lp://staging/ubuntu/lucid-updates/linux-lts-backport-oneiric

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #359361: ALSA SPDIF Digital output clipping / crackling during playback	Undecided	Confirmed
Bug #796030: intel gma 4500mhd external monitor picture scrambled	Undecided	New
Bug #925552: [12.04] Broadcom Bluetooth device (Vendor=0a5c ProdID=21f3) not supported	High	In Progress
Bug #971685: CVE-2012-1601	Undecided	New
Bug #990365: CVE-2012-2127	Undecided	New
Bug #1006622: CVE-2012-2136	Undecided	New
Bug #1015836: 2040:c000 BUG: unable to handle kernel NULL pointer dereference at 0000000000000050; RIP: 0010:[<ffffffffa069a5b7>] [<ffffffffa069a5b7>] show_protocols+0xf7/0x110 [rc_core]	Undecided	New
Bug #1016298: CVE-2012-2137	Medium	New
Bug #1016299: CVE-2012-2372	Low	Fix Committed
Bug #1021811: CVE-2012-3375	Undecided	New
Bug #1031112: CVE-2012-3430	Undecided	New
Bug #1037456: CVE-2012-3412	Undecided	New
Bug #1068888: CVE-2012-4530	Low	New
Bug #1071314: CVE-2012-4508	Undecided	New
Bug #1077091: CVE-2012-4565	Undecided	New
Bug #1079860: CVE-2012-5517	Medium	New
Bug #1084777: CVE-2012-5532	Undecided	New
Bug #1089604: CVE-2012-4461	Undecided	New
Bug #1096318: CVE-2012-2669	Undecided	New
Bug #1117325: CVE-2013-0216	Undecided	New
Bug #1117331: CVE-2013-0217	Medium	Fix Committed
Bug #1129192: CVE-2013-0871	High	Fix Committed
Bug #1130951: CVE-2013-0311	Undecided	New
Bug #1134523: CVE-2013-1773	Undecided	New
Bug #1152788: CVE-2013-1792	Medium	New
Bug #1153813: CVE-2013-0914	Undecided	New

Link a bug report

Related blueprints

25. By Steve Conklin on 2013-03-21

[Steve Conklin]

* Release Tracking Bug
  - LP: #1158541

[ Upstream Kernel Changes ]

* printk: fix buffer overflow when calling log_prefix function from
  call_console_drivers
  - LP: #1145196
* 3.0.66
  - LP: #1145196
* x86-32, mm: Remove reference to resume_map_numa_kva()
  - LP: #1145196
* mm: fix pageblock bitmap allocation
  - LP: #1145196
* timeconst.pl: Eliminate Perl warning
  - LP: #1145196
* genirq: Avoid deadlock in spurious handling
  - LP: #1145196
* posix-cpu-timers: Fix nanosleep task_struct leak
  - LP: #1145196
* hrtimer: Prevent hrtimer_enqueue_reprogram race
  - LP: #1145196
* ALSA: ali5451: remove irq enabling in pointer callback
  - LP: #1145196
* ALSA: rme32.c irq enabling after spin_lock_irq
  - LP: #1145196
* tty: set_termios/set_termiox should not return -EINTR
  - LP: #1145196
* xen: Send spinlock IPI to all waiters
  - LP: #1011792, #1145196
* Driver core: treat unregistered bus_types as having no devices
  - LP: #1145196
* mm: mmu_notifier: have mmu_notifiers use a global SRCU so they may
  safely schedule
  - LP: #1145196
* mm: mmu_notifier: make the mmu_notifier srcu static
  - LP: #1145196
* mmu_notifier_unregister NULL Pointer deref and multiple ->release()
  callouts
  - LP: #1145196
* KVM: s390: Handle hosts not supporting s390-virtio.
  - LP: #1145196
* s390/kvm: Fix store status for ACRS/FPRS
  - LP: #1145196
* inotify: remove broken mask checks causing unmount to be EINVAL
  - LP: #1145196
* ocfs2: unlock super lock if lockres refresh failed
  - LP: #1145196
* drivers/video/backlight/adp88?0_bl.c: fix resume
  - LP: #1145196
* tmpfs: fix use-after-free of mempolicy object
  - LP: #1145196
* mm/fadvise.c: drain all pagevecs if POSIX_FADV_DONTNEED fails to
  discard all pages
  - LP: #1145196
* NLM: Ensure that we resend all pending blocking locks after a reclaim
  - LP: #1145196
* p54usb: corrected USB ID for T-Com Sinus 154 data II
  - LP: #1145196
* ALSA: usb-audio: fix Roland A-PRO support
  - LP: #1145196
* ALSA: usb: Fix Processing Unit Descriptor parsers
  - LP: #1145196
* ext4: Free resources in some error path in ext4_fill_super
  - LP: #1145196
* ext4: add missing kfree() on error return path in add_new_gdb()
  - LP: #1145196
* sunvdc: Fix off-by-one in generic_request().
  - LP: #1145196
* drm/usb: bind driver to correct device
  - LP: #1145196
* drm/i915: disable shared panel fitter for pipe
  - LP: #1145196
* staging: comedi: disallow COMEDI_DEVCONFIG on non-board minors
  - LP: #1145196
* staging: vt6656: Fix URB submitted while active warning.
  - LP: #1145196
* ARM: PXA3xx: program the CSMSADRCFG register
  - LP: #1145196
* powerpc/kexec: Disable hard IRQ before kexec
  - LP: #1145196
* Purge existing TLB entries in set_pte_at and ptep_set_wrprotect
  - LP: #1145196
* pcmcia/vrc4171: Add missing spinlock init
  - LP: #1145196
* fbcon: don't lose the console font across generic->chip driver switch
  - LP: #1145196
* fb: rework locking to fix lock ordering on takeover
  - LP: #1145196
* bridge: set priority of STP packets
  - LP: #1145196
* xen-netback: correctly return errors from netbk_count_requests()
  - LP: #1145196
* xen-netback: cancel the credit timer when taking the vif down
  - LP: #1145196
* ipv4: fix a bug in ping_err().
  - LP: #1145196
* ipv6: use a stronger hash for tcp
  - LP: #1145196
* dca: check against empty dca_domains list before unregister provider
  - LP: #1145196
* USB: option: add and update Alcatel modems
  - LP: #1145196
* USB: option: add Yota / Megafon M100-1 4g modem
  - LP: #1145196
* USB: option: add Huawei "ACM" devices using protocol = vendor
  - LP: #1145196
* USB: ehci-omap: Fix autoloading of module
  - LP: #1145196
* USB: storage: properly handle the endian issues of idProduct
  - LP: #1145196
* USB: usb-storage: unusual_devs update for Super TOP SATA bridge
  - LP: #1145196
* Linux 3.0.67
  - LP: #1145196
* quota: autoload the quota_v2 module for QFMT_VFS_V1 quota format
  - LP: #1145196
* iommu/amd: Initialize device table after dma_ops
  - LP: #1145196
* posix-timer: Don't call idr_find() with out-of-range ID
  - LP: #1145196
* ftrace: Call ftrace cleanup module notifier after all other notifiers
  - LP: #1145196
* doc, xen: Mention 'earlyprintk=xen' in the documentation.
  - LP: #1145196
* doc, kernel-parameters: Document 'console=hvc<n>'
  - LP: #1145196
* x86: Make sure we can boot in the case the BDA contains pure garbage
  - LP: #1145196
* target: Add missing mapped_lun bounds checking during make_mappedlun
  setup
  - LP: #1145196
* ocfs2: ac->ac_allow_chain_relink=0 won't disable group relink
  - LP: #1145196
* xen-blkback: do not leak mode property
  - LP: #1145196
* idr: fix a subtle bug in idr_get_next()
  - LP: #1145196
* firewire: add minor number range check to fw_device_init()
  - LP: #1145196
* sysctl: fix null checking in bin_dn_node_address()
  - LP: #1145196
* ext4: fix race in ext4_mb_add_n_trim()
  - LP: #1145196
* svcrpc: make svc_age_temp_xprts enqueue under sv_lock
  - LP: #1145196
* unbreak automounter support on 64-bit kernel with 32-bit userspace (v2)
  - LP: #1145196
* x86: Do not leak kernel page mapping locations
  - LP: #1145196
* x86/apic: Work around boot failure on HP ProLiant DL980 G7 Server
  systems
  - LP: #1145196
* cpuset: fix cpuset_print_task_mems_allowed() vs rename() race
  - LP: #1145196
* cgroup: fix exit() vs rmdir() race
  - LP: #1145196
* dca: check against empty dca_domains list before unregister provider
  fix
  - LP: #1145196
* s390/kvm: Fix store status for ACRS/FPRS fix
  - LP: #1145196
* staging: comedi: ni_labpc: correct differential channel sequence for AI
  commands
  - LP: #1145196
* staging: comedi: ni_labpc: set up command4 register *after* command3
  - LP: #1145196
* staging: comedi: check s->async for poll(), read() and write()
  - LP: #1145196
* Linux 3.0.68
  - LP: #1145196
* keys: fix race with concurrent install_user_keyrings()
  - LP: #1152788
  - CVE-2013-1792
* ARM: VFP: fix emulation of second VFP instruction
  - LP: #1155651
* ARM: fix scheduling while atomic warning in alignment handling code
  - LP: #1155651
* SCSI: dc395x: uninitialized variable in device_alloc()
  - LP: #1155651
* target/pscsi: Fix page increment
  - LP: #1155651
* btrfs: Init io_lock after cloning btrfs device struct
  - LP: #1155651
* cifs: ensure that cifs_get_root() only traverses directories
  - LP: #1155651
* SUNRPC: Don't start the retransmission timer when out of socket space
  - LP: #1155651
* hw_random: make buffer usable in scatterlist.
  - LP: #1155651
* ath9k: fix RSSI dummy marker value
  - LP: #1155651
* md: raid0: fix error return from create_stripe_zones.
  - LP: #1155651
* hwmon: (sht15) Check return value of regulator_enable()
  - LP: #1155651
* drm/radeon: add primary dac adj quirk for R200 board
  - LP: #1155651
* ALSA: ice1712: Initialize card->private_data properly
  - LP: #1155651
* ALSA: vmaster: Fix slave change notification
  - LP: #1155651
* e1000e: fix pci-device enable-counter balance
  - LP: #1155651
* vfs: fix pipe counter breakage
  - LP: #1155651
* Fix memory leak in cpufreq stats.
  - LP: #1155651
* ftrace: Update the kconfig for DYNAMIC_FTRACE
  - LP: #1155651
* decnet: Fix disappearing sysctl entries
  - LP: #1155651
* dmi_scan: fix missing check for _DMI_ signature in smbios_present()
  - LP: #1155651
* Linux 3.0.69
  - LP: #1155651
* signal: always clear sa_restorer on execve
  - LP: #1153813
  - CVE-2013-0914

24. By Brad Figg on 2013-02-28

[Brad Figg]

* Release Tracking Bug
  - LP: #1137047

[ Ian Campbell ]

* SAUCE: xen/netback: shutdown the ring if it contains garbage.
  - LP: #1117325
  - CVE-2013-0216
* SAUCE: netback: correct netbk_tx_err to handle wrap around.
  - LP: #1117325
  - CVE-2013-0216
* SAUCE: xen/netback: don't leak pages on failure in
  xen_netbk_tx_check_gop.
  - LP: #1117331
  - CVE-2013-0217
* SAUCE: xen/netback: free already allocated memory on failure in
  xen_netbk_get_requests
  - LP: #1117331
  - CVE-2013-0217

[ Tim Gardner ]

* [debian] Remove dangling symlink from headers package
  - LP: #1112442
* SAUCE: rt2x00: rt2x00pci_regbusy_read() - only print register access
  failure once
  - LP: #1128840

[ Upstream Kernel Changes ]

* can: c_can: fix invalid error codes
  - LP: #1116259
* can: ti_hecc: fix invalid error codes
  - LP: #1116259
* can: pch_can: fix invalid error codes
  - LP: #1116259
* fs/cifs/cifs_dfs_ref.c: fix potential memory leakage
  - LP: #1116259
* ARM: DMA: Fix struct page iterator in dma_cache_maint() to work with
  sparsemem
  - LP: #1116259
* Bluetooth: Fix sending HCI commands after reset
  - LP: #1116259
* ath9k_htc: Fix memory leak
  - LP: #1116259
* ath9k: fix double-free bug on beacon generate failure
  - LP: #1116259
* ALSA: usb-audio: fix invalid length check for RME and other UAC 2
  devices
  - LP: #1116259
* EDAC: Test correct variable in ->store function
  - LP: #1116259
* Bluetooth: Fix incorrect strncpy() in hidp_setup_hid()
  - LP: #1116259
* smp: Fix SMP function call empty cpu mask race
  - LP: #1116259
* x86/msr: Add capabilities check
  - LP: #1116259
* efi, x86: Pass a proper identity mapping in efi_call_phys_prelog
  - LP: #1116259
* x86/Sandy Bridge: Sandy Bridge workaround depends on CONFIG_PCI
  - LP: #1116259
* Linux 3.0.62
  - LP: #1116259
* drm/radeon/evergreen+: wait for the MC to settle after MC blackout
  - LP: #1122313
* drm/radeon: add quirk for RV100 board
  - LP: #1122313
* drm/radeon: Calling object_unrefer() when creating fb failure
  - LP: #1122313
* x86-64: Replace left over sti/cli in ia32 audit exit code
  - LP: #1122313
* nilfs2: fix fix very long mount time issue
  - LP: #1122313
* drivers/rtc/rtc-isl1208.c: call rtc_update_irq() from the alarm irq
  handler
  - LP: #1122313
* USB: ftdi_sio: add Zolix FTDI PID
  - LP: #1122313
* USB: ftdi_sio: add PID/VID entries for ELV WS 300 PC II
  - LP: #1122313
* USB: option: add support for Telit LE920
  - LP: #1122313
* USB: option: add Changhong CH690
  - LP: #1122313
* USB: qcserial: add Telit Gobi QDL device
  - LP: #1122313
* USB: EHCI: fix bug in scheduling periodic split transfers
  - LP: #1122313
* USB: storage: Define a new macro for USB storage match rules
  - LP: #1122313
* USB: storage: optimize to match the Huawei USB storage devices and
  support new switch command
  - LP: #1122313
* xhci: Fix isoc TD encoding.
  - LP: #1122313
* USB: XHCI: fix memory leak of URB-private data
  - LP: #1122313
* Linux 3.0.63
  - LP: #1122313
* rtlwifi: Fix the usage of the wrong variable in usb.c
  - LP: #1126189
* virtio_console: Don't access uninitialized data.
  - LP: #1126189
* kernel/resource.c: fix stack overflow in __reserve_region_with_split()
  - LP: #1126189
* mac80211: synchronize scan off/on-channel and PS states
  - LP: #1126189
* net: prevent setting ttl=0 via IP_TTL
  - LP: #1126189
* MAINTAINERS: Stephen Hemminger email change
  - LP: #1126189
* isdn/gigaset: fix zero size border case in debug dump
  - LP: #1126189
* r8169: remove the obsolete and incorrect AMD workaround
  - LP: #1126189
* net: loopback: fix a dst refcounting issue
  - LP: #1126189
* pktgen: correctly handle failures when adding a device
  - LP: #1126189
* ipv6: do not create neighbor entries for local delivery
  - LP: #1126189
* packet: fix leakage of tx_ring memory
  - LP: #1126189
* atm/iphase: rename fregt_t -> ffreg_t
  - LP: #1126189
* sctp: refactor sctp_outq_teardown to insure proper re-initalization
  - LP: #1126189
* net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
  - LP: #1126189
* net: sctp: sctp_endpoint_free: zero out secret key data
  - LP: #1126189
* tcp: frto should not set snd_cwnd to 0
  - LP: #1126189
* tcp: fix for zero packets_in_flight was too broad
  - LP: #1126189
* tcp: fix MSG_SENDPAGE_NOTLAST logic
  - LP: #1126189
* bridge: Pull ip header into skb->data before looking into ip header.
  - LP: #1126189
* tg3: Avoid null pointer dereference in tg3_interrupt in netconsole mode
  - LP: #1126189
* tg3: Fix crc errors on jumbo frame receive
  - LP: #1126189
* Linux 3.0.64
  - LP: #1126189
* x86/mm: Check if PUD is large when validating a kernel address
  - LP: #1130182
* x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS.
  - LP: #1130182
* PCI/PM: Clean up PME state when removing a device
  - LP: #1130182
* igb: Remove artificial restriction on RQDPC stat reading
  - LP: #1130182
* Linux 3.0.65
  - LP: #1130182
* vhost: fix length for cross region descriptor
  - LP: #1130951
  - CVE-2013-0311
* NLS: improve UTF8 -> UTF16 string conversion routine
  - LP: #1134523
  - CVE-2013-1773

23. By Luis Henriques on 2013-02-20

[Luis Henriques]

* Release Tracking Bug
  - LP: #1130474

[ Upstream Kernel Changes ]

* ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
  - LP: #1129192
  - CVE-2013-0871
* ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
  - LP: #1129192
  - CVE-2013-0871
* wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED
  task
  - LP: #1129192
  - CVE-2013-0871

22. By Luis Henriques on 2013-02-05

[Luis Henriques]

* Release Tracking Bug
  - LP: #1115661

[ Upstream Kernel Changes ]

* Revert "ath9k_hw: Update AR9003 high_power tx gain table"
  - LP: #1101192
* Revert "drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13"
  - LP: #1101192
* Tools: hv: verify origin of netlink connector message
  - LP: #1096318
  - CVE-2012-2669
* tools: hv: Netlink source address validation allows DoS
  - LP: #1084777
  - CVE-2012-5532
* bonding: Bonding driver does not consider the gso_max_size/gso_max_segs
  setting of slave devices.
  - LP: #1099442
* bonding: fix race condition in bonding_store_slaves_active
  - LP: #1099442
* sctp: fix memory leak in sctp_datamsg_from_user() when copy from user
  space fails
  - LP: #1099442
* sctp: fix -ENOMEM result with invalid user space pointer in sendto()
  syscall
  - LP: #1099442
* ne2000: add the right platform device
  - LP: #1099442
* irda: sir_dev: Fix copy/paste typo
  - LP: #1099442
* usb/ipheth: Add iPhone 5 support
  - LP: #1099442
* pnpacpi: fix incorrect TEST_ALPHA() test
  - LP: #1099442
* x86, 8042: Enable A20 using KBC to fix S3 resume on some MSI laptops
  - LP: #1099442
* virtio: force vring descriptors to be allocated from lowmem
  - LP: #1099442
* mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED
  - LP: #1099442
* tmpfs mempolicy: fix /proc/mounts corrupting memory
  - LP: #1099442
* ALSA: usb-audio: Avoid autopm calls after disconnection
  - LP: #1099442
* ALSA: usb-audio: Fix missing autopm for MIDI input
  - LP: #1099442
* p54usb: add USB ID for T-Com Sinus 154 data II
  - LP: #1099442
* p54usb: add USBIDs for two more p54usb devices
  - LP: #1099442
* usb: gadget: phonet: free requests in pn_bind()'s error path
  - LP: #1099442
* ACPI / scan: Do not use dummy HID for system bus ACPI nodes
  - LP: #1099442
* NFS: avoid NULL dereference in nfs_destroy_server
  - LP: #1099442
* NFS: Fix calls to drop_nlink()
  - LP: #1099442
* nfsd4: fix oops on unusual readlike compound
  - LP: #1099442
* nfs: fix null checking in nfs_get_option_str()
  - LP: #1099442
* Input: walkera0701 - fix crash on startup
  - LP: #1099442
* genirq: Always force thread affinity
  - LP: #1099442
* xhci: Add Lynx Point LP to list of Intel switchable hosts
  - LP: #1099442
* cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()
  - LP: #1099442
* x86, amd: Disable way access filter on Piledriver CPUs
  - LP: #1099442
* ftrace: Do not function trace inlined functions
  - LP: #1099442
* sparc: huge_ptep_set_* functions need to call set_huge_pte_at()
  - LP: #1099442
* net: sched: integer overflow fix
  - LP: #1099442
* tcp: implement RFC 5961 3.2
  - LP: #1099442
* tcp: implement RFC 5961 4.2
  - LP: #1099442
* tcp: refine SYN handling in tcp_validate_incoming
  - LP: #1099442
* tcp: tcp_replace_ts_recent() should not be called from
  tcp_validate_incoming()
  - LP: #1099442
* tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation
  - LP: #1099442
* ARM: mm: use pteval_t to represent page protection values
  - LP: #1099442
* ARM: missing ->mmap_sem around find_vma() in swp_emulate.c
  - LP: #1099442
* solos-pci: fix double-free of TX skb in DMA mode
  - LP: #1099442
* PCI: Reduce Ricoh 0xe822 SD card reader base clock frequency to 50MHz
  - LP: #1099442
* Bluetooth: cancel power_on work when unregistering the device
  - LP: #1099442
* CRIS: fix I/O macros
  - LP: #1099442
* drivers/rtc/rtc-vt8500.c: correct handling of CR_24H bitfield
  - LP: #1099442
* drivers/rtc/rtc-vt8500.c: fix handling of data passed in struct
  rtc_time
  - LP: #1099442
* mm: limit mmu_gather batching to fix soft lockups on !CONFIG_PREEMPT
  - LP: #1099442
* can: Do not call dev_put if restart timer is running upon close
  - LP: #1099442
* Linux 3.0.58
  - LP: #1099442
* ext4: quiet 'unused variables' compile warnings
  - LP: #1071314
  - CVE-2012-4508
* ext4: race-condition protection for
  ext4_convert_unwritten_extents_endio
  - LP: #1071314
  - CVE-2012-4508
* powerpc: Fix CONFIG_RELOCATABLE=y CONFIG_CRASH_DUMP=n build
  - LP: #1101192
* powerpc/vdso: Remove redundant locking in update_vsyscall_tz()
  - LP: #1101192
* s390/cio: fix pgid reserved check
  - LP: #1101192
* mm: compaction: fix echo 1 > compact_memory return error issue
  - LP: #1101192
* mm: use aligned zone start for pfn_to_bitidx calculation
  - LP: #1101192
* ath9k: ar9003: fix OTP register offsets for AR9340
  - LP: #1101192
* firewire: net: Fix handling of fragmented multicast/broadcast packets.
  - LP: #1101192
* SCSI: mvsas: fix undefined bit shift
  - LP: #1101192
* SCSI: qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically.
  - LP: #1101192
* sata_promise: fix hardreset lockdep error
  - LP: #1101192
* libata: set dma_mode to 0xff in reset
  - LP: #1101192
* libata: fix Null pointer dereference on disk error
  - LP: #1101192
* target/tcm_fc: fix the lockdep warning due to inconsistent lock state
  - LP: #1101192
* mfd: Only unregister platform devices allocated by the mfd core
  - LP: #1101192
* ext4: fix memory leak in ext4_xattr_set_acl()'s error path
  - LP: #1101192
* SUNRPC: Ensure that we free the rpc_task after cleanups are done
  - LP: #1101192
* jffs2: hold erase_completion_lock on exit
  - LP: #1101192
* i2400m: add Intel 6150 device IDs
  - LP: #1101192
* drm/i915: make the panel fitter work on pipes B and C on IVB
  - LP: #1101192
* RDMA/nes: Fix for crash when registering zero length MR for CQ
  - LP: #1101192
* RDMA/nes: Fix for terminate timer crash
  - LP: #1101192
* ring-buffer: Fix race between integrity check and readers
  - LP: #1101192
* dm ioctl: prevent unsafe change to dm_ioctl data_size
  - LP: #1101192
* staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
  - LP: #1101192
* staging: vt6656: 64 bit fixes: use u32 for QWORD definition.
  - LP: #1101192
* staging: vt6656: 64 bit fixes : correct all type sizes
  - LP: #1101192
* staging: vt6656: 64 bit fixes: fix long warning messages.
  - LP: #1101192
* staging: vt6656: 64bit fixes: key.c/h change unsigned long to u32
  - LP: #1101192
* staging: vt6656: 64bit fixes: vCommandTimerWait change calculation of
  timer.
  - LP: #1101192
* video: mxsfb: fix crash when unblanking the display
  - LP: #1101192
* ext4: fix extent tree corruption caused by hole punch
  - LP: #1101192
* jbd2: fix assertion failure in jbd2_journal_flush()
  - LP: #1101192
* ext4: do not try to write superblock on ro remount w/o journal
  - LP: #1101192
* ext4: lock i_mutex when truncating orphan inodes
  - LP: #1101192
* aoe: do not call bdi_init after blk_alloc_queue
  - LP: #1101192
* udf: fix memory leak while allocating blocks during write
  - LP: #1101192
* udf: don't increment lenExtents while writing to a hole
  - LP: #1101192
* thp, memcg: split hugepage for memcg oom on cow
  - LP: #1101192
* x86, amd: Disable way access filter on Piledriver CPUs
  - LP: #1101192
* ACPI : do not use Lid and Sleep button for S5 wakeup
  - LP: #1101192
* rtnetlink: Compute and store minimum ifinfo dump size
  - LP: #1101192
* rtnetlink: Fix problem with buffer allocation
  - LP: #1101192
* rtnetlink: fix rtnl_calcit() and rtnl_dump_ifinfo()
  - LP: #1101192
* epoll: prevent missed events on EPOLL_CTL_MOD
  - LP: #1101192
* ASoC: wm2000: Fix sense of speech clarity enable
  - LP: #1101192
* ALSA: pxa27x: fix ac97 cold reset
  - LP: #1101192
* staging: comedi: prevent auto-unconfig of manually configured devices
  - LP: #1101192
* staging: comedi: comedi_test: fix race when cancelling command
  - LP: #1101192
* staging: r8712u: Add new device ID
  - LP: #1101192
* staging: speakup: avoid out-of-range access in synth_init()
  - LP: #1101192
* staging: speakup: avoid out-of-range access in synth_add()
  - LP: #1101192
* radeon/kms: force rn50 chip to always report connected on analog output
  - LP: #1101192
* mac80211: use del_timer_sync for final sta cleanup timer deletion
  - LP: #1101192
* USB: option: add Nexpring NP10T terminal id
  - LP: #1101192
* USB: option: blacklist network interface on ZTE MF880
  - LP: #1101192
* USB: option: Add new MEDIATEK PID support
  - LP: #1101192
* USB: option: add Telekom Speedstick LTE II
  - LP: #1101192
* usb: ftdi_sio: Crucible Technologies COMET Caller ID - pid added
  - LP: #1101192
* USB: cdc-acm: Add support for "PSC Scanning, Magellan 800i"
  - LP: #1101192
* usb: gadget: dummy: fix enumeration with g_multi
  - LP: #1101192
* USB: Increase reset timeout.
  - LP: #1101192
* USB: hub: handle claim of enabled remote wakeup after reset
  - LP: #1101192
* xhci: Handle HS bulk/ctrl endpoints that don't NAK.
  - LP: #1101192
* GFS2: Test bufdata with buffer locked and gfs2_log_lock held
  - LP: #1101192
* intel-iommu: Free old page tables before creating superpage
  - LP: #1101192
* KVM: PPC: 44x: fix DCR read/write
  - LP: #1101192
* staging: comedi: don't hijack hardware device private data
  - LP: #1101192
* staging: comedi: Kconfig: COMEDI_NI_AT_A2150 should select COMEDI_FC
  - LP: #1101192
* Linux 3.0.59
  - LP: #1101192
* sh: Fix FDPIC binary loader
  - LP: #1102988
* tcm_fc: Do not indicate retry capability to initiators
  - LP: #1102988
* tcm_fc: Do not report target role when target is not defined
  - LP: #1102988
* s390/time: fix sched_clock() overflow
  - LP: #1102988
* x86/Sandy Bridge: reserve pages when integrated graphics is present
  - LP: #1102988
* ext4: init pagevec in ext4_da_block_invalidatepages
  - LP: #1102988
* powerpc: fix wii_memory_fixups() compile error on 3.0.y tree
  - LP: #1102988
* USB: fix endpoint-disabling for failed config changes
  - LP: #1102988
* intel-iommu: Prevent devices with RMRRs from being placed into SI
  Domain
  - LP: #1102988
* drbd: add missing part_round_stats to _drbd_start_io_acct
  - LP: #1102988
* xhci: fix null-pointer dereference when destroying half-built segment
  rings
  - LP: #1102988
* xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS
  guests.
  - LP: #1102988
* USB: option: add TP-LINK HSUPA Modem MA180
  - LP: #1102988
* USB: option: blacklist network interface on ONDA MT8205 4G LTE
  - LP: #1102988
* serial:ifx6x60:Delete SPI timer when shut down port
  - LP: #1102988
* staging: vt6656: Fix inconsistent structure packing
  - LP: #1102988
* Linux 3.0.60
  - LP: #1102988
* drm/i915: Invalidate the relocation presumed_offsets along the slow
  path
  - LP: #1108920
* ftrace: Be first to run code modification on modules
  - LP: #1108920
* PCI: Allow pcie_aspm=force even when FADT indicates it is unsupported
  - LP: #1108920
* USB: UHCI: fix IRQ race during initialization
  - LP: #1108920
* SCSI: sd: Reshuffle init_sd to avoid crash
  - LP: #1108920
* drivers/firmware/dmi_scan.c: check dmi version when get system uuid
  - LP: #1108920
* drivers/firmware/dmi_scan.c: fetch dmi version from SMBIOS if it exists
  - LP: #1108920
* serial: 8250, increase PASS_LIMIT
  - LP: #1108920
* staging: usbip: changed function return type to void
  - LP: #1108920
* drm/i915: Implement WaDisableHiZPlanesWhenMSAAEnabled
  - LP: #1108920
* ahci: Add identifiers for ASM106x devices
  - LP: #1108920
* x86: Use enum instead of literals for trap values [PARTIAL]
  - LP: #1108920
* SGI-XP: handle non-fatal traps
  - LP: #1108920
* ACPI / cpuidle: Fix NULL pointer issues when cpuidle is disabled
  - LP: #1108920
* ioat: Fix DMA memory sync direction correct flag
  - LP: #1108920
* Linux 3.0.61
  - LP: #1108920

21. By Luis Henriques on 2013-01-07

[Luis Henriques]

* Release Tracking Bug
  - LP: #1095807

[ Colin Ian King ]

* SAUCE: samsung-laptop: disable in UEFI mode
  - LP: #1040557

[ Herton Ronaldo Krzesinski ]

* SAUCE: usb: cdc-wdm: fix regression on buffer deallocation
  - LP: #1074157
* [Config] updateconfigs for 3.0.57 stable update

[ Kees Cook ]

* SAUCE: exec: do not leave bprm->interp on stack
  - LP: #1068888
  - CVE-2012-4530

[ Upstream Kernel Changes ]

* Revert "sched, autogroup: Stop going ahead if autogroup is disabled"
  - LP: #1088641
* ALSA: pcmcia - Use pcmcia_request_irq()
  - LP: #1087264
* drivers/block/DAC960: fix DAC960_V2_IOCTL_Opcode_T -Wenum-compare
  warning
  - LP: #1087264
* drivers/block/DAC960: fix -Wuninitialized warning
  - LP: #1087264
* riva/fbdev: fix several -Wuninitialized
  - LP: #1087264
* ifenslave: Fix unused variable warnings.
  - LP: #1087264
* x86-32: Fix invalid stack address while in softirq
  - LP: #1087264
* x86, microcode, AMD: Add support for family 16h processors
  - LP: #1087264
* rtlwifi: rtl8192cu: Add new USB ID
  - LP: #1087264
* mwifiex: report error to MMC core if we cannot suspend
  - LP: #1087264
* SCSI: isci: copy fis 0x34 response into proper buffer
  - LP: #1087264
* ALSA: ua101, usx2y: fix broken MIDI output
  - LP: #1087264
* PARISC: fix virtual aliasing issue in get_shared_area()
  - LP: #1087264
* PARISC: fix user-triggerable panic on parisc
  - LP: #1087264
* mtd: slram: invalid checking of absolute end address
  - LP: #1087264
* dm: fix deadlock with request based dm and queue request_fn recursion
  - LP: #1087264
* futex: avoid wake_futex() for a PI futex_q
  - LP: #1087264
* mac80211: deinitialize ibss-internals after emptiness check
  - LP: #1087264
* radeon: add AGPMode 1 quirk for RV250
  - LP: #1087264
* can: bcm: initialize ifindex for timeouts without previous frame
  reception
  - LP: #1087264
* jbd: Fix lock ordering bug in journal_unmap_buffer()
  - LP: #1087264
* sparc64: not any error from do_sigaltstack() should fail rt_sigreturn()
  - LP: #1087264
* ALSA: hda - Add new codec ALC283 ALC290 support
  - LP: #1087264
* ALSA: hda - Fix missing beep on ASUS X43U notebook
  - LP: #1087264
* ALSA: hda - Add support for Realtek ALC292
  - LP: #1081466, #1087264
* bas_gigaset: fix pre_reset handling
  - LP: #1087264
* ixgbe: add support for X540-AT1
  - LP: #1087264
* sata_svw: check DMA start bit before reset
  - LP: #1087264
* ixgbe: add support for new 82599 device
  - LP: #1087264
* ixgbe: add support for new 82599 device id
  - LP: #1087264
* get_dvb_firmware: fix download site for tda10046 firmware
  - LP: #1087264
* USB: mct_u232: fix broken close
  - LP: #1087264
* watchdog: using u64 in get_sample_period()
  - LP: #1087264
* Input: bcm5974 - set BUTTONPAD property
  - LP: #1087264
* mmc: sdhci-s3c: fix the wrong number of max bus clocks
  - LP: #1087264
* Linux 3.0.54
  - LP: #1087264
* x86-32: Export kernel_stack_pointer() for modules
  - LP: #1087267
* Linux 3.0.55
  - LP: #1087267
* Dove: Attempt to fix PMU/RTC interrupts
  - LP: #1088641
* Dove: Fix irq_to_pmu()
  - LP: #1088641
* mm/vmemmap: fix wrong use of virt_to_page
  - LP: #1088641
* mm: soft offline: split thp at the beginning of soft_offline_page()
  - LP: #1088641
* workqueue: exit rescuer_thread() as TASK_RUNNING
  - LP: #1088641
* route: release dst_entry.hh_cache when handling redirects
  - LP: #1088641
* ACPI: missing break
  - LP: #1088641
* i915: Quirk no_lvds on Gigabyte GA-D525TUD ITX motherboard
  - LP: #1088641
* drm/i915: Add no-lvds quirk for Supermicro X7SPA-H
  - LP: #1088641
* scsi: Silence unnecessary warnings about ioctl to partition
  - LP: #1088641
* Linux 3.0.56
  - LP: #1088641
* KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
  (CVE-2012-4461)
  - LP: #1089604
  - CVE-2012-4461
* ARM: 7566/1: vfp: fix save and restore when running on pre-VFPv3 and
  CONFIG_VFPv3 set
  - LP: #1091402
* powerpc/ptrace: Fix build with gcc 4.6
  - LP: #1091402
* workqueue: convert BUG_ON()s in __queue_delayed_work() to
  WARN_ON_ONCE()s
  - LP: #1091402
* mm: dmapool: use provided gfp flags for all dma_alloc_coherent() calls
  - LP: #1091402
* x86,AMD: Power driver support for AMD's family 16h processors
  - LP: #1091402
* telephony: ijx: buffer overflow in ixj_write_cid()
  - LP: #1091402
* tmpfs: fix shared mempolicy leak
  - LP: #1091402
* x86: hpet: Fix masking of MSI interrupts
  - LP: #1091402
* USB: add new zte 3g-dongle's pid to option.c
  - LP: #1091402
* USB: option: blacklist network interface on Huawei E173
  - LP: #1091402
* USB: ftdi_sio: Add support for Newport AGILIS motor drivers
  - LP: #1091402
* usb: ftdi_sio: fixup BeagleBone A5+ quirk
  - LP: #1091402
* USB: cp210x: add Virtenio Preon32 device id
  - LP: #1091402
* USB: mark uas driver as BROKEN
  - LP: #1091402
* ACPI / battery: Correct battery capacity values on Thinkpads
  - LP: #1091402
* ACPI / PNP: Do not crash due to stale pointer use during system resume
  - LP: #1091402
* ACPI / video: ignore BIOS initial backlight value for HP Folio 13-2000
  - LP: #1091402
* USB: OHCI: workaround for hardware bug: retired TDs not added to the
  Done Queue
  - LP: #1091402
* xhci: Extend Fresco Logic MSI quirk.
  - LP: #1091402
* ftrace: Clear bits properly in reset_iter_read()
  - LP: #1091402
* powerpc: Update DSCR on all CPUs when writing sysfs dscr_default
  - LP: #1091402
* powerpc: Keep thread.dscr and thread.dscr_inherit in sync
  - LP: #1091402
* Linux 3.0.57
  - LP: #1091402
* exec: use -ELOOP for max recursion depth
  - LP: #1068888
  - CVE-2012-4530

20. By Luis Henriques on 2012-12-05

[Luis Henriques]

* Release Tracking Bug
  - LP: #1086597

[ Upstream Kernel Changes ]

* ath9k: fix stale pointers potentially causing access to free'd skbs
  - LP: #1081645
* rt2800: validate step value for temperature compensation
  - LP: #1081645
* target: Don't return success from module_init() if setup fails
  - LP: #1081645
* cfg80211: fix antenna gain handling
  - LP: #1081645
* wireless: drop invalid mesh address extension frames
  - LP: #1081645
* mac80211: don't inspect Sequence Control field on control frames
  - LP: #1081645
* DRM/Radeon: Fix Load Detection on legacy primary DAC.
  - LP: #1081645
* mac80211: check management frame header length
  - LP: #1081645
* mac80211: fix SSID copy on IBSS JOIN
  - LP: #1081645
* nfsv3: Make v3 mounts fail with ETIMEDOUTs instead EIO on mountd
  timeouts
  - LP: #1081645
* nfs: Show original device name verbatim in /proc/*/mount{s,info}
  - LP: #1081645
* NFSv4: nfs4_locku_done must release the sequence id
  - LP: #1081645
* nfsd: add get_uint for u32's
  - LP: #1081645
* NFS: fix bug in legacy DNS resolver.
  - LP: #1081645
* NFS: Fix Oopses in nfs_lookup_revalidate and nfs4_lookup_revalidate
  - LP: #1081645
* drm: restore open_count if drm_setup fails
  - LP: #1081645
* hwmon: (w83627ehf) Force initial bank selection
  - LP: #1081645
* ALSA: PCM: Fix some races at disconnection
  - LP: #1081645
* ALSA: usb-audio: Fix races at disconnection
  - LP: #1081645
* ALSA: usb-audio: Use rwsem for disconnect protection
  - LP: #1081645
* ALSA: usb-audio: Fix races at disconnection in mixer_quirks.c
  - LP: #1081645
* ALSA: Add a reference counter to card instance
  - LP: #1081645
* ALSA: Avoid endless sleep after disconnect
  - LP: #1081645
* sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()
  - LP: #1081645
* netlink: use kfree_rcu() in netlink_release()
  - LP: #1081645
* tcp: fix FIONREAD/SIOCINQ
  - LP: #1081645
* ipv6: Set default hoplimit as zero.
  - LP: #1081645
* net: usb: Fix memory leak on Tx data path
  - LP: #1081645
* l2tp: fix oops in l2tp_eth_create() error path
  - LP: #1081645
* ipv6: send unsolicited neighbour advertisements to all-nodes
  - LP: #1081645
* futex: Handle futex_pi OWNER_DIED take over correctly
  - LP: #1081645
* drm/vmwgfx: Fix hibernation device reset
  - LP: #1081645
* drm/i915: fixup infoframe support for sdvo
  - LP: #1081645
* drm/i915: clear the entire sdvo infoframe buffer
  - LP: #1081645
* USB: mos7840: remove unused variable
  - LP: #1081645
* xfs: fix reading of wrapped log data
  - LP: #1081645
* intel-iommu: Fix AB-BA lockdep report
  - LP: #1081645
* ALSA: Fix card refcount unbalance
  - LP: #1081645
* ALSA: usb-audio: Fix mutex deadlock at disconnection
  - LP: #1081645
* Linux 3.0.52
  - LP: #1081645
* mm: bugfix: set current->reclaim_state to NULL while returning from
  kswapd()
  - LP: #1083318
* fanotify: fix missing break
  - LP: #1083318
* crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
  data corruption
  - LP: #1083318
* ALSA: hda: Cirrus: Fix coefficient index for beep configuration
  - LP: #1083318
* ALSA: hda - Force to reset IEC958 status bits for AD codecs
  - LP: #1083318, #359361
* ASoC: wm8978: pll incorrectly configured when codec is master
  - LP: #1083318
* ASoC: dapm: Use card_list during DAPM shutdown
  - LP: #1083318
* UBIFS: fix mounting problems after power cuts
  - LP: #1083318
* UBIFS: introduce categorized lprops counter
  - LP: #1083318
* s390/gup: add missing TASK_SIZE check to get_user_pages_fast()
  - LP: #1083318
* USB: option: add Novatel E362 and Dell Wireless 5800 USB IDs
  - LP: #1083318
* USB: option: add Alcatel X220/X500D USB IDs
  - LP: #1083318
* wireless: allow 40 MHz on world roaming channels 12/13
  - LP: #1083318
* m68k: fix sigset_t accessor functions
  - LP: #1083318
* ipv4: avoid undefined behavior in do_ip_setsockopt()
  - LP: #1083318
* ipv6: setsockopt(IPIPPROTO_IPV6, IPV6_MINHOPCOUNT) forgot to set return
  value
  - LP: #1083318
* net: correct check in dev_addr_del()
  - LP: #1083318
* net-rps: Fix brokeness causing OOO packets
  - LP: #1083318
* r8169: use unlimited DMA burst for TX
  - LP: #1083318
* kbuild: Fix gcc -x syntax
  - LP: #1083318
* netfilter: Validate the sequence number of dataless ACK packets as well
  - LP: #1083318
* netfilter: Mark SYN/ACK packets as invalid from original direction
  - LP: #1083318
* netfilter: nf_nat: don't check for port change on ICMP tuples
  - LP: #1083318
* usb: use usb_serial_put in usb_serial_probe errors
  - LP: #1083318
* sky2: Fix for interrupt handler
  - LP: #1083318
* drm/i915: fix overlay on i830M
  - LP: #1083318
* NFS: Wait for session recovery to finish before returning
  - LP: #1083318
* reiserfs: Fix lock ordering during remount
  - LP: #1083318
* reiserfs: Protect reiserfs_quota_on() with write lock
  - LP: #1083318
* reiserfs: Move quota calls out of write lock
  - LP: #1083318
* reiserfs: Protect reiserfs_quota_write() with write lock
  - LP: #1083318
* selinux: fix sel_netnode_insert() suspicious rcu dereference
  - LP: #1083318
* PCI : ability to relocate assigned pci-resources
  - LP: #1083318
* PCI : Calculate right add_size
  - LP: #1083318
* Resource: fix wrong resource window calculation
  - LP: #1083318
* Linux 3.0.53
  - LP: #1083318
* mm/hotplug: correctly add new zone to all other nodes' zone lists
  - LP: #1079860
  - CVE-2012-5517
* Bluetooth: ath3k: Add support for VAIO VPCEH [0489:e027]
  - LP: #898826

19. By Luis Henriques on 2012-11-15

[Luis Henriques]

* Release Tracking Bug
  - LP: #1079256

[ Tim Gardner ]

* [Config] updateconfigs for stable updates

[ Upstream Kernel Changes ]

* Revert "SUNRPC: Ensure we close the socket on EPIPE errors too..."
  - LP: #1075332
* mn10300: only add -mmem-funcs to KBUILD_CFLAGS if gcc supports it
  - LP: #1067857
* kbuild: make: fix if_changed when command contains backslashes
  - LP: #1067857
* media: rc: ite-cir: Initialise ite_dev::rdev earlier
  - LP: #1067857
* ACPI: run _OSC after ACPI_FULL_INITIALIZATION
  - LP: #1067857
* PCI: acpiphp: check whether _ADR evaluation succeeded
  - LP: #1067857
* lib/gcd.c: prevent possible div by 0
  - LP: #1067857
* kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()
  - LP: #1067857
* drivers/scsi/atp870u.c: fix bad use of udelay
  - LP: #1067857
* workqueue: add missing smp_wmb() in process_one_work()
  - LP: #1067857
* xfrm: Workaround incompatibility of ESN and async crypto
  - LP: #1067857
* xfrm_user: return error pointer instead of NULL
  - LP: #1067857
* xfrm_user: return error pointer instead of NULL #2
  - LP: #1067857
* xfrm: fix a read lock imbalance in make_blackhole
  - LP: #1067857
* xfrm_user: fix info leak in copy_to_user_auth()
  - LP: #1067857
* xfrm_user: fix info leak in copy_to_user_state()
  - LP: #1067857
* xfrm_user: fix info leak in copy_to_user_policy()
  - LP: #1067857
* xfrm_user: fix info leak in copy_to_user_tmpl()
  - LP: #1067857
* xfrm_user: don't copy esn replay window twice for new states
  - LP: #1067857
* xfrm_user: ensure user supplied esn replay window is valid
  - LP: #1067857
* net: ethernet: davinci_cpdma: decrease the desc count when cleaning up
  the remaining packets
  - LP: #1067857
* ixp4xx_hss: fix build failure due to missing linux/module.h inclusion
  - LP: #1067857
* netxen: check for root bus in netxen_mask_aer_correctable
  - LP: #1067857
* net-sched: sch_cbq: avoid infinite loop
  - LP: #1067857
* pkt_sched: fix virtual-start-time update in QFQ
  - LP: #1067857
* sierra_net: Endianess bug fix.
  - LP: #1067857
* 8021q: fix mac_len recomputation in vlan_untag()
  - LP: #1067857
* ipv6: release reference of ip6_null_entry's dst entry in __ip6_del_rt
  - LP: #1067857
* tcp: flush DMA queue before sk_wait_data if rcv_wnd is zero
  - LP: #1067857
* sctp: Don't charge for data in sndbuf again when transmitting packet
  - LP: #1067857
* pppoe: drop PPPOX_ZOMBIEs in pppoe_release
  - LP: #1067857
* net: small bug on rxhash calculation
  - LP: #1067857
* net: guard tcp_set_keepalive() to tcp sockets
  - LP: #1067857
* ipv4: raw: fix icmp_filter()
  - LP: #1067857
* ipv6: raw: fix icmpv6_filter()
  - LP: #1067857
* ipv6: mip6: fix mip6_mh_filter()
  - LP: #1067857
* l2tp: fix a typo in l2tp_eth_dev_recv()
  - LP: #1067857
* netrom: copy_datagram_iovec can fail
  - LP: #1067857
* net: do not disable sg for packets requiring no checksum
  - LP: #1067857
* aoe: assert AoE packets marked as requiring no checksum
  - LP: #1067857
* tg3: Fix TSO CAP for 5704 devs w / ASF enabled
  - LP: #1067857
* SCSI: zfcp: Make trace record tags unique
  - LP: #1067857
* SCSI: zfcp: Do not wakeup while suspended
  - LP: #1067857
* SCSI: zfcp: remove invalid reference to list iterator variable
  - LP: #1067857
* SCSI: zfcp: restore refcount check on port_remove
  - LP: #1067857
* SCSI: zfcp: only access zfcp_scsi_dev for valid scsi_device
  - LP: #1067857
* PCI: Check P2P bridge for invalid secondary/subordinate range
  - LP: #1067857
* ext4: online defrag is not supported for journaled files
  - LP: #1067857
* ext4: always set i_op in ext4_mknod()
  - LP: #1067857
* ext4: fix fdatasync() for files with only i_size changes
  - LP: #1067857
* ASoC: wm9712: Fix name of Capture Switch
  - LP: #1067857
* mm: fix invalidate_complete_page2() lock ordering
  - LP: #1067857
* mm: thp: fix pmd_present for split_huge_page and PROT_NONE with THP
  - LP: #1067857
* ALSA: aloop - add locking to timer access
  - LP: #1067857
* ALSA: usb - disable broken hw volume for Tenx TP6911
  - LP: #1067857, #559939
* ALSA: USB: Support for (original) Xbox Communicator
  - LP: #1067857
* drm/radeon: only adjust default clocks on NI GPUs
  - LP: #1067857
* drm/radeon: Add MSI quirk for gateway RS690
  - LP: #1067857
* drm/radeon: force MSIs on RS690 asics
  - LP: #1067857
* rcu: Fix day-one dyntick-idle stall-warning bug
  - LP: #1067857
* r8169: fix wake on lan setting for non-8111E.
  - LP: #1067857
* r8169: don't enable rx when shutdown.
  - LP: #1067857
* r8169: remove erroneous processing of always set bit.
  - LP: #1067857
* r8169: jumbo fixes.
  - LP: #1067857
* r8169: expand received packet length indication.
  - LP: #1067857
* r8169: increase the delay parameter of pm_schedule_suspend
  - LP: #1067857
* r8169: Rx FIFO overflow fixes.
  - LP: #1067857
* r8169: fix Config2 MSIEnable bit setting.
  - LP: #1067857
* r8169: missing barriers.
  - LP: #1067857
* r8169: runtime resume before shutdown.
  - LP: #1067857
* r8169: Config1 is read-only on 8168c and later.
  - LP: #1067857
* r8169: 8168c and later require bit 0x20 to be set in Config2 for PME
  signaling.
  - LP: #1067857
* r8169: fix unsigned int wraparound with TSO
  - LP: #1067857
* r8169: call netif_napi_del at errpaths and at driver unload
  - LP: #1067857
* revert "mm: mempolicy: Let vma_merge and vma_split handle
  vma->vm_policy linkages"
  - LP: #1067857
* mempolicy: remove mempolicy sharing
  - LP: #1067857
* mempolicy: fix a race in shared_policy_replace()
  - LP: #1067857
* mempolicy: fix refcount leak in mpol_set_shared_policy()
  - LP: #1067857
* mempolicy: fix a memory corruption by refcount imbalance in
  alloc_pages_vma()
  - LP: #1067857
* CPU hotplug, cpusets, suspend: Don't modify cpusets during
  suspend/resume
  - LP: #1067857
* mtd: autcpu12-nvram: Fix compile breakage
  - LP: #1067857
* mtd: nandsim: bugfix: fail if overridesize is too big
  - LP: #1067857
* mtd: nand: Use the mirror BBT descriptor when reading its version
  - LP: #1067857
* mtd: omap2: fix omap_nand_remove segfault
  - LP: #1067857
* mtd: omap2: fix module loading
  - LP: #1067857
* Linux 3.0.46
  - LP: #1067857
* eCryptfs: check for eCryptfs cipher support at mount
  - LP: #338914
* ARM: vfp: fix saving d16-d31 vfp registers on v6+ kernels
  - LP: #1069914
* lockd: use rpc client's cl_nodename for id encoding
  - LP: #1069914
* ACPI: EC: Make the GPE storm threshold a module parameter
  - LP: #1069914
* ACPI: EC: Add a quirk for CLEVO M720T/M730T laptop
  - LP: #1069914
* mips,kgdb: fix recursive page fault with CONFIG_KPROBES
  - LP: #1069914
* tmpfs,ceph,gfs2,isofs,reiserfs,xfs: fix fh_len checking
  - LP: #1069914
* ARM: 7541/1: Add ARM ERRATA 775420 workaround
  - LP: #1069914
* firewire: cdev: fix user memory corruption (i386 userland on amd64
  kernel)
  - LP: #1069914
* SUNRPC: Ensure that the TCP socket is closed when in CLOSE_WAIT
  - LP: #1069914
* xen/bootup: allow {read|write}_cr8 pvops call.
  - LP: #1069914
* xen/bootup: allow read_tscp call for Xen PV guests.
  - LP: #1069914
* autofs4 - fix reset pending flag on mount fail
  - LP: #1069914
* module: taint kernel when lve module is loaded
  - LP: #1069914
* video/udlfb: fix line counting in fb_write
  - LP: #1069914
* viafb: don't touch clock state on OLPC XO-1.5
  - LP: #1069914
* timers: Fix endless looping between cascade() and internal_add_timer()
  - LP: #1069914
* pktgen: fix crash when generating IPv6 packets
  - LP: #1069914
* tg3: Apply short DMA frag workaround to 5906
  - LP: #1069914
* ipvs: fix oops in ip_vs_dst_event on rmmod
  - LP: #1069914
* netfilter: nf_conntrack: fix racy timer handling with reliable events
  - LP: #1069914
* netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
  - LP: #1069914
* netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP
  expectation
  - LP: #1069914
* ipvs: fix oops on NAT reply in br_nf context
  - LP: #1069914
* netfilter: nf_nat_sip: fix via header translation with multiple
  parameters
  - LP: #1069914
* netfilter: nf_ct_expect: fix possible access to uninitialized timer
  - LP: #1069914
* netfilter: limit, hashlimit: avoid duplicated inline
  - LP: #1069914
* netfilter: xt_limit: have r->cost != 0 case work
  - LP: #1069914
* Add CDC-ACM support for the CX93010-2x UCMxx USB Modem
  - LP: #1069914
* drm/radeon: Don't destroy I2C Bus Rec in radeon_ext_tmds_enc_destroy().
  - LP: #1069914
* jbd: Fix assertion failure in commit code due to lacking transaction
  credits
  - LP: #1069914
* x86, random: Architectural inlines to get random integers with RDRAND
  - LP: #1069914
* x86, random: Verify RDRAND functionality and allow it to be disabled
  - LP: #1069914
* tpm: Propagate error from tpm_transmit to fix a timeout hang
  - LP: #1069914
* udf: fix retun value on error path in udf_load_logicalvol
  - LP: #1069914
* ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()
  - LP: #1069914
* ALSA: emu10k1: add chip details for E-mu 1010 PCIe card
  - LP: #1069914
* Linux 3.0.47
  - LP: #1069914
* Linux 3.0.48
  - LP: #1069939
* drm/i915: apply timing generator bug workaround on CPT and PPT
  - LP: #1041315
* arch/tile: avoid generating .eh_frame information in modules
  - LP: #1075329
* NLM: nlm_lookup_file() may return NLMv4-specific error codes
  - LP: #1075329
* oprofile, x86: Fix wrapping bug in op_x86_get_ctrl()
  - LP: #1075329
* SUNRPC: Prevent kernel stack corruption on long values of flush
  - LP: #1075329
* Revert: lockd: use rpc client's cl_nodename for id encoding
  - LP: #1075329
* pcmcia: sharpsl: don't discard sharpsl_pcmcia_ops
  - LP: #1075329
* kernel/sys.c: fix stack memory content leak via UNAME26
  - LP: #1075329
  - CVE-2012-0957
* use clamp_t in UNAME26 fix
  - LP: #1075329
* x86: Exclude E820_RESERVED regions and memory holes above 4 GB from
  direct mapping.
  - LP: #1075329
* xen/x86: don't corrupt %eip when returning from a signal handler
  - LP: #1075329
* USB: cdc-acm: fix pipe type of write endpoint
  - LP: #1075329
* usb: acm: fix the computation of the number of data bits
  - LP: #1075329
* USB: option: blacklist net interface on ZTE devices
  - LP: #1075329
* USB: option: add more ZTE devices
  - LP: #1075329
* cgroup: notify_on_release may not be triggered in some cases
  - LP: #1075329
* amd64_edac:__amd64_set_scrub_rate(): avoid overindexing scrubrates[]
  - LP: #1075329
* media: au0828: fix case where STREAMOFF being called on stopped stream
  causes BUG()
  - LP: #1075329
* net: Fix skb_under_panic oops in neigh_resolve_output
  - LP: #1075329
* skge: Add DMA mask quirk for Marvell 88E8001 on ASUS P5NSLI motherboard
  - LP: #1075329
* RDS: fix rds-ping spinlock recursion
  - LP: #1075329
* tcp: resets are misrouted
  - LP: #1075329
* sparc64: fix ptrace interaction with force_successful_syscall_return()
  - LP: #1075329
* sparc64: Like x86 we should check current->mm during perf backtrace
  generation.
  - LP: #1075329
* sparc64: Fix bit twiddling in sparc_pmu_enable_event().
  - LP: #1075329
* sparc64: do not clobber personality flags in sys_sparc64_personality()
  - LP: #1075329
* sparc64: Be less verbose during vmemmap population.
  - LP: #1075329
* xHCI: add cmd_ring_state
  - LP: #1075329
* xHCI: add aborting command ring function
  - LP: #1075329
* xHCI: cancel command after command timeout
  - LP: #1075329
* xHCI: handle command after aborting the command ring
  - LP: #1075329
* Linux 3.0.49
  - LP: #1075329
* gen_init_cpio: avoid stack overflow when expanding
  - LP: #1075332
* fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check
  - LP: #1075332
* drivers/rtc/rtc-imxdi.c: add missing spin lock initialization
  - LP: #1075332
* genalloc: stop crashing the system when destroying a pool
  - LP: #1075332
* ARM: 7559/1: smp: switch away from the idmap before updating
  init_mm.mm_count
  - LP: #1075332
* SUNRPC: Get rid of the xs_error_report socket callback
  - LP: #1075332
* SUNRPC: Clear the connect flag when socket state is TCP_CLOSE_WAIT
  - LP: #1075332
* SUNRPC: Prevent races in xs_abort_connection()
  - LP: #1075332
* sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
  - LP: #1075332
* ehci: fix Lucid nohandoff pci quirk to be more generic with BIOS
  versions
  - LP: #1075332
* ehci: Add yet-another Lucid nohandoff pci quirk
  - LP: #1075332
* usb-storage: add unusual_devs entry for Casio EX-N1 digital camera
  - LP: #1075332
* usb hub: send clear_tt_buffer_complete events when canceling TT clear
  work
  - LP: #1075332
* USB: whiteheat: fix memory leak in error path
  - LP: #1075332
* USB: opticon: fix DMA from stack
  - LP: #1075332
* USB: opticon: fix memory leak in error path
  - LP: #1075332
* USB: serial: Fix memory leak in sierra_release()
  - LP: #1075332
* USB: sierra: fix memory leak in attach error path
  - LP: #1075332
* USB: sierra: fix memory leak in probe error path
  - LP: #1075332
* USB: mos7840: fix urb leak at release
  - LP: #1075332
* USB: mos7840: fix port-device leak in error path
  - LP: #1075332
* USB: mos7840: remove NULL-urb submission
  - LP: #1075332
* USB: mos7840: remove invalid disconnect handling
  - LP: #1075332
* xhci: Fix potential NULL ptr deref in command cancellation.
  - LP: #1075332
* vhost: fix mergeable bufs on BE hosts
  - LP: #1075332
* ARM: at91/i2c: change id to let i2c-gpio work
  - LP: #1075332
* mac80211: check if key has TKIP type before updating IV
  - LP: #1075332
* bcma: fix unregistration of cores
  - LP: #1075332
* cpufreq / powernow-k8: Remove usage of smp_processor_id() in
  preemptible code
  - LP: #1075332
* x86, mm: Find_early_table_space based on ranges that are actually being
  mapped
  - LP: #1075332
* x86, mm: Undo incorrect revert in arch/x86/mm/init.c
  - LP: #1075332
* staging: comedi: amplc_pc236: fix invalid register access during detach
  - LP: #1075332
* drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13
  - LP: #1075332
* Linux 3.0.50
  - LP: #1075332
* floppy: do put_disk on current dr if blk_init_queue fails
  - LP: #1075335
* x86: Remove the ancient and deprecated disable_hlt() and enable_hlt()
  facility
  - LP: #1075335
* mm: fix XFS oops due to dirty pages without buffers on s390
  - LP: #1075335
* drm/nouveau: silence modesetting spam on pre-gf8 chipsets
  - LP: #1075335
* Linux 3.0.51
  - LP: #1075335
* net: fix divide by zero in tcp algorithm illinois
  - LP: #1077091
  - CVE-2012-4565

18. By Luis Henriques on 2012-10-19

[Luis Henriques]

* Release Tracking Bug
  - LP: #1068230

[ James M Leddy ]

* SAUCE: input: fix weird issue of synaptics psmouse sync lost after
  resume
  - LP: #717970

[ Upstream Kernel Changes ]

* UBUNTU SAUCE: apparmor: fix IRQ stack overflow
  - LP: #1056078
* net_sched: gact: Fix potential panic in tcf_gact().
  - LP: #1060430
* isdnloop: fix and simplify isdnloop_init()
  - LP: #1060430
* net/core: Fix potential memory leak in dev_set_alias()
  - LP: #1060430
* af_packet: remove BUG statement in tpacket_destruct_skb
  - LP: #1060430
* ipv6: addrconf: Avoid calling netdevice notifiers with RCU read-side
  lock
  - LP: #1060430
* atm: fix info leak in getsockopt(SO_ATMPVC)
  - LP: #1060430
* atm: fix info leak via getsockname()
  - LP: #1060430
* Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)
  - LP: #1060430
* Bluetooth: HCI - Fix info leak via getsockname()
  - LP: #1060430
* Bluetooth: RFCOMM - Fix info leak in ioctl(RFCOMMGETDEVLIST)
  - LP: #1060430
* Bluetooth: RFCOMM - Fix info leak via getsockname()
  - LP: #1060430
* Bluetooth: L2CAP - Fix info leak via getsockname()
  - LP: #1060430
* llc: fix info leak via getsockname()
  - LP: #1060430
* dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)
  - LP: #1060430
* ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)
  - LP: #1060430
* net: fix info leak in compat dev_ifconf()
  - LP: #1060430
* netlink: fix possible spoofing from non-root processes
  - LP: #1060430
* l2tp: avoid to use synchronize_rcu in tunnel free function
  - LP: #1060430
* net: ipv4: ipmr_expire_timer causes crash when removing net namespace
  - LP: #1060430
* workqueue: reimplement work_on_cpu() using system_wq
  - LP: #1060430
* cpufreq/powernow-k8: workqueue user shouldn't migrate the kworker to
  another CPU
  - LP: #1060430
* cciss: fix handling of protocol error
  - LP: #1060430
* vfs: make O_PATH file descriptors usable for 'fstat()'
  - LP: #1060430
* vfs: dcache: use DCACHE_DENTRY_KILLED instead of DCACHE_DISCONNECTED in
  d_kill()
  - LP: #1060430
* netconsole: remove a redundant netconsole_target_put()
  - LP: #1060430
* target: Fix ->data_length re-assignment bug with SCSI overflow
  - LP: #1060430
* ALSA: ice1724: Use linear scale for AK4396 volume control.
  - LP: #1060430
* Staging: speakup: fix an improperly-declared variable.
  - LP: #1060430
* staging: vt6656: [BUG] - Failed connection, incorrect endian.
  - LP: #1060430
* staging: r8712u: fix bug in r8712_recv_indicatepkt()
  - LP: #1060430
* staging: comedi: das08: Correct AO output for das08jr-16-ao
  - LP: #1060430
* USB: option: replace ZTE K5006-Z entry with vendor class rule
  - LP: #1060430
* perf_event: Switch to internal refcount, fix race with close()
  - LP: #1060430
* mmc: mxs-mmc: fix deadlock in SDIO IRQ case
  - LP: #1060430
* mmc: sdhci-esdhc: break out early if clock is 0
  - LP: #1060430
* ahci: Add alternate identifier for the 88SE9172
  - LP: #1060430
* kobject: fix oops with "input0: bad kobj_uevent_env content in
  show_uevent()"
  - LP: #1060430
* Redefine ATOMIC_INIT and ATOMIC64_INIT to drop the casts
  - LP: #1060430
* md: Don't truncate size at 4TB for RAID0 and Linear
  - LP: #1060430
* mm/page_alloc: fix the page address of higher page's buddy calculation
  - LP: #1060430
* drivers/rtc/rtc-twl.c: ensure all interrupts are disabled during probe
  - LP: #1060430
* hwmon: (twl4030-madc-hwmon) Initialize uninitialized structure elements
  - LP: #1060430
* can: mcp251x: avoid repeated frame bug
  - LP: #1060430
* mm/ia64: fix a memory block size bug
  - LP: #1060430
* memory hotplug: fix section info double registration bug
  - LP: #1060430
* xen/boot: Disable NUMA for PV guests.
  - LP: #1060430
* hwmon: (fam15h_power) Tweak runavg_range on resume
  - LP: #1060430
* hwmon: (ads7871) Add 'name' sysfs attribute
  - LP: #1060430
* SCSI: mpt2sas: Fix for issue - Unable to boot from the drive connected
  to HBA
  - LP: #1060430
* SCSI: bnx2i: Fixed NULL ptr deference for 1G bnx2 Linux iSCSI offload
  - LP: #1060430
* SCSI: hpsa: fix handling of protocol error
  - LP: #1060430
* hpwdt: Fix kdump issue in hpwdt
  - LP: #1060430
* ARM: fix bad applied patch for arch/arm/Kconfig of stable 3.0.y tree.
  - LP: #1060430
* ARM: 7532/1: decompressor: reset SCTLR.TRE for VMSA ARMv7 cores
  - LP: #1060430
* tracing: Don't call page_to_pfn() if page is NULL
  - LP: #1060430
* Input: i8042 - disable mux on Toshiba C850D
  - LP: #1060430
* asix: Support DLink DUB-E100 H/W Ver C1
  - LP: #1060430
* can: ti_hecc: fix oops during rmmod
  - LP: #1060430
* can: janz-ican3: fix support for older hardware revisions
  - LP: #1060430
* cfg80211: fix possible circular lock on reg_regdb_search()
  - LP: #1060430
* dmaengine: at_hdmac: fix comment in atc_prep_slave_sg()
  - LP: #1060430
* dmaengine: at_hdmac: check that each sg data length is non-null
  - LP: #1060430
* rt2x00: Fix word size of rt2500usb MAC_CSR19 register.
  - LP: #1060430
* rt2x00: Fix rfkill polling prior to interface start.
  - LP: #1060430
* NFS: Fix the initialisation of the readdir 'cookieverf' array
  - LP: #1060430
* NFS: Fix a problem with the legacy binary mount code
  - LP: #1060430
* NFS: return error from decode_getfh in decode open
  - LP: #1060430
* EHCI: Update qTD next pointer in QH overlay region during unlink
  - LP: #1060430
* USB: ftdi_sio: PID for NZR SEM 16+ USB
  - LP: #1060430
* USB: ftdi_sio: do not claim CDC ACM function
  - LP: #1060430
* USB: ftdi-sio: add support for more Physik Instrumente devices
  - LP: #1060430
* USB: add device quirk for Joss Optical touchboard
  - LP: #1060430
* Intel xhci: Only switch the switchable ports
  - LP: #1060430
* xhci: Fix a logical vs bitwise AND bug
  - LP: #1060430
* xhci: Make handover code more robust
  - LP: #1060430
* xhci: Recognize USB 3.0 devices as superspeed at powerup
  - LP: #1000424, #1060430
* usb: host: xhci: fix compilation error for non-PCI based stacks
  - LP: #1060430
* xhci: Fix bug after deq ptr set to link TRB.
  - LP: #1060430
* mutex: Place lock in contended state after fastpath_lock failure
  - LP: #1060430
* drivers/rtc/rtc-rs5c348.c: fix hour decoding in 12-hour mode
  - LP: #1060430
* PM / Runtime: Fix rpm_resume() return value for power.no_callbacks set
  - LP: #1060430
* PM / Runtime: Clear power.deferred_resume on success in rpm_suspend()
  - LP: #1060430
* drivers/misc/sgi-xp/xpc_uv.c: SGI XPC fails to load when cpu 0 is out
  of IRQ resources
  - LP: #1060430
* fbcon: fix race condition between console lock and cursor timer (v1.1)
  - LP: #1060430
* drm/radeon/kms: extend the Fujitsu D3003-S2 board connector quirk to
  cover later silicon stepping
  - LP: #1060430
* asus-laptop: HRWS/HWRS typo
  - LP: #1060430
* asus-nb-wmi: add some video toggle keys
  - LP: #1060430
* drm/i915: HDMI - Clear Audio Enable bit for Hot Plug
  - LP: #1060430
* workqueue: UNBOUND -> REBIND morphing in rebind_workers() should be
  atomic
  - LP: #1060430
* x86: Fix boot on Twinhead H12Y
  - LP: #1060430
* Bluetooth: btusb: Add vendor specific ID (0a5c:21f4) BCM20702A0
  - LP: #1060430
* Bluetooth: Use USB_VENDOR_AND_INTERFACE() for Broadcom devices
  - LP: #1060430
* Bluetooth: Add support for Apple vendor-specific devices
  - LP: #1060430
* net: Statically initialize init_net.dev_base_head
  - LP: #1060430
* Fix a dead loop in async_synchronize_full()
  - LP: #1060430
* libata: Prevent interface errors with Seagate FreeAgent GoFlex
  - LP: #1060430
* cpufreq / ACPI: Fix not loading acpi-cpufreq driver regression
  - LP: #1060430
* media: lirc_sir: make device registration work
  - LP: #1060430
* drop_monitor: fix sleeping in invalid context warning
  - LP: #1060430
* drop_monitor: Make updating data->skb smp safe
  - LP: #1060430
* drop_monitor: prevent init path from scheduling on the wrong cpu
  - LP: #1060430
* drop_monitor: dont sleep in atomic context
  - LP: #1060430
* time: Improve sanity checking of timekeeping inputs
  - LP: #1060430
* time: Avoid making adjustments if we haven't accumulated anything
  - LP: #1060430
* time: Move ktime_t overflow checking into timespec_valid_strict
  - LP: #1060430
* pch_uart: Fix missing break for 16 byte fifo
  - LP: #1060430
* pch_uart: Fix rx error interrupt setting issue
  - LP: #1060430
* pch_uart: Fix parity setting issue
  - LP: #1060430
* Squashfs: fix mount time sanity check for corrupted superblock
  - LP: #1060430
* mmc: sd: Handle SD3.0 cards not supporting UHS-I bus speed mode
  - LP: #1060430
* mmc: Prevent 1.8V switch for SD hosts that don't support UHS modes.
  - LP: #1060430
* e1000e: Disable ASPM L1 on 82574
  - LP: #1060430
* UBI: fix a horrible memory deallocation bug
  - LP: #1060430
* spi/mpc83xx: fix NULL pdata dereference bug
  - LP: #1060430
* spi/spi-fsl-spi: reference correct pdata in fsl_spi_cs_control
  - LP: #1060430
* sched: Fix ancient race in do_exit()
  - LP: #1060430
* MCE: Fix vm86 handling for 32bit mce handler
  - LP: #1060430
* USB: Fix race condition when removing host controllers
  - LP: #1060430
* ARM: 7467/1: mutex: use generic xchg-based implementation for ARMv6+
  - LP: #1060430
* Linux 3.0.44
  - LP: #1060430
* vfs: dcache: fix deadlock in tree traversal
  - LP: #1063828
* dm: handle requests beyond end of device instead of using BUG_ON
  - LP: #1063828
* USB: option: blacklist QMI interface on ZTE MF683
  - LP: #1063828
* USB: ftdi_sio: add TIAO USB Multi-Protocol Adapter (TUMPA) support
  - LP: #1063828
* USB: qcaux: add Pantech vendor class match
  - LP: #1063828
* staging: speakup_soft: Fix reading of init string
  - LP: #1063828
* staging: comedi: s626: don't dereference insn->data
  - LP: #1063828
* staging: comedi: jr3_pci: fix iomem dereference
  - LP: #1063828
* staging: comedi: don't dereference user memory for INSN_INTTRIG
  - LP: #1063828
* staging: comedi: fix memory leak for saved channel list
  - LP: #1063828
* Remove BUG_ON from n_tty_read()
  - LP: #1063828
* TTY: ttyprintk, don't touch behind tty->write_buf
  - LP: #1063828
* serial: pl011: handle corruption at high clock speeds
  - LP: #1063828
* serial: set correct baud_base for EXSYS EX-41092 Dual 16950
  - LP: #1063828
* b43legacy: Fix crash on unload when firmware not available
  - LP: #1063828
* firmware: Add missing attributes to EFI variable attribute print out
  from sysfs
  - LP: #1063828
* xhci: Intel Panther Point BEI quirk.
  - LP: #1063828
* n_gsm: added interlocking for gsm_data_lock for certain code paths
  - LP: #1063828
* coredump: prevent double-free on an error path in core dumper
  - LP: #1063828
* Increase XHCI suspend timeout to 16ms
  - LP: #1063828
* n_gsm: memory leak in uplink error path
  - LP: #1063828
* UBI: fix autoresize handling in R/O mode
  - LP: #1063828
* SCSI: ibmvscsi: Fix host config length field overflow
  - LP: #1063828
* SCSI: hpsa: Use LUN reset instead of target reset
  - LP: #1063828
* can: mscan-mpc5xxx: fix return value check in mpc512x_can_get_clock()
  - LP: #1063828
* IPoIB: Fix use-after-free of multicast object
  - LP: #1063828
* IB/srp: Fix use-after-free in srp_reset_req()
  - LP: #1063828
* IB/srp: Avoid having aborted requests hang
  - LP: #1063828
* isci: fix isci_pci_probe() generates warning on efi failure path
  - LP: #1063828
* x86/alternatives: Fix p6 nops on non-modular kernels
  - LP: #1063828
* PCI: honor child buses add_size in hot plug configuration
  - LP: #1063828
* SCSI: scsi_remove_target: fix softlockup regression on hot remove
  - LP: #1063828
* SCSI: scsi_dh_alua: Enable STPG for unavailable ports
  - LP: #1063828
* Linux 3.0.45
  - LP: #1063828

17. By Luis Henriques on 2012-09-26

[Luis Henriques]

* Release Tracking Bug
  - LP: #1056607

[ Dave Airlie ]

* SAUCE: drm/vmwgfx: add MODULE_DEVICE_TABLE so vmwgfx loads at boot
  - LP: #1039157

[ Stefan Bader ]

* Revert "SAUCE: fix pv-ops for legacy Xen"
  - LP: #1044550

[ Upstream Kernel Changes ]

* KVM: Fix buffer overflow in kvm_set_irq()
  - LP: #1016298
  - CVE-2012-2137
* VFS : mount lock scalability for internal mounts
  - LP: #990365
  - CVE-2012-2127
* procfs: fix a vfsmount longterm reference leak
  - LP: #990365
  - CVE-2012-2127
* eCryptfs: Copy up attributes of the lower target inode after rename
  - LP: #561129
* eCryptfs: Write out all dirty pages just before releasing the lower
  file
  - LP: #1047261
* eCryptfs: Call lower ->flush() from ecryptfs_flush()
  - LP: #1047261
* USB: vt6656: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* USB: emi62: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* ALSA: hda - fix Copyright debug message
  - LP: #1052005
* ARM: 7487/1: mm: avoid setting nG bit for user mappings that aren't
  present
  - LP: #1052005
* ARM: 7488/1: mm: use 5 bits for swapfile type encoding
  - LP: #1052005
* ARM: 7489/1: errata: fix workaround for erratum #720789 on UP systems
  - LP: #1052005
* ARM: S3C24XX: Fix s3c2410_dma_enqueue parameters
  - LP: #1052005
* ARM: imx: select CPU_FREQ_TABLE when needed
  - LP: #1052005
* ASoC: wm9712: Fix microphone source selection
  - LP: #1052005
* vfs: missed source of ->f_pos races
  - LP: #1052005
* vfs: canonicalize create mode in build_open_flags()
  - LP: #1052005
* alpha: Don't export SOCK_NONBLOCK to user space.
  - LP: #1052005
* USB: winbond: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* mm: hugetlbfs: correctly populate shared pmd
  - LP: #1052005
* NFSv3: Ensure that do_proc_get_root() reports errors correctly
  - LP: #1052005
* NFSv4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done
  - LP: #1052005
* NFS: Alias the nfs module to nfs4
  - LP: #1052005
* audit: don't free_chunk() after fsnotify_add_mark()
  - LP: #1052005
* audit: fix refcounting in audit-tree
  - LP: #1052005
* svcrpc: fix BUG() in svc_tcp_clear_pages
  - LP: #1052005
* svcrpc: fix svc_xprt_enqueue/svc_recv busy-looping
  - LP: #1052005
* svcrpc: sends on closed socket should stop immediately
  - LP: #1052005
* cciss: fix incorrect scsi status reporting
  - LP: #1052005
* ACPI: export symbol acpi_get_table_with_size
  - LP: #1052005
* ath9k: fix decrypt_error initialization in ath_rx_tasklet()
  - LP: #1052005
* PCI: EHCI: Fix crash during hibernation on ASUS computers
  - LP: #1052005
* block: replace __getblk_slow misfix by grow_dev_page fix
  - LP: #1052005
* USB: spca506: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* USB: p54usb: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* USB: rtl8187: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* USB: smsusb: remove __devinit* from the struct usb_device_id table
  - LP: #1052005
* USB: CDC ACM: Fix NULL pointer dereference
  - LP: #1052005
* powerpc: Fix DSCR inheritance in copy_thread()
  - LP: #1052005
* powerpc: Restore correct DSCR in context switch
  - LP: #1052005
* Remove user-triggerable BUG from mpol_to_str
  - LP: #1052005
* SCSI: megaraid_sas: Move poll_aen_lock initializer
  - LP: #1052005
* SCSI: mpt2sas: Fix for Driver oops, when loading driver with
  max_queue_depth command line option to a very small value
  - LP: #1052005
* SCSI: Fix 'Device not ready' issue on mpt2sas
  - LP: #1052005
* udf: Fix data corruption for files in ICB
  - LP: #1052005
* ext3: Fix fdatasync() for files with only i_size changes
  - LP: #1052005
* fuse: fix retrieve length
  - LP: #1052005
* Input: i8042 - add Gigabyte T1005 series netbooks to noloop table
  - LP: #1052005
* PARISC: Redefine ATOMIC_INIT and ATOMIC64_INIT to drop the casts
  - LP: #1052005
* dccp: check ccid before dereferencing
  - LP: #1052005
* hwmon: (asus_atk0110) Add quirk for Asus M5A78L
  - LP: #1052005
* Linux 3.0.43
  - LP: #1052005

16. By Luis Henriques on 2012-09-05

[Luis Henriques]

* Release Tracking Bug
  - LP: #1046423

[ Upstream Kernel Changes ]

* rds: set correct msg_namelen
  - LP: #1031112
  - CVE-2012-3430
* x86: Simplify code by removing a !SMP #ifdefs from 'struct cpuinfo_x86'
  - LP: #1037281
* Redefine ATOMIC_INIT and ATOMIC64_INIT to drop the casts
  - LP: #1037281
* SUNRPC: return negative value in case rpcbind client creation error
  - LP: #1037281
* nilfs2: fix deadlock issue between chcp and thaw ioctls
  - LP: #1037281
* pcdp: use early_ioremap/early_iounmap to access pcdp table
  - LP: #1037281
* mm: fix wrong argument of migrate_huge_pages() in
  soft_offline_huge_page()
  - LP: #1037281
* ARM: 7478/1: errata: extend workaround for erratum #720789
  - LP: #1037281
* ARM: 7479/1: mm: avoid NULL dereference when flushing gate_vma with
  VIVT caches
  - LP: #1037281
* mm: mmu_notifier: fix freed page still mapped in secondary MMU
  - LP: #1037281
* mac80211: cancel mesh path timer
  - LP: #1037281
* x86, nops: Missing break resulting in incorrect selection on Intel
  - LP: #1037281
* random: Add support for architectural random hooks
  - LP: #1037281
* fix typo/thinko in get_random_bytes()
  - LP: #1037281
* random: Use arch_get_random_int instead of cycle counter if avail
  - LP: #1037281
* random: Use arch-specific RNG to initialize the entropy store
  - LP: #1037281
* random: Adjust the number of loops when initializing
  - LP: #1037281
* drivers/char/random.c: fix boot id uniqueness race
  - LP: #1037281
* random: make 'add_interrupt_randomness()' do something sane
  - LP: #1037281
* random: use lockless techniques in the interrupt path
  - LP: #1037281
* random: create add_device_randomness() interface
  - LP: #1037281
* usb: feed USB device information to the /dev/random driver
  - LP: #1037281
* net: feed /dev/random with the MAC address when registering a device
  - LP: #1037281
* random: use the arch-specific rng in xfer_secondary_pool
  - LP: #1037281
* random: add new get_random_bytes_arch() function
  - LP: #1037281
* random: add tracepoints for easier debugging and verification
  - LP: #1037281
* MAINTAINERS: Theodore Ts'o is taking over the random driver
  - LP: #1037281
* rtc: wm831x: Feed the write counter into device_add_randomness()
  - LP: #1037281
* mfd: wm831x: Feed the device UUID into device_add_randomness()
  - LP: #1037281
* random: remove rand_initialize_irq()
  - LP: #1037281
* random: Add comment to random_initialize()
  - LP: #1037281
* dmi: Feed DMI table to /dev/random driver
  - LP: #1037281
* random: mix in architectural randomness in extract_buf()
  - LP: #1037281
* x86, microcode: microcode_core.c simple_strtoul cleanup
  - LP: #1037281
* x86, microcode: Sanitize per-cpu microcode reloading interface
  - LP: #1037281
* mm: hugetlbfs: close race during teardown of hugetlbfs shared page
  tables
  - LP: #1037281
* ARM: mxs: Remove MMAP_MIN_ADDR setting from mxs_defconfig
  - LP: #1037281
* ARM: pxa: remove irq_to_gpio from ezx-pcap driver
  - LP: #1037281
* cfg80211: process pending events when unregistering net device
  - LP: #1037281
* cfg80211: fix interface combinations check for ADHOC(IBSS)
  - LP: #1037281
* e1000e: NIC goes up and immediately goes down
  - LP: #1037281
* Input: wacom - Bamboo One 1024 pressure fix
  - LP: #1037281
* rt61pci: fix NULL pointer dereference in config_lna_gain
  - LP: #1037281
* Linux 3.0.41
  - LP: #1037281
* eCryptfs: Revert to a writethrough cache model
  - LP: #1034012
* net: Allow driver to limit number of GSO segments per skb
  - LP: #1037456
  - CVE-2012-3412
* tcp: do not scale TSO segment size with reordering degree
  - LP: #1037456
  - CVE-2012-3412
* tcp: Apply device TSO segment limit earlier
  - LP: #1037456
  - CVE-2012-3412
* sfc: Replace some literal constants with EFX_PAGE_SIZE/EFX_BUF_SIZE
  - LP: #1037456
  - CVE-2012-3412
* sfc: Fix maximum number of TSO segments and minimum TX queue size
  - LP: #1037456
  - CVE-2012-3412
* s390/compat: fix mmap compat system calls
  - LP: #1042241
* fuse: verify all ioctl retry iov elements
  - LP: #1042241
* xen: mark local pages as FOREIGN in the m2p_override
  - LP: #1042241
* drm/i915: correctly order the ring init sequence
  - LP: #1042241
* drm/radeon: do not reenable crtc after moving vram start address
  - LP: #1042241
* ext4: avoid kmemcheck complaint from reading uninitialized memory
  - LP: #1042241
* xhci: Add Etron XHCI_TRUST_TX_LENGTH quirk.
  - LP: #1042241
* xhci: Increase reset timeout for Renesas 720201 host.
  - LP: #1042241
* xhci: Switch PPT ports to EHCI on shutdown.
  - LP: #1042241
* USB: add USB_VENDOR_AND_INTERFACE_INFO() macro
  - LP: #1042241
* USB: support the new interfaces of Huawei Data Card devices in option
  driver
  - LP: #1042241
* USB: option: add ZTE K5006-Z
  - LP: #1042241
* USB: ftdi_sio: Add VID/PID for Kondo Serial USB
  - LP: #1042241
* usb: serial: mos7840: Fixup mos7840_chars_in_buffer()
  - LP: #1042241
* IB/srp: Fix a race condition
  - LP: #1042241
* Linux 3.0.42
  - LP: #1042241