linux (3.13.0-67.110) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1509341

  [ Upstream Kernel Changes ]

  * Revert "net: Fix skb csum races when peeking"
    - LP: #1508510

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 23 Oct 2015 11:53:53 +0100

linux (3.13.0-67.109) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1507963

  [ Tim Gardner ]

  * [Config] Add MMC modules sufficient for net booting
    - LP: #1502772

  [ Upstream Kernel Changes ]

  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925

 -- Luis Henriques <luis.henriques@canonical.com>  Tue, 20 Oct 2015 10:42:53 +0100

linux (3.13.0-66.108) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1503713

  [ Andy Whitcroft ]

  * Revert "SAUCE: aufs3: mmap: Fix races in madvise_remove() and
    sys_msync()"
    - LP: #1503655

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - LP: #1503655
    - CVE-2015-7312

 -- Luis Henriques <luis.henriques@canonical.com>  Wed, 07 Oct 2015 14:29:57 +0100

linux (3.13.0-66.107) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1503021

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - CVE-2015-7312

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: fix mount not handling disconnected paths
    - LP: #1496430

  [ Upstream Kernel Changes ]

  * mmc: sdhci-pci: set the clear transfer mode register quirk for O2Micro
    - LP: #1472843
  * mmc: sdhci: Add a quirk for AMD SDHC transfer mode register need to be
    cleared for cmd without data
    - LP: #1472843
  * n_tty: Fix poll() when TIME_CHAR and MIN_CHAR == 0
    - LP: #1397976
  * net: make skb_gso_segment error handling more robust
    - LP: #1497048
  * net: gso: use feature flag argument in all protocol gso handlers
    - LP: #1497048
  * md/raid10: always set reshape_safe when initializing reshape_position.
    - LP: #1500810
  * md: flush ->event_work before stopping array.
    - LP: #1500810
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1500810
  * virtio-net: drop NETIF_F_FRAGLIST
    - LP: #1500810
  * RDS: verify the underlying transport exists before creating a
    connection
    - LP: #1500810
  * xen/gntdev: convert priv->lock to a mutex
    - LP: #1500810
  * xen/gntdevt: Fix race condition in gntdev_release()
    - LP: #1500810
  * PCI: Restore PCI_MSIX_FLAGS_BIRMASK definition
    - LP: #1500810
  * nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem
    - LP: #1500810
  * crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
    - LP: #1500810
  * xen-blkfront: don't add indirect pages to list when !feature_persistent
    - LP: #1500810
  * xen-blkback: replace work_pending with work_busy in
    purge_persistent_gnt()
    - LP: #1500810
  * USB: sierra: add 1199:68AB device ID
    - LP: #1500810
  * regmap: regcache-rbtree: Clean new present bits on present bitmap
    resize
    - LP: #1500810
  * target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
    - LP: #1500810
  * rbd: fix copyup completion race
    - LP: #1500810
  * md/raid1: extend spinlock to protect raid1_end_read_request against
    inconsistencies
    - LP: #1500810
  * target: REPORT LUNS should return LUN 0 even for dynamic ACLs
    - LP: #1500810
  * MIPS: Fix sched_getaffinity with MT FPAFF enabled
    - LP: #1500810
  * xhci: fix off by one error in TRB DMA address boundary check
    - LP: #1500810
  * perf: Fix fasync handling on inherited events
    - LP: #1500810
  * mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations
    - LP: #1500810
  * MIPS: Make set_pte() SMP safe.
    - LP: #1500810
  * ipc: modify message queue accounting to not take kernel data structures
    into account
    - LP: #1500810
  * ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
    - LP: #1500810
  * fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()
    - LP: #1500810
  * KVM: x86: Use adjustment in guest cycles when handling
    MSR_IA32_TSC_ADJUST
    - LP: #1500810
  * localmodconfig: Use Kbuild files too
    - LP: #1500810
  * dm thin metadata: delete btrees when releasing metadata snapshot
    - LP: #1500810
  * dm btree: add ref counting ops for the leaves of top level btrees
    - LP: #1500810
  * drm/radeon: add new OLAND pci id
    - LP: #1500810
  * libiscsi: Fix host busy blocking during connection teardown
    - LP: #1500810
  * libfc: Fix fc_exch_recv_req() error path
    - LP: #1500810
  * libfc: Fix fc_fcp_cleanup_each_cmd()
    - LP: #1500810
  * EDAC, ppc4xx: Access mci->csrows array elements properly
    - LP: #1500810
  * crypto: caam - fix memory corruption in ahash_final_ctx
    - LP: #1500810
  * mm/hwpoison: fix page refcount of unknown non LRU page
    - LP: #1500810
  * ipc,sem: fix use after free on IPC_RMID after a task using same
    semaphore set exits
    - LP: #1500810
  * ipc/sem.c: change memory barrier in sem_lock() to smp_rmb()
    - LP: #1500810
  * ipc/sem.c: update/correct memory barriers
    - LP: #1500810
  * Add factory recertified Crucial M500s to blacklist
    - LP: #1500810
  * arm64: KVM: Fix host crash when injecting a fault into a 32bit guest
    - LP: #1500810
  * batman-adv: protect tt_local_entry from concurrent delete events
    - LP: #1500810
  * ip6_gre: release cached dst on tunnel removal
    - LP: #1500810
  * net: Fix RCU splat in af_key
    - LP: #1500810
  * rds: fix an integer overflow test in rds_info_getsockopt()
    - LP: #1500810
  * udp: fix dst races with multicast early demux
    - LP: #1500810
  * sparc64: Fix userspace FPU register corruptions.
    - LP: #1500810
  * ipv6: lock socket in ip6_datagram_connect()
    - LP: #1500810
  * rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver
    - LP: #1500810
  * net/tipc: initialize security state for new connection socket
    - LP: #1500810
  * net: pktgen: fix race between pktgen_thread_worker() and kthread_stop()
    - LP: #1500810
  * net: call rcu_read_lock early in process_backlog
    - LP: #1500810
  * net: Fix skb csum races when peeking
    - LP: #1500810
  * netlink: don't hold mutex in rcu callback when releasing mmapd ring
    - LP: #1500810
  * Linux 3.13.11-ckt27
    - LP: #1500810

 -- Brad Figg <brad.figg@canonical.com>  Mon, 05 Oct 2015 12:59:00 -0700

linux (3.13.0-65.106) trusty; urgency=low

  [ Upstream Kernel Changes ]

  * Initialize msg/shm IPC objects before doing ipc_addid()
    - LP: #1502032
    - CVE-2015-7613

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 02 Oct 2015 10:13:36 +0100

linux (3.13.0-65.105) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1498108

  [ Upstream Kernel Changes ]

  * net: Fix skb_set_peeked use-after-free bug
      - LP: #1497184

 -- Brad Figg <brad.figg@canonical.com>  Mon, 21 Sep 2015 10:16:41 -0700

linux (3.13.0-64.104) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1493803

  [ Chris J Arges ]

  * [Config] DEFAULT_IOSCHED="deadline" for ppc64el
    - LP: #1469829

  [ Upstream Kernel Changes ]

  * tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
    - LP: #1486146
  * libceph: abstract out ceph_osd_request enqueue logic
    - LP: #1488035
  * libceph: resend lingering requests with a new tid
    - LP: #1488035
  * n_tty: Refactor input_available_p() by call site
    - LP: #1397976
  * tty: Fix pty master poll() after slave closes v2
    - LP: #1397976
  * md: use kzalloc() when bitmap is disabled
    - LP: #1493305
  * ata: pmp: add quirk for Marvell 4140 SATA PMP
    - LP: #1493305
  * libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk
    VB0250EAVER
    - LP: #1493305
  * libata: add ATA_HORKAGE_NOTRIM
    - LP: #1493305
  * libata: force disable trim for SuperSSpeed S238
    - LP: #1493305
  * libata: increase the timeout when setting transfer mode
    - LP: #1493305
  * libata: Do not blacklist M510DC
    - LP: #1493305
  * mac80211: clear subdir_stations when removing debugfs
    - LP: #1493305
  * ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
    - LP: #1493305
  * drm: Stop resetting connector state to unknown
    - LP: #1493305
  * usb: dwc3: Reset the transfer resource index on SET_INTERFACE
    - LP: #1493305
  * usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
    function
    - LP: #1493305
  * xhci: Calculate old endpoints correctly on device reset
    - LP: #1493305
  * xhci: report U3 when link is in resume state
    - LP: #1493305
  * xhci: prevent bus_suspend if SS port resuming in phase 1
    - LP: #1493305
  * xhci: do not report PLC when link is in internal resume state
    - LP: #1493305
  * USB: OHCI: Fix race between ED unlink and URB submission
    - LP: #1493305
  * usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
    - LP: #1493305
  * blkcg: fix gendisk reference leak in blkg_conf_prep()
    - LP: #1493305
  * tile: use free_bootmem_late() for initrd
    - LP: #1493305
  * Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen
    - LP: #1493305
  * md/raid1: fix test for 'was read error from last working device'.
    - LP: #1493305
  * mmc: omap_hsmmc: Fix DTO and DCRC handling
    - LP: #1493305
  * isdn/gigaset: reset tty->receive_room when attaching ser_gigaset
    - LP: #1493305
  * mmc: sdhci-pxav3: fix platform_data is not initialized
    - LP: #1493305
  * mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()
    - LP: #1493305
  * mmc: sdhci-esdhc: Make 8BIT bus work
    - LP: #1493305
  * bonding: correctly handle bonding type change on enslave failure
    - LP: #1493305
  * net: Clone skb before setting peeked flag
    - LP: #1493305
  * bridge: mdb: fix double add notification
    - LP: #1493305
  * usb: gadget: mv_udc_core: fix phy_regs I/O memory leak
    - LP: #1493305
  * inet: frags: fix defragmented packet's IP header for af_packet
    - LP: #1493305
  * bonding: fix destruction of bond with devices different from
    arphrd_ether
    - LP: #1493305
  * ARM: OMAP2+: hwmod: Fix _wait_target_ready() for hwmods without sysc
    - LP: #1493305
  * ASoC: pcm1681: Fix setting de-emphasis sampling rate selection
    - LP: #1493305
  * iscsi-target: Fix use-after-free during TPG session shutdown
    - LP: #1493305
  * iscsi-target: Fix iscsit_start_kthreads failure OOPs
    - LP: #1493305
  * iscsi-target: Fix iser explicit logout TX kthread leak
    - LP: #1493305
  * ALSA: hda - Apply fixup for another Toshiba Satellite S50D
    - LP: #1493305
  * vhost: actually track log eventfd file
    - LP: #1493305
  * xfs: remote attributes need to be considered data
    - LP: #1493305
  * ALSA: usb-audio: add dB range mapping for some devices
    - LP: #1493305
  * drm/radeon/combios: add some validation of lvds values
    - LP: #1493305
  * x86/efi: Use all 64 bit of efi_memmap in setup_e820()
    - LP: #1493305
  * ipr: Fix locking for unit attention handling
    - LP: #1493305
  * ipr: Fix incorrect trace indexing
    - LP: #1493305
  * ipr: Fix invalid array indexing for HRRQ
    - LP: #1493305
  * ALSA: hda - Fix MacBook Pro 5,2 quirk
    - LP: #1493305
  * x86/xen: Probe target addresses in set_aliased_prot() before the
    hypercall
    - LP: #1493305
  * netfilter: ctnetlink: put back references to master ct and expect
    objects
    - LP: #1493305
  * bridge: mdb: fix delmdb state in the notification
    - LP: #1493305
  * ipvs: fix crash with sync protocol v0 and FTP
    - LP: #1493305
  * act_pedit: check binding before calling tcf_hash_release()
    - LP: #1493305
  * netfilter: nf_conntrack: Support expectations in different zones
    - LP: #1493305
  * ipvs: do not use random local source address for tunnels
    - LP: #1493305
  * ALSA: hda - fix cs4210_spdif_automute()
    - LP: #1493305
  * niu: don't count tx error twice in case of headroom realloc fails
    - LP: #1493305
  * net/mlx4_core: Fix wrong index in propagating port change event to VFs
    - LP: #1493305
  * ipvs: fix crash if scheduler is changed
    - LP: #1493305
  * Linux 3.13.11-ckt26
    - LP: #1493305

 -- Luis Henriques <luis.henriques@canonical.com>  Wed, 09 Sep 2015 12:03:43 +0100

linux (3.13.0-63.103) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1485102

  [ Leann Ogasawara ]

  * [Config] d-i -- Add sfc to nic-modules udeb
    - LP: #1481490

  [ Upstream Kernel Changes ]

  * sg_start_req(): make sure that there's not too many elements in iovec
    - LP: #1485100
  * Btrfs: use kmem_cache_free when freeing entry in inode cache
    - LP: #1485100
  * Btrfs: fix race between caching kthread and returning inode to inode
    cache
    - LP: #1485100
  * Btrfs: fix fsync data loss after append write
    - LP: #1485100
  * ext4: fix reservation release on invalidatepage for delalloc fs
    - LP: #1485100
  * ext4: be more strict when migrating to non-extent based file
    - LP: #1485100
  * ext4: correctly migrate a file with a hole at the beginning
    - LP: #1485100
  * ext4: replace open coded nofail allocation in ext4_free_blocks()
    - LP: #1485100
  * ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage
    - LP: #1485100
  * hpfs: kstrdup() out of memory handling
    - LP: #1485100
  * 9p: don't leave a half-initialized inode sitting around
    - LP: #1485100
  * freeing unlinked file indefinitely delayed
    - LP: #1485100
  * iio: inv-mpu: Specify the expected format/precision for write channels
    - LP: #1485100
  * iio: DAC: ad5624r_spi: fix bit shift of output data value
    - LP: #1485100
  * iio: adc: at91_adc: allow to use full range of startup time
    - LP: #1485100
  * ALSA: usb-audio: Add MIDI support for Steinberg MI2/MI4
    - LP: #1485100
  * iio: tmp006: Check channel info on write
    - LP: #1485100
  * dm btree remove: fix bug in redistribute3
    - LP: #1485100
  * USB: option: add 2020:4000 ID
    - LP: #1485100
  * USB: cp210x: add ID for Aruba Networks controllers
    - LP: #1485100
  * dm btree: silence lockdep lock inversion in dm_btree_del()
    - LP: #1485100
  * usb: musb: host: rely on port_mode to call musb_start()
    - LP: #1485100
  * s390/sclp: clear upper register halves in _sclp_print_early
    - LP: #1485100
  * drm: add a check for x/y in drm_mode_setcrtc
    - LP: #1485100
  * ARM: dts: mx23: fix iio-hwmon support
    - LP: #1485100
  * tracing: Have branch tracer use recursive field of task struct
    - LP: #1485100
  * drivers: net: cpsw: fix crash while accessing second slave ethernet
    interface
    - LP: #1485100
  * USB: serial: Destroy serial_minors IDR on module exit
    - LP: #1485100
  * Btrfs: fix memory leak in the extent_same ioctl
    - LP: #1485100
  * ARC: make sure instruction_pointer() returns unsigned value
    - LP: #1485100
  * s390/process: fix sfpc inline assembly
    - LP: #1485100
  * st: null pointer dereference panic caused by use after kref_put by
    st_open
    - LP: #1485100
  * drm/radeon: add a dpm quirk for Sapphire Radeon R9 270X 2GB GDDR5
    - LP: #1485100
  * drm/radeon: Don't flush the GART TLB if rdev->gart.ptr == NULL
    - LP: #1485100
  * genirq: Prevent resend to interrupts marked IRQ_NESTED_THREAD
    - LP: #1485100
  * ip_tunnel: fix ipv4 pmtu check to honor inner ip header df
    - LP: #1485100
  * bridge: mdb: start delete timer for temp static entries
    - LP: #1485100
  * bridge: mdb: zero out the local br_ip variable before use
    - LP: #1485100
  * net: do not process device backlog during unregistration
    - LP: #1485100
  * net: graceful exit from netif_alloc_netdev_queues()
    - LP: #1485100
  * net: dsa: Fix off-by-one in switch address parsing
    - LP: #1485100
  * net: dsa: Test array index before use
    - LP: #1485100
  * rds: rds_ib_device.refcount overflow
    - LP: #1485100
  * ipv6: Make MLD packets to only be processed locally
    - LP: #1485100
  * Linux 3.13.11-ckt25
    - LP: #1485100

 -- Brad Figg <brad.figg@canonical.com>  Fri, 14 Aug 2015 13:02:47 -0700

linux (3.13.0-62.102) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1483657

  [ Upstream Kernel Changes ]

  * Revert "Bluetooth: ath3k: Add support of 04ca:300d AR3012 device"

 -- Luis Henriques <luis.henriques@canonical.com>  Tue, 11 Aug 2015 11:56:45 +0100

linux (3.13.0-62.101) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1479329
  * Merged back Ubuntu-3.13.0-61.100

 -- Luis Henriques <luis.henriques@canonical.com>  Wed, 29 Jul 2015 13:06:13 +0100

# For older changelog entries, run 'apt-get changelog linux-source-3.13.0'
