linux (3.13.0-59.98) trusty; urgency=low

  [ Colin Ian King ]

  * SAUCE: KEYS: ensure we free the assoc array edit if edit is valid
    - CVE-2015-1333

  [ Upstream Kernel Changes ]

  * x86_64, entry: Add missing 'DEFAULT_FRAME 0' entry annotations
  * x86/debug: Drop several unnecessary CFI annotations
  * x86, entry: Only call user_exit if TIF_NOHZ
  * x86_64, entry: Treat regs->ax the same in fastpath and slowpath
    syscalls
  * x86: Speed up ___preempt_schedule*() by using THUNK helpers
  * x86, entry: Switch stacks on a paranoid entry from userspace
  * x86: entry_64.S: delete unused code
  * x86: ia32entry.S: fix wrong symbolic constant usage: R11->ARGOFFSET
  * x86: entry_64.S: fold SAVE_ARGS_IRQ macro into its sole user
  * x86/asm/64: Open-code register save/restore in trace_hardirqs*() thunks
  * x86/asm/entry/64: Always allocate a complete "struct pt_regs" on the
    kernel stack
  * x86/asm/entry/64: Fold the 'test_in_nmi' macro into its only user
  * x86/asm/entry/64: Remove a redundant jump
  * x86/asm/entry/64: Remove pointless jump to irq_return
  * x86/nmi: Enable nested do_nmi handling for 64-bit kernels
  * x86/nmi/64: Remove asm code that saves cr2
  * x86/nmi/64: Switch stacks on userspace NMI entry
    - CVE-2015-3290, CVE-2015-5157
  * x86/nmi/64: Improve nested NMI comments
  * x86/nmi/64: Reorder nested NMI checks
  * x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI
    detection
    - CVE-2015-3291

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 24 Jul 2015 17:24:42 +0100

linux (3.13.0-58.97) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1472453

  [ Upstream Kernel Changes ]

  * vm: Fix incomplete backport of VM_FAULT_SIGSEGV handling support
    - LP: #1471892

 -- Brad Figg <brad.figg@canonical.com>  Tue, 07 Jul 2015 18:48:51 -0700

linux (3.13.0-58.96) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1471991

  [ Iyappan Subramanian ]

  * SAUCE: (no-up): drivers: net: xgene: fix: Out of order descriptor bytes
    read
    - LP: #1425576

  [ Upstream Kernel Changes ]

  * NVMe: Add shutdown timeout as module parameter.
    - LP: #1465136
  * Drivers: hv: vmbus: Add support for VMBus panic notifier handler
    - LP: #1463584
  * Drivers: hv: vmbus: Correcting truncation error for constant
    HV_CRASH_CTL_CRASH_NOTIFY
    - LP: #1463584
  * netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
    - LP: #1466135
  * lpfc: Add iotag memory barrier
    - LP: #1468416
  * mm/slab_common: support the slub_debug boot option on specific object
    size
    - LP: #1456952
  * pipe: iovec: Fix memory corruption when retrying atomic copy as
    non-atomic
    - CVE-2015-1805
  * kvm: x86: fix kvm_apic_has_events to check for NULL pointer
  * staging, rtl8192e, LLVMLinux: Change extern inline to static inline
    - LP: #1471233
  * kernel: use the gnu89 standard explicitly
    - LP: #1471233
  * staging, rtl8192e, LLVMLinux: Remove unused inline prototype
    - LP: #1471233
  * staging: rtl8712, rtl8712: avoid lots of build warnings
    - LP: #1471233
  * qla2xxx: remove redundant declaration in 'qla_gbl.h'
    - LP: #1471233
  * staging: wlags49_h2: fix extern inline functions
    - LP: #1471233
  * ARM: 8307/1: psci: move psci firmware calls out of line
    - LP: #1471233
  * kconfig: Fix warning "‘jump’ may be used uninitialized"
    - LP: #1471233
  * scripts/sortextable: suppress warning: `relocs_size' may be used
    uninitialized
    - LP: #1471233
  * ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
    - LP: #1471233
  * ALSA: hda - Fix mute-LED fixed mode
    - LP: #1471233
  * ALSA: emu10k1: Fix card shortname string buffer overflow
    - LP: #1471233
  * ALSA: emux: Fix mutex deadlock at unloading
    - LP: #1471233
  * drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
    - LP: #1471233
  * SCSI: add 1024 max sectors black list flag
    - LP: #1471233
  * 3w-sas: fix command completion race
    - LP: #1471233
  * 3w-xxxx: fix command completion race
    - LP: #1471233
  * 3w-9xxx: fix command completion race
    - LP: #1471233
  * serial: xilinx: Use platform_get_irq to get irq description structure
    - LP: #1471233
  * serial: of-serial: Remove device_type = "serial" registration
    - LP: #1471233
  * tty/serial: at91: maxburst was missing for dma transfers
    - LP: #1471233
  * ALSA: emux: Fix mutex deadlock in OSS emulation
    - LP: #1471233
  * ALSA: emu10k1: Emu10k2 32 bit DMA mode
    - LP: #1471233
  * rbd: end I/O the entire obj_request on error
    - LP: #1471233
  * powerpc/pseries: Correct cpu affinity for dlpar added cpus
    - LP: #1471233
  * bridge/mdb: remove wrong use of NLM_F_MULTI
    - LP: #1471233
  * efivarfs: Ensure VariableName is NUL-terminated
    - LP: #1471233
  * x86/efi: Store upper bits of command line buffer address in
    ext_cmd_line_ptr
    - LP: #1471233
  * writeback: use |1 instead of +1 to protect against div by zero
    - LP: #1471233
  * ARM: mvebu: armada-xp-openblocks-ax3-4: Disable internal RTC
    - LP: #1471233
  * ARM: dts: imx23-olinuxino: Fix polarity of LED GPIO
    - LP: #1471233
  * ARM: dts: imx23-olinuxino: Fix dr_mode of usb0
    - LP: #1471233
  * ARM: dts: imx25: Add #pwm-cells to pwm4
    - LP: #1471233
  * ARM: dts: imx28: Fix AUART4 TX-DMA interrupt name
    - LP: #1471233
  * gpio: sysfs: fix memory leaks and device hotplug
    - LP: #1471233
  * drm/radeon: disable semaphores for UVD V1 (v2)
    - LP: #1471233
  * RDMA/CMA: Canonize IPv4 on IPV6 sockets properly
    - LP: #1471233
  * drm/i915: Assume dual channel LVDS if pixel clock necessitates it
    - LP: #1471233
  * drm/i915: Add missing MacBook Pro models with dual channel LVDS
    - LP: #1471233
  * xen/console: Update console event channel on resume
    - LP: #1471233
  * xen/events: Set irq_info->evtchn before binding the channel to CPU in
    __startup_pirq()
    - LP: #1471233
  * mm/memory-failure: call shake_page() when error hits thp tail page
    - LP: #1471233
  * nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
    - LP: #1471233
  * ocfs2: dlm: fix race between purge and get lock resource
    - LP: #1471233
  * drm/radeon: make UVD handle checking more strict
    - LP: #1471233
  * drm/radeon: more strictly validate the UVD codec
    - LP: #1471233
  * path_openat(): fix double fput()
    - LP: #1471233
  * mnt: Fix fs_fully_visible to verify the root directory is visible
    - LP: #1471233
  * pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
    - LP: #1471233
  * mmc: sh_mmcif: Fix timeout value for command request
    - LP: #1471233
  * xen-pciback: Add name prefix to global 'permissive' variable
    - LP: #1471233
  * mmc: core: add missing pm event in mmc_pm_notify to fix hib restore
    - LP: #1471233
  * thermal: step_wise: Revert optimization
    - LP: #1471233
  * libata: Add helper to determine when PHY events should be ignored
    - LP: #1471233
  * libata: Ignore spurious PHY event on LPM policy change
    - LP: #1471233
  * usb: gadget: configfs: Fix interfaces array NULL-termination
    - LP: #1471233
  * rtlwifi: rtl8192cu: Fix kernel deadlock
    - LP: #1471233
  * USB: cp210x: add ID for KCF Technologies PRN device
    - LP: #1471233
  * USB: pl2303: Remove support for Samsung I330
    - LP: #1471233
  * USB: visor: Match I330 phone more precisely
    - LP: #1471233
  * nfsd: fix the check for confirmed openowner in
    nfs4_preprocess_stateid_op
    - LP: #1471233
  * svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
    - LP: #1471233
  * ACPI / init: Fix the ordering of acpi_reserve_resources()
    - LP: #1471233
  * md/raid5: don't record new size if resize_stripes fails.
    - LP: #1471233
  * xhci: fix isoc endpoint dequeue from advancing too far on transaction
    error
    - LP: #1471233
  * xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256
    - LP: #1471233
  * xhci: gracefully handle xhci_irq dead device
    - LP: #1471233
  * usb-storage: Add NO_WP_DETECT quirk for Lacie 059f:0651 devices
    - LP: #1471233
  * ARM: net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K intruction.
    - LP: #1471233
  * drm/radeon: fix VM_CONTEXT*_PAGE_TABLE_END_ADDR handling
    - LP: #1471233
  * drm/radeon: add new bonaire pci id
    - LP: #1471233
  * firmware: dmi_scan: Fix ordering of product_uuid
    - LP: #1471233
  * ext4: fix NULL pointer dereference when journal restart fails
    - LP: #1471233
  * ext4: check for zero length extent explicitly
    - LP: #1471233
  * jbd2: fix r_count overflows leading to buffer overflow in journal
    recovery
    - LP: #1471233
  * mm, numa: really disable NUMA balancing by default on single node
    machines
    - LP: #1471233
  * spi: bitbang: Make setup_transfer() callback optional
    - LP: #1471233
  * igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector
    - LP: #1471233
  * ARM: net: delegate filter to kernel interpreter when imm_offset()
    return value can't fit into 12bits.
    - LP: #1471233
  * ALSA: hda - Add headphone quirk for Lifebook E752
    - LP: #1471233
  * ASoC: mc13783: Fix wrong mask value used in mc13xxx_reg_rmw() calls
    - LP: #1471233
  * ASoC: uda1380: Avoid accessing i2c bus when codec is disabled
    - LP: #1471233
  * mac80211: move WEP tailroom size check
    - LP: #1471233
  * KVM: MMU: fix smap permission check
    - LP: #1471233
  * KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages
    - LP: #1471233
  * KVM: MMU: fix SMAP virtualization
    - LP: #1471233
  * storvsc: Set the SRB flags correctly when no data transfer is needed
    - LP: #1471233
  * ASoC: wm8960: fix "RINPUT3" audio route error
    - LP: #1471233
  * ASoC: wm8994: correct BCLK DIV 348 to 384
    - LP: #1471233
  * Input: elantech - fix semi-mt protocol for v3 HW
    - LP: #1471233
  * powerpc: Align TOC to 256 bytes
    - LP: #1471233
  * ALSA: hda - Add Conexant codecs CX20721, CX20722, CX20723 and CX20724
    - LP: #1454656, #1471233
  * mmc: atmel-mci: fix bad variable type for clkdiv
    - LP: #1471233
  * sd: Disable support for 256 byte/sector disks
    - LP: #1471233
  * libceph: request a new osdmap if lingering request maps to no osd
    - LP: #1471233
  * crypto: s390/ghash - Fix incorrect ghash icv buffer handling.
    - LP: #1471233
  * ipvs: fix memory leak in ip_vs_ctl.c
    - LP: #1471233
  * net: phy: Allow EEE for all RGMII variants
    - LP: #1471233
  * bridge: fix parsing of MLDv2 reports
    - LP: #1471233
  * ipv4: Avoid crashing in ip_error
    - LP: #1471233
  * ipv6: do not delete previously existing ECMP routes if add fails
    - LP: #1471233
  * ipv6: fix ECMP route replacement
    - LP: #1471233
  * net: core: Correct an over-stringent device loop detection.
    - LP: #1471233
  * x86: bpf_jit: fix compilation of large bpf programs
    - LP: #1471233
  * net: dp83640: fix broken calibration routine.
    - LP: #1471233
  * unix/caif: sk_socket can disappear when state is unlocked
    - LP: #1471233
  * net_sched: invoke ->attach() after setting dev->qdisc
    - LP: #1471233
  * udp: fix behavior of wrong checksums
    - LP: #1471233
  * xen: netback: read hotplug script once at start of day.
    - LP: #1471233
  * ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
    - LP: #1471233
  * drm/radeon: partially revert "fix VM_CONTEXT*_PAGE_TABLE_END_ADDR
    handling"
    - LP: #1471233
  * Linux 3.13.11-ckt22
    - LP: #1471233

 -- Brad Figg <brad.figg@canonical.com>  Mon, 06 Jul 2015 14:41:28 -0700

linux (3.13.0-57.95) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1466592

  [ Brad Figg ]

  * Merged back Ubuntu-3.13.0-55.94 regression fix for security release

 -- Luis Henriques <luis.henriques@canonical.com>  Thu, 18 Jun 2015 18:19:14 +0100

linux (3.13.0-56.93) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1465798

  [ Upstream Kernel Changes ]

  * net: eth: xgene: devm_ioremap() returns NULL on error
    - LP: #1458042
  * drivers: net: xgene: fix new firmware backward compatibility with older
    driver
    - LP: #1458042
  * drivers: net: xgene: constify of_device_id array
    - LP: #1458042
  * drivers: net: xgene: Add second SGMII based 1G interface
    - LP: #1458042
  * net: phy: re-design phy_modes to be self-contained
    - LP: #1458042
  * dtb: change binding name to match with newer firmware DT
    - LP: #1458042
  * dtb: xgene: Add second SGMII based 1G interface node
    - LP: #1458042
  * Btrfs: make xattr replace operations atomic
    - LP: #1438501
    - CVE-2014-9710
  * cdc-acm: prevent infinite loop when parsing CDC headers.
    - LP: #1460657
  * (upstream) libata: Blacklist queued TRIM on all Samsung 800-series
    - LP: #1338706, #1449005
  * ahci: avoton port-disable reset-quirk
    - LP: #1458617
  * xfs: avoid false quotacheck after unclean shutdown
    - LP: #1461730
  * (upstream)[SCSI] Add timeout to avoid infinite command retry
    - LP: #1449372
  * (upstream)scsi_lib: remove the description string in
    scsi_io_completion()
    - LP: #1449372
  * udf: Remove repeated loads blocksize
    - LP: #1462173
    - CVE-2015-4167
  * udf: Check length of extended attributes and allocation descriptors
    - LP: #1462173
    - CVE-2015-4167
  * vfs: read file_handle only once in handle_to_path
    - LP: #1416503
    - CVE-2015-1420
  * ozwpan: Use unsigned ints to prevent heap overflow
    - LP: #1463442
    - CVE-2015-4001
  * ozwpan: divide-by-zero leading to panic
    - LP: #1463445
    - CVE-2015-4003
  * ozwpan: Use proper check to prevent heap overflow
    - LP: #1463444
    - CVE-2015-4002
  * ozwpan: unchecked signed subtraction leads to DoS
    - LP: #1463444
    - CVE-2015-4002
  * Input: elantech - add new icbody type
    - LP: #1464490
  * Bluetooth: ath3k: Add support Atheros AR5B195 combo Mini PCIe card
    - LP: #1465796
  * power_supply: twl4030_madc: Check return value of power_supply_register
    - LP: #1465796
  * power_supply: lp8788-charger: Fix leaked power supply on probe fail
    - LP: #1465796
  * ARM: dts: dove: Fix uart[23] reg property
    - LP: #1465796
  * xtensa: xtfpga: fix hardware lockup caused by LCD driver
    - LP: #1465796
  * Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open()
    - LP: #1465796
  * xtensa: provide __NR_sync_file_range2 instead of __NR_sync_file_range
    - LP: #1465796
  * KVM: s390: Zero out current VMDB of STSI before including level3 data.
    - LP: #1465796
  * usb: musb: core: fix TX/RX endpoint order
    - LP: #1465796
  * drm/radeon: fix doublescan modes (v2)
    - LP: #1465796
  * usb: phy: Find the right match in devm_usb_phy_match
    - LP: #1465796
  * tools lib traceevent kbuffer: Remove extra update to data pointer in
    PADDING
    - LP: #1465796
  * ring-buffer: Replace this_cpu_*() with __this_cpu_*()
    - LP: #1465796
  * ASoC: wm8741: Fix rates constraints values
    - LP: #1465796
  * cdc-wdm: fix endianness bug in debug statements
    - LP: #1465796
  * staging: panel: fix lcd type
    - LP: #1465796
  * UBI: account for bitflips in both the VID header and data
    - LP: #1465796
  * UBI: fix out of bounds write
    - LP: #1465796
  * UBI: initialize LEB number variable
    - LP: #1465796
  * UBI: fix check for "too many bytes"
    - LP: #1465796
  * ARM: S3C64XX: Use fixed IRQ bases to avoid conflicts on Cragganmore
    - LP: #1465796
  * ASoC: davinci-evm: drop un-necessary remove function
    - LP: #1465796
  * iscsi-target: Convert iscsi_thread_set usage to kthread.h
    - LP: #1465796
  * Drivers: hv: vmbus: Don't wait after requesting offers
    - LP: #1465796
  * Btrfs: fix log tree corruption when fs mounted with -o discard
    - LP: #1465796
  * btrfs: don't accept bare namespace as a valid xattr
    - LP: #1465796
  * ARM: 8320/1: fix integer overflow in ELF_ET_DYN_BASE
    - LP: #1465796
  * rtlwifi: rtl8192cu: Add new USB ID
    - LP: #1465796
  * MIPS: Hibernate: flush TLB entries earlier
    - LP: #1465796
  * ASoC: cs4271: Increase delay time after reset
    - LP: #1465796
  * stk1160: Make sure current buffer is released
    - LP: #1465796
  * mnt: Improve the umount_tree flags
    - LP: #1465796
  * ext4: make fsync to sync parent dir in no-journal for real this time
    - LP: #1465796
  * Input: elantech - fix absolute mode setting on some ASUS laptops
    - LP: #1465796
  * usb: define a generic USB_RESUME_TIMEOUT macro
    - LP: #1465796
  * usb: host: xhci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: ehci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: uhci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: musb: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: isp116x: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: fotg210: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: fusbh200: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: oxu210hp: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: r8a66597: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: sl811: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: dwc2: hcd: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: isp1760: hcd: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: core: hub: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * iser-target: Fix possible deadlock in RDMA_CM connection error
    - LP: #1465796
  * gpio: mvebu: Fix mask/unmask managment per irq chip type
    - LP: #1465796
  * scsi: storvsc: Fix a bug in copy_from_bounce_buffer()
    - LP: #1465796
  * ALSA: emu10k1: don't deadlock in proc-functions
    - LP: #1465796
  * xtensa: ISS: fix locking in TAP network adapter
    - LP: #1465796
  * s390/hibernate: fix save and restore of kernel text section
    - LP: #1465796
  * Btrfs: fix inode eviction infinite loop after extent_same ioctl
    - LP: #1465796
  * Btrfs: fix inode eviction infinite loop after cloning into it
    - LP: #1465796
  * ACPICA: Utilities: split IO address types from data type models.
    - LP: #1465796
  * drm/i915: Dont enable CS_PARSER_ERROR interrupts at all
    - LP: #1465796
  * target: Fix COMPARE_AND_WRITE with SG_TO_MEM_NOALLOC handling
    - LP: #1465796
  * mm/hugetlb: use pmd_page() in follow_huge_pmd()
    - LP: #1465796
  * fs/binfmt_elf.c: fix bug in loading of PIE binaries
    - LP: #1465796
  * IB/core: disallow registering 0-sized memory region
    - LP: #1465796
  * IB/core: don't disallow registering region starting at 0x0
    - LP: #1465796
  * ptrace: fix race between ptrace_resume() and wait_task_stopped()
    - LP: #1465796
  * mvsas: fix panic on expander attached SATA devices
    - LP: #1465796
  * drm/i915: cope with large i2c transfers
    - LP: #1465796
  * RCU pathwalk breakage when running into a symlink overmounting
    something
    - LP: #1465796
  * compal-laptop: Check return value of power_supply_register
    - LP: #1465796
  * sched/idle/x86: Restore mwait_idle() to fix boot hangs, to improve
    power savings and to improve performance
    - LP: #1465796
  * nfs: don't call blocking operations while !TASK_RUNNING
    - LP: #1465796
  * nfs: fix high load average due to callback thread sleeping
    - LP: #1465796
  * e1000: add dummy allocator to fix race condition between mtu change and
    netpoll
    - LP: #1465796
  * wl18xx: show rx_frames_per_rates as an array as it really is
    - LP: #1465796
  * lib: memzero_explicit: use barrier instead of OPTIMIZER_HIDE_VAR
    - LP: #1465796
  * driver core: bus: Goto appropriate labels on failure in bus_add_device
    - LP: #1465796
  * C6x: time: Ensure consistency in __init
    - LP: #1465796
  * crypto: omap-aes - Fix support for unequal lengths
    - LP: #1465796
  * jhash: Update jhash_[321]words functions to use correct initval
    - LP: #1465796
  * KVM: use slowpath for cross page cached accesses
    - LP: #1465796
  * powerpc: Fix missing L2 cache size in /sys/devices/system/cpu
    - LP: #1465796
  * NFS: fix BUG() crash in notify_change() with patch to chown_common()
    - LP: #1465796
  * i2c: core: Export bus recovery functions
    - LP: #1465796
  * IB/mlx4: Fix WQE LSO segment calculation
    - LP: #1465796
  * mlx5: wrong page mask if CONFIG_ARCH_DMA_ADDR_T_64BIT enabled for 32Bit
    architectures
    - LP: #1465796
  * skbuff: Do not scrub skb mark within the same name space
    - LP: #1465796
  * firmware/ihex2fw.c: restore missing default in switch statement
    - LP: #1465796
  * memstick: mspro_block: add missing curly braces
    - LP: #1465796
  * tools/power turbostat: Use $(CURDIR) instead of $(PWD) and add support
    for O= option in Makefile
    - LP: #1465796
  * ext4: fix data corruption caused by unwritten and delayed extents
    - LP: #1465796
  * powerpc: Add vr save/restore functions
    - LP: #1465796
  * Linux 3.13.11-ckt21
    - LP: #1465796

 -- Brad Figg <brad.figg@canonical.com>  Tue, 16 Jun 2015 10:52:43 -0700

linux (3.13.0-55.94) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1466237

  [ Andy Whitcroft ]

  * SAUCE: ensure that upper/lower layers are valid before checking
    permissions
    - LP: #1465998

 -- Brad Figg <brad.figg@canonical.com>  Wed, 17 Jun 2015 14:58:16 -0700

linux (3.13.0-55.92) trusty; urgency=low

  [ Andy Whitcroft ]

  * SAUCE: overlayfs: when copying up and reading directories ensure
    mounter had permissions V2
    - CVE-2015-1328

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 12 Jun 2015 09:40:20 +0100

linux (3.13.0-54.91) trusty; urgency=medium

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458618

  [ Upstream Kernel Changes ]

  * [3.13-stable only] Revert "gianfar: Carefully free skbs in functions
    called by netpoll."
    - LP: #1454746

 -- Luis Henriques <luis.henriques@canonical.com>  Tue, 26 May 2015 17:19:30 +0100

linux (3.13.0-54.90) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458618

  [ Andy Whitcroft ]

  * [Config] push off linux-lts-{utopic, vivid}-tools-common
    - LP: #1405807

  [ Brad Figg ]

  * hyper-v -- add hid and fb drivers to linux-virtual
    - LP: #1444179

  [ Upstream Kernel Changes ]

  * DT doc: net: cpsw mac-address is optional
    - LP: #1452628
  * net: cpsw: Add missing return value
    - LP: #1452628
  * net: cpsw: header, Add missing include
    - LP: #1452628
  * net: cpsw: Add am33xx MACID readout
    - LP: #1452628
  * am33xx: define syscon control module device node
    - LP: #1452628
  * arm: dts: am33xx, Add syscon phandle to cpsw node
    - LP: #1452628
  * net: cpsw: do not register cpts twice
    - LP: #1452620
  * x86: kvm: Revert "remove sched notifier for cross-cpu migrations"
    - LP: #1450584
  * x86: vdso: fix pvclock races with task migration
    - LP: #1450584
  * n_tty: Fix read buffer overwrite when no newline
    - LP: #1381005, #1454746
  * KVM: x86: Fix lost interrupt on irr_pending race
    - LP: #1454746
  * writeback: add missing INITIAL_JIFFIES init in
    global_update_bandwidth()
    - LP: #1454746
  * nbd: fix possible memory leak
    - LP: #1454746
  * mfd: kempld-core: Fix callback return value check
    - LP: #1454746
  * KVM: nVMX: mask unrestricted_guest if disabled on L0
    - LP: #1454746
  * spi: trigger trace event for message-done before mesg->complete
    - LP: #1454746
  * powerpc/pseries: Little endian fixes for post mobility device tree
    update
    - LP: #1454746
  * net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}
    - LP: #1454746
  * perf: Fix irq_work 'tail' recursion
    - LP: #1454746
  * arm64: Use the reserved TTBR0 if context switching to the init_mm
    - LP: #1454746
  * selinux: fix sel_write_enforce broken return value
    - LP: #1454746
  * mm: fix anon_vma->degree underflow in anon_vma endless growing
    prevention
    - LP: #1454746
  * mm/memory hotplug: postpone the reset of obsolete pgdat
    - LP: #1454746
  * hfsplus: fix B-tree corruption after insertion at position 0
    - LP: #1454746
  * ARC: SA_SIGINFO ucontext regs off-by-one
    - LP: #1454746
  * writeback: fix possible underflow in write bandwidth calculation
    - LP: #1454746
  * iio: fix drivers that check buffer->scan_mask
    - LP: #1454746
  * iio: inv_mpu6050: Clear timestamps fifo while resetting hardware fifo
    - LP: #1454746
  * iio: core: Fix double free.
    - LP: #1454746
  * USB: ftdi_sio: Added custom PID for Synapse Wireless product
    - LP: #1454746
  * iwlwifi: dvm: run INIT firmware again upon .start()
    - LP: #1454746
  * USB: keyspan_pda: add new device id
    - LP: #1454746
  * cifs: smb2_clone_range() - exit on unhandled error
    - LP: #1454746
  * cifs: fix use-after-free bug in find_writable_file
    - LP: #1454746
  * can: flexcan: Deferred on Regulator return EPROBE_DEFER
    - LP: #1454746
  * usb: xhci: handle Config Error Change (CEC) in xhci driver
    - LP: #1454746
  * usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers
    - LP: #1454746
  * USB: ftdi_sio: Use jtag quirk for SNAP Connect E10
    - LP: #1454746
  * tty: serial: fsl_lpuart: clear receive flag on FIFO flush
    - LP: #1454746
  * radeon: Do not directly dereference pointers to BIOS area.
    - LP: #1454746
  * iio: imu: Use iio_trigger_get for indio_dev->trig assignment
    - LP: #1454746
  * dmaengine: edma: fix memory leak when terminating running transfers
    - LP: #1454746
  * dmaengine: omap-dma: Fix memory leak when terminating running transfer
    - LP: #1454746
  * x86/reboot: Add ASRock Q1900DC-ITX mainboard reboot quirk
    - LP: #1454746
  * mac80211: fix RX A-MPDU session reorder timer deletion
    - LP: #1454746
  * tcp: prevent fetching dst twice in early demux code
    - LP: #1454746
  * net: use for_each_netdev_safe() in rtnl_group_changelink()
    - LP: #1454746
  * xen-netfront: transmit fully GSO-sized packets
    - LP: #1454746
  * tcp: fix FRTO undo on cumulative ACK of SACKed range
    - LP: #1454746
  * PCI: cpcihp: Add missing curly braces in cpci_configure_slot()
    - LP: #1454746
  * sh_veu: v4l2_dev wasn't set
    - LP: #1454746
  * media: s5p-mfc: fix mmap support for 64bit arch
    - LP: #1454746
  * cpuidle: ACPI: do not overwrite name and description of C0
    - LP: #1454746
  * ioctx_alloc(): fix vma (and file) leak on failure
    - LP: #1454746
  * ALSA: hda/realtek - Make more stable to get pin sense for ALC283
    - LP: #1454746
  * be2iscsi: Fix kernel panic when device initialization fails
    - LP: #1454746
  * Defer processing of REQ_PREEMPT requests for blocked devices
    - LP: #1454746
  * ALSA: hda - Fix headphone pin config for Lifebook T731
    - LP: #1454746
  * ocfs2: _really_ sync the right range
    - LP: #1454746
  * ALSA: usb - Creative USB X-Fi Pro SB1095 volume knob support
    - LP: #1454746
  * iscsi target: fix oops when adding reject pdu
    - LP: #1454746
  * net/mlx4_en: Call register_netdevice in the proper location
    - LP: #1454746
  * ipv6: protect skb->sk accesses from recursive dereference inside the
    stack
    - LP: #1454746
  * tcp: tcp_make_synack() should clear skb->tstamp
    - LP: #1454746
  * 8139cp: Call dev_kfree_skby_any instead of kfree_skb.
    - LP: #1454746
  * 8139too: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454746
  * r8169: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454746
  * bonding: Call dev_kfree_skby_any instead of kfree_skb.
    - LP: #1454746
  * bnx2: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454746
  * tg3: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454746
  * ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454746
  * benet: Call dev_kfree_skby_any instead of kfree_skb.
    - LP: #1454746
  * gianfar: Carefully free skbs in functions called by netpoll.
    - LP: #1454746
  * ip_forward: Drop frames with attached skb->sk
    - LP: #1454746
  * tcp: fix possible deadlock in tcp_send_fin()
    - LP: #1454746
  * tcp: avoid looping in tcp_send_fin()
    - LP: #1454746
  * net: do not deplete pfmemalloc reserve
    - LP: #1454746
  * net: fix crash in build_skb()
    - LP: #1454746
  * ipv4: Missing sk_nulls_node_init() in ping_unhash().
    - LP: #1454746
  * Linux 3.13.11-ckt20
    - LP: #1454746
  * of: Add support for ePAPR "stdout-path" property
    - LP: #1438585
  * lib: add glibc style strchrnul() variant
    - LP: #1438585
  * of: Create unlocked version of for_each_child_of_node()
    - LP: #1438585
  * of: Make of_find_node_by_path() handle /aliases
    - LP: #1438585
  * of: Create of_console_check() for selecting a console specified in
    /chosen
    - LP: #1438585
  * of: Enable console on serial ports specified by /chosen/stdout-path
    - LP: #1438585
  * of: correct of_console_check()'s return value
    - LP: #1438585
  * of: Add bindings for chosen node, stdout-path
    - LP: #1438585
  * of: add optional options parameter to of_find_node_by_path()
    - LP: #1438585
  * of: support passing console options with stdout-path
    - LP: #1438585
  * (upstream) net/mlx4_core: Adjust command timeouts to conform to the
    firmware spec
    - LP: #1455121
  * arm64: kernel: add MPIDR_EL1 accessors macros
    - LP: #1455372
  * of: reimplement the matching method for __of_match_node()
    - LP: #1455372
  * arm64: remove redundant "psci:" prefixes
    - LP: #1455372
  * arm64: remove return value form psci_init()
    - LP: #1455372
  * arm: KVM: Don't return PSCI_INVAL if waitqueue is inactive
    - LP: #1455372
  * KVM: Add capability to advertise PSCI v0.2 support
    - LP: #1455372
  * ARM/ARM64: KVM: Add common header for PSCI related defines
    - LP: #1455372
  * ARM/ARM64: KVM: Add base for PSCI v0.2 emulation
    - LP: #1455372
  * KVM: Documentation: Add info regarding KVM_ARM_VCPU_PSCI_0_2 feature
    - LP: #1455372
  * ARM/ARM64: KVM: Make kvm_psci_call() return convention more flexible
    - LP: #1455372
  * KVM: Add KVM_EXIT_SYSTEM_EVENT to user space API header
    - LP: #1455372
  * ARM/ARM64: KVM: Emulate PSCI v0.2 SYSTEM_OFF and SYSTEM_RESET
    - LP: #1455372
  * ARM/ARM64: KVM: Emulate PSCI v0.2 AFFINITY_INFO
    - LP: #1455372
  * ARM/ARM64: KVM: Emulate PSCI v0.2 MIGRATE_INFO_TYPE and related
    functions
    - LP: #1455372
  * ARM/ARM64: KVM: Fix CPU_ON emulation for PSCI v0.2
    - LP: #1455372
  * ARM/ARM64: KVM: Emulate PSCI v0.2 CPU_SUSPEND
    - LP: #1455372
  * ARM/ARM64: KVM: Advertise KVM_CAP_ARM_PSCI_0_2 to user space
    - LP: #1455372
  * PSCI: Add initial support for PSCIv0.2 functions
    - LP: #1455372
  * Documentation: devicetree: Add new binding for PSCIv0.2
    - LP: #1455372
  * ARM: Check if a CPU has gone offline
    - LP: #1455372
  * arm64: KVM: Enable minimalistic support for Cortex-A53
    - LP: #1455372
  * HID: multitouch: add support of clickpads
    - LP: #1456881
  * vhost/scsi: potential memory corruption
    - LP: #1457807
    - CVE-2015-4036

 -- Luis Henriques <luis.henriques@canonical.com>  Tue, 26 May 2015 11:21:53 +0100

linux (3.13.0-53.89) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1456976

  [ Upstream Kernel Changes ]

  * tcp: Fix crash in TCP Fast Open
    - LP: #1447371
    - CVE-2015-3332

 -- Luis Henriques <luis.henriques@canonical.com>  Wed, 20 May 2015 11:00:58 +0100

# For older changelog entries, run 'apt-get changelog linux-cloud-tools-common'
