This bug was fixed in the package linux-lts-backport-oneiric - 3.0.0-16.29~lucid1

---------------
linux-lts-backport-oneiric (3.0.0-16.29~lucid1) lucid-proposed; urgency=low

  [Brad Figg]

  * Release Tracking Bug
    - LP: #931813

  [ James M. Leddy ]

  * SAUCE: Bluetooth: Add support for BCM20702A0 [0a5c:21e6]
    - LP: #906832

  [ Manoj Iyer ]

  * SAUCE: Bluetooth: Add support for BCM20702A0 [0a5c:21e1]
    - LP: #906832

  [ Merlin Schumacher ]

  * SAUCE: acer-wmi: support for P key on TM8372
    - LP: #865807

  [ Tim Gardner ]

  * SAUCE: Add vendor specific ID (0a5c 21f3) for BCM20702A0
    - LP: #925552

  [ Upstream Kernel Changes ]

  * Revert "(pre-stable) HID: bump maximum global item tag report size to
    96 bytes"
    - LP: #922799
  * Revert "Revert "proc: enable writing to /proc/pid/mem""
    - LP: #922799
  * mtdoops: fix the oops_page_used array size
    - LP: #922799
  * mtd: mtdoops: skip reading initially bad blocks
    - LP: #922799
  * mtd: mtd_blkdevs: don't increase 'open' count on error path
    - LP: #922799
  * mtd: tests: stresstest: bail out if device has not enough eraseblocks
    - LP: #922799
  * drivers/rtc/interface.c: fix alarm rollover when day or month is
    out-of-range
    - LP: #922799
  * ext4: fix undefined behavior in ext4_fill_flex_info()
    - LP: #922799
  * ALSA: snd-usb-us122l: Delete calls to preempt_disable
    - LP: #922799
  * ALSA: ice1724 - Check for ac97 to avoid kernel oops
    - LP: #922799
  * ALSA: hda - Return the error from get_wcaps_type() for invalid NIDs
    - LP: #922799
  * drm/radeon/kms: workaround invalid AVI infoframe checksum issue
    - LP: #922799
  * drm/radeon/kms: disable writeback on pre-R300 asics
    - LP: #922799
  * radeon: Fix disabling PCI bus mastering on big endian hosts.
    - LP: #922799
  * NFS: Retry mounting NFSROOT
    - LP: #922799
  * NFSv4.1: fix backchannel slotid off-by-one bug
    - LP: #922799
  * nfs: fix regression in handling of context= option in NFSv4
    - LP: #922799
  * HID: bump maximum global item tag report size to 96 bytes
    - LP: #724831, #922799
  * UBI: fix missing scrub when there is a bit-flip
    - LP: #922799
  * UBI: fix use-after-free on error path
    - LP: #922799
  * PCI: Fix PCI_EXP_TYPE_RC_EC value
    - LP: #922799
  * PCI: msi: Disable msi interrupts when we initialize a pci device
    - LP: #922799
  * x86/PCI: Ignore CPU non-addressable _CRS reserved memory resources
    - LP: #922799
  * x86/PCI: build amd_bus.o only when CONFIG_AMD_NB=y
    - LP: #922799
  * SCSI: mpt2sas: Release spinlock for the raid device list before
    blocking it
    - LP: #922799
  * SCSI: mpt2sas : Fix for memory allocation error for large host credits
    - LP: #922799
  * xen/xenbus: Reject replies with payload > XENSTORE_PAYLOAD_MAX.
    - LP: #922799
  * ima: free duplicate measurement memory
    - LP: #922799
  * ima: fix invalid memory reference
    - LP: #922799
  * rtl8192se: Fix BUG caused by failure to check skb allocation
    - LP: #922799
  * mac80211: fix rx->key NULL pointer dereference in promiscuous mode
    - LP: #922799
  * memcg: add mem_cgroup_replace_page_cache() to fix LRU issue
    - LP: #922799
  * x86: Fix mmap random address range
    - LP: #922799
  * UBI: fix nameless volumes handling
    - LP: #922799
  * UBI: fix debugging messages
    - LP: #922799
  * UBIFS: fix debugging messages
    - LP: #922799
  * i2c: Fix error value returned by several bus drivers
    - LP: #922799
  * mmc: core: Fix voltage select in DDR mode
    - LP: #922799
  * mmc: sdhci: Fix tuning timer incorrect setting when suspending host
    - LP: #922799
  * mmc: sd: Fix SDR12 timing regression
    - LP: #922799
  * V4L/DVB: v4l2-ioctl: integer overflow in video_usercopy()
    - LP: #922799
  * kconfig/streamline-config.pl: Simplify backslash line concatination
    - LP: #922799
  * kconfig/streamline-config.pl: Fix parsing Makefile with variables
    - LP: #922799
  * svcrpc: fix double-free on shutdown of nfsd after changing pool mode
    - LP: #922799
  * svcrpc: destroy server sockets all at once
    - LP: #922799
  * svcrpc: avoid memory-corruption on pool shutdown
    - LP: #922799
  * nfsd: Fix oops when parsing a 0 length export
    - LP: #922799
  * fsnotify: don't BUG in fsnotify_destroy_mark()
    - LP: #922799
  * x86, UV: Update Boot messages for SGI UV2 platform
    - LP: #922799
  * recordmcount: Fix handling of elf64 big-endian objects.
    - LP: #922799
  * uvcvideo: Fix integer overflow in uvc_ioctl_ctrl_map()
    - LP: #922799
  * fix shrink_dcache_parent() livelock
    - LP: #922799
  * ah: Correctly pass error codes in ahash output callback.
    - LP: #922799
  * ah: Read nexthdr value before overwriting it in ahash input callback.
    - LP: #922799
  * HID: hid-multitouch - add another eGalax id
    - LP: #922799
  * HID: multitouch: cleanup with eGalax PID definitions
    - LP: #922799
  * HID: multitouch: Add egalax ID for Acer Iconia W500
    - LP: #922799
  * HID: multitouch: add support for the MSI Windpad 110W
    - LP: #922799
  * HID: multitouch: add support for 3M 32"
    - LP: #922799
  * fix cputime overflow in uptime_proc_show
    - LP: #922799
  * block: add and use scsi_blk_cmd_ioctl
    - LP: #922799
  * block: fail SCSI passthrough ioctls on partition devices
    - LP: #922799
  * dm: do not forward ioctls from logical volumes to the underlying device
    - LP: #922799
  * proc: clean up and fix /proc/<pid>/mem handling
    - LP: #922799
  * ALSA: virtuoso: Xonar DS: fix polarity of front output
    - LP: #922799
  * ALSA: HDA: Fix internal microphone on Dell Studio 16 XPS 1645
    - LP: #795823, #922799
  * intel idle: Make idle driver more robust
    - LP: #922799
  * intel_idle: fix API misuse
    - LP: #922799
  * ACPI: Store SRAT table revision
    - LP: #922799
  * ACPI, x86: Use SRAT table rev to use 8bit or 32bit PXM fields
    (x86/x86-64)
    - LP: #922799
  * ACPI, ia64: Use SRAT table rev to use 8bit or 16/32bit PXM fields
    (ia64)
    - LP: #922799
  * ACPICA: Put back the call to acpi_os_validate_address
    - LP: #922799
  * ACPI: processor: fix acpi_get_cpuid for UP processor
    - LP: #922799
  * sym53c8xx: Fix NULL pointer dereference in slave_destroy
    - LP: #922799
  * target: Set response format in INQUIRY response
    - LP: #922799
  * target: Set additional sense length field in sense data
    - LP: #922799
  * I2C: OMAP: correct SYSC register offset for OMAP4
    - LP: #922799
  * x86/UV2: Fix BAU destination timeout initialization
    - LP: #922799
  * rt2800pci: fix spurious interrupts generation
    - LP: #922799
  * pnfs-obj: pNFS errors are communicated on iodata->pnfs_error
    - LP: #922799
  * pnfs-obj: Must return layout on IO error
    - LP: #922799
  * net: Fix driver name for mdio-gpio.c
    - LP: #922799
  * i2c-eg20t: modified the setting of transfer rate.
    - LP: #922799
  * score: fix off-by-one index into syscall table
    - LP: #922799
  * kprobes: initialize before using a hlist
    - LP: #922799
  * proc: clear_refs: do not clear reserved pages
    - LP: #922799
  * mm: fix NULL ptr dereference in __count_immobile_pages
    - LP: #922799
  * iwlagn: check for SMPS mode
    - LP: #922799
  * iwlegacy: 3945: fix hw passive scan on radar channels
    - LP: #922799
  * UBIFS: make debugging messages light again
    - LP: #922799
  * Linux 3.0.18
    - LP: #922799
  * Bluetooth: Add support for BCM20702A0 [0a5c:21e3]
    - LP: #906832
  * ALSA: hda - Fix silent outputs from docking-station jacks of Dell
    laptops
    - LP: #926309
  * eCryptfs: Sanitize write counts of /dev/ecryptfs
    - LP: #926309
  * ecryptfs: Improve metadata read failure logging
    - LP: #926309
  * eCryptfs: Make truncate path killable
    - LP: #926309
  * eCryptfs: Check inode changes in setattr
    - LP: #926309
  * eCryptfs: Fix oops when printing debug info in extent crypto functions
    - LP: #926309
  * drm/radeon/kms: Add an MSI quirk for Dell RS690
    - LP: #926309
  * drm: Fix authentication kernel crash
    - LP: #926309
  * xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink()
    - LP: #926309
  * crypto: sha512 - make it work, undo percpu message schedule
    - LP: #926309
  * crypto: sha512 - reduce stack usage to safe number
    - LP: #926309
  * ftrace: Balance records when updating the hash
    - LP: #926309
  * ftrace: Update filter when tracing enabled in set_ftrace_filter()
    - LP: #926309
  * ftrace: Fix unregister ftrace_ops accounting
    - LP: #926309
  * ah: Don't return NET_XMIT_DROP on input.
    - LP: #926309
  * xfs: fix endian conversion issue in discard code
    - LP: #926309
  * x86/uv: Fix uv_gpa_to_soc_phys_ram() shift
    - LP: #926309
  * x86/microcode_amd: Add support for CPU family specific container files
    - LP: #926309
  * ALSA: hda - Fix silent output on ASUS A6Rp
    - LP: #926309
  * ALSA: hda - Fix silent output on Haier W18 laptop
    - LP: #926309
  * drm/i915/sdvo: always set positive sync polarity
    - LP: #926309
  * cap_syslog: don't use WARN_ONCE for CAP_SYS_ADMIN deprecation warning
    - LP: #926309
  * mach-ux500: enable ARM errata 764369
    - LP: #926309
  * ARM: 7296/1: proc-v7.S: remove HARVARD_CACHE preprocessor guards
    - LP: #926309
  * USB: option: Add LG docomo L-02C
    - LP: #926309
  * USB: ftdi_sio: fix TIOCSSERIAL baud_base handling
    - LP: #926309
  * USB: ftdi_sio: fix initial baud rate
    - LP: #926309
  * USB: ftdi_sio: add PID for TI XDS100v2 / BeagleBone A3
    - LP: #926309
  * USB: serial: ftdi additional IDs
    - LP: #926309
  * USB: ftdi_sio: Add more identifiers
    - LP: #926309
  * USB: cdc-wdm: updating desc->length must be protected by spin_lock
    - LP: #926309
  * USB: cdc-wdm: use two mutexes to allow simultaneous read and write
    - LP: #926309
  * qcaux: add more Pantech UML190 and UML290 ports
    - LP: #926309
  * usb: io_ti: Make edge_remove_sysfs_attrs the port_remove method.
    - LP: #926309
  * TTY: fix UV serial console regression
    - LP: #926309
  * serial: amba-pl011: lock console writes against interrupts
    - LP: #926309
  * jsm: Fixed EEH recovery error
    - LP: #926309
  * vmwgfx: Fix assignment in vmw_framebuffer_create_handle
    - LP: #926309
  * USB: usbsevseg: fix max length
    - LP: #926309
  * drivers/usb/host/ehci-fsl.c: add missing iounmap
    - LP: #926309
  * xhci: Fix USB 3.0 device restart on resume.
    - LP: #926309
  * xHCI: Cleanup isoc transfer ring when TD length mismatch found
    - LP: #926309
  * hwmon: (f71805f) Fix clamping of temperature limits
    - LP: #926309
  * hwmon: (w83627ehf) Disable setting DC mode for pwm2, pwm3 on NCT6776F
    - LP: #926309
  * hwmon: (sht15) fix bad error code
    - LP: #926309
  * USB: cdc-wdm: call wake_up_all to allow driver to shutdown on device
    removal
    - LP: #926309
  * USB: cdc-wdm: better allocate a buffer that is at least as big as we
    tell the USB core
    - LP: #926309
  * USB: cdc-wdm: Avoid hanging on interface with no USB_CDC_DMM_TYPE
    - LP: #926309
  * netns: fix net_alloc_generic()
    - LP: #926309
  * netns: Fail conspicously if someone uses net_generic at an
    inappropriate time.
    - LP: #926309
  * net caif: Register properly as a pernet subsystem.
    - LP: #926309
  * bonding: fix enslaving in alb mode when link down
    - LP: #926309
  * l2tp: l2tp_ip - fix possible oops on packet receive
    - LP: #926309
  * net: bpf_jit: fix divide by 0 generation
    - LP: #926309
  * rds: Make rds_sock_lock BH rather than IRQ safe.
    - LP: #926309
  * tcp: fix tcp_trim_head() to adjust segment count with skb MSS
    - LP: #926309
  * tcp: md5: using remote adress for md5 lookup in rst packet
    - LP: #926309
  * USB: serial: CP210x: Added USB-ID for the Link Instruments MSO-19
    - LP: #926309
  * USB: cp210x: call generic open last in open
    - LP: #926309
  * USB: cp210x: fix CP2104 baudrate usage
    - LP: #926309
  * USB: cp210x: do not map baud rates to B0
    - LP: #926309
  * USB: cp210x: fix up set_termios variables
    - LP: #926309
  * USB: cp210x: clean up, refactor and document speed handling
    - LP: #926309
  * USB: cp210x: initialise baud rate at open
    - LP: #926309
  * USB: cp210x: allow more baud rates above 1Mbaud
    - LP: #926309
  * Linux 3.0.19
    - LP: #926309
  * PCI: Rework ASPM disable code
    - LP: #927848
  * Linux 3.0.20
    - LP: #927848
  * xhci: Remove scary warnings about transfer issues.
    - LP: #929656
  * xhci: Remove warnings about MSI and MSI-X capabilities.
    - LP: #929656

linux (3.0.0-16.28) oneiric-proposed; urgency=low

  [Herton R. Krzesinski]

  * Release Tracking Bug
    - LP: #922692

  [ Upstream Kernel Changes ]

  * Revert "drm/i915/dp: Fix the math in intel_dp_link_required"
    - LP: #919350

linux (3.0.0-16.27) oneiric-proposed; urgency=low

  [Brad Figg]

  * Release Tracking Bug
    - LP: #920735

  [ Paolo Pisati ]

  * Revert "SAUCE: omap3: beagle: if rev unknown, assume xM revision C"
    - LP: #912199
  * Revert "SAUCE: omap3: beagle: detect new xM revision C"
    - LP: #912199
  * Revert "SAUCE: omap3: beagle: detect new xM revision B"
    - LP: #912199
  * Revert "SAUCE: omap3: beaglexm: fix DVI initialization"
    - LP: #912199
  * [Config] DEFAULT_MMAP_MIN_ADDR=32k on arm
    - LP: #903346

  [ Upstream Kernel Changes ]

  * Revert "rtc: Disable the alarm in the hardware"
    - LP: #913373
  * Support for Terratec G1
    - LP: #821061
  * drm/radeon/kms: fix DP detect and EDID fetch for DP bridges
    - LP: #825777
  * drm/radeon/kms/DCE4.1: fix Select_CrtcSource EncodeMode setting for DP
    bridges (v2)
    - LP: #825777
  * drm/radeon/kms: cleanup atombios_adjust_pll()
    - LP: #825777
  * drm/radeon/kms/atom: rework encoder dpms
    - LP: #825777
  * drm/radeon/kms: check for DP MST mode in a few more places (v2)
    - LP: #825777
  * drm/radeon/kms: rework DP bridge checks
    - LP: #825777
  * drm/radeon/kms: fix DP setup on TRAVIS bridges
    - LP: #825777
  * ALSA: sis7019 - give slow codecs more time to reset
    - LP: #907778
  * ALSA: hda/realtek - Fix Oops in alc_mux_select()
    - LP: #907778
  * alarmtimers: Fix time comparison
    - LP: #907778
  * ARM: davinci: da850 evm: change audio edma event queue to EVENTQ_0
    - LP: #907778
  * arm: mx23: recognise stmp378x as mx23
    - LP: #907778
  * ARM: at91: fix clock conid for atmel_tcb.1 on 9260/9g20
    - LP: #907778
  * ARM: davinci: dm646x evm: wrong register used in
    setup_vpif_input_channel_mode
    - LP: #907778
  * ASoC: Provide a more complete DMA driver stub
    - LP: #907778
  * fs/proc/meminfo.c: fix compilation error
    - LP: #907778
  * thp: add compound tail page _mapcount when mapped
    - LP: #907778
  * thp: set compound tail page _count to zero
    - LP: #907778
  * ptp: Fix clock_getres() implementation
    - LP: #907778
  * mm: Ensure that pfn_valid() is called once per pageblock when reserving
    pageblocks
    - LP: #907778
  * mm: vmalloc: check for page allocation failure before vmlist insertion
    - LP: #907778
  * fix apparmor dereferencing potentially freed dentry, sanitize
    __d_path() API
    - LP: #907778
  * target: Handle 0 correctly in transport_get_sectors_6()
    - LP: #907778
  * intel-iommu: fix return value of iommu_unmap() API
    - LP: #907778
  * intel-iommu: set iommu_superpage on VM domains to lowest common
    denominator
    - LP: #907778
  * intel-iommu: fix superpage support in pfn_to_dma_pte()
    - LP: #907778
  * percpu: fix chunk range calculation
    - LP: #907778
  * iwlwifi: do not re-configure HT40 after associated
    - LP: #907778
  * mac80211: fix race condition caused by late addBA response
    - LP: #907778
  * linux/log2.h: Fix rounddown_pow_of_two(1)
    - LP: #907778
  * hwmon: (jz4740) fix signedness bug
    - LP: #907778
  * mmc: mxcmmc: fix falling back to PIO
    - LP: #907778
  * x86, hpet: Immediately disable HPET timer 1 if rtc irq is masked
    - LP: #907778
  * jbd/jbd2: validate sb->s_first in journal_get_superblock()
    - LP: #907778
  * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops
    - LP: #907778
  * hwmon: (coretemp) Fix oops on CPU offlining
    - LP: #907778
  * xfs: fix nfs export of 64-bit inodes numbers on 32-bit kernels
    - LP: #907778
  * xfs: avoid synchronous transactions when deleting attr blocks
    - LP: #907778
  * md/raid5: fix bug that could result in reads from a failed device.
    - LP: #907778
  * xen: only limit memory map to maximum reservation for domain 0.
    - LP: #907778
  * ext4: display the correct mount option in /proc/mounts for
    [no]init_itable
    - LP: #907778
  * ext4: avoid hangs in ext4_da_should_update_i_disksize()
    - LP: #907778
  * ext4: avoid potential hang in mpage_submit_io() when blocksize <
    pagesize
    - LP: #907778
  * ext4: handle EOF correctly in ext4_bio_write_page()
    - LP: #907778
  * fuse: fix fuse_retrieve
    - LP: #907778
  * staging: r8712u: Add new USB ID
    - LP: #907778
  * drm/radeon/kms: add some new pci ids
    - LP: #907778
  * ibft: Fix finding IBFT ACPI table on UEFI
    - LP: #907778
  * USB: cdc-acm: add IDs for Motorola H24 HSPA USB module.
    - LP: #907778
  * usb: option: Add Huawei E398 controlling interfaces
    - LP: #907778
  * USB: option: Removing one bogus and adding some new Huawei combinations
    - LP: #907778
  * ASoC: core: Don't schedule deferred_resume_work twice
    - LP: #907778
  * Linux 3.0.14
    - LP: #907778
  * drm/i915: Fix PCH port pipe select in CPT disable paths
    - LP: #906756
  * KVM: x86: Prevent starting PIT timers in the absence of irqchip support
    - LP: #911303
    - CVE-2011-4622
  * Linux 3.0.15
    - LP: #913373
  * ARM: OMAP: rx51: fix USB
    - LP: #913373
  * ipip, sit: copy parms.name after register_netdevice
    - LP: #913373
  * rtc: m41t80: Workaround broken alarm functionality
    - LP: #913373
  * drm/i915: prevent division by zero when asking for chipset power
    - LP: #913373
  * cfq-iosched: free cic_index if blkio_alloc_blkg_stats fails
    - LP: #913373
  * cfq-iosched: fix cfq_cic_link() race confition
    - LP: #913373
  * SCSI: zfcp: return early from slave_destroy if slave_alloc returned
    early
    - LP: #913373
  * SCSI: mpt2sas: _scsih_smart_predicted_fault uses GFP_KERNEL in
    interrupt context
    - LP: #913373
  * SCSI: fcoe: Fix preempt count leak in fcoe_filter_frames()
    - LP: #913373
  * mac80211: fix another race in aggregation start
    - LP: #913373
  * block: initialize request_queue's numa node during
    - LP: #913373
  * ssb: fix init regression with SoCs
    - LP: #913373
  * MXC PWM: should active during DOZE/WAIT/DBG mode
    - LP: #913373
  * Input: synaptics - fix touchpad not working after S2R on Vostro V13
    - LP: #913373
  * percpu: fix per_cpu_ptr_to_phys() handling of non-page-aligned
    addresses
    - LP: #913373
  * binary_sysctl(): fix memory leak
    - LP: #913373
  * oom: fix integer overflow of points in oom_badness
    - LP: #913373
  * oprofile: Fix uninitialized memory access when writing to writing to
    oprofilefs
    - LP: #913373
  * NFSv4.1: Ensure that we handle _all_ SEQUENCE status bits.
    - LP: #913373
  * SELinux: Fix RCU deref check warning in sel_netport_insert()
    - LP: #913373
  * nilfs2: unbreak compat ioctl
    - LP: #913373
  * mmc: vub300: fix type of firmware_rom_wait_states module parameter
    - LP: #913373
  * cgroups: fix a css_set not found bug in cgroup_attach_proc
    - LP: #913373
  * mfd: Fix twl-core oops while calling twl_i2c_* for unbound driver
    - LP: #913373
  * vfs: __read_cache_page should use gfp argument rather than GFP_KERNEL
    - LP: #913373
  * media: s5p-fimc: Use correct fourcc for RGB565 colour format
    - LP: #913373
  * ath9k: fix max phy rate at rate control init
    - LP: #913373
  * iwlwifi: do not set the sequence control bit is not needed
    - LP: #913373
  * iwlwifi: allow to switch to HT40 if not associated
    - LP: #913373
  * memcg: keep root group unchanged if creation fails
    - LP: #913373
  * VFS: Fix race between CPU hotplug and lglocks
    - LP: #913373
  * ARM:imx:fix pwm period value
    - LP: #913373
  * ARM: 7214/1: mmc: mmci: Fixup handling of MCI_STARTBITERR
    - LP: #913373
  * ARM: 7220/1: mmc: mmci: Fixup error handling for dma
    - LP: #913373
  * oprofile, arm/sh: Fix oprofile_arch_exit() linkage issue
    - LP: #913373
  * futex: Fix uninterruptible loop due to gate_area
    - LP: #913373
  * watchdog: hpwdt: Changes to handle NX secure bit in 32bit path
    - LP: #913373
  * drm/radeon/kms: bail on BTC parts if MC ucode is missing
    - LP: #913373
  * mm: hugetlb: fix non-atomic enqueue of huge page
    - LP: #913373
  * mpt2sas: fix non-x86 crash on shutdown
    - LP: #913373
  * sparc64: Fix MSIQ HV call ordering in pci_sun4v_msiq_build_irq().
    - LP: #913373
  * sparc32: Be less strict in matching %lo part of relocation.
    - LP: #913373
  * sparc64: Patch sun4v code sequences properly on module load.
    - LP: #913373
  * sparc: Kill custom io_remap_pfn_range().
    - LP: #913373
  * sparc32: Remove non-kernel code from memcpy implementation.
    - LP: #913373
  * sparc32: Remove uses of %g7 in memcpy implementation.
    - LP: #913373
  * sparc32: Correct the return value of memcpy.
    - LP: #913373
  * sparc64: Fix masking and shifting in VIS fpcmp emulation.
    - LP: #913373
  * sparc: Fix handling of orig_i0 wrt. debugging when restarting syscalls.
    - LP: #913373
  * net: bpf_jit: fix an off-one bug in x86_64 cond jump target
    - LP: #913373
  * ppp: fix pptp double release_sock in pptp_bind()
    - LP: #913373
  * llc: llc_cmsg_rcv was getting called after sk_eat_skb.
    - LP: #913373
  * mqprio: Avoid panic if no options are provided
    - LP: #913373
  * net: have ipconfig not wait if no dev is available
    - LP: #913373
  * sch_gred: should not use GFP_KERNEL while holding a spinlock
    - LP: #913373
  * sctp: fix incorrect overflow check on autoclose
    - LP: #913373
  * sctp: Do not account for sizeof(struct sk_buff) in estimated rwnd
    - LP: #913373
  * ipv4: flush route cache after change accept_local
    - LP: #913373
  * ipv4: reintroduce route cache garbage collector
    - LP: #913373
  * ipv4: using prefetch requires including prefetch.h
    - LP: #913373
  * iwlwifi: update SCD BC table for all SCD queues
    - LP: #913373
  * mfd: Fix mismatch in twl4030 mutex lock-unlock
    - LP: #913373
  * mfd: Copy the device pointer to the twl4030-madc structure
    - LP: #913373
  * mfd: Check for twl4030-madc NULL pointer
    - LP: #913373
  * mfd: Turn on the twl4030-madc MADC clock
    - LP: #913373
  * xen/swiotlb: Use page alignment for early buffer allocation.
    - LP: #913373
  * xfs: log the inode in ->write_inode calls for kupdate
    - LP: #913373
  * xfs: log all dirty inodes in xfs_fs_sync_fs
    - LP: #913373
  * drm/radeon/kms/atom: fix possible segfault in pm setup
    - LP: #913373
  * hung_task: fix false positive during vfork
    - LP: #913373
  * ptrace: partially fix the do_wait(WEXITED) vs EXIT_DEAD->EXIT_ZOMBIE
    race
    - LP: #913373
  * ath9k: Fix kernel panic in AR2427 in AP mode
    - LP: #913373
  * Linux 3.0.16
    - LP: #913373
  * OMAP3: beagle: add support for beagleboard xM revision C
    - LP: #912199
  * MAINTAINERS: stable: Update address
    - LP: #915926
  * Documentation: Update stable address
    - LP: #915926
  * firmware: Fix an oops on reading fw_priv->fw in sysfs loading file
    - LP: #915926
  * rt2800usb: Move ID out of unknown
    - LP: #915926
  * offb: Fix setting of the pseudo-palette for >8bpp
    - LP: #915926
  * offb: Fix bug in calculating requested vram size
    - LP: #915926
  * wl12xx: Validate FEM index from ini file and FW
    - LP: #915926
  * wl12xx: Check buffer bound when processing nvs data
    - LP: #915926
  * powerpc/time: Handle wrapping of decrementer
    - LP: #915926
  * powerpc: Fix unpaired probe_hcall_entry and probe_hcall_exit
    - LP: #915926
  * asix: new device id
    - LP: #915926
  * IB/qib: Fix a possible data corruption when receiving packets
    - LP: #915926
  * perf: Fix parsing of __print_flags() in TP_printk()
    - LP: #915926
  * reiserfs: Fix quota mount option parsing
    - LP: #915926
  * reiserfs: Force inode evictions before umount to avoid crash
    - LP: #915926
  * ext3: Don't warn from writepage when readonly inode is spotted after
    error
    - LP: #915926
  * USB: update documentation for usbmon
    - LP: #915926
  * atmel_serial: fix spinlock lockup in RS485 code
    - LP: #915926
  * cgroup: fix to allow mounting a hierarchy by name
    - LP: #915926
  * udf: Fix deadlock when converting file from in-ICB one to normal one
    - LP: #915926
  * drivers/usb/class/cdc-acm.c: clear dangling pointer
    - LP: #915926
  * USB: isight: fix kernel bug when loading firmware
    - LP: #915926
  * usb: usb-storage doesn't support dynamic id currently, the patch
    disables the feature to fix an oops
    - LP: #915926
  * USB: add quirk for another camera
    - LP: #915926
  * usb: musb: fix pm_runtime mismatch
    - LP: #915926
  * USB: omninet: fix write_room
    - LP: #915926
  * USB: Add USB-ID for Multiplex RC serial adapter to cp210x.c
    - LP: #915926
  * usb: fix number of mapped SG DMA entries
    - LP: #915926
  * xhci: Properly handle COMP_2ND_BW_ERR
    - LP: #915926
  * USB: option: add id for 3G dongle Model VT1000 of Viettel
    - LP: #915926
  * usb: option: add ZD Incorporated HSPA modem
    - LP: #915926
  * usb: ch9: fix up MaxStreams helper
    - LP: #915926
  * OHCI: final fix for NVIDIA problems (I hope)
    - LP: #915926
  * igmp: Avoid zero delay when receiving odd mixture of IGMP queries
    - LP: #915926
  * asix: fix infinite loop in rx_fixup()
    - LP: #915926
  * bonding: fix error handling if slave is busy (v2)
    - LP: #915926
  * PM / Sleep: Fix race between CPU hotplug and freezer
    - LP: #915926
  * SCSI: mpt2sas: Added missing mpt2sas_base_detach call from scsih_remove
    context
    - LP: #915926
  * usb: cdc-acm: Fix acm_tty_hangup() vs. acm_tty_close() race
    - LP: #915926
  * xfs: fix acl count validation in xfs_acl_from_disk()
    - LP: #915926
  * Linux 3.0.17
    - LP: #915926
  * use cache type functions for arch_get_unmapped_area
    - LP: #861296
  * topdown mmap support
    - LP: #861296
  * x86/PCI: amd: factor out MMCONFIG discovery
    - LP: #647043
  * PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB
    - LP: #647043
  * overlayfs: apply device cgroup and security permissions to overlay
    files
    - LP: #915941, #918212
    - CVE-2012-0055
  * drivers/block/loop.c: emit uevent on auto release
    - LP: #548546

linux (3.0.0-15.26) oneiric-security; urgency=low

  [ Upstream Kernel Changes ]

  * Revert "proc: enable writing to /proc/pid/mem"
    - LP: #919115
    - CVE-2012-0056
 -- Brad Figg <email address hidden>   Mon, 13 Feb 2012 16:18:20 -0800