRPC: Never reuse the socket port after an xs_close()
        - LP: #747520
      * fs: call security_d_instantiate in d_obtain_alias V2
        - LP: #747520
      * dcdbas: force SMI to happen when expected
        - LP: #747520
      * ALSA: hda - Fix SPDIF out regression on ALC889
        - LP: #747520
      * ALSA: Fix yet another race in disconnection
        - LP: #747520
      * perf: Better fit max unprivileged mlock pages for tools needs
        - LP: #747520
      * myri10ge: fix rmmod crash
        - LP: #747520
      * cciss: fix lost command issue
        - LP: #747520
      * sound/oss/opl3: validate voice and channel indexes
        - LP: #747520
      * mac80211: initialize sta->last_rx in sta_info_alloc
        - LP: #747520
      * ses: show devices for enclosures with no page 7
        - LP: #747520
      * ses: Avoid kernel panic when lun 0 is not mapped
        - LP: #747520
      * eCryptfs: Unlock page in write_begin error path
        - LP: #747520
      * eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
        - LP: #747520
      * classmate-laptop: depends on RFKILL or RFKILL=n
        - LP: #747520
      * netfilter: arpt_mangle: fix return values of checkentry
        - LP: #747520
      * Patch cab9e9848b9a8283b0504a2d7c435a9f5ba026de to the 2.6.35.y stable
        tree
        - LP: #747520
      * revert misc: uss720.c: add another vendor/product ID
        - LP: #747520
      * cfg80211: fix can_beacon_sec_chan, reenable HT40
        - LP: #747520
      * USB: isp1760: Implement solution for erratum 2
        - LP: #747520
      * xhci: Update internal dequeue pointers after stalls.
        - LP: #747520
      * perf: Fix tear-down of inherited group events
        - LP: #747520
      * net: Fix ip link add netns oops
        - LP: #747520
      * hwmon: (w83627ehf) Driver cleanup
        - LP: #747520
      * md: Fix - again - partition detection when array becomes active
        - LP: #747520
      * iwl3945: remove plcp check
        - LP: #747520
      * KVM: enlarge number of possible CPUID leaves
        - LP: #747520
      * KVM: i8259: initialize isr_ack
        - LP: #747520
      * KVM: VMX: Fix host userspace gsbase corruption
        - LP: #747520
      * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
        - LP: #747520
      * Release 2.6.35.12
        - LP: #747520
      * drm/radeon/kms: check AA resolve registers on r300, CVE-2011-1016
        - LP: #745686
        - CVE-2011-1016
      * drm/radeon: fix regression with AA resolve checking, CVE-2011-1016
        - LP: #745686
        - CVE-2011-1016
      * staging: hv: fix netvsc sleeping while atomic
        - LP: #752064
      * staging: hv: Fix the WARN_ON condition in free_net_device()
        - LP: #752064
      * Yama: fix default relationship to check thread group
        - LP: #737676
    
    linux (2.6.35-28.50) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #734399
    
      [ Corentin Chary ]
    
      * SAUCE: (drop after 2.6.38) eeepc-wmi: reorder keymap
        - LP: #689393
      * SAUCE: (drop after 2.6.38) eeepc-wmi: add wlan key found on 1015P
        - LP: #689393
    
      [ Keng-Yu Lin ]
    
      * SAUCE: eeepc-wmi: set the touchpad toggle key code to F22
        - LP: #689393
    
      [ Tim Gardner ]
    
      * [Config] CONFIG_BOOT_PRINTK_DELAY=y
        - LP: #733191
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/bo: add some fallback placements for VRAM only
        objects."
        - LP: #652934
      * eeepc-wmi: add additional hotkeys
        - LP: #689393
      * xen: don't bother to stop other cpus on shutdown/reboot
        - LP: #727814
      * Yama: use thread group leader when creating match
        - LP: #729839
      * mmc: sdhci-pci: add ricoh e822 pci id with device specific quirks
        - LP: #730820
    
    linux (2.6.35-28.49) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #726796
    
      [ Colin Ian King ]
    
      * SAUCE: Dell All-In-One: Remove need for Dell module alias
    
      [ Manoj Iyer ]
    
      * SAUCE: add ricoh 0xe823 pci id.
        - LP: #717435
    
      [ Upstream Kernel Changes ]
    
      * virtio_net: Add schedule check to napi_enable call
        - LP: #579276
      * mmc: make sdhci work with ricoh mmc controller
        - LP: #717435
      * NFS: fix the return value of nfs_file_fsync()
        - LP: #585657
      * rt2x00: Pad beacon to multiple of 32 bits.
        - LP: #659143
      * rt2x00: Fix firmware loading regression on x86_64.
        - LP: #659143
      * rt2x00: Check for errors from skb_pad() calls
        - LP: #659143
      * block: check for proper length of iov entries earlier in
        blk_rq_map_user_iov(), CVE-2010-4163
        - LP: #721504
        - CVE-2010-4163
      * tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
        - LP: #720189
        - CVE-2010-4077
        - CVE-2010-4076
      * rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
        - LP: #721455
        - CVE-2010-4175
    
    linux (2.6.35-27.48) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Release Tracking Bug
        - LP: #723335
    
      [ Upstream Kernel Changes ]
    
      * thinkpad-acpi: avoid keymap pitfall
        - LP: #722747
    
    linux (2.6.35-27.47) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #716532
    
      [ Upstream Kernel Changes ]
    
      * Revert "USB: gadget: Allow function access to device ID data during
        bind()"
        - LP: #714732
      * net: fix rds_iovec page count overflow, CVE-2010-3865
        - LP: #709153
        - CVE-2010-3865
      * Input: fix typo in keycode validation supporting large scancodes
        - LP: #658198
      * net: ax25: fix information leak to userland, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: ax25: fix information leak to userland harder, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: packet: fix information leak to userland, CVE-2010-3876
        - LP: #710714
        - CVE-2010-3876
      * net: tipc: fix information leak to userland, CVE-2010-3877
        - LP: #711291
        - CVE-2010-3877
      * posix-cpu-timers: workaround to suppress the problems with mt exec,
        CVE-2010-4248
        - LP: #712609
        - CVE-2010-4248
      * sys_semctl: fix kernel stack leakage, CVE-2010-4083
        - LP: #712749
        - CVE-2010-4083
      * thinkpad-acpi: lock down size of hotkey keymap
        - LP: #712174
      * thinkpad-acpi: add support for model-specific keymaps
        - LP: #712174
      * thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
        - LP: #712174
      * x86, hotplug: Use mwait to offline a processor, fix the legacy case
        - LP: #714732
      * fuse: verify ioctl retries
        - LP: #714732
      * fuse: fix ioctl when server is 32bit
        - LP: #714732
      * ALSA: hda: Use position_fix=1 for Acer Aspire 5538 to enable capture on
        internal mic
        - LP: #685161, #714732
      * ALSA: hda: Use model=lg quirk for LG P1 Express to enable playback and
        capture
        - LP: #595482, #714732
      * drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP
        - LP: #714732
      * drm/kms: remove spaces from connector names (v2)
        - LP: #714732
      * drm/radeon/kms: fix vram base calculation on rs780/rs880
        - LP: #714732
      * nohz: Fix printk_needs_cpu() return value on offline cpus
        - LP: #714732
      * nohz: Fix get_next_timer_interrupt() vs cpu hotplug
        - LP: #714732
      * nfsd: Fix possible BUG_ON firing in set_change_info
        - LP: #714732
      * NFS: Fix fcntl F_GETLK not reporting some conflicts
        - LP: #714732
      * sunrpc: prevent use-after-free on clearing XPT_BUSY
        - LP: #714732
      * hwmon: (adm1026) Allow 1 as a valid divider value
        - LP: #714732
      * hwmon: (adm1026) Fix setting fan_div
        - LP: #714732
      * EDAC: Fix workqueue-related crashes
        - LP: #714732
      * amd64_edac: Fix interleaving check
        - LP: #714732
      * ASoC: Fix swap of left and right channels for WM8993/4 speaker boost
        gain
        - LP: #714732
      * ASoC: Fix off by one error in WM8994 EQ register bank size
        - LP: #714732
      * ASoC: WM8580: Fix R8 initial value
        - LP: #714732
      * ASoC: fix deemphasis control in wm8904/55/60 codecs
        - LP: #714732
      * bootmem: Add alloc_bootmem_align()
        - LP: #714732
      * x86, xsave: Use alloc_bootmem_align() instead of alloc_bootmem()
        - LP: #714732
      * IB/uverbs: Handle large number of entries in poll CQ
        - LP: #714732
      * PM / Hibernate: Fix PM_POST_* notification with user-space suspend
        - LP: #714732
      * ARM: 6535/1: V6 MPCore v6_dma_inv_range and v6_dma_flush_range RWFO fix
        - LP: #714732
      * qla2xxx: Correct issue where NPIV-config data was not being allocated
        for 82xx parts.
        - LP: #714732
      * qla2xxx: Populate Command Type 6 LUN field properly.
        - LP: #714732
      * llc: fix a device refcount imbalance
        - LP: #714732
      * ath9k: Disable SWBA interrupt on remove_interface
        - LP: #714732
      * ath9k: fix bug in tx power
        - LP: #714732
      * mac80211: Fix BUG in pskb_expand_head when transmitting shared skbs
        - LP: #714732
      * SPARC/LEON: removed constant timer initialization as if HZ=100, now it
        reflects the value of HZ
        - LP: #714732
      * sparc64: Delete prom_puts() unused.
        - LP: #714732
      * sparc: Remove prom_pathtoinode()
        - LP: #714732
      * sparc: Kill prom devops_{32,64}.c
        - LP: #714732
      * sparc64: Unexport prom_service_exists().
        - LP: #714732
      * sparc64: Delete prom_setcallback().
        - LP: #714732
      * sparc: Do not export prom_nb{get,put}char().
        - LP: #714732
      * sparc: Pass buffer pointer all the way down to prom_{get,put}char().
        - LP: #714732
      * sparc: Delete prom_*getchar().
        - LP: #714732
      * sparc: Write to prom console using indirect buffer.
        - LP: #714732
      * tcp: Don't change unlocked socket state in tcp_v4_err().
        - LP: #714732
      * tcp: Make TCP_MAXSEG minimum more correct.
        - LP: #714732
      * tcp: Bug fix in initialization of receive window.
        - LP: #714732
      * tcp: avoid a possible divide by zero
        - LP: #714732
      * tcp: protect sysctl_tcp_cookie_size reads
        - LP: #714732
      * 8139cp: fix checksum broken
        - LP: #714732
      * r8169: fix sleeping while holding spinlock.
        - LP: #714732
      * scm: Capture the full credentials of the scm sender.
        - LP: #714732
      * af_unix: Allow credentials to work across user and pid namespaces.
        - LP: #714732
      * user_ns: Introduce user_nsmap_uid and user_ns_map_gid.
        - LP: #714732
      * sock: Introduce cred_to_ucred
        - LP: #714732
      * net: Export cred_to_ucred to modules.
        - LP: #714732
      * af_unix: limit recursion level
        - LP: #714732
      * driver/net/benet: fix be_cmd_multicast_set() memcpy bug
        - LP: #714732
      * bonding: Fix slave selection bug.
        - LP: #714732
      * bridge: fix IPv6 queries for bridge multicast snooping
        - LP: #714732
      * cls_cgroup: Fix crash on module unload
        - LP: #714732
      * filter: fix sk_filter rcu handling
        - LP: #714732
      * econet: Do the correct cleanup after an unprivileged SIOCSIFADDR.
        - LP: #714732
      * econet: Fix crash in aun_incoming().
        - LP: #714732
      * ifb: goto resched directly if error happens and dp->tq isn't empty
        - LP: #714732
      * l2tp: Fix modalias of l2tp_ip
        - LP: #714732
      * x25: decrement netdev reference counts on unload
        - LP: #714732
      * tehuti: Firmware filename is tehuti/bdx.bin
        - LP: #714732
      * net/dst: dst_dev_event() called after other notifiers
        - LP: #714732
      * net: Fix header size check for GSO case in recvmsg (af_packet)
        - LP: #714732
      * ACPICA: Fix Scope() op in module level code
        - LP: #714732
      * nouveau: Acknowledge HPD irq in handler, not bottom half
        - LP: #714732
      * printk: Fix wake_up_klogd() vs cpu hotplug
        - LP: #714732
      * sched: Cure more NO_HZ load average woes
        - LP: #714732
      * ACPI: EC: Add another dmi match entry for MSI hardware
        - LP: #714732
      * PM / Runtime: Fix pm_runtime_suspended()
        - LP: #714732
      * inotify: stop kernel memory leak on file creation failure
        - LP: #714732
      * orinoco: fix TKIP countermeasure behaviour
        - LP: #714732
      * orinoco: clear countermeasure setting on commit
        - LP: #714732
      * x86, amd: Fix panic on AMD CPU family 0x15
        - LP: #714732
      * md: fix bug with re-adding of partially recovered device.
        - LP: #714732
      * md: protect against NULL reference when waiting to start a raid10.
        - LP: #714732
      * tracing: Fix panic when lseek() called on "trace" opened for writing
        - LP: #714732
      * x86, gcc-4.6: Use gcc -m options when building vdso
        - LP: #714732
      * x86: Enable the intr-remap fault handling after local APIC setup
        - LP: #714732
      * x86, vt-d: Handle previous faults after enabling fault handling
        - LP: #714732
      * x86, vt-d: Fix the vt-d fault handling irq migration in the x2apic mode
        - LP: #714732
      * x86, vt-d: Quirk for masking vtd spec errors to platform error handling
        logic
        - LP: #714732
      * rt2x00: Fix max TX power settings
        - LP: #714732
      * install_special_mapping skips security_file_mmap check.
        - LP: #714732
      * USB: misc: uss720.c: add another vendor/product ID
        - LP: #714732
      * USB: ftdi_sio: Add D.O.Tec PID
        - LP: #714732
      * USB: usb-storage: unusual_devs entry for the Samsung YP-CP3
        - LP: #714732
      * p54usb: add 5 more USBIDs
        - LP: #714732
      * p54usb: New USB ID for Gemtek WUBI-100GW
        - LP: #714732
      * n_gsm: Fix message length handling when building header
        - LP: #714732
      * n_gsm: gsm_data_alloc buffer allocation could fail and it is not being
        checked
        - LP: #714732
      * xhci: Fix issue with port array setup and buggy hosts.
        - LP: #714732
      * gpio: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * cs5535-gpio: don't apply errata #36 to edge detect GPIOs
        - LP: #714732
      * cs5535-gpio: handle GPIO regs where higher (clear) bits are set
        - LP: #714732
      * mmc: at91_mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: atmel-mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: Fix re-probing with PM_POST_RESTORE notification
        - LP: #714732
      * fix freeing user_struct in user cache
        - LP: #714732
      * rtc: rs5c372: fix buffer size
        - LP: #714732
      * RAMOOPS: Don't overflow over non-allocated regions
        - LP: #714732
      * watchdog: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * arch/x86/oprofile/op_model_amd.c: Perform initialisation on a single
        CPU
        - LP: #714732
      * mfd: Support additional parent IDs for wm831x
        - LP: #714732
      * mfd: Supply IRQ base for WM832x devices
        - LP: #714732
      * drm/radeon/kms/evergreen: reset the grbm blocks at resume and init
        - LP: #714732
      * drm/radeon/kms: fix evergreen asic reset
        - LP: #714732
      * drm/radeon/kms: reorder display resume to avoid problems
        - LP: #714732
      * drm/i915/dp: Fix I2C/EDID handling with active DisplayPort to DVI
        converter
        - LP: #714732
      * sound: Prevent buffer overflow in OSS load_mixer_volumes
        - LP: #714732
      * mv_xor: fix race in tasklet function
        - LP: #714732
      * ima: fix add LSM rule bug
        - LP: #714732
      * libata-sff: fix HSM_ST_ERR handling in __ata_sff_port_intr()
        - LP: #714732
      * mac80211: fix mesh forwarding
        - LP: #714732
      * ALSA: hda: Use LPIB quirk for Dell Inspiron m101z/1120
        - LP: #714732
      * Sched: fix skip_clock_update optimization
        - LP: #714732
      * block: Deprecate QUEUE_FLAG_CLUSTER and use queue_limits instead
        - LP: #714732
      * x86/microcode: Fix double vfree() and remove redundant pointer checks
        before vfree()
        - LP: #714732
      * gspca - sonixj: Set the flag for some devices
        - LP: #714732
      * gspca - sonixj: Add a flag in the driver_info table
        - LP: #714732
      * mac80211: fix hard lockup in sta_addba_resp_timer_expired
        - LP: #714732
      * mac80211: fix mesh forwarding when ratelimited too
        - LP: #714732
      * mac80211: fix initialization of skb->cb in ieee80211_subif_start_xmit
        - LP: #714732
      * Release 2.6.35.11
        - LP: #714732
      * inet_diag: Make sure we actually run the same bytecode we audited,
        CVE-2010-3880
        - LP: #711865
        - CVE-2010-3880
    
    linux (2.6.35-26.46) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Tracking Bug
        - LP: #709352
    
      [ Andy Whitcroft ]
    
      * SAUCE: ensure root is ready before running usermodehelpers in it
    
      [ Colin Ian King ]
    
      * SAUCE: Add WMI hotkeys support for another Dell All-In-One series
        - LP: #701530
      * SAUCE: Dell WMI: Use sparse keymaps and tidy up code.
        - LP: #701530
    
      [ Tim Gardner ]
    
      * [Config] Set CONFIG_NR_CPUS=256 for amd64 server
        - LP: #706058
    
      [ Upstream Kernel Changes ]
    
      * Input: i8042 - introduce 'notimeout' blacklist for Dell Vostro V13
        - LP: #380126
      * ACPI / Sleep: Consolidate suspend and hibernation routines
        - LP: #703228
      * Quirk to fix suspend/resume on Lenovo Edge 11,13,14,15
        - LP: #702434
      * dell-laptop: Add another Dell laptop family to the DMI whitelist
        - LP: #693078
      * KVM: Fix fs/gs reload oops with invalid ldt, CVE-2010-3698
        - LP: #707000
        - CVE-2010-3698
      * V4L/DVB: ivtvfb: prevent reading uninitialized stack memory,
        CVE-2010-4079
        - LP: #707649
        - CVE-2010-4079
      * tpm: Autodetect itpm devices
        - LP: #705845
      * tpm: fix panic caused by "tpm: Autodetect itpm devices"
        - LP: #705845
    
    linux (2.6.35-25.44) maverick-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
        - LP: #703553
     -- Herton Ronaldo Krzesinski <email address hidden>   Mon, 11 Jul 2011 15:17:32 -0300
  • linux-lts-backport-maverick (2.6.35-30.55~lucid1) lucid-proposed; urgency=low
    
      [Andy Whitcroft]
    
      * Release Tracking Bug
        - LP: #806579
    
      [ Jeremy Kerr ]
    
      * SAUCE: cx23885: Fix argument to videobuf_dma_unmap
        - LP: #800527
    
      [ Manoj Iyer ]
    
      * SAUCE: mmc: Enable MMC card reader for RICOH [1180:e823]
        - LP: #790754
    
      [ Upstream Kernel Changes ]
    
      * agp: fix OOM and buffer overflow
        - LP: #791918
        - CVE-2011-1746
      * tty: icount changeover for other main devices, CVE-2010-4076,
        CVE-2010-4077
        - LP: #720189
        - CVE-2010-4077
      * fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
        oops
        - LP: #795418
        - CVE-2011-1577
      * Fix corrupted OSF partition table parsing
        - LP: #796606
        - CVE-2011-1163
      * can: Add missing socket check in can/bcm release.
        - LP: #796502
        - CVE-2011-1598
      * nfs4: Ensure that ACL pages sent over NFS were not allocated from the
        slab (v3) CVE-2011-1090
        - LP: #800775
        - CVE-2011-1090
     -- Steve Conklin <email address hidden>   Fri, 24 Jun 2011 13:15:28 -0500
  • linux-lts-backport-maverick (2.6.35-30.54~lucid1) lucid-proposed; urgency=low
    
      [ Herton Ronaldo Krzesinski ]
    
      * Release Tracking Bug
        - LP: #792542
    
      [ Upstream Kernel Changes ]
    
      * Revert "xhci: Fix full speed bInterval encoding."
      * Revert "USB: xhci - also free streams when resetting devices"
      * Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
      * Revert "USB: xhci - fix unsafe macro definitions"
    
    linux (2.6.35-30.53) maverick-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * xhci: Fix full speed bInterval encoding.
        - LP: #792959
    
    linux (2.6.35-30.52) maverick-proposed; urgency=low
    
      [ Herton R. Krzesinski ]
    
      * Release Tracking Bug
        - LP: #790653
    
      [ Stefan Bader ]
    
      * Include nls_iso8859-1 for virtual images
        - LP: #732046
    
      [ Thomas Schlichter ]
    
      * SAUCE: vesafb: mtrr module parameter is uint, not bool
        - LP: #778043
    
      [ Tim Gardner ]
    
      * [Config] Add cachefiles.ko to virtual flavour
        - LP: #770430
    
      [ Upstream Kernel Changes ]
    
      * Revert "intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot
        hang"
        - LP: #772560
      * Revert "TPM: Long default timeout fix"
        - LP: #772560
      * Revert "tpm_tis: Use timeouts returned from TPM"
        - LP: #772560
      * Revert "xen: set max_pfn_mapped to the last pfn mapped"
      * CAN: Use inode instead of kernel address for /proc file, CVE-2010-4565
        - LP: #765007
        - CVE-2010-4565
      * xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1,
        CVE-2011-0711
        - LP: #767740
        - CVE-2011-0711
      * Treat writes as new when holes span across page boundaries,
        CVE-2011-0463
        - LP: #770483
        - CVE-2011-0463
      * fs/partitions/ldm.c: fix oops caused by corrupted partition table,
        CVE-2011-1017
        - LP: #771382
        - CVE-2011-1017
      * qla2xxx: Make the FC port capability mutual exclusive.
        - LP: #772560
      * staging: usbip: bugfixes related to kthread conversion
        - LP: #772560
      * staging: usbip: bugfix add number of packets for isochronous frames
        - LP: #772560
      * staging: usbip: bugfix for isochronous packets and optimization
        - LP: #772560
      * staging: hv: Fix GARP not sent after Quick Migration
        - LP: #772560
      * staging: hv: use sync_bitops when interacting with the hypervisor
        - LP: #772560
      * irda: validate peer name and attribute lengths
        - LP: #772560
      * irda: prevent heap corruption on invalid nickname
        - LP: #772560
      * nilfs2: fix data loss in mmap page write for hole blocks
        - LP: #772560
      * ASoC: Explicitly say registerless widgets have no register
        - LP: #772560
      * ALSA: ens1371: fix Creative Ectiva support
        - LP: #772560
      * ROSE: prevent heap corruption with bad facilities
        - LP: #772560
      * Btrfs: Fix uninitialized root flags for subvolumes
        - LP: #772560
      * x86, mtrr, pat: Fix one cpu getting out of sync during resume
        - LP: #772560
      * UBIFS: do not read flash unnecessarily
        - LP: #772560
      * UBIFS: fix oops on error path in read_pnode
        - LP: #772560
      * UBIFS: fix debugging failure in dbg_check_space_info
        - LP: #772560
      * quota: Don't write quota info in dquot_commit()
        - LP: #772560
      * mm: avoid wrapping vm_pgoff in mremap()
        - LP: #772560
      * p54usb: IDs for two new devices
        - LP: #772560
      * b43: allocate receive buffers big enough for max frame len + offset
        - LP: #772560
      * Bluetooth: sco: fix information leak to userspace
        - LP: #772560
      * bridge: netfilter: fix information leak
        - LP: #772560
      * Bluetooth: bnep: fix buffer overflow
        - LP: #772560
      * Bluetooth: add support for Apple MacBook Pro 8,2
        - LP: #772560
      * char/tpm: Fix unitialized usage of data buffer
        - LP: #772560
      * netfilter: ip_tables: fix infoleak to userspace
        - LP: #772560
      * netfilter: arp_tables: fix infoleak to userspace
        - LP: #772560
      * netfilter: ipt_CLUSTERIP: fix buffer overflow
        - LP: #772560
      * ipv6: netfilter: ip6_tables: fix infoleak to userspace
        - LP: #772560
      * mfd: ab3100: world-writable debugfs *_priv files
        - LP: #772560
      * drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
        - LP: #772560
      * drivers/misc/ep93xx_pwm.c: world-writable sysfs files
        - LP: #772560
      * econet: 4 byte infoleak to the network
        - LP: #772560
      * sound/oss: remove offset from load_patch callbacks
        - LP: #772560
      * sound: oss: midi_synth: check get_user() return value
        - LP: #772560
      * gro: Reset dev pointer on reuse
        - LP: #772560
      * gro: reset skb_iif on reuse
        - LP: #772560
      * x86, microcode, AMD: Extend ucode size verification
        - LP: #772560
      * Squashfs: handle corruption of directory structure
        - LP: #772560
      * atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
        - LP: #772560
      * ext4: fix credits computing for indirect mapped files
        - LP: #772560
      * nfsd: fix auth_domain reference leak on nlm operations
        - LP: #772560
      * inet_diag: Make sure we actually run the same bytecode we audited.
        - LP: #772560
      * xfs: zero proper structure size for geometry calls
        - LP: #772560
      * cifs: always do is_path_accessible check in cifs_mount
        - LP: #772560
      * video: sn9c102: world-wirtable sysfs files
        - LP: #772560
      * UBIFS: restrict world-writable debugfs files
        - LP: #772560
      * NET: cdc-phonet, handle empty phonet header
        - LP: #772560
      * x86: Fix a bogus unwind annotation in lib/semaphore_32.S
        - LP: #772560
      * tioca: Fix assignment from incompatible pointer warnings
        - LP: #772560
      * mca.c: Fix cast from integer to pointer warning
        - LP: #772560
      * ramfs: fix memleak on no-mmu arch
        - LP: #772560
      * MAINTAINERS: update STABLE BRANCH info
        - LP: #772560
      * UBIFS: fix oops when R/O file-system is fsync'ed
        - LP: #772560
      * x86, cpu: AMD errata checking framework
        - LP: #772560
      * x86, cpu: Clean up AMD erratum 400 workaround
        - LP: #772560
      * x86, AMD: Set ARAT feature on AMD processors
        - LP: #772560
      * x86, amd: Disable GartTlbWlkErr when BIOS forgets it
        - LP: #772560
      * USB: ftdi_sio: Added IDs for CTI USB Serial Devices
        - LP: #772560
      * USB: ftdi_sio: add PID for OCT DK201 docking station
        - LP: #772560
      * USB: ftdi_sio: add ids for Hameg HO720 and HO730
        - LP: #772560
      * USB: option: Add new ONDA vendor id and product id for ONDA MT825UP
        - LP: #772560
      * USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
        - LP: #772560
      * next_pidmap: fix overflow condition
        - LP: #772560
      * proc: do proper range check on readdir offset
        - LP: #772560
      * USB: EHCI: unlink unused QHs when the controller is stopped
        - LP: #772560
      * USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
        - LP: #772560
      * USB: xhci - fix unsafe macro definitions
        - LP: #772560
      * USB: xhci - fix math in xhci_get_endpoint_interval()
        - LP: #772560
      * x86, cpu: Fix regression in AMD errata checking code
        - LP: #772560
      * Input: synaptics - fix crash in synaptics_module_init()
        - LP: #772560
      * ath9k: fix a chip wakeup related crash in ath9k_start
        - LP: #772560
      * ath: add missing regdomain pair 0x5c mapping
        - LP: #772560
      * block, blk-sysfs: Fix an err return path in blk_register_queue()
        - LP: #772560
      * p54: Initialize extra_len in p54_tx_80211
        - LP: #772560
      * x86, gart: Make sure GART does not map physmem above 1TB
        - LP: #772560
      * intel-iommu: Unlink domain from iommu
        - LP: #772560
      * intel-iommu: Fix get_domain_for_dev() error path
        - LP: #772560
      * drm/radeon/kms: fix bad shift in atom iio table parser
        - LP: #772560
      * NFS: nfs_wcc_update_inode() should set nfsi->attr_gencount
        - LP: #772560
      * serial/imx: read cts state only after acking cts change irq
        - LP: #772560
      * ASoC: Fix output PGA enabling in wm_hubs CODECs
        - LP: #772560
      * kconfig: Avoid buffer underrun in choice input
        - LP: #772560
      * UBIFS: fix master node recovery
        - LP: #772560
      * Remove extra struct page member from the buffer info structure
        - LP: #772560
      * dasd: correct device table
        - LP: #772560
      * iwlagn: Support new 5000 microcode.
        - LP: #772560
      * uvcvideo: Fix descriptor parsing for video output devices
        - LP: #772560
      * ALSA: hda - VIA: Add missing support for VT1718S in A-A path
        - LP: #772560
      * ALSA: hda - VIA: Fix stereo mixer recording no sound issue
        - LP: #772560
      * iwlwifi: fix skb usage after free
        - LP: #772560
      * intel-iommu: Fix use after release during device attach
        - LP: #772560
      * USB: Fix unplug of device with active streams
        - LP: #772560
      * USB: xhci - also free streams when resetting devices
        - LP: #772560
      * 2.6.35.y: Revert "SH: Add missing consts to sys_execve() declaration"
        - LP: #772560
      * 2.6.35.13 longterm review
        - LP: #772560
      * release-2.6.35.13
        - LP: #772560
      * xen: events: do not unmask event channels on resume
        - LP: #681083
      * ALSA: sound/pci/asihpi: check adapter index in hpi_ioctl, CVE-2011-1169
        - LP: #785331
        - CVE-2011-1169
      * mpt2sas: prevent heap overflows and unchecked reads, CVE-2011-1494
        - LP: #787145
        - CVE-2011-1494
      * can: add missing socket check in can/raw release, CVE-2011-1748
        - LP: #788694
        - CVE-2011-1748
      * agp: fix arbitrary kernel memory writes, CVE-1011-2022
        - LP: #788684
        - CVE-1011-2022
    
    linux (2.6.35-29.51) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Release Tracking Bug
        - LP: #760928
    
      [ Brad Figg ]
    
      * [Config] Set CONFIG_NR_CPUS=256 for amd64 generic
        - LP: #737124
    
      [ Kees Cook ]
    
      * SAUCE: nx-emu: further clarify dmesg reporting
        - LP: #745181
    
      [ Loïc Minier ]
    
      * Include nls_cp437 module in virtual for fat
        - LP: #732046
    
      [ Manoj Iyer ]
    
      * SAUCE: thinkpad-acpi: module autoloading for newer Lenovo ThinkPads.
        - LP: #745217
      * SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
        - LP: #746652
    
      [ Mel Gorman ]
    
      * (pre-stable) mm: page allocator: adjust the per-cpu counter threshold
        when memory is low
        - LP: #719446
    
      [ Tim Gardner ]
    
      * [Config] updateconfigs after 2.6.35.12
        - LP: #747520
      * SAUCE: staging: hv: Fixed issue with scheduling while atomic in
        hv_vmbus
        - LP: #752064
      * SAUCE: Backport of mainline loss of network fix for Hyper-V
        - LP: #752064
    
      [ Upstream Kernel Changes ]
    
      * Revert "slab: Fix missing DEBUG_SLAB last user"
        - LP: #747520
      * PM / Hibernate: Improve comments in hibernate_preallocate_memory()
        - LP: #737208
      * PM / Hibernate: Make default image size depend on total RAM size
        - LP: #737208
      * irda: prevent integer underflow in IRLMP_ENUMDEVICES, CVE-2010-4529
        - LP: #737823
        - CVE-2010-4529
      * perf session: Invalidate last_match when removing threads from rb_tree
        - LP: #747520
      * Fix cred leak in AF_NETLINK
        - LP: #747520
      * staging: usbip: remove double giveback of URB
        - LP: #747520
      * USB: EHCI: ASPM quirk of ISOC on AMD SB800
        - LP: #747520
      * rt2x00: add device id for windy31 usb device
        - LP: #747520
      * ALSA: snd-usb-us122l: Fix missing NULL checks
        - LP: #747520
      * hwmon: (via686a) Initialize fan_div values
        - LP: #747520
      * USB: serial: handle Data Carrier Detect changes
        - LP: #747520
      * USB: CP210x Add two device IDs
        - LP: #747520
      * USB: CP210x Removed incorrect device ID
        - LP: #747520
      * USB: usb-storage: unusual_devs update for Cypress ATACB
        - LP: #747520
      * USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u
        external hard drive enclosure
        - LP: #747520
      * USB: usb-storage: unusual_devs entry for CamSport Evo
        - LP: #747520
      * USB: usb-storage: unusual_devs entry for Coby MP3 player
        - LP: #747520
      * USB: serial: Updated support for ICOM devices
        - LP: #747520
      * USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
        - LP: #747520
      * USB: EHCI: ASPM quirk of ISOC on AMD Hudson
        - LP: #747520
      * USB: EHCI: fix DMA deallocation bug
        - LP: #747520
      * USB: g_printer: fix bug in module parameter definitions
        - LP: #747520
      * USB: io_edgeport: fix the reported firmware major and minor
        - LP: #747520
      * USB: ti_usb: fix module removal
        - LP: #747520
      * USB: Storage: Add unusual_devs entry for VTech Kidizoom
        - LP: #747520
      * USB: ftdi_sio: add ST Micro Connect Lite uart support
        - LP: #747520
      * USB: cdc-acm: Adding second ACM channel support for Nokia N8
        - LP: #747520
      * USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research
        spectrograph
        - LP: #747520
      * USB: prevent buggy hubs from crashing the USB stack
        - LP: #747520
      * staging: comedi: add support for newer jr3 1-channel pci board
        - LP: #747520
      * staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
        - LP: #747520
      * Staging: hv: fix sysfs symlink on hv block device
        - LP: #747520
      * staging: hv: Enable sending GARP packet after live migration
        - LP: #747520
      * iwlagn: enable only rfkill interrupt when device is down
        - LP: #747520
      * ath9k: Fix bug in delimiter padding computation
        - LP: #747520
      * fix medium error problems with some arrays which can cause data
        corruption
        - LP: #747520
      * libsas: fix runaway error handler problem
        - LP: #747520
      * mpt2sas: Fix device removal handshake for zoned devices
        - LP: #747520
      * mpt2sas: Correct resizing calculation for max_queue_depth
        - LP: #747520
      * mpt2sas: Kernel Panic during Large Topology discovery
        - LP: #747520
      * radio-aimslab.c: Fix gcc 4.5+ bug
        - LP: #747520
      * em28xx: Fix audio input for Terratec Grabby
        - LP: #747520
      * ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
        - LP: #747520
      * ALSA: HDA: Fix dmesg output of HDMI supported bits
        - LP: #747520
      * ALSA: hda - Fix memory leaks in conexant jack arrays
        - LP: #747520
      * input: bcm5974: Add support for MacBookAir3
        - LP: #747520
      * ALSA: hrtimer: handle delayed timer interrupts
        - LP: #747520
      * ASoC: WM8990: msleep() takes milliseconds not jiffies
        - LP: #747520
      * ASoC: Blackfin AC97: fix build error after multi-component update
        - LP: #747520
      * NFS: Fix "kernel BUG at fs/aio.c:554!"
        - LP: #747520
      * rtc-cmos: fix suspend/resume
        - LP: #747520
      * iwlagn: Re-enable RF_KILL interrupt when down
        - LP: #747520
      * rapidio: fix hang on RapidIO doorbell queue full condition
        - LP: #747520
      * PCI: pci-stub: ignore zero-length id parameters
        - LP: #747520
      * virtio: remove virtio-pci root device
        - LP: #747520
      * ds2760_battery: Fix calculation of time_to_empty_now
        - LP: #747520
      * p54: fix sequence no. accounting off-by-one error
        - LP: #747520
      * i2c: Unregister dummy devices last on adapter removal
        - LP: #747520
      * serial: unbreak billionton CF card
        - LP: #747520
      * ptrace: use safer wake up on ptrace_detach()
        - LP: #747520
      * x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
        - LP: #747520
      * fix jiffy calculations in calibrate_delay_direct to handle overflow
        - LP: #747520
      * drivers: update to pl2303 usb-serial to support Motorola cables
        - LP: #747520
      * klist: Fix object alignment on 64-bit.
        - LP: #747520
      * powerpc: Fix some 6xx/7xxx CPU setup functions
        - LP: #747520
      * parisc : Remove broken line wrapping handling pdc_iodc_print()
        - LP: #747520
      * kernel/smp.c: fix smp_call_function_many() SMP race
        - LP: #747520
      * hostap_cs: fix sleeping function called from invalid context
        - LP: #747520
      * md: fix regression with re-adding devices to arrays with no metadata
        - LP: #747520
      * pata_mpc52xx: inherit from ata_bmdma_port_ops
        - LP: #747520
      * TPM: Long default timeout fix
        - LP: #747520
      * tpm_tis: Use timeouts returned from TPM
        - LP: #747520
      * SELinux: define permissions for DCB netlink messages
        - LP: #747520
      * SELinux: do not compute transition labels on mountpoint labeled
        filesystems
        - LP: #747520
      * ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
        - LP: #747520
      * dm: dont take i_mutex to change device size
        - LP: #747520
      * dm mpath: disable blk_abort_queue
        - LP: #747520
      * drm/radeon/kms: add quirk for Mac Radeon HD 2600 card
        - LP: #747520
      * drm/radeon/kms: make the mac rv630 quirk generic
        - LP: #747520
      * drm/radeon/kms: add pll debugging output
        - LP: #747520
      * drm/radeon: remove 0x4243 pci id
        - LP: #747520
      * drm/radeon/kms: fix s/r issues with bios scratch regs
        - LP: #747520
      * drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
        - LP: #747520
      * drm/i915: Add dependency on CONFIG_TMPFS
        - LP: #747520
      * x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask
        after switching mm
        - LP: #747520
      * usb: Realloc xHCI structures after a hub is verified.
        - LP: #747520
      * sched: Move sched_avg_update() to update_cpu_load()
        - LP: #747520
      * sched: Increment cache_nice_tries only on periodic lb
        - LP: #747520
      * sched: Try not to migrate higher priority RT tasks
        - LP: #747520
      * sched: Give CPU bound RT tasks preference
        - LP: #747520
      * sched: suppress RCU lockdep splat in task_fork_fair
        - LP: #747520
      * sched: Do not consider SCHED_IDLE tasks to be cache hot
        - LP: #747520
      * sched: Set group_imb only a task can be pulled from the busiest cpu
        - LP: #747520
      * sched: Force balancing on newidle balance if local group has capacity
        - LP: #747520
      * sched: Drop group_capacity to 1 only if local group has extra capacity
        - LP: #747520
      * sched: Fix softirq time accounting
        - LP: #747520
      * sched: Consolidate account_system_vtime extern declaration
        - LP: #747520
      * sched: Remove unused PF_ALIGNWARN flag
        - LP: #747520
      * sched: Add a PF flag for ksoftirqd identification
        - LP: #747520
      * sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
        - LP: #747520
      * x86: Add IRQ_TIME_ACCOUNTING
        - LP: #747520
      * sched: Do not account irq time to current task
        - LP: #747520
      * sched: Remove irq time from available CPU power
        - LP: #747520
      * sched: Call tick_check_idle before __irq_enter
        - LP: #747520
      * sched: Export account_system_vtime()
        - LP: #747520
      * sched, cgroup: Fixup broken cgroup movement
        - LP: #747520
      * sched: Use group weight, idle cpu metrics to fix imbalances during idle
        - LP: #747520
      * kernel/user.c: add lock release annotation on free_user()
        - LP: #747520
      * NFSD: memory corruption due to writing beyond the stat array
        - LP: #747520
      * mptfusion: mptctl_release is required in mptctl.c
        - LP: #747520
      * mptfusion: Fix Incorrect return value in mptscsih_dev_reset
        - LP: #747520
      * ocfs2_connection_find() returns pointer to bad structure
        - LP: #747520
      * x86/pvclock: Zero last_value on resume
        - LP: #747520
      * av7110: check for negative array offset
        - LP: #747520
      * bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
        - LP: #747520
      * CRED: Fix kernel panic upon security_file_alloc() failure.
        - LP: #747520
      * CRED: Fix BUG() upon security_cred_alloc_blank() failure
        - LP: #747520
      * CRED: Fix memory and refcount leaks upon security_prepare_creds()
        failure
        - LP: #747520
      * isdn: hisax: Replace the bogus access to irq stats
        - LP: #747520
      * scsi_dh_alua: add netapp to dev list
        - LP: #747520
      * scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
        - LP: #747520
      * nfsd: correctly handle return value from nfsd_map_name_to_*
        - LP: #747520
      * s390: remove task_show_regs
        - LP: #747520
      * PM / Hibernate: Return error code when alloc_image_page() fails
        - LP: #747520
      * fs/partitions: Validate map_count in Mac partition tables
        - LP: #747520
      * ALSA: HDA: Add position_fix quirk for an Asus device
        - LP: #718402, #747520
      * ALSA: caiaq - Fix possible string-buffer overflow
        - LP: #747520
      * radio-aimslab.c needs #include <linux/delay.h>
        - LP: #747520
      * ARM: Ensure predictable endian state on signal handler entry
        - LP: #747520
      * acer-wmi: Fix capitalisation of GUID
        - LP: #747520
      * eCryptfs: Copy up lower inode attrs in getattr
        - LP: #747520
      * platform: x86: acer-wmi: world-writable sysfs threeg file
        - LP: #747520
      * platform: x86: asus_acpi: world-writable procfs files
        - LP: #747520
      * platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial
        files
        - LP: #747520
      * genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
        - LP: #747520
      * usb: musb: omap2430: fix kernel panic on reboot
        - LP: #747520
      * USB: add quirks entry for Keytouch QWERTY Panel
        - LP: #747520
      * USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
        - LP: #747520
      * USB: Add quirk for Samsung Android phone modem
        - LP: #747520
      * p54pci: update receive dma buffers before and after processing
        - LP: #747520
      * sierra: add new ID for Airprime/Sierra USB IP modem
        - LP: #747520
      * staging: usbip: vhci: update reference count for usb_device
        - LP: #747520
      * staging: usbip: vhci: give back URBs from in-flight unlink requests
        - LP: #747520
      * staging: usbip: vhci: refuse to enqueue for dead connections
        - LP: #747520
      * staging: usbip: vhci: use urb->dev->portnum to find port
        - LP: #747520
      * epoll: prevent creating circular epoll structures
        - LP: #747520
      * ldm: corrupted partition table can cause kernel oops
        - LP: #747520
      * md: correctly handle probe of an 'mdp' device.
        - LP: #747520
      * x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
        - LP: #747520
      * xhci: Avoid BUG() in interrupt context
        - LP: #747520
      * xhci: Clarify some expressions in the TRB math
        - LP: #747520
      * xhci: Fix errors in the running total calculations in the TRB math
        - LP: #747520
      * xhci: Fix an error in count_sg_trbs_needed()
        - LP: #747520
      * x25: Do not reference freed memory.
        - LP: #747520
      * Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in
        a right number.
        - LP: #747520
      * drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
        - LP: #747520
      * mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
        - LP: #747520
      * x86: Use u32 instead of long to set reset vector back to 0
        - LP: #747520
      * fuse: fix hang of single threaded fuseblk filesystem
        - LP: #747520
      * clockevents: Prevent oneshot mode when broadcast device is periodic
        - LP: #747520
      * ext2: Fix link count corruption under heavy link+rename load
        - LP: #747520
      * p54usb: add Senao NUB-350 usbid
        - LP: #747520
      * dccp: fix oops on Reset after close
        - LP: #747520
      * e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup
        instead
        - LP: #747520
      * r8169: disable ASPM
        - LP: #747520
      * usb: iowarrior: don't trust report_size for buffer size
        - LP: #747520
      * arp_notify: unconditionally send gratuitous ARP for
        NETDEV_NOTIFY_PEERS.
        - LP: #747520
      * CIFS: Fix oplock break handling (try #2)
        - LP: #747520
      * cpuset: add a missing unlock in cpuset_write_resmask()
        - LP: #747520
      * keyboard: integer underflow bug
        - LP: #747520
      * RxRPC: Fix v1 keys
        - LP: #747520
      * ixgbe: fix for 82599 erratum on Header Splitting
        - LP: #747520
      * mm: fix possible cause of a page_mapped BUG
        - LP: #747520
      * powerpc/kexec: Fix orphaned offline CPUs across kexec
        - LP: #747520
      * netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
        - LP: #747520
      * nfsd: wrong index used in inner loop
        - LP: #747520
      * r8169: use RxFIFO overflow workaround for 8168c chipset.
        - LP: #747520
      * net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
        - LP: #747520
      * ip6ip6-autoload-ip6-tunnel
        - LP: #747520
      * hwmon/f71882fg: Set platform drvdata to NULL later
        - LP: #747520
      * mtd: add "platform:" prefix for platform modalias
        - LP: #747520
      * libata: no special completion processing for EH commands
        - LP: #747520
      * MIPS: MTX-1: Make au1000_eth probe all PHY addresses
        - LP: #747520
      * x86/mm: Handle mm_fault_error() in kernel space
        - LP: #747520
      * ftrace: Fix memory leak with function graph and cpu hotplug
        - LP: #747520
      * x86: Fix panic when handling "mem={invalid}" param
        - LP: #553464, #747520
      * x86: Emit "mem=nopentium ignored" warning when not supported
        - LP: #553464, #747520
      * ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
        - LP: #747520
      * ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
        - LP: #747520
      * ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
        - LP: #747520
      * RDMA/cma: Fix crash in request handlers
        - LP: #747520
      * IB/cm: Bump reference count on cm_id before invoking callback
        - LP: #747520
      * x86, quirk: Fix SB600 revision check
        - LP: #747520
      * ath9k_hw: Fix incorrect macversion and macrev checks
        - LP: #747520
      * USB: serial/kobil_sct, fix potential tty NULL dereference
        - LP: #747520
      * USB: serial: ch341: add new id
        - LP: #747520
      * xhci: Fix cycle bit calculation during stall handling.
        - LP: #747520
      * ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
        - LP: #747520
      * PCI: add more checking to ICH region quirks
        - LP: #747520
      * PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
        - LP: #747520
      * PCI: sysfs: Fix failure path for addition of "vpd" attribute
        - LP: #747520
      * ALSA: ctxfi - Fix incorrect SPDIF status bit mask
        - LP: #747520
      * ALSA: ctxfi - Fix SPDIF status retrieval
        - LP: #747520
      * ALSA: ctxfi - Clear input settings before initialization
        - LP: #747520
      * SUNRPC: Ensure we always run the tk_callback before tk_action
        - LP: #747520
      * perf, powerpc: Handle events that raise an exception without
        overflowing
        - LP: #747520
      * ext3: Always set dx_node's fake_dirent explicitly.
        - LP: #747520
      * call_function_many: fix list delete vs add race
        - LP: #747520
      * call_function_many: add missing ordering
        - LP: #747520
      * x86: Flush TLB if PGD entry is changed in i386 PAE mode
        - LP: #747520
      * smp_call_function_many: handle concurrent clearing of mask
        - LP: #747520
      * fix per-cpu flag problem in the cpu affinity checkers
        - LP: #747520
      * i2c: Fix typo in instantiating-devices document
        - LP: #747520
      * mmc: sdio: remember new card RCA when redetecting card
        - LP: #747520
      * x86, binutils, xen: Fix another wrong size directive
        - LP: #747520
      * hwmon: (sht15) Fix integer overflow in humidity calculation
        - LP: #747520
      * aio: wake all waiters when destroying ctx
        - LP: #747520
      * shmem: let shared anonymous be nonlinear again
        - LP: #747520
      * PCI hotplug: acpiphp: set current_state to D0 in register_slot
        - LP: #747520
      * xen: set max_pfn_mapped to the last pfn mapped
        - LP: #747520
      * Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal
        code
        - LP: #747520
      * ext3: skip orphan cleanup on rocompat fs
        - LP: #747520
      * procfs: fix /proc/<pid>/maps heap check
        - LP: #747520
      * proc: protect mm start_code/end_code in /proc/pid/stat
        - LP: #747520
      * fbcon: Bugfix soft cursor detection in Tile Blitting
        - LP: #747520
      * nfsd41: modify the members value of nfsd4_op_flags
        - LP: #747520
      * uvcvideo: Fix uvc_fixup_video_ctrl() format search
        - LP: #747520
      * ehci-hcd: Bug fix: don't set a QH's Halt bit
        - LP: #747520
      * USB: uss720 fixup refcount position
        - LP: #747520
      * USB: cdc-acm: fix memory corruption / panic
        - LP: #747520
      * USB: cdc-acm: fix potential null-pointer dereference
        - LP: #747520
      * USB: cdc-acm: fix potential null-pointer dereference on disconnect
        - LP: #747520
      * Input: xen-kbdfront - advertise either absolute or relative coordinates
        - LP: #747520
      * SUNRPC: Never reuse the socket port after an xs_close()
        - LP: #747520
      * fs: call security_d_instantiate in d_obtain_alias V2
        - LP: #747520
      * dcdbas: force SMI to happen when expected
        - LP: #747520
      * ALSA: hda - Fix SPDIF out regression on ALC889
        - LP: #747520
      * ALSA: Fix yet another race in disconnection
        - LP: #747520
      * perf: Better fit max unprivileged mlock pages for tools needs
        - LP: #747520
      * myri10ge: fix rmmod crash
        - LP: #747520
      * cciss: fix lost command issue
        - LP: #747520
      * sound/oss/opl3: validate voice and channel indexes
        - LP: #747520
      * mac80211: initialize sta->last_rx in sta_info_alloc
        - LP: #747520
      * ses: show devices for enclosures with no page 7
        - LP: #747520
      * ses: Avoid kernel panic when lun 0 is not mapped
        - LP: #747520
      * eCryptfs: Unlock page in write_begin error path
        - LP: #747520
      * eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
        - LP: #747520
      * classmate-laptop: depends on RFKILL or RFKILL=n
        - LP: #747520
      * netfilter: arpt_mangle: fix return values of checkentry
        - LP: #747520
      * Patch cab9e9848b9a8283b0504a2d7c435a9f5ba026de to the 2.6.35.y stable
        tree
        - LP: #747520
      * revert misc: uss720.c: add another vendor/product ID
        - LP: #747520
      * cfg80211: fix can_beacon_sec_chan, reenable HT40
        - LP: #747520
      * USB: isp1760: Implement solution for erratum 2
        - LP: #747520
      * xhci: Update internal dequeue pointers after stalls.
        - LP: #747520
      * perf: Fix tear-down of inherited group events
        - LP: #747520
      * net: Fix ip link add netns oops
        - LP: #747520
      * hwmon: (w83627ehf) Driver cleanup
        - LP: #747520
      * md: Fix - again - partition detection when array becomes active
        - LP: #747520
      * iwl3945: remove plcp check
        - LP: #747520
      * KVM: enlarge number of possible CPUID leaves
        - LP: #747520
      * KVM: i8259: initialize isr_ack
        - LP: #747520
      * KVM: VMX: Fix host userspace gsbase corruption
        - LP: #747520
      * Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
        - LP: #747520
      * Release 2.6.35.12
        - LP: #747520
      * drm/radeon/kms: check AA resolve registers on r300, CVE-2011-1016
        - LP: #745686
        - CVE-2011-1016
      * drm/radeon: fix regression with AA resolve checking, CVE-2011-1016
        - LP: #745686
        - CVE-2011-1016
      * staging: hv: fix netvsc sleeping while atomic
        - LP: #752064
      * staging: hv: Fix the WARN_ON condition in free_net_device()
        - LP: #752064
      * Yama: fix default relationship to check thread group
        - LP: #737676
    
    linux (2.6.35-28.50) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #734399
    
      [ Corentin Chary ]
    
      * SAUCE: (drop after 2.6.38) eeepc-wmi: reorder keymap
        - LP: #689393
      * SAUCE: (drop after 2.6.38) eeepc-wmi: add wlan key found on 1015P
        - LP: #689393
    
      [ Keng-Yu Lin ]
    
      * SAUCE: eeepc-wmi: set the touchpad toggle key code to F22
        - LP: #689393
    
      [ Tim Gardner ]
    
      * [Config] CONFIG_BOOT_PRINTK_DELAY=y
        - LP: #733191
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/bo: add some fallback placements for VRAM only
        objects."
        - LP: #652934
      * eeepc-wmi: add additional hotkeys
        - LP: #689393
      * xen: don't bother to stop other cpus on shutdown/reboot
        - LP: #727814
      * Yama: use thread group leader when creating match
        - LP: #729839
      * mmc: sdhci-pci: add ricoh e822 pci id with device specific quirks
        - LP: #730820
    
    linux (2.6.35-28.49) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #726796
    
      [ Colin Ian King ]
    
      * SAUCE: Dell All-In-One: Remove need for Dell module alias
    
      [ Manoj Iyer ]
    
      * SAUCE: add ricoh 0xe823 pci id.
        - LP: #717435
    
      [ Upstream Kernel Changes ]
    
      * virtio_net: Add schedule check to napi_enable call
        - LP: #579276
      * mmc: make sdhci work with ricoh mmc controller
        - LP: #717435
      * NFS: fix the return value of nfs_file_fsync()
        - LP: #585657
      * rt2x00: Pad beacon to multiple of 32 bits.
        - LP: #659143
      * rt2x00: Fix firmware loading regression on x86_64.
        - LP: #659143
      * rt2x00: Check for errors from skb_pad() calls
        - LP: #659143
      * block: check for proper length of iov entries earlier in
        blk_rq_map_user_iov(), CVE-2010-4163
        - LP: #721504
        - CVE-2010-4163
      * tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
        - LP: #720189
        - CVE-2010-4077
        - CVE-2010-4076
      * rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
        - LP: #721455
        - CVE-2010-4175
    
    linux (2.6.35-27.48) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Release Tracking Bug
        - LP: #723335
    
      [ Upstream Kernel Changes ]
    
      * thinkpad-acpi: avoid keymap pitfall
        - LP: #722747
    
    linux (2.6.35-27.47) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #716532
    
      [ Upstream Kernel Changes ]
    
      * Revert "USB: gadget: Allow function access to device ID data during
        bind()"
        - LP: #714732
      * net: fix rds_iovec page count overflow, CVE-2010-3865
        - LP: #709153
        - CVE-2010-3865
      * Input: fix typo in keycode validation supporting large scancodes
        - LP: #658198
      * net: ax25: fix information leak to userland, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: ax25: fix information leak to userland harder, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: packet: fix information leak to userland, CVE-2010-3876
        - LP: #710714
        - CVE-2010-3876
      * net: tipc: fix information leak to userland, CVE-2010-3877
        - LP: #711291
        - CVE-2010-3877
      * posix-cpu-timers: workaround to suppress the problems with mt exec,
        CVE-2010-4248
        - LP: #712609
        - CVE-2010-4248
      * sys_semctl: fix kernel stack leakage, CVE-2010-4083
        - LP: #712749
        - CVE-2010-4083
      * thinkpad-acpi: lock down size of hotkey keymap
        - LP: #712174
      * thinkpad-acpi: add support for model-specific keymaps
        - LP: #712174
      * thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
        - LP: #712174
      * x86, hotplug: Use mwait to offline a processor, fix the legacy case
        - LP: #714732
      * fuse: verify ioctl retries
        - LP: #714732
      * fuse: fix ioctl when server is 32bit
        - LP: #714732
      * ALSA: hda: Use position_fix=1 for Acer Aspire 5538 to enable capture on
        internal mic
        - LP: #685161, #714732
      * ALSA: hda: Use model=lg quirk for LG P1 Express to enable playback and
        capture
        - LP: #595482, #714732
      * drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP
        - LP: #714732
      * drm/kms: remove spaces from connector names (v2)
        - LP: #714732
      * drm/radeon/kms: fix vram base calculation on rs780/rs880
        - LP: #714732
      * nohz: Fix printk_needs_cpu() return value on offline cpus
        - LP: #714732
      * nohz: Fix get_next_timer_interrupt() vs cpu hotplug
        - LP: #714732
      * nfsd: Fix possible BUG_ON firing in set_change_info
        - LP: #714732
      * NFS: Fix fcntl F_GETLK not reporting some conflicts
        - LP: #714732
      * sunrpc: prevent use-after-free on clearing XPT_BUSY
        - LP: #714732
      * hwmon: (adm1026) Allow 1 as a valid divider value
        - LP: #714732
      * hwmon: (adm1026) Fix setting fan_div
        - LP: #714732
      * EDAC: Fix workqueue-related crashes
        - LP: #714732
      * amd64_edac: Fix interleaving check
        - LP: #714732
      * ASoC: Fix swap of left and right channels for WM8993/4 speaker boost
        gain
        - LP: #714732
      * ASoC: Fix off by one error in WM8994 EQ register bank size
        - LP: #714732
      * ASoC: WM8580: Fix R8 initial value
        - LP: #714732
      * ASoC: fix deemphasis control in wm8904/55/60 codecs
        - LP: #714732
      * bootmem: Add alloc_bootmem_align()
        - LP: #714732
      * x86, xsave: Use alloc_bootmem_align() instead of alloc_bootmem()
        - LP: #714732
      * IB/uverbs: Handle large number of entries in poll CQ
        - LP: #714732
      * PM / Hibernate: Fix PM_POST_* notification with user-space suspend
        - LP: #714732
      * ARM: 6535/1: V6 MPCore v6_dma_inv_range and v6_dma_flush_range RWFO fix
        - LP: #714732
      * qla2xxx: Correct issue where NPIV-config data was not being allocated
        for 82xx parts.
        - LP: #714732
      * qla2xxx: Populate Command Type 6 LUN field properly.
        - LP: #714732
      * llc: fix a device refcount imbalance
        - LP: #714732
      * ath9k: Disable SWBA interrupt on remove_interface
        - LP: #714732
      * ath9k: fix bug in tx power
        - LP: #714732
      * mac80211: Fix BUG in pskb_expand_head when transmitting shared skbs
        - LP: #714732
      * SPARC/LEON: removed constant timer initialization as if HZ=100, now it
        reflects the value of HZ
        - LP: #714732
      * sparc64: Delete prom_puts() unused.
        - LP: #714732
      * sparc: Remove prom_pathtoinode()
        - LP: #714732
      * sparc: Kill prom devops_{32,64}.c
        - LP: #714732
      * sparc64: Unexport prom_service_exists().
        - LP: #714732
      * sparc64: Delete prom_setcallback().
        - LP: #714732
      * sparc: Do not export prom_nb{get,put}char().
        - LP: #714732
      * sparc: Pass buffer pointer all the way down to prom_{get,put}char().
        - LP: #714732
      * sparc: Delete prom_*getchar().
        - LP: #714732
      * sparc: Write to prom console using indirect buffer.
        - LP: #714732
      * tcp: Don't change unlocked socket state in tcp_v4_err().
        - LP: #714732
      * tcp: Make TCP_MAXSEG minimum more correct.
        - LP: #714732
      * tcp: Bug fix in initialization of receive window.
        - LP: #714732
      * tcp: avoid a possible divide by zero
        - LP: #714732
      * tcp: protect sysctl_tcp_cookie_size reads
        - LP: #714732
      * 8139cp: fix checksum broken
        - LP: #714732
      * r8169: fix sleeping while holding spinlock.
        - LP: #714732
      * scm: Capture the full credentials of the scm sender.
        - LP: #714732
      * af_unix: Allow credentials to work across user and pid namespaces.
        - LP: #714732
      * user_ns: Introduce user_nsmap_uid and user_ns_map_gid.
        - LP: #714732
      * sock: Introduce cred_to_ucred
        - LP: #714732
      * net: Export cred_to_ucred to modules.
        - LP: #714732
      * af_unix: limit recursion level
        - LP: #714732
      * driver/net/benet: fix be_cmd_multicast_set() memcpy bug
        - LP: #714732
      * bonding: Fix slave selection bug.
        - LP: #714732
      * bridge: fix IPv6 queries for bridge multicast snooping
        - LP: #714732
      * cls_cgroup: Fix crash on module unload
        - LP: #714732
      * filter: fix sk_filter rcu handling
        - LP: #714732
      * econet: Do the correct cleanup after an unprivileged SIOCSIFADDR.
        - LP: #714732
      * econet: Fix crash in aun_incoming().
        - LP: #714732
      * ifb: goto resched directly if error happens and dp->tq isn't empty
        - LP: #714732
      * l2tp: Fix modalias of l2tp_ip
        - LP: #714732
      * x25: decrement netdev reference counts on unload
        - LP: #714732
      * tehuti: Firmware filename is tehuti/bdx.bin
        - LP: #714732
      * net/dst: dst_dev_event() called after other notifiers
        - LP: #714732
      * net: Fix header size check for GSO case in recvmsg (af_packet)
        - LP: #714732
      * ACPICA: Fix Scope() op in module level code
        - LP: #714732
      * nouveau: Acknowledge HPD irq in handler, not bottom half
        - LP: #714732
      * printk: Fix wake_up_klogd() vs cpu hotplug
        - LP: #714732
      * sched: Cure more NO_HZ load average woes
        - LP: #714732
      * ACPI: EC: Add another dmi match entry for MSI hardware
        - LP: #714732
      * PM / Runtime: Fix pm_runtime_suspended()
        - LP: #714732
      * inotify: stop kernel memory leak on file creation failure
        - LP: #714732
      * orinoco: fix TKIP countermeasure behaviour
        - LP: #714732
      * orinoco: clear countermeasure setting on commit
        - LP: #714732
      * x86, amd: Fix panic on AMD CPU family 0x15
        - LP: #714732
      * md: fix bug with re-adding of partially recovered device.
        - LP: #714732
      * md: protect against NULL reference when waiting to start a raid10.
        - LP: #714732
      * tracing: Fix panic when lseek() called on "trace" opened for writing
        - LP: #714732
      * x86, gcc-4.6: Use gcc -m options when building vdso
        - LP: #714732
      * x86: Enable the intr-remap fault handling after local APIC setup
        - LP: #714732
      * x86, vt-d: Handle previous faults after enabling fault handling
        - LP: #714732
      * x86, vt-d: Fix the vt-d fault handling irq migration in the x2apic mode
        - LP: #714732
      * x86, vt-d: Quirk for masking vtd spec errors to platform error handling
        logic
        - LP: #714732
      * rt2x00: Fix max TX power settings
        - LP: #714732
      * install_special_mapping skips security_file_mmap check.
        - LP: #714732
      * USB: misc: uss720.c: add another vendor/product ID
        - LP: #714732
      * USB: ftdi_sio: Add D.O.Tec PID
        - LP: #714732
      * USB: usb-storage: unusual_devs entry for the Samsung YP-CP3
        - LP: #714732
      * p54usb: add 5 more USBIDs
        - LP: #714732
      * p54usb: New USB ID for Gemtek WUBI-100GW
        - LP: #714732
      * n_gsm: Fix message length handling when building header
        - LP: #714732
      * n_gsm: gsm_data_alloc buffer allocation could fail and it is not being
        checked
        - LP: #714732
      * xhci: Fix issue with port array setup and buggy hosts.
        - LP: #714732
      * gpio: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * cs5535-gpio: don't apply errata #36 to edge detect GPIOs
        - LP: #714732
      * cs5535-gpio: handle GPIO regs where higher (clear) bits are set
        - LP: #714732
      * mmc: at91_mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: atmel-mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: Fix re-probing with PM_POST_RESTORE notification
        - LP: #714732
      * fix freeing user_struct in user cache
        - LP: #714732
      * rtc: rs5c372: fix buffer size
        - LP: #714732
      * RAMOOPS: Don't overflow over non-allocated regions
        - LP: #714732
      * watchdog: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * arch/x86/oprofile/op_model_amd.c: Perform initialisation on a single
        CPU
        - LP: #714732
      * mfd: Support additional parent IDs for wm831x
        - LP: #714732
      * mfd: Supply IRQ base for WM832x devices
        - LP: #714732
      * drm/radeon/kms/evergreen: reset the grbm blocks at resume and init
        - LP: #714732
      * drm/radeon/kms: fix evergreen asic reset
        - LP: #714732
      * drm/radeon/kms: reorder display resume to avoid problems
        - LP: #714732
      * drm/i915/dp: Fix I2C/EDID handling with active DisplayPort to DVI
        converter
        - LP: #714732
      * sound: Prevent buffer overflow in OSS load_mixer_volumes
        - LP: #714732
      * mv_xor: fix race in tasklet function
        - LP: #714732
      * ima: fix add LSM rule bug
        - LP: #714732
      * libata-sff: fix HSM_ST_ERR handling in __ata_sff_port_intr()
        - LP: #714732
      * mac80211: fix mesh forwarding
        - LP: #714732
      * ALSA: hda: Use LPIB quirk for Dell Inspiron m101z/1120
        - LP: #714732
      * Sched: fix skip_clock_update optimization
        - LP: #714732
      * block: Deprecate QUEUE_FLAG_CLUSTER and use queue_limits instead
        - LP: #714732
      * x86/microcode: Fix double vfree() and remove redundant pointer checks
        before vfree()
        - LP: #714732
      * gspca - sonixj: Set the flag for some devices
        - LP: #714732
      * gspca - sonixj: Add a flag in the driver_info table
        - LP: #714732
      * mac80211: fix hard lockup in sta_addba_resp_timer_expired
        - LP: #714732
      * mac80211: fix mesh forwarding when ratelimited too
        - LP: #714732
      * mac80211: fix initialization of skb->cb in ieee80211_subif_start_xmit
        - LP: #714732
      * Release 2.6.35.11
        - LP: #714732
      * inet_diag: Make sure we actually run the same bytecode we audited,
        CVE-2010-3880
        - LP: #711865
        - CVE-2010-3880
    
    linux (2.6.35-26.46) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Tracking Bug
        - LP: #709352
    
      [ Andy Whitcroft ]
    
      * SAUCE: ensure root is ready before running usermodehelpers in it
    
      [ Colin Ian King ]
    
      * SAUCE: Add WMI hotkeys support for another Dell All-In-One series
        - LP: #701530
      * SAUCE: Dell WMI: Use sparse keymaps and tidy up code.
        - LP: #701530
    
      [ Tim Gardner ]
    
      * [Config] Set CONFIG_NR_CPUS=256 for amd64 server
        - LP: #706058
    
      [ Upstream Kernel Changes ]
    
      * Input: i8042 - introduce 'notimeout' blacklist for Dell Vostro V13
        - LP: #380126
      * ACPI / Sleep: Consolidate suspend and hibernation routines
        - LP: #703228
      * Quirk to fix suspend/resume on Lenovo Edge 11,13,14,15
        - LP: #702434
      * dell-laptop: Add another Dell laptop family to the DMI whitelist
        - LP: #693078
      * KVM: Fix fs/gs reload oops with invalid ldt, CVE-2010-3698
        - LP: #707000
        - CVE-2010-3698
      * V4L/DVB: ivtvfb: prevent reading uninitialized stack memory,
        CVE-2010-4079
        - LP: #707649
        - CVE-2010-4079
      * tpm: Autodetect itpm devices
        - LP: #705845
      * tpm: fix panic caused by "tpm: Autodetect itpm devices"
        - LP: #705845
    
    linux (2.6.35-25.44) maverick-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
        - LP: #703553
     -- Herton Ronaldo Krzesinski <email address hidden>   Wed, 08 Jun 2011 09:40:03 -0300
  • linux-lts-backport-maverick (2.6.35-28.50~lucid1) lucid-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #737728
    
      [ Corentin Chary ]
    
      * SAUCE: (drop after 2.6.38) eeepc-wmi: reorder keymap
        - LP: #689393
      * SAUCE: (drop after 2.6.38) eeepc-wmi: add wlan key found on 1015P
        - LP: #689393
    
      [ Keng-Yu Lin ]
    
      * SAUCE: eeepc-wmi: set the touchpad toggle key code to F22
        - LP: #689393
    
      [ Tim Gardner ]
    
      * [Config] CONFIG_BOOT_PRINTK_DELAY=y
        - LP: #733191
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/bo: add some fallback placements for VRAM only
        objects."
        - LP: #652934
      * eeepc-wmi: add additional hotkeys
        - LP: #689393
      * xen: don't bother to stop other cpus on shutdown/reboot
        - LP: #727814
      * Yama: use thread group leader when creating match
        - LP: #729839
      * mmc: sdhci-pci: add ricoh e822 pci id with device specific quirks
        - LP: #730820
    
    linux (2.6.35-28.49) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #726796
    
      [ Colin Ian King ]
    
      * SAUCE: Dell All-In-One: Remove need for Dell module alias
    
      [ Manoj Iyer ]
    
      * SAUCE: add ricoh 0xe823 pci id.
        - LP: #717435
    
      [ Upstream Kernel Changes ]
    
      * virtio_net: Add schedule check to napi_enable call
        - LP: #579276
      * mmc: make sdhci work with ricoh mmc controller
        - LP: #717435
      * NFS: fix the return value of nfs_file_fsync()
        - LP: #585657
      * rt2x00: Pad beacon to multiple of 32 bits.
        - LP: #659143
      * rt2x00: Fix firmware loading regression on x86_64.
        - LP: #659143
      * rt2x00: Check for errors from skb_pad() calls
        - LP: #659143
      * block: check for proper length of iov entries earlier in
        blk_rq_map_user_iov(), CVE-2010-4163
        - LP: #721504
        - CVE-2010-4163
      * tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
        - LP: #720189
        - CVE-2010-4077
        - CVE-2010-4076
      * rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
        - LP: #721455
        - CVE-2010-4175
    
    linux (2.6.35-27.48) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Release Tracking Bug
        - LP: #723335
    
      [ Upstream Kernel Changes ]
    
      * thinkpad-acpi: avoid keymap pitfall
        - LP: #722747
    
    linux (2.6.35-27.47) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Release Tracking Bug
        - LP: #716532
    
      [ Upstream Kernel Changes ]
    
      * Revert "USB: gadget: Allow function access to device ID data during
        bind()"
        - LP: #714732
      * net: fix rds_iovec page count overflow, CVE-2010-3865
        - LP: #709153
        - CVE-2010-3865
      * Input: fix typo in keycode validation supporting large scancodes
        - LP: #658198
      * net: ax25: fix information leak to userland, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: ax25: fix information leak to userland harder, CVE-2010-3875
        - LP: #710714
        - CVE-2010-3875
      * net: packet: fix information leak to userland, CVE-2010-3876
        - LP: #710714
        - CVE-2010-3876
      * net: tipc: fix information leak to userland, CVE-2010-3877
        - LP: #711291
        - CVE-2010-3877
      * posix-cpu-timers: workaround to suppress the problems with mt exec,
        CVE-2010-4248
        - LP: #712609
        - CVE-2010-4248
      * sys_semctl: fix kernel stack leakage, CVE-2010-4083
        - LP: #712749
        - CVE-2010-4083
      * thinkpad-acpi: lock down size of hotkey keymap
        - LP: #712174
      * thinkpad-acpi: add support for model-specific keymaps
        - LP: #712174
      * thinkpad-acpi: Add KEY_CAMERA (Fn-F6) for Lenovo keyboards
        - LP: #712174
      * x86, hotplug: Use mwait to offline a processor, fix the legacy case
        - LP: #714732
      * fuse: verify ioctl retries
        - LP: #714732
      * fuse: fix ioctl when server is 32bit
        - LP: #714732
      * ALSA: hda: Use position_fix=1 for Acer Aspire 5538 to enable capture on
        internal mic
        - LP: #685161, #714732
      * ALSA: hda: Use model=lg quirk for LG P1 Express to enable playback and
        capture
        - LP: #595482, #714732
      * drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP
        - LP: #714732
      * drm/kms: remove spaces from connector names (v2)
        - LP: #714732
      * drm/radeon/kms: fix vram base calculation on rs780/rs880
        - LP: #714732
      * nohz: Fix printk_needs_cpu() return value on offline cpus
        - LP: #714732
      * nohz: Fix get_next_timer_interrupt() vs cpu hotplug
        - LP: #714732
      * nfsd: Fix possible BUG_ON firing in set_change_info
        - LP: #714732
      * NFS: Fix fcntl F_GETLK not reporting some conflicts
        - LP: #714732
      * sunrpc: prevent use-after-free on clearing XPT_BUSY
        - LP: #714732
      * hwmon: (adm1026) Allow 1 as a valid divider value
        - LP: #714732
      * hwmon: (adm1026) Fix setting fan_div
        - LP: #714732
      * EDAC: Fix workqueue-related crashes
        - LP: #714732
      * amd64_edac: Fix interleaving check
        - LP: #714732
      * ASoC: Fix swap of left and right channels for WM8993/4 speaker boost
        gain
        - LP: #714732
      * ASoC: Fix off by one error in WM8994 EQ register bank size
        - LP: #714732
      * ASoC: WM8580: Fix R8 initial value
        - LP: #714732
      * ASoC: fix deemphasis control in wm8904/55/60 codecs
        - LP: #714732
      * bootmem: Add alloc_bootmem_align()
        - LP: #714732
      * x86, xsave: Use alloc_bootmem_align() instead of alloc_bootmem()
        - LP: #714732
      * IB/uverbs: Handle large number of entries in poll CQ
        - LP: #714732
      * PM / Hibernate: Fix PM_POST_* notification with user-space suspend
        - LP: #714732
      * ARM: 6535/1: V6 MPCore v6_dma_inv_range and v6_dma_flush_range RWFO fix
        - LP: #714732
      * qla2xxx: Correct issue where NPIV-config data was not being allocated
        for 82xx parts.
        - LP: #714732
      * qla2xxx: Populate Command Type 6 LUN field properly.
        - LP: #714732
      * llc: fix a device refcount imbalance
        - LP: #714732
      * ath9k: Disable SWBA interrupt on remove_interface
        - LP: #714732
      * ath9k: fix bug in tx power
        - LP: #714732
      * mac80211: Fix BUG in pskb_expand_head when transmitting shared skbs
        - LP: #714732
      * SPARC/LEON: removed constant timer initialization as if HZ=100, now it
        reflects the value of HZ
        - LP: #714732
      * sparc64: Delete prom_puts() unused.
        - LP: #714732
      * sparc: Remove prom_pathtoinode()
        - LP: #714732
      * sparc: Kill prom devops_{32,64}.c
        - LP: #714732
      * sparc64: Unexport prom_service_exists().
        - LP: #714732
      * sparc64: Delete prom_setcallback().
        - LP: #714732
      * sparc: Do not export prom_nb{get,put}char().
        - LP: #714732
      * sparc: Pass buffer pointer all the way down to prom_{get,put}char().
        - LP: #714732
      * sparc: Delete prom_*getchar().
        - LP: #714732
      * sparc: Write to prom console using indirect buffer.
        - LP: #714732
      * tcp: Don't change unlocked socket state in tcp_v4_err().
        - LP: #714732
      * tcp: Make TCP_MAXSEG minimum more correct.
        - LP: #714732
      * tcp: Bug fix in initialization of receive window.
        - LP: #714732
      * tcp: avoid a possible divide by zero
        - LP: #714732
      * tcp: protect sysctl_tcp_cookie_size reads
        - LP: #714732
      * 8139cp: fix checksum broken
        - LP: #714732
      * r8169: fix sleeping while holding spinlock.
        - LP: #714732
      * scm: Capture the full credentials of the scm sender.
        - LP: #714732
      * af_unix: Allow credentials to work across user and pid namespaces.
        - LP: #714732
      * user_ns: Introduce user_nsmap_uid and user_ns_map_gid.
        - LP: #714732
      * sock: Introduce cred_to_ucred
        - LP: #714732
      * net: Export cred_to_ucred to modules.
        - LP: #714732
      * af_unix: limit recursion level
        - LP: #714732
      * driver/net/benet: fix be_cmd_multicast_set() memcpy bug
        - LP: #714732
      * bonding: Fix slave selection bug.
        - LP: #714732
      * bridge: fix IPv6 queries for bridge multicast snooping
        - LP: #714732
      * cls_cgroup: Fix crash on module unload
        - LP: #714732
      * filter: fix sk_filter rcu handling
        - LP: #714732
      * econet: Do the correct cleanup after an unprivileged SIOCSIFADDR.
        - LP: #714732
      * econet: Fix crash in aun_incoming().
        - LP: #714732
      * ifb: goto resched directly if error happens and dp->tq isn't empty
        - LP: #714732
      * l2tp: Fix modalias of l2tp_ip
        - LP: #714732
      * x25: decrement netdev reference counts on unload
        - LP: #714732
      * tehuti: Firmware filename is tehuti/bdx.bin
        - LP: #714732
      * net/dst: dst_dev_event() called after other notifiers
        - LP: #714732
      * net: Fix header size check for GSO case in recvmsg (af_packet)
        - LP: #714732
      * ACPICA: Fix Scope() op in module level code
        - LP: #714732
      * nouveau: Acknowledge HPD irq in handler, not bottom half
        - LP: #714732
      * printk: Fix wake_up_klogd() vs cpu hotplug
        - LP: #714732
      * sched: Cure more NO_HZ load average woes
        - LP: #714732
      * ACPI: EC: Add another dmi match entry for MSI hardware
        - LP: #714732
      * PM / Runtime: Fix pm_runtime_suspended()
        - LP: #714732
      * inotify: stop kernel memory leak on file creation failure
        - LP: #714732
      * orinoco: fix TKIP countermeasure behaviour
        - LP: #714732
      * orinoco: clear countermeasure setting on commit
        - LP: #714732
      * x86, amd: Fix panic on AMD CPU family 0x15
        - LP: #714732
      * md: fix bug with re-adding of partially recovered device.
        - LP: #714732
      * md: protect against NULL reference when waiting to start a raid10.
        - LP: #714732
      * tracing: Fix panic when lseek() called on "trace" opened for writing
        - LP: #714732
      * x86, gcc-4.6: Use gcc -m options when building vdso
        - LP: #714732
      * x86: Enable the intr-remap fault handling after local APIC setup
        - LP: #714732
      * x86, vt-d: Handle previous faults after enabling fault handling
        - LP: #714732
      * x86, vt-d: Fix the vt-d fault handling irq migration in the x2apic mode
        - LP: #714732
      * x86, vt-d: Quirk for masking vtd spec errors to platform error handling
        logic
        - LP: #714732
      * rt2x00: Fix max TX power settings
        - LP: #714732
      * install_special_mapping skips security_file_mmap check.
        - LP: #714732
      * USB: misc: uss720.c: add another vendor/product ID
        - LP: #714732
      * USB: ftdi_sio: Add D.O.Tec PID
        - LP: #714732
      * USB: usb-storage: unusual_devs entry for the Samsung YP-CP3
        - LP: #714732
      * p54usb: add 5 more USBIDs
        - LP: #714732
      * p54usb: New USB ID for Gemtek WUBI-100GW
        - LP: #714732
      * n_gsm: Fix message length handling when building header
        - LP: #714732
      * n_gsm: gsm_data_alloc buffer allocation could fail and it is not being
        checked
        - LP: #714732
      * xhci: Fix issue with port array setup and buggy hosts.
        - LP: #714732
      * gpio: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * cs5535-gpio: don't apply errata #36 to edge detect GPIOs
        - LP: #714732
      * cs5535-gpio: handle GPIO regs where higher (clear) bits are set
        - LP: #714732
      * mmc: at91_mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: atmel-mci: fix multiblock SDIO transfers
        - LP: #714732
      * mmc: Fix re-probing with PM_POST_RESTORE notification
        - LP: #714732
      * fix freeing user_struct in user cache
        - LP: #714732
      * rtc: rs5c372: fix buffer size
        - LP: #714732
      * RAMOOPS: Don't overflow over non-allocated regions
        - LP: #714732
      * watchdog: Fix null pointer dereference while accessing rdc321x
        platform_data
        - LP: #714732
      * arch/x86/oprofile/op_model_amd.c: Perform initialisation on a single
        CPU
        - LP: #714732
      * mfd: Support additional parent IDs for wm831x
        - LP: #714732
      * mfd: Supply IRQ base for WM832x devices
        - LP: #714732
      * drm/radeon/kms/evergreen: reset the grbm blocks at resume and init
        - LP: #714732
      * drm/radeon/kms: fix evergreen asic reset
        - LP: #714732
      * drm/radeon/kms: reorder display resume to avoid problems
        - LP: #714732
      * drm/i915/dp: Fix I2C/EDID handling with active DisplayPort to DVI
        converter
        - LP: #714732
      * sound: Prevent buffer overflow in OSS load_mixer_volumes
        - LP: #714732
      * mv_xor: fix race in tasklet function
        - LP: #714732
      * ima: fix add LSM rule bug
        - LP: #714732
      * libata-sff: fix HSM_ST_ERR handling in __ata_sff_port_intr()
        - LP: #714732
      * mac80211: fix mesh forwarding
        - LP: #714732
      * ALSA: hda: Use LPIB quirk for Dell Inspiron m101z/1120
        - LP: #714732
      * Sched: fix skip_clock_update optimization
        - LP: #714732
      * block: Deprecate QUEUE_FLAG_CLUSTER and use queue_limits instead
        - LP: #714732
      * x86/microcode: Fix double vfree() and remove redundant pointer checks
        before vfree()
        - LP: #714732
      * gspca - sonixj: Set the flag for some devices
        - LP: #714732
      * gspca - sonixj: Add a flag in the driver_info table
        - LP: #714732
      * mac80211: fix hard lockup in sta_addba_resp_timer_expired
        - LP: #714732
      * mac80211: fix mesh forwarding when ratelimited too
        - LP: #714732
      * mac80211: fix initialization of skb->cb in ieee80211_subif_start_xmit
        - LP: #714732
      * Release 2.6.35.11
        - LP: #714732
      * inet_diag: Make sure we actually run the same bytecode we audited,
        CVE-2010-3880
        - LP: #711865
        - CVE-2010-3880
    
    linux (2.6.35-26.46) maverick-proposed; urgency=low
    
      [ Steve Conklin ]
    
      * Tracking Bug
        - LP: #709352
    
      [ Andy Whitcroft ]
    
      * SAUCE: ensure root is ready before running usermodehelpers in it
    
      [ Colin Ian King ]
    
      * SAUCE: Add WMI hotkeys support for another Dell All-In-One series
        - LP: #701530
      * SAUCE: Dell WMI: Use sparse keymaps and tidy up code.
        - LP: #701530
    
      [ Tim Gardner ]
    
      * [Config] Set CONFIG_NR_CPUS=256 for amd64 server
        - LP: #706058
    
      [ Upstream Kernel Changes ]
    
      * Input: i8042 - introduce 'notimeout' blacklist for Dell Vostro V13
        - LP: #380126
      * ACPI / Sleep: Consolidate suspend and hibernation routines
        - LP: #703228
      * Quirk to fix suspend/resume on Lenovo Edge 11,13,14,15
        - LP: #702434
      * dell-laptop: Add another Dell laptop family to the DMI whitelist
        - LP: #693078
      * KVM: Fix fs/gs reload oops with invalid ldt, CVE-2010-3698
        - LP: #707000
        - CVE-2010-3698
      * V4L/DVB: ivtvfb: prevent reading uninitialized stack memory,
        CVE-2010-4079
        - LP: #707649
        - CVE-2010-4079
      * tpm: Autodetect itpm devices
        - LP: #705845
      * tpm: fix panic caused by "tpm: Autodetect itpm devices"
        - LP: #705845
    
    linux (2.6.35-25.44) maverick-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
        - LP: #703553
     -- Brad Figg <email address hidden>   Sun, 13 Mar 2011 07:01:39 -0700
  • linux-lts-backport-maverick (2.6.35-25.44~lucid1) lucid; urgency=low
    
      [ Tim Gardner ]
    
      * Tracking bug
        - LP:# 707577
    
      [ Upstream Kernel Changes ]
    
      * Revert "drm/radeon/kms: properly compute group_size on 6xx/7xx"
        - LP: #703553
    
    linux (2.6.35-25.43) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      - LP: #697948
    
      [ Andy Whitcroft ]
    
      * [Config] add vmware-balloon driver to -virtual flavour
        - LP: #592039
    
      [ Manoj Iyer ]
    
      * SAUCE: Enable jack sense for Thinkpad Edge 13
        - LP: #685015
    
      [ Robert Hooker ]
    
      * Revert "(pre-stable): input: Support Clickpad devices in ClickZone
        mode"
        - LP: #669399
    
      [ Stefan Bader ]
    
      * Set virtual flavour maximum of domain visible memory to 70G
        - LP: #667796
    
      [ Takashi Iwai ]
    
      * SAUCE: input: Support Clickpad devices in ClickZone mode
        - LP: #516329
    
      [ Tim Gardner ]
    
      * [Config] Add nfsd modules to -virtual flavour
        - LP: #688070
      * [Config] Added autofs4.ko to -virtual flavour
        - LP: #692917
    
      [ Upstream Kernel Changes ]
    
      * intel_idle: delete substates DEBUG modparam
        - LP: #684888
      * intel_idle: delete power_policy modparam, and choose substate functions
        - LP: #684888
      * intel_idle: add support for Westmere-EX
        - LP: #684888
      * intel_idle: recognize Lincroft Atom Processor
        - LP: #684888
      * x86, mwait: Move mwait constants to a common header file
        - LP: #684888
      * intel_idle: Change mode 755 => 644
        - LP: #684888
      * intel_idle: add missing __percpu markup
        - LP: #684888
      * cpuidle: extend cpuidle and menu governor to handle dynamic states
        - LP: #684888
      * intel_idle: Voluntary leave_mm before entering deeper
        - LP: #684888
      * intel_idle: enable Atom C6
        - LP: #684888
      * intel_idle: simplify test for leave_mm()
        - LP: #684888
      * intel_idle: delete bogus data from cpuidle_state.power_usage
        - LP: #684888
      * intel_idle: add initial Sandy Bridge support
        - LP: #684888
      * intel_idle: do not use the LAPIC timer for ATOM C2
        - LP: #684888
      * staging: usbip: Notify usb core of port status changes
        - LP: #686158
      * staging: usbip: Process event flags without delay
        - LP: #686158
      * Staging: phison: fix problem caused by libata change
        - LP: #686158
      * perf_events: Fix bogus AMD64 generic TLB events
        - LP: #686158
      * perf_events: Fix bogus context time tracking
        - LP: #686158
      * powerpc/perf: Fix sampling enable for PPC970
        - LP: #686158
      * pcmcia: synclink_cs: fix information leak to userland
        - LP: #686158
      * sched: Drop all load weight manipulation for RT tasks
        - LP: #686158
      * sched: Fix string comparison in /proc/sched_features
        - LP: #686158
      * bluetooth: Fix missing NULL check
        - LP: #686158
      * futex: Fix errors in nested key ref-counting
        - LP: #686158
      * cifs: fix broken oplock handling
        - LP: #686158
      * libahci: fix result_tf handling after an ATA PIO data-in command
        - LP: #686158
      * mm, x86: Saving vmcore with non-lazy freeing of vmas
        - LP: #686158
      * x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit
        - LP: #686158
      * x86, kexec: Make sure to stop all CPUs before exiting the kernel
        - LP: #686158
      * x86, olpc: Don't retry EC commands forever
        - LP: #686158
      * x86, mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD
        CPUs
        - LP: #686158
      * x86, intr-remap: Set redirection hint in the IRTE
        - LP: #686158
      * x86, kdump: Change copy_oldmem_page() to use cached addressing
        - LP: #686158
      * x86, vm86: Fix preemption bug for int1 debug and int3 breakpoint
        handlers.
        - LP: #686158
      * KVM: X86: Report SVM bit to userspace only when supported
        - LP: #686158
      * KVM: SVM: Restore correct registers after sel_cr0 intercept emulation
        - LP: #686158
      * USB: mct_u232: fix broken close
        - LP: #686158
      * pipe: fix failure to return error code on ->confirm()
        - LP: #686158
      * p54usb: fix off-by-one on !CONFIG_PM
        - LP: #686158
      * p54usb: add five more USBIDs
        - LP: #686158
      * drivers/net/wireless/p54/eeprom.c: Return -ENOMEM on memory allocation
        failure
        - LP: #686158
      * usb gadget: composite: prevent OOPS for non-standard control request
        - LP: #686158
      * USB: gadget: g_ffs: fixed vendor and product ID
        - LP: #686158
      * USB: gadget: g_multi: fixed vendor and product ID
        - LP: #686158
      * USB: ftdi_sio: Add PID for accesio products
        - LP: #686158
      * USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
        - LP: #686158, #690798
      * USB: add PID for FTDI based OpenDCC hardware
        - LP: #686158
      * USB: ftdi_sio: new VID/PIDs for various Papouch devices
        - LP: #686158
      * USB: ftdi_sio: add device ids for ScienceScope
        - LP: #686158
      * USB: MUSB: fix kernel WARNING/oops when unloading module in OTG mode
        - LP: #686158
      * usb: musb: blackfin: call usb_nop_xceiv_unregister() in
        musb_platform_exit()
        - LP: #686158
      * usb: musb: blackfin: call gpio_free() on error path in
        musb_platform_init()
        - LP: #686158
      * USB: Change acm_iad_descriptor bFunctionProtocol to
        USB_CDC_ACM_PROTO_AT_V25TER
        - LP: #686158
      * USB: option: Add more ZTE modem USB id's
        - LP: #686158
      * USB: cp210x: Add Renesas RX-Stick device ID
        - LP: #686158
      * USB: cp210x: Add WAGO 750-923 Service Cable device ID
        - LP: #686158
      * USB: atmel_usba_udc: force vbus_pin at -EINVAL when gpio_request
        failled
        - LP: #686158
      * USB: disable endpoints after unbinding interfaces, not before
        - LP: #686158
      * USB: visor: fix initialisation of UX50/TH55 devices
        - LP: #686158
      * USB: opticon: Fix long-standing bugs in opticon driver
        - LP: #686158
      * usb: r8a66597-hcd: Change mistake of the outsw function
        - LP: #686158
      * USB: accept some invalid ep0-maxpacket values
        - LP: #686158
      * asus-laptop: fix gps rfkill
        - LP: #686158
      * sd name space exhaustion causes system hang
        - LP: #686158
      * libsas: fix NCQ mixing with non-NCQ
        - LP: #686158
      * gdth: integer overflow in ioctl
        - LP: #686158
      * Fix race when removing SCSI devices
        - LP: #686158
      * Fix regressions in scsi_internal_device_block
        - LP: #686158
      * net: clear heap allocations for privileged ethtool actions
        - LP: #686158
      * gianfar: fix double lock typo
        - LP: #686158
      * gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New:
        linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
        - LP: #686158
      * ip: fix truesize mismatch in ip fragmentation
        - LP: #686158
      * ipv6: fix refcnt problem related to POSTDAD state
        - LP: #686158
      * net: Fix IPv6 PMTU disc. w/ asymmetric routes
        - LP: #686158
      * netxen: dont set skb->truesize
        - LP: #686158
      * qlcnic: dont set skb->truesize
        - LP: #686158
      * Phonet: Correct header retrieval after pskb_may_pull
        - LP: #686158
      * r6040: Fix multicast filter some more
        - LP: #686158
      * rose: Fix signedness issues wrt. digi count.
        - LP: #686158
      * net: Fix the condition passed to sk_wait_event()
        - LP: #686158
      * Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer
        overflows.
        - LP: #686158
      * tcp: Fix race in tcp_poll
        - LP: #686158
      * net-2.6: SYN retransmits: Add new parameter to retransmits_timed_out()
        - LP: #686158
      * Revert c6537d6742985da1fbf12ae26cde6a096fd35b5c
        - LP: #686158
      * Revert d88dca79d3852a3623f606f781e013d61486828a
        - LP: #686158
      * net: add a recursion limit in xmit path
        - LP: #686158
      * net/core: Allow tagged VLAN packets to flow through VETH devices.
        - LP: #686158
      * xfrm4: strip ECN bits from tos field
        - LP: #686158
      * secmark: do not return early if there was no error
        - LP: #686158
      * ARM: cns3xxx: Fixup the missing second parameter to addruart macro to
        allow them to build.
        - LP: #686158
      * sgi-xp: incoming XPC channel messages can come in after the channel's
        partition structures have been torn down
        - LP: #686158
      * isdn: avoid calling tty_ldisc_flush() in atomic context
        - LP: #686158
      * KVM: x86 emulator: fix regression with cmpxchg8b on i386 hosts
        - LP: #686158
      * Linux 2.6.35.9
        - LP: #686158
      * Input: synaptics - fix handling of 2-button ClickPads
        - LP: #687750
      * NFS: Fix panic after nfs_umount()
        - LP: #683938
      * block: Ensure physical block size is unsigned int
        - LP: #690730
      * block: Fix race during disk initialization
        - LP: #690730
      * block: limit vec count in bio_kmalloc() and bio_alloc_map_data()
        - LP: #690730
      * block: take care not to overflow when calculating total iov length
        - LP: #690730
      * block: check for proper length of iov entries in blk_rq_map_user_iov()
        - LP: #690730
      * drm/radeon/kms: don't disable shared encoders on pre-DCE3 display
        blocks
        - LP: #690730
      * jme: Fix PHY power-off error
        - LP: #690730
      * irda: Fix parameter extraction stack overflow
        - LP: #690730
      * irda: Fix heap memory corruption in iriap.c
        - LP: #690730
      * cfg80211: fix BSS double-unlinking
        - LP: #690730
      * cfg80211: fix locking
        - LP: #690730
      * cfg80211: fix regression on processing country IEs
        - LP: #690730
      * mac80211: fix channel assumption for association done work
        - LP: #690730
      * mac80211: fix offchannel assumption upon association
        - LP: #690730
      * mac80211: Fix signal strength average initialization for CQM events
        - LP: #690730
      * mac80211: add helper for reseting the connection monitor
        - LP: #690730
      * mac80211: reset connection idle when going offchannel
        - LP: #690730
      * mac80211: make the beacon monitor available externally
        - LP: #690730
      * mac80211: send last 3/5 probe requests as unicast
        - LP: #690730
      * mac80211: disable beacon monitor while going offchannel
        - LP: #690730
      * mac80211: use correct station flags lock
        - LP: #690730
      * mac80211: clear txflags for ps-filtered frames
        - LP: #690730
      * mac80211: reset probe send counter upon connection timer reset
        - LP: #690730
      * mac80211: Fix ibss station got expired immediately
        - LP: #690730
      * mac80211: don't sanitize invalid rates
        - LP: #690730
      * mac80211: delete AddBA response timer
        - LP: #690730
      * isdn/gigaset: fix bas_gigaset AT read error handling
        - LP: #690730
      * isdn/gigaset: correct bas_gigaset rx buffer handling
        - LP: #690730
      * isdn/gigaset: bas_gigaset locking fix
        - LP: #690730
      * i2c-pca-platform: Change device name of request_irq
        - LP: #690730
      * viafb: fix i2c_transfer error handling
        - LP: #690730
      * drm/radeon/kms: register an i2c adapter name for the dp aux bus
        - LP: #690730
      * ALSA: hda - Fix wrong SPDIF NID assignment for CA0110
        - LP: #690730
      * ALSA: hda - Add some workarounds for Creative IBG
        - LP: #690730
      * ALSA: OSS mixer emulation - fix locking
        - LP: #690730
      * powerpc: Fix call to subpage_protection()
        - LP: #690730
      * microblaze: Fix build with make 3.82
        - LP: #690730
      * NFSv4: Don't call nfs4_reclaim_complete() on receiving
        NFS4ERR_STALE_CLIENTID
        - LP: #690730
      * NFSv4: Don't call nfs4_state_mark_reclaim_reboot() from error handlers
        - LP: #690730
      * NFSv4: Fix open recovery
        - LP: #690730
      * NFS: Don't SIGBUS if nfs_vm_page_mkwrite races with a cache
        invalidation
        - LP: #690730
      * drm/radeon/kms: MC vram map needs to be >= pci aperture size
        - LP: #690730
      * drm/radeon/kms: properly compute group_size on 6xx/7xx
        - LP: #690730
      * drm/radeon/kms: make sure blit addr masks are 64 bit
        - LP: #690730
      * drm/radeon/kms: fix handling of tex lookup disable in cs checker on
        r2xx
        - LP: #690730
      * drm/i915: Free hardware status page on unload when physically mapped
        - LP: #690730
      * drm/i915: diasable clock gating for the panel power sequencer
        - LP: #690730
      * drm/i915/overlay: Ensure that the reg_bo is in the GTT prior to
        writing.
        - LP: #690730
      * pcnet_cs: add new_id
        - LP: #690730
      * SH: Add missing consts to sys_execve() declaration
        - LP: #690730
      * reiserfs: fix inode mutex - reiserfs lock misordering
        - LP: #690730
      * reiserfs: don't acquire lock recursively in reiserfs_acl_chmod
        - LP: #690730
      * staging: rt2870: Add new USB ID for Belkin F6D4050 v1
        - LP: #690730
      * Staging: asus_oled: fix up some sysfs attribute permissions
        - LP: #690730
      * Staging: asus_oled: fix up my fixup for some sysfs attribute
        permissions
        - LP: #690730
      * ALSA: hda: Use hp-laptop quirk to enable headphones automute for Asus
        A52J
        - LP: #677652, #690730
      * Staging: line6: fix up some sysfs attribute permissions
        - LP: #690730
      * hpet: fix unwanted interrupt due to stale irq status bit
        - LP: #690730
      * hpet: unmap unused I/O space
        - LP: #690730
      * olpc_battery: Fix endian neutral breakage for s16 values
        - LP: #690730
      * percpu: fix list_head init bug in __percpu_counter_init()
        - LP: #690730
      * ipmi: proper spinlock initialization
        - LP: #690730
      * um: remove PAGE_SIZE alignment in linker script causing kernel
        segfault.
        - LP: #690730
      * um: fix global timer issue when using CONFIG_NO_HZ
        - LP: #690730
      * numa: fix slab_node(MPOL_BIND)
        - LP: #690730
      * hwmon: (lm85) Fix ADT7468 frequency table
        - LP: #690730
      * oprofile: Fix the hang while taking the cpu offline
        - LP: #690730
      * mm: fix return value of scan_lru_pages in memory unplug
        - LP: #690730
      * mm, page-allocator: do not check the state of a non-existant buddy
        during free
        - LP: #690730
      * mm: fix is_mem_section_removable() page_order BUG_ON check
        - LP: #690730
      * agp/intel: Also add B43.1 to list of supported devices
        - LP: #690730
      * b43: Fix warning at drivers/mmc/core/core.c:237 in mmc_wait_for_cmd
        - LP: #690730
      * wireless: b43: fix error path in SDIO
        - LP: #690730
      * ssb: b43-pci-bridge: Add new vendor for BCM4318
        - LP: #690730
      * drivers/misc/ad525x_dpot.c: fix typo in spi write16 and write24
        transfer counts
        - LP: #690730
      * sgi-xpc: XPC fails to discover partitions with all nasids above 128
        - LP: #690730
      * xen: ensure that all event channels start off bound to VCPU 0
        - LP: #690730
      * ipc: initialize structure memory to zero for compat functions
        - LP: #690730
      * net: NETIF_F_HW_CSUM does not imply FCoE CRC offload
        - LP: #690730
      * drivers/char/vt_ioctl.c: fix VT_OPENQRY error value
        - LP: #690730
      * viafb: use proper register for colour when doing fill ops
        - LP: #690730
      * sata_via: apply magic FIFO fix to vt6420 too
        - LP: #690730
      * eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
        - LP: #690730
      * ecryptfs: call vfs_setxattr() in ecryptfs_setxattr()
        - LP: #690730
      * md/raid1: really fix recovery looping when single good device fails.
        - LP: #690730
      * md: fix return value of rdev_size_change()
        - LP: #690730
      * ALSA: hda: Use BIOS auto-parsing instead of existing model quirk for
        MEDION MD2
        - LP: #682199, #690730
      * tty: prevent DOS in the flush_to_ldisc
        - LP: #690730
      * TTY: restore tty_ldisc_wait_idle
        - LP: #690730
      * tty_ldisc: Fix BUG() on hangup
        - LP: #690730
      * TTY: ldisc, fix open flag handling
        - LP: #690730
      * usbnet: fix usb_autopm_get_interface failure(v1)
        - LP: #690730
      * HID: Fix for problems with eGalax/DWAV multi-touch-screen
        - LP: #690730
      * gspca - sonixj: Fix a regression of sensors hv7131r and mi0360
        - LP: #690730
      * hdpvr: Add missing URB_NO_TRANSFER_DMA_MAP flag
        - LP: #690730
      * drivers/media/video/cx23885/cx23885-core.c: fix
        cx23885_dev_checkrevision()
        - LP: #690730
      * KVM: Write protect memory after slot swap
        - LP: #690730
      * KVM: x86: fix information leak to userland
        - LP: #690730
      * KVM: Correct ordering of ldt reload wrt fs/gs reload
        - LP: #690730
      * ASoC: Remove volatility from WM8900 POWER1 register
        - LP: #690730
      * ASoC: wm8961 - clear WM8961_DACSLOPE bit for normal mode
        - LP: #690730
      * ASoC: wm8961 - clear WM8961_MCLKDIV bit for freq <= 16500000
        - LP: #690730
      * firewire: ohci: fix buffer overflow in AR split packet handling
        - LP: #690730
      * firewire: ohci: fix race in AR split packet handling
        - LP: #690730
      * ALSA: ac97: Apply quirk for Dell Latitude D610 binding Master and
        Headphone controls
        - LP: #669279, #690730
      * ALSA: HDA: Add fixup pins for Ideapad Y550
        - LP: #611803, #690730
      * ALSA: hda - Added fixup for Lenovo Y550P
        - LP: #690730
      * ALSA: hda: Add speaker pin to automute Acer Aspire 8943G
        - LP: #656625, #690730
      * ALSA: hda: Add Samsung R720 SSID for subwoofer pin fixup
        - LP: #677830, #690730
      * ALSA: hda - Use ALC_INIT_DEFAULT for really default initialization
        - LP: #690730
      * ALSA: hda - Fix ALC660-VD/ALC861-VD capture/playback mixers
        - LP: #690730
      * ALSA: Fix SNDCTL_DSP_RESET ioctl for OSS emulation
        - LP: #690730
      * ALSA: hda: Use "alienware" model quirk for another SSID
        - LP: #683695, #690730
      * netfilter: nf_conntrack: allow nf_ct_alloc_hashtable() to get highmem
        pages
        - LP: #690730
      * netfilter: NF_HOOK_COND has wrong conditional
        - LP: #690730
      * radix-tree: fix RCU bug
        - LP: #690730
      * latencytop: fix per task accumulator
        - LP: #690730
      * mm/vfs: revalidate page->mapping in do_generic_file_read()
        - LP: #690730
      * bio: take care not overflow page count when mapping/copying user data
        - LP: #690730
      * drm/radeon/kms/atom: set sane defaults in atombios_get_encoder_mode()
        - LP: #690730
      * drm/radeon/kms: fix typos in disabled vbios code
        - LP: #690730
      * drm/radeon/kms: add workaround for dce3 ddc line vbios bug
        - LP: #690730
      * drm/radeon/kms: Fix retrying ttm_bo_init() after it failed once.
        - LP: #690730
      * drm/radeon/kms: fix interlaced and doublescan handling
        - LP: #690730
      * exec: make argv/envp memory visible to oom-killer
        - LP: #690730
      * exec: copy-and-paste the fixes into compat_do_execve() paths
        - LP: #690730
      * drm/i915/sdvo: Always add a 30ms delay to make SDVO TV detection
        reliable
        - LP: #690730
      * intel-gtt: fix gtt_total_entries detection
        - LP: #690730
      * sched: fix RCU lockdep splat from task_group()
        - LP: #690730
      * libata: fix NULL sdev dereference race in atapi_qc_complete()
        - LP: #690730
      * PCI: fix size checks for mmap() on /proc/bus/pci files
        - LP: #690730
      * PCI: fix offset check for sysfs mmapped files
        - LP: #690730
      * xHCI: fix wMaxPacketSize mask
        - LP: #690730
      * xhci: Fix reset-device and configure-endpoint commands
        - LP: #690730
      * xhci: Setup array of USB 2.0 and USB 3.0 ports.
        - LP: #690730
      * xhci: Don't let the USB core disable SuperSpeed ports.
        - LP: #690730
      * USB: gadget: AT91: fix typo in atmel_usba_udc driver
        - LP: #690730
      * usb: musb: fix kernel oops when loading musb_hdrc module for the 2nd
        time
        - LP: #690730
      * USB: ftdi_sio: add device IDs for Milkymist One JTAG/serial
        - LP: #690730
      * USB: option: fix when the driver is loaded incorrectly for some Huawei
        devices.
        - LP: #690730
      * usb: misc: sisusbvga: fix information leak to userland
        - LP: #690730
      * usb: misc: iowarrior: fix information leak to userland
        - LP: #690730
      * usb: core: fix information leak to userland
        - LP: #690730
      * USB: EHCI: fix obscure race in ehci_endpoint_disable
        - LP: #690730
      * USB: storage: sierra_ms: fix sysfs file attribute
        - LP: #690730
      * USB: atm: ueagle-atm: fix up some permissions on the sysfs files
        - LP: #690730
      * USB: misc: cypress_cy7c63: fix up some sysfs attribute permissions
        - LP: #690730
      * USB: misc: usbled: fix up some sysfs attribute permissions
        - LP: #690730
      * USB: misc: trancevibrator: fix up a sysfs attribute permission
        - LP: #690730
      * USB: misc: usbsevseg: fix up some sysfs attribute permissions
        - LP: #690730
      * USB: ftdi_sio: Add ID for RT Systems USB-29B radio cable
        - LP: #690730
      * USB: serial: ftdi_sio: Vardaan USB RS422/485 converter PID added
        - LP: #690730
      * USB: fix autosuspend bug in usb-serial
        - LP: #690730
      * e1000: fix screaming IRQ
        - LP: #690730
      * ACPI battery: support percentage battery remaining capacity
        - LP: #690730
      * acpi-cpufreq: fix a memleak when unloading driver
        - LP: #690730
      * ACPI: debugfs custom_method open to non-root
        - LP: #690730
      * PNPACPI: cope with invalid device IDs
        - LP: #690730
      * saa7134: Fix autodetect for Behold A7 and H7 TV cards
        - LP: #690730
      * fuse: fix attributes after open(O_TRUNC)
        - LP: #690730
      * cs5535-gpio: apply CS5536 errata workaround for GPIOs
        - LP: #690730
      * do_exit(): make sure that we run with get_fs() == USER_DS
        - LP: #690730
      * cifs: fix another memleak, in cifs_root_iget
        - LP: #690730
      * uml: disable winch irq before freeing handler data
        - LP: #690730
      * backlight: grab ops_lock before testing bd->ops
        - LP: #690730
      * nommu: yield CPU while disposing VM
        - LP: #690730
      * x86: Ignore trap bits on single step exceptions
        - LP: #690730
      * mmc: fix rmmod race for hosts using card-detection polling
        - LP: #690730
      * DECnet: don't leak uninitialized stack byte
        - LP: #690730
      * perf_events: Fix perf_counter_mmap() hook in mprotect()
        - LP: #690730
      * ARM: 6464/2: fix spinlock recursion in adjust_pte()
        - LP: #690730
      * ARM: 6489/1: thumb2: fix incorrect optimisation in usracc
        - LP: #690730
      * ARM: 6482/2: Fix find_next_zero_bit and related assembly
        - LP: #690730
      * leds: fix bug with reading NAS SS4200 dmi code
        - LP: #690730
      * Staging: udlfb: fix up some sysfs attribute permissions
        - LP: #690730
      * Staging: iio: adis16220: fix up some sysfs attribute permissions
        - LP: #690730
      * Staging: iio: adis16220: fix up my fixup for some sysfs attribute
        permissions
        - LP: #690730
      * Staging: samsung-laptop: fix up some sysfs attribute permissions
        - LP: #690730
      * Staging: samsung-laptop: fix up my fixup for some sysfs attribute
        permissions
        - LP: #690730
      * Staging: frontier: fix up some sysfs attribute permissions
        - LP: #690730
      * staging: rtl8187se: Change panic to warn when RF switch turned off
        - LP: #690730
      * Staging: batman-adv: ensure that eth_type_trans gets linear memory
        - LP: #690730
      * perf: Fix inherit vs. context rotation bug
        - LP: #690730
      * ARM: 6456/1: Fix for building DEBUG with sa11xx_base.c as a module.
        - LP: #690730
      * PM / Hibernate: Fix memory corruption related to swap
        - LP: #690730
      * wmi: use memcmp instead of strncmp to compare GUIDs
        - LP: #690730
      * nohz/s390: fix arch_needs_cpu() return value on offline cpus
        - LP: #690730
      * genirq: Fix incorrect proc spurious output
        - LP: #690730
      * net: Truncate recvfrom and sendto length to INT_MAX.
        - LP: #690730
      * net: Limit socket I/O iovec total length to INT_MAX.
        - LP: #690730
      * Input: i8042 - add Sony VAIO VPCZ122GX to nomux list
        - LP: #690730
      * omap: dma: Fix buffering disable bit setting for omap24xx
        - LP: #690730
      * OMAP3: DMA: Errata i541: sDMA FIFO draining does not finish
        - LP: #690730
      * memory corruption in X.25 facilities parsing
        - LP: #690730
      * net: optimize Berkeley Packet Filter (BPF) processing
        - LP: #690730
      * filter: make sure filters dont read uninitialized memory
        - LP: #690730
      * can-bcm: fix minor heap overflow
        - LP: #690730
      * x25: Prevent crashing when parsing bad X.25 facilities
        - LP: #690730
      * crypto: padlock - Fix AES-CBC handling on odd-block-sized input
        - LP: #690730
      * rds: Integer overflow in RDS cmsg handling
        - LP: #690730
      * cfg80211: fix extension channel checks to initiate communication
        - LP: #690730
      * r8169: fix rx checksum offload
        - LP: #690730
      * r8169: (re)init phy on resume
        - LP: #690730
      * r8169: fix checksum broken
        - LP: #690730
      * nmi: fix clock comparator revalidation
        - LP: #690730
      * Rename 'pipe_info()' to 'get_pipe_info()'
        - LP: #690730
      * Export 'get_pipe_info()' to other users
        - LP: #690730
      * Un-inline get_pipe_info() helper function
        - LP: #690730
      * Release 2.6.35.10
        - LP: #690730
      * OMAP3: PRCM: Consider UART4 for 3630 chip in prcm_setup_regs
        - LP: #688765
      * OMAP clock: Add uart4_ick/fck definitions for 3630
        - LP: #688765
      * OMAP3: serial: Fix uart4 handling for 3630
        - LP: #688765
      * omap: serial: Fix the boot-up crash/reboot without CONFIG_PM
        - LP: #688765
      * OMAP: some definitions extracted from commit 046465b76a
        - LP: #688765
      * omap3: Unify omap2_set_globals_3[43,6x]x functions
        - LP: #688765
      * ALSA: HDA: Quirk for Dell Vostro 320 to make microphone work
        - LP: #497546
      * tcp: Increase TCP_MAXSEG socket option minimum.
        - CVE-2010-4165
      * af_unix: limit unix_tot_inflight
        - CVE-2010-4249
    
    linux (2.6.35-24.42) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      - LP: #683422
    
      [ Colin Ian King ]
    
      * SAUCE: Allow registration of handler to multiple WMI events with same
        GUID
        - LP: #676997
      * SAUCE: Add WMI hotkeys support for Dell All-In-One series
        - LP: #676997
      * [Config] Enable Dell All-In-One WMI Hotkeys driver
        - LP: #676997
    
      [ David Woodhouse ]
    
      * [Upstream] Call acpi_video_register() in intel_opregion_init() failure
        path
        - LP: #615947
    
      [ Manoj Iyer ]
    
      * SAUCE: enable rfkill for rtl8192se driver
        - LP: #640992
      * SAUCE: Enable jack sense for Thinkpad Edge 11
        - LP: #677210
    
      [ Tim Gardner ]
    
      * [Config] Use correct be2iscsi module name in d-i/modules/scsi-modules
        - LP: #628776
      * [Config] Added NFS and related modules to virtual flavour
        - LP: #659084
      * [Config] Add support for cross compiling armel
      * Simplify the use of CROSS_COMPILER
    
      [ Upstream Kernel Changes ]
    
      * Revert "(pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
        PCIEXP_WAKE_STS on resume"
      * Revert "(pre-stable) mm: Move vma_stack_continue into mm.h"
      * x86, cpu: After uncapping CPUID, re-run CPU feature detection
        - LP: #672664
      * ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
        - LP: #672664
      * ALSA: oxygen: fix analog capture on Claro halo cards
        - LP: #672664
      * ALSA: hda - Add Dell Latitude E6400 model quirk
        - LP: #643891, #672664
      * ALSA: prevent heap corruption in snd_ctl_new()
        - LP: #672664
      * ALSA: rawmidi: fix oops (use after free) when unloading a driver module
        - LP: #672664
      * hwmon: (lis3) Fix Oops with NULL platform data
        - LP: #672664
      * USB: fix bug in initialization of interface minor numbers
        - LP: #672664
      * usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX
        style
        - LP: #672664
      * usb: musb: gadget: restart request on clearing endpoint halt
        - LP: #672664
      * HID: hidraw, fix a NULL pointer dereference in hidraw_ioctl
        - LP: #672664
      * HID: hidraw, fix a NULL pointer dereference in hidraw_write
        - LP: #672664
      * ahci: fix module refcount breakage introduced by libahci split
        - LP: #672664
      * lib/list_sort: do not pass bad pointers to cmp callback
        - LP: #672664
      * ACPI: invoke DSDT corruption workaround on all Toshiba Satellite
        - LP: #672664
      * oprofile: Add Support for Intel CPU Family 6 / Model 29
        - LP: #672664
      * oprofile, ARM: Release resources on failure
        - LP: #672664
      * RDMA/cxgb3: Turn off RX coalescing for iWARP connections
        - LP: #672664
      * drm/radeon/kms: fix bad cast/shift in evergreen.c
        - LP: #672664
      * drm/radeon/kms: avivo cursor workaround applies to evergreen as well
        - LP: #672664
      * ARM: 6400/1: at91: fix arch_gettimeoffset fallout
        - LP: #672664
      * ARM: 6395/1: VExpress: Set bit 22 in the PL310 (cache controller)
        AuxCtlr register
        - LP: #672664
      * V4L/DVB: gspca - main: Fix a crash of some webcams on ARM arch
        - LP: #672664
      * V4L/DVB: gspca - sn9c20x: Bad transfer size of Bayer images
        - LP: #672664
      * mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
        - LP: #672664
      * x86/amd-iommu: Set iommu configuration flags in enable-loop
        - LP: #672664
      * x86/amd-iommu: Fix rounding-bug in __unmap_single
        - LP: #672664
      * x86/amd-iommu: Work around S3 BIOS bug
        - LP: #672664
      * tracing/x86: Don't use mcount in pvclock.c
        - LP: #672664
      * tracing/x86: Don't use mcount in kvmclock.c
        - LP: #672664
      * ksm: fix bad user data when swapping
        - LP: #672664
      * i7core_edac: fix panic in udimm sysfs attributes registration
        - LP: #672664
      * v4l1: fix 32-bit compat microcode loading translation
        - LP: #672664
      * V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
        - LP: #672664
      * V4L/DVB: IR: fix keys beeing stuck down forever
        - LP: #672664
      * V4L/DVB: Don't identify PV SBTVD Hybrid as a DibCom device
        - LP: #672664
      * Input: joydev - fix JSIOCSAXMAP ioctl
        - LP: #672664
      * Input: wacom - fix pressure in Cintiq 21UX2
        - LP: #672664
      * ioat2: fix performance regression
        - LP: #672664
      * mac80211: fix use-after-free
        - LP: #672664
      * x86, hpet: Fix bogus error check in hpet_assign_irq()
        - LP: #672664
      * x86, irq: Plug memory leak in sparse irq
        - LP: #672664
      * ubd: fix incorrect sector handling during request restart
        - LP: #672664
      * OSS: soundcard: locking bug in sound_ioctl()
        - LP: #672664
      * virtio-blk: fix request leak.
        - LP: #672664
      * ring-buffer: Fix typo of time extends per page
        - LP: #672664
      * dmaengine: fix interrupt clearing for mv_xor
        - LP: #672664
      * drivers/gpu/drm/i915/i915_gem.c: Add missing error handling code
        - LP: #672664
      * hrtimer: Preserve timer state in remove_hrtimer()
        - LP: #672664
      * i2c-pca: Fix waitforcompletion() return value
        - LP: #672664
      * reiserfs: fix dependency inversion between inode and reiserfs mutexes
        - LP: #672664
      * reiserfs: fix unwanted reiserfs lock recursion
        - LP: #672664
      * mfd: Ignore non-GPIO IRQs when setting wm831x IRQ types
        - LP: #672664
      * wext: fix potential private ioctl memory content leak
        - LP: #672664
      * atl1: fix resume
        - LP: #672664
      * x86, numa: For each node, register the memory blocks actually used
        - LP: #672664
      * x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
        - LP: #672664
      * firewire: ohci: fix TI TSB82AA2 regression since 2.6.35
        - LP: #672664
      * De-pessimize rds_page_copy_user
        - LP: #672664
      * drm/i915: Prevent module unload to avoid random memory corruption
        - LP: #672664
      * drm/i915: fix GMCH power reporting
        - LP: #672664
      * drm: Prune GEM vma entries
        - LP: #672664
      * drm: Hold the mutex when dropping the last GEM reference (v2)
        - LP: #672664
      * drm/radeon: fix PCI ID 5657 to be an RV410
        - LP: #672664
      * drm/radeon/kms: fix possible sigbus in evergreen accel code
        - LP: #672664
      * drm/radeon/kms: fix up encoder info messages for DFP6
        - LP: #672664
      * drm/radeon/kms: fix potential segfault in r600_ioctl_wait_idle
        - LP: #672664
      * drm/radeon/kms: add quirk for MSI K9A2GM motherboard
        - LP: #672664
      * mmc: sdio: fix SDIO suspend/resume regression
        - LP: #672664
      * V4L/DVB: dib7770: enable the current mirror
        - LP: #672664
      * xfs: properly account for reclaimed inodes
        - LP: #672664
      * skge: add quirk to limit DMA
        - LP: #672664
      * r8169: allocate with GFP_KERNEL flag when able to sleep
        - LP: #672664
      * KVM: i8259: fix migration
        - LP: #672664
      * KVM: x86: Fix SVM VMCB reset
        - LP: #672664
      * KVM: x86: Move TSC reset out of vmcb_init
        - LP: #672664
      * KVM: fix irqfd assign/deassign race
        - LP: #672664
      * KVM: Fix reboot on Intel hosts
        - LP: #672664
      * bsg: fix incorrect device_status value
        - LP: #672664
      * Fix VPD inquiry page wrapper
        - LP: #672664
      * virtio: console: Don't block entire guest if host doesn't read data
        - LP: #672664
      * ACPI: Handle ACPI0007 Device in acpi_early_set_pdc
        - LP: #672664
      * powerpc: Initialise paca->kstack before early_setup_secondary
        - LP: #672664
      * powerpc: Don't use kernel stack with translation off
        - LP: #672664
      * b44: fix carrier detection on bind
        - LP: #672664
      * ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on
        resume
        - LP: #613381, #672664
      * ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite
        L355
        - LP: #672664
      * ACPI: delete ZEPTO idle=nomwait DMI quirk
        - LP: #672664
      * ACPI: Disable Windows Vista compatibility for Toshiba P305D
        - LP: #672664
      * PM / ACPI: Blacklist systems known to require acpi_sleep=nonvs
        - LP: #672664
      * x86: detect scattered cpuid features earlier
        - LP: #672664
      * agp/intel: Fix cache control for Sandybridge
        - LP: #672664
      * x86-32: Separate 1:1 pagetables from swapper_pg_dir
        - LP: #672664
      * x86-32: Fix dummy trampoline-related inline stubs
        - LP: #672664
      * x86, mm: Fix CONFIG_VMSPLIT_1G and 2G_OPT trampoline
        - LP: #672664
      * setup_arg_pages: diagnose excessive argument size
        - LP: #672664
      * execve: improve interactivity with large arguments
        - LP: #672664
      * execve: make responsive to SIGKILL with large arguments
        - LP: #672664
      * mm: Move vma_stack_continue into mm.h
        - LP: #672664
      * Linux 2.6.35.8
        - LP: #672664
      * SRU:[Config] Disable inte_idle for -virtual kernels
        - LP: #651370
      * smsc95xx: generate random MAC address once, not every ifup
        - LP: #673504, #673509
      * ALSA: HDA: Enable SKU quirks for Realtek
        - LP: #617647
      * ALSA: HDA: Apply SKU override for Acer aspire 7736z
        - LP: #617647
      * net: clear heap allocation for ETHTOOL_GRXCLSRLALL
        - CVE-2010-3861
      * ipc: shm: fix information leak to userland
        - CVE-2010-4072
      * drm/i915: Avoid pageflipping freeze when we miss the flip prepare
        interrupt
        - LP: #680204
      * ALSA: HDA: Add an extra DAC for Realtek ALC887-VD
        - LP: #682596
      * ALSA: hda - Fixed ALC887-VD initial error
        - LP: #682596
    
    linux (2.6.35-23.41) maverick-security; urgency=low
    
      [ Leann Ogasawara ]
    
      * SAUCE: AF_ECONET prevent kernel stack overflow
        - CVE-2010-3848
      * SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges
        - CVE-2010-3850
      * SAUCE: AF_ECONET saddr->cookie prevent NULL pointer dereference
        - CVE-2010-3849
    
    linux (2.6.35-23.40) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * No change rebuild.
    
    linux (2.6.35-23.39) maverick-proposed; urgency=low
    
      [ Brad Figg ]
        - LP: #676214
    
      [ Ricardo Salveti de Araujo ]
    
      * SAUCE: ARM: OMAP3: beagle: use GPIO2 on the xM A3 to turn DVI on
        - LP: #663642
    
    linux (2.6.35-23.38) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * Revert "SAUCE: ARM: OMAP3: beagle: use GPIO2 on the xM A3 to turn DVI
        on"
    
      [ Upstream Kernel Changes ]
    
      * Revert "(upstream) ALSA: hda - Apply ALC269 VAIO fix-up to all Sony
        laptops with ALC269"
      * Revert "ALSA: HDA: Correctly apply position_fix quirks for ATI and VIA
        controllers"
      * Buglink Fixup for reverted unverified fixes
    
    linux (2.6.35-23.37) maverick-proposed; urgency=low
    
      [ Brad Figg ]
    
      * ARM: Temporarily disable module check for armel
    
    linux (2.6.35-23.36) maverick-proposed; urgency=low
    
      [ Andy Whitcroft ]
    
      * reduce disk usage during buildd builds
        - LP: #645653
    
      [ Brad Figg ]
    
      * ARM: Temporarily disable module check for armel
    
      [ Enric Balletbo i Serra ]
    
      * ARM: igepv2: Adding support for VBUS and overcurrent
        - LP: #651589
      * ARM: igepv2: Fix and improve LED handling
        - LP: #654582
      * ARM: igepv2: Introduce function to dectect HW version
        - LP: #654586
      * ARM: igepv2: Fix handling of GPIOs for WLAN-BT combo
        - LP: #654590
      * ARM: igepv2: Add i2c eeprom driver to read EDID
        - LP: #654594
      * ARM: igepv2: Remove VMMC2 regulator
        - LP: #654595
    
      [ Leann Ogasawara ]
    
      * ARM: Temporarily disable module check for armel
    
      [ Mathieu Poirier ]
    
      * SAUCE: ARM: Add DSS2 support for Overo board
        - LP: #660811
    
      [ Maurus Cuelenaere ]
    
      * SAUCE: ARM: OMAP3: Add S-Video output to IGEPv2 board
        - LP: #607250
    
      [ Ricardo Salveti de Araujo ]
    
      * [Config] Remove CONFIG_FIXED_PHY and move CONFIG_SMSC911X from m to y
        for omap
        - LP: #645689
      * SAUCE: ARM: OMAP3: Adding vdd_sdi regulator supply to IGEPv2 board
        - LP: #607250
      * SAUCE: ARM: OMAP3: beagle: use GPIO2 on the xM A3 to turn DVI on
        - See: #663642
    
      [ Upstream Kernel Changes ]
    
      * Revert "(pre-stable) ALSA: HDA: Use model=auto for LG R510"
      * Revert "(pre-stable) ALSA: hda - Rename iMic to Int Mic on Lenovo
        NB0763"
      * Revert "Input: appletouch - fix integer overflow issue"
      * Revert "ALSA: hda - Handle pin NID 0x1a on ALC259/269"
      * Revert "ALSA: hda - Handle missing NID 0x1b on ALC259 codec"
      * Revert "(pre-stable) ALSA: hda - Add a new hp-laptop model for Conexant
        5066, tested on HP G60"
      * Revert "mmc: build fix: mmc_pm_notify is only available with
        CONFIG_PM=y"
      * Revert "mmc: fix all hangs related to mmc/sd card insert/removal during
        suspend/resume"
      * Revert "(pre-stable) bounce: call flush_dcache_page() after
        bounce_copy_vec()"
      * Revert "Input: i8042 - reset keyboard controller wehen resuming from
        S2R"
      * Revert "ALSA: HDA: Enable internal speaker on Dell M101z"
      * Revert "(pre-stable) drm/i915: don't enable self-refresh on Ironlake"
      * Revert "drm/i915: Allow LVDS on pipe A on gen4+"
      * (pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
        PCIEXP_WAKE_STS on resume
        - LP: #613381
      * (upstream) ALSA: hda - Apply ALC269 VAIO fix-up to all Sony laptops
        with ALC269
        - See: #546769, #598938, #637291, #642892, #648871, #655386
      * hwmon: (ads7871) Fix ads7871_probe error paths
      * hwmon: (k8temp) Differentiate between AM2 and ASB1
      * xen: handle events as edge-triggered
      * xen: use percpu interrupts for IPIs and VIRQs
      * xfs: fix untrusted inode number lookup
      * xfs: ensure we mark all inodes in a freed cluster XFS_ISTALE
      * ALSA: HDA: Use model=auto for LG R510
        - LP: #495134
      * ALSA: hda - Rename iMic to Int Mic on Lenovo NB0763
        - LP: #605101
      * libata-sff: remove harmful BUG_ON from ata_bmdma_qc_issue
      * sata_mv: fix broken DSM/TRIM support (v2)
      * pata_cmd64x: revert commit d62f5576
      * writeback: write_cache_pages doesn't terminate at nr_to_write <= 0
      * x86, tsc, sched: Recompute cyc2ns_offset's during resume from sleep
        states
      * perf, x86, Pentium4: Clear the P4_CCCR_FORCE_OVF flag
      * netfilter: fix CONFIG_COMPAT support
      * PCI: MSI: Remove unsafe and unnecessary hardware access
      * PCI: MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc()
      * direct-io: move aio_complete into ->end_io
      * ext4: move aio completion after unwritten extent conversion
      * xfs: move aio completion after unwritten extent conversion
      * ALSA: hda - Handle missing NID 0x1b on ALC259 codec
      * ALSA: hda - Handle pin NID 0x1a on ALC259/269
      * Staging: rt2870sta: Add more device IDs from vendor drivers
      * staging: hv: Fix missing functions for net_device_ops
      * staging: hv: Fixed bounce kmap problem by using correct index
      * staging: hv: Fixed the value of the 64bit-hole inside ring buffer
      * staging: hv: Increased storvsc ringbuffer and max_io_requests
      * staging: hv: Fixed lockup problem with bounce_buffer scatter list
      * fuse: flush background queue on connection close
      * mac80211: delete work timer
      * ath9k_htc: Fix disconnect issue in HT40 mode.
      * ath9k_hw: Fix EEPROM uncompress block reading on AR9003
      * ath9k_hw: fix parsing of HT40 5 GHz CTLs
      * ocfs2: Fix incorrect checksum validation error
      * serial: bfin_sport_uart: restore transmit frame sync fix
      * USB: ehci-ppc-of: problems in unwind
      * USB: Fix kernel oops with g_ether and Windows
      * USB: CP210x Add new device ID
      * USB: cp210x: Add B&G H3000 link cable ID
      * usb: allow drivers to use allocated bandwidth until unbound
      * USB: ftdi_sio: Added custom PIDs for ChamSys products
      * usb: serial: mos7840: Add USB ID to support the B&B Electronics
        USOPTL4-2P.
      * usb: serial: mos7840: Add USB IDs to support more B&B USB/RS485
        converters.
      * ima: always maintain counters
      * USB: cxacru: Use a bulk/int URB to access the command endpoint
      * USB: cdc-acm: Adding second ACM channel support for various Nokia and
        one Samsung phones
      * USB: cdc-acm: Add pseudo modem without AT command capabilities
      * USB: cdc-acm: Fixing crash when ACM probing interfaces with no endpoint
        descriptors.
      * ALSA: hda - Add a new hp-laptop model for Conexant 5066, tested on HP
        G60
        - LP: #587388
      * ALSA: usb-audio: fix detection of vendor-specific device protocol
        settings
      * ALSA: virtuoso: work around missing reset in the Xonar DS Windows
        driver
      * ALSA: virtuoso: fix setting of Xonar DS line-in/mic-in controls
      * ALSA: usb - Release capture substream URBs properly
      * ALSA: hda - Add quirk for Lenovo T400s
      * ALSA: hda - Add errata initverb sequence for CS42xx codecs
      * ALSA: hda - Fix wrong HP pin detection in
        snd_hda_parse_pin_def_config()
      * ALSA: usb-audio: Assume first control interface is for audio
      * ALSA: hda - patch_nvhdmi.c: Add missing codec IDs, unify names
      * swap: prevent reuse during hibernation
      * swap: discard while swapping only if SWAP_FLAG_DISCARD
      * swap: do not send discards as barriers
      * sysfs: checking for NULL instead of ERR_PTR
      * oprofile: fix crash when accessing freed task structs
      * oprofile, x86: fix init_sysfs error handling
      * oprofile, x86: fix init_sysfs() function stub
      * HID: Set Report ID properly for Output reports on the Control endpoint.
      * libata: skip EH autopsy and recovery during suspend
      * libata,pata_via: revert ata_wait_idle() removal from
        ata_sff/via_tf_load()
      * ahci: fix hang on failed softreset
      * O_DIRECT: fix the splitting up of contiguous I/O
      * tracing: Fix a race in function profile
      * tracing: Do not allow llseek to set_ftrace_filter
      * tracing: t_start: reset FTRACE_ITER_HASH in case of seek/pread
      * irda: off by one
      * hp_accel: add quirks for HP ProBook 532x and HP Mini 5102
      * gcov: fix null-pointer dereference for certain module types
      * tmio_mmc: don't clear unhandled pending interrupts
      * mmc: fix the use of kunmap_atomic() in tmio_mmc.h
      * mmc: fix all hangs related to mmc/sd card insert/removal during
        suspend/resume
      * mmc: build fix: mmc_pm_notify is only available with CONFIG_PM=y
      * statfs() gives ESTALE error
      * minix: fix regression in minix_mkdir()
      * bounce: call flush_dcache_page() after bounce_copy_vec()
      * mm: compaction: handle active and inactive fairly in too_many_isolated
      * kernel/groups.c: fix integer overflow in groups_search
      * binfmt_misc: fix binfmt_misc priority
      * Input: i8042 - fix device removal on unload
      * Input: i8042 - reset keyboard controller wehen resuming from S2R
      * memory hotplug: fix next block calculation in is_removable
      * perf: Initialize callchains roots's childen hits
      * powerpc/perf_event: Reduce latency of calling perf_event_do_pending
      * p54: fix tx feedback status flag check
      * ath5k: check return value of ieee80211_get_tx_rate
      * RDMA/cxgb3: Don't exceed the max HW CQ depth
      * x86, tsc: Fix a preemption leak in restore_sched_clock_state()
      * ALSA: HDA: Enable internal speaker on Dell M101z
        - LP: #640254
      * x86: hpet: Work around hardware stupidity
      * arm: fix really nasty sigreturn bug
      * hwmon: (emc1403) Remove unnecessary hwmon_device_unregister
      * hwmon: (f75375s) Shift control mode to the correct bit position
      * hwmon: (f75375s) Do not overwrite values read from registers
      * apm_power: Add missing break statement
      * cifs: fix potential double put of TCP session reference
      * NFS: Fix a typo in nfs_sockaddr_match_ipaddr6
      * SUNRPC: Fix race corrupting rpc upcall
      * agp/intel: Promote warning about failure to setup flush to error.
      * drm/radeon/kms: fix a regression on r7xx AGP due to the HDP flush fix
      * drm/i915: Enable MI_FLUSH on Sandybridge
      * drm/radeon/kms: force legacy pll algo for RV515 LVDS
      * drm/radeon/kms: force legacy pll algo for RV620 LVDS
      * drm/radeon/kms: properly set crtc high base on r7xx
      * drm/radeon/kms/evergreen: fix gpu hangs in userspace accel code
      * drm/radeon/kms/evergreen: fix backend setup
      * i915: return -EFAULT if copy_to_user fails
      * i915_gem: return -EFAULT if copy_to_user fails
      * drm/i915/dp: Really try 5 times before giving up.
      * drm/i915: Allocate the PCI resource for the MCHBAR
      * drm/i915: overlay on gen2 can't address above 1G
      * drm/i915: Prevent double dpms on
      * drm/i915: don't enable self-refresh on Ironlake
      * drm: Only decouple the old_fb from the crtc is we call mode_set*
      * Linux 2.6.35.5
        - LP: #645522
      * usb: musb_debugfs: don't use the struct file private_data field with
        seq_files
      * USB: serial/mos*: prevent reading uninitialized stack memory
      * bridge: Clear INET control block of SKBs passed into ip_fragment().
      * gro: fix different skb headrooms
      * gro: Re-fix different skb headrooms
      * rds: fix a leak of kernel memory
      * net: RPS needs to depend upon USE_GENERIC_SMP_HELPERS
      * tcp: Combat per-cpu skew in orphan tests.
      * tcp: fix three tcp sysctls tuning
      * tcp: select(writefds) don't hang up when a peer close connection
      * tcp: Prevent overzealous packetization by SWS logic.
      * udp: add rehash on connect()
      * UNIX: Do not loop forever at unix_autobind().
      * l2tp: test for ethernet header in l2tp_eth_dev_recv()
      * net: blackhole route should always be recalculated
      * sparc64: Get rid of indirect p1275 PROM call buffer.
      * drivers/net/usb/hso.c: prevent reading uninitialized memory
      * drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack
        memory
      * drivers/net/eql.c: prevent reading uninitialized stack memory
      * bonding: correctly process non-linear skbs
      * Staging: vt6655: fix buffer overflow
      * net/llc: make opt unsigned in llc_ui_setsockopt()
      * mm: fix swapin race condition
      * mm: further fix swapin race condition
      * virtio: console: Prevent userspace from submitting NULL buffers
      * virtio: console: Fix poll blocking even though there is data to read
      * agp/intel: fix physical address mask bits for sandybridge
      * agp/intel: fix dma mask bits on sandybridge
      * hw breakpoints: Fix pid namespace bug
      * pid: make setpgid() system call use RCU read-side critical section
      * sched: Fix user time incorrectly accounted as system time on 32-bit
      * oprofile: Add Support for Intel CPU Family 6 / Model 22 (Intel Celeron
        540)
      * drm/i915,agp/intel: Add second set of PCI-IDs for B43
      * bdi: Initialize noop_backing_dev_info properly
      * char: Mark /dev/zero and /dev/kmem as not capable of writeback
      * drivers/pci/intel-iommu.c: fix build with older gcc's
      * mmap: call unlink_anon_vmas() in __split_vma() in case of error
      * drivers/video/sis/sis_main.c: prevent reading uninitialized stack
        memory
      * rtc: s3c: balance state changes of wakeup flag
      * Prevent freeing uninitialized pointer in compat_do_readv_writev
      * /proc/vmcore: fix seeking
      * vmscan: check all_unreclaimable in direct reclaim path
      * percpu: fix pcpu_last_unit_cpu
      * aio: do not return ERESTARTSYS as a result of AIO
      * aio: check for multiplication overflow in do_io_submit
      * x86 platform drivers: hp-wmi Reorder event id processing
      * GFS2: gfs2_logd should be using interruptible waits
      * drm/nv50: initialize ramht_refs list for faked 0 channel
      * inotify: send IN_UNMOUNT events
      * SCSI: mptsas: fix hangs caused by ATA pass-through
      * KVM: Keep slot ID in memory slot structure
      * KVM: Prevent internal slots from being COWed
      * KVM: MMU: fix direct sp's access corrupted
      * KVM: x86: emulator: inc/dec can have lock prefix
      * KVM: MMU: fix mmu notifier invalidate handler for huge spte
      * KVM: VMX: Fix host GDT.LIMIT corruption
      * IA64: fix siglock
      * IA64: Optimize ticket spinlocks in fsys_rt_sigprocmask
      * xfs: prevent reading uninitialized stack memory
      * drivers/video/via/ioctl.c: prevent reading uninitialized stack memory
      * AT91: change dma resource index
      * PM: Prevent waiting forever on asynchronous resume after failing
        suspend
      * PM / Hibernate: Avoid hitting OOM during preallocation of memory
      * x86, asm: Use a lower case name for the end macro in atomic64_386_32.S
      * Fix call to replaced SuperIO functions
      * mm: page allocator: drain per-cpu lists after direct reclaim allocation
        fails
      * mm: page allocator: calculate a better estimate of NR_FREE_PAGES when
        memory is low and kswapd is awake
      * mm: page allocator: update free page counters after pages are placed on
        the free list
      * guard page for stacks that grow upwards
      * Fix unprotected access to task credentials in waitid()
      * sctp: Do not reset the packet during sctp_packet_config().
      * drm/i915: Ensure that the crtcinfo is populated during mode_fixup()
      * alpha: Fix printk format errors
      * Linux 2.6.35.6
        - LP: #649208
      * Xen: fix typo in previous patch
      * Linux 2.6.35.7
        - LP: #651425
      * ALSA: HDA: Correctly apply position_fix quirks for ATI and VIA
        controllers
        - See: #465942, #580749, #587546
      * ALSA: hda - add ideapad model for Conexant 5051 codec
      * intel_ips: potential null dereference
      * drm/i915: Silence sparse over duplicate members in static initializer
        - LP: #663442
      * drm/i915: Use 128k alignment for untiled display surface on i965 (v2)
        - LP: #663442
      * drm/i915: Include a generation number in the device info
        - LP: #663442
      * drm/i915: Fix Sandybridge fence registers
        - LP: #663442
      * drm/i915/suspend: s/IS_IRONLAKE/HAS_PCH_SPLIT/
        - LP: #663442
      * drm/i915: Fix 945GM regression in e259befd
        - LP: #663442
      * hwmon: coretemp: update hotplug condition check
        - LP: #664181
      * hwmon: coretemp: enable coretemp device add operation failure
        - LP: #664181
      * drivers/hwmon/coretemp.c: remove unneeded #ifdef CONFIG_HOTPLUG_CPU
        - LP: #664181
      * fix "hwmon: coretemp: update hotplug condition check"
        - LP: #664181
      * hwmon: (coretemp) Fix harmless build warning
        - LP: #664181
      * x86/hwmon: fix module init for hotplug-but-no-device-found case
        - LP: #664181
      * x86/hwmon: fix initialization of coretemp
        - LP: #664181
      * x86/hwmon: register alternate sibling upon CPU removal
        - LP: #664181
      * hwmon (coretemp): Fix build breakage if SMP is undefined
        - LP: #664181
      * x86/hwmon: avoid deadlock on CPU removal in pkgtemp
        - LP: #664181
      * x86/hwmon: don't leak device attribute file from pkgtemp_probe() and
        pkgtemp_remove()
        - LP: #664181
      * x86/hwmon: fix initialization of pkgtemp
        - LP: #664181
      * x86/hwmon: pkgtemp has no dependency on PCI
        - LP: #664181
    
    linux (2.6.35-22.35) maverick-security; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * v4l: disable dangerous buggy compat function
        - CVE-2010-2963
      * Local privilege escalation vulnerability in RDS sockets
        - CVE-2010-3904
     -- Steve Conklin <email address hidden>   Fri, 21 Jan 2011 10:30:04 -0800
  • linux-lts-backport-maverick (2.6.35-23.41~lucid1) lucid-proposed; urgency=low
    
      [ Tim Gardner ]
    
      * SRU tracking bug
        - LP: #684448
    
      [ Leann Ogasawara ]
    
      * SAUCE: AF_ECONET prevent kernel stack overflow
        - CVE-2010-3848
      * SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges
        - CVE-2010-3850
      * SAUCE: AF_ECONET saddr->cookie prevent NULL pointer dereference
        - CVE-2010-3849
     -- Leann Ogasawara <email address hidden>   Fri, 19 Nov 2010 15:23:52 -0800
  • linux-lts-backport-maverick (2.6.35-22.35~lucid1) lucid-proposed; urgency=low
    
      [ Upstream Kernel Changes ]
    
      * v4l: disable dangerous buggy compat function
        - CVE-2010-2963
      * Local privilege escalation vulnerability in RDS sockets
        - CVE-2010-3904
     -- Steve Conklin <email address hidden>   Thu, 14 Oct 2010 13:33:49 -0500
  • linux-lts-backport-maverick (2.6.35-22.34~lucid1) lucid-proposed; urgency=low
    
      [ Tim Gardner ]
    
      * First upload according to https://wiki.ubuntu.com/KernelTeam/Specs/KernelMaverickNewKernelOnLTS
    
      [ John Johansen ]
    
      * SAUCE: Return correct error code for mediated network connections
        - LP: #647071
    
      [ Upstream Kernel Changes ]
    
      * irda: Correctly clean up self->ias_obj on irda_bind() failure.
        - CVE-2010-2954
      * wireless extensions: fix kernel heap content leak
        - CVE-2010-2955
      * KEYS: Fix RCU no-lock warning in keyctl_session_to_parent()
        - CVE-2010-2960
      * KEYS: Fix bug in keyctl_session_to_parent() if parent has no session
        keyring
        - CVE-2010-2960
      * ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open()
        - CVE-2010-3080
      * intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot hang
        - LP: #634702
      * drm/i915: Rephrase pwrite bounds checking to avoid any potential
        overflow
        - CVE-2010-2962
      * drm/i915: Skip pread/pwrite if size to copy is 0.
        - CVE-2010-2962
      * drm/i915: Sanity check pread/pwrite
        - CVE-2010-2962
      * Fix pktcdvd ioctl dev_minor range check
        - CVE-2010-3437
      * Fix out-of-bounds reading in sctp_asoc_get_hmac()
        - CVE-2010-3705
      * ocfs2: Don't walk off the end of fast symlinks.
        - CVE-2010-NNN2
     -- Leann Ogasawara <email address hidden>   Mon, 20 Sep 2010 08:36:53 -0700