linux (3.5.0-22.34) quantal-proposed; urgency=low

  [Luis Henriques]

  * Release Tracking Bug
    - LP: #1097343

  [ Chris J Arges ]

  * Revert "SAUCE: fsnotify: dont put marks on temporary list when clearing
    marks by group"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: introduce locked versions of
    fsnotify_add_mark() and fsnotify_remove_mark()"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: pass group to fsnotify_destroy_mark()"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: use a mutex instead of a spinlock to protect a
    groups mark list"
    - LP: #1096137
  * Revert "SAUCE: fanotify: add an extra flag to mark_remove_from_mask
    that indicates wheather a mark should be destroyed"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: take groups mark_lock before mark lock"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: use reference counting for groups"
    - LP: #1096137
  * Revert "SAUCE: fsnotify: introduce fsnotify_get_group()"
    - LP: #1096137

  [ Upstream Kernel Changes ]

  * fsnotify: introduce fsnotify_get_group()
    - LP: #1096137
  * fsnotify: use reference counting for groups
    - LP: #1096137
  * fsnotify: take groups mark_lock before mark lock
    - LP: #1096137
  * fanotify: add an extra flag to mark_remove_from_mask that indicates
    wheather a mark should be destroyed
    - LP: #1096137
  * fsnotify: use a mutex instead of a spinlock to protect a groups mark
    list
    - LP: #1096137
  * fsnotify: pass group to fsnotify_destroy_mark()
    - LP: #1096137
  * fsnotify: introduce locked versions of fsnotify_add_mark() and
    fsnotify_remove_mark()
    - LP: #1096137
  * fsnotify: dont put marks on temporary list when clearing marks by group
    - LP: #1096137
  * fsnotify: change locking order
    - LP: #1096137

 -- Luis Henriques <luis.henriques@canonical.com>  Tue, 08 Jan 2013 17:54:01 +0000

linux (3.5.0-22.33) quantal-proposed; urgency=low

  [Brad Figg]

  * Release Tracking Bug
    - LP: #1095349

  [ Chris J Arges ]

  * SAUCE: add eeprom_bad_csum_allow module parameter
    - LP: #1070182

  [ Colin Ian King ]

  * SAUCE: samsung-laptop: disable in UEFI mode
    - LP: #1040557

  [ Kees Cook ]

  * SAUCE: exec: do not leave bprm->interp on stack
    - LP: #1068888
    - CVE-2012-4530

  [ Leann Ogasawara ]

  * Add ceph to linux-image for virtual instances
    - LP: #1063784

  [ Lino Sanfilippo ]

  * SAUCE: fsnotify: introduce fsnotify_get_group()
    - LP: #922906
  * SAUCE: fsnotify: use reference counting for groups
    - LP: #922906
  * SAUCE: fsnotify: take groups mark_lock before mark lock
    - LP: #922906
  * SAUCE: fanotify: add an extra flag to mark_remove_from_mask that
    indicates wheather a mark should be destroyed
    - LP: #922906
  * SAUCE: fsnotify: use a mutex instead of a spinlock to protect a groups
    mark list
    - LP: #922906
  * SAUCE: fsnotify: pass group to fsnotify_destroy_mark()
    - LP: #922906
  * SAUCE: fsnotify: introduce locked versions of fsnotify_add_mark() and
    fsnotify_remove_mark()
    - LP: #922906
  * SAUCE: fsnotify: dont put marks on temporary list when clearing marks
    by group
    - LP: #922906

  [ Tomas Hozza ]

  * SAUCE: tools: hv: Netlink source address validation allows DoS
    - LP: #1084777
    - CVE-2012-5532

  [ Upstream Kernel Changes ]

  * Revert "Staging: Android alarm: IOCTL command encoding fix"
    - LP: #1091251
  * Revert "sched, autogroup: Stop going ahead if autogroup is disabled"
    - LP: #1091251
  * Revert "serial: omap: fix software flow control"
    - LP: #1091251
  * drm/i915: EBUSY status handling added to i915_gem_fault().
    - LP: #1087302
  * MISC: hpilo, remove pci_disable_device
    - LP: #1087860
  * asix: Adds support for Lenovo 10/100 USB dongle.
    - LP: #1087480
  * hpsa: gen8plus Smart Array IDs
    - LP: #1089623
  * KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
    (CVE-2012-4461)
    - LP: #1089604
    - CVE-2012-4461
  * gpio-timberdale: fix a potential wrapping issue
    - LP: #1091251
  * cfg80211: fix antenna gain handling
    - LP: #1091251
  * drm/i915: fix overlay on i830M
    - LP: #1091251
  * drm/i915: clear the entire sdvo infoframe buffer
    - LP: #1091251
  * mac80211: use blacklist for duplicate IE check
    - LP: #1091251
  * mac80211: Only process mesh config header on frames that RA_MATCH
    - LP: #1091251
  * mac80211: don't inspect Sequence Control field on control frames
    - LP: #1091251
  * gpiolib: Don't return -EPROBE_DEFER to sysfs, or for invalid gpios
    - LP: #1091251
  * qla2xxx: Update target lookup session tables when a target session
    changes
    - LP: #1091251
  * mac80211: fix SSID copy on IBSS JOIN
    - LP: #1091251
  * wireless: drop invalid mesh address extension frames
    - LP: #1091251
  * mac80211: check management frame header length
    - LP: #1091251
  * mac80211: verify that skb data is present
    - LP: #1091251
  * mac80211: make sure data is accessible in EAPOL check
    - LP: #1091251
  * target: Fix double-free of se_cmd in target_complete_tmr_failure
    - LP: #1091251
  * ext4: fix unjournaled inode bitmap modification
    - LP: #1091251
  * ath9k: fix stale pointers potentially causing access to free'd skbs
    - LP: #1091251
  * floppy: don't call alloc_ordered_workqueue inside the alloc_disk loop
    - LP: #1091251
  * floppy: do put_disk on current dr if blk_init_queue fails
    - LP: #1091251
  * floppy: properly handle failure on add_disk loop
    - LP: #1091251
  * ALSA: PCM: Fix some races at disconnection
    - LP: #1091251
  * ALSA: usb-audio: Fix races at disconnection
    - LP: #1091251
  * ALSA: usb-audio: Use rwsem for disconnect protection
    - LP: #1091251
  * ALSA: usb-audio: Fix races at disconnection in mixer_quirks.c
    - LP: #1091251
  * ALSA: Add a reference counter to card instance
    - LP: #1091251
  * ALSA: Avoid endless sleep after disconnect
    - LP: #1091251
  * xen/gntdev: don't leak memory from IOCTL_GNTDEV_MAP_GRANT_REF
    - LP: #1091251
  * rt2800: validate step value for temperature compensation
    - LP: #1091251
  * ath9k: Test for TID only in BlockAcks while checking tx status
    - LP: #1091251
  * md/raid1: Fix assembling of arrays containing Replacements.
    - LP: #1091251
  * Input: tsc40 - remove wrong announcement of pressure support
    - LP: #1091251
  * HID: microsoft: fix invalid rdesc for 3k kbd
    - LP: #1091251
  * xen/mmu: Use Xen specific TLB flush instead of the generic one.
    - LP: #1091251
  * NFS: Wait for session recovery to finish before returning
    - LP: #1091251
  * NFSv4.1: We must release the sequence id when we fail to get a session
    slot
    - LP: #1091251
  * NFSv4: nfs4_locku_done must release the sequence id
    - LP: #1091251
  * NFS: fix bug in legacy DNS resolver.
    - LP: #1091251
  * nfsv3: Make v3 mounts fail with ETIMEDOUTs instead EIO on mountd
    timeouts
    - LP: #1091251
  * nfs: Show original device name verbatim in /proc/*/mount{s,info}
    - LP: #1091251
  * target: Don't return success from module_init() if setup fails
    - LP: #1091251
  * target: Avoid integer overflow in se_dev_align_max_sectors()
    - LP: #1091251
  * iscsi-target: Fix missed wakeup race in TX thread
    - LP: #1091251
  * target: Fix incorrect usage of nested IRQ spinlocks in ABORT_TASK path
    - LP: #1091251
  * DRM/Radeon: Fix Load Detection on legacy primary DAC.
    - LP: #1091251
  * ixgbe: PTP get_ts_info missing software support
    - LP: #1091251
  * drm/udl: fix stride issues scanning out stride != width*bpp
    - LP: #1091251
  * crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
    data corruption
    - LP: #1091251
  * module: fix out-by-one error in kallsyms
    - LP: #1091251
  * cifs: fix potential buffer overrun in cifs.idmap handling code
    - LP: #1091251
  * ptp: update adjfreq callback description
    - LP: #1091251
  * ALSA: hda: Cirrus: Fix coefficient index for beep configuration
    - LP: #1091251
  * ALSA: HDA: Fix digital microphone on CS420x
    - LP: #1091251
  * ALSA: hda - Force to reset IEC958 status bits for AD codecs
    - LP: #1091251, #359361
  * hwmon: (w83627ehf) Force initial bank selection
    - LP: #1091251
  * drm: restore open_count if drm_setup fails
    - LP: #1091251
  * ALSA: hda - Fix empty DAC filling in patch_via.c
    - LP: #1091251
  * ALSA: hda - Fix invalid connections in VT1802 codec
    - LP: #1091251
  * xen/events: fix RCU warning, or Call idle notifier after irq_enter()
    - LP: #1091251
  * mmc: sdhci: fix NULL dereference in sdhci_request() tuning
    - LP: #1091251
  * ALSA: hda - Improve HP depop when system enter to S3
    - LP: #1091251
  * ALSA: hda - Add new codec ALC668 and ALC900 (default name ALC1150)
    - LP: #1091251
  * ALSA: Fix card refcount unbalance
    - LP: #1091251
  * drm/radeon/cayman: add some missing regs to the VM reg checker
    - LP: #1091251
  * drm/radeon/si: add some missing regs to the VM reg checker
    - LP: #1091251
  * xfs: fix buffer shudown reference count mismatch
    - LP: #1091251
  * xfs: fix reading of wrapped log data
    - LP: #1091251
  * virtio: Don't access index after unregister.
    - LP: #1091251
  * fanotify: fix missing break
    - LP: #1091251
  * mm: bugfix: set current->reclaim_state to NULL while returning from
    kswapd()
    - LP: #1091251
  * drm/vmwgfx: Fix hibernation device reset
    - LP: #1091251
  * drm/vmwgfx: Fix a case where the code would BUG when trying to pin GMR
    memory
    - LP: #1091251
  * UBIFS: introduce categorized lprops counter
    - LP: #1091251
  * UBIFS: fix mounting problems after power cuts
    - LP: #1091251
  * USB: usb_wwan: fix bulk-urb allocation
    - LP: #1091251
  * ARM: dt: tegra: fix length of pad control and mux registers
    - LP: #1091251
  * futex: Handle futex_pi OWNER_DIED take over correctly
    - LP: #1091251
  * mac80211: sync acccess to tx_filtered/ps_tx_buf queues
    - LP: #1091251
  * iwlwifi: handle DMA mapping failures
    - LP: #1091251
  * ASoC: wm8978: pll incorrectly configured when codec is master
    - LP: #1091251
  * ASoC: cs42l52: fix the return value of cs42l52_set_fmt()
    - LP: #1091251
  * Bluetooth: Fix having bogus entries in mgmt_read_index_list reply
    - LP: #1091251
  * mac80211: don't send null data packet when not associated
    - LP: #1091251
  * ASoC: dapm: Use card_list during DAPM shutdown
    - LP: #1091251
  * ASoC: core: Double control update err for snd_soc_put_volsw_sx
    - LP: #1091251
  * mac80211: call skb_dequeue/ieee80211_free_txskb instead of
    __skb_queue_purge
    - LP: #1091251
  * ALSA: hda - Add a missing quirk entry for iMac 9,1
    - LP: #1091251
  * s390/signal: set correct address space control
    - LP: #1091251
  * wireless: allow 40 MHz on world roaming channels 12/13
    - LP: #1091251
  * drm/i915/sdvo: clean up connectors on intel_sdvo_init() failures
    - LP: #1091251
  * s390/gup: add missing TASK_SIZE check to get_user_pages_fast()
    - LP: #1091251
  * USB: option: add Novatel E362 and Dell Wireless 5800 USB IDs
    - LP: #1091251
  * USB: option: add Alcatel X220/X500D USB IDs
    - LP: #1091251
  * i2c-mux-pinctrl: Fix probe error path
    - LP: #1091251
  * ALSA: usb-audio: Fix mutex deadlock at disconnection
    - LP: #1091251
  * drm/radeon: fix logic error in atombios_encoders.c
    - LP: #1091251
  * ttm: Clear the ttm page allocated from high memory zone correctly
    - LP: #1091251
  * ARM: imx: ehci: fix host power mask bit
    - LP: #1091251
  * memcg: oom: fix totalpages calculation for memory.swappiness==0
    - LP: #1091251
  * memcg: fix hotplugged memory zone oops
    - LP: #1091251
  * tmpfs: fix shmem_getpage_gfp() VM_BUG_ON
    - LP: #1091251
  * tmpfs: change final i_blocks BUG to WARNING
    - LP: #1091251
  * mtd: ofpart: Fix incorrect NULL check in parse_ofoldpart_partitions()
    - LP: #1091251
  * mtd: slram: invalid checking of absolute end address
    - LP: #1091251
  * jffs2: Fix lock acquisition order bug in jffs2_write_begin
    - LP: #1091251
  * isci: copy fis 0x34 response into proper buffer
    - LP: #1091251
  * mac80211: deinitialize ibss-internals after emptiness check
    - LP: #1091251
  * iwlwifi: fix monitor mode FCS flag
    - LP: #1091251
  * fix virtual aliasing issue in get_shared_area()
    - LP: #1091251
  * rtlwifi: rtl8192cu: Add new USB ID
    - LP: #1091251
  * mwifiex: fix system hang issue in cmd timeout error case
    - LP: #1091251
  * mwifiex: report error to MMC core if we cannot suspend
    - LP: #1091251
  * xfs: drop buffer io reference when a bad bio is built
    - LP: #1091251
  * m68k: fix sigset_t accessor functions
    - LP: #1091251
  * ALSA: ua101, usx2y: fix broken MIDI output
    - LP: #1091251
  * sparc64: not any error from do_sigaltstack() should fail rt_sigreturn()
    - LP: #1091251
  * reiserfs: Fix lock ordering during remount
    - LP: #1091251
  * reiserfs: Protect reiserfs_quota_on() with write lock
    - LP: #1091251
  * reiserfs: Protect reiserfs_quota_write() with write lock
    - LP: #1091251
  * reiserfs: Move quota calls out of write lock
    - LP: #1091251
  * md: Reassigned the parameters if read_seqretry returned true in func
    md_is_badblock.
    - LP: #1091251
  * md: Avoid write invalid address if read_seqretry returned true.
    - LP: #1091251
  * drm/radeon/dce4+: don't use radeon_crtc for vblank callback
    - LP: #1091251
  * drm/radeon: properly handle mc_stop/mc_resume on evergreen+ (v2)
    - LP: #1091251
  * drm/radeon: properly track the crtc not_enabled case
    evergreen_mc_stop()
    - LP: #1091251
  * radeon: add AGPMode 1 quirk for RV250
    - LP: #1091251
  * x86, efi: Fix processor-specific memcpy() build error
    - LP: #1091251
  * x86-32: Fix invalid stack address while in softirq
    - LP: #1091251
  * x86-32: Export kernel_stack_pointer() for modules
    - LP: #1091251
  * x86, microcode, AMD: Add support for family 16h processors
    - LP: #1091251
  * ALSA: hda - Add new codec ALC283 ALC290 support
    - LP: #1091251
  * ALSA: hda - Add support for Realtek ALC292
    - LP: #1081466, #1091251
  * selinux: fix sel_netnode_insert() suspicious rcu dereference
    - LP: #1091251
  * drm/radeon: add new SI pci id
    - LP: #1091251
  * md/raid10: close race that lose writes lost when replacement completes.
    - LP: #1091251
  * md/raid10: decrement correct pending counter when writing to
    replacement.
    - LP: #1091251
  * fix user-triggerable panic on parisc
    - LP: #1091251
  * dm: fix deadlock with request based dm and queue request_fn recursion
    - LP: #1091251
  * block: Don't access request after it might be freed
    - LP: #1091251
  * PM / QoS: fix wrong error-checking condition
    - LP: #1091251
  * i7300_edac: Fix error flag testing
    - LP: #1091251
  * iwlwifi: fix the basic CCK rates calculation
    - LP: #1091251
  * Dove: Attempt to fix PMU/RTC interrupts
    - LP: #1091251
  * Dove: Fix irq_to_pmu()
    - LP: #1091251
  * ARM: Kirkwood: Update PCI-E fixup
    - LP: #1091251
  * jbd: Fix lock ordering bug in journal_unmap_buffer()
    - LP: #1091251
  * can: peak_usb: fix hwtstamp assignment
    - LP: #1091251
  * can: bcm: initialize ifindex for timeouts without previous frame
    reception
    - LP: #1091251
  * writeback: put unused inodes to LRU after writeback completion
    - LP: #1091251
  * futex: avoid wake_futex() for a PI futex_q
    - LP: #1091251
  * mm/vmemmap: fix wrong use of virt_to_page
    - LP: #1091251
  * mm: vmscan: fix endless loop in kswapd balancing
    - LP: #1091251
  * mm: soft offline: split thp at the beginning of soft_offline_page()
    - LP: #1091251
  * x86, fpu: Avoid FPU lazy restore after suspend
    - LP: #1091251
  * workqueue: exit rescuer_thread() as TASK_RUNNING
    - LP: #1091251
  * Revert misapplied "mmc: sh-mmcif: avoid oops on spurious interrupts"
    - LP: #1091251
  * mmc: sh-mmcif: avoid oops on spurious interrupts (second try)
    - LP: #1091251
  * tmpfs: fix shared mempolicy leak
    - LP: #1091251
  * HID: microsoft: do not use compound literal - fix build
    - LP: #1091251
  * ACPI video: Ignore errors after _DOD evaluation.
    - LP: #1091251
  * SUNRPC: Fix a UDP transport regression
    - LP: #1091251
  * SUNRPC: Set alloc_slot for backchannel tcp ops
    - LP: #1091251
  * sparc64: fix ptrace interaction with force_successful_syscall_return()
    - LP: #1091251
  * sparc64: Like x86 we should check current->mm during perf backtrace
    generation.
    - LP: #1091251
  * sparc64: Fix bit twiddling in sparc_pmu_enable_event().
    - LP: #1091251
  * sparc64: do not clobber personality flags in sys_sparc64_personality()
    - LP: #1091251
  * sparc64: Be less verbose during vmemmap population.
    - LP: #1091251
  * netlink: add reference of module in netlink_dump_start
    - LP: #1091251
  * infiniband: pass rdma_cm module to netlink_dump_start
    - LP: #1091251
  * net: remove skb recycling
    - LP: #1091251
  * net: Fix skb_under_panic oops in neigh_resolve_output
    - LP: #1091251
  * skge: Add DMA mask quirk for Marvell 88E8001 on ASUS P5NSLI motherboard
    - LP: #1091251
  * vlan: don't deliver frames for unknown vlans to protocols
    - LP: #1091251
  * RDS: fix rds-ping spinlock recursion
    - LP: #1091251
  * tcp: resets are misrouted
    - LP: #1091251
  * ipv6: addrconf: fix /proc/net/if_inet6
    - LP: #1091251
  * drm/i915: Use cpu relocations if the object is in the GTT but not
    mappable
    - LP: #1091251
  * floppy: destroy floppy workqueue before cleaning up the queue
    - LP: #1091251
  * drm/nouveau: silence modesetting spam on pre-gf8 chipsets
    - LP: #1091251
  * drm/nouveau: fix suspend/resume when in headless mode
    - LP: #1091251
  * drm/nouveau: headless mode by default if pci class != vga display
    - LP: #1091251
  * sky2: Fix for interrupt handler
    - LP: #1091251
  * batman-adv: Fix broadcast packet CRC calculation
    - LP: #1091251
  * drm/radeon: fix typo in evergreen_mc_resume()
    - LP: #1091251
  * GFS2: Test bufdata with buffer locked and gfs2_log_lock held
    - LP: #1091251
  * USB: mos7840: remove unused variable
    - LP: #1091251
  * sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()
    - LP: #1091251
  * netlink: use kfree_rcu() in netlink_release()
    - LP: #1091251
  * tcp: fix FIONREAD/SIOCINQ
    - LP: #1091251
  * ipv6: Set default hoplimit as zero.
    - LP: #1091251
  * net: usb: Fix memory leak on Tx data path
    - LP: #1091251
  * drivers/net/ethernet/nxp/lpc_eth.c: Call mdiobus_unregister before
    mdiobus_free
    - LP: #1091251
  * l2tp: fix oops in l2tp_eth_create() error path
    - LP: #1091251
  * tcp-repair: Handle zero-length data put in rcv queue
    - LP: #1091251
  * net: inet_diag -- Return error code if protocol handler is missed
    - LP: #1091251
  * af-packet: fix oops when socket is not present
    - LP: #1091251
  * ipv6: send unsolicited neighbour advertisements to all-nodes
    - LP: #1091251
  * r8169: allow multicast packets on sub-8168f chipset.
    - LP: #1091251
  * r8169: Fix WoL on RTL8168d/8111d.
    - LP: #1091251
  * r8169: use unlimited DMA burst for TX
    - LP: #1091251
  * netfilter: Mark SYN/ACK packets as invalid from original direction
    - LP: #1091251
  * netfilter: Validate the sequence number of dataless ACK packets as well
    - LP: #1091251
  * netfilter: nf_nat: don't check for port change on ICMP tuples
    - LP: #1091251
  * ipv4: avoid undefined behavior in do_ip_setsockopt()
    - LP: #1091251
  * ipv6: setsockopt(IPIPPROTO_IPV6, IPV6_MINHOPCOUNT) forgot to set return
    value
    - LP: #1091251
  * net: correct check in dev_addr_del()
    - LP: #1091251
  * net-rps: Fix brokeness causing OOO packets
    - LP: #1091251
  * tcp: fix retransmission in repair mode
    - LP: #1091251
  * GFS2: Don't call file_accessed() with a shared glock
    - LP: #1091251
  * get_dvb_firmware: fix download site for tda10046 firmware
    - LP: #1091251
  * ixgbe: add support for X540-AT1
    - LP: #1091251
  * fimc-lite: Don't use mutex_lock_interruptible() in device release()
    - LP: #1091251
  * NFC: pn533: Fix use after free
    - LP: #1091251
  * NFC: pn533: Fix mem leak in pn533_in_dep_link_up
    - LP: #1091251
  * HID: add quirk for Freescale i.MX28 ROM recovery
    - LP: #1091251
  * NFC: Fix nfc_llcp_local chained list insertion
    - LP: #1091251
  * bas_gigaset: fix pre_reset handling
    - LP: #1091251
  * watchdog: using u64 in get_sample_period()
    - LP: #1091251
  * sata_svw: check DMA start bit before reset
    - LP: #1091251
  * bnx2x: remove redundant warning log
    - LP: #1091251
  * x86, amd: Disable way access filter on Piledriver CPUs
    - LP: #1091251
  * telephony: ijx: buffer overflow in ixj_write_cid()
    - LP: #1091251
  * i915: Quirk no_lvds on Gigabyte GA-D525TUD ITX motherboard
    - LP: #1091251
  * drm/i915: Add no-lvds quirk for Supermicro X7SPA-H
    - LP: #1091251
  * ACPI: missing break
    - LP: #1091251
  * 8139cp: revert "set ring address before enabling receiver"
    - LP: #1091251
  * ASoC: dmaengine: Correct Makefile when sound is built as module
    - LP: #1091251
  * i82975x_edac: Fix dimm label initialization
    - LP: #1091251
  * drm/i915: do not ignore eDP bpc settings from vbt
    - LP: #1091251
  * drm/i915: do not default to 18 bpp for eDP if missing from VBT
    - LP: #1091251
  * Input: matrix-keymap - provide proper module license
    - LP: #1091251
  * Linux 3.5.7.2
    - LP: #1091251
  * exec: use -ELOOP for max recursion depth
    - LP: #1068888
    - CVE-2012-4530
  * ALSA: hda - bug fix for invalid connection list of Haswell HDMI codec
    pins
    - LP: #1095242