Branches for Lucid

Author: Stefan Bader
Revision Date: 2013-07-10 12:39:45 UTC

[ Stefan Bader ]

* Rebased to Ubuntu-2.6.32-50.112
* Release Tracking Bug
  - LP: #1199600

[ Ubuntu: 2.6.32-50.112 ]

* block: do not pass disk names as format strings
  - LP: #1189832
  - CVE-2013-2851
* drivers/cdrom/cdrom.c: use kzalloc() for failing hardware
  - LP: #1191463
  - CVE-2013-2164
* ipv6: ip6_sk_dst_check() must not assume ipv6 dst
  - LP: #1198293
  - CVE-2013-2232
* af_key: fix info leaks in notify messages
  - LP: #1198294
  - CVE-2013-2234
* af_key: initialize satype in key_notify_policy_flush()
  - LP: #1198296
  - CVE-2013-2237

Author: Stefan Bader
Revision Date: 2013-06-19 09:57:14 UTC

[ Stefan Bader ]

* Rebased to Ubuntu-2.6.32-49.111
* SAUCE: ec2: Backport x86/mm: Check if PUD is large when validating a
  kernel address
  - LP: #1193044
* SAUCE: ec2: Backport x86, ioapic: initialize nr_ioapic_registers early
  in mp_register_ioapic()
  - LP: #1193044
* Release Tracking Bug
  - LP: #1193202

[ Ubuntu: 2.6.32-49.111 ]

* Revert "pcdp: use early_ioremap/early_iounmap to access pcdp table"
  - LP: #1193044
* Revert "block: improve queue_should_plug() by looking at IO depths"
  - LP: #1193044
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
  - LP: #1187732
  - CVE-2013-2141
* b43: stop format string leaking into error msgs
  - LP: #1189833
  - CVE-2013-2852
* 2.6.32.y: timekeeping: Fix nohz issue with commit
  61b76840ddee647c0c223365378c3f394355b7d7
  - LP: #1193044
* clockevents: Don't allow dummy broadcast timers
  - LP: #1193044
* posix-cpu-timers: Fix nanosleep task_struct leak
  - LP: #1193044
* timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE
  - LP: #1193044
* tick: Cleanup NOHZ per cpu data on cpu down
  - LP: #1193044
* kbuild: Fix gcc -x syntax
  - LP: #1193044
* gen_init_cpio: avoid stack overflow when expanding
  - LP: #1193044
* coredump: prevent double-free on an error path in core dumper
  - LP: #1193044
* kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()
  - LP: #1193044
* ring-buffer: Fix race between integrity check and readers
  - LP: #1193044
* genalloc: stop crashing the system when destroying a pool
  - LP: #1193044
* kernel/resource.c: fix stack overflow in __reserve_region_with_split()
  - LP: #1193044
* Driver core: treat unregistered bus_types as having no devices
  - LP: #1193044
* cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()
  - LP: #1193044
* Fix a dead loop in async_synchronize_full()
  - LP: #1193044
* tracing: Don't call page_to_pfn() if page is NULL
  - LP: #1193044
* tracing: Fix double free when function profile init failed
  - LP: #1193044
* mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED
  - LP: #1193044
* mm: bugfix: set current->reclaim_state to NULL while returning from
  kswapd()
  - LP: #1193044
* mm: fix invalidate_complete_page2() lock ordering
  - LP: #1193044
* mempolicy: fix a race in shared_policy_replace()
  - LP: #1193044
* ALSA: hda - More ALC663 fixes and support of compatible chips
  - LP: #1193044
* ALSA: hda - Add a pin-fix for FSC Amilo Pi1505
  - LP: #1193044
* ALSA: seq: Fix missing error handling in snd_seq_timer_open()
  - LP: #1193044
* ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()
  - LP: #1193044
* x86, ioapic: initialize nr_ioapic_registers early in
  mp_register_ioapic()
  - LP: #1193044
* x86: Don't use the EFI reboot method by default
  - LP: #1193044
* x86, random: make ARCH_RANDOM prompt if EMBEDDED, not EXPERT
  - LP: #1193044
* x86/mm: Check if PUD is large when validating a kernel address
  - LP: #1193044
* x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates
  - LP: #1193044
* xen/bootup: allow read_tscp call for Xen PV guests.
  - LP: #1193044
* xen/bootup: allow {read|write}_cr8 pvops call.
  - LP: #1193044
* KVM: x86: relax MSR_KVM_SYSTEM_TIME alignment check
  - LP: #1193044
* KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
  (CVE-2012-4461)
  - LP: #1193044
* MCE: Fix vm86 handling for 32bit mce handler
  - LP: #1193044
* ACPI / cpuidle: Fix NULL pointer issues when cpuidle is disabled
  - LP: #1193044
* alpha: Add irongate_io to PCI bus resources
  - LP: #1193044
* PARISC: fix user-triggerable panic on parisc
  - LP: #1193044
* serial: 8250, increase PASS_LIMIT
  - LP: #1193044
* drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory
  overflow
  - LP: #1193044
* w1: fix oops when w1_search is called from netlink connector
  - LP: #1193044
* staging: comedi: ni_labpc: correct differential channel sequence for AI
  commands
  - LP: #1193044
* staging: comedi: ni_labpc: set up command4 register *after* command3
  - LP: #1193044
* staging: comedi: comedi_test: fix race when cancelling command
  - LP: #1193044
* staging: comedi: fix memory leak for saved channel list
  - LP: #1193044
* staging: comedi: s626: don't dereference insn->data
  - LP: #1193044
* staging: comedi: jr3_pci: fix iomem dereference
  - LP: #1193044
* staging: comedi: don't dereference user memory for INSN_INTTRIG
  - LP: #1193044
* staging: comedi: check s->async for poll(), read() and write()
  - LP: #1193044
* staging: comedi: das08: Correct AO output for das08jr-16-ao
  - LP: #1193044
* staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
  - LP: #1193044
* libata: fix Null pointer dereference on disk error
  - LP: #1193044
* scsi: Silence unnecessary warnings about ioctl to partition
  - LP: #1193044
* scsi: use __uX types for headers exported to user space
  - LP: #1193044
* fix crash in scsi_dispatch_cmd()
  - LP: #1193044
* SCSI: bnx2i: Fixed NULL ptr deference for 1G bnx2 Linux iSCSI offload
  - LP: #1193044
* crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
  data corruption
  - LP: #1193044
* xfrm_user: return error pointer instead of NULL #2
  - LP: #1193044
* r8169: correct settings of rtl8102e.
  - LP: #1193044
* r8169: remove the obsolete and incorrect AMD workaround
  - LP: #1193044
* r8169: Add support for D-Link 530T rev C1 (Kernel Bug 38862)
  - LP: #1193044
* r8169: incorrect identifier for a 8168dp
  - LP: #1193044
* b43legacy: Fix crash on unload when firmware not available
  - LP: #1193044
* tg3: Avoid null pointer dereference in tg3_interrupt in netconsole mode
  - LP: #1193044
* IPoIB: Fix use-after-free of multicast object
  - LP: #1193044
* telephony: ijx: buffer overflow in ixj_write_cid()
  - LP: #1193044
* Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)
  - LP: #1193044
* xhci: Make handover code more robust
  - LP: #1193044
* USB: whiteheat: fix memory leak in error path
  - LP: #1193044
* USB: serial: Fix memory leak in sierra_release()
  - LP: #1193044
* USB: mos7840: fix urb leak at release
  - LP: #1193044
* USB: mos7840: fix port-device leak in error path
  - LP: #1193044
* USB: garmin_gps: fix memory leak on disconnect
  - LP: #1193044
* USB: serial: ftdi_sio: Handle the old_termios == 0 case e.g.
  uart_resume_port()
  - LP: #1193044
* USB: ftdi_sio: Quiet sparse noise about using plain integer was NULL
  pointer
  - LP: #1193044
* epoll: prevent missed events on EPOLL_CTL_MOD
  - LP: #1193044
* fs/fscache/stats.c: fix memory leak
  - LP: #1193044
* sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
  - LP: #1193044
* jbd: Delay discarding buffers in journal_unmap_buffer
  - LP: #1193044
* jbd: Fix assertion failure in commit code due to lacking transaction
  credits
  - LP: #1193044
* jbd: Fix lock ordering bug in journal_unmap_buffer()
  - LP: #1193044
* ext4: Fix fs corruption when make_indexed_dir() fails
  - LP: #1193044
* ext4: don't dereference null pointer when make_indexed_dir() fails
  - LP: #1193044
* ext4: fix memory leak in ext4_xattr_set_acl()'s error path
  - LP: #1193044
* ext4: online defrag is not supported for journaled files
  - LP: #1193044
* ext4: always set i_op in ext4_mknod()
  - LP: #1193044
* ext4: fix fdatasync() for files with only i_size changes
  - LP: #1193044
* ext4: lock i_mutex when truncating orphan inodes
  - LP: #1193044
* ext4: fix race in ext4_mb_add_n_trim()
  - LP: #1193044
* ext4: limit group search loop for non-extent files
  - LP: #1193044
* CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure
  - LP: #1193044
  - CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure
* ext4: make orphan functions be no-op in no-journal mode
  - LP: #1193044
* ext4: avoid hang when mounting non-journal filesystems with orphan list
  - LP: #1193044
* udf: fix memory leak while allocating blocks during write
  - LP: #1193044
* udf: Fix bitmap overflow on large filesystems with small block size
  - LP: #1193044
* fs/cifs/cifs_dfs_ref.c: fix potential memory leakage
  - LP: #1193044
* fat: Fix stat->f_namelen
  - LP: #1193044
* hfsplus: fix potential overflow in hfsplus_file_truncate()
  - LP: #1193044
* btrfs: use rcu_barrier() to wait for bdev puts at unmount
  - LP: #1193044
* kernel panic when mount NFSv4
  - LP: #1193044
* nfsd4: fix oops on unusual readlike compound
  - LP: #1193044
* net/core: Fix potential memory leak in dev_set_alias()
  - LP: #1193044
* net: reduce net_rx_action() latency to 2 HZ
  - LP: #1193044
* softirq: reduce latencies
  - LP: #1193044
* af_packet: remove BUG statement in tpacket_destruct_skb
  - LP: #1193044
* bridge: set priority of STP packets
  - LP: #1193044
* bonding: Fix slave selection bug.
  - LP: #1193044
* ipv4: check rt_genid in dst_check
  - LP: #1193044
* net_sched: gact: Fix potential panic in tcf_gact().
  - LP: #1193044
* net: sched: integer overflow fix
  - LP: #1193044
* net: prevent setting ttl=0 via IP_TTL
  - LP: #1193044
* net: guard tcp_set_keepalive() to tcp sockets
  - LP: #1193044
* inet: add RCU protection to inet->opt
  - LP: #1193044
* tcp: allow splice() to build full TSO packets
  - LP: #1193044
* tcp: fix MSG_SENDPAGE_NOTLAST logic
  - LP: #1193044
* tcp: preserve ACK clocking in TSO
  - LP: #1193044
* unix: fix a race condition in unix_release()
  - LP: #1193044
* sctp: fix memory leak in sctp_datamsg_from_user() when copy from user
  space fails
  - LP: #1193044
* net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
  - LP: #1193044
* net: sctp: sctp_endpoint_free: zero out secret key data
  - LP: #1193044
* net: sctp: sctp_auth_key_put: use kzfree instead of kfree
  - LP: #1193044
* netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
  - LP: #1193044
* ipvs: allow transmit of GRO aggregated skbs
  - LP: #1193044
* ipvs: IPv6 MTU checking cleanup and bugfix
  - LP: #1193044
* isdnloop: fix and simplify isdnloop_init()
  - LP: #1193044
* mpt2sas: Send default descriptor for RAID pass through in mpt2ctl
  - LP: #1193044
* x86, ptrace: fix build breakage with gcc 4.7
  - LP: #1193044
* Linux 2.6.32.61
  - LP: #1193044

Author: Stefan Bader
Revision Date: 2013-06-19 09:57:14 UTC

[ Stefan Bader ]

* Rebased to Ubuntu-2.6.32-49.111
* SAUCE: ec2: Backport x86/mm: Check if PUD is large when validating a
  kernel address
  - LP: #1193044
* SAUCE: ec2: Backport x86, ioapic: initialize nr_ioapic_registers early
  in mp_register_ioapic()
  - LP: #1193044
* Release Tracking Bug
  - LP: #1193202

[ Ubuntu: 2.6.32-49.111 ]

* Revert "pcdp: use early_ioremap/early_iounmap to access pcdp table"
  - LP: #1193044
* Revert "block: improve queue_should_plug() by looking at IO depths"
  - LP: #1193044
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
  - LP: #1187732
  - CVE-2013-2141
* b43: stop format string leaking into error msgs
  - LP: #1189833
  - CVE-2013-2852
* 2.6.32.y: timekeeping: Fix nohz issue with commit
  61b76840ddee647c0c223365378c3f394355b7d7
  - LP: #1193044
* clockevents: Don't allow dummy broadcast timers
  - LP: #1193044
* posix-cpu-timers: Fix nanosleep task_struct leak
  - LP: #1193044
* timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE
  - LP: #1193044
* tick: Cleanup NOHZ per cpu data on cpu down
  - LP: #1193044
* kbuild: Fix gcc -x syntax
  - LP: #1193044
* gen_init_cpio: avoid stack overflow when expanding
  - LP: #1193044
* coredump: prevent double-free on an error path in core dumper
  - LP: #1193044
* kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()
  - LP: #1193044
* ring-buffer: Fix race between integrity check and readers
  - LP: #1193044
* genalloc: stop crashing the system when destroying a pool
  - LP: #1193044
* kernel/resource.c: fix stack overflow in __reserve_region_with_split()
  - LP: #1193044
* Driver core: treat unregistered bus_types as having no devices
  - LP: #1193044
* cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()
  - LP: #1193044
* Fix a dead loop in async_synchronize_full()
  - LP: #1193044
* tracing: Don't call page_to_pfn() if page is NULL
  - LP: #1193044
* tracing: Fix double free when function profile init failed
  - LP: #1193044
* mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED
  - LP: #1193044
* mm: bugfix: set current->reclaim_state to NULL while returning from
  kswapd()
  - LP: #1193044
* mm: fix invalidate_complete_page2() lock ordering
  - LP: #1193044
* mempolicy: fix a race in shared_policy_replace()
  - LP: #1193044
* ALSA: hda - More ALC663 fixes and support of compatible chips
  - LP: #1193044
* ALSA: hda - Add a pin-fix for FSC Amilo Pi1505
  - LP: #1193044
* ALSA: seq: Fix missing error handling in snd_seq_timer_open()
  - LP: #1193044
* ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()
  - LP: #1193044
* x86, ioapic: initialize nr_ioapic_registers early in
  mp_register_ioapic()
  - LP: #1193044
* x86: Don't use the EFI reboot method by default
  - LP: #1193044
* x86, random: make ARCH_RANDOM prompt if EMBEDDED, not EXPERT
  - LP: #1193044
* x86/mm: Check if PUD is large when validating a kernel address
  - LP: #1193044
* x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates
  - LP: #1193044
* xen/bootup: allow read_tscp call for Xen PV guests.
  - LP: #1193044
* xen/bootup: allow {read|write}_cr8 pvops call.
  - LP: #1193044
* KVM: x86: relax MSR_KVM_SYSTEM_TIME alignment check
  - LP: #1193044
* KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
  (CVE-2012-4461)
  - LP: #1193044
* MCE: Fix vm86 handling for 32bit mce handler
  - LP: #1193044
* ACPI / cpuidle: Fix NULL pointer issues when cpuidle is disabled
  - LP: #1193044
* alpha: Add irongate_io to PCI bus resources
  - LP: #1193044
* PARISC: fix user-triggerable panic on parisc
  - LP: #1193044
* serial: 8250, increase PASS_LIMIT
  - LP: #1193044
* drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory
  overflow
  - LP: #1193044
* w1: fix oops when w1_search is called from netlink connector
  - LP: #1193044
* staging: comedi: ni_labpc: correct differential channel sequence for AI
  commands
  - LP: #1193044
* staging: comedi: ni_labpc: set up command4 register *after* command3
  - LP: #1193044
* staging: comedi: comedi_test: fix race when cancelling command
  - LP: #1193044
* staging: comedi: fix memory leak for saved channel list
  - LP: #1193044
* staging: comedi: s626: don't dereference insn->data
  - LP: #1193044
* staging: comedi: jr3_pci: fix iomem dereference
  - LP: #1193044
* staging: comedi: don't dereference user memory for INSN_INTTRIG
  - LP: #1193044
* staging: comedi: check s->async for poll(), read() and write()
  - LP: #1193044
* staging: comedi: das08: Correct AO output for das08jr-16-ao
  - LP: #1193044
* staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
  - LP: #1193044
* libata: fix Null pointer dereference on disk error
  - LP: #1193044
* scsi: Silence unnecessary warnings about ioctl to partition
  - LP: #1193044
* scsi: use __uX types for headers exported to user space
  - LP: #1193044
* fix crash in scsi_dispatch_cmd()
  - LP: #1193044
* SCSI: bnx2i: Fixed NULL ptr deference for 1G bnx2 Linux iSCSI offload
  - LP: #1193044
* crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
  data corruption
  - LP: #1193044
* xfrm_user: return error pointer instead of NULL #2
  - LP: #1193044
* r8169: correct settings of rtl8102e.
  - LP: #1193044
* r8169: remove the obsolete and incorrect AMD workaround
  - LP: #1193044
* r8169: Add support for D-Link 530T rev C1 (Kernel Bug 38862)
  - LP: #1193044
* r8169: incorrect identifier for a 8168dp
  - LP: #1193044
* b43legacy: Fix crash on unload when firmware not available
  - LP: #1193044
* tg3: Avoid null pointer dereference in tg3_interrupt in netconsole mode
  - LP: #1193044
* IPoIB: Fix use-after-free of multicast object
  - LP: #1193044
* telephony: ijx: buffer overflow in ixj_write_cid()
  - LP: #1193044
* Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)
  - LP: #1193044
* xhci: Make handover code more robust
  - LP: #1193044
* USB: whiteheat: fix memory leak in error path
  - LP: #1193044
* USB: serial: Fix memory leak in sierra_release()
  - LP: #1193044
* USB: mos7840: fix urb leak at release
  - LP: #1193044
* USB: mos7840: fix port-device leak in error path
  - LP: #1193044
* USB: garmin_gps: fix memory leak on disconnect
  - LP: #1193044
* USB: serial: ftdi_sio: Handle the old_termios == 0 case e.g.
  uart_resume_port()
  - LP: #1193044
* USB: ftdi_sio: Quiet sparse noise about using plain integer was NULL
  pointer
  - LP: #1193044
* epoll: prevent missed events on EPOLL_CTL_MOD
  - LP: #1193044
* fs/fscache/stats.c: fix memory leak
  - LP: #1193044
* sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
  - LP: #1193044
* jbd: Delay discarding buffers in journal_unmap_buffer
  - LP: #1193044
* jbd: Fix assertion failure in commit code due to lacking transaction
  credits
  - LP: #1193044
* jbd: Fix lock ordering bug in journal_unmap_buffer()
  - LP: #1193044
* ext4: Fix fs corruption when make_indexed_dir() fails
  - LP: #1193044
* ext4: don't dereference null pointer when make_indexed_dir() fails
  - LP: #1193044
* ext4: fix memory leak in ext4_xattr_set_acl()'s error path
  - LP: #1193044
* ext4: online defrag is not supported for journaled files
  - LP: #1193044
* ext4: always set i_op in ext4_mknod()
  - LP: #1193044
* ext4: fix fdatasync() for files with only i_size changes
  - LP: #1193044
* ext4: lock i_mutex when truncating orphan inodes
  - LP: #1193044
* ext4: fix race in ext4_mb_add_n_trim()
  - LP: #1193044
* ext4: limit group search loop for non-extent files
  - LP: #1193044
* CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure
  - LP: #1193044
  - CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure
* ext4: make orphan functions be no-op in no-journal mode
  - LP: #1193044
* ext4: avoid hang when mounting non-journal filesystems with orphan list
  - LP: #1193044
* udf: fix memory leak while allocating blocks during write
  - LP: #1193044
* udf: Fix bitmap overflow on large filesystems with small block size
  - LP: #1193044
* fs/cifs/cifs_dfs_ref.c: fix potential memory leakage
  - LP: #1193044
* fat: Fix stat->f_namelen
  - LP: #1193044
* hfsplus: fix potential overflow in hfsplus_file_truncate()
  - LP: #1193044
* btrfs: use rcu_barrier() to wait for bdev puts at unmount
  - LP: #1193044
* kernel panic when mount NFSv4
  - LP: #1193044
* nfsd4: fix oops on unusual readlike compound
  - LP: #1193044
* net/core: Fix potential memory leak in dev_set_alias()
  - LP: #1193044
* net: reduce net_rx_action() latency to 2 HZ
  - LP: #1193044
* softirq: reduce latencies
  - LP: #1193044
* af_packet: remove BUG statement in tpacket_destruct_skb
  - LP: #1193044
* bridge: set priority of STP packets
  - LP: #1193044
* bonding: Fix slave selection bug.
  - LP: #1193044
* ipv4: check rt_genid in dst_check
  - LP: #1193044
* net_sched: gact: Fix potential panic in tcf_gact().
  - LP: #1193044
* net: sched: integer overflow fix
  - LP: #1193044
* net: prevent setting ttl=0 via IP_TTL
  - LP: #1193044
* net: guard tcp_set_keepalive() to tcp sockets
  - LP: #1193044
* inet: add RCU protection to inet->opt
  - LP: #1193044
* tcp: allow splice() to build full TSO packets
  - LP: #1193044
* tcp: fix MSG_SENDPAGE_NOTLAST logic
  - LP: #1193044
* tcp: preserve ACK clocking in TSO
  - LP: #1193044
* unix: fix a race condition in unix_release()
  - LP: #1193044
* sctp: fix memory leak in sctp_datamsg_from_user() when copy from user
  space fails
  - LP: #1193044
* net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
  - LP: #1193044
* net: sctp: sctp_endpoint_free: zero out secret key data
  - LP: #1193044
* net: sctp: sctp_auth_key_put: use kzfree instead of kfree
  - LP: #1193044
* netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
  - LP: #1193044
* ipvs: allow transmit of GRO aggregated skbs
  - LP: #1193044
* ipvs: IPv6 MTU checking cleanup and bugfix
  - LP: #1193044
* isdnloop: fix and simplify isdnloop_init()
  - LP: #1193044
* mpt2sas: Send default descriptor for RAID pass through in mpt2ctl
  - LP: #1193044
* x86, ptrace: fix build breakage with gcc 4.7
  - LP: #1193044
* Linux 2.6.32.61
  - LP: #1193044

Author: Andy Whitcroft
Revision Date: 2010-04-14 13:09:10 UTC

[ Andy Whitcroft ]

* rebase to Ubuntu-2.6.32-21.31
* SAUCE: xen -- TSC is not available under XEN

[ John Johansen ]

* [Config] enable NETFILTER_XT_MATCH_RECENT for ec2 kernels
  - LP: #532553

[ Ubuntu: 2.6.32-21.31 ]

* allow modules.builtin to be optional
* d-i: add mpt2sas to the message-modules udeb
  - LP: #530361
* SAUCE: Nouveau: Add quirk framework to disable acceleration
  - LP: #544088, #546393
* SAUCE: Nouveau: Disable acceleration on MacBook Pros
  - LP: #546393
* SAUCE: Nouveau: Disable acceleration on GeForce3 cards
  - LP: #544088
* SAUCE: Nouveau: Disable acceleration on 6100 cards
  - LP: #542950
* SAUCE: dma-mapping: Remove WARN_ON in dma_free_coherent
  - LP: #458201
* SAUCE: sync before umount to reduce time taken by ext4 umount
  - LP: #543617
* tipc: Fix oops on send prior to entering networked mode (v3)
  - CVE-2010-1187
* KVM: x86 emulator: Add Virtual-8086 mode of emulation
  - LP: #561425
* KVM: x86 emulator: fix memory access during x86 emulation
  - LP: #561425
* KVM: x86 emulator: Check IOPL level during io instruction emulation
  - LP: #561425
* KVM: x86 emulator: Fix popf emulation
  - LP: #561425
* KVM: Fix segment descriptor loading
  - LP: #561425
* KVM: VMX: Update instruction length on intercepted BP
  - LP: #561425
* KVM: VMX: Use macros instead of hex value on cr0 initialization
  - LP: #561425
* KVM: SVM: Reset cr0 properly on vcpu reset
  - LP: #561425
* KVM: VMX: Disable unrestricted guest when EPT disabled
  - LP: #561425
* KVM: x86: disable paravirt mmu reporting
  - LP: #561425
* AppArmor: Fix put of unassigned ns if aa_unpack fails
* AppArmor: Fix refcount bug when exec fails
  - LP: #562063
* AppArmor: Take refcount on cxt->profile to ensure it remains a valid
  reference
  - LP: #367499
* AppArmor: fix typo in scrubbing environment variable warning
  - LP: #562060
* AppArmor: fix regression by setting default to mediate deleted files
  - LP: #562056
* AppArmor: fix refcount order bug that can trigger during replacement
  - LP: #367499
* AppArmor: Make sure to unmap aliases for vmalloced dfas before they are
  live
  - LP: #529288
* AppArmor: address performance regression of replaced profile
  - LP: #549428
* AppArmor: make the global side the correct type
  - LP: #562047
* AppArmor: use the kernel shared workqueue to free vmalloc'ed dfas
* sky2: add register definitions for new chips
  - LP: #537168
* sky2: 88E8059 support
  - LP: #537168
* net: Fix Yukon-2 Optima TCP offload setup
  - LP: #537168
* net: Add missing TST_CFG_WRITE bits around sky2_pci_write
  - LP: #537168
* sky2: print Optima chip name
  - LP: #537168
* (Upstream) dell-laptop: defer dell_rfkill_update to worker thread
  - LP: #555261
* drm/nv40: add LVDS table quirk for Dell Latitude D620
  - LP: #539730

[ Ubuntu: 2.6.32-20.30 ]

* Revert "(pre-stable) ACPI: EC: Allow multibyte access to EC"
  - LP: #561151

[ Ubuntu: 2.6.32-20.29 ]

* Revert "SAUCE: Use MODULE_IMPORT macro to tie intel_agp to i915"
  - LP: #542251
* add Breaks: against hardy lvm2
  - LP: #528155
* d-i -- enable udebs for generic-pae
  - LP: #160366
* [Config] Add xen netboot support
  - LP: #160366
* (pre-stable): input: Support Clickpad devices in ClickZone mode
  - LP: #516329
* Revert "(pre-stable) Bluetooth: Fix sleeping function in RFCOMM within
  invalid context"
  - LP: #553837
* Revert "(pre-stable) USB: fix usbfs regression"
  - LP: #553837
* Revert "(pre-stable) softlockup: Stop spurious softlockup messages due
  to overflow"
  - LP: #553837
* Revert "(pre-stable) drm/nouveau: report unknown connector state if lid
  closed"
  - LP: #553837
* drivers/scsi/ses.c: eliminate double free
  - LP: #553837
* decompress: fix new decompressor for PIC
  - LP: #553837
* ARM: Fix decompressor's kernel size estimation for ROM=y
  - LP: #553837
* MIPS: Cleanup forgotten label_module_alloc in tlbex.c
  - LP: #553837
* tg3: Fix tg3_poll_controller() passing wrong pointer to tg3_interrupt()
  - LP: #553837
* tg3: Fix 5906 transmit hangs
  - LP: #553837
* ALSA: hda - Fix input source elements of secondary ADCs on Realtek
  - LP: #553837
* ALSA: hda: enable MSI for Gateway M-6866
  - LP: #538918, #553837
* timekeeping: Prevent oops when GENERIC_TIME=n
  - LP: #553837
* Input: alps - add support for the touchpad on Toshiba Tecra A11-11L
  - LP: #553837
* Input: i8042 - add ALDI/MEDION netbook E1222 to qurik reset table
  - LP: #553837
* i2c-i801: Don't use the block buffer for I2C block writes
  - LP: #553837
* ath5k: dont use external sleep clock in AP mode
  - LP: #553837
* ath5k: fix setup for CAB queue
  - LP: #553837
* ring-buffer: Move disabled check into preempt disable section
  - LP: #553837
* function-graph: Init curr_ret_stack with ret_stack
  - LP: #553837
* Bluetooth: Fix sleeping function in RFCOMM within invalid context
  - LP: #553837
* tracing: Use same local variable when resetting the ring buffer
  - LP: #553837
* tracing: Disable buffer switching when starting or stopping trace
  - LP: #553837
* tracing: Do not record user stack trace from NMI context
  - LP: #553837
* PCI: unconditionally clear AER uncorr status register during cleanup
  - LP: #553837
* efifb: fix framebuffer handoff
  - LP: #553837
* coredump: suppress uid comparison test if core output files are pipes
  - LP: #553837
* V4L/DVB (13961): em28xx-dvb: fix memleak in dvb_fini()
  - LP: #553837
* hrtimer: Tune hrtimer_interrupt hang logic
  - LP: #553837
* x86, apic: Don't use logical-flat mode when CPU hotplug may exceed 8
  CPUs
  - LP: #553837
* mvsas: add support for Adaptec ASC-1045/1405 SAS/SATA HBA
  - LP: #553837
* pci: add support for 82576NS serdes to existing SR-IOV quirk
  - LP: #553837
* sched: Mark boot-cpu active before smp_init()
  - LP: #553837
* sparc64: Make prom entry spinlock NMI safe.
  - LP: #553837
* sysctl: require CAP_SYS_RAWIO to set mmap_min_addr
  - LP: #553837
* e1000e: enable new 82567V-3 device
  - LP: #553837
* ixgbe: add support for 82599 KR device 0x1517
  - LP: #553837
* ath9k: fix lockdep warning when unloading module
  - LP: #553837
* mqueue: fix mq_open() file descriptor leak on user-space processes
  - LP: #553837
* virtio: fix out of range array access
  - LP: #553837
* sched: Fix SCHED_MC regression caused by change in sched cpu_power
  - LP: #553837
* readahead: add blk_run_backing_dev
  - LP: #553837
* ALSA: hda: Use LPIB and 6stack-dig for eMachines T5212
  - LP: #538895, #553837
* ALSA: hda - Disable MSI for Nvidia controller
  - LP: #553837
* ALSA: hda - Fix secondary ADC of ALC260 basic model
  - LP: #553837
* ALSA: hda: Fix 0 dB offset for HP laptops using CX20551 (Waikiki)
  - LP: #420578, #553837
* ALSA: cmipci: work around invalid PCM pointer
  - LP: #553837
* gigaset: correct clearing of at_state strings on RING
  - LP: #553837
* gigaset: prune use of tty_buffer_request_room
  - LP: #553837
* perf: Make the install relative to DESTDIR if specified
  - LP: #553837
* perf_event: Fix oops triggered by cpu offline/online
  - LP: #553837
* tmpfs: fix oops on mounts with mpol=default
  - LP: #553837
* tmpfs: mpol=bind:0 don't cause mount error.
  - LP: #553837
* tmpfs: handle MPOL_LOCAL mount option properly
  - LP: #553837
* tmpfs: cleanup mpol_parse_str()
  - LP: #553837
* doc: add the documentation for mpol=local
  - LP: #553837
* SCSI: scsi_transport_fc: Fix synchronization issue while deleting vport
  - LP: #553837
* NFSv4: Don't ignore the NFS_INO_REVAL_FORCED flag in
  nfs_revalidate_inode()
  - LP: #553837
* NFS: Avoid a deadlock in nfs_release_page
  - LP: #553837
* NFS: Prevent another deadlock in nfs_release_page()
  - LP: #553837
* tty: Keep the default buffering to sub-page units
  - LP: #553837
* tty: Take a 256 byte padding into account when buffering below sub-page
  units
  - LP: #553837
* USB: fix usbfs regression
  - LP: #553837
* USB: EHCI: fix ITD list order
  - LP: #553837
* USB: EHCI: adjust ehci_iso_stream for changes in ehci_qh
  - LP: #553837
* USB: qcserial: add new device ids
  - LP: #553837
* USB: xHCI: re-initialize cmd_completion
  - LP: #553837
* USB: serial: ftdi: add CONTEC vendor and product id
  - LP: #553837
* USB: option: fix incorrect manufacturer name in usb/serial/option:
  MAXON->CMOTECH
  - LP: #553837
* USB: option: move hardcoded PID to a macro in usb/serial/option
  - LP: #553837
* USB: option: add support for a new CMOTECH device to usb/serial/option
  - LP: #553837
* usb: r8a66597-hcd: fix removed from an attached hub
  - LP: #553837
* wl1251: fix potential crash
  - LP: #553837
* jme: Fix VLAN memory leak
  - LP: #553837
* jme: Protect vlgrp structure by pause RX actions.
  - LP: #553837
* edac, mce: Filter out invalid values
  - LP: #553837
* iwlwifi: use dma_alloc_coherent
  - LP: #553837
* iwlwifi: Silence tfds_in_queue message
  - LP: #553837
* SUNRPC: Fix a potential memory leak in auth_gss
  - LP: #553837
* sunrpc: handle allocation errors from __rpc_lookup_create()
  - LP: #553837
* if_tunnel.h: add missing ams/byteorder.h include
  - LP: #553837
* fs/partitions/msdos: add support for large disks
  - LP: #553837
* fs/partition/msdos: fix unusable extended partition for > 512B sector
  - LP: #553837
* PCI: fix return value from pcix_get_max_mmrbc()
  - LP: #553837
* PCI: fix access of PCI_X_CMD by pcix get and set mmrbc functions
  - LP: #553837
* PCI: cleanup error return for pcix get and set mmrbc functions
  - LP: #553837
* rt2860sta: Fix argument to linux_pci_unmap_single()
  - LP: #553837
* ath9k: fix BUG_ON triggered by PAE frames
  - LP: #553837
* cpuset: fix the problem that cpuset_mem_spread_node() returns an
  offline node
  - LP: #553837
* softlockup: Stop spurious softlockup messages due to overflow
  - LP: #553837
* netfilter: xt_recent: fix regression in rules using a zero hit_count
  - LP: #553837
* x86: Fix placement of FIX_OHCI1394_BASE
  - LP: #553837
* x86, amd: Restrict usage of c1e_idle()
  - LP: #553837
* hwmon: (coretemp) Add missing newline to dev_warn() message
  - LP: #553837
* ALSA: hda: Use LPIB for ga-ma770-ud3 board
  - LP: #553837
* ALSA: ac97: Add Toshiba P500 to ac97 jack sense blacklist
  - LP: #481058, #553837
* ALSA: ac97: Add IBM ThinkPad R40e to Headphone/Line Jack Sense
  blacklist
  - LP: #303789, #553837
* ALSA: hda: Use ALC260_WILL quirk for another Acer model (0x1025007f)
  - LP: #418627, #553837
* ath9k: Enable TIM timer interrupt only when needed.
  - LP: #553837
* mac80211: Retry null data frame for power save
  - LP: #553837
* ath9k: Enable IEEE80211_HW_REPORTS_TX_ACK_STATUS flag for ath9k
  - LP: #553837
* mac80211: Reset dynamic ps timer in Rx path.
  - LP: #553837
* leds-gpio: fix default state handling on OF platforms
  - LP: #553837
* quota: manage reserved space when quota is not active [v2]
  - LP: #553837
* quota: Fix warning when a delayed write happens before quota is enabled
  - LP: #553837
* ahci: use BIOS date in broken_suspend list
  - LP: #553837
* Bluetooth: Fix potential bad memory access with sysfs files
  - LP: #553837
* Bluetooth: Fix kernel crash on L2CAP stress tests
  - LP: #553837
* sh: Fix zImage boot using fixed PMB.
  - LP: #553837
* b43: Workaround circular locking in hw-tkip key update callback
  - LP: #553837
* block: Backport of various I/O topology fixes from 2.6.33 and 2.6.34
  - LP: #553837
* s3cmci: initialize default platform data no_wprotect and no_detect with
  1
  - LP: #553837
* x86: Fix sched_clock_cpu for systems with unsynchronized TSC
  - LP: #553837
* GFS2: Skip check for mandatory locks when unlocking
  - LP: #553837
* Linux 2.6.32.11
  - LP: #553837
* drm/i915: fix small leak on overlay error path
  - LP: #553837
* drm/i915: Avoid NULL deref in get_pages() unwind after error.
  - LP: #553837
* drm/nouveau: report unknown connector state if lid closed
  - LP: #553837
* Linux-2.6.32.11+drm33.2
  - LP: #553837
* mmc: add module parameter to set whether cards are assumed removable
  - LP: #477106
* (pre-stable) ACPI: EC: Allow multibyte access to EC
  - LP: #526354
* PCI quirks: disable msi on AMD rs4xx internal gfx bridges
  - LP: #509273
* drm/i915: Add dependency on the intel agp module
  - LP: #542251
* (pre-stable) drm/edid: allow certain bogus edids to hit a fixup path
  rather than fail
  - LP: #540632
* drm/radeon/kms: rework pll algo selection
  - LP: #538377
* drm/radeon/kms: update new pll algo
  - LP: #538377
* PCI quirk: Disable MSI on VIA K8T890 systems
  - LP: #544741
* sched: update load count only once per cpu in 10 tick update window
  - LP: #513848