+linux-snapdragon (4.4.0-1063.68) UNRELEASED; urgency=low
+
+ CHANGELOG: Do not edit directly. Autogenerated at release.
+ CHANGELOG: Use the printchanges target to see the curent changes.
+ CHANGELOG: Use the insertchanges target to create the final log.
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Mon, 26 Jun 2017 15:13:40 -0300
+
+linux-snapdragon (4.4.0-1062.67) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1062.67 -proposed tracker (LP: #1699068)
+
+ * Disable CONFIG_I2C_THUNDERX for snapdragon kernel (LP: #1696937)
+ - [Config] Disable CONFIG_I2C_THUNDERX
+
+ [ Ubuntu: 4.4.0-82.105 ]
+
+ * linux: 4.4.0-82.105 -proposed tracker (LP: #1699064)
+ * CVE-2017-1000364
+ - SAUCE: mm: Only expand stack if guard area is hit
+ * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
+ common/linux-*-cloud-tools-common (LP: #1688579)
+ - [Config] make linux-tools-common and linux-cloud-tools-common protection
+ consistent
+ * CVE-2017-9242
+ - ipv6: fix out of bound writes in __ip6_append_data()
+ * CVE-2017-9075
+ - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
+ * CVE-2017-9074
+ - ipv6: Prevent overrun when parsing v6 header options
+ * CVE-2017-9076
+ - ipv6/dccp: do not inherit ipv6_mc_list from parent
+ * CVE-2017-9077
+ - ipv6/dccp: do not inherit ipv6_mc_list from parent
+ * CVE-2017-8890
+ - dccp/tcp: do not inherit mc_list from parent
+ * Module signing exclusion for staging drivers does not work properly
+ (LP: #1690908)
+ - SAUCE: Fix module signing exclusion in package builds
+ * extend-diff-ignore should use exact matches (LP: #1693504)
+ - [Packaging] exact extend-diff-ignore matches
+ * Dell XPS 9360 wifi 5G performance is poor (LP: #1692836)
+ - SAUCE: ath10k: fix the wifi speed issue for kill 1535
+ * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC12 (LP: #1694607)
+ - SAUCE: Redpine: Upgrade to ver. 1.2.RC12
+ * [DP MST] No audio output through HDMI/DP/mDP ports in Dell WD15 and TB15
+ docking stations (LP: #1694665)
+ - drm/i915: Store port enum in intel_encoder
+ - drm/i915: Eliminate redundant local variable definition
+ - drm/i915: Switch to using port stored in intel_encoder
+ - drm/i915: Move audio_connector to intel_encoder
+ - drm/i915/dp: DP audio API changes for MST
+ - drm/i915: abstract ddi being audio enabled
+ - drm/i915/audio: extend get_saved_enc() to support more scenarios
+ - drm/i915: enable dp mst audio
+ * Xenial update to 4.4.70 stable release (LP: #1694621)
+ - usb: misc: legousbtower: Fix buffers on stack
+ - usb: misc: legousbtower: Fix memory leak
+ - USB: ene_usb6250: fix DMA to the stack
+ - watchdog: pcwd_usb: fix NULL-deref at probe
+ - char: lp: fix possible integer overflow in lp_setup()
+ - USB: core: replace %p with %pK
+ - ARM: tegra: paz00: Mark panel regulator as enabled on boot
+ - tpm_crb: check for bad response size
+ - infiniband: call ipv6 route lookup via the stub interface
+ - dm btree: fix for dm_btree_find_lowest_key()
+ - dm raid: select the Kconfig option CONFIG_MD_RAID0
+ - dm bufio: avoid a possible ABBA deadlock
+ - dm bufio: check new buffer allocation watermark every 30 seconds
+ - dm cache metadata: fail operations if fail_io mode has been established
+ - dm bufio: make the parameter "retain_bytes" unsigned long
+ - dm thin metadata: call precommit before saving the roots
+ - dm space map disk: fix some book keeping in the disk space map
+ - md: update slab_cache before releasing new stripes when stripes resizing
+ - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
+ - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
+ - ima: accept previously set IMA_NEW_FILE
+ - KVM: x86: Fix load damaged SSEx MXCSR register
+ - KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
+ - regulator: tps65023: Fix inverted core enable logic.
+ - s390/kdump: Add final note
+ - s390/cputime: fix incorrect system time
+ - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
+ - ath9k_htc: fix NULL-deref at probe
+ - drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
+ calculations.
+ - drm/amdgpu: Make display watermark calculations more accurate
+ - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
+ - drm/nouveau/tmr: ack interrupt before processing alarms
+ - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
+ alarm
+ - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
+ - drm/nouveau/tmr: handle races with hw when updating the next alarm time
+ - cdc-acm: fix possible invalid access when processing notification
+ - proc: Fix unbalanced hard link numbers
+ - of: fix sparse warning in of_pci_range_parser_one
+ - iio: dac: ad7303: fix channel description
+ - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
+ - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
+ - USB: serial: ftdi_sio: fix setting latency for unprivileged users
+ - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
+ - ext4 crypto: don't let data integrity writebacks fail with ENOMEM
+ - ext4 crypto: fix some error handling
+ - net: qmi_wwan: Add SIMCom 7230E
+ - fscrypt: fix context consistency check when key(s) unavailable
+ - f2fs: check entire encrypted bigname when finding a dentry
+ - fscrypt: avoid collisions when presenting long encrypted filenames
+ - usb: host: xhci-plat: propagate return value of platform_get_irq()
+ - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
+ - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
+ - net: irda: irda-usb: fix firmware name on big-endian hosts
+ - usbvision: fix NULL-deref at probe
+ - mceusb: fix NULL-deref at probe
+ - ttusb2: limit messages to buffer size
+ - usb: musb: tusb6010_omap: Do not reset the other direction's packet size
+ - USB: iowarrior: fix info ioctl on big-endian hosts
+ - usb: serial: option: add Telit ME910 support
+ - USB: serial: qcserial: add more Lenovo EM74xx device IDs
+ - USB: serial: mct_u232: fix big-endian baud-rate handling
+ - USB: serial: io_ti: fix div-by-zero in set_termios
+ - USB: hub: fix SS hub-descriptor handling
+ - USB: hub: fix non-SS hub-descriptor handling
+ - ipx: call ipxitf_put() in ioctl error path
+ - iio: proximity: as3935: fix as3935_write
+ - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
+ - gspca: konica: add missing endpoint sanity check
+ - s5p-mfc: Fix unbalanced call to clock management
+ - dib0700: fix NULL-deref at probe
+ - zr364xx: enforce minimum size when reading header
+ - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
+ - cx231xx-audio: fix init error path
+ - cx231xx-audio: fix NULL-deref at probe
+ - cx231xx-cards: fix NULL-deref at probe
+ - powerpc/book3s/mce: Move add_taint() later in virtual mode
+ - powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
+ - powerpc/64e: Fix hang when debugging programs with relocated kernel
+ - ARM: dts: at91: sama5d3_xplained: fix ADC vref
+ - ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
+ - arm64: xchg: hazard against entire exchange variable
+ - arm64: uaccess: ensure extension of access_ok() addr
+ - arm64: documentation: document tagged pointer stack constraints
+ - xc2028: Fix use-after-free bug properly
+ - Revert "UBUNTU: SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp"
+ - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
+ - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
+ - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
+ - iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
+ - metag/uaccess: Fix access_ok()
+ - metag/uaccess: Check access_ok in strncpy_from_user
+ - uwb: fix device quirk on big-endian hosts
+ - genirq: Fix chained interrupt data ordering
+ - osf_wait4(): fix infoleak
+ - tracing/kprobes: Enforce kprobes teardown after testing
+ - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
+ - PCI: Freeze PME scan before suspending devices
+ - drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
+ - nfsd: encoders mustn't use unitialized values in error cases
+ - drivers: char: mem: Check for address space wraparound with mmap()
+ - Linux 4.4.70
+ * Xenial update to 4.4.69 stable release (LP: #1692900)
+ - xen: adjust early dom0 p2m handling to xen hypervisor behavior
+ - target: Fix compare_and_write_callback handling for non GOOD status
+ - target/fileio: Fix zero-length READ and WRITE handling
+ - target: Convert ACL change queue_depth se_session reference usage
+ - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
+ - usb: host: xhci: print correct command ring address
+ - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
+ - USB: Proper handling of Race Condition when two USB class drivers try to
+ call init_usb_class simultaneously
+ - staging: vt6656: use off stack for in buffer USB transfers.
+ - staging: vt6656: use off stack for out buffer USB transfers.
+ - staging: gdm724x: gdm_mux: fix use-after-free on module unload
+ - staging: comedi: jr3_pci: fix possible null pointer dereference
+ - staging: comedi: jr3_pci: cope with jiffies wraparound
+ - usb: misc: add missing continue in switch
+ - usb: Make sure usb/phy/of gets built-in
+ - usb: hub: Fix error loop seen after hub communication errors
+ - usb: hub: Do not attempt to autosuspend disconnected devices
+ - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
+ - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
+ - x86, pmem: Fix cache flushing for iovec write < 8 bytes
+ - um: Fix PTRACE_POKEUSER on x86_64
+ - KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
+ - KVM: arm/arm64: fix races in kvm_psci_vcpu_on
+ - block: fix blk_integrity_register to use template's interval_exp if not 0
+ - crypto: algif_aead - Require setkey before accept(2)
+ - dm era: save spacemap metadata root after the pre-commit
+ - vfio/type1: Remove locked page accounting workqueue
+ - IB/core: Fix sysfs registration error flow
+ - IB/IPoIB: ibX: failed to create mcg debug file
+ - IB/mlx4: Fix ib device initialization error flow
+ - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
+ - ext4: evict inline data when writing to memory map
+ - fs/xattr.c: zero out memory copied to userspace in getxattr
+ - ceph: fix memory leak in __ceph_setxattr()
+ - fs/block_dev: always invalidate cleancache in invalidate_bdev()
+ - Set unicode flag on cifs echo request to avoid Mac error
+ - SMB3: Work around mount failure when using SMB3 dialect to Macs
+ - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
+ - cifs: fix CIFS_IOC_GET_MNT_INFO oops
+ - CIFS: add misssing SFM mapping for doublequote
+ - padata: free correct variable
+ - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
+ - serial: samsung: Use right device for DMA-mapping calls
+ - serial: omap: fix runtime-pm handling on unbind
+ - serial: omap: suspend device on probe errors
+ - tty: pty: Fix ldisc flush after userspace become aware of the data already
+ - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
+ - Bluetooth: hci_bcm: add missing tty-device sanity check
+ - Bluetooth: hci_intel: add missing tty-device sanity check
+ - mac80211: pass RX aggregation window size to driver
+ - mac80211: pass block ack session timeout to to driver
+ - mac80211: RX BA support for sta max_rx_aggregation_subframes
+ - wlcore: Pass win_size taken from ieee80211_sta to FW
+ - wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
+ - ipmi: Fix kernel panic at ipmi_ssif_thread()
+ - Linux 4.4.69
+ * Support IPMI system interface on Cavium ThunderX (LP: #1688132)
+ - i2c: octeon: Cleanup kerneldoc comments
+ - i2c: octeon: Cleanup i2c-octeon driver
+ - i2c: octeon: Cleanup resource allocation code
+ - i2c: octeon: Support I2C_M_RECV_LEN
+ - i2c: octeon: Increase retry default and use fixed timeout value
+ - i2c: octeon: Move set-clock and init-lowlevel upward
+ - i2c: octeon: Rename [read|write]_sw to reg_[read|write]
+ - i2c: octeon: Introduce helper functions for register access
+ - i2c: octeon: Remove superfluous check in octeon_i2c_test_iflg
+ - i2c: octeon: Improve error status checking
+ - i2c: octeon: Use i2c recovery framework
+ - i2c: octeon: Add flush writeq helper function
+ - i2c: octeon: Enable High-Level Controller
+ - i2c: octeon: Add support for cn78xx chips
+ - i2c: octeon: Remove zero-length message support
+ - i2c: octeon: Improve performance if interrupt is early
+ - i2c: octeon: Add workaround for broken irqs on CN3860
+ - i2c: octeon: Missing AAK flag in case of I2C_M_RECV_LEN
+ - i2c: octeon: Avoid printk after too long SMBUS message
+ - i2c: octeon: Rename driver to prepare for split
+ - i2c: octeon: Split the driver into two parts
+ - [Config] CONFIG_I2C_THUNDERX=m
+ - i2c: thunderx: Add i2c driver for ThunderX SOC
+ - i2c: thunderx: Add SMBUS alert support
+ - i2c: octeon,thunderx: Move register offsets to struct
+ - i2c: octeon: Sort include files alphabetically
+ - i2c: octeon: Use booleon values for booleon variables
+ - i2c: octeon: thunderx: Add MAINTAINERS entry
+ - i2c: octeon: Fix set SCL recovery function
+ - i2c: octeon: Avoid sending STOP during recovery
+ - i2c: octeon: Fix high-level controller status check
+ - i2c: octeon: thunderx: TWSI software reset in recovery
+ - i2c: octeon: thunderx: Remove double-check after interrupt
+ - i2c: octeon: thunderx: Limit register access retries
+ - i2c: thunderx: Enable HWMON class probing
+ * Xenial update to 4.4.68 stable release (LP: #1691418)
+ - 9p: fix a potential acl leak
+ - ARM: 8452/3: PJ4: make coprocessor access sequences buildable in Thumb2 mode
+ - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
+ - powerpc/powernv: Fix opal_exit tracepoint opcode
+ - power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
+ - power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
+ - power: supply: bq24190_charger: Install irq_handler_thread() at end of
+ probe()
+ - power: supply: bq24190_charger: Call power_supply_changed() for relevant
+ component
+ - power: supply: bq24190_charger: Don't read fault register outside
+ irq_handle_thread()
+ - power: supply: bq24190_charger: Handle fault before status on interrupt
+ - leds: ktd2692: avoid harmless maybe-uninitialized warning
+ - ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
+ - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
+ - mwifiex: remove redundant dma padding in AMSDU
+ - mwifiex: Avoid skipping WEP key deletion for AP
+ - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
+ - x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
+ - clk: Make x86/ conditional on CONFIG_COMMON_CLK
+ - kprobes/x86: Fix kernel panic when certain exception-handling addresses are
+ probed
+ - x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
+ - Revert "KVM: nested VMX: disable perf cpuid reporting"
+ - KVM: nVMX: initialize PML fields in vmcs02
+ - KVM: nVMX: do not leak PML full vmexit to L1
+ - usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
+ paths
+ - usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
+ paths
+ - usb: chipidea: Only read/write OTGSC from one place
+ - usb: chipidea: Handle extcon events properly
+ - USB: serial: keyspan_pda: fix receive sanity checks
+ - USB: serial: digi_acceleport: fix incomplete rx sanity check
+ - USB: serial: ssu100: fix control-message error handling
+ - USB: serial: io_edgeport: fix epic-descriptor handling
+ - USB: serial: ti_usb_3410_5052: fix control-message error handling
+ - USB: serial: ark3116: fix open error handling
+ - USB: serial: ftdi_sio: fix latency-timer error handling
+ - USB: serial: quatech2: fix control-message error handling
+ - USB: serial: mct_u232: fix modem-status error handling
+ - USB: serial: io_edgeport: fix descriptor error handling
+ - phy: qcom-usb-hs: Add depends on EXTCON
+ - serial: 8250_omap: Fix probe and remove for PM runtime
+ - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
+ - MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
+ - brcmfmac: Ensure pointer correctly set if skb data location changes
+ - brcmfmac: Make skb header writable before use
+ - staging: wlan-ng: add missing byte order conversion
+ - staging: emxx_udc: remove incorrect __init annotations
+ - ALSA: hda - Fix deadlock of controller device lock at unbinding
+ - tcp: do not underestimate skb->truesize in tcp_trim_head()
+ - bpf, arm64: fix jit branch offset related to ldimm64
+ - tcp: fix wraparound issue in tcp_lp
+ - tcp: do not inherit fastopen_req from parent
+ - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
+ - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
+ - ipv6: initialize route null entry in addrconf_init()
+ - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
+ - bnxt_en: allocate enough space for ->ntp_fltr_bmap
+ - f2fs: sanity check segment count
+ - drm/ttm: fix use-after-free races in vm fault handling
+ - block: get rid of blk_integrity_revalidate()
+ - Linux 4.4.68
+ * Keyboard backlight control does not work on some dell laptops.
+ (LP: #1693126)
+ - platform/x86: dell-laptop: Add Latitude 7480 and others to the DMI whitelist
+ - platform/x86: dell-laptop: Add keyboard backlight timeout AC settings
+ * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC9 (LP: #1690498)
+ - SAUCE: Redpine: Upgrade to ver. 1.2.RC9
+ * exec'ing a setuid binary from a threaded program sometimes fails to setuid
+ (LP: #1672819)
+ - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
+ * attempts to rename vlans / vlans have addr_assign_type of 0 on kernel 4.4
+ (LP: #1682871)
+ - vlan: Propagate MAC address to VLANs
+ * Exar usb-serial doesn't restore baud rate after resume from S3/S4
+ (LP: #1690362)
+ - SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
+ * st_pressure, st_accel IIO drivers fail to detect sensors after reloading
+ kernel modules (LP: #1690310)
+ - SAUCE: (no-up) iio: st_pressure: st_accel: Initialise sensor platform data
+ properly
+ * nvidia-docker on ppc64le-ubuntu16.04 issue due to cross-thread naming if
+ !PR_DUMPABLE (LP: #1690225)
+ - procfs: fix pthread cross-thread naming if !PR_DUMPABLE
+ * linux xenial derivatives fail to build (LP: #1691814)
+ - [Packaging] Set do_tools_common in common vars
+
+ -- Kleber Sacilotto de Souza <kleber.souza@canonical.com> Wed, 21 Jun 2017 10:45:33 +0200
+
+linux-snapdragon (4.4.0-1061.66) xenial; urgency=low
+
+ [ Ubuntu: 4.4.0-81.104 ]
+
+ * CVE-2017-1000364
+ - mm: enlarge stack guard gap
+ - mm: do not collapse stack gap into THP
+
+ -- Stefan Bader <stefan.bader@canonical.com> Wed, 14 Jun 2017 12:22:51 +0200
+
+linux-snapdragon (4.4.0-1059.63) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1059.63 -proposed tracker (LP: #1691183)
+
+ * linux xenial derivatives fail to build (LP: #1691814)
+ - [Packaging] Set do_tools_common in common vars
+ - [Packaging] Do not build tools-common
+
+ [ Ubuntu: 4.4.0-79.100 ]
+
+ * linux: 4.4.0-79.100 -proposed tracker (LP: #1691180)
+ * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
+ common/linux-*-cloud-tools-common (LP: #1688579)
+ - [Config] make linux-tools-common and linux-cloud-tools-common provide linux-
+ gke versions
+ - [Config] make linux-tools-common and linux-cloud-tools-common provide linux-
+ aws versions
+ - [Packaging] prevent linux-*-tools-common from being produced from non linux
+ packages
+ * CVE-2017-0605
+ - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
+ * i915-bpo crashes on external hdmi input (LP: #1580272)
+ - SAUCE: i915_bpo: Silence the warning about watermark entries not changing
+ * Kernel panics on Xenial when using cgroups and strict CFS limits
+ (LP: #1687512)
+ - sched/fair: Initialize throttle_count for new task-groups lazily
+ - sched/fair: Do not announce throttled next buddy in dequeue_task_fair()
+ * bonding - mlx5 - speed changed to 0 after changing ring size (LP: #1687877)
+ - bonding: allow notifications for bond_set_slave_link_state
+ * Xenial update to 4.4.67 stable release (LP: #1689296)
+ - timerfd: Protect the might cancel mechanism proper
+ - Handle mismatched open calls
+ - ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
+ - ALSA: ppc/awacs: shut up maybe-uninitialized warning
+ - drbd: avoid redefinition of BITS_PER_PAGE
+ - mtd: avoid stack overflow in MTD CFI code
+ - net: tg3: avoid uninitialized variable warning
+ - netlink: Allow direct reclaim for fallback allocation
+ - IB/qib: rename BITS_PER_PAGE to RVT_BITS_PER_PAGE
+ - IB/ehca: fix maybe-uninitialized warnings
+ - ext4: require encryption feature for EXT4_IOC_SET_ENCRYPTION_POLICY
+ - ext4 crypto: revalidate dentry after adding or removing the key
+ - ext4 crypto: use dget_parent() in ext4_d_revalidate()
+ - ext4/fscrypto: avoid RCU lookup in d_revalidate
+ - nfsd4: minor NFSv2/v3 write decoding cleanup
+ - nfsd: stricter decoding of write-like NFSv2/v3 ops
+ - dm ioctl: prevent stack leak in dm ioctl call
+ - Linux 4.4.67
+ * Precision Rack failed to resume from S4 (LP: #1686061)
+ - x86 / hibernate: Use hlt_play_dead() when resuming from hibernation
+ - x86/boot: Split out kernel_ident_mapping_init()
+ - x86/power/64: Always create temporary identity mapping correctly
+ * Xenial update to 4.4.66 stable release (LP: #1688505)
+ - f2fs: do more integrity verification for superblock
+ - xc2028: unlock on error in xc2028_set_config()
+ - ARM: OMAP2+: timer: add probe for clocksources
+ - clk: sunxi: Add apb0 gates for H3
+ - crypto: testmgr - fix out of bound read in __test_aead()
+ - drm/amdgpu: fix array out of bounds
+ - ext4: check if in-inode xattr is corrupted in ext4_expand_extra_isize_ea()
+ - md:raid1: fix a dead loop when read from a WriteMostly disk
+ - MIPS: Fix crash registers on non-crashing CPUs
+ - net: cavium: liquidio: Avoid dma_unmap_single on uninitialized ndata
+ - net_sched: close another race condition in tcf_mirred_release()
+ - RDS: Fix the atomicity for congestion map update
+ - regulator: core: Clear the supply pointer if enabling fails
+ - usb: gadget: f_midi: Fixed a bug when buflen was smaller than wMaxPacketSize
+ - xen/x86: don't lose event interrupts
+ - sparc64: kern_addr_valid regression
+ - sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()
+ - net: neigh: guard against NULL solicit() method
+ - net: phy: handle state correctly in phy_stop_machine
+ - l2tp: purge socket queues in the .destruct() callback
+ - l2tp: take reference on sessions being dumped
+ - l2tp: fix PPP pseudo-wire auto-loading
+ - net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
+ - sctp: listen on the sock only when it's state is listening or closed
+ - tcp: clear saved_syn in tcp_disconnect()
+ - dp83640: don't recieve time stamps twice
+ - net: ipv6: RTF_PCPU should not be settable from userspace
+ - netpoll: Check for skb->queue_mapping
+ - ip6mr: fix notification device destruction
+ - macvlan: Fix device ref leak when purging bc_queue
+ - ipv6: check skb->protocol before lookup for nexthop
+ - ipv6: check raw payload size correctly in ioctl
+ - ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned
+ type
+ - ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
+ - MIPS: KGDB: Use kernel context for sleeping threads
+ - MIPS: Avoid BUG warning in arch_check_elf
+ - p9_client_readdir() fix
+ - Input: i8042 - add Clevo P650RS to the i8042 reset list
+ - nfsd: check for oversized NFSv2/v3 arguments
+ - ARCv2: save r30 on kernel entry as gcc uses it for code-gen
+ - ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram
+ - Linux 4.4.66
+ * Xenial update to 4.4.65 stable release (LP: #1688483)
+ - tipc: make sure IPv6 header fits in skb headroom
+ - tipc: make dist queue pernet
+ - tipc: re-enable compensation for socket receive buffer double counting
+ - tipc: correct error in node fsm
+ - tty: nozomi: avoid a harmless gcc warning
+ - hostap: avoid uninitialized variable use in hfa384x_get_rid
+ - gfs2: avoid uninitialized variable warning
+ - tipc: fix random link resets while adding a second bearer
+ - tipc: fix socket timer deadlock
+ - xc2028: avoid use after free
+ - netfilter: nfnetlink: correctly validate length of batch messages
+ - tipc: check minimum bearer MTU
+ - vfio/pci: Fix integer overflows, bitmask check
+ - staging/android/ion : fix a race condition in the ion driver
+ - ping: implement proper locking
+ - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
+ - Linux 4.4.65
+ * Xenial update to 4.4.64 stable release (LP: #1687638)
+ - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
+ - KEYS: Change the name of the dead type to ".dead" to prevent user access
+ - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
+ - tracing: Allocate the snapshot buffer before enabling probe
+ - ring-buffer: Have ring_buffer_iter_empty() return true when empty
+ - cifs: Do not send echoes before Negotiate is complete
+ - CIFS: remove bad_network_name flag
+ - s390/mm: fix CMMA vs KSM vs others
+ - VSOCK: Detach QP check should filter out non matching QPs.
+ - Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled
+ - ACPI / power: Avoid maybe-uninitialized warning
+ - mmc: sdhci-esdhc-imx: increase the pad I/O drive strength for DDR50 card
+ - mac80211: reject ToDS broadcast data frames
+ - ubi/upd: Always flush after prepared for an update
+ - powerpc/kprobe: Fix oops when kprobed on 'stdu' instruction
+ - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs
+ - kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd
+ - x86, pmem: fix broken __copy_user_nocache cache-bypass assumptions
+ - block: fix del_gendisk() vs blkdev_ioctl crash
+ - tipc: fix crash during node removal
+ - Linux 4.4.64
+ * Xenial update to 4.4.63 stable release (LP: #1687629)
+ - cgroup, kthread: close race window where new kthreads can be migrated to
+ non-root cgroups
+ - thp: fix MADV_DONTNEED vs clear soft dirty race
+ - drm/nouveau/mpeg: mthd returns true on success now
+ - drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
+ - CIFS: store results of cifs_reopen_file to avoid infinite wait
+ - Input: xpad - add support for Razer Wildcat gamepad
+ - perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
+ - x86/vdso: Ensure vdso32_enabled gets set to valid values only
+ - x86/vdso: Plug race between mapping and ELF header setup
+ - acpi, nfit, libnvdimm: fix interleave set cookie calculation (64-bit
+ comparison)
+ - iscsi-target: Fix TMR reference leak during session shutdown
+ - iscsi-target: Drop work-around for legacy GlobalSAN initiator
+ - scsi: sr: Sanity check returned mode data
+ - scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
+ - scsi: sd: Fix capacity calculation with 32-bit sector_t
+ - xen, fbfront: fix connecting to backend
+ - libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep splat
+ - irqchip/irq-imx-gpcv2: Fix spinlock initialization
+ - ftrace: Fix removing of second function probe
+ - char: Drop bogus dependency of DEVPORT on !M68K
+ - char: lack of bool string made CONFIG_DEVPORT always on
+ - Revert "MIPS: Lantiq: Fix cascaded IRQ setup"
+ - kvm: fix page struct leak in handle_vmon
+ - zram: do not use copy_page with non-page aligned address
+ - powerpc: Disable HFSCR[TM] if TM is not supported
+ - crypto: ahash - Fix EINPROGRESS notification callback
+ - ath9k: fix NULL pointer dereference
+ - dvb-usb-v2: avoid use-after-free
+ - ext4: fix inode checksum calculation problem if i_extra_size is small
+ - platform/x86: acer-wmi: setup accelerometer when machine has appropriate
+ notify event
+ - rtc: tegra: Implement clock handling
+ - mm: Tighten x86 /dev/mem with zeroing reads
+ - dvb-usb: don't use stack for firmware load
+ - dvb-usb-firmware: don't do DMA on stack
+ - virtio-console: avoid DMA from stack
+ - pegasus: Use heap buffers for all register access
+ - rtl8150: Use heap buffers for all register access
+ - catc: Combine failure cleanup code in catc_probe()
+ - catc: Use heap buffer for memory size test
+ - tty/serial: atmel: RS485 half duplex w/DMA: enable RX after TX is done
+ - net: ipv6: check route protocol when deleting routes
+ - MIPS: fix Select HAVE_IRQ_EXIT_ON_IRQ_STACK patch.
+ - Linux 4.4.63
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Fri, 19 May 2017 09:39:36 -0300
+
+linux-snapdragon (4.4.0-1058.62) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1058.62 -proposed tracker (LP: #1686649)
+
+ [ Ubuntu: 4.4.0-78.99 ]
+
+ * linux: 4.4.0-78.99 -proposed tracker (LP: #1686645)
+ * Please backport fix to reference leak in cgroup blkio throttle
+ (LP: #1683976)
+ - block: fix module reference leak on put_disk() call for cgroups throttle
+ * UbuntuKVM guest crashed while running I/O stress test with Ubuntu kernel
+ 4.4.0-47-generic (LP: #1659111)
+ - block: Unhash block device inodes on gendisk destruction
+ - block: Use pointer to backing_dev_info from request_queue
+ - block: Dynamically allocate and refcount backing_dev_info
+ - block: Make blk_get_backing_dev_info() safe without open bdev
+ - block: Get rid of blk_get_backing_dev_info()
+ - block: Move bdev_unhash_inode() after invalidate_partition()
+ - block: Unhash also block device inode for the whole device
+ - block: Revalidate i_bdev reference in bd_aquire()
+ - block: Initialize bd_bdi on inode initialization
+ - block: Move bdi_unregister() to del_gendisk()
+ - block: Allow bdi re-registration
+ - bdi: Fix use-after-free in wb_congested_put()
+ - block: Make del_gendisk() safer for disks without queues
+ - block: Fix bdi assignment to bdev inode when racing with disk delete
+ - bdi: Mark congested->bdi as internal
+ - bdi: Make wb->bdi a proper reference
+ - bdi: Unify bdi->wb_list handling for root wb_writeback
+ - bdi: Shutdown writeback on all cgwbs in cgwb_bdi_destroy()
+ - bdi: Do not wait for cgwbs release in bdi_unregister()
+ - bdi: Rename cgwb_bdi_destroy() to cgwb_bdi_unregister()
+ - block: Fix oops in locked_inode_to_wb_and_lock_list()
+ - kobject: Export kobject_get_unless_zero()
+ - block: Fix oops scsi_disk_get()
+ * Touchpad not working correctly after kernel upgrade (LP: #1662589)
+ - Input: ALPS - fix V8+ protocol handling (73 03 28)
+ * Xenial update to v4.4.62 stable release (LP: #1683728)
+ - drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
+ - drm/i915: Stop using RP_DOWN_EI on Baytrail
+ - usb: dwc3: gadget: delay unmap of bounced requests
+ - mtd: bcm47xxpart: fix parsing first block after aligned TRX
+ - MIPS: Introduce irq_stack
+ - MIPS: Stack unwinding while on IRQ stack
+ - MIPS: Only change $28 to thread_info if coming from user mode
+ - MIPS: Switch to the irq_stack in interrupts
+ - MIPS: Select HAVE_IRQ_EXIT_ON_IRQ_STACK
+ - MIPS: IRQ Stack: Fix erroneous jal to plat_irq_dispatch
+ - crypto: caam - fix RNG deinstantiation error checking
+ - Linux 4.4.62
+ * ifup service of network device stay active after driver stop (LP: #1672144)
+ - net: use net->count to check whether a netns is alive or not
+ * [Hyper-V] mkfs regression in kernel 4.4+ (LP: #1682215)
+ - block: relax check on sg gap
+ * [Feature] KBL: intel_powerclamp driver support (LP: #1591641)
+ - thermal/powerclamp: remove cpu whitelist
+ - thermal/powerclamp: correct cpu support check
+ - thermal/powerclamp: add back module device table
+ * sysfs channel reads of lps22hb pressure sensor are stale (LP: #1682103)
+ - iio: st_pressure: initialize lps22hb bootime
+ * Backlight control does not work and there are no entries in
+ /sys/class/backlight (LP: #1667323)
+ - Revert "ACPI / video: Add force_native quirk for HP Pavilion dv6"
+ * [Feature] KBL: intel_rapl driver support (LP: #1591640)
+ - powercap/intel_rapl: Add support for Kabylake
+ * Xenial update to v4.4.61 stable release (LP: #1682140)
+ - drm/vmwgfx: Type-check lookups of fence objects
+ - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
+ - drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
+ - drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
+ - drm/vmwgfx: Remove getparam error message
+ - drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
+ - sysfs: be careful of error returns from ops->show()
+ - staging: android: ashmem: lseek failed due to no FMODE_LSEEK.
+ - arm/arm64: KVM: Take mmap_sem in stage2_unmap_vm
+ - arm/arm64: KVM: Take mmap_sem in kvm_arch_prepare_memory_region
+ - iio: bmg160: reset chip when probing
+ - Reset TreeId to zero on SMB2 TREE_CONNECT
+ - ptrace: fix PTRACE_LISTEN race corrupting task->state
+ - ring-buffer: Fix return value check in test_ringbuffer()
+ - metag/usercopy: Drop unused macros
+ - metag/usercopy: Fix alignment error checking
+ - metag/usercopy: Add early abort to copy_to_user
+ - metag/usercopy: Zero rest of buffer from copy_from_user
+ - metag/usercopy: Set flags before ADDZ
+ - metag/usercopy: Fix src fixup in from user rapf loops
+ - metag/usercopy: Add missing fixups
+ - powerpc/mm: Add missing global TLB invalidate if cxl is active
+ - powerpc: Don't try to fix up misaligned load-with-reservation instructions
+ - nios2: reserve boot memory for device tree
+ - s390/decompressor: fix initrd corruption caused by bss clear
+ - s390/uaccess: get_user() should zero on failure (again)
+ - MIPS: Force o32 fp64 support on 32bit MIPS64r6 kernels
+ - MIPS: ralink: Fix typos in rt3883 pinctrl
+ - MIPS: End spinlocks with .insn
+ - MIPS: Lantiq: fix missing xbar kernel panic
+ - MIPS: Flush wrong invalid FTLB entry for huge page
+ - mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
+ - Linux 4.4.61
+ * Xenial update to v4.4.60 stable release (LP: #1681862)
+ - libceph: force GFP_NOIO for socket allocations
+ - xen/setup: Don't relocate p2m over existing one
+ - scsi: mpt3sas: fix hang on ata passthrough commands
+ - scsi: sg: check length passed to SG_NEXT_CMD_LEN
+ - scsi: libsas: fix ata xfer length
+ - ALSA: seq: Fix race during FIFO resize
+ - ALSA: hda - fix a problem for lineout on a Dell AIO machine
+ - ASoC: atmel-classd: fix audio clock rate
+ - ACPI: Fix incompatibility with mcount-based function graph tracing
+ - ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
+ - tty/serial: atmel: fix race condition (TX+DMA)
+ - tty/serial: atmel: fix TX path in atmel_console_write()
+ - USB: fix linked-list corruption in rh_call_control()
+ - KVM: x86: clear bus pointer when destroyed
+ - drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
+ - mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd()
+ - MIPS: Lantiq: Fix cascaded IRQ setup
+ - rtc: s35390a: fix reading out alarm
+ - rtc: s35390a: make sure all members in the output are set
+ - rtc: s35390a: implement reset routine as suggested by the reference
+ - rtc: s35390a: improve irq handling
+ - KVM: kvm_io_bus_unregister_dev() should never fail
+ - power: reset: at91-poweroff: timely shutdown LPDDR memories
+ - blk: improve order of bio handling in generic_make_request()
+ - blk: Ensure users for current->bio_list can see the full list.
+ - padata: avoid race in reordering
+ - Linux 4.4.60
+
+ [ Ubuntu: 4.4.0-77.98 ]
+
+ * linux: 4.4.0-77.98 -proposed tracker (LP: #1686040)
+ * [Hyper-V][SAUCE] pci-hyperv: Use only 16 bit integer for PCI domain
+ (LP: #1684971)
+ - SAUCE: pci-hyperv: Use only 16 bit integer for PCI domain
+ * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC4 (LP: #1669672)
+ - SAUCE: sdhci: use PCI ID to identify Dell IoT gateways
+ - SAUCE: Redpine: Upgrade to ver. 1.2.RC4
+ - [Config] Update CONFIG_VEN_RSI_* configs
+ - SAUCE: Redpine: add copyright to kernel packages
+ * Fix RX fail issue on Exar USB serial driver after resume from S3/S4
+ (LP: #1685133)
+ - SAUCE: xr-usb-serial: Update driver for Exar USB serial ports
+ * Miscellaneous Ubuntu changes
+ - [Config] updating configs to match redpine driver changes
+
+ [ Ubuntu: 4.4.0-75.96 ]
+
+ * linux: 4.4.0-75.96 -proposed tracker (LP: #1684441)
+ * [Hyper-V] hv: util: move waiting for release to hv_utils_transport itself
+ (LP: #1682561)
+ - Drivers: hv: util: move waiting for release to hv_utils_transport itself
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Thu, 27 Apr 2017 18:07:58 -0300
+
+linux-snapdragon (4.4.0-1057.61) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1057.61 -proposed tracker (LP: #1682045)
+
+ [ Ubuntu: 4.4.0-74.95 ]
+
+ * linux: 4.4.0-74.95 -proposed tracker (LP: #1682041)
+ * [Hyper-V] hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
+ (LP: #1681893)
+ - Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
+
+ -- Stefan Bader <stefan.bader@canonical.com> Wed, 12 Apr 2017 15:27:24 +0200
+
+linux-snapdragon (4.4.0-1056.60) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1056.60 -proposed tracker (LP: #1680423)
+
+ [ Ubuntu: 4.4.0-73.94 ]
+
+ * linux: 4.4.0-73.94 -proposed tracker (LP: #1680416)
+ * CVE-2017-6353
+ - sctp: deny peeloff operation on asocs with threads sleeping on it
+ * vfat: missing iso8859-1 charset (LP: #1677230)
+ - [Config] NLS_ISO8859_1=y
+ * Regression: KVM modules should be on main kernel package (LP: #1678099)
+ - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list
+ * linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial
+ 4.4.0-63.84~14.04.2 (LP: #1664912)
+ - SAUCE: apparmor: fix link auditing failure due to, uninitialized var
+ * regession tests failing after stackprofile test is run (LP: #1661030)
+ - SAUCE: fix regression with domain change in complain mode
+ * Permission denied and inconsistent behavior in complain mode with 'ip netns
+ list' command (LP: #1648903)
+ - SAUCE: fix regression with domain change in complain mode
+ * unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt
+ from a unshared mount namespace (LP: #1656121)
+ - SAUCE: apparmor: null profiles should inherit parent control flags
+ * apparmor refcount leak of profile namespace when removing profiles
+ (LP: #1660849)
+ - SAUCE: apparmor: fix ns ref count link when removing profiles from policy
+ * tor in lxd: apparmor="DENIED" operation="change_onexec"
+ namespace="root//CONTAINERNAME_<var-lib-lxd>" profile="unconfined"
+ name="system_tor" (LP: #1648143)
+ - SAUCE: apparmor: Fix no_new_privs blocking change_onexec when using stacked
+ namespaces
+ * apparmor oops in bind_mnt when dev_path lookup fails (LP: #1660840)
+ - SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup fails
+ * apparmor auditing denied access of special apparmor .null fi\ le
+ (LP: #1660836)
+ - SAUCE: apparmor: Don't audit denied access of special apparmor .null file
+ * apparmor label leak when new label is unused (LP: #1660834)
+ - SAUCE: apparmor: fix label leak when new label is unused
+ * apparmor reference count bug in label_merge_insert() (LP: #1660833)
+ - SAUCE: apparmor: fix reference count bug in label_merge_insert()
+ * apparmor's raw_data file in securityfs is sometimes truncated (LP: #1638996)
+ - SAUCE: apparmor: fix replacement race in reading rawdata
+ * unix domain socket cross permission check failing with nested namespaces
+ (LP: #1660832)
+ - SAUCE: apparmor: fix cross ns perm of unix domain sockets
+ * Xenial update to v4.4.59 stable release (LP: #1678960)
+ - xfrm: policy: init locks early
+ - virtio_balloon: init 1st buffer in stats vq
+ - pinctrl: qcom: Don't clear status bit on irq_unmask
+ - c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
+ - h8300/ptrace: Fix incorrect register transfer count
+ - mips/ptrace: Preserve previous registers for short regset write
+ - sparc/ptrace: Preserve previous registers for short regset write
+ - metag/ptrace: Preserve previous registers for short regset write
+ - metag/ptrace: Provide default TXSTATUS for short NT_PRSTATUS
+ - metag/ptrace: Reject partial NT_METAG_RPIPE writes
+ - fscrypt: remove broken support for detecting keyring key revocation
+ - sched/rt: Add a missing rescheduling point
+ - Linux 4.4.59
+ * Update ENA driver to 1.1.2 from net-next (LP: #1664312)
+ - net: ena: Remove unnecessary pci_set_drvdata()
+ - net: ena: Fix error return code in ena_device_init()
+ - net: ena: change the return type of ena_set_push_mode() to be void.
+ - net: ena: use setup_timer() and mod_timer()
+ - net/ena: remove ntuple filter support from device feature list
+ - net/ena: fix queues number calculation
+ - net/ena: fix ethtool RSS flow configuration
+ - net/ena: fix RSS default hash configuration
+ - net/ena: fix NULL dereference when removing the driver after device reset
+ failed
+ - net/ena: refactor ena_get_stats64 to be atomic context safe
+ - net/ena: fix potential access to freed memory during device reset
+ - net/ena: use READ_ONCE to access completion descriptors
+ - net/ena: reduce the severity of ena printouts
+ - net/ena: change driver's default timeouts
+ - net/ena: change condition for host attribute configuration
+ - net/ena: update driver version to 1.1.2
+ * Xenial update to v4.4.58 stable release (LP: #1677600)
+ - net/openvswitch: Set the ipv6 source tunnel key address attribute correctly
+ - net: bcmgenet: Do not suspend PHY if Wake-on-LAN is enabled
+ - net: properly release sk_frag.page
+ - amd-xgbe: Fix jumbo MTU processing on newer hardware
+ - net: unix: properly re-increment inflight counter of GC discarded candidates
+ - net/mlx5: Increase number of max QPs in default profile
+ - net/mlx5e: Count LRO packets correctly
+ - net: bcmgenet: remove bcmgenet_internal_phy_setup()
+ - ipv4: provide stronger user input validation in nl_fib_input()
+ - socket, bpf: fix sk_filter use after free in sk_clone_lock
+ - tcp: initialize icsk_ack.lrcvtime at session start time
+ - Input: elan_i2c - add ASUS EeeBook X205TA special touchpad fw
+ - Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
+ - Input: iforce - validate number of endpoints before using them
+ - Input: ims-pcu - validate number of endpoints before using them
+ - Input: hanwang - validate number of endpoints before using them
+ - Input: yealink - validate number of endpoints before using them
+ - Input: cm109 - validate number of endpoints before using them
+ - Input: kbtab - validate number of endpoints before using them
+ - Input: sur40 - validate number of endpoints before using them
+ - ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
+ - ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
+ - ALSA: hda - Adding a group of pin definition to fix headset problem
+ - USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems
+ - USB: serial: qcserial: add Dell DW5811e
+ - ACM gadget: fix endianness in notifications
+ - usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's wBytesPerInterval
+ - usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk
+ - USB: uss720: fix NULL-deref at probe
+ - USB: lvtest: fix NULL-deref at probe
+ - USB: idmouse: fix NULL-deref at probe
+ - USB: wusbcore: fix NULL-deref at probe
+ - usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
+ - usb: hub: Fix crash after failure to read BOS descriptor
+ - uwb: i1480-dfu: fix NULL-deref at probe
+ - uwb: hwa-rc: fix NULL-deref at probe
+ - mmc: ushc: fix NULL-deref at probe
+ - iio: adc: ti_am335x_adc: fix fifo overrun recovery
+ - iio: hid-sensor-trigger: Change get poll value function order to avoid
+ sensor properties losing after resume from S3
+ - parport: fix attempt to write duplicate procfiles
+ - ext4: mark inode dirty after converting inline directory
+ - mmc: sdhci: Do not disable interrupts while waiting for clock
+ - xen/acpi: upload PM state from init-domain to Xen
+ - iommu/vt-d: Fix NULL pointer dereference in device_to_iommu
+ - ARM: at91: pm: cpu_idle: switch DDR to power-down mode
+ - ARM: dts: at91: sama5d2: add dma properties to UART nodes
+ - cpufreq: Restore policy min/max limits on CPU online
+ - raid10: increment write counter after bio is split
+ - libceph: don't set weight to IN when OSD is destroyed
+ - xfs: don't allow di_size with high bit set
+ - xfs: fix up xfs_swap_extent_forks inline extent handling
+ - nl80211: fix dumpit error path RTNL deadlocks
+ - USB: usbtmc: add missing endpoint sanity check
+ - xfs: clear _XBF_PAGES from buffers when readahead page
+ - igb: add i211 to i210 PHY workaround
+ - vfio/spapr: Postpone allocation of userspace version of TCE table
+ - block: allow WRITE_SAME commands with the SG_IO ioctl
+ - fbcon: Fix vc attr at deinit
+ - crypto: algif_hash - avoid zero-sized array
+ - Linux 4.4.58
+ * PS/2 mouse does not work on Dell embedded computer (LP: #1591053)
+ - Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
+ * Xenial update to v4.4.57 stable release (LP: #1676424)
+ - give up on gcc ilog2() constant optimizations
+ - perf/core: Fix event inheritance on fork()
+ - cpufreq: Fix and clean up show_cpuinfo_cur_freq()
+ - powerpc/boot: Fix zImage TOC alignment
+ - md/raid1/10: fix potential deadlock
+ - target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
+ - scsi: lpfc: Add shutdown method for kexec
+ - scsi: libiscsi: add lock around task lists to fix list corruption regression
+ - target: Fix VERIFY_16 handling in sbc_parse_cdb
+ - isdn/gigaset: fix NULL-deref at probe
+ - gfs2: Avoid alignment hole in struct lm_lockname
+ - percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
+ - ext4: fix fencepost in s_first_meta_bg validation
+ - Linux 4.4.57
+ * Xenial update to v4.4.56 stable release (LP: #1675789)
+ - netlink: remove mmapped netlink support
+ - [Config] CONFIG_NETLINK_MMAP disappeared
+ - vxlan: correctly validate VXLAN ID against VXLAN_N_VID
+ - vti6: return GRE_KEY for vti6
+ - ipv4: mask tos for input route
+ - l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv
+ - net: don't call strlen() on the user buffer in packet_bind_spkt()
+ - net: net_enable_timestamp() can be called from irq contexts
+ - dccp: Unlock sock before calling sk_free()
+ - tcp: fix various issues for sockets morphing to listen state
+ - net: fix socket refcounting in skb_complete_wifi_ack()
+ - net: fix socket refcounting in skb_complete_tx_timestamp()
+ - dccp: fix use-after-free in dccp_feat_activate_values
+ - vrf: Fix use-after-free in vrf_xmit
+ - uapi: fix linux/packet_diag.h userspace compilation error
+ - act_connmark: avoid crashing on malformed nlattrs with null parms
+ - mpls: Send route delete notifications when router module is unloaded
+ - ipv6: make ECMP route replacement less greedy
+ - ipv6: avoid write to a possibly cloned skb
+ - dccp/tcp: fix routing redirect race
+ - dccp: fix memory leak during tear-down of unsuccessful connection request
+ - net sched actions: decrement module reference count after table flush.
+ - fscrypt: fix renaming and linking special files
+ - fscrypto: lock inode while setting encryption policy
+ - x86/kasan: Fix boot with KASAN=y and PROFILE_ANNOTATED_BRANCHES=y
+ - x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm
+ - futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
+ - futex: Add missing error handling to FUTEX_REQUEUE_PI
+ - Linux 4.4.56
+ * Kernel linux-image-4.4.0-67-generic prevent the boot on Microsoft Hyper-v
+ 2012r2 Gen2 VM (LP: #1674635)
+ - scsi: storvsc: Workaround for virtual DVD SCSI version
+ * [Hyper-V][Mellanox] net/mlx4_core: Avoid delays during VF driver device
+ shutdown (LP: #1672785)
+ - net/mlx4_core: Avoid delays during VF driver device shutdown
+ * Channel data values for IIO based st_sensors (st_accel, st_pressure) are
+ incorrect (LP: #1676356)
+ - iio: core: added support for IIO_VAL_INT
+ - iio: st_sensors: simplify buffer address handling
+ - iio: st_sensors: read each channel individually
+ - iio:st_sensors: emulate SMBus block read if needed
+ - iio:st_sensors: align on storagebits boundaries
+ - iio:st_pressure: temperature triggered buffering
+ - iio:st_pressure: clean useless static channel initializers
+ - iio: st_pressure: Fix data sign
+ * Enable lspcon on i915 (LP: #1676747)
+ - drm: Helper for lspcon in drm_dp_dual_mode
+ - drm/i915: Add lspcon support for I915 driver
+ - drm/i915: Parse VBT data for lspcon
+ - drm/i915: Enable lspcon initialization
+ - drm/i915: Add lspcon resume function
+ * stress_smoke_test passing and exiting rc=9 (linux 4.9.0-12.13 ADT test
+ failure with linux 4.9.0-12.13) (LP: #1658633)
+ - ext4: lock the xattr block before checksuming it
+ * Fix line-out port noise on Baytrail-I with RT5660 based sound card
+ (LP: #1675327)
+ - SAUCE: (no-up): ASoC: Intel: bytcr-rt5660: Fix noise in line-out
+ * Kernel 4.4.0-67 Defaults to ACPI-cpufreq rather than P-State - Dell
+ Precision 5520 (LP: #1674390)
+ - cpufreq: intel_pstate: Enable HWP by default
+ * ip_rcv_finish() NULL pointer kernel panic (LP: #1672470)
+ - bridge: drop netfilter fake rtable unconditionally
+ * dm-queue-length module is not included in installer/initramfs (LP: #1673350)
+ - d-i: Also add dm-queue-length to multipath modules
+ * Broadcom bluetooth modules sometimes fail to initialize (LP: #1483101)
+ - Bluetooth: btbcm: Add a delay for module reset
+ * Need support of Broadcom bluetooth device [413c:8143] (LP: #1166113)
+ - Bluetooth: btusb: Add support for 413c:8143
+ * i40e Intel X710 error during device probe prevents link set up and ip
+ association (LP: #1672550)
+ - i40e: check for and deal with non-contiguous TCs
+ * CIFS: Call echo service immediately after socket reconnect (LP: #1669941)
+ - Call echo service immediately after socket reconnect
+ * FC Adapter (LPe32000-based) prints "iotag out of range", goes offline, and
+ delays boot a lot (Ubuntu17.04/Emulex/lpfc)) (LP: #1670490)
+ - scsi: lpfc: Add missing memory barrier
+ * No C-State Deeper than C3 utilized by Kaby Lake 7820HQ in Precision 5520
+ (LP: #1672439)
+ - intel_idle: Add KBL support
+ * [Hyper-V] Missing PCI patches breaking SR-IOV hot remove (LP: #1670518)
+ - PCI: hv: Fix hv_pci_remove() for hot-remove
+ - PCI: hv: Delete the device earlier from hbus->children for hot-remove
+ - PCI: hv: Make unnecessarily global IRQ masking functions static
+ - PCI: hv: Allocate physically contiguous hypercall params buffer
+ * Xenial update to v4.4.55 stable release (LP: #1674292)
+ - USB: serial: digi_acceleport: fix OOB data sanity check
+ - USB: serial: digi_acceleport: fix OOB-event processing
+ - crypto: improve gcc optimization flags for serpent and wp512
+ - MIPS: Update defconfigs for NF_CT_PROTO_DCCP/UDPLITE change
+ - MIPS: ip27: Disable qlge driver in defconfig
+ - MIPS: Update ip27_defconfig for SCSI_DH change
+ - MIPS: ip22: Fix ip28 build for modern gcc
+ - MIPS: Update lemote2f_defconfig for CPU_FREQ_STAT change
+ - mtd: pmcmsp: use kstrndup instead of kmalloc+strncpy
+ - MIPS: ralink: Cosmetic change to prom_init().
+ - MIPS: ralink: Remove unused rt*_wdt_reset functions
+ - cpmac: remove hopeless #warning
+ - mm: memcontrol: avoid unused function warning
+ - MIPS: DEC: Avoid la pseudo-instruction in delay slots
+ - MIPS: Netlogic: Fix CP0_EBASE redefinition warnings
+ - tracing: Add #undef to fix compile error
+ - powerpc: Emulation support for load/store instructions on LE
+ - usb: gadget: dummy_hcd: clear usb_gadget region before registration
+ - usb: dwc3: gadget: make Set Endpoint Configuration macros safe
+ - usb: gadget: function: f_fs: pass companion descriptor along
+ - usb: host: xhci-dbg: HCIVERSION should be a binary number
+ - usb: host: xhci-plat: Fix timeout on removal of hot pluggable xhci
+ controllers
+ - USB: serial: safe_serial: fix information leak in completion handler
+ - USB: serial: omninet: fix reference leaks at open
+ - USB: iowarrior: fix NULL-deref at probe
+ - USB: iowarrior: fix NULL-deref in write
+ - USB: serial: io_ti: fix NULL-deref in interrupt callback
+ - USB: serial: io_ti: fix information leak in completion handler
+ - serial: samsung: Continue to work if DMA request fails
+ - mvsas: fix misleading indentation
+ - KVM: s390: Fix guest migration for huge guests resulting in panic
+ - s390/kdump: Use "LINUX" ELF note name instead of "CORE"
+ - nfit, libnvdimm: fix interleave set cookie calculation
+ - dm: flush queued bios when process blocks to avoid deadlock
+ - ext4: don't BUG when truncating encrypted inodes on the orphan list
+ - Linux 4.4.55
+ * Xenial update to v4.4.54 stable release (LP: #1673541)
+ - serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
+ - KVM: s390: Disable dirty log retrieval for UCONTROL guests
+ - KVM: VMX: use correct vmcs_read/write for guest segment selector/base
+ - Bluetooth: Add another AR3012 04ca:3018 device
+ - s390/qdio: clear DSCI prior to scanning multiple input queues
+ - s390/dcssblk: fix device size calculation in dcssblk_direct_access()
+ - s390: TASK_SIZE for kernel threads
+ - s390: make setup_randomness work
+ - s390: use correct input data address for setup_randomness
+ - net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
+ - mnt: Tuck mounts under others instead of creating shadow/side mounts.
+ - IB/ipoib: Fix deadlock between rmmod and set_mode
+ - IB/IPoIB: Add destination address when re-queue packet
+ - IB/srp: Avoid that duplicate responses trigger a kernel bug
+ - IB/srp: Fix race conditions related to task management
+ - ktest: Fix child exit code processing
+ - ceph: remove req from unsafe list when unregistering it
+ - target: Fix NULL dereference during LUN lookup + active I/O shutdown
+ - nlm: Ensure callback code also checks that the files match
+ - pwm: pca9685: Fix period change with same duty cycle
+ - xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
+ - mac80211: flush delayed work when entering suspend
+ - drm/amdgpu: add more cases to DCE11 possible crtc mask setup
+ - drm/ast: Fix test for VGA enabled
+ - drm/ast: Call open_key before enable_mmio in POST code
+ - drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
+ - drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
+ - drm/ttm: Make sure BOs being swapped out are cacheable
+ - drm/atomic: fix an error code in mode_fixup()
+ - fakelb: fix schedule while atomic
+ - drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from
+ vlv_init_display_clock_gating
+ - libceph: use BUG() instead of BUG_ON(1)
+ - fat: fix using uninitialized fields of fat_inode/fsinfo_inode
+ - drivers: hv: Turn off write permission on the hypercall page
+ - Linux 4.4.54
+ * Xenial update to v4.4.53 stable release (LP: #1673538)
+ - samples: move mic/mpssd example code from Documentation
+ - MIPS: Fix special case in 64 bit IP checksumming.
+ - MIPS: BCM47XX: Fix button inversion for Asus WL-500W
+ - MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
+ - MIPS: Lantiq: Keep ethernet enabled during boot
+ - MIPS: Clear ISA bit correctly in get_frame_info()
+ - MIPS: Prevent unaligned accesses during stack unwinding
+ - MIPS: Fix get_frame_info() handling of microMIPS function size
+ - MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions
+ - MIPS: Calculate microMIPS ra properly when unwinding the stack
+ - MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps
+ - am437x-vpfe: always assign bpp variable
+ - uvcvideo: Fix a wrong macro
+ - media: fix dm1105.c build error
+ - ARM: at91: define LPDDR types
+ - ARM: dts: at91: Enable DMA on sama5d4_xplained console
+ - ARM: dts: at91: Enable DMA on sama5d2_xplained console
+ - ALSA: hda/realtek - Cannot adjust speaker's volume on a Dell AIO
+ - ALSA: hda - fix Lewisburg audio issue
+ - ALSA: timer: Reject user params with too small ticks
+ - ALSA: ctxfi: Fallback DMA mask to 32bit
+ - ALSA: seq: Fix link corruption by event error handling
+ - ALSA: hda - Add subwoofer support for Dell Inspiron 17 7000 Gaming
+ - ALSA: hda - Fix micmute hotkey problem for a lenovo AIO machine
+ - staging: rtl: fix possible NULL pointer dereference
+ - regulator: Fix regulator_summary for deviceless consumers
+ - iommu/vt-d: Fix some macros that are incorrectly specified in intel-iommu
+ - iommu/vt-d: Tylersburg isoch identity map check is done too late.
+ - mm/page_alloc: fix nodes for reclaim in fast path
+ - mm: vmpressure: fix sending wrong events on underflow
+ - mm: do not access page->mapping directly on page_endio
+ - ipc/shm: Fix shmat mmap nil-page protection
+ - dm cache: fix corruption seen when using cache > 2TB
+ - dm stats: fix a leaked s->histogram_boundaries array
+ - Revert "scsi: storvsc: properly set residual data length on errors"
+ - scsi: storvsc: properly set residual data length on errors
+ - scsi: aacraid: Reorder Adapter status check
+ - scsi: use 'scsi_device_from_queue()' for scsi_dh
+ - sd: get disk reference in sd_check_events()
+ - Fix: Disable sys_membarrier when nohz_full is enabled
+ - jbd2: don't leak modified metadata buffers on an aborted journal
+ - block/loop: fix race between I/O and set_status
+ - loop: fix LO_FLAGS_PARTSCAN hang
+ - ext4: Include forgotten start block on fallocate insert range
+ - ext4: do not polute the extents cache while shifting extents
+ - ext4: trim allocation requests to group size
+ - ext4: fix data corruption in data=journal mode
+ - ext4: fix inline data error paths
+ - ext4: preserve the needs_recovery flag when the journal is aborted
+ - ext4: return EROFS if device is r/o and journal replay is needed
+ - samples/seccomp: fix 64-bit comparison macros
+ - target: Obtain se_node_acl->acl_kref during get_initiator_node_acl
+ - target: Fix multi-session dynamic se_node_acl double free OOPs
+ - ath5k: drop bogus warning on drv_set_key with unsupported cipher
+ - ath9k: fix race condition in enabling/disabling IRQs
+ - ath9k: use correct OTP register offsets for the AR9340 and AR9550
+ - crypto: testmgr - Pad aes_ccm_enc_tv_template vector
+ - fuse: add missing FR_FORCE
+ - arm/arm64: KVM: Enforce unconditional flush to PoC when mapping to stage-2
+ - iio: pressure: mpl115: do not rely on structure field ordering
+ - iio: pressure: mpl3115: do not rely on structure field ordering
+ - can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer
+ - w1: don't leak refcount on slave attach failure in w1_attach_slave_device()
+ - w1: ds2490: USB transfer buffers need to be DMAable
+ - usb: musb: da8xx: Remove CPPI 3.0 quirk and methods
+ - usb: host: xhci: plat: check hcc_params after add hcd
+ - usb: gadget: udc: fsl: Add missing complete function.
+ - hv: allocate synic pages for all present CPUs
+ - hv: init percpu_list in hv_synic_alloc()
+ - Drivers: hv: util: kvp: Fix a rescind processing issue
+ - Drivers: hv: util: Fcopy: Fix a rescind processing issue
+ - Drivers: hv: util: Backup: Fix a rescind processing issue
+ - RDMA/core: Fix incorrect structure packing for booleans
+ - rdma_cm: fail iwarp accepts w/o connection params
+ - gfs2: Add missing rcu locking for glock lookup
+ - rtlwifi: Fix alignment issues
+ - rtlwifi: rtl8192c-common: Fix "BUG: KASAN:
+ - nfsd: minor nfsd_setattr cleanup
+ - nfsd: special case truncates some more
+ - NFSv4: Fix memory and state leak in _nfs4_open_and_get_state
+ - NFSv4: fix getacl head length estimation
+ - NFSv4: fix getacl ERANGE for some ACL buffer sizes
+ - rtc: sun6i: Add some locking
+ - rtc: sun6i: Switch to the external oscillator
+ - md linear: fix a race between linear_add() and linear_congested()
+ - bcma: use (get|put)_device when probing/removing device driver
+ - dmaengine: ipu: Make sure the interrupt routine checks all interrupts.
+ - powerpc/xmon: Fix data-breakpoint
+ - MIPS: IP22: Reformat inline assembler code to modern standards.
+ - MIPS: IP22: Fix build error due to binutils 2.25 uselessnes.
+ - scsi: lpfc: Correct WQ creation for pagesize
+ - Linux 4.4.53
+ * move aufs.ko from -extra to linux-image package (LP: #1673498)
+ - [config] aufs.ko moved to linux-image package
+ * [Xenial] net: better skb->sender_cpu and skb->napi_id cohabitation
+ (LP: #1673303)
+ - net: better skb->sender_cpu and skb->napi_id cohabitation
+ * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
+ (LP: #1619918)
+ - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls
+ * linux-tools-common should Depends: lsb-release (LP: #1667571)
+ - [Config] linux-tools-common depends on lsb-release
+ * Add Use-After-Free Patch for Ubuntu16.10 - EEH on BELL3 adapter fails to
+ recover (serial/tty) (LP: #1669153)
+ - 8250_pci: Fix potential use-after-free in error path
+ * [Hyper-V] pci-hyperv: Use device serial number as PCI domain (LP: #1667527)
+ - net/mlx4_core: Use cq quota in SRIOV when creating completion EQs
+ - PCI: hv: Use device serial number as PCI domain
+ * [Xenial - 16.04 ]Bonding driver - stack corruption when trying to copy 20
+ bytes to a sockaddr (LP: #1668042)
+ - net/bonding: Enforce active-backup policy for IPoIB bonds
+ * Request to backport cxlflash patches to Xenial SRU stream (LP: #1623750)
+ - scsi: cxlflash: Scan host only after the port is ready for I/O
+ - scsi: cxlflash: Remove the device cleanly in the system shutdown path
+ - scsi: cxlflash: Fix to avoid EEH and host reset collisions
+ - scsi: cxlflash: Improve EEH recovery time
+ * Xenial update to v4.4.52 stable release (LP: #1669016)
+ - net/llc: avoid BUG_ON() in skb_orphan()
+ - packet: fix races in fanout_add()
+ - packet: Do not call fanout_release from atomic contexts
+ - irda: Fix lockdep annotations in hashbin_delete().
+ - ip: fix IP_CHECKSUM handling
+ - net: socket: fix recvmmsg not returning error from sock_error
+ - tty: serial: msm: Fix module autoload
+ - USB: serial: mos7840: fix another NULL-deref at open
+ - USB: serial: cp210x: add new IDs for GE Bx50v3 boards
+ - USB: serial: ftdi_sio: fix modem-status error handling
+ - USB: serial: ftdi_sio: fix extreme low-latency setting
+ - USB: serial: ftdi_sio: fix line-status over-reporting
+ - USB: serial: spcp8x5: fix modem-status handling
+ - USB: serial: opticon: fix CTS retrieval at open
+ - USB: serial: ark3116: fix register-accessor error handling
+ - x86/platform/goldfish: Prevent unconditional loading
+ - goldfish: Sanitize the broken interrupt handler
+ - block: fix double-free in the failure path of cgwb_bdi_init()
+ - rtlwifi: rtl_usb: Fix for URB leaking when doing ifconfig up/down
+ - Revert "usb: chipidea: imx: enable CI_HDRC_SET_NON_ZERO_TTHA"
+ - kvm: vmx: ensure VMCS is current while enabling PML
+ - Linux 4.4.52
+ * Xenial update to v4.4.51 stable release (LP: #1669015)
+ - vfs: fix uninitialized flags in splice_to_pipe()
+ - siano: make it work again with CONFIG_VMAP_STACK
+ - fuse: fix use after free issue in fuse_dev_do_read()
+ - scsi: don't BUG_ON() empty DMA transfers
+ - Fix missing sanity check in /dev/sg
+ - Input: elan_i2c - add ELAN0605 to the ACPI table
+ - drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
+ - drm/dp/mst: fix kernel oops when turning off secondary monitor
+ - futex: Move futex_init() to core_initcall
+ - ARM: 8658/1: uaccess: fix zeroing of 64-bit get_user()
+ - printk: use rcuidle console tracepoint
+ - NTB: ntb_transport: fix debugfs_remove_recursive
+ - ntb_transport: Pick an unused queue
+ - bcache: Make gc wakeup sane, remove set_task_state()
+ - mmc: core: fix multi-bit bus width without high-speed mode
+ - Linux 4.4.51
+ * Xenial update to v4.4.50 stable release (LP: #1666324)
+ - can: Fix kernel panic at security_sock_rcv_skb
+ - ipv6: fix ip6_tnl_parse_tlv_enc_lim()
+ - ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
+ - tcp: fix 0 divide in __tcp_select_window()
+ - net: use a work queue to defer net_disable_timestamp() work
+ - ipv4: keep skb->dst around in presence of IP options
+ - netlabel: out of bound access in cipso_v4_validate()
+ - ip6_gre: fix ip6gre_err() invalid reads
+ - ipv6: tcp: add a missing tcp_v6_restore_cb()
+ - tcp: avoid infinite loop in tcp_splice_read()
+ - tun: read vnet_hdr_sz once
+ - macvtap: read vnet_hdr_size once
+ - mlx4: Invoke softirqs after napi_reschedule
+ - sctp: avoid BUG_ON on sctp_wait_for_sndbuf
+ - sit: fix a double free on error path
+ - net: introduce device min_header_len
+ - packet: round up linear to header len
+ - ping: fix a null pointer dereference
+ - l2tp: do not use udp_ioctl()
+ - Linux 4.4.50
+ * FlashGT Integration and Setup: fsbmc30: After 17th reboot of soft bootme,
+ HTX & Linux errors seen with 256 virtual LUNs (LP: #1667239)
+ - cxl: Fix coredump generation when cxl_get_fd() is used
+ * [Hyper-V] Ubuntu 14.04.2 LTS Generation 2 SCSI Errors on VSS Based Backups
+ (LP: #1470250)
+ - Drivers: hv: vss: Operation timeouts should match host expectation
+ - SAUCE: Tools: hv: vss: Thaw the filesystem and continue after freeze fails
+ * kernel 4.4.0-63 with USB WLAN RTL8192CU freezes desktop (LP: #1666421)
+ - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
+ * Export symbol "dev_pm_qos_update_user_latency_tolerance" (LP: #1666401)
+ - PM / QoS: Export dev_pm_qos_update_user_latency_tolerance
+ * Linux ZFS port doesn't respect RLIMIT_FSIZE (LP: #1656259)
+ - SAUCE: (noup) Update zfs to 0.6.5.6-0ubuntu16
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Fri, 07 Apr 2017 15:57:34 +0100
+
+linux-snapdragon (4.4.0-1055.59) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1055.59 -proposed tracker (LP: #1678084)
+
+ [ Ubuntu: 4.4.0-72.93 ]
+
+ * linux: 4.4.0-72.93 -proposed tracker (LP: #1678078)
+ * Fix CVE-2017-7308 (LP: #1678009)
+ - net/packet: fix overflow in check for priv area size
+ - net/packet: fix overflow in check for tp_frame_nr
+ - net/packet: fix overflow in check for tp_reserve
+
+ -- Stefan Bader <stefan.bader@canonical.com> Fri, 31 Mar 2017 16:49:38 +0200
+
+linux-snapdragon (4.4.0-1054.58) xenial; urgency=low
+
+ [ Ubuntu: 4.4.0-71.92 ]
+
+ * CVE-2017-7184
+ - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
+ - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Fri, 24 Mar 2017 10:39:14 -0300
+
+linux-snapdragon (4.4.0-1053.57) xenial; urgency=low
+
+ * linux-snapdragon: 4.4.0-1053.57 -proposed tracker (LP: #1674941)
+
+
+ [ Ubuntu: 4.4.0-70.91 ]
+
+ * linux: 4.4.0-70.91 -proposed tracker (LP: #1674938)
+ * snaps with classic + jailmode confinement started to fail on zesty
+ (LP: #1666897)
+ - Revert "UBUNTU: SAUCE: apparmor: fix link auditing failure due to,
+ uninitialized var"
+ - Revert "UBUNTU: SAUCE: fix regression with domain change in complain mode"
+ - Revert "UBUNTU: SAUCE: apparmor: flock mediation is not being enforced on
+ cache check"
+ - Revert "UBUNTU: SAUCE: apparmor: null profiles should inherit parent control
+ flags"
+ - Revert "UBUNTU: SAUCE: apparmor: fix ns ref count link when removing
+ profiles from policy"
+ - Revert "UBUNTU: SAUCE: apparmor: Fix no_new_privs blocking change_onexec
+ when using stacked namespaces"
+ - Revert "UBUNTU: SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup
+ fails"
+ - Revert "UBUNTU: SAUCE: apparmor: Don't audit denied access of special
+ apparmor .null file"
+ - Revert "UBUNTU: SAUCE: apparmor: fix label leak when new label is unused"
+ - Revert "UBUNTU: SAUCE: apparmor: fix reference count bug in
+ label_merge_insert()"
+ - Revert "UBUNTU: SAUCE: apparmor: fix replacement race in reading rawdata"
+ - Revert "UBUNTU: SAUCE: apparmor: fix cross ns perm of unix domain sockets"
+
+ -- Stefan Bader <stefan.bader@canonical.com> Wed, 22 Mar 2017 10:05:14 +0100
+
+linux-snapdragon (4.4.0-1051.55) xenial; urgency=low
+
+ [ Thadeu Lima de Souza Cascardo ]
+
+ * linux-snapdragon: 4.4.0-1051.55 -proposed tracker (LP: #1671191)
+ * Miscellaneous Ubuntu changes
+ - [Config] Sync config with master
+
+ [ Ubuntu: 4.4.0-67.88 ]
+
+ * linux: 4.4.0-67.88 -proposed tracker (LP: #1667052)
+ * Recent KVM RTC cherry-picks break (some) Windows Live-Migrations
+ (LP: #1668594)
+ - kvm: x86: correctly reset dest_map->vector when restoring LAPIC state
+ * Regression in 4.4.0-65-generic causes very frequent system crashes
+ (LP: #1669611)
+ - Revert "UBUNTU: SAUCE: apparmor: fix lock ordering for mkdir"
+ - Revert "UBUNTU: SAUCE: apparmor: fix leak on securityfs pin count"
+ - Revert "UBUNTU: SAUCE: apparmor: fix reference count leak when
+ securityfs_setup_d_inode() fails"
+ - Revert "UBUNTU: SAUCE: apparmor: fix not handling error case when
+ securityfs_pin_fs() fails"
+ * Upgrade Redpine RS9113 driver to support AP mode (LP: #1665211)
+ - SAUCE: Redpine driver to support Host AP mode
+ * NFS client : permission denied when trying to access subshare, since kernel
+ 4.4.0-31 (LP: #1649292)
+ - fs: Better permission checking for submounts
+ * [Hyper-V] SAUCE: pci-hyperv fixes for SR-IOV on Azure (LP: #1665097)
+ - SAUCE: PCI: hv: Fix wslot_to_devfn() to fix warnings on device removal
+ - SAUCE: pci-hyperv: properly handle pci bus remove
+ - SAUCE: pci-hyperv: lock pci bus on device eject
+ * [Hyper-V/Azure] Please include Mellanox OFED drivers in Azure kernel and
+ image (LP: #1650058)
+ - net/mlx4_en: Fix bad WQE issue
+ - net/mlx4_core: Fix racy CQ (Completion Queue) free
+ - net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT
+ transitions
+ - net/mlx4_core: Avoid command timeouts during VF driver device shutdown
+ * Xenial update to v4.4.49 stable release (LP: #1664960)
+ - ARC: [arcompact] brown paper bag bug in unaligned access delay slot fixup
+ - selinux: fix off-by-one in setprocattr
+ - Revert "x86/ioapic: Restore IO-APIC irq_chip retrigger callback"
+ - cpumask: use nr_cpumask_bits for parsing functions
+ - hns: avoid stack overflow with CONFIG_KASAN
+ - ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write
+ - target: Don't BUG_ON during NodeACL dynamic -> explicit conversion
+ - target: Use correct SCSI status during EXTENDED_COPY exception
+ - target: Fix early transport_generic_handle_tmr abort scenario
+ - target: Fix COMPARE_AND_WRITE ref leak for non GOOD status
+ - ARM: 8642/1: LPAE: catch pending imprecise abort on unmask
+ - mac80211: Fix adding of mesh vendor IEs
+ - netvsc: Set maximum GSO size in the right place
+ - scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed
+ send
+ - scsi: aacraid: Fix INTx/MSI-x issue with older controllers
+ - scsi: mpt3sas: disable ASPM for MPI2 controllers
+ - xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend()
+ - ALSA: seq: Fix race at creating a queue
+ - ALSA: seq: Don't handle loop timeout at snd_seq_pool_done()
+ - drm/i915: fix use-after-free in page_flip_completed()
+ - Linux 4.4.49
+ * NFS client : kernel 4.4.0-57 crash with nfsv4 enries in /etc/fstab
+ (LP: #1650336)
+ - SUNRPC: fix refcounting problems with auth_gss messages.
+ * [0bda:0328] Card reader failed after S3 (LP: #1664809)
+ - usb: hub: Wait for connection to be reestablished after port reset
+ * linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial
+ 4.4.0-63.84~14.04.2 (LP: #1664912)
+ - SAUCE: apparmor: fix link auditing failure due to, uninitialized var
+ * ibmvscsis: Add SGL LIMIT (LP: #1662551)
+ - ibmvscsis: Add SGL limit
+ * [Hyper-V] Bug fixes for storvsc (tagged queuing, error conditions)
+ (LP: #1663687)
+ - scsi: storvsc: Enable tracking of queue depth
+ - scsi: storvsc: Remove the restriction on max segment size
+ - scsi: storvsc: Enable multi-queue support
+ - scsi: storvsc: use tagged SRB requests if supported by the device
+ - scsi: storvsc: properly handle SRB_ERROR when sense message is present
+ - scsi: storvsc: properly set residual data length on errors
+ * ISST-LTE:pNV: ppc64_cpu command is hung w HDs, SSDs and NVMe (LP: #1662666)
+ - blk-mq: Avoid memory reclaim when remapping queues
+ - blk-mq: Fix failed allocation path when mapping queues
+ * Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1.bin for module
+ i915_bpo (LP: #1624164)
+ - SAUCE: i915_bpo: Remove MODULE_FIRMWARE statement for i915/kbl_dmc_ver1.bin
+ * Intel I210 ethernet does not work both after S3 (LP: #1662763)
+ - igb: implement igb_ptp_suspend
+ - igb: call igb_ptp_suspend during suspend/resume cycle
+ * [Hyper-V] Fix ring buffer handling to avoid host throttling (LP: #1661430)
+ - Drivers: hv: vmbus: On write cleanup the logic to interrupt the host
+ - Drivers: hv: vmbus: On the read path cleanup the logic to interrupt the host
+ - Drivers: hv: vmbus: finally fix hv_need_to_signal_on_read()
+ * brd module compiled as built-in (LP: #1593293)
+ - [Config] CONFIG_BLK_DEV_RAM=m
+ * regession tests failing after stackprofile test is run (LP: #1661030)
+ - SAUCE: fix regression with domain change in complain mode
+ * Permission denied and inconsistent behavior in complain mode with 'ip netns
+ list' command (LP: #1648903)
+ - SAUCE: fix regression with domain change in complain mode
+ * flock not mediated by 'k' (LP: #1658219)
+ - SAUCE: apparmor: flock mediation is not being enforced on cache check
+ * unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt
+ from a unshared mount namespace (LP: #1656121)
+ - SAUCE: apparmor: null profiles should inherit parent control flags
+ * apparmor refcount leak of profile namespace when removing profiles
+ (LP: #1660849)
+ - SAUCE: apparmor: fix ns ref count link when removing profiles from policy
+ * tor in lxd: apparmor="DENIED" operation="change_onexec"
+ namespace="root//CONTAINERNAME_<var-lib-lxd>" profile="unconfined"
+ name="system_tor" (LP: #1648143)
+ - SAUCE: apparmor: Fix no_new_privs blocking change_onexec when using stacked
+ namespaces
+ * apparmor_parser hangs indefinitely when called by multiple threads
+ (LP: #1645037)
+ - SAUCE: apparmor: fix lock ordering for mkdir
+ * apparmor leaking securityfs pin count (LP: #1660846)
+ - SAUCE: apparmor: fix leak on securityfs pin count
+ * apparmor reference count leak when securityfs_setup_d_inode\ () fails
+ (LP: #1660845)
+ - SAUCE: apparmor: fix reference count leak when securityfs_setup_d_inode()
+ fails
+ * apparmor not checking error if security_pin_fs() fails (LP: #1660842)
+ - SAUCE: apparmor: fix not handling error case when securityfs_pin_fs() fails
+ * apparmor oops in bind_mnt when dev_path lookup fails (LP: #1660840)
+ - SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup fails
+ * apparmor auditing denied access of special apparmor .null fi\ le
+ (LP: #1660836)
+ - SAUCE: apparmor: Don't audit denied access of special apparmor .null file
+ * apparmor label leak when new label is unused (LP: #1660834)
+ - SAUCE: apparmor: fix label leak when new label is unused
+ * apparmor reference count bug in label_merge_insert() (LP: #1660833)
+ - SAUCE: apparmor: fix reference count bug in label_merge_insert()
+ * apparmor's raw_data file in securityfs is sometimes truncated (LP: #1638996)
+ - SAUCE: apparmor: fix replacement race in reading rawdata
+ * unix domain socket cross permission check failing with nested namespaces
+ (LP: #1660832)
+ - SAUCE: apparmor: fix cross ns perm of unix domain sockets
+ * docker permission issues with overlay2 storage driver (LP: #1659417)
+ - SAUCE: overlayfs: Replace ovl_prepare_creds() with ovl_override_creds()
+ - Revert "UBUNTU: SAUCE: cred: Add clone_cred() interface"
+ - ovl: check mounter creds on underlying lookup
+ * Enable CONFIG_NET_DROP_MONITOR=m in Ubuntu Kernel (LP: #1660634)
+ - [Config] CONFIG_NET_DROP_MONITOR=m
+ * Xenial update to v4.4.48 stable release (LP: #1663657)
+ - PCI/ASPM: Handle PCI-to-PCIe bridges as roots of PCIe hierarchies
+ - ext4: validate s_first_meta_bg at mount time
+ - drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
+ - drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
+ - crypto: api - Clear CRYPTO_ALG_DEAD bit before registering an alg
+ - crypto: arm64/aes-blk - honour iv_out requirement in CBC and CTR modes
+ - perf/core: Fix PERF_RECORD_MMAP2 prot/flags for anonymous memory
+ - ata: sata_mv:- Handle return value of devm_ioremap.
+ - libata: apply MAX_SEC_1024 to all CX1-JB*-HP devices
+ - powerpc/eeh: Fix wrong flag passed to eeh_unfreeze_pe()
+ - powerpc: Add missing error check to prom_find_boot_cpu()
+ - NFSD: Fix a null reference case in find_or_create_lock_stateid()
+ - svcrpc: fix oops in absence of krb5 module
+ - zswap: disable changing params if init fails
+ - cifs: initialize file_info_lock
+ - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone()
+ - mm, fs: check for fatal signals in do_generic_file_read()
+ - can: bcm: fix hrtimer/tasklet termination in bcm op removal
+ - mmc: sdhci: Ignore unexpected CARD_INT interrupts
+ - percpu-refcount: fix reference leak during percpu-atomic transition
+ - HID: wacom: Fix poor prox handling in 'wacom_pl_irq'
+ - KVM: x86: do not save guest-unsupported XSAVE state
+ - USB: serial: qcserial: add Dell DW5570 QDL
+ - USB: serial: pl2303: add ATEN device ID
+ - USB: Add quirk for WORLDE easykey.25 MIDI keyboard
+ - usb: gadget: f_fs: Assorted buffer overflow checks.
+ - USB: serial: option: add device ID for HP lt2523 (Novatel E371)
+ - x86/irq: Make irq activate operations symmetric
+ - base/memory, hotplug: fix a kernel oops in show_valid_zones()
+ - Linux 4.4.48
+ * Xenial update to v4.4.47 stable release (LP: #1662507)
+ - r8152: fix the sw rx checksum is unavailable
+ - mlxsw: spectrum: Fix memory leak at skb reallocation
+ - mlxsw: switchx2: Fix memory leak at skb reallocation
+ - mlxsw: pci: Fix EQE structure definition
+ - net: lwtunnel: Handle lwtunnel_fill_encap failure
+ - net: ipv4: fix table id in getroute response
+ - net: systemport: Decouple flow control from __bcm_sysport_tx_reclaim
+ - tcp: fix tcp_fastopen unaligned access complaints on sparc
+ - openvswitch: maintain correct checksum state in conntrack actions
+ - ravb: do not use zero-length alignment DMA descriptor
+ - ax25: Fix segfault after sock connection timeout
+ - net: fix harmonize_features() vs NETIF_F_HIGHDMA
+ - net: phy: bcm63xx: Utilize correct config_intr function
+ - ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock
+ - tcp: initialize max window for a new fastopen socket
+ - bridge: netlink: call br_changelink() during br_dev_newlink()
+ - r8152: don't execute runtime suspend if the tx is not empty
+ - af_unix: move unix_mknod() out of bindlock
+ - qmi_wwan/cdc_ether: add device ID for HP lt2523 (Novatel E371) WWAN card
+ - net: dsa: Bring back device detaching in dsa_slave_suspend()
+ - Linux 4.4.47
+ * Xenial update to v4.4.46 stable release (LP: #1660994)
+ - fbdev: color map copying bounds checking
+ - tile/ptrace: Preserve previous registers for short regset write
+ - drm: Fix broken VT switch with video=1366x768 option
+ - mm/mempolicy.c: do not put mempolicy before using its nodemask
+ - sysctl: fix proc_doulongvec_ms_jiffies_minmax()
+ - ISDN: eicon: silence misleading array-bounds warning
+ - RDMA/cma: Fix unknown symbol when CONFIG_IPV6 is not enabled
+ - s390/ptrace: Preserve previous registers for short regset write
+ - can: c_can_pci: fix null-pointer-deref in c_can_start() - set device pointer
+ - can: ti_hecc: add missing prepare and unprepare of the clock
+ - ARC: udelay: fix inline assembler by adding LP_COUNT to clobber list
+ - ARC: [arcompact] handle unaligned access delay slot corner case
+ - parisc: Don't use BITS_PER_LONG in userspace-exported swab.h header
+ - nfs: Don't increment lock sequence ID after NFS4ERR_MOVED
+ - NFSv4.0: always send mode in SETATTR after EXCLUSIVE4
+ - SUNRPC: cleanup ida information when removing sunrpc module
+ - drm/i915: Don't leak edid in intel_crt_detect_ddc()
+ - IB/ipoib: move back IB LL address into the hard header
+ - IB/umem: Release pid in error and ODP flow
+ - s5k4ecgx: select CRC32 helper
+ - pinctrl: broxton: Use correct PADCFGLOCK offset
+ - platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT
+ - mm, memcg: do not retry precharge charges
+ - Linux 4.4.46
+ * Xenial update to v4.4.45 stable release (LP: #1660993)
+ - ftrace/x86: Set ftrace_stub to weak to prevent gcc from using short jumps to
+ it
+ - IB/mlx5: Wait for all async command completions to complete
+ - IB/mlx4: Set traffic class in AH
+ - IB/mlx4: Fix out-of-range array index in destroy qp flow
+ - IB/mlx4: Fix port query for 56Gb Ethernet links
+ - IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
+ - IB/IPoIB: Remove can't use GFP_NOIO warning
+ - perf scripting: Avoid leaking the scripting_context variable
+ - ARM: dts: imx31: fix clock control module interrupts description
+ - ARM: dts: imx31: move CCM device node to AIPS2 bus devices
+ - ARM: dts: imx31: fix AVIC base address
+ - tmpfs: clear S_ISGID when setting posix ACLs
+ - x86/PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
+ - svcrpc: don't leak contexts on PROC_DESTROY
+ - fuse: clear FR_PENDING flag when moving requests out of pending queue
+ - PCI: Enumerate switches below PCI-to-PCIe bridges
+ - HID: corsair: fix DMA buffers on stack
+ - HID: corsair: fix control-transfer error handling
+ - mmc: mxs-mmc: Fix additional cycles after transmission stop
+ - ieee802154: atusb: do not use the stack for buffers to make them DMA able
+ - mtd: nand: xway: disable module support
+ - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
+ - qla2xxx: Fix crash due to null pointer access
+ - ubifs: Fix journal replay wrt. xattr nodes
+ - clocksource/exynos_mct: Clear interrupt when cpu is shut down
+ - svcrdma: avoid duplicate dma unmapping during error recovery
+ - ARM: 8634/1: hw_breakpoint: blacklist Scorpion CPUs
+ - ceph: fix bad endianness handling in parse_reply_info_extra
+ - ARM: dts: da850-evm: fix read access to SPI flash
+ - arm64/ptrace: Preserve previous registers for short regset write
+ - arm64/ptrace: Preserve previous registers for short regset write - 2
+ - arm64/ptrace: Preserve previous registers for short regset write - 3
+ - arm64/ptrace: Avoid uninitialised struct padding in fpr_set()
+ - arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields
+ - ARM: dts: imx6qdl-nitrogen6_max: fix sgtl5000 pinctrl init
+ - ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation
+ - ARM: 8613/1: Fix the uaccess crash on PB11MPCore
+ - blackfin: check devm_pinctrl_get() for errors
+ - ite-cir: initialize use_demodulator before using it
+ - dmaengine: pl330: Fix runtime PM support for terminated transfers
+ - selftest/powerpc: Wrong PMC initialized in pmc56_overflow test
+ - arm64: avoid returning from bad_mode
+ - Linux 4.4.45
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Wed, 08 Mar 2017 15:07:51 -0300
+
linux-snapdragon (4.4.0-1050.54) xenial; urgency=low
[ Ubuntu: 4.4.0-66.87 ]