lp://staging/ubuntu/maverick-security/linux-mvl-dove

Created by James Westby and last modified
Get this branch:
bzr branch lp://staging/ubuntu/maverick-security/linux-mvl-dove
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

47. By Paolo Pisati

* Release Tracking Bug
  - LP: #932240

[ Paolo Pisati ]

* Rebased to 2.6.32-39.86

[ Ubuntu: 2.6.32-39.86 ]

* Release Tracking Bug
  - LP: #931647
* ext4: fix undefined behavior in ext4_fill_flex_info()
  - LP: #922315
* ALSA: snd-usb-us122l: Delete calls to preempt_disable
  - LP: #922315
* ALSA: ice1724 - Check for ac97 to avoid kernel oops
  - LP: #922315
* ALSA: hda - Return the error from get_wcaps_type() for invalid NIDs
  - LP: #922315
* HID: bump maximum global item tag report size to 96 bytes
  - LP: #724831, #922315
* UBI: fix use-after-free on error path
  - LP: #922315
* PCI: Fix PCI_EXP_TYPE_RC_EC value
  - LP: #922315
* PCI: msi: Disable msi interrupts when we initialize a pci device
  - LP: #922315
* xen/xenbus: Reject replies with payload > XENSTORE_PAYLOAD_MAX.
  - LP: #922315
* ima: free duplicate measurement memory
  - LP: #922315
* PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB
  - LP: #922315
* x86: Fix mmap random address range
  - LP: #922315
* UBI: fix nameless volumes handling
  - LP: #922315
* i2c: Fix error value returned by several bus drivers
  - LP: #922315
* V4L/DVB: v4l2-ioctl: integer overflow in video_usercopy()
  - LP: #922315
* svcrpc: fix double-free on shutdown of nfsd after changing pool mode
  - LP: #922315
* svcrpc: destroy server sockets all at once
  - LP: #922315
* nfsd: Fix oops when parsing a 0 length export
  - LP: #922315
* USB: cdc-wdm: fix misuse of logical operation in place of bitop
  - LP: #922315
* fix cputime overflow in uptime_proc_show
  - LP: #922315
* USB: Fix 'bad dma' problem on WDM device disconnect
  - LP: #922315
* block: add and use scsi_blk_cmd_ioctl
  - LP: #922315
* kernel.h: add printk_ratelimited and pr_<level>_rl
  - LP: #922315
* ALSA: HDA: Fix internal microphone on Dell Studio 16 XPS 1645
  - LP: #795823, #922315
* sym53c8xx: Fix NULL pointer dereference in slave_destroy
  - LP: #922315
* score: fix off-by-one index into syscall table
  - LP: #922315
* kprobes: initialize before using a hlist
  - LP: #922315
* Linux 2.6.32.55
  - LP: #922315
* eCryptfs: Sanitize write counts of /dev/ecryptfs
  - LP: #926321
* ecryptfs: Improve metadata read failure logging
  - LP: #926321
* eCryptfs: Make truncate path killable
  - LP: #926321
* crypto: sha512 - make it work, undo percpu message schedule
  - LP: #926321
* crypto: sha512 - reduce stack usage to safe number
  - LP: #926321
* block: fail SCSI passthrough ioctls on partition devices
  - LP: #926321
* dm: do not forward ioctls from logical volumes to the underlying device
  - LP: #926321
* USB: ftdi_sio: fix TIOCSSERIAL baud_base handling
  - LP: #926321
* USB: ftdi_sio: add PID for TI XDS100v2 / BeagleBone A3
  - LP: #926321
* USB: serial: ftdi additional IDs
  - LP: #926321
* USB: ftdi_sio: Add more identifiers
  - LP: #926321
* USB: cdc-wdm: updating desc->length must be protected by spin_lock
  - LP: #926321
* usb: io_ti: Make edge_remove_sysfs_attrs the port_remove method.
  - LP: #926321
* USB: usbsevseg: fix max length
  - LP: #926321
* hwmon: (f71805f) Fix clamping of temperature limits
  - LP: #926321
* hwmon: (sht15) fix bad error code
  - LP: #926321
* USB: serial: CP210x: Added USB-ID for the Link Instruments MSO-19
  - LP: #926321
* USB: cp210x: do not map baud rates to B0
  - LP: #926321
* USB: ftdi_sio: fix initial baud rate
  - LP: #926321
* Linux 2.6.32.56
  - LP: #926321
* drm: Fix authentication kernel crash
  - LP: #931415
* Linux 2.6.32.56+drm33.22
  - LP: #931415

46. By Paolo Pisati

* Release Tracking Bug
  - LP: #911246

[ Paolo Pisati ]

* Rebased to 2.6.32-38.83

[ Ubuntu: 2.6.32-38.83 ]

* Release Tracking Bug
  - LP: #911405
* Revert "clockevents: Set noop handler in clockevents_exchange_device()"
  - LP: #911392
* Linux 2.6.32.52
  - LP: #911392

[ Ubuntu: 2.6.32-38.82 ]

* Release Tracking Bug
  - LP: #910906
* SAUCE: netns: Add quota for number of NET_NS instances.
* [Config] CONFIG_NET_NS=y
  - LP: #790863
* Revert "core: Fix memory leak/corruption on VLAN GRO_DROP,
  CVE-2011-1576"
* hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
  - LP: #899466
  - CVE-2011-2203
* net: ipv4: relax AF_INET check in bind()
  - LP: #900396
* KEYS: Fix a NULL pointer deref in the user-defined key type,
  CVE-2011-4110
  - LP: #894369
  - CVE-2011-4110
* i2c-algo-bit: Generate correct i2c address sequence for 10-bit target
  - LP: #902317
* eCryptfs: Extend array bounds for all filename chars
  - LP: #902317
* PCI hotplug: shpchp: don't blindly claim non-AMD 0x7450 device IDs
  - LP: #902317
* ARM: 7161/1: errata: no automatic store buffer drain
  - LP: #902317
* ALSA: lx6464es - fix device communication via command bus
  - LP: #902317
* SUNRPC: Ensure we return EAGAIN in xs_nospace if congestion is cleared
  - LP: #902317
* timekeeping: add arch_offset hook to ktime_get functions
  - LP: #902317
* p54spi: Add missing spin_lock_init
  - LP: #902317
* p54spi: Fix workqueue deadlock
  - LP: #902317
* nl80211: fix MAC address validation
  - LP: #902317
* gro: reset vlan_tci on reuse
  - LP: #902317
* staging: usbip: bugfix for deadlock
  - LP: #902317
* staging: comedi: fix oops for USB DAQ devices.
  - LP: #902317
* Staging: comedi: fix signal handling in read and write
  - LP: #902317
* USB: whci-hcd: fix endian conversion in qset_clear()
  - LP: #902317
* usb: ftdi_sio: add PID for Propox ISPcable III
  - LP: #902317
* usb: option: add SIMCom SIM5218
  - LP: #902317
* USB: usb-storage: unusual_devs entry for Kingston DT 101 G2
  - LP: #902317
* SCSI: scsi_lib: fix potential NULL dereference
  - LP: #902317
* SCSI: Silencing 'killing requests for dead queue'
  - LP: #902317
* cifs: fix cifs stable patch cifs-fix-oplock-break-handling-try-2.patch
  - LP: #902317
* sched, x86: Avoid unnecessary overflow in sched_clock
  - LP: #902317
* x86/mpparse: Account for bus types other than ISA and PCI
  - LP: #902317
* oprofile, x86: Fix crash when unloading module (nmi timer mode)
  - LP: #902317
* genirq: Fix race condition when stopping the irq thread
  - LP: #902317
* tick-broadcast: Stop active broadcast device when replacing it
  - LP: #902317
* clockevents: Set noop handler in clockevents_exchange_device()
  - LP: #902317
* Linux 2.6.32.50
  - LP: #902317
* nfsd4: permit read opens of executable-only files
  - LP: #833300
* ipv6: Allow inet6_dump_addr() to handle more than 64 addresses
  - LP: #863394
* ALSA: sis7019 - give slow codecs more time to reset
  - LP: #907774
* ALSA: hda/realtek - Fix Oops in alc_mux_select()
  - LP: #907774
* ARM: davinci: dm646x evm: wrong register used in
  setup_vpif_input_channel_mode
  - LP: #907774
* oprofile: Free potentially owned tasks in case of errors
  - LP: #907774
* oprofile: Fix locking dependency in sync_start()
  - LP: #907774
* percpu: fix chunk range calculation
  - LP: #907774
* xfrm: Fix key lengths for rfc3686(ctr(aes))
  - LP: #907774
* linux/log2.h: Fix rounddown_pow_of_two(1)
  - LP: #907774
* jbd/jbd2: validate sb->s_first in journal_get_superblock()
  - LP: #907774
* hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops
  - LP: #907774
* export __get_user_pages_fast() function
  - LP: #907774
* oprofile, x86: Fix nmi-unsafe callgraph support
  - LP: #907774
* oprofile, x86: Fix crash when unloading module (timer mode)
  - LP: #907774
* ext4: avoid hangs in ext4_da_should_update_i_disksize()
  - LP: #907774
* USB: cdc-acm: add IDs for Motorola H24 HSPA USB module.
  - LP: #907774
* Linux 2.6.32.51
  - LP: #907774

[ Ubuntu: 2.6.32-37.81 ]

* Release Tracking Bug
  - LP: #899339
* (pre-stable) sparc: sigutil: Include <linux/errno.h>
  - LP: #899311

45. By Paolo Pisati

* Release Tracking Bug
  - LP: #897742

[ Paolo Pisati ]

* Rebased to 2.6.32-37.80

[ Ubuntu: 2.6.32-37.80 ]

* Release Tracking Bug
  - LP: #898283
* Revert "x86, hotplug: Use mwait to offline a processor, fix the legacy
  case"
  - LP: #888042
* Revert "usb: musb: restore INDEX register in resume path"
  - LP: #888042
* Revert "MIPS: MTX-1: Make au1000_eth probe all PHY
  - LP: #888042
* Revert "ALSA: hda: Fix quirk for Dell Inspiron 910"
  - LP: #875300
* USB: ftdi_sio: add Calao reference board support
  - LP: #888042
* USB: EHCI: Do not rely on PORT_SUSPEND to stop USB resuming in
  ehci_bus_resume().
  - LP: #888042
* rt2x00: do not drop usb dev reference counter on suspend
  - LP: #888042
* atm: br2684: Fix oops due to skb->dev being NULL
  - LP: #888042
* sparc: Allow handling signals when stack is corrupted.
  - LP: #888042
* sparc: fix array bounds error setting up PCIC NMI trap
  - LP: #888042
* net: Fix IPv6 GSO type checks in Intel ethernet drivers
  - LP: #888042
* ipv6: Add GSO support on forwarding path
  - LP: #888042
* GRO: fix merging a paged skb after non-paged skbs
  - LP: #888042
* xen-blkfront: fix data size for xenbus_gather in blkfront_connect
  - LP: #888042
* md/linear: avoid corrupting structure while waiting for rcu_free to
  complete.
  - LP: #888042
* powerpc/pci: Check devices status property when scanning OF tree
  - LP: #888042
* xen: x86_32: do not enable iterrupts when returning from exception in
  interrupt context
  - LP: #888042
* xen/smp: Warn user why they keel over - nosmp or noapic and what to use
  instead.
  - LP: #888042
* ARM: davinci: da850 EVM: read mac address from SPI flash
  - LP: #888042
* md: Fix handling for devices from 2TB to 4TB in 0.90 metadata.
  - LP: #888042
* net/9p: fix client code to fail more gracefully on protocol error
  - LP: #888042
* fs/9p: Fid is not valid after a failed clunk.
  - LP: #888042
* net/9p: Fix the msize calculation.
  - LP: #888042
* irda: fix smsc-ircc2 section mismatch warning
  - LP: #888042
* qla2xxx: Correct inadvertent loop state transitions during port-update
  handling.
  - LP: #888042
* e1000: Fix driver to be used on PA RISC C8000 workstations
  - LP: #888042
* ASoC: Fix reporting of partial jack updates
  - LP: #888042
* ALSA: HDA: Cirrus - fix "Surround Speaker" volume control name
  - LP: #888042
* b43: Fix beacon problem in ad-hoc mode
  - LP: #888042
* wireless: Reset beacon_found while updating regulatory
  - LP: #888042
* USB: PL2303: correctly handle baudrates above 115200
  - LP: #888042
* ASIX: Add AX88772B USB ID
  - LP: #888042
* hvc_console: Improve tty/console put_chars handling
  - LP: #888042
* TPM: Call tpm_transmit with correct size
  - LP: #888042
* TPM: Zero buffer after copying to userspace
  - LP: #888042
* libiscsi_tcp: fix LLD data allocation
  - LP: #888042
* cnic: Improve NETDEV_UP event handling
  - LP: #888042
* ALSA: hda/realtek - Avoid bogus HP-pin assignment
  - LP: #888042
* 3w-9xxx: fix iommu_iova leak
  - LP: #888042
* aacraid: reset should disable MSI interrupt
  - LP: #888042
* libsas: fix failure to revalidate domain for anything but the first
  expander child.
  - LP: #888042
* cfg80211: Fix validation of AKM suites
  - LP: #888042
* libsas: fix panic when single phy is disabled on a wide port
  - LP: #888042
* ahci: Enable SB600 64bit DMA on Asus M3A
  - LP: #888042
* HID: usbhid: Add support for SiGma Micro chip
  - LP: #888042
* hwmon: (w83627ehf) Properly report thermal diode sensors
  - LP: #888042
* x25: Prevent skb overreads when checking call user data
  - LP: #888042
* staging: quatech_usb2: Potential lost wakeup scenario in TIOCMIWAIT
  - LP: #888042
* USB: qcserial: add device ID for "HP un2430 Mobile Broadband Module"
  - LP: #888042
* xhci-mem.c: Check for ring->first_seg != NULL
  - LP: #888042
* ipr: Always initiate hard reset in kdump kernel
  - LP: #888042
* libsas: set sas_address and device type of rphy
  - LP: #888042
* ALSA: HDA: Add new revision for ALC662
  - LP: #877373, #888042
* x86: Fix compilation bug in kprobes' twobyte_is_boostable
  - LP: #888042
* epoll: fix spurious lockdep warnings
  - LP: #888042
* usbmon vs. tcpdump: fix dropped packet count
  - LP: #888042
* USB: storage: Use normalized sense when emulating autosense
  - LP: #888042
* USB: pid_ns: ensure pid is not freed during kill_pid_info_as_uid
  - LP: #888042
* usb: cdc-acm: Owen SI-30 support
  - LP: #888042
* USB: add RESET_RESUME for webcams shown to be quirky
  - LP: #888042
* USB: pl2303: add id for SMART device
  - LP: #888042
* USB: ftdi_sio: add PID for Sony Ericsson Urban
  - LP: #888042
* USB: ftdi_sio: Support TI/Luminary Micro Stellaris BD-ICDI Board
  - LP: #888042
* QE/FHCI: fixed the CONTROL bug
  - LP: #888042
* Update email address for stable patch submission
  - LP: #888042
* kobj_uevent: Ignore if some listeners cannot handle message
  - LP: #888042
* kmod: prevent kmod_loop_msg overflow in __request_module()
  - LP: #888042
* time: Change jiffies_to_clock_t() argument type to unsigned long
  - LP: #888042
* nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir()
  - LP: #888042
* nfsd4: ignore WANT bits in open downgrade
  - LP: #888042
* ASoC: ak4642: fixup cache register table
  - LP: #888042
* ASoC: ak4535: fixup cache register table
  - LP: #888042
* KVM: s390: check cpu_id prior to using it
  - LP: #888042
* ccwgroup: move attributes to attribute group
  - LP: #888042
* iommu/amd: Fix wrong shift direction
  - LP: #888042
* carminefb: Fix module parameters permissions
  - LP: #888042
* uvcvideo: Set alternate setting 0 on resume if the bus has been reset
  - LP: #888042
* tuner_xc2028: Allow selection of the frequency adjustment code for
  XC3028
  - LP: #888042
* plat-mxc: iomux-v3.h: implicitly enable pull-up/down when that's
  desired
  - LP: #888042
* um: fix ubd cow size
  - LP: #888042
* cfq: calculate the seek_mean per cfq_queue not per cfq_io_context
  - LP: #888042
* cfq: merge cooperating cfq_queues
  - LP: #888042
* cfq: change the meaning of the cfqq_coop flag
  - LP: #888042
* cfq: break apart merged cfqqs if they stop cooperating
  - LP: #888042
* cfq-iosched: get rid of the coop_preempt flag
  - LP: #888042
* cfq: Don't allow queue merges for queues that have no process
  references
  - LP: #888042
* xen/timer: Missing IRQF_NO_SUSPEND in timer code broke suspend.
  - LP: #888042
* KVM: x86: Reset tsc_timestamp on TSC writes
  - LP: #888042
* watchdog: mtx1-wdt: fix build failure
  - LP: #888042
* kcore: fix test for end of list
  - LP: #888042
* thinkpad-acpi: module autoloading for newer Lenovo ThinkPads.
  - LP: #888042
* scm: lower SCM_MAX_FD
  - LP: #888042
* NLM: Don't hang forever on NLM unlock requests
  - LP: #888042
* ext4: fix BUG_ON() in ext4_ext_insert_extent()
  - LP: #888042
* drivers/net/rionet.c: fix ethernet address macros for LE platforms
  - LP: #888042
* ext2,ext3,ext4: don't inherit APPEND_FL or IMMUTABLE_FL for new inodes
  - LP: #888042
* USB: Serial: Add device ID for Sierra Wireless MC8305
  - LP: #888042
* USB: Serial: Add PID(0xF7C0) to FTDI SIO driver for a
  zeitcontrol-device
  - LP: #888042
* Linux 2.6.32.47
  - LP: #888042
* Linux 2.6.32.48
  - LP: #888042
* drm: radeon: fix sign bug
  - LP: #888042
* drm/radeon/kms: prefer high post dividers in legacy pll algo
  - LP: #888042
* Linux 2.6.32.48+drm33.21
  - LP: #888042
* crypto: ghash - Avoid null pointer dereference if no key is set
  - LP: #887299
  - CVE-2011-4081
* xfs: Fix possible memory corruption in xfs_readlink, CVE-2011-4077
  - LP: #887298
  - CVE-2011-4077
* jbd/jbd2: validate sb->s_first in journal_get_superblock()
  - LP: #893148
  - CVE-2011-4132
* hfs: add sanity check for file name length, CVE-2011-4330
  - LP: #894374
  - CVE-2011-4330
* ipv6: udp: fix the wrong headroom check
  - LP: #894373
  - CVE-2011-4326
* st: fix race in st_scsi_execute_end
  - LP: #897377
* Make scsi_free_queue() kill pending SCSI commands
  - LP: #897377
* NFS/sunrpc: don't use a credential with extra groups.
  - LP: #897377
* netlink: validate NLA_MSECS length
  - LP: #897377
* mtd: mtdchar: add missing initializer on raw write
  - LP: #897377
* PM / Suspend: Off by one in pm_suspend()
  - LP: #897377
* kbuild: Disable -Wunused-but-set-variable for gcc 4.6.0
  - LP: #897377
* ASoC: wm8940: Properly set codec->dapm.bias_level
  - LP: #897377
* md/raid5: abort any pending parity operations when array fails.
  - LP: #897377
* Remove the old V4L1 v4lgrab.c file
  - LP: #897377
* genirq: Add IRQF_RESUME_EARLY and resume such IRQs earlier
  - LP: #897377
* mm: avoid null pointer access in vm_struct via /proc/vmallocinfo
  - LP: #897377
* kbuild: Fix passing -Wno-* options to gcc 4.4+
  - LP: #897377
* USB: serial: pl2303: rm duplicate id
  - LP: #897377
* USB: Fix Corruption issue in USB ftdi driver ftdi_sio.c
  - LP: #897377
* usb-storage: Accept 8020i-protocol commands longer than 12 bytes
  - LP: #897377
* USB: add quirk for Logitech C600 web cam
  - LP: #897377
* USB: quirks: adding more quirky webcams to avoid squeaky audio
  - LP: #897377
* Linux 2.6.32.49
  - LP: #897377

44. By Paolo Pisati

* Release Tracking Bug
  - LP: #888570

[ Paolo Pisati ]

* Rebased to 2.6.32-36.79

[ Ubuntu: 2.6.32-36.79 ]

* Release Tracking Bug
  - LP: #887727
* net_sched: Fix qdisc_notify() - CVE-2011-2525
  - LP: #869250
  - CVE-2011-2525
* ipv6: restore correct ECN handling on TCP xmit
  - LP: #872179
* nl80211: fix overflow in ssid_len - CVE-2011-2517
  - LP: #869245
  - CVE-2011-2517
* vm: fix vm_pgoff wrap in stack expansion - CVE-2011-2496
  - LP: #869243
  - CVE-2011-2496
* vm: fix vm_pgoff wrap in upward expansion - CVE-2011-2496
  - LP: #869243
  - CVE-2011-2496
* drm: mm: fix range restricted allocations
  - LP: #873130
* NLM: Don't hang forever on NLM unlock requests - CVE-2011-2491
  - LP: #869237
  - CVE-2011-2491

43. By Paolo Pisati

* Release Tracking Bug
  - LP: #872659

[ Paolo Pisati ]

* Rebased to 2.6.32-35.78

[ Ubuntu: 2.6.32-35.78 ]

* Release Tracking Bug
  - LP: #871899
* SAUCE: sched: Prevent divide by zero when cpu_power is 0
  - LP: #614853
* [Config] Force perf to use libiberty for demangling
  - LP: #783660
* [Config] Simplify binary-udebs dependencies
  - LP: #832352
* [Config] kernel preparation cannot be parallelized
  - LP: #832352
* [Config] Linearize module/abi checks
  - LP: #832352
* [Config] Linearize and simplify tree preparation rules
  - LP: #832352
* [Config] Build kernel image in parallel with modules
  - LP: #832352
* [Config] Set concurrency for kmake invocations
  - LP: #832352
* [Config] Improve install-arch-headers speed
  - LP: #832352
* [Config] Fix binary-perarch dependencies
  - LP: #832352
* [Config] Removed stamp-flavours target
  - LP: #832352
* [Config] Serialize binary indep targets
  - LP: #832352
* [Config] Use build stamp directly
  - LP: #832352
* [Config] Restore prepare-% target
  - LP: #832352
* [Config] Fix binary-% build target
* [Config] Fix install-headers target
  - LP: #832352
* SAUCE: igb: Protect stats update
  - LP: #829566
* SAUCE: rtl8192se spams log
  - LP: #859702
* Add mount option to check uid of device being mounted = expect uid,
  CVE-2011-1833
  - LP: #732628
  - CVE-2011-1833
* crypto: Move md5_transform to lib/md5.c
  - LP: #827462
* net: Compute protocol sequence numbers and fragment IDs using MD5.
  - LP: #827462
* ALSA: timer - Fix Oops at closing slave timer
  - LP: #827462
* ALSA: snd-usb-caiaq: Fix keymap for RigKontrol3
  - LP: #827462
* powerpc: Fix device tree claim code
  - LP: #827462
* powerpc: pseries: Fix kexec on machines with more than 4TB of RAM
  - LP: #827462
* Linux 2.6.32.45+drm33.19
  - LP: #827462
* ipv6: make fragment identifications less predictable, CVE-2011-2699
  - LP: #827685
  - CVE-2011-2699
* tunnels: fix netns vs proto registration ordering
  - LP: #823296
* Fix broken backport for IPv6 tunnels in 2.6.32-longterm kernels.
* USB: xhci: fix OS want to own HC
  - LP: #837669
* USB: assign instead of equal in usbtmc.c
  - LP: #837669
* USB: usb-storage: unusual_devs entry for ARM V2M motherboard.
  - LP: #837669
* USB: Serial: Added device ID for Qualcomm Modem in Sagemcom's HiLo3G
  - LP: #837669
* atm: br2864: sent packets truncated in VC routed mode
  - LP: #837669
* hwmon: (ibmaem) add missing kfree
  - LP: #837669
* ALSA: snd-usb-caiaq: Correct offset fields of outbound iso_frame_desc
  - LP: #837669
* mm: fix wrong vmap address calculations with odd NR_CPUS values
  - LP: #837669
* perf tools: do not look at ./config for configuration
  - LP: #837669
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
  oops
  - LP: #837669
* befs: Validate length of long symbolic links.
  - LP: #837669
* ALSA: snd_usb_caiaq: track submitted output urbs
  - LP: #837669
* ALSA: ac97: Add HP Compaq dc5100 SFF(PT003AW) to Headphone Jack Sense
  whitelist
  - LP: #826081, #837669
* futex: Fix regression with read only mappings
  - LP: #837669
* x86-32, vdso: On system call restart after SYSENTER, use int $0x80
  - LP: #837669
* x86, UV: Remove UV delay in starting slave cpus
  - LP: #837669
* drm/ttm: fix ttm_bo_add_ttm(user) failure path
  - LP: #837669
* fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
  - LP: #837669
* igb: Fix lack of flush after register write and before delay
  - LP: #837669
* Linux 2.6.32.46
  - LP: #837669
* cifs: fix possible memory corruption in CIFSFindNext, CVE-2011-3191
  - LP: #834135
  - CVE-2011-3191
* Bluetooth: Prevent buffer overflow in l2cap config request,
  CVE-2011-2497
  - LP: #838423
  - CVE-2011-2497
* core: Fix memory leak/corruption on VLAN GRO_DROP, CVE-2011-1576
  - LP: #844361
  - CVE-2011-1576
* ext4: Fix max file size and logical block counting of extent format
  file, CVE-2011-2695
  - LP: #819574
  - CVE-2011-2695
* drm/i915: prepare for fair lru eviction
  - LP: #843904
* drm/i915: Move the eviction logic to its own file.
  - LP: #843904
* drm/i915: Implement fair lru eviction across both rings. (v2)
  - LP: #843904
* drm/i915: Maintain LRU order of inactive objects upon access by CPU
  (v2)
  - LP: #843904
* drm/i915/evict: Ensure we completely cleanup on failure
  - LP: #843904
* drm/i915: Periodically flush the active lists and requests
  - LP: #843904
* Make TASKSTATS require root access, CVE-2011-2494
  - LP: #866021
  - CVE-2011-2494
* proc: fix a race in do_io_accounting(), CVE-2011-2495
  - LP: #866025
  - CVE-2011-2495
* drm/i915: Remove BUG_ON from i915_gem_evict_something
  - LP: #828550
* drm/i915: Hold a reference to the object whilst unbinding the eviction
  list
  - LP: #843904
* drm/i915: Fix refleak during eviction.
  - LP: #843904
* Linux 2.6.32.46+drm33.20

[ Ubuntu: 2.6.32-34.77 ]

* Release Tracking Bug
  - LP: #849228
* Revert "drm/i915: Remove BUG_ON from i915_gem_evict_something"
* Revert "drm/i915: Periodically flush the active lists and requests"
* Revert "drm/i915/evict: Ensure we completely cleanup on failure"
* Revert "drm/i915: Maintain LRU order of inactive objects upon access by
  CPU (v2)"
* Revert "drm/i915: Implement fair lru eviction across both rings. (v2)"
* Revert "drm/i915: Move the eviction logic to its own file."
* Revert "drm/i915: prepare for fair lru eviction"

42. By Paolo Pisati

* Release tracking bug
  - LP: #838041

[ Paolo Pisati ]

* Rebased to 2.6.32-34.76

[ Ubuntu: 2.6.32-34.76 ]

* Release Tracking Bug
  - LP: #836914
* Revert "drm/nv50-nvc0: work around an evo channel hang that some people
  see"
* Revert "eCryptfs: Handle failed metadata read in lookup"
* Revert "tunnels: fix netns vs proto registration ordering"

[ Ubuntu: 2.6.32-34.75 ]

* Release Tracking Bug
  - LP: #832332
* drm/i915: Remove BUG_ON from i915_gem_evict_something
  - LP: #828550

41. By Paolo Pisati

[ Paolo Pisati ]

* Release Tracking Bug
  - LP: #829657
* Rebased to 2.6.32-34.74

[ Ubuntu: 2.6.32-34.74 ]

* Release Tracking Bug
  - LP: #828375
* proc: fix oops on invalid /proc/<pid>/maps access, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020

[ Ubuntu: 2.6.32-34.73 ]

* Release Tracking Bug
  - LP: #824148
* SAUCE: rtl8192se: Force a build for a 2.6/3.0 kernel
  - LP: #805494
* [Config] Add enic/fnic to udebs
  - LP: #801610
* tty: icount changeover for other main devices, CVE-2010-4076,
  CVE-2010-4077
  - LP: #720189
  - CVE-2010-4077
* fs/partitions/efi.c: corrupted GUID partition tables can cause kernel
  oops
  - LP: #795418
  - CVE-2011-1577
* ftrace: Only update the function code on write to filter files
  - LP: #802383
* kmemleak: Do not return a pointer to an object that kmemleak did not
  get
  - LP: #802383
* CPU hotplug, re-create sysfs directory and symlinks
  - LP: #802383
* Fix memory leak in cpufreq_stat
  - LP: #802383
* powerpc/kexec: Fix memory corruption from unallocated slaves
  - LP: #802383
* powerpc/oprofile: Handle events that raise an exception without
  overflowing
  - LP: #802383
* mtd: mtdconcat: fix NAND OOB write
  - LP: #802383
* x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address
  limit
  - LP: #802383
* ext3: Fix fs corruption when make_indexed_dir() fails
  - LP: #802383
* jbd: Fix forever sleeping process in do_get_write_access()
  - LP: #802383
* jbd: fix fsync() tid wraparound bug
  - LP: #802383
* ext4: release page cache in ext4_mb_load_buddy error path
  - LP: #802383
* Fix Ultrastor asm snippet
  - LP: #802383
* x86, amd: Do not enable ARAT feature on AMD processors below family
  0x12
  - LP: #802383
* x86, amd: Use _safe() msr access for GartTlbWlk disable code
  - LP: #802383
* rcu: Fix unpaired rcu_irq_enter() from locking selftests
  - LP: #802383
* staging: usbip: fix wrong endian conversion
  - LP: #802383
* Fix for buffer overflow in ldm_frag_add not sufficient
  - LP: #802383
* seqlock: Don't smp_rmb in seqlock reader spin loop
  - LP: #802383
* ALSA: HDA: Use one dmic only for Dell Studio 1558
  - LP: #731706, #802383
* ASoC: Ensure output PGA is enabled for line outputs in wm_hubs
  - LP: #802383
* ASoC: Add some missing volume update bit sets for wm_hubs devices
  - LP: #802383
* mm/page_alloc.c: prevent unending loop in __alloc_pages_slowpath()
  - LP: #802383
* loop: limit 'max_part' module param to DISK_MAX_PARTS
  - LP: #802383
* loop: handle on-demand devices correctly
  - LP: #802383
* USB: CP210x Add 4 Device IDs for AC-Services Devices
  - LP: #802383
* USB: moto_modem: Add USB identifier for the Motorola VE240.
  - LP: #802383
* USB: serial: ftdi_sio: adding support for TavIR STK500
  - LP: #802383
* USB: gamin_gps: Fix for data transfer problems in native mode
  - LP: #802383
* usb/gadget: at91sam9g20 fix end point max packet size
  - LP: #802383
* usb: gadget: rndis: don't test against req->length
  - LP: #802383
* OHCI: fix regression caused by nVidia shutdown workaround
  - LP: #802383
* p54usb: add zoom 4410 usbid
  - LP: #802383
* eCryptfs: Allow 2 scatterlist entries for encrypted filenames
  - LP: #802383
* UBIFS: fix a rare memory leak in ro to rw remounting path
  - LP: #802383
* i8k: Avoid lahf in 64-bit code
  - LP: #802383
* cpuidle: menu: fixed wrapping timers at 4.294 seconds
  - LP: #802383
* dm table: reject devices without request fns
  - LP: #802383
* atm: expose ATM device index in sysfs
  - LP: #802383
* brd: limit 'max_part' module param to DISK_MAX_PARTS
  - LP: #802383
* brd: handle on-demand devices correctly
  - LP: #802383
* SUNRPC: Deal with the lack of a SYN_SENT sk->sk_state_change
  callback...
  - LP: #802383
* PCI: Add quirk for setting valid class for TI816X Endpoint
  - LP: #802383
* xen mmu: fix a race window causing leave_mm BUG()
  - LP: #802383
* netfilter: nf_conntrack_reasm: properly handle packets fragmented into
  a single fragment
  - LP: #802383
* fix memory leak in scsi_report_lun_scan
  - LP: #802383
* fix refcounting bug in scsi_get_host_dev
  - LP: #802383
* fix duplicate removal on error path in scsi_sysfs_add_sdev
  - LP: #802383
* UBIFS: fix shrinker object count reports
  - LP: #802383
* UBIFS: fix memory leak on error path
  - LP: #802383
* nbd: limit module parameters to a sane value
  - LP: #802383
* mm: fix ENOSPC returned by handle_mm_fault()
  - LP: #802383
* PCI: Set PCIE maxpayload for card during hotplug insertion
  - LP: #802383
* nl80211: fix check for valid SSID size in scan operations
  - LP: #802383
* lockdep: Fix lock_is_held() on recursion
  - LP: #802383
* drm/i915: Add a no lvds quirk for the Asus EeeBox PC EB1007
  - LP: #802383
* drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
  - LP: #802383
* fat: Fix corrupt inode flags when remove ATTR_SYS flag
  - LP: #802383
* xen: off by one errors in multicalls.c
  - LP: #802383
* x86/amd-iommu: Fix 3 possible endless loops
  - LP: #802383
* USB: cdc-acm: Adding second ACM channel support for Nokia E7 and C7
  - LP: #802383
* USB: core: Tolerate protocol stall during hub and port status read
  - LP: #802383
* USB: serial: add another 4N-GALAXY.DE PID to ftdi_sio driver
  - LP: #802383
* ALSA: hda: Fix quirk for Dell Inspiron 910
  - LP: #792712, #802383
* oprofile, dcookies: Fix possible circular locking dependency
  - LP: #802383
* CPUFREQ: Remove cpufreq_stats sysfs entries on module unload.
  - LP: #802383
* md: check ->hot_remove_disk when removing disk
  - LP: #802383
* md/raid5: fix raid5_set_bi_hw_segments
  - LP: #802383
* md/raid5: fix FUA request handling in ops_run_io()
  - LP: #802383
* ata: use pci_dev->revision
  - LP: #802383
* pata_cmd64x: fix PIO setup
  - LP: #802383
* pata_cmd64x: cmd648_bmdma_stop() fix
  - LP: #802383
* pata_cmd64x: remove unused definitions
  - LP: #802383
* pata_cm64x: fix boot crash on parisc
  - LP: #802383
* ACPI: use _HID when supplied by root-level devices
  - LP: #802383
* xfs: properly account for reclaimed inodes
  - LP: #802383
* exec: delay address limit change until point of no return
  - LP: #802383
* netfilter: IPv6: initialize TOS field in REJECT target module
  - LP: #802383
* netfilter: IPv6: fix DSCP mangle code
  - LP: #802383
* genirq: Add IRQF_FORCE_RESUME
  - LP: #802383
* xen: Use IRQF_FORCE_RESUME
  - LP: #802383
* time: Compensate for rounding on odd-frequency clocksources
  - LP: #802383
* Linux 2.6.32.42
  - LP: #802383
* taskstats: don't allow duplicate entries in listener mode,
  CVE-2011-2484
  - LP: #806390
  - CVE-2011-2484
* drm_mm: extract check_free_mm_node
  - LP: #599017, #807508
* drm: implement helper functions for scanning lru list
  - LP: #599017, #807508
* drm/i915: prepare for fair lru eviction
  - LP: #599017, #807508
* drm/i915: Move the eviction logic to its own file.
  - LP: #599017, #807508
* drm/i915: Implement fair lru eviction across both rings. (v2)
  - LP: #599017, #807508
* drm/i915: Maintain LRU order of inactive objects upon access by CPU
  (v2)
  - LP: #599017, #807508
* drm/i915/evict: Ensure we completely cleanup on failure
  - LP: #599017, #807508
* drm/i915: Periodically flush the active lists and requests
  - LP: #599017, #807508
* Linux 2.6.32.42+drm33.19
  - LP: #807508
* net: add limit for socket backlog CVE-2010-4251
  - LP: #807462
* tcp: use limited socket backlog CVE-2010-4251
  - LP: #807462
* ipv6: udp: Optimise multicast reception
  - LP: #807462
* ipv4: udp: Optimise multicast reception
  - LP: #807462
* udp: multicast RX should increment SNMP/sk_drops counter in allocation
  failures CVE-2010-4251
  - LP: #807462
* udp: use limited socket backlog CVE-2010-4251
  - LP: #807462
* llc: use limited socket backlog CVE-2010-4251
  - LP: #807462
* sctp: use limited socket backlog CVE-2010-4251
  - LP: #807462
* tipc: use limited socket backlog CVE-2010-4251
  - LP: #807462
* x25: use limited socket backlog CVE-2010-4251
  - LP: #807462
* net: backlog functions rename CVE-2010-4251
  - LP: #807462
* net: sk_add_backlog() take rmem_alloc into account CVE-2010-4805
  - LP: #809318
* ksm: fix NULL pointer dereference in scan_get_next_rmap_item()
  - LP: #810425
* migrate: don't account swapcache as shmem
  - LP: #810425
* clocksource: Make watchdog robust vs. interruption
  - LP: #810425
* TTY: ldisc, do not close until there are readers
  - LP: #810425
* xhci: Reject double add of active endpoints.
  - LP: #810425
* PM: Free memory bitmaps if opening /dev/snapshot fails
  - LP: #810425
* ath5k: fix memory leak when fewer than N_PD_CURVES are in use
  - LP: #810425
* mm: fix negative commitlimit when gigantic hugepages are allocated
  - LP: #810425
* uvcvideo: Remove buffers from the queues when freeing
  - LP: #810425
* watchdog: mtx1-wdt: request gpio before using it
  - LP: #810425
* debugobjects: Fix boot crash when kmemleak and debugobjects enabled
  - LP: #810425
* cfq-iosched: fix locking around ioc->ioc_data assignment
  - LP: #810425
* cfq-iosched: fix a rcu warning
  - LP: #810425
* i2c-taos-evm: Fix log messages
  - LP: #810425
* md: avoid endless recovery loop when waiting for fail device to
  complete.
  - LP: #810425
* SUNRPC: Ensure the RPC client only quits on fatal signals
  - LP: #810425
* 6pack,mkiss: fix lock inconsistency
  - LP: #810425
* USB: don't let errors prevent system sleep
  - LP: #810425
* USB: don't let the hub driver prevent system sleep
  - LP: #810425
* uml: fix CONFIG_STATIC_LINK=y build failure with newer glibc
  - LP: #810425
* um: os-linux/mem.c needs sys/stat.h
  - LP: #810425
* inet_diag: fix inet_diag_bc_audit()
  - LP: #810425
* PM / Hibernate: Avoid hitting OOM during preallocation of memory
  - LP: #810425
* PM / Hibernate: Fix free_unnecessary_pages()
  - LP: #810425
* bug.h: Add WARN_RATELIMIT
  - LP: #810425
* net: filter: Use WARN_RATELIMIT
  - LP: #810425
* af_packet: prevent information leak
  - LP: #810425
* net/ipv4: Check for mistakenly passed in non-IPv4 address
  - LP: #810425
* ipv6/udp: Use the correct variable to determine non-blocking condition
  - LP: #810425
* udp/recvmsg: Clear MSG_TRUNC flag when starting over for a new packet
  - LP: #810425
* mm: prevent concurrent unmap_mapping_range() on the same inode
  - LP: #810425
* xen: set max_pfn_mapped to the last pfn mapped
  - LP: #810425
* xen: partially revert "xen: set max_pfn_mapped to the last pfn mapped"
  - LP: #810425
* Linux 2.6.32.43
  - LP: #810425
* eCryptfs: Handle failed metadata read in lookup
  - LP: #509180
* pagemap: close races with suid execve, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020
* report errors in /proc/*/*map* sanely, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020
* close race in /proc/*/environ, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020
* auxv: require the target to be tracable (or yourself), CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020
* deal with races in /proc/*/{syscall, stack, personality}, CVE-2011-1020
  - LP: #813026
  - CVE-2011-1020
* rose_loopback_timer sets VC number <= ROSE_DEFAULT_MAXVC, CVE-2011-1493
  - LP: #816550
  - CVE-2011-1493
* rose: Add length checks to CALL_REQUEST parsing, CVE-2011-1493
  - LP: #816550
  - CVE-2011-1493
* Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.
  - LP: #819569
  - CVE-2011-2492
* drm/nv50-nvc0: work around an evo channel hang that some people see
  - LP: #583760
* ASoC: Fix Blackfin I2S _pointer() implementation return in bounds
  values
  - LP: #823296
* v4l2-ioctl.c: prefill tuner type for g_frequency and g/s_tuner
  - LP: #823296
* pvrusb2: fix g/s_tuner support
  - LP: #823296
* bttv: fix s_tuner for radio
  - LP: #823296
* gro: Only reset frag0 when skb can be pulled
  - LP: #823296
* NFSv4.1: update nfs4_fattr_bitmap_maxsz
  - LP: #823296
* SUNRPC: Fix a race between work-queue and rpc_killall_tasks
  - LP: #823296
* SUNRPC: Fix use of static variable in rpcb_getport_async
  - LP: #823296
* si4713-i2c: avoid potential buffer overflow on si4713
  - LP: #823296
* hwmon: (max1111) Fix race condition causing NULL pointer exception
  - LP: #823296
* bridge: send proper message_age in config BPDU
  - LP: #823296
* davinci: DM365 EVM: fix video input mux bits
  - LP: #823296
* libata: fix unexpectedly frozen port after ata_eh_reset()
  - LP: #823296
* x86: Make Dell Latitude E5420 use reboot=pci
  - LP: #823296
* USB: pl2303: add AdLink ND-6530 USB IDs
  - LP: #823296
* USB: pl2303.h: checkpatch cleanups
  - LP: #823296
* USB: serial: add IDs for WinChipHead USB->RS232 adapter
  - LP: #823296
* staging: comedi: fix infoleak to userspace
  - LP: #823296
* USB: OHCI: fix another regression for NVIDIA controllers
  - LP: #823296
* usb: musb: restore INDEX register in resume path
  - LP: #823296
* USB: dummy-hcd needs the has_tt flag
  - LP: #823296
* ARM: pxa/cm-x300: fix V3020 RTC functionality
  - LP: #823296
* jme: Fix unmap error (Causing system freeze)
  - LP: #823296
* libsas: remove expander from dev list on error
  - LP: #823296
* mac80211: Restart STA timers only on associated state
  - LP: #823296
* Blacklist Traxdata CDR4120 and IOMEGA Zip drive to avoid lock ups.
  - LP: #823296
* ses: requesting a fault indication
  - LP: #823296
* pmcraid: reject negative request size
  - LP: #823296
* kexec, x86: Fix incorrect jump back address if not preserving context
  - LP: #823296
* powerpc/kdump: Fix timeout in crash_kexec_wait_realmode
  - LP: #823296
* PCI: ARI is a PCIe v2 feature
  - LP: #823296
* cciss: do not attempt to read from a write-only register
  - LP: #823296
* xtensa: prevent arbitrary read in ptrace
  - LP: #823296
* ext3: Fix oops in ext3_try_to_allocate_with_rsv()
  - LP: #823296
* svcrpc: fix list-corrupting race on nfsd shutdown
  - LP: #823296
* EHCI: only power off port if over-current is active
  - LP: #823296
* EHCI: fix direction handling for interrupt data toggles
  - LP: #823296
* powerpc/pseries/hvconsole: Fix dropped console output
  - LP: #823296
* x86: Hpet: Avoid the comparator readback penalty
  - LP: #823296
* x86: HPET: Chose a paranoid safe value for the ETIME check
  - LP: #823296
* cifs: clean up cifs_find_smb_ses (try #2)
  - LP: #823296
* cifs: fix NULL pointer dereference in cifs_find_smb_ses
  - LP: #823296
* cifs: check for NULL session password
  - LP: #823296
* gre: fix netns vs proto registration ordering
  - LP: #823296
* netns xfrm: fixup xfrm6_tunnel error propagation
  - LP: #823296
* tunnels: fix netns vs proto registration ordering
  - LP: #823296
* alpha: fix several security issues
  - LP: #823296
* proc: restrict access to /proc/PID/io
  - LP: #823296
* ALSA: sound/core/pcm_compat.c: adjust array index
  - LP: #823296
* dm mpath: fix potential NULL pointer in feature arg processing
  - LP: #823296
* dm: fix idr leak on module removal
  - LP: #823296
* perf: overflow/perf_count_sw_cpu_clock crashes recent kernels
  - LP: #823296
* atm: [br2684] allow routed mode operation again
  - LP: #823296
* Linux 2.6.32.44
  - LP: #823296

[ Ubuntu: 2.6.32-33.72 ]

* Release Tracking Bug
  - LP: #818196
* Revert "fix oops in scsi_run_queue()"
  - LP: #811745
* Revert "put stricter guards on queue dead checks"
  - LP: #811745

[ Ubuntu: 2.6.32-33.71 ]

* Release Tracking Bug
  - LP: #813507
* splice: direct_splice_actor() should not use pos in sd
  - LP: #588861

[ Ubuntu: 2.6.32-33.70 ]

* Release Tracking Bug
  - LP: #807175
* Revert "x86: Flush TLB if PGD entry is changed in i386 PAE mode"
  - LP: #805209

[ Ubuntu: 2.6.32-33.69 ]

* Release Tracking Bug
  - LP: #802554
* Revert "af_unix: Only allow recv on connected seqpacket sockets."

[ Ubuntu: 2.6.32-33.68 ]

* Release Tracking Bug
  - LP: #798305
* Fix abi directory

[ Ubuntu: 2.6.32-33.67 ]

* Revert "iwlagn: Support new 5000 microcode."

40. By Herton R. Krzesinski

[ Herton R. Krzesinski ]

* Release Tracking Bug
  - LP: #795153

[ Paolo Pisati ]

* Rebased to 2.6.32-33.66

[ Ubuntu: 2.6.32-33.66 ]

* Release Tracking Bug
  - LP: #794098
* Revert "xhci: Fix full speed bInterval encoding."
* Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
* Revert "USB: xhci - fix unsafe macro definitions"

[ Ubuntu: 2.6.32-33.65 ]

* xhci: Fix full speed bInterval encoding.
  - LP: #792959

[ Ubuntu: 2.6.32-33.64 ]

 * Release Tracking Bug
   - LP: #789325
* SAUCE: (no-up) Fix up KVM: VMX: Fix host userspace gsbase corruption
  - LP: #787675
* SAUCE: vesafb: mtrr module parameter is uint, not bool
  - LP: #778043
* Revert "(pre-stable): input: Support Clickpad devices in ClickZone
  mode"
  - LP: #780588
* Revert "GFS2: Fix writing to non-page aligned gfs2_quota structures"
  - LP: #780588
* Revert "mmc: build fix: mmc_pm_notify is only available with
  CONFIG_PM=y"
  - LP: #780588
* Revert "mmc: fix all hangs related to mmc/sd card insert/removal during
  suspend/resume"
  - LP: #780588
* Revert "econet: fix CVE-2010-3848"
  - LP: #780588
* Revert "dell-laptop: Add another Dell laptop family to the DMI
  whitelist"
  - LP: #780588
* Revert "dell-laptop: Add another Dell laptop family to the DMI
  whitelist"
  - LP: #780588
* Revert "xen: set max_pfn_mapped to the last pfn mapped"
* cifs: always do is_path_accessible check in cifs_mount
  - LP: #770050
* video: sn9c102: world-wirtable sysfs files
  - LP: #770050
* UBIFS: restrict world-writable debugfs files
  - LP: #770050
* NET: cdc-phonet, handle empty phonet header
  - LP: #770050
* x86: Fix a bogus unwind annotation in lib/semaphore_32.S
  - LP: #770050
* tioca: Fix assignment from incompatible pointer warnings
  - LP: #770050
* mca.c: Fix cast from integer to pointer warning
  - LP: #770050
* ramfs: fix memleak on no-mmu arch
  - LP: #770050
* MAINTAINERS: update STABLE BRANCH info
  - LP: #770050
* UBIFS: fix oops when R/O file-system is fsync'ed
  - LP: #770050
* x86, cpu: AMD errata checking framework
  - LP: #770050
* x86, cpu: Clean up AMD erratum 400 workaround
  - LP: #770050
* x86, AMD: Set ARAT feature on AMD processors
  - LP: #770050
* x86, amd: Disable GartTlbWlkErr when BIOS forgets it
  - LP: #770050
* USB: ftdi_sio: Added IDs for CTI USB Serial Devices
  - LP: #770050
* USB: ftdi_sio: add PID for OCT DK201 docking station
  - LP: #770050
* USB: ftdi_sio: add ids for Hameg HO720 and HO730
  - LP: #770050
* USB: option: Add new ONDA vendor id and product id for ONDA MT825UP
  - LP: #770050
* USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
  - LP: #770050
* next_pidmap: fix overflow condition
  - LP: #770050
* proc: do proper range check on readdir offset
  - LP: #770050
* USB: EHCI: unlink unused QHs when the controller is stopped
  - LP: #770050
* USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
  - LP: #770050
* USB: xhci - fix unsafe macro definitions
  - LP: #770050
* USB: xhci - fix math in xhci_get_endpoint_interval()
  - LP: #770050
* x86, cpu: Fix regression in AMD errata checking code
  - LP: #770050
* Linux 2.6.32.39
  - LP: #770050
* fs/partitions/ldm.c: fix oops caused by corrupted partition table,
  CVE-2011-1017
  - LP: #771382
  - CVE-2011-1017
* drm/i915: set DIDL using the ACPI video output device _ADR method
  return.
  - LP: #775547
* drm/radeon/kms: MC vram map needs to be >= pci aperture size
  - LP: #775547
* drm/radeon/kms: make sure blit addr masks are 64 bit
  - LP: #775547
* drm/radeon/kms: fix handling of tex lookup disable in cs checker on
  r2xx
  - LP: #775547
* drm/i915: Free hardware status page on unload when physically mapped
  - LP: #775547
* drm/i915/overlay: Ensure that the reg_bo is in the GTT prior to
  writing.
  - LP: #775547
* drm/radeon/kms/atom: set sane defaults in atombios_get_encoder_mode()
  - LP: #775547
* drm/radeon/kms: fix typos in disabled vbios code
  - LP: #775547
* drm/radeon/kms: add workaround for dce3 ddc line vbios bug
  - LP: #775547
* drm/radeon/kms: fix interlaced and doublescan handling
  - LP: #775547
* drm/i915/sdvo: Always add a 30ms delay to make SDVO TV detection
  reliable
  - LP: #775547
* drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP
  - LP: #775547
* drm/ttm: Fix two race conditions + fix busy codepaths
  - LP: #775547
* drm/i915: overlay on gen2 can't address above 1G
  - LP: #775547
* drm/i915: fix memory corruption with GM965 and >4GB RAM
  - LP: #775547
* drm/radeon: add quirk to make HP nx6125 laptop resume.
  - LP: #775547
* drm/radeon/kms: add quirk to make HP DV5000 laptop resume
  - LP: #775547
* ath: add missing regdomain pair 0x5c mapping
  - LP: #780588
* block, blk-sysfs: Fix an err return path in blk_register_queue()
  - LP: #780588
* p54: Initialize extra_len in p54_tx_80211
  - LP: #780588
* intel-iommu: Unlink domain from iommu
  - LP: #780588
* intel-iommu: Fix get_domain_for_dev() error path
  - LP: #780588
* NFS: nfs_wcc_update_inode() should set nfsi->attr_gencount
  - LP: #780588
* serial/imx: read cts state only after acking cts change irq
  - LP: #780588
* ASoC: Fix output PGA enabling in wm_hubs CODECs
  - LP: #780588
* kconfig: Avoid buffer underrun in choice input
  - LP: #780588
* UBIFS: fix master node recovery
  - LP: #780588
* Remove extra struct page member from the buffer info structure
  - LP: #780588
* dasd: correct device table
  - LP: #780588
* iwlagn: Support new 5000 microcode.
  - LP: #780588
* atl1c: duplicate atl1c_get_tpd
  - LP: #780588
* udp: Fix bogus UFO packet generation
  - LP: #780588
* slub: fix panic with DISCONTIGMEM
  - LP: #780588
* set memory ranges in N_NORMAL_MEMORY when onlined
  - LP: #780588
* FLEXCOP-PCI: fix __xlate_proc_name-warning for flexcop-pci
  - LP: #780588
* m68k/mm: Set all online nodes in N_NORMAL_MEMORY
  - LP: #780588
* nfs: don't lose MS_SYNCHRONOUS on remount of noac mount
  - LP: #780588
* NFSv4.1: Ensure state manager thread dies on last umount
  - LP: #780588
* agp: fix arbitrary kernel memory writes
  - LP: #780588
* agp: fix OOM and buffer overflow
  - LP: #780588
* Input: xen-kbdfront - fix mouse getting stuck after save/restore
  - LP: #780588
* pmcraid: reject negative request size
  - LP: #780588
* mpt2sas: prevent heap overflows and unchecked reads
  - LP: #780588
* put stricter guards on queue dead checks
  - LP: #780588
* mmc: sdhci-pci: Fix error case in sdhci_pci_probe_slot()
  - LP: #780588
* mmc: sdhci: Check mrq->cmd in sdhci_tasklet_finish
  - LP: #780588
* mmc: sdhci: Check mrq != NULL in sdhci_tasklet_finish
  - LP: #780588
* USB: fix regression in usbip by setting has_tt flag
  - LP: #780588
* af_unix: Only allow recv on connected seqpacket sockets.
  - LP: #780588
* ARM: 6891/1: prevent heap corruption in OABI semtimedop
  - LP: #780588
* i8k: Tell gcc that *regs gets clobbered
  - LP: #780588
* Fix gcc 4.5.1 miscompiling drivers/char/i8k.c (again)
  - LP: #780588
* Open with O_CREAT flag set fails to open existing files on non writable
  directories
  - LP: #780588
* can: Add missing socket check in can/bcm release.
  - LP: #780588
* netxen: module firmware hints
  - LP: #780588
* bnx2x: declare MODULE_FIRMWARE
  - LP: #780588
* cxgb3: declare MODULE_FIRMWARE
  - LP: #780588
* myri10ge: declare MODULE_FIRMWARE
  - LP: #780588
* netx: declare MODULE_FIRMWARE
  - LP: #780588
* pcnet-cs: declare MODULE_FIRMWARE
  - LP: #780588
* spider-net: declare MODULE_FIRMWARE
  - LP: #780588
* tms380tr: declare MODULE_FIRMWARE
  - LP: #780588
* Input: Add support of Synaptics Clickpad device
  - LP: #780588
* Input: elantech - do not advertise relative events
  - LP: #780588
* Input: elantech - fix firmware version check
  - LP: #780588
* Input: elantech - allow forcing Elantech protocol
  - LP: #780588
* Input: elantech - ignore high bits in the position coordinates
  - LP: #780588
* Input: elantech - use all 3 bytes when checking version
  - LP: #780588
* Input: elantech - relax signature checks
  - LP: #780588
* Input: elantech - discard the first 2 positions on some firmwares
  - LP: #780588
* Staging: rtl8192su: check for skb == NULL
  - LP: #780588
* Staging: rtl8192su: Clean up in case of an error in module
  initialisation
  - LP: #780588
* Staging: rtl8192su: Fix procfs code for interfaces not named wlan0
  - LP: #780588
* Staging: rtl8192su: remove device ids
  - LP: #780588
* Staging: rtl8192su: add device ids
  - LP: #780588
* USB: retain USB device power/wakeup setting across reconfiguration
  - LP: #780588
* USB: don't enable remote wakeup by default
  - LP: #780588
* USB: teach "devices" file about Wireless and SuperSpeed USB
  - LP: #780588
* GFS2: Clean up gfs2_adjust_quota() and do_glock()
  - LP: #780588
* GFS2: Fix writing to non-page aligned gfs2_quota structures
  - LP: #780588
* GFS2: BUG in gfs2_adjust_quota
  - LP: #780588
* SUNRPC: fix NFS client over TCP hangs due to packet loss (Bug 16494)
  - LP: #780588
* nfs4: Ensure that ACL pages sent over NFS were not allocated from the
  slab (v3)
  - LP: #780588
* nfs: fix compilation warning
  - LP: #780588
* Fix corrupted OSF partition table parsing
  - LP: #780588
* Increase OSF partition limit from 8 to 18
  - LP: #780588
* Please add support for Microsoft MN-120 PCMCIA network card
  - LP: #780588
* hwmon: (applesmc) Add iMac9,1 and MacBookPro2,2 support
  - LP: #780588
* hwmon: (applesmc) Add support for MacBook Pro 5,3 and 5,4
  - LP: #780588
* hwmon: (applesmc) Add generic support for MacBook Pro 6
  - LP: #780588
* hwmon: (applesmc) Add generic support for MacBook Pro 7
  - LP: #780588
* hwmon: (applesmc) Add MacBookAir3,1(3,2) support
  - LP: #780588
* ALSA: emux: Add trivial compat ioctl handler
  - LP: #780588
* ALSA: powermac - Reverse HP detection on G4 DA
  - LP: #780588
* ALSA: powermac - Lineout detection on G4 DA
  - LP: #780588
* ALSA: hda - Add support for the new 27 inch IMacs
  - LP: #780588
* ALSA: hda - MacBookPro 5,3 line-in support
  - LP: #780588
* ALSA: hda - Add model=mbp55 entry for MacBookPro 7,1
  - LP: #780588
* ALSA: hda - MacBookAir3,1(3,2) alsa support
  - LP: #780588
* virtio_net: fix oom handling on tx
  - LP: #780588
* mac80211: Add define for TX headroom reserved by mac80211 itself.
  - LP: #780588
* rt2x00: Centralize setting of extra TX headroom requested by rt2x00.
  - LP: #780588
* rt2x00: Properly request tx headroom for alignment operations.
  - LP: #780588
* rt2x00: use correct headroom for transmission
  - LP: #780588
* Bluetooth: Add support Bluetooth controller of MacbookPro 6,2
  - LP: #780588
* Bluetooth: Add support Bluetooth controller of MacbookPro 7,1
  - LP: #780588
* Bluetooth: Add MacBookAir3,1(2) support
  - LP: #780588
* perf tools: Display better error messages on missing packages
  - LP: #780588
* perf tools: Add 'make DEBUG=1' to remove the -O6 cflag
  - LP: #780588
* perf tools: Test -fstack-protector-all compiler option for inclusion in
  CFLAGS
  - LP: #780588
* perf tools: Support static build
  - LP: #780588
* perf tools: Add V=2 option to help debug config issues
  - LP: #780588
* perf tools: Suggest static libraries as well
  - LP: #780588
* perf: Use default compiler mode by default
  - LP: #780588
* perf tools: Move QUIET_STDERR def to before first use
  - LP: #780588
* perf tools: Check if /dev/null can be used as the -o gcc argument
  - LP: #780588
* perf symbols: allow forcing use of cplus_demangle
  - LP: #780588
* V4L/DVB: Add Elgato EyeTV Diversity to dibcom driver
  - LP: #780588
* mmc: fix all hangs related to mmc/sd card insert/removal during
  suspend/resume
  - LP: #780588
* mmc: build fix: mmc_pm_notify is only available with CONFIG_PM=y
  - LP: #780588
* b43: Fix warning at drivers/mmc/core/core.c:237 in mmc_wait_for_cmd
  - LP: #780588
* econet: Fix redeclaration of symbol len
  - LP: #780588
* econet: fix CVE-2010-3848
  - LP: #780588
* dell-laptop: Add another Dell laptop to the DMI whitelist
  - LP: #780588
* dell-laptop: Add another Dell laptop family to the DMI whitelist
  - LP: #780588
* scsi_dh_emc: fix mode select request setup
  - LP: #780588
* scsi_dh_emc: request flag cleanup
  - LP: #780588
* cifs: fix another memleak, in cifs_root_iget
  - LP: #780588
* e1000e: Reset 82577/82578 PHY before first PHY register read
  - LP: #780588
* e1000: fix Tx hangs by disabling 64-bit DMA
  - LP: #780588
* btrfs: Require CAP_SYS_ADMIN for filesystem rebalance
  - LP: #780588
* af_unix: limit recursion level
  - LP: #780588
* init, sched: Fix race between init and kthreadd
  - LP: #780588
* backlight: MacBookAir3,1(3,2) mbp-nvidia-bl support
  - LP: #780588
* bonding: Ensure that we unshare skbs prior to calling pskb_may_pull
  - LP: #780588
* HID: add MacBookAir 3,1 and 3,2 support
  - LP: #780588
* intel-iommu: Force-disable IOMMU for iGFX on broken Cantiga revisions.
  - LP: #780588
* ipg: Remove device claimed by dl2k from pci id table
  - LP: #780588
* ipv6: Silence privacy extensions initialization
  - LP: #780588
* l2tp: Fix UDP socket reference count bugs in the pppol2tp driver
  - LP: #780588
* MIPS: DMA: Fix computation of DMA flags from device's
  coherent_dma_mask.
  - LP: #780588
* mpt2sas: fix the incorrect scsi_dma_map error checking
  - LP: #780588
* Phonet: device notifier only runs on initial namespace
  - LP: #780588
* powerpc/boot/dts: Install dts from the right directory
  - LP: #780588
* rt2500usb: fallback to SW encryption for TKIP+AES
  - LP: #780588
* sata_via: Delay on vt6420 when starting ATAPI DMA write
  - LP: #780588
* tehuti: Firmware filename is tehuti/bdx.bin
  - LP: #780588
* wireless: b43: fix error path in SDIO
  - LP: #780588
* libata: set queue DMA alignment to sector size for ATAPI too
  - LP: #780588
* usb: musb: core: set has_tt flag
  - LP: #780588
* iwlwifi: fix skb usage after free
  - LP: #780588
* can: add missing socket check in can/raw release
  - LP: #780588
* fix oops in scsi_run_queue()
  - LP: #780588
* Linux 2.6.32.40
  - LP: #780588
* PCI: allow matching of prefetchable resources to non-prefetchable
  windows
  - LP: #424142
* cifs: check for bytes_remaining going to zero in CIFS_SessSetup
  - LP: #788602
* Validate size of EFI GUID partition entries.
  - LP: #788602
* dccp: handle invalid feature options length
  - LP: #788602
* CIFS: Fix memory over bound bug in cifs_parse_mount_options
  - LP: #788602
* Fix time() inconsistencies caused by intermediate xtime_cache values
  being read
  - LP: #788602
* ehea: fix wrongly reported speed and port
  - LP: #788602
* NET: slip, fix ldisc->open retval
  - LP: #788602
* ne-h8300: Fix regression caused during net_device_ops conversion
  - LP: #788602
* hydra: Fix regression caused during net_device_ops conversion
  - LP: #788602
* libertas: fix cmdpendingq locking
  - LP: #788602
* zorro8390: Fix regression caused during net_device_ops conversion
  - LP: #788602
* cifs: add fallback in is_path_accessible for old servers
  - LP: #788602
* x86, AMD: Fix ARAT feature setting again
  - LP: #788602
* clocksource: Install completely before selecting
  - LP: #788602
* tick: Clear broadcast active bit when switching to oneshot
  - LP: #788602
* x86, apic: Fix spurious error interrupts triggering on all non-boot APs
  - LP: #788602
* x86, mce, AMD: Fix leaving freed data in a list
  - LP: #788602
* megaraid_sas: Sanity check user supplied length before passing it to
  dma_alloc_coherent()
  - LP: #788602
* vmxnet3: Fix inconsistent LRO state after initialization
  - LP: #788602
* netxen: Remove references to unified firmware file
  - LP: #788602
* Linux 2.6.32.41
  - LP: #788602
* drm/radeon/kms: fix bad shift in atom iio table parser
  - LP: #788602
* Linux 2.6.32.41+drm33.18
  - LP: #788602

[ Ubuntu: 2.6.32-32.62 ]

* Release Tracking Bug
  - LP: #767370
* (config) Disable CONFIG_NET_NS
  - LP: #720095
* Revert "drm/radeon/kms: Fix retrying ttm_bo_init() after it failed
  once."
  - LP: #736234
* Revert "drm/radeon: fall back to GTT if bo creation/validation in VRAM
  fails."
  - LP: #736234
* x86: pvclock: Move scale_delta into common header
* KVM: x86: Fix a possible backwards warp of kvmclock
* KVM: x86: Fix kvmclock bug
* cpuset: add a missing unlock in cpuset_write_resmask()
  - LP: #736234
* keyboard: integer underflow bug
  - LP: #736234
* RxRPC: Fix v1 keys
  - LP: #736234
* ixgbe: fix for 82599 erratum on Header Splitting
  - LP: #736234
* mm: fix possible cause of a page_mapped BUG
  - LP: #736234
* powerpc/kdump: CPUs assume the context of the oopsing CPU
  - LP: #736234
* powerpc/kdump: Use chip->shutdown to disable IRQs
  - LP: #736234
* powerpc: Use more accurate limit for first segment memory allocations
  - LP: #736234
* powerpc/pseries: Add hcall to read 4 ptes at a time in real mode
  - LP: #736234
* powerpc/kexec: Speedup kexec hash PTE tear down
  - LP: #736234
* powerpc/crashdump: Do not fail on NULL pointer dereferencing
  - LP: #736234
* powerpc/kexec: Fix orphaned offline CPUs across kexec
  - LP: #736234
* netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values
  - LP: #736234
* nfsd: wrong index used in inner loop
  - LP: #736234
* r8169: use RxFIFO overflow workaround for 8168c chipset.
  - LP: #736234
* Staging: comedi: jr3_pci: Don't ioremap too much space. Check result.
  - LP: #736234
* net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules,
  CVE-2011-1019
  - LP: #736234
  - CVE-2011-1019
* ip6ip6: autoload ip6 tunnel
  - LP: #736234
* Linux 2.6.32.33
  - LP: #736234
* drm/radeon: fall back to GTT if bo creation/validation in VRAM fails.
  - LP: #652934, #736234
* drm/radeon/kms: Fix retrying ttm_bo_init() after it failed once.
  - LP: #652934, #736234
* drm: fix unsigned vs signed comparison issue in modeset ctl ioctl,
  CVE-2011-1013
  - LP: #736234
  - CVE-2011-1013
* Linux 2.6.32.33+drm33.15
  - LP: #736234
* econet: Fix crash in aun_incoming(). CVE-2010-4342
  - LP: #736394
  - CVE-2010-4342
* igb: only use vlan_gro_receive if vlans are registered, CVE-2010-4263
  - LP: #737024
  - CVE-2010-4263
* irda: prevent integer underflow in IRLMP_ENUMDEVICES, CVE-2010-4529
  - LP: #737823
  - CVE-2010-4529
* hwmon/f71882fg: Set platform drvdata to NULL later
  - LP: #742056
* mtd: add "platform:" prefix for platform modalias
  - LP: #742056
* libata: no special completion processing for EH commands
  - LP: #742056
* MIPS: MTX-1: Make au1000_eth probe all PHY addresses
  - LP: #742056
* x86/mm: Handle mm_fault_error() in kernel space
  - LP: #742056
* ftrace: Fix memory leak with function graph and cpu hotplug
  - LP: #742056
* x86: Fix panic when handling "mem={invalid}" param
  - LP: #553464, #742056
* x86: Emit "mem=nopentium ignored" warning when not supported
  - LP: #553464, #742056
* ahci: AHCI and RAID mode SATA patch for Intel Patsburg DeviceIDs
  - LP: #742056
* ahci: AHCI mode SATA patch for Intel DH89xxCC DeviceIDs
  - LP: #742056
* ahci: AHCI mode SATA patch for Intel Patsburg SATA RAID controller
  - LP: #742056
* RDMA/cma: Fix crash in request handlers
  - LP: #742056
* IB/cm: Bump reference count on cm_id before invoking callback
  - LP: #742056
* ath9k_hw: Fix incorrect macversion and macrev checks
  - LP: #742056
* USB: serial/kobil_sct, fix potential tty NULL dereference
  - LP: #742056
* USB: serial: ch341: add new id
  - LP: #742056
* xhci: Fix cycle bit calculation during stall handling.
  - LP: #742056
* ALSA: hda - fix digital mic selection in mixer on 92HD8X codecs
  - LP: #742056
* PCI: remove quirk for pre-production systems
  - LP: #742056
* PCI: add more checking to ICH region quirks
  - LP: #742056
* PCI: do not create quirk I/O regions below PCIBIOS_MIN_IO for ICH
  - LP: #742056
* PCI: sysfs: Fix failure path for addition of "vpd" attribute
  - LP: #742056
* ALSA: ctxfi - Fix incorrect SPDIF status bit mask
  - LP: #742056
* ALSA: ctxfi - Fix SPDIF status retrieval
  - LP: #742056
* ALSA: ctxfi - Clear input settings before initialization
  - LP: #742056
* SUNRPC: Ensure we always run the tk_callback before tk_action
  - LP: #742056
* perf, powerpc: Handle events that raise an exception without
  overflowing
  - LP: #742056
* ext3: Always set dx_node's fake_dirent explicitly.
  - LP: #742056
* call_function_many: fix list delete vs add race
  - LP: #742056
* call_function_many: add missing ordering
  - LP: #742056
* x86: Flush TLB if PGD entry is changed in i386 PAE mode
  - LP: #742056
* isdn: avoid calling tty_ldisc_flush() in atomic context
  - LP: #742056
* smp_call_function_many: handle concurrent clearing of mask
  - LP: #742056
* fix per-cpu flag problem in the cpu affinity checkers
  - LP: #742056
* i2c: Fix typo in instantiating-devices document
  - LP: #742056
* mmc: sdio: remember new card RCA when redetecting card
  - LP: #742056
* powerpc/kexec: Fix race in kexec shutdown
  - LP: #742056
* powerpc/kdump: Fix race in kdump shutdown
  - LP: #742056
* powerpc: rtas_flash needs to use rtas_data_buf
  - LP: #742056
* x86, binutils, xen: Fix another wrong size directive
  - LP: #742056
* hwmon: (sht15) Fix integer overflow in humidity calculation
  - LP: #742056
* Linux 2.6.32.34
  - LP: #742056
* Linux 2.6.32.35
  - LP: #742056
* aio: wake all waiters when destroying ctx
  - LP: #744921
* shmem: let shared anonymous be nonlinear again
  - LP: #744921
* PCI hotplug: acpiphp: set current_state to D0 in register_slot
  - LP: #744921
* xen: set max_pfn_mapped to the last pfn mapped
  - LP: #744921
* PCI: return correct value when writing to the "reset" attribute
  - LP: #744921
* Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal
  code
  - LP: #744921
* ext3: skip orphan cleanup on rocompat fs
  - LP: #744921
* procfs: fix /proc/<pid>/maps heap check
  - LP: #744921
* proc: protect mm start_code/end_code in /proc/pid/stat, CVE-2011-0726
  - LP: #744921
  - CVE-2011-0726
* fbcon: Bugfix soft cursor detection in Tile Blitting
  - LP: #744921
* nfsd41: modify the members value of nfsd4_op_flags
  - LP: #744921
* nfsd: wrong index used in inner loop
  - LP: #744921
* uvcvideo: Fix uvc_fixup_video_ctrl() format search
  - LP: #744921
* ehci-hcd: Bug fix: don't set a QH's Halt bit
  - LP: #744921
* USB: uss720 fixup refcount position
  - LP: #744921
* USB: cdc-acm: fix memory corruption / panic
  - LP: #744921
* USB: cdc-acm: fix potential null-pointer dereference
  - LP: #744921
* USB: cdc-acm: fix potential null-pointer dereference on disconnect
  - LP: #744921
* Input: xen-kbdfront - advertise either absolute or relative coordinates
  - LP: #744921
* SUNRPC: Never reuse the socket port after an xs_close()
  - LP: #744921
* fs: call security_d_instantiate in d_obtain_alias V2
  - LP: #744921
* dcdbas: force SMI to happen when expected
  - LP: #744921
* Linux 2.6.32.36
  - LP: #744921
* drm/radeon/kms: check AA resolve registers on r300, CVE-2011-1016
  - LP: #745686
  - CVE-2011-1016
* drm/radeon: fix regression with AA resolve checking, CVE-2011-1016
  - LP: #745686
  - CVE-2011-1016
* xen: events: do not unmask event channels on resume
  - LP: #681083
* drm/radeon/kms: check AA resolve registers on r300
  - LP: #754584
* drm/radeon: fix regression with AA resolve checking
  - LP: #754584
* Linux 2.6.32.36+drm33.16
  - LP: #754584
* ALSA: hda - Fix SPDIF out regression on ALC889
  - LP: #764685
* ALSA: Fix yet another race in disconnection
  - LP: #764685
* perf: Better fit max unprivileged mlock pages for tools needs
  - LP: #764685
* myri10ge: fix rmmod crash
  - LP: #764685
* cciss: fix lost command issue
  - LP: #764685
* sound/oss/opl3: validate voice and channel indexes
  - LP: #764685
* mac80211: initialize sta->last_rx in sta_info_alloc
  - LP: #764685
* ses: show devices for enclosures with no page 7
  - LP: #764685
* ses: Avoid kernel panic when lun 0 is not mapped
  - LP: #764685
* eCryptfs: Unlock page in write_begin error path
  - LP: #764685
* eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
  - LP: #764685
* staging: usbip: bugfixes related to kthread conversion
  - LP: #764685
* staging: usbip: bugfix add number of packets for isochronous frames
  - LP: #764685
* staging: usbip: bugfix for isochronous packets and optimization
  - LP: #764685
* staging: hv: Fix GARP not sent after Quick Migration
  - LP: #764685
* staging: hv: use sync_bitops when interacting with the hypervisor
  - LP: #764685
* Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
  - LP: #764685
* xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1
  - LP: #764685
* irda: validate peer name and attribute lengths
  - LP: #764685
* irda: prevent heap corruption on invalid nickname
  - LP: #764685
* nilfs2: fix data loss in mmap page write for hole blocks
  - LP: #764685
* ASoC: Explicitly say registerless widgets have no register
  - LP: #764685
* ALSA: ens1371: fix Creative Ectiva support
  - LP: #764685
* ROSE: prevent heap corruption with bad facilities
  - LP: #764685
* Btrfs: Fix uninitialized root flags for subvolumes
  - LP: #764685
* x86, mtrr, pat: Fix one cpu getting out of sync during resume
  - LP: #764685
* ath9k: fix a chip wakeup related crash in ath9k_start
  - LP: #764685
* UBIFS: do not read flash unnecessarily
  - LP: #764685
* UBIFS: fix oops on error path in read_pnode
  - LP: #764685
* UBIFS: fix debugging failure in dbg_check_space_info
  - LP: #764685
* quota: Don't write quota info in dquot_commit()
  - LP: #764685
* mm: avoid wrapping vm_pgoff in mremap()
  - LP: #764685
* p54usb: IDs for two new devices
  - LP: #764685
* b43: allocate receive buffers big enough for max frame len + offset
  - LP: #764685
* Bluetooth: sco: fix information leak to userspace
  - LP: #764685
* bridge: netfilter: fix information leak
  - LP: #764685
* Bluetooth: bnep: fix buffer overflow
  - LP: #764685
* Bluetooth: add support for Apple MacBook Pro 8,2
  - LP: #764685
* Treat writes as new when holes span across page boundaries
  - LP: #764685
* char/tpm: Fix unitialized usage of data buffer
  - LP: #764685
* netfilter: ip_tables: fix infoleak to userspace
  - LP: #764685
* netfilter: arp_tables: fix infoleak to userspace
  - LP: #764685
* netfilter: ipt_CLUSTERIP: fix buffer overflow
  - LP: #764685
* ipv6: netfilter: ip6_tables: fix infoleak to userspace
  - LP: #764685
* mfd: ab3100: world-writable debugfs *_priv files
  - LP: #764685
* drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
  - LP: #764685
* drivers/misc/ep93xx_pwm.c: world-writable sysfs files
  - LP: #764685
* econet: 4 byte infoleak to the network
  - LP: #764685
* sound/oss: remove offset from load_patch callbacks
  - LP: #764685
* sound: oss: midi_synth: check get_user() return value
  - LP: #764685
* repair gdbstub to match the gdbserial protocol specification
  - LP: #764685
* gro: Reset dev pointer on reuse
  - LP: #764685
* gro: reset skb_iif on reuse
  - LP: #764685
* x86, amd-ucode: Remove needless log messages
  - LP: #764685
* x86, microcode, AMD: Extend ucode size verification
  - LP: #764685
* powerpc/kexec: Add ifdef CONFIG_PPC_STD_MMU_64 to PPC64 code
  - LP: #764685
* powerpc: Fix default_machine_crash_shutdown #ifdef botch
  - LP: #764685
* Squashfs: handle corruption of directory structure
  - LP: #764685
* sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set
  - LP: #764685
* atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
  - LP: #764685
* ext4: fix credits computing for indirect mapped files
  - LP: #764685
* nfsd: fix auth_domain reference leak on nlm operations
  - LP: #764685
* CAN: Use inode instead of kernel address for /proc file
  - LP: #764685
* exec: make argv/envp memory visible to oom-killer
  - LP: #764685
* exec: copy-and-paste the fixes into compat_do_execve() paths
  - LP: #764685
* xfs: zero proper structure size for geometry calls
  - LP: #764685
* Linux 2.6.32.37
  - LP: #764685
* Linux 2.6.32.38
  - LP: #764685

[ Ubuntu: 2.6.32-31.61 ]

* Release Tracking Bug
  - LP: #754842
* x86, quirk: Fix SB600 revision check
  - LP: #742056

39. By Paolo Pisati

[ Ubuntu: 2.6.32-31.60 ]

* Release Tracking Bug
  - LP: #734950
* SAUCE: Clear new_profile in error path
  - LP: #732700
* [Config] CONFIG_BOOT_PRINTK_DELAY=y
  - LP: #733191
* Revert "drm/radeon/bo: add some fallback placements for VRAM only
  objects."
  - LP: #652934
* drm/radeon: fall back to GTT if bo creation/validation in VRAM fails.
  - LP: #652934
* drm/radeon/kms: Fix retrying ttm_bo_init() after it failed once.
  - LP: #652934
* xfs: always use iget in bulkstat
  - LP: #692848
* drm/radeon/kms: make the mac rv630 quirk generic
  - LP: #728687
* drm/radeon/kms: add pll debugging output
  - LP: #728687
* drm/radeon: remove 0x4243 pci id
  - LP: #728687
* drm/radeon/kms: fix s/r issues with bios scratch regs
  - LP: #728687
* drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
  - LP: #728687
* drm/i915: Add dependency on CONFIG_TMPFS
  - LP: #728687
* Linux 2.6.32.29+drm33.14
  - LP: #728687
* NFSD: memory corruption due to writing beyond the stat array
  - LP: #728687
* mptfusion: mptctl_release is required in mptctl.c
  - LP: #728687
* mptfusion: Fix Incorrect return value in mptscsih_dev_reset
  - LP: #728687
* ocfs2_connection_find() returns pointer to bad structure
  - LP: #728687
* x25: decrement netdev reference counts on unload
  - LP: #728687
* x86, hpet: Disable per-cpu hpet timer if ARAT is supported
  - LP: #728687
* OHCI: work around for nVidia shutdown problem
  - LP: #728687
* x86/pvclock: Zero last_value on resume
  - LP: #728687
* av7110: check for negative array offset
  - LP: #728687
* CRED: Fix get_task_cred() and task_state() to not resurrect dead
  credentials
  - LP: #728687
* bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
  - LP: #728687
* CRED: Fix kernel panic upon security_file_alloc() failure.
  - LP: #728687
* CRED: Fix BUG() upon security_cred_alloc_blank() failure
  - LP: #728687
* CRED: Fix memory and refcount leaks upon security_prepare_creds()
  failure
  - LP: #728687
* sendfile(): check f_op.splice_write() rather than f_op.sendpage()
  - LP: #728687
* isdn: hisax: Replace the bogus access to irq stats
  - LP: #728687
* ixgbe: add support for 82599 based Express Module X520-P2
  - LP: #728687
* ixgbe: prevent speculative processing of descriptors before ready
  - LP: #728687
* scsi_dh_alua: add netapp to dev list
  - LP: #728687
* scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
  - LP: #728687
* dm raid1: fail writes if errors are not handled and log fails
  - LP: #728687
* GFS2: Fix bmap allocation corner-case bug
  - LP: #728687
* dm raid1: fix null pointer dereference in suspend
  - LP: #728687
* sunrpc/cache: fix module refcnt leak in a failure path
  - LP: #728687
* be2net: Maintain tx and rx counters in driver
  - LP: #728687
* tcp: Make TCP_MAXSEG minimum more correct.
  - LP: #728687
* nfsd: correctly handle return value from nfsd_map_name_to_*
  - LP: #728687
* s390: remove task_show_regs
  - LP: #728687
* PM / Hibernate: Return error code when alloc_image_page() fails
  - LP: #728687
* fs/partitions: Validate map_count in Mac partition tables
  - LP: #728687
* ALSA: HDA: Add position_fix quirk for an Asus device
  - LP: #718402, #728687
* ALSA: caiaq - Fix possible string-buffer overflow
  - LP: #728687
* radio-aimslab.c needs #include <linux/delay.h>
  - LP: #728687
* ARM: Ensure predictable endian state on signal handler entry
  - LP: #728687
* acer-wmi: Fix capitalisation of GUID
  - LP: #728687
* eCryptfs: Copy up lower inode attrs in getattr
  - LP: #728687
* platform: x86: acer-wmi: world-writable sysfs threeg file
  - LP: #728687
* platform: x86: asus_acpi: world-writable procfs files
  - LP: #728687
* platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial
  files
  - LP: #728687
* genirq: Disable the SHIRQ_DEBUG call in request_threaded_irq for now
  - LP: #728687
* usb: musb: omap2430: fix kernel panic on reboot
  - LP: #728687
* USB: add quirks entry for Keytouch QWERTY Panel
  - LP: #728687
* USB: Add Samsung SGH-I500/Android modem ID switch to visor driver
  - LP: #728687
* USB: Add quirk for Samsung Android phone modem
  - LP: #728687
* p54pci: update receive dma buffers before and after processing
  - LP: #728687
* sierra: add new ID for Airprime/Sierra USB IP modem
  - LP: #728687
* staging: usbip: vhci: update reference count for usb_device
  - LP: #728687
* staging: usbip: vhci: give back URBs from in-flight unlink requests
  - LP: #728687
* staging: usbip: vhci: refuse to enqueue for dead connections
  - LP: #728687
* staging: usbip: vhci: use urb->dev->portnum to find port
  - LP: #728687
* epoll: prevent creating circular epoll structures
  - LP: #728687
* ldm: corrupted partition table can cause kernel oops
  - LP: #728687
* md: correctly handle probe of an 'mdp' device.
  - LP: #728687
* x86 quirk: Fix polarity for IRQ0 pin2 override on SB800 systems
  - LP: #728687
* xhci: Avoid BUG() in interrupt context
  - LP: #728687
* xhci: Clarify some expressions in the TRB math
  - LP: #728687
* xhci: Fix errors in the running total calculations in the TRB math
  - LP: #728687
* xhci: Fix an error in count_sg_trbs_needed()
  - LP: #728687
* x25: Do not reference freed memory.
  - LP: #728687
* Linux 2.6.32.30
  - LP: #728687
* Linux 2.6.32.31
  - LP: #728687
* Ocfs2/refcounttree: Fix a bug for refcounttree to writeback clusters in
  a right number.
  - LP: #731226
* mfd: Fix NULL pointer due to non-initialized ucb1x00-ts absinfo
  - LP: #731226
* x86: Use u32 instead of long to set reset vector back to 0
  - LP: #731226
* fuse: fix hang of single threaded fuseblk filesystem
  - LP: #731226
* clockevents: Prevent oneshot mode when broadcast device is periodic
  - LP: #731226
* ext2: Fix link count corruption under heavy link+rename load
  - LP: #731226
* sctp: Fix oops when sending queued ASCONF chunks
  - LP: #731226
* virtio: set pci bus master enable bit
  - LP: #731226
* netxen: fix set mac addr
  - LP: #731226
* HID: add support for Acan FG-8100 barcode reader
  - LP: #731226
* p54usb: add Senao NUB-350 usbid
  - LP: #731226
* dccp: fix oops on Reset after close
  - LP: #731226
* e1000e: disable broken PHY wakeup for ICH10 LOMs, use MAC wakeup
  instead
  - LP: #731226
* r8169: disable ASPM
  - LP: #731226
* usb: iowarrior: don't trust report_size for buffer size
  - LP: #731226
* arp_notify: unconditionally send gratuitous ARP for
  NETDEV_NOTIFY_PEERS.
  - LP: #731226
* CIFS: Fix oplock break handling (try #2)
  - LP: #731226
* Linux 2.6.32.32
  - LP: #731226

[ Ubuntu: 2.6.32-30.59 ]

* Release Tracking Bug
  - LP: #727336
* [Config] CONFIG_IRQ_TIME_ACCOUNTING=n
  - LP: #723819
* virtio_net: Add schedule check to napi_enable call
  - LP: #579276
* NFS: fix the return value of nfs_file_fsync()
  - LP: #585657
* block: check for proper length of iov entries earlier in
  blk_rq_map_user_iov(), CVE-2010-4163
  - LP: #721504
  - CVE-2010-4163
* filter: make sure filters dont read uninitialized memory
  - LP: #721282
  - CVE-2010-4158
* tty: Make tiocgicount a handler, CVE-2010-4076, CVE-2010-4077
  - LP: #720189
  - CVE-2010-4077
* staging: usbip: remove double giveback of URB
  - LP: #723819
* USB: EHCI: ASPM quirk of ISOC on AMD SB800
  - LP: #723819
* rt2x00: add device id for windy31 usb device
  - LP: #723819
* ALSA: snd-usb-us122l: Fix missing NULL checks
  - LP: #723819
* hwmon: (via686a) Initialize fan_div values
  - LP: #723819
* USB: serial: handle Data Carrier Detect changes
  - LP: #723819
* USB: CP210x Add two device IDs
  - LP: #723819
* USB: CP210x Removed incorrect device ID
  - LP: #723819
* USB: usb-storage: unusual_devs update for Cypress ATACB
  - LP: #723819
* USB: usb-storage: unusual_devs update for TrekStor DataStation maxi g.u
  external hard drive enclosure
  - LP: #723819
* USB: usb-storage: unusual_devs entry for CamSport Evo
  - LP: #723819
* USB: usb-storage: unusual_devs entry for Coby MP3 player
  - LP: #723819
* USB: serial: Updated support for ICOM devices
  - LP: #723819
* USB: adding USB support for Cinterion's HC2x, EU3 and PH8 products
  - LP: #723819
* USB: EHCI: ASPM quirk of ISOC on AMD Hudson
  - LP: #723819
* USB: EHCI: fix DMA deallocation bug
  - LP: #723819
* USB: g_printer: fix bug in module parameter definitions
  - LP: #723819
* USB: io_edgeport: fix the reported firmware major and minor
  - LP: #723819
* USB: ti_usb: fix module removal
  - LP: #723819
* USB: Storage: Add unusual_devs entry for VTech Kidizoom
  - LP: #723819
* USB: ftdi_sio: add ST Micro Connect Lite uart support
  - LP: #723819
* USB: cdc-acm: Adding second ACM channel support for Nokia N8
  - LP: #723819
* USB: ftdi_sio: Add VID=0x0647, PID=0x0100 for Acton Research
  spectrograph
  - LP: #723819
* USB: prevent buggy hubs from crashing the USB stack
  - LP: #723819
* staging: comedi: add support for newer jr3 1-channel pci board
  - LP: #723819
* staging: comedi: ni_labpc: Use shared IRQ for PCMCIA card
  - LP: #723819
* Staging: hv: fix sysfs symlink on hv block device
  - LP: #723819
* staging: hv: Enable sending GARP packet after live migration
  - LP: #723819
* hvc_iucv: allocate memory buffers for IUCV in zone DMA
  - LP: #723819
* iwlagn: enable only rfkill interrupt when device is down
  - LP: #723819
* ath9k: Fix bug in delimiter padding computation
  - LP: #723819
* correct vdso version string
  - LP: #723819
* fix medium error problems with some arrays which can cause data
  corruption
  - LP: #723819
* libsas: fix runaway error handler problem
  - LP: #723819
* mpt2sas: Fix device removal handshake for zoned devices
  - LP: #723819
* mpt2sas: Correct resizing calculation for max_queue_depth
  - LP: #723819
* mpt2sas: Kernel Panic during Large Topology discovery
  - LP: #723819
* radio-aimslab.c: Fix gcc 4.5+ bug
  - LP: #723819
* em28xx: Fix audio input for Terratec Grabby
  - LP: #723819
* ALSA : au88x0 - Limit number of channels to fix Oops via OSS emu
  - LP: #723819
* ALSA: HDA: Fix dmesg output of HDMI supported bits
  - LP: #723819
* ALSA: hda - Fix memory leaks in conexant jack arrays
  - LP: #723819
* input: bcm5974: Add support for MacBookAir3
  - LP: #723819
* ALSA: hrtimer: handle delayed timer interrupts
  - LP: #723819
* ASoC: WM8990: msleep() takes milliseconds not jiffies
  - LP: #723819
* ASoC: Blackfin AC97: fix build error after multi-component update
  - LP: #723819
* NFS: Fix "kernel BUG at fs/aio.c:554!"
  - LP: #723819
* rtc-cmos: fix suspend/resume
  - LP: #723819
* iwlagn: Re-enable RF_KILL interrupt when down
  - LP: #723819
* rapidio: fix hang on RapidIO doorbell queue full condition
  - LP: #723819
* PCI: pci-stub: ignore zero-length id parameters
  - LP: #723819
* virtio: remove virtio-pci root device
  - LP: #723819
* ds2760_battery: Fix calculation of time_to_empty_now
  - LP: #723819
* p54: fix sequence no. accounting off-by-one error
  - LP: #723819
* i2c: Unregister dummy devices last on adapter removal
  - LP: #723819
* serial: unbreak billionton CF card
  - LP: #723819
* ptrace: use safer wake up on ptrace_detach()
  - LP: #723819
* x86, mtrr: Avoid MTRR reprogramming on BP during boot on UP platforms
  - LP: #723819
* fix jiffy calculations in calibrate_delay_direct to handle overflow
  - LP: #723819
* USB: serial: pl2303: Hybrid reader Uniform HCR331
  - LP: #723819
* drivers: update to pl2303 usb-serial to support Motorola cables
  - LP: #723819
* klist: Fix object alignment on 64-bit.
  - LP: #723819
* powerpc: Fix some 6xx/7xxx CPU setup functions
  - LP: #723819
* parisc : Remove broken line wrapping handling pdc_iodc_print()
  - LP: #723819
* kernel/smp.c: fix smp_call_function_many() SMP race
  - LP: #723819
* hostap_cs: fix sleeping function called from invalid context
  - LP: #723819
* md: fix regression with re-adding devices to arrays with no metadata
  - LP: #723819
* pata_mpc52xx: inherit from ata_bmdma_port_ops
  - LP: #723819
* TPM: Long default timeout fix
  - LP: #723819
* tpm_tis: Use timeouts returned from TPM
  - LP: #723819
* SELinux: define permissions for DCB netlink messages
  - LP: #723819
* SELinux: do not compute transition labels on mountpoint labeled
  filesystems
  - LP: #723819
* ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
  - LP: #723819
* dm: dont take i_mutex to change device size
  - LP: #723819
* dm mpath: disable blk_abort_queue
  - LP: #723819
* x86, mm: avoid possible bogus tlb entries by clearing prev mm_cpumask
  after switching mm
  - LP: #723819
* usb: Realloc xHCI structures after a hub is verified.
  - LP: #723819
* sched: Remove USER_SCHED
  - LP: #723819
* sched: Remove remaining USER_SCHED code
  - LP: #723819
* sched: Move sched_avg_update() to update_cpu_load()
  - LP: #723819
* sched: Increment cache_nice_tries only on periodic lb
  - LP: #723819
* sched: Try not to migrate higher priority RT tasks
  - LP: #723819
* sched: Give CPU bound RT tasks preference
  - LP: #723819
* sched: suppress RCU lockdep splat in task_fork_fair
  - LP: #723819
* sched: fix RCU lockdep splat from task_group()
  - LP: #723819
* sched: Do not consider SCHED_IDLE tasks to be cache hot
  - LP: #723819
* sched: Set group_imb only a task can be pulled from the busiest cpu
  - LP: #723819
* sched: Force balancing on newidle balance if local group has capacity
  - LP: #723819
* sched: Drop group_capacity to 1 only if local group has extra capacity
  - LP: #723819
* sched: Fix softirq time accounting
  - LP: #723819
* sched: Consolidate account_system_vtime extern declaration
  - LP: #723819
* sched: Remove unused PF_ALIGNWARN flag
  - LP: #723819
* sched: Add a PF flag for ksoftirqd identification
  - LP: #723819
* sched: Add IRQ_TIME_ACCOUNTING, finer accounting of irq time
  - LP: #723819
* x86: Add IRQ_TIME_ACCOUNTING
  - LP: #723819
* sched: Do not account irq time to current task
  - LP: #723819
* sched: Remove irq time from available CPU power
  - LP: #723819
* sched: Call tick_check_idle before __irq_enter
  - LP: #723819
* sched: Export account_system_vtime()
  - LP: #723819
* sched, cgroup: Fixup broken cgroup movement
  - LP: #723819
* sched: Use group weight, idle cpu metrics to fix imbalances during idle
  - LP: #723819
* sched: Fix cross-sched-class wakeup preemption
  - LP: #723819
* sched: Fix volanomark performance regression
  - LP: #723819
* sched: Fix idle balancing
  - LP: #723819
* sched: Fix wake_affine() vs RT tasks
  - LP: #723819
* sched: Remove some dead code
  - LP: #723819
* kernel/user.c: add lock release annotation on free_user()
  - LP: #723819
* Linux 2.6.32.29
  - LP: #723819
* rds: Integer overflow in RDS cmsg handling, CVE-2010-4175
  - LP: #721455
  - CVE-2010-4175

[ Ubuntu: 2.6.32-29.58 ]

* Release Tracking Bug
  - LP: #716551
* net: fix rds_iovec page count overflow, CVE-2010-3865
  - LP: #709153
  - CVE-2010-3865
* net: ax25: fix information leak to userland, CVE-2010-3875
  - LP: #710714
  - CVE-2010-3875
* net: ax25: fix information leak to userland harder, CVE-2010-3875
  - LP: #710714
  - CVE-2010-3875
* net: packet: fix information leak to userland, CVE-2010-3876
  - LP: #710714
  - CVE-2010-3876
* net: tipc: fix information leak to userland, CVE-2010-3877
  - LP: #711291
  - CVE-2010-3877
* inet_diag: Make sure we actually run the same bytecode we audited,
  CVE-2010-3880
  - LP: #711865
  - CVE-2010-3880

[ Ubuntu: 2.6.32-29.57 ]

* Tracking Bug
  - LP: #708864
* [Config] Set CONFIG_NR_CPUS=256 for amd64 server
  - LP: #706058
* Input: i8042 - introduce 'notimeout' blacklist for Dell Vostro V13
  - LP: #380126
* tun: avoid BUG, dump packet on GSO errors
  - LP: #698883
* TTY: Fix error return from tty_ldisc_open()
  - LP: #705045
* x86, hotplug: Use mwait to offline a processor, fix the legacy case
  - LP: #705045
* fuse: verify ioctl retries
  - LP: #705045
* fuse: fix ioctl when server is 32bit
  - LP: #705045
* ALSA: hda: Use model=lg quirk for LG P1 Express to enable playback and
  capture
  - LP: #595482, #705045
* nohz: Fix printk_needs_cpu() return value on offline cpus
  - LP: #705045
* nohz: Fix get_next_timer_interrupt() vs cpu hotplug
  - LP: #705045
* nfsd: Fix possible BUG_ON firing in set_change_info
  - LP: #705045
* NFS: Fix fcntl F_GETLK not reporting some conflicts
  - LP: #705045
* sunrpc: prevent use-after-free on clearing XPT_BUSY
  - LP: #705045
* hwmon: (adm1026) Allow 1 as a valid divider value
  - LP: #705045
* hwmon: (adm1026) Fix setting fan_div
  - LP: #705045
* amd64_edac: Fix interleaving check
  - LP: #705045
* IB/uverbs: Handle large number of entries in poll CQ
  - LP: #705045
* PM / Hibernate: Fix PM_POST_* notification with user-space suspend
  - LP: #705045
* ACPICA: Fix Scope() op in module level code
  - LP: #705045
* ACPI: EC: Add another dmi match entry for MSI hardware
  - LP: #705045
* orinoco: fix TKIP countermeasure behaviour
  - LP: #705045
* orinoco: clear countermeasure setting on commit
  - LP: #705045
* x86, amd: Fix panic on AMD CPU family 0x15
  - LP: #705045
* md: fix bug with re-adding of partially recovered device.
  - LP: #705045
* tracing: Fix panic when lseek() called on "trace" opened for writing
  - LP: #705045
* x86, gcc-4.6: Use gcc -m options when building vdso
  - LP: #705045
* x86: Enable the intr-remap fault handling after local APIC setup
  - LP: #705045
* x86, vt-d: Handle previous faults after enabling fault handling
  - LP: #705045
* x86, vt-d: Fix the vt-d fault handling irq migration in the x2apic mode
  - LP: #705045
* x86, vt-d: Quirk for masking vtd spec errors to platform error handling
  logic
  - LP: #705045
* hvc_console: Fix race between hvc_close and hvc_remove
  - LP: #705045
* hvc_console: Fix race between hvc_close and hvc_remove, again
  - LP: #705045
* HID: hidraw: fix window in hidraw_release
  - LP: #705045
* bfa: fix system crash when reading sysfs fc_host statistics
  - LP: #705045
* net: release dst entry while cache-hot for GSO case too
  - LP: #705045
* install_special_mapping skips security_file_mmap check.
  - LP: #705045
* USB: misc: uss720.c: add another vendor/product ID
  - LP: #705045
* USB: ftdi_sio: Add D.O.Tec PID
  - LP: #705045
* USB: usb-storage: unusual_devs entry for the Samsung YP-CP3
  - LP: #705045
* p54usb: add 5 more USBIDs
  - LP: #705045
* p54usb: New USB ID for Gemtek WUBI-100GW
  - LP: #705045
* sound: Prevent buffer overflow in OSS load_mixer_volumes
  - LP: #705045
* mv_xor: fix race in tasklet function
  - LP: #705045
* ima: fix add LSM rule bug
  - LP: #705045
* ALSA: hda: Use LPIB for Dell Latitude 131L
  - LP: #530346, #705045
* ALSA: hda: Use LPIB quirk for Dell Inspiron m101z/1120
  - LP: #705045
* block: Deprecate QUEUE_FLAG_CLUSTER and use queue_limits instead
  - LP: #705045
* sctp: Fix a race between ICMP protocol unreachable and connect()
  - LP: #705045
* posix-cpu-timers: workaround to suppress the problems with mt exec
  - LP: #705045
* Linux 2.6.32.28
  - LP: #705045
* dell-laptop: Add another Dell laptop family to the DMI whitelist
  - LP: #693078
* dell-laptop: Add another Dell laptop family to the DMI whitelist
  - LP: #693078
* drm/ttm: Clear the ghost cpu_writers flag on
  ttm_buffer_object_transfer.
  - LP: #708769
* drm/kms: remove spaces from connector names (v2)
  - LP: #708769
* Linux 2.6.32.28+drm33.13
  - LP: #708769

[ Ubuntu: 2.6.32-28.56 ]

* Tracking Bug
  - LP: #705565
* Just a build number increment for a new upload. There was an issue
  in the previous upload that prevented ARMEL from building. The
  issue has been resolved in the PPA and a new upload should produce
  the requisite images.

[ Ubuntu: 2.6.32-28.55 ]

* Another version bump because of abi check failure
* Tracking Bug
  - LP: #699885

[ Ubuntu: 2.6.32-28.54 ]

* Another version bump because of upload failure

[ Ubuntu: 2.6.32-28.53 ]

* Another version bump because of upload failure

[ Ubuntu: 2.6.32-28.52 ]

* (removed old tracking bug link)

[ Ubuntu: 2.6.32-28.51 ]

* bumped version due to build fail

[ Ubuntu: 2.6.32-28.50 ]

* SAUCE: Change nodelayacct boot parameter polarity.
  - LP: #493156
* [Config] CONFIG_TASK_DELAY_ACCT=y
  - LP: #493156
* ipc: initialize structure memory to zero for compat functions
* tcp: Increase TCP_MAXSEG socket option minimum.
  - CVE-2010-4165
* perf_events: Fix perf_counter_mmap() hook in mprotect()
  - CVE-2010-4169
* af_unix: limit unix_tot_inflight
  - CVE-2010-4249
* AppArmor: fix the upper bound check for the next/check table
  - LP: #581525
* NFS: Fix panic after nfs_umount()
  - LP: #683938
* block: Ensure physical block size is unsigned int
  - LP: #688669
* block: limit vec count in bio_kmalloc() and bio_alloc_map_data()
  - LP: #688669
* block: take care not to overflow when calculating total iov length
  - LP: #688669
* block: check for proper length of iov entries in blk_rq_map_user_iov()
  - LP: #688669
* jme: Fix PHY power-off error
  - LP: #688669
* irda: Fix parameter extraction stack overflow
  - LP: #688669
* irda: Fix heap memory corruption in iriap.c
  - LP: #688669
* i2c-pca-platform: Change device name of request_irq
  - LP: #688669
* microblaze: Fix build with make 3.82
  - LP: #688669
* Staging: asus_oled: fix up some sysfs attribute permissions
  - LP: #688669
* Staging: asus_oled: fix up my fixup for some sysfs attribute
  permissions
  - LP: #688669
* Staging: line6: fix up some sysfs attribute permissions
  - LP: #688669
* hpet: fix unwanted interrupt due to stale irq status bit
  - LP: #688669
* hpet: unmap unused I/O space
  - LP: #688669
* olpc_battery: Fix endian neutral breakage for s16 values
  - LP: #688669
* percpu: fix list_head init bug in __percpu_counter_init()
  - LP: #688669
* um: remove PAGE_SIZE alignment in linker script causing kernel
  segfault.
  - LP: #688669
* um: fix global timer issue when using CONFIG_NO_HZ
  - LP: #688669
* numa: fix slab_node(MPOL_BIND)
  - LP: #688669
* hwmon: (lm85) Fix ADT7468 frequency table
  - LP: #688669
* mm: fix return value of scan_lru_pages in memory unplug
  - LP: #688669
* mm: fix is_mem_section_removable() page_order BUG_ON check
  - LP: #688669
* ssb: b43-pci-bridge: Add new vendor for BCM4318
  - LP: #688669
* sgi-xpc: XPC fails to discover partitions with all nasids above 128
  - LP: #688669
* xen: ensure that all event channels start off bound to VCPU 0
  - LP: #688669
* xen: don't bother to stop other cpus on shutdown/reboot
  - LP: #688669
* sys_semctl: fix kernel stack leakage
  - LP: #688669
* net: NETIF_F_HW_CSUM does not imply FCoE CRC offload
  - LP: #688669
* drivers/char/vt_ioctl.c: fix VT_OPENQRY error value
  - LP: #688669
* viafb: use proper register for colour when doing fill ops
  - LP: #688669
* eCryptfs: Clear LOOKUP_OPEN flag when creating lower file
  - LP: #688669
* md/raid1: really fix recovery looping when single good device fails.
  - LP: #688669
* md: fix return value of rdev_size_change()
  - LP: #688669
* x86: AMD Northbridge: Verify NB's node is online
  - LP: #688669
* tty: prevent DOS in the flush_to_ldisc
  - LP: #688669
* TTY: restore tty_ldisc_wait_idle
  - LP: #688669
* tty_ldisc: Fix BUG() on hangup
  - LP: #688669
* TTY: ldisc, fix open flag handling
  - LP: #688669
* KVM: VMX: fix vmx null pointer dereference on debug register access
  - LP: #688669
  - CVE-2010-0435
* KVM: x86: fix information leak to userland
  - LP: #688669
* firewire: cdev: fix information leak
  - LP: #688669
* firewire: core: fix an information leak
  - LP: #688669
* firewire: ohci: fix buffer overflow in AR split packet handling
  - LP: #688669
* firewire: ohci: fix race in AR split packet handling
  - LP: #688669
* ALSA: ac97: Apply quirk for Dell Latitude D610 binding Master and
  Headphone controls
  - LP: #669279, #688669
* ALSA: HDA: Add an extra DAC for Realtek ALC887-VD
  - LP: #688669
* ALSA: hda: Use "alienware" model quirk for another SSID
  - LP: #683695, #688669
* netfilter: nf_conntrack: allow nf_ct_alloc_hashtable() to get highmem
  pages
  - LP: #688669
* latencytop: fix per task accumulator
  - LP: #688669
* mm/vfs: revalidate page->mapping in do_generic_file_read()
  - LP: #688669
* bio: take care not overflow page count when mapping/copying user data
  - LP: #688669
* libata-scsi passthru: fix bug which truncated LBA48 return values
  - LP: #688669
* libata: fix NULL sdev dereference race in atapi_qc_complete()
  - LP: #688669
* PCI: fix size checks for mmap() on /proc/bus/pci files
  - LP: #688669
* PCI: fix offset check for sysfs mmapped files
  - LP: #688669
* efifb: check that the base address is plausible on pci systems
  - LP: #688669
* USB: gadget: AT91: fix typo in atmel_usba_udc driver
  - LP: #688669
* USB: ftdi_sio: add device IDs for Milkymist One JTAG/serial
  - LP: #688669
* USB: option: fix when the driver is loaded incorrectly for some Huawei
  devices.
  - LP: #688669
* usb: misc: sisusbvga: fix information leak to userland
  - LP: #688669
* usb: misc: iowarrior: fix information leak to userland
  - LP: #688669
* usb: core: fix information leak to userland
  - LP: #688669
* USB: EHCI: fix obscure race in ehci_endpoint_disable
  - LP: #688669
* USB: storage: sierra_ms: fix sysfs file attribute
  - LP: #688669
* USB: atm: ueagle-atm: fix up some permissions on the sysfs files
  - LP: #688669
* USB: misc: cypress_cy7c63: fix up some sysfs attribute permissions
  - LP: #688669
* USB: misc: usbled: fix up some sysfs attribute permissions
  - LP: #688669
* USB: ftdi_sio: revert "USB: ftdi_sio: fix DTR/RTS line modes"
  - LP: #688669
* USB: misc: trancevibrator: fix up a sysfs attribute permission
  - LP: #688669
* USB: misc: usbsevseg: fix up some sysfs attribute permissions
  - LP: #688669
* USB: ftdi_sio: Add ID for RT Systems USB-29B radio cable
  - LP: #688669
* USB: serial: ftdi_sio: Vardaan USB RS422/485 converter PID added
  - LP: #688669
* acpi-cpufreq: fix a memleak when unloading driver
  - LP: #688669
* ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite
  L355
  - LP: #688669
* fuse: fix attributes after open(O_TRUNC)
  - LP: #688669
* do_exit(): make sure that we run with get_fs() == USER_DS
  - LP: #688669
* uml: disable winch irq before freeing handler data
  - LP: #688669
* backlight: grab ops_lock before testing bd->ops
  - LP: #688669
* nommu: yield CPU while disposing VM
  - LP: #688669
* DECnet: don't leak uninitialized stack byte
  - LP: #688669
* ARM: 6489/1: thumb2: fix incorrect optimisation in usracc
  - LP: #688669
* ARM: 6482/2: Fix find_next_zero_bit and related assembly
  - LP: #688669
* Staging: frontier: fix up some sysfs attribute permissions
  - LP: #688669
* staging: rtl8187se: Change panic to warn when RF switch turned off
  - LP: #688669
* HID: hidraw, fix a NULL pointer dereference in hidraw_ioctl
  - LP: #688669
* HID: hidraw, fix a NULL pointer dereference in hidraw_write
  - LP: #688669
* gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New:
  linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)
  - LP: #688669
* Limit sysctl_tcp_mem and sysctl_udp_mem initializers to prevent integer
  overflows.
  - LP: #688669
* sparc64: Fix race in signal instruction flushing.
  - LP: #688669
* sparc: Don't mask signal when we can't setup signal frame.
  - LP: #688669
* sparc: Prevent no-handler signal syscall restart recursion.
  - LP: #688669
* x86, UV: Delete unneeded boot messages
  - LP: #688669
* x86, UV: Fix initialization of max_pnode
  - LP: #688669
* drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook
  Pro 5,1
  - LP: #688669
* efifb: support the EFI framebuffer on more Apple hardware
  - LP: #688669
* V4L/DVB (13154): uvcvideo: Handle garbage at the end of streaming
  interface descriptors
  - LP: #688669
* Input: i8042 - add Sony VAIO VPCZ122GX to nomux list
  - LP: #688669
* x25: Patch to fix bug 15678 - x25 accesses fields beyond end of packet.
  - LP: #688669
* memory corruption in X.25 facilities parsing
  - LP: #688669
* can-bcm: fix minor heap overflow
  - LP: #688669
* V4L/DVB: ivtvfb: prevent reading uninitialized stack memory
  - LP: #688669
* x25: Prevent crashing when parsing bad X.25 facilities
  - LP: #688669
* crypto: padlock - Fix AES-CBC handling on odd-block-sized input
  - LP: #688669
* x86-32: Separate 1:1 pagetables from swapper_pg_dir
  - LP: #688669
* x86, mm: Fix CONFIG_VMSPLIT_1G and 2G_OPT trampoline
  - LP: #688669
* x86-32: Fix dummy trampoline-related inline stubs
  - LP: #688669
* rds: Integer overflow in RDS cmsg handling
  - LP: #688669
* net: Truncate recvfrom and sendto length to INT_MAX.
  - LP: #688669
* net: Limit socket I/O iovec total length to INT_MAX.
  - LP: #688669
* nmi: fix clock comparator revalidation
  - LP: #688669
* UV - XPC: pass nasid instead of nid to gru_create_message_queue
  - LP: #688669
* x86: uv: XPC receive message reuse triggers invalid BUG_ON()
  - LP: #688669
* X86: uv: xpc_make_first_contact hang due to not accepting ACTIVE state
  - LP: #688669
* x86: uv: xpc NULL deref when mesq becomes empty
  - LP: #688669
* Linux 2.6.32.27
  - LP: #688669

38. By Tim Gardner

[ Tim Gardner ]

* Tracking Bug
  -LP: #712610

[Paolo Pisati]

* UBUNTU: SAUCE: Clear new_profile in error path
  Fixes kernel oops.
  -LP: #732700

* Revert "dove: enable lcd0 by default"
  Fixes screen corruption regression.
  -LP: #732721

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp://staging/ubuntu/natty/linux-mvl-dove
This branch contains Public information 
Everyone can see this information.

Subscribers