Lucid update to 2.6.32.25 stable release

[Leann Ogasawara]

SRU Justification

Impact:

The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch. The 2.6.32.25 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well.

  http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.25
  http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.32.25.bz2

Test Case: TBD

The following 3 patches in the 2.6.32.25 stable update were already release in a security update. Therefore, we will omit these 3 patches from the 2.6.32.25 stable update:

 * ALSA: prevent heap corruption in snd_ctl_new
 * ocfs2: Don't walk off the end of fast symlinks.
 * rose: Fix signedness issues wrt. digi count.

Additionally, 2 patches which were applied as "pre-stable" have landed in this 2.6.32.25 update. Therefore, we will drop the pre-stable patches in favor of the official patches from the 2.6.32.25 patch set:

 * ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on resume
 * mm: (pre-stable) Move vma_stack_continue into mm.h

I'd also note that it appears somewhere along the way that updateconfigs and updateportsconfigs needed but be run but never was. Thus, I've also included 2 additional patches which update the configs and portsconfigs.

The following is the complete list of patches in the 2.6.32.25 stable release:

 * x86, cpu: After uncapping CPUID, re-run CPU feature detection
 * ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
 * ALSA: oxygen: fix analog capture on Claro halo cards
 * ALSA: hda - Add Dell Latitude E6400 model quirk
 * ALSA: prevent heap corruption in snd_ctl_new()
 * ALSA: rawmidi: fix oops (use after free) when unloading a driver module
 * USB: fix bug in initialization of interface minor numbers
 * usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX style
 * usb: musb: gadget: restart request on clearing endpoint halt
 * oprofile: Add Support for Intel CPU Family 6 / Model 29
 * RDMA/cxgb3: Turn off RX coalescing for iWARP connections
 * mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
 * x86/amd-iommu: Set iommu configuration flags in enable-loop
 * x86/amd-iommu: Fix rounding-bug in __unmap_single
 * x86/amd-iommu: Work around S3 BIOS bug
 * tracing/x86: Don't use mcount in pvclock.c
 * tracing/x86: Don't use mcount in kvmclock.c
 * v4l1: fix 32-bit compat microcode loading translation
 * V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
 * V4L/DVB (13966): DVB-T regression fix for saa7134 cards
 * Input: joydev - fix JSIOCSAXMAP ioctl
 * x86, hpet: Fix bogus error check in hpet_assign_irq()
 * x86, irq: Plug memory leak in sparse irq
 * ubd: fix incorrect sector handling during request restart
 * ring-buffer: Fix typo of time extends per page
 * dmaengine: fix interrupt clearing for mv_xor
 * hrtimer: Preserve timer state in remove_hrtimer()
 * i2c-pca: Fix waitforcompletion() return value
 * ocfs2: Don't walk off the end of fast symlinks.
 * wext: fix potential private ioctl memory content leak
 * atl1: fix resume
 * x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
 * De-pessimize rds_page_copy_user
 * drm/radeon: fix PCI ID 5657 to be an RV410
 * xfrm4: strip ECN and IP Precedence bits in policy lookup
 * tcp: Fix >4GB writes on 64-bit.
 * net: Fix the condition passed to sk_wait_event()
 * Phonet: Correct header retrieval after pskb_may_pull
 * net: Fix IPv6 PMTU disc. w/ asymmetric routes
 * ip: fix truesize mismatch in ip fragmentation
 * net: clear heap allocations for privileged ethtool actions
 * tcp: Fix race in tcp_poll
 * netxen: dont set skb->truesize
 * rose: Fix signedness issues wrt. digi count.
 * net: blackhole route should always be recalculated
 * skge: add quirk to limit DMA
 * r8169: allocate with GFP_KERNEL flag when able to sleep
 * bsg: fix incorrect device_status value
 * r6040: fix r6040_multicast_list
 * r6040: Fix multicast list iteration when hash filter is used
 * powerpc: Initialise paca->kstack before early_setup_secondary
 * powerpc: Don't use kernel stack with translation off
 * b44: fix carrier detection on bind
 * ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on resume
 * intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot hang
 * ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite L355
 * ACPI: delete ZEPTO idle=nomwait DMI quirk
 * ACPI: Disable Windows Vista compatibility for Toshiba P305D
 * x86: detect scattered cpuid features earlier
 * fix 2.6.32.23 suspend regression caused by commit 6f6198a
 * setup_arg_pages: diagnose excessive argument size
 * execve: improve interactivity with large arguments
 * execve: make responsive to SIGKILL with large arguments
 * Phonet: disable network namespace support
 * mm: Move vma_stack_continue into mm.h
 * Linux 2.6.32.25

[Martin Pitt (pitti)]

Accepted linux into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Scott Moser (smoser)]

I ran the kernel-* tests from lp:qa-regression-testing against the -proposed kernel on -ec2 (this is the linux-ec2 variant) under both x86_64 and i386 and did not see any regressions. Minimal test, but something.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 2.6.32-27.49

---------------
linux (2.6.32-27.49) lucid-proposed; urgency=low

  [ Leann Ogasawara ]

  - LP: #683425
  * Revert "SAUCE: AF_ECONET prevent kernel stack overflow"
  * Revert "SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges"
  * Revert "SAUCE: AF_ECONET saddr->cookie prevent NULL pointer
    dereference"

  [ Tim Gardner ]

  * [Config] Added be2net, be2scsi to udebs
    - LP: #628776
  * [Config] Use correct be2iscsi module name in d-i/modules/scsi-modules
    - LP: #628776

  [ Upstream Kernel Changes ]

  * Revert "(pre-stable) ACPI: enable repeated PCIEXP wakeup by clearing
    PCIEXP_WAKE_STS on resume"
  * Revert "mm: (pre-stable) Move vma_stack_continue into mm.h"
  * x86, cpu: After uncapping CPUID, re-run CPU feature detection
    - LP: #668380
  * ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
    - LP: #668380
  * ALSA: oxygen: fix analog capture on Claro halo cards
    - LP: #668380
  * ALSA: hda - Add Dell Latitude E6400 model quirk
    - LP: #643891, #668380
  * ALSA: rawmidi: fix oops (use after free) when unloading a driver module
    - LP: #668380
  * USB: fix bug in initialization of interface minor numbers
    - LP: #668380
  * usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX
    style
    - LP: #668380
  * usb: musb: gadget: restart request on clearing endpoint halt
    - LP: #668380
  * oprofile: Add Support for Intel CPU Family 6 / Model 29
    - LP: #668380
  * RDMA/cxgb3: Turn off RX coalescing for iWARP connections
    - LP: #668380
  * mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove
    - LP: #668380
  * x86/amd-iommu: Set iommu configuration flags in enable-loop
    - LP: #668380
  * x86/amd-iommu: Fix rounding-bug in __unmap_single
    - LP: #668380
  * x86/amd-iommu: Work around S3 BIOS bug
    - LP: #668380
  * tracing/x86: Don't use mcount in pvclock.c
    - LP: #668380
  * tracing/x86: Don't use mcount in kvmclock.c
    - LP: #668380
  * v4l1: fix 32-bit compat microcode loading translation
    - LP: #668380
  * V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0)
    - LP: #668380
  * V4L/DVB (13966): DVB-T regression fix for saa7134 cards
    - LP: #668380
  * Input: joydev - fix JSIOCSAXMAP ioctl
    - LP: #668380
  * x86, hpet: Fix bogus error check in hpet_assign_irq()
    - LP: #668380
  * x86, irq: Plug memory leak in sparse irq
    - LP: #668380
  * ubd: fix incorrect sector handling during request restart
    - LP: #668380
  * ring-buffer: Fix typo of time extends per page
    - LP: #668380
  * dmaengine: fix interrupt clearing for mv_xor
    - LP: #668380
  * hrtimer: Preserve timer state in remove_hrtimer()
    - LP: #668380
  * i2c-pca: Fix waitforcompletion() return value
    - LP: #668380
  * wext: fix potential private ioctl memory content leak
    - LP: #668380
  * atl1: fix resume
    - LP: #668380
  * x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order
    - LP: #668380
  * De-pessimize rds_page_copy_user
    - LP: #668380
  * xfrm4: strip ECN and IP Precedence bits in policy lookup
    - LP: #668380
  * tcp: Fix >4GB writes on 64-bit.
    - LP: #668380
  * ne...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-mvl-dove - 2.6.32-216.33

---------------
linux-mvl-dove (2.6.32-216.33) lucid-proposed; urgency=low

  [ Ubuntu: 2.6.32-31.60 ]

  * Release Tracking Bug
    - LP: #734950
  * SAUCE: Clear new_profile in error path
    - LP: #732700
  * [Config] CONFIG_BOOT_PRINTK_DELAY=y
    - LP: #733191
  * Revert "drm/radeon/bo: add some fallback placements for VRAM only
    objects."
    - LP: #652934
  * drm/radeon: fall back to GTT if bo creation/validation in VRAM fails.
    - LP: #652934
  * drm/radeon/kms: Fix retrying ttm_bo_init() after it failed once.
    - LP: #652934
  * xfs: always use iget in bulkstat
    - LP: #692848
  * drm/radeon/kms: make the mac rv630 quirk generic
    - LP: #728687
  * drm/radeon/kms: add pll debugging output
    - LP: #728687
  * drm/radeon: remove 0x4243 pci id
    - LP: #728687
  * drm/radeon/kms: fix s/r issues with bios scratch regs
    - LP: #728687
  * drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS
    - LP: #728687
  * drm/i915: Add dependency on CONFIG_TMPFS
    - LP: #728687
  * Linux 2.6.32.29+drm33.14
    - LP: #728687
  * NFSD: memory corruption due to writing beyond the stat array
    - LP: #728687
  * mptfusion: mptctl_release is required in mptctl.c
    - LP: #728687
  * mptfusion: Fix Incorrect return value in mptscsih_dev_reset
    - LP: #728687
  * ocfs2_connection_find() returns pointer to bad structure
    - LP: #728687
  * x25: decrement netdev reference counts on unload
    - LP: #728687
  * x86, hpet: Disable per-cpu hpet timer if ARAT is supported
    - LP: #728687
  * OHCI: work around for nVidia shutdown problem
    - LP: #728687
  * x86/pvclock: Zero last_value on resume
    - LP: #728687
  * av7110: check for negative array offset
    - LP: #728687
  * CRED: Fix get_task_cred() and task_state() to not resurrect dead
    credentials
    - LP: #728687
  * bonding/vlan: Avoid mangled NAs on slaves without VLAN tag insertion
    - LP: #728687
  * CRED: Fix kernel panic upon security_file_alloc() failure.
    - LP: #728687
  * CRED: Fix BUG() upon security_cred_alloc_blank() failure
    - LP: #728687
  * CRED: Fix memory and refcount leaks upon security_prepare_creds()
    failure
    - LP: #728687
  * sendfile(): check f_op.splice_write() rather than f_op.sendpage()
    - LP: #728687
  * isdn: hisax: Replace the bogus access to irq stats
    - LP: #728687
  * ixgbe: add support for 82599 based Express Module X520-P2
    - LP: #728687
  * ixgbe: prevent speculative processing of descriptors before ready
    - LP: #728687
  * scsi_dh_alua: add netapp to dev list
    - LP: #728687
  * scsi_dh_alua: Add IBM Power Virtual SCSI ALUA device to dev list
    - LP: #728687
  * dm raid1: fail writes if errors are not handled and log fails
    - LP: #728687
  * GFS2: Fix bmap allocation corner-case bug
    - LP: #728687
  * dm raid1: fix null pointer dereference in suspend
    - LP: #728687
  * sunrpc/cache: fix module refcnt leak in a failure path
    - LP: #728687
  * be2net: Maintain tx and rx counters in driver
    - LP: #728687
  * tcp: Make TCP_MAXSEG minimum more correct.
    - LP: #728687
  * nfsd: correctly handle return value from ...