- patches.fixes/rose-add-length-checks-to-CALL_REQUEST-parsing.patch:
rose: Add length checks to CALL_REQUEST parsing (bnc#681175).
- patches.fixes/rose-prevent-heap-corruption-with-bad-facilities.patch:
ROSE: prevent heap corruption with bad facilities (bnc#681175).

- patches.fixes/prevent-rt_sigqueueinfo-from-spoofing-fix.patch:
Relax si_code check in rt_sigqueueinfo and rt_tgsigqueueinfo
(bnc#681826).

- patches.fixes/epoll-prevent-circular-references.patch: epoll:
prevent creating circular epoll structures (CVE-2011-1082
bnc#676202).

- patches.drivers/gro-Reset-dev-pointer-on-reuse.patch: gro:
Reset dev pointer on reuse (bnc#682965, CVE-2011-1478).
- patches.drivers/gro-reset-skb_iif-on-reuse.patch: gro: reset
skb_iif on reuse (bnc#682965, CVE-2011-1478).

- patches.fixes/ldm-partition-table-fix.patch: ldm: corrupted
partition table can cause kernel oops (CVE-2011-1012
bnc#674254).
- patches.fixes/mac-partition-table-fix.patch: fs/partitions:
Validate map_count in Mac partition tables (CVE-2011-1010
bnc#673929).
- patches.fixes/osf-partition-table-fix.patch: Fix corrupted
OSF partition table parsing (bnc#679812).

- patches.fixes/page_cgroup-reduce-allocation-overhead.patch:
page_cgroup: reduce allocation overhead for page_cgroup array
for CONFIG_SPARSEMEM (bnc#669889).