Oneiric update to 3.0.31 stable release

[Tim Gardner]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.0.31 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.0.31 stable release:

KVM: unmap pages from the iommu when slots are removed
NFSv4: include bitmap in nfsv4 get acl data
UBUNTU: [Config] control.stub is an intermediate product not a dependancy
hugepages: fix use after free bug in "quota" handling
nfs: Enclose hostname in brackets when needed in nfs_do_root_mount
NFSv4: Ensure that the LOCK code sets exception->inode
NFSv4: Ensure that we check lock exclusive/shared type against open modes
x86, apic: APIC code touches invalid MSR on P5 class machines
Revert "autofs: work around unhappy compat problem on x86-64"
xen: correctly check for pending events when restoring irq flags
xen/smp: Fix crash when booting with ACPI hotplug CPUs.
ASoC: dapm: Ensure power gets managed for line widgets
dmaengine: at_hdmac: remove clear-on-read in atc_dostart()
hwmon: fam15h_power: fix bogus values with current BIOSes
hwmon: (fam15h_power) Fix pci_device_id array
drm/i915: handle input/output sdvo timings separately in mode_set
drm/i915: fix integer overflow in i915_gem_execbuffer2()
drm/i915: fix integer overflow in i915_gem_do_execbuffer()
nl80211: ensure interface is up in various APIs
EHCI: fix criterion for resuming the root hub
brcm80211: smac: resume transmit fifo upon receiving frames
Fix modpost failures in fedora 17
mmc: unbreak sdhci-esdhc-imx on i.MX25
nfsd: fix b0rken error value for setattr on read-only mount
nfsd: fix error values returned by nfsd4_lockt() when nfsd_open() fails
Revert "usb: Fix build error due to dma_mask is not at pdev_archdata at ARM"
USB: cdc-wdm: fix race leading leading to memory corruption
USB: EHCI: fix crash during suspend on ASUS computers
USB: gadget: storage gadgets send wrong error code for unknown commands
usb gadget: uvc: uvc_request_data::length field must be signed
pipes: add a "packetized pipe" mode for writing
autofs: make the autofsv5 packet file descriptor use a packetized pipe
ARM: 7403/1: tls: remove covert channel via TPIDRURW
SCSI: libsas: fix sas_find_bcast_phy() in the presence of 'vacant' phys
SCSI: libsas: fix false positive 'device attached' conditions
efi: Add new variable attributes
efivars: String functions
efivars: fix warnings when CONFIG_PSTORE=n
efi: Validate UEFI boot variables
efivars: Improve variable validation
hwmon: (coretemp) Increase CPU core limit
hwmon: (coretemp) fix oops on cpu unplug
libata: skip old error history when counting probe trials
i2c: pnx: Disable clk in suspend
ipw2200: Fix race condition in the command completion acknowledge
mac80211: fix AP mode EAP tx for VLAN stations
rtlwifi: Fix oops on unload
wl1251: fix crash on remove due to premature kfree
wl1251: fix crash on remove due to leftover work item
sched: Fix nohz load accounting -- again!
hfsplus: Fix potential buffer overflows
Linux 3.0.31

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.0.0-21.35

---------------
linux (3.0.0-21.35) oneiric-proposed; urgency=low

  [Luis Henriques]

  * Release Tracking Bug
    - LP: #1004571

  [ Andy Whitcroft ]

  * [Config] control.stub is an intermediate product not a dependancy
    - LP: #992414

  [ Herton Ronaldo Krzesinski ]

  * SAUCE: async_populate_rootfs: fix build warnings
    - LP: #1003417

  [ Tim Gardner ]

  * Revert "SAUCE: ite-cir: postpone ISR registration"
    - LP: #1002880
  * [Config] perarch and indep tools builds need separate build directories

  [ Upstream Kernel Changes ]

  * Revert "autofs: work around unhappy compat problem on x86-64"
    - LP: #996109
  * Revert "usb: Fix build error due to dma_mask is not at pdev_archdata at
    ARM"
    - LP: #996109
  * KVM: unmap pages from the iommu when slots are removed
    - LP: #987569
    - CVE-2012-2121
  * NFSv4: include bitmap in nfsv4 get acl data
    - LP: #893147
    - CVE-2011-4131
  * hugepages: fix use after free bug in "quota" handling
    - LP: #990368
    - CVE-2012-2133
  * nfs: Enclose hostname in brackets when needed in nfs_do_root_mount
    - LP: #996109
  * NFSv4: Ensure that the LOCK code sets exception->inode
    - LP: #996109
  * NFSv4: Ensure that we check lock exclusive/shared type against open
    modes
    - LP: #996109
  * x86, apic: APIC code touches invalid MSR on P5 class machines
    - LP: #996109
  * xen: correctly check for pending events when restoring irq flags
    - LP: #996109
  * xen/smp: Fix crash when booting with ACPI hotplug CPUs.
    - LP: #996109
  * ASoC: dapm: Ensure power gets managed for line widgets
    - LP: #996109
  * dmaengine: at_hdmac: remove clear-on-read in atc_dostart()
    - LP: #996109
  * hwmon: fam15h_power: fix bogus values with current BIOSes
    - LP: #996109
  * hwmon: (fam15h_power) Fix pci_device_id array
    - LP: #996109
  * drm/i915: handle input/output sdvo timings separately in mode_set
    - LP: #996109
  * drm/i915: fix integer overflow in i915_gem_execbuffer2()
    - LP: #996109
  * drm/i915: fix integer overflow in i915_gem_do_execbuffer()
    - LP: #996109
  * nl80211: ensure interface is up in various APIs
    - LP: #996109
  * EHCI: fix criterion for resuming the root hub
    - LP: #996109
  * brcm80211: smac: resume transmit fifo upon receiving frames
    - LP: #996109
  * Fix modpost failures in fedora 17
    - LP: #996109
  * mmc: unbreak sdhci-esdhc-imx on i.MX25
    - LP: #996109
  * nfsd: fix b0rken error value for setattr on read-only mount
    - LP: #996109
  * nfsd: fix error values returned by nfsd4_lockt() when nfsd_open() fails
    - LP: #996109
  * USB: cdc-wdm: fix race leading leading to memory corruption
    - LP: #996109
  * USB: EHCI: fix crash during suspend on ASUS computers
    - LP: #996109
  * USB: gadget: storage gadgets send wrong error code for unknown commands
    - LP: #996109
  * usb gadget: uvc: uvc_request_data::length field must be signed
    - LP: #996109
  * pipes: add a "packetized pipe" mode for writing
    - LP: #996109
  * autofs: make the autofsv5 packet file descriptor use a packetized pipe
    - LP: #996109
  * ARM: 7403/1: tls: remove covert channel via...