Aggiornamenti di sicurezza importanti per il kernel Linux di Ubuntu 11.04 Natty Narwhal. ~ Ubuntulandia

Sono stati rilasciati gli aggiornamenti di sicurezza per Ubuntu 11.04 Natty Narwhal.

Il kernel Linux è un software libero distribuito con licenza GNU General Public License; è stato creato nel 1991 da Linus Torvalds. Integrato con il Sistema GNU, sviluppato da Richard Stallman, ha dato vita al sistema operativo GNU/Linux (chiamato comunemente con il solo nome Linux).

Il kernel è il "cuore" di un sistema operativo (nucleo) e fornisce tutte le funzioni essenziali per il sistema, in particolare la gestione della memoria, delle risorse del sistema e delle periferiche, assegnandole di volta in volta ai processi in esecuzione.

La controparte del kernel è la shell, ovvero l'interfaccia utente del sistema, la parte più esterna. I programmi chiedono le risorse al kernel attraverso delle chiamate (system call) e non possono accedere direttamente all'hardware. Il kernel si occupa quindi di gestire il tempo processore, le comunicazioni e la memoria distribuendole ai processi in corso a seconda delle priorità (scheduling) realizzando così il multitasking.

L'architettura scelta da Torvalds per il kernel (ovvero una struttura monolitica, considerata da alcuni obsoleta a differenza della più moderna architettura a microkernel) fu causa di un dibattito molto acceso con Andrew S. Tanenbaum nel 1992 sul newsgroup comp.os.minix.

Sebbene oggi il kernel possa essere compilato in modo da avere un'immagine binaria ridotta al minimo e i driver caricabili da moduli esterni, l'architettura originaria è chiaramente visibile: tutti i driver infatti devono avere una parte eseguita in kernel mode, anche quelli per cui ciò non sarebbe affatto necessario (ad esempio i driver dei file system).

Come ogni progetto che sia software libero, anche il kernel Linux è in continua evoluzione.

La dimensione del kernel Linux cresce in maniera esponenziale, aggiungendo nuovi moduli, nuovo hardware supportato e così via.

Linux è un kernel che supporta il multitasking ed è multi utente. Ciò permette che diversi utenti (con privilegi differenziati) possano eseguire sullo stesso sistema diversi processi software in simultanea. Attualmente linux supporta gran parte dell'hardware disponibile per PC e supporta un numero enorme di architetture (tra cui SPARC, PowerPC e le più moderne CPU a 64 bit).

Dato che il codice sorgente di Linux è disponibile a tutti, è ampiamente personalizzabile, al punto da rendere possibile, in fase di compilazione, l'esclusione di codice non strettamente indispensabile. La flessibilità di questo kernel lo rende adatto a tutte quelle tecnologie embedded emergenti e anche nei centri di calcolo distribuito (cluster Beowulf) fino ad essere incorporato in alcuni videoregistratori digitali e nei telefoni cellulari.

Fanno parte del bollettino di sicurezza settimanale rilasciato da Canonical e riguardano in particolare questa settimana il kernel di Linux:

Complete Generic Linux Kernel.
Header Files Related to Linux Kernel.

Complete Generic Linux Kernel.

This package will always depend on the latest complete generic Linux kernel available.

Cambiamenti per le versioni:
2.6.38.8.22
2.6.38.10.25

Versione 2.6.38.10.25:

* Added compat-wireless packages to Natty LBM
-LP: #794633

Versione 2.6.38.10.24:

[ Steve Conklin ]

* Bump ABI

Versione 2.6.38.9.23:

[ Tim Gardner ]

* Bump ABI

Header Files Related to Linux Kernel.

Cambiamenti per le versioni:
None
2.6.38-10.46

Versione 2.6.38-10.46:

[ Steve Conklin ]

* Release Tracking Bug
    - LP: #802464

[ Upstream Kernel Changes ]

* Revert "put stricter guards on queue dead checks"
* Revert "fix oops in scsi_run_queue()"

Versione 2.6.38-10.45:

[ Upstream Kernel Changes ]

* Revert "af_unix: Only allow recv on connected seqpacket sockets."

Versione 2.6.38-10.44:

[ Steve Conklin ]

* Release Tracking Bug
    - LP: #792013

[ Robert Nelson ]

* SAUCE: omap3: beagle: detect new xM revision B
    - LP: #770679
* SAUCE: omap3: beagle: detect new xM revision C
    - LP: #770679
* SAUCE: omap3: beagle: if rev unknown, assume xM revision C
    - LP: #770679

[ Stefan Bader ]

* Include nls_iso8859-1 for virtual images
    - LP: #732046

[ Thomas Schlichter ]

* SAUCE: vesafb: mtrr module parameter is uint, not bool
    - LP: #778043

[ Tim Gardner ]

* Revert "SAUCE: acpi battery -- move first lookup asynchronous"
    - LP: #775809
* updateconfigs after update to v2.6.38.6

[ Upstream Kernel Changes ]

* Revert "ALSA: hda - Fix pin-config of Gigabyte mobo"
    - LP: #780546
* Revert "[SCSI] Retrieve the Caching mode page"
    - LP: #788691
* Revert "USB: xhci - fix unsafe macro definitions"
* Revert "USB: xhci - fix math in xhci_get_endpoint_interval()"
* Revert "USB: xhci - also free streams when resetting devices"
* ath9k_hw: fix stopping rx DMA during resets
    - LP: #775809
* netxen: limit skb frags for non tso packet
    - LP: #775809
* ath: add missing regdomain pair 0x5c mapping
    - LP: #775809
* block, blk-sysfs: Fix an err return path in blk_register_queue()
    - LP: #775809
* p54: Initialize extra_len in p54_tx_80211
    - LP: #775809
* qlcnic: limit skb frags for non tso packet
    - LP: #775809
* nfsd4: fix struct file leak on delegation
    - LP: #775809
* nfsd4: Fix filp leak
    - LP: #775809
* virtio: Decrement avail idx on buffer detach
    - LP: #775809
* x86, gart: Set DISTLBWALKPRB bit always
    - LP: #775809
* x86, gart: Make sure GART does not map physmem above 1TB
    - LP: #775809
* intel-iommu: Fix use after release during device attach
    - LP: #775809
* intel-iommu: Unlink domain from iommu
    - LP: #775809
* intel-iommu: Fix get_domain_for_dev() error path
    - LP: #775809
* drm/radeon/kms: pll tweaks for r7xx
    - LP: #775809
* drm/nouveau: fix notifier memory corruption bug
    - LP: #775809
* drm/radeon/kms: fix bad shift in atom iio table parser
    - LP: #775809
* drm/i915/tv: Remember the detected TV type
    - LP: #775809
* tty/n_gsm: fix bug in CRC calculation for gsm1 mode
    - LP: #775809
* serial/imx: read cts state only after acking cts change irq
    - LP: #775809
* ASoC: Fix output PGA enabling in wm_hubs CODECs
    - LP: #775809
* ASoC: codecs: JZ4740: Fix OOPS
    - LP: #775809
* ALSA: hda - Add a fix-up for Acer dmic with ALC271x codec
    - LP: #775809
* ahci: don't enable port irq before handler is registered
    - LP: #775809
* libata: Implement ATA_FLAG_NO_DIPM and apply it to mcp65
    - LP: #775809
* kconfig: Avoid buffer underrun in choice input
    - LP: #775809
* UBIFS: fix master node recovery
    - LP: #775809
* ideapad: read brightness setting on brightness key notify
    - LP: #775809
* ACPI battery: fribble sysfs files from a resume notifier
    - LP: #775809
* UBIFS: fix false space checking failure
    - LP: #775809
* kvm-390: Let kernel exit SIE instruction on work
    - LP: #775809
* pfault: fix token handling
    - LP: #775809
* ACPI / PM: Avoid infinite recurrence while registering power resources
    - LP: #775809
* slub: fix panic with DISCONTIGMEM
    - LP: #775809
* set memory ranges in N_NORMAL_MEMORY when onlined
    - LP: #775809
* FLEXCOP-PCI: fix __xlate_proc_name-warning for flexcop-pci
    - LP: #775809
* virtio: console: Enable call to hvc_remove() on console port remove
    - LP: #775809
* oom: use pte pages in OOM score
    - LP: #775809
* mm: check if PTE is already allocated during page fault
    - LP: #775809
* mm: thp: fix /dev/zero MAP_PRIVATE and vm_flags cleanups
    - LP: #775809
* m68k/mm: Set all online nodes in N_NORMAL_MEMORY
    - LP: #775809
* vfs: avoid large kmalloc()s for the fdtable
    - LP: #775809
* nfs: don't lose MS_SYNCHRONOUS on remount of noac mount
    - LP: #775809
* NFSv4.1: Ensure state manager thread dies on last umount
    - LP: #775809
* um: mdd support for 64 bit atomic operations
    - LP: #775809
* drm: select FRAMEBUFFER_CONSOLE_PRIMARY if we have FRAMEBUFFER_CONSOLE
    - LP: #775809
* agp: fix arbitrary kernel memory writes
    - LP: #775809
* agp: fix OOM and buffer overflow
    - LP: #775809
* iwlwifi: do not set tx power when channel is changing
    - LP: #775809
* iwl3945: do not deprecate software scan
    - LP: #775809
* iwl3945: disable hw scan by default
    - LP: #775809
* iwlegacy: fix tx_power initialization
    - LP: #775809
* Input: xen-kbdfront - fix mouse getting stuck after save/restore
    - LP: #775809
* Linux 2.6.38.5
    - LP: #775809
* pmcraid: reject negative request size
    - LP: #780546
* mpt2sas: prevent heap overflows and unchecked reads
    - LP: #780546
* scsi_dh: fix reference counting in scsi_dh_activate error path
    - LP: #780546
* put stricter guards on queue dead checks
    - LP: #780546
* ALSA: HDA: Fix automute for Gateway NV79
    - LP: #761861, #780546
* ALSA: hda - Fix Realtek's chained fixup checks
    - LP: #780546
* i2c-parport: Fix adapter list handling
    - LP: #780546
* workqueue: fix deadlock in worker_maybe_bind_and_lock()
    - LP: #780546
* iwlwifi: fix skb usage after free
    - LP: #780546
* iwlagn: fix "Received BA when not expected"
    - LP: #780546
* atl1c: Fix work event interrupt/task races
    - LP: #780546
* UBIFS: do not free write-buffers when in R/O mode
    - LP: #780546
* UBIFS: seek journal heads to the latest bud in replay
    - LP: #780546
* mmc: sdhci-pci: Fix error case in sdhci_pci_probe_slot()
    - LP: #780546
* mmc: sdhci: Check mrq->cmd in sdhci_tasklet_finish
    - LP: #780546
* mmc: sdhci: Check mrq != NULL in sdhci_tasklet_finish
    - LP: #780546
* drm/radeon: fix regression on atom cards with hardcoded EDID record.
    - LP: #780546
* USB: fix regression in usbip by setting has_tt flag
    - LP: #780546
* firewire: Fix for broken configrom updates in quick succession
    - LP: #780546
* usbnet: add support for some Huawei modems with cdc-ether ports
    - LP: #780546
* imon: add conditional locking in change_protocol
    - LP: #780546
* flex_array: flex_array_prealloc takes a number of elements, not an end
    - LP: #780546
* flex_arrays: allow zero length flex arrays
    - LP: #780546
* ath9k: fix the return value of ath_stoprecv
    - LP: #780546
* mac80211: fix SMPS debugfs locking
    - LP: #780546
* af_unix: Only allow recv on connected seqpacket sockets.
    - LP: #780546
* ARM: 6891/1: prevent heap corruption in OABI semtimedop
    - LP: #780546
* XZ decompressor: Fix decoding of empty LZMA2 streams
    - LP: #780546
* Open with O_CREAT flag set fails to open existing files on non writable
    directories
    - LP: #780546
* can: Add missing socket check in can/bcm release.
    - LP: #780546
* cx88: Fix HVR4000 IR keymap
    - LP: #780546
* KVM: SVM: check for progress after IRET interception
    - LP: #780546
* drm/radeon/kms: add some new pci ids
    - LP: #780546
* can: add missing socket check in can/raw release
    - LP: #780546
* fix oops in scsi_run_queue()
    - LP: #780546
* VM: skip the stack guard page lookup in get_user_pages only for mlock
    - LP: #780546
* Linux 2.6.38.6
    - LP: #780546
* ips: use interruptible waits in ips-monitor
    - LP: #765082
* cifs: change bleft in decode_unicode_ssetup back to signed type
    - LP: #788691
* cifs: check for bytes_remaining going to zero in CIFS_SessSetup
    - LP: #788691
* cifs: sanitize length checking in coalesce_t2 (try #3)
    - LP: #788691
* cifs: refactor mid finding loop in cifs_demultiplex_thread
    - LP: #788691
* cifs: handle errors from coalesce_t2
    - LP: #788691
* Validate size of EFI GUID partition entries.
    - LP: #788691
* drm/radeon/kms: add pci id to acer travelmate quirk for 5730
    - LP: #788691
* x86, hw_breakpoints: Fix racy access to ptrace breakpoints
    - LP: #788691
* ptrace: Prepare to fix racy accesses on task breakpoints
    - LP: #788691
* hw_breakpoints, powerpc: Fix CONFIG_HAVE_HW_BREAKPOINT off-case in
    ptrace_set_debugreg()
    - LP: #788691
* iwlwifi: add {ack, plpc}_check module parameters
    - LP: #788691
* drm/radeon/kms: fix gart setup on fusion parts (v2) backport
    - LP: #788691
* vm: fix vm_pgoff wrap in upward expansion
    - LP: #788691
* Don't lock guardpage if the stack is growing up
    - LP: #788691
* drm/i915/dp: Be paranoid in case we disable a DP before it is attached
    - LP: #788691
* drm/i915/lvds: Only act on lid notify when the device is on
    - LP: #788691
* drm/i915: Release object along create user fb error path
    - LP: #788691
* dccp: handle invalid feature options length
    - LP: #788691
* CIFS: Fix memory over bound bug in cifs_parse_mount_options
    - LP: #788691
* drivers/rtc/rtc-s3c.c: fixup wake support for rtc
    - LP: #788691
* mm: use alloc_bootmem_node_nopanic() on really needed path
    - LP: #788691
* tmpfs: fix race between umount and swapoff
    - LP: #788691
* ARM: zImage: make sure the stack is 64-bit aligned
    - LP: #788691
* PM: Fix warning in pm_restrict_gfp_mask() during SNAPSHOT_S2RAM ioctl
    - LP: #788691
* PM / Hibernate: Make snapshot_release() restore GFP mask
    - LP: #788691
* PM / Hibernate: Fix ioctl SNAPSHOT_S2RAM
    - LP: #788691
* net: ip_expire() must revalidate route
    - LP: #788691
* can: fix SJA1000 dlc for RTR packets
    - LP: #788691
* ipheth: Properly distinguish length and alignment in URBs and skbs
    - LP: #788691
* vmxnet3: Consistently disable irqs when taking adapter->cmd_lock
    - LP: #788691
* ehea: fix wrongly reported speed and port
    - LP: #788691
* NET: slip, fix ldisc->open retval
    - LP: #788691
* PCH_GbE : Fixed the issue of collision detection
    - LP: #788691
* PCH_GbE : Fixed the issue of checksum judgment
    - LP: #788691
* pch_gbe: support ML7223 IOH
    - LP: #788691
* net: dev_close() should check IFF_UP
    - LP: #788691
* slcan: fix ldisc->open retval
    - LP: #788691
* ASoC: UDA134x: Remove POWER_OFF_ON_STANDBY define.
    - LP: #788691
* ASoC: SSM2602: Fix 'Mic Boost2' control
    - LP: #788691
* ne-h8300: Fix regression caused during net_device_ops conversion
    - LP: #788691
* hydra: Fix regression caused during net_device_ops conversion
    - LP: #788691
* ehea: Fix memory hotplug oops
    - LP: #788691
* libertas: fix cmdpendingq locking
    - LP: #788691
* zorro8390: Fix regression caused during net_device_ops conversion
    - LP: #788691
* tmpfs: fix race between umount and writepage
    - LP: #788691
* tmpfs: fix race between swapoff and writepage
    - LP: #788691
* tmpfs: fix off-by-one in max_blocks checks
    - LP: #788691
* tmpfs: fix spurious ENOSPC when racing with unswap
    - LP: #788691
* libata: fix oops when LPM is used with PMP
    - LP: #788691
* drm/radeon/kms: fix extended lvds info parsing
    - LP: #788691
* cifs: add fallback in is_path_accessible for old servers
    - LP: #788691
* rapidio: fix default routing initialization
    - LP: #788691
* x86, AMD: Fix ARAT feature setting again
    - LP: #788691
* clocksource: Install completely before selecting
    - LP: #788691
* tick: Clear broadcast active bit when switching to oneshot
    - LP: #788691
* x86, apic: Fix spurious error interrupts triggering on all non-boot APs
    - LP: #788691
* Fix cx88 remote control input
    - LP: #788691
* v4l: Release module if subdev registration fails
    - LP: #788691
* x86: Fix UV BAU for non-consecutive nasids
    - LP: #788691
* x86, mce, AMD: Fix leaving freed data in a list
    - LP: #788691
* megaraid_sas: Sanity check user supplied length before passing it to
    dma_alloc_coherent()
    - LP: #788691
* cdrom: always check_disk_change() on open
    - LP: #788691
* vmxnet3: Fix inconsistent LRO state after initialization
    - LP: #788691
* cifs: clean up various nits in unicode routines (try #2)
    - LP: #788691
* cifs: fix cifsConvertToUCS() for the mapchars case
    - LP: #788691
* iwlegacy: fix IBSS mode crashes
    - LP: #788691
* tmpfs: fix highmem swapoff crash regression
    - LP: #788691
* Linux 2.6.38.7
    - LP: #788691
* rtlwifi: rtl8192ce: Fix LED initialization
    - LP: #785975

Versione 2.6.38-9.43:

[ Brad Figg ]

* Release Tracking Bug
    - LP: #772096

[ Herton Ronaldo Krzesinski ]

* SAUCE: Revert "x86, hibernate: Initialize mmu_cr4_features during boot"
    - LP: #764758

[ Leann Ogasawara ]

* [Config] updateconfigs for 2.6.38.4

[ Paolo Pisati ]

* [Config] s/USB_MUSB_TUSB6010/USB_MUSB_OMAP2PLUS/ on omap3 to get musb
    - LP: #759913

[ Serge E. Hallyn ]

* SAUCE: kvm: fix push of wrong eip when doing softint
    - LP: #747090

[ Tim Gardner ]

* [Config] Add cachefiles.ko to virtual flavour
    - LP: #770430

[ Upstream Kernel Changes ]

* Revert "net/sunrpc: Use static const char arrays"
    - LP: #761134
* Revert "x86: Cleanup highmap after brk is concluded"
    - LP: #761134
* ALSA: hda - Fix SPDIF out regression on ALC889
    - LP: #761134
* ALSA: Fix yet another race in disconnection
    - LP: #761134
* ALSA: vmalloc buffers should use normal mmap
    - LP: #761134
* perf: Better fit max unprivileged mlock pages for tools needs
    - LP: #761134
* myri10ge: fix rmmod crash
    - LP: #761134
* cciss: fix lost command issue
    - LP: #761134
* ath9k: Fix kernel panic in AR2427
    - LP: #761134
* sound/oss/opl3: validate voice and channel indexes
    - LP: #761134
* mac80211: initialize sta->last_rx in sta_info_alloc
    - LP: #761134
* ses: show devices for enclosures with no page 7
    - LP: #761134
* ses: Avoid kernel panic when lun 0 is not mapped
    - LP: #761134
* PCI/ACPI: Report ASPM support to BIOS if not disabled from command line
    - LP: #761134
* eCryptfs: Unlock page in write_begin error path
    - LP: #761134
* eCryptfs: ecryptfs_keyring_auth_tok_for_sig() bug fix
    - LP: #761134
* crypto: aesni-intel - fixed problem with packets that are not multiple
    of 64bytes
    - LP: #761134
* staging: usbip: bugfixes related to kthread conversion
    - LP: #761134
* staging: usbip: bugfix add number of packets for isochronous frames
    - LP: #761134
* staging: usbip: bugfix for isochronous packets and optimization
    - LP: #761134
* staging: hv: use sync_bitops when interacting with the hypervisor
    - LP: #761134
* staging: hv: Fix GARP not sent after Quick Migration
    - LP: #761134
* xfs: register the inode cache shrinker before quotachecks
    - LP: #761134
* amd64_edac: Fix potential memleak
    - LP: #761134
* watchdog: s3c2410_wdt.c: Convert release_resource to
    release_region/release_mem_region
    - LP: #761134
* watchdog: Convert release_resource to release_region/release_mem_region
    - LP: #761134
* irda: validate peer name and attribute lengths
    - LP: #761134
* irda: prevent heap corruption on invalid nickname
    - LP: #761134
* powerpc: Fix accounting of softirq time when idle
    - LP: #761134
* nilfs2: fix data loss in mmap page write for hole blocks
    - LP: #761134
* ASoC: Explicitly say registerless widgets have no register
    - LP: #761134
* ASoC: imx: set watermarks for mx2-dma
    - LP: #761134
* ASoC: imx: fix burstsize for DMA
    - LP: #761134
* ASoC: Fix CODEC device name for Corgi
    - LP: #761134
* ALSA: ens1371: fix Creative Ectiva support
    - LP: #761134
* ALSA: hda - HDMI: Fix MCP7x audio infoframe checksums
    - LP: #761134
* ALSA: HDA: Fix single internal mic on ALC275 (Sony Vaio VPCSB1C5E)
    - LP: #752792, #761134
* net: fix ethtool->set_flags not intended -EINVAL return value
    - LP: #761134
* drm/radeon/kms: add some new ontario pci ids
    - LP: #761134
* drm/radeon/kms: add some sanity checks to obj info record parsingi (v2)
    - LP: #761134
* inotify: fix double free/corruption of stuct user
    - LP: #761134
* HID: hid-magicmouse: Increase evdev buffer size
    - LP: #761134
* perf: Fix task_struct reference leak
    - LP: #761134
* perf: Rebase max unprivileged mlock threshold on top of page size
    - LP: #761134
* ROSE: prevent heap corruption with bad facilities
    - LP: #761134
* Btrfs: Fix uninitialized root flags for subvolumes
    - LP: #761134
* x86, mtrr, pat: Fix one cpu getting out of sync during resume
    - LP: #761134
* Input: synaptics - fix crash in synaptics_module_init()
    - LP: #761134
* ath9k: fix a chip wakeup related crash in ath9k_start
    - LP: #761134
* mac80211: fix a crash in minstrel_ht in HT mode with no supported MCS
    rates
    - LP: #761134
* staging: IIO: IMU: ADIS16400: Fix up SPI messages cs_change behavior
    - LP: #761134
* staging: IIO: IMU: ADIS16400: Add delay after self test
    - LP: #761134
* staging: IIO: IMU: ADIS16400: Fix addresses of GYRO and ACCEL
    calibration offset
    - LP: #761134
* staging: IIO: IMU: ADIS16400: Make sure only enabled scan_elements are
    pushed into the ring
    - LP: #761134
* UBIFS: do not read flash unnecessarily
    - LP: #761134
* UBIFS: fix oops on error path in read_pnode
    - LP: #761134
* UBIFS: fix debugging failure in dbg_check_space_info
    - LP: #761134
* quota: Don't write quota info in dquot_commit()
    - LP: #761134
* mm: avoid wrapping vm_pgoff in mremap()
    - LP: #761134
* iwlwifi: accept EEPROM version 0x423 for iwl6000
    - LP: #761134
* p54usb: IDs for two new devices
    - LP: #761134
* rt2x00: Fix radio off hang issue for PCIE interface
    - LP: #662288, #761134
* rt2x00: fix cancelling uninitialized work
    - LP: #761134
* wl12xx: fix potential buffer overflow in testmode nvs push
    - LP: #761134
* media/radio/wl1273: fix build errors
    - LP: #761134
* b43: allocate receive buffers big enough for max frame len + offset
    - LP: #761134
* Bluetooth: sco: fix information leak to userspace
    - LP: #761134
* bridge: netfilter: fix information leak
    - LP: #761134
* Bluetooth: bnep: fix buffer overflow
    - LP: #761134
* Bluetooth: add support for Apple MacBook Pro 8,2
    - LP: #761134
* Treat writes as new when holes span across page boundaries
    - LP: #761134
* char/tpm: Fix unitialized usage of data buffer
    - LP: #761134
* netfilter: ip_tables: fix infoleak to userspace
    - LP: #761134
* netfilter: xtables: fix reentrancy
    - LP: #761134
* netfilter: arp_tables: fix infoleak to userspace
    - LP: #761134
* netfilter: ipt_CLUSTERIP: fix buffer overflow
    - LP: #761134
* ipv6: netfilter: ip6_tables: fix infoleak to userspace
    - LP: #761134
* scsi_transport_iscsi: make priv_sess file writeable only by root
    - LP: #761134
* mfd: ab8500: world-writable debugfs register-* files
    - LP: #761134
* mfd: ab3500: world-writable debugfs register-* files
    - LP: #761134
* mfd: ab3100: world-writable debugfs *_priv files
    - LP: #761134
* drivers/rtc/rtc-ds1511.c: world-writable sysfs nvram file
    - LP: #761134
* drivers/misc/ep93xx_pwm.c: world-writable sysfs files
    - LP: #761134
* drivers/leds/leds-lp5523.c: world-writable engine* sysfs files
    - LP: #761134
* drivers/leds/leds-lp5521.c: world-writable sysfs engine* files
    - LP: #761134
* econet: 4 byte infoleak to the network
    - LP: #761134
* netfilter: h323: bug in parsing of ASN1 SEQOF field
    - LP: #761134
* sound/oss: remove offset from load_patch callbacks
    - LP: #761134
* drivers/media/video/tlg2300/pd-video.c: Remove second mutex_unlock in
    pd_vidioc_s_fmt
    - LP: #761134
* acer-wmi: does not set persistence state by rfkill_init_sw_state
    - LP: #761134
* Squashfs: Use vmalloc rather than kmalloc for zlib workspace
    - LP: #761134
* Squashfs: handle corruption of directory structure
    - LP: #761134
* atm/solos-pci: Don't include frame pseudo-header on transmit hex-dump
    - LP: #761134
* atm/solos-pci: Don't flap VCs when carrier state changes
    - LP: #761134
* ext4: fix a double free in ext4_register_li_request
    - LP: #761134
* ext4: fix credits computing for indirect mapped files
    - LP: #761134
* nfsd: fix auth_domain reference leak on nlm operations
    - LP: #761134
* nfsd4: fix oops on lock failure
    - LP: #761134
* Linux 2.6.38.3
    - LP: #761134
* vm: fix vm_pgoff wrap in stack expansion
    - LP: #769042
* drm/radeon/kms: pll tweaks for rv6xx
    - LP: #769042
* drm/radeon/kms: fix suspend on rv530 asics
    - LP: #769042
* cifs: always do is_path_accessible check in cifs_mount
    - LP: #769042
* cifs: check for private_data before trying to put it
    - LP: #769042
* cifs: set ra_pages in backing_dev_info
    - LP: #769042
* cifs: wrap received signature check in srv_mutex
    - LP: #769042
* video: sn9c102: world-wirtable sysfs files
    - LP: #769042
* UBIFS: restrict world-writable debugfs files
    - LP: #769042
* ALSA: hda - Fix pin-config of Gigabyte mobo
    - LP: #769042
* NET: cdc-phonet, handle empty phonet header
    - LP: #769042
* x86: Fix a bogus unwind annotation in lib/semaphore_32.S
    - LP: #769042
* tioca: Fix assignment from incompatible pointer warnings
    - LP: #769042
* mca.c: Fix cast from integer to pointer warning
    - LP: #769042
* vm: fix mlock() on stack guard page
    - LP: #769042
* UBIFS: fix assertion warnings
    - LP: #769042
* perf: Fix task context scheduling
    - LP: #769042
* bridge: Fix possibly wrong MLD queries' ethernet source address
    - LP: #769042
* fib: add rtnl locking in ip_fib_net_exit
    - LP: #769042
* gianfar: Fall back to software tcp/udp checksum on older controllers
    - LP: #769042
* l2tp: fix possible oops on l2tp_eth module unload
    - LP: #769042
* net ipv6: Fix duplicate /proc/sys/net/ipv6/neigh directory entries.
    - LP: #769042
* net_sched: fix ip_tos2prio
    - LP: #769042
* pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev
    - LP: #769042
* sctp: Pass __GFP_NOWARN to hash table allocation attempts.
    - LP: #769042
* tcp: avoid cwnd moderation in undo
    - LP: #769042
* xfrm: Refcount destination entry on xfrm_lookup
    - LP: #769042
* vlan: should take into account needed_headroom
    - LP: #769042
* bridge: Reset IPCB when entering IP stack on NF_FORWARD
    - LP: #769042
* sparc: Fix .size directive for do_int_load
    - LP: #769042
* sparc32: Fix might-be-used-uninitialized warning in do_sparc_fault().
    - LP: #769042
* sparc32: Pass task_struct to schedule_tail() in ret_from_fork
    - LP: #769042
* sparc64: Fix build errors with gcc-4.6.0
    - LP: #769042
* futex: Set FLAGS_HAS_TIMEOUT during futex_wait restart setup
    - LP: #769042
* kstrto*: converting strings to integers done (hopefully) right
    - LP: #769042
* mm/thp: use conventional format for boolean attributes
    - LP: #769042
* ramfs: fix memleak on no-mmu arch
    - LP: #769042
* oom-kill: remove boost_dying_task_prio()
    - LP: #769042
* MAINTAINERS: update STABLE BRANCH info
    - LP: #769042
* UBIFS: fix oops when R/O file-system is fsync'ed
    - LP: #769042
* x86, AMD: Set ARAT feature on AMD processors
    - LP: #769042
* x86, amd: Disable GartTlbWlkErr when BIOS forgets it
    - LP: #769042
* vfs: Fix absolute RCU path walk failures due to uninitialized seq
    number
    - LP: #769042
* ARM: 6864/1: hw_breakpoint: clear DBGVCR out of reset
    - LP: #769042
* i2c-algo-bit: Call pre/post_xfer for bit_test
    - LP: #769042
* RTC: add missing "return 0" in new alarm func for rtc-bfin.c
    - LP: #769042
* sched: Fix erroneous all_pinned logic
    - LP: #769042
* vmscan: all_unreclaimable() use zone->all_unreclaimable as a name
    - LP: #769042
* brk: COMPAT_BRK: fix detection of randomized brk
    - LP: #769042
* usb: musb: temporarily make it bool
    - LP: #769042
* USB: ftdi_sio: Added IDs for CTI USB Serial Devices
    - LP: #769042
* USB: ftdi_sio: add PID for OCT DK201 docking station
    - LP: #769042
* USB: ftdi_sio: add ids for Hameg HO720 and HO730
    - LP: #769042
* USB: option: Added support for Samsung GT-B3730/GT-B3710 LTE USB modem.
    - LP: #769042
* next_pidmap: fix overflow condition
    - LP: #769042
* proc: do proper range check on readdir offset
    - LP: #769042
* powerpc: Fix oops if scan_dispatch_log is called too early
    - LP: #769042
* powerpc/perf_event: Skip updating kernel counters if register value
    shrinks
    - LP: #769042
* usb: Fix qcserial memory leak on rmmod
    - LP: #769042
* usb: qcserial avoid pointing to freed memory
    - LP: #769042
* usb: qcserial add missing errorpath kfrees
    - LP: #769042
* USB: EHCI: unlink unused QHs when the controller is stopped
    - LP: #769042
* USB: fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
    - LP: #769042
* USB: xhci - fix unsafe macro definitions
    - LP: #769042
* USB: xhci - fix math in xhci_get_endpoint_interval()
    - LP: #769042
* USB: xhci - also free streams when resetting devices
    - LP: #769042
* USB: Fix unplug of device with active streams
    - LP: #769042
* radeon: Fix KMS CP writeback on big endian machines.
    - LP: #769042
* Bluetooth: Fix HCI_RESET command synchronization
    - LP: #700292, #769042
* perf tool: Fix gcc 4.6.0 issues
    - LP: #769042
* bridge: reset IPCB in br_parse_ip_options
    - LP: #769042
* ip: ip_options_compile() resilient to NULL skb route
    - LP: #769042
* Linux 2.6.38.4
    - LP: #769042
* (pre stable) ath9k_hw: partially revert "fix dma descriptor rx error
    bit parsing"
    - LP: #735171
* fs/partitions/ldm.c: fix oops caused by corrupted partition table,
    CVE-2011-1017
    - LP: #771382
    - CVE-2011-1017
* (pre-stable) drm/i915: Sanitize the output registers after resume
    - LP: #745304

Versione 2.6.38-8.42:

[ David Henningsson ]

* SAUCE: (drop after 2.6.38) ALSA: HDA: Fix dock mic for Lenovo
    X220-tablet
    - LP: #751033

[ Gustavo F. Padovan ]

* SAUCE: Revert "Bluetooth: Add new PID for Atheros 3011"
    - LP: #720949

[ Herton Ronaldo Krzesinski ]

* SAUCE: (drop after 2.6.39) v4l: make sure drivers supply a zeroed
    struct v4l2_subdev
    - LP: #745213

[ John Johansen ]

* AppArmor: Fix masking of capabilities in complain mode
    - LP: #748656

[ Leann Ogasawara ]

* [Config] Disable CONFIG_RTS_PSTOR for armel, powerpc

[ Manoj Iyer ]

* SAUCE: (drop after 2.6.38) add support for Lenovo tablet ID (0xE6)
    - LP: #746652

[ Steve Langasek ]

* [Config] Make linux-libc-dev coinstallable under multiarch
    - LP: #750585

[ Tim Gardner ]

* [Config] CONFIG_RTS_PSTOR=m
    - LP: #698006

[ Upstream Kernel Changes ]

* Revert "tcp: disallow bind() to reuse addr/port"
    - LP: #731878
* ALSA: HDA: Add dock mic quirk for Lenovo Thinkpad X220
    - LP: #746259
* ALSA: HDA: New AD1984A model for Dell Precision R5500
    - LP: #741516
* Input: sparse-keymap - report scancodes with key events
* Input: sparse-keymap - report KEY_UNKNOWN for unknown scan codes
* KVM: SVM: Load %gs earlier if CONFIG_X86_32_LAZY_GS=n
    - LP: #729085
* watchdog: sp5100_tco.c: Check if firmware has set correct value in
    tcobase.
    - LP: #740011
* staging: add rts_pstor for Realtek PCIE cardreader
    - LP: #698006
* staging: fix rts_pstor build errors
    - LP: #698006
* Staging: rts_pstor: fixed some brace code styling issues
    - LP: #698006
* staging: rts_pstor: potential NULL dereference
    - LP: #698006
* Staging: rts_pstor: fix read past end of buffer
    - LP: #698006
* staging: rts_pstor: delete a function
    - LP: #698006
* staging: rts_pstor: fix sparse warning
    - LP: #698006
* staging: rts_pstor: fix a bug that a greenhouse sd card can't be
    recognized
    - LP: #698006
* staging: rts_pstor: optimize kmalloc to kzalloc
    - LP: #698006
* staging: rts_pstor: MSXC card power class
    - LP: #698006
* staging: rts_pstor: modify initial card clock
    - LP: #698006
* staging: rts_pstor: set lun_mode in a different place
    - LP: #698006
* x86, hibernate: Initialize mmu_cr4_features during boot
    - LP: #752870