Commit Graph

5659 Commits

Author SHA1 Message Date
Ben Hutchings 8cc382f208 sctp: fix race on protocol/netns initialization (CVE-2015-5283) 2015-09-27 13:30:23 +01:00
Ben Hutchings b2a13150ad [hppa/parisc64-smp,mips*el/loongson-3] udeb: Remove i2c-modules again (fixes FTBFS)
The drivers that belong in it are actually built-in.  Adjust the
config to make sure this remains true.
2015-09-27 13:19:53 +01:00
Ben Hutchings d49b6d39b2 [mips*] udeb: Remove 'Provides: ata-modules' from kernel-image
ata-modules is a real package now.
2015-09-27 13:12:48 +01:00
Ben Hutchings 5cdb1bae58 Update to 4.3-rc2
Drop a load of patches that went upstream.
Drop aic94xx patch which was obsoleted by a different fix upstream.
Refresh remaining patches.
2015-09-26 17:25:45 +01:00
Ben Hutchings 1554dfda02 media: uvcvideo: Disable hardware timestamps by default (Closes: #794327) 2015-09-26 16:41:18 +01:00
Ben Hutchings d55c08c867 Prepare to release linux (4.2.1-1). 2015-09-25 18:18:28 +01:00
Ben Hutchings 9f0e754c60 USB: whiteheat: fix potential null-deref at probe (CVE-2015-5257) 2015-09-25 17:46:08 +01:00
Ben Hutchings a94e67cc3f mm: Change ZBUD back to built-in
It's not really useful as a module.  Currently we get the following
error messages on boot:

zpool: no driver for type zbud
zswap: zbud zpool not available
zswap: zpool creation failed
2015-09-24 02:46:27 +01:00
Ben Hutchings f0fc9d4c04 mmc: Drop "eMMC: Don't initialize partitions on RPMB flagged areas"
Upstream commit 4e93b9a6abc0 ("mmc: card: Don't access RPMB partitions for
normal read/write") looks like a cleaner solution.
2015-09-22 23:48:38 +02:00
Ben Hutchings 30da8b4d4f e1000e: Fix tight loop implementation of systime read algorithm 2015-09-22 20:33:59 +02:00
Ben Hutchings 20ad6e5150 Set ABI to 1 2015-09-22 00:34:02 +02:00
Ben Hutchings 951b3a81ce Update to 4.2.1 2015-09-22 00:33:36 +02:00
Ben Hutchings 999c1923b1 Correct list of patches for CVE-2015-2925, which differs from jessie-security 2015-09-19 03:31:53 +02:00
Ben Hutchings 57644b0054 RDS: verify the underlying transport exists before creating a connection (CVE-2015-6937) 2015-09-19 03:25:49 +02:00
Ben Hutchings 4cfa583b64 aufs: Update support patches to aufs4.x-rcN-20150921
mmap: Fix races in madvise_remove() and sys_msync() (Closes: #796036)
2015-09-19 03:20:55 +02:00
Ben Hutchings 5932de869a vfs: Fix possible escape from mount namespace (CVE-2015-2925) 2015-09-19 03:15:21 +02:00
Ben Hutchings dd220fc567 workqueue: Make flush_workqueue() available again to non GPL modules (Closes: #798311) 2015-09-08 12:46:57 +01:00
Ben Hutchings 9ab2d09570 Note that Aurelien's mipsel patches fix FTBFS 2015-09-05 21:16:58 +01:00
Aurelien Jarno 5c7b00ac36 [mips*el] Fix BPF assembly code for pre-R2 CPUs. 2015-09-05 19:40:41 +02:00
Ben Hutchings 8298497d1b [hppa/parisc64-smp,[mips*el/loongson-3] udeb: Add i2c-modules
...and make fb-modules depend on it rather than including I2C modules
directly.
2015-09-02 00:52:18 +01:00
Ben Hutchings 71fa5e2811 [mips*el/loongson-3] udeb: Add fb-modules containing radeon driver (Closes: #776274) 2015-09-02 00:48:44 +01:00
Ben Hutchings f2872597b0 Prepare to release linux (4.2-1~exp1). 2015-08-31 10:13:27 +01:00
Ben Hutchings 10d489d31f linux-support: Build with dh_python3 and set dependencies accordingly 2015-08-31 02:05:52 +01:00
Ben Hutchings 197e29aab4 debian/rules.real: Stop overriding interpreter for Python scripts 2015-08-31 02:00:26 +01:00
Ben Hutchings f56a30a44d Remove claim that gfs2 broke the build on mips 2015-08-30 21:00:56 +01:00
Ben Hutchings 82221fd0e0 Update to 4.2 2015-08-30 20:59:07 +01:00
Ben Hutchings 44ea8344d6 debian/bin/genorig.py: Make orig tarballs reproducible
Sort the tarball contents and set their mtimes to the upstream
release time.  (In case we're given a tarball and patch, the
release time is unknown and the result is not reproducible.  So
don't do that.)
2015-08-29 23:59:33 +01:00
Ben Hutchings 6b977589fb debian/bin,debian/control,debian/lib/python: Use Python 3 2015-08-29 21:48:39 +01:00
Ben Hutchings 32fff0de75 DocBook: Use a fixed encoding for output
This was the last blocker for reproduciblity, so close that bug.
2015-08-27 09:44:20 +01:00
Ben Hutchings ef829fca16 [sparc] Remove linux-image, linux-header and udeb packages
They are redundant with sparc64 and neither is an official port.
2015-08-26 18:16:15 +01:00
Ben Hutchings bbd5771c11 Update config for symbol changes in 4.2
Re-enable various config options disabled by name changes:
- SUNRPC_XPRT_RDMA replaced SUNRPC_XPRT_RDMA_{CLIENT,SERVER}
- [mips*el/loongson*] LOONGSON64 replaced LOONGSON
- [x86] COMEDI_8255_SA replaced COMEDI_8255

Drop explicit settings for symbols that are now automatic.
2015-08-26 02:00:47 +01:00
Ben Hutchings 4915f84088 [amd64] Enable KALLSYMS_ALL (Closes: #660288), LIVEPATCH 2015-08-26 01:50:39 +01:00
Ben Hutchings d477438be7 gfs2: Make statistics unsigned, suitable for use with do_div()
Fixes FTBFS on mips,mipsel,m68k.
2015-08-26 01:43:52 +01:00
Ben Hutchings 48cb343ec0 linux-source: Depend on xz-utils, not bzip2 (Closes: #796940) 2015-08-26 00:18:28 +01:00
Ben Hutchings 84fd2d0c10 [s390x] Compile with gcc-4.9 (Closes: #796845) 2015-08-25 23:54:56 +01:00
Ben Hutchings ace247de5b Remove all support for ia64
Close all bugs related to ia64.
2015-08-25 23:48:44 +01:00
Ben Hutchings 12eadbcd9e Prepare to release linux (4.2~rc8-1~exp1). 2015-08-24 14:21:24 +01:00
Ben Hutchings 2431b0ab35 Update to 4.2-rc8 2015-08-24 11:00:47 +01:00
Ben Hutchings a068417196 Release linux (4.1.6-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVdonkee/yOyVhhEJAQr/XRAAtXjWzvooBEh+0bwP2lPgunnOGhQmPfXb
 LGGQbddr5k1oRRdDSb8j9m4uR9zZxeggO0evhBtx0ISXKGMv59k4EUzFk1J9H0AK
 5Z3u94hycX6bRlOvHpdh+4EIG2uNVRd21vwTEjeq43Y/5GyagfAXXx+qRKi7Qvz6
 j0GrGzY9RiP1LHTfR0M71JBrPXhjDJWM+luDlIO63TfMMlpPlqEgJbNvCZsfZyjn
 Fgqm5GeaGtR6pEV4YHhogNZoh34HkGt6J27aOVo8n/mEx5zz45i1tF73bKUhLMB5
 AKFMNVzueExmBhQKKmc0iE241Oc2uxY3dsfFwOsFa4jlbHF7ZNzxO9hWzUt/0T0D
 HiZdTqBC+PgNfgAhiirU38+h5LZ/clhoortNZNFI43uUK4Ee0CRGt+ASrcLZkbu9
 8yQfOUjLng+PJq5nhEcYRsPaSqoqp8jr8LBPm6Ow+oHQyjM1VzAOqEsBpFAUGRhD
 DkMbrQd8oj3LvBqnIOhEzVfRXcrhIj/RXzPzcV5JvPYWA6bAi1gLR2uqTrSn+qjx
 0sUueg34Z6/IkHGa9uC9kjK2IsiDX4IPK7SDiHJgSyXuAv24Mfu33W5Ra2BKCFau
 f8rwQ6+yZYAGLov7v2eEQCOadf4B8ORu46Y+X+oWlQsrXWONziOxKB+UGlYNUlJR
 6B04B7sMAUA=
 =NbeF
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.1.6-1'

Conflicts:
	debian/changelog
	debian/config/defines
	debian/installer/mips/package-list
	debian/patches/bugfix/all/perf-fix-double-free-of-the-aux-buffer.patch
	debian/patches/series
2015-08-23 21:15:34 +01:00
Ben Hutchings ca8d04c73d Prepare to release linux (4.1.6-1). 2015-08-23 12:20:14 +02:00
Ben Hutchings ee3a08efd5 ovl: Revert changes in 4.1.5-1 due to regression (Reopens: #786925)
In particular, "fix a braino in ovl_d_select_inode()" introduced a
type error and potential crash because we still have ovl_dentry_open()
not ovl_d_select_inode().  Doing this properly requires an ABI change.
2015-08-23 12:19:12 +02:00
Ben Hutchings d360ab37b9 Improve changelog for stable update 4.1.6
Delete entries for commits that are unimportant.

Add architecture qualifications, regression versions and one bug number.
2015-08-22 20:39:54 +02:00
Ben Hutchings 9f602f3712 perf: Fix AUX buffer refcounting 2015-08-22 19:26:40 +02:00
Ben Hutchings cbf8872266 Update to 4.1.6
Drop patches applied upstream.
Ignore an ABI change in ppc crypto drivers.
2015-08-22 19:25:31 +02:00
Ben Hutchings f26069abfa [i386] udeb: Make gpio_keys_polled and leds-gpio optional in input-modules
They are not built for the 686-pae flavour, only 586.
Fixes FTBFS.
2015-08-22 19:00:59 +02:00
Ben Hutchings 808dfebf84 Release linux (4.1.5-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVdBSmOe/yOyVhhEJAQobgA//cuk5WYNUbO3wRi3Sk1RhrH5vJk1TTWPN
 8KXa3OLhoFz04FxZ4zgNBlW52bTsMcL1rVlPjpK4jUS8WMcCEWVARps62K4VVomw
 CrZvrBpzLoSPN6Eux5NTkA5/JypnGXPDJ46Dd0LApx9A3UcKWw6u4uWCTyJyhJVd
 BSGFQwjcjJV7+WGw2ozV3fZFgwLbVyrvnIpMRwIwFnR61uAS2qy89HBTvfCk5h6m
 zqeJmmiSKOVbOxrDtyRRiUN9yFflUuSsxbIfbB+O02qSb6bhKpfTUVOQN7WoQRHs
 42culA2269r2gC0OkYwOQu1qm3TGoFafBqa5BhLYOKx8s/OXzW/zLJpaxVeewL2R
 tDHm5ZRqmO9fnUB4x3qI46uxQXr5XC2i/L2RppIOcnImZk7/qytn90KTTWIz2mUN
 Flj+K1nI3szkiQQROYXE7oKyMdBQu45V3oHifZM6HI9iklUL0BRo0jdnXxvji82V
 OL0VrmCymlKGa/OPjwN6SJa0bZ7NCTlJaG1axsMAVtovY7xaIdk0RcsQJBRQeQpu
 5ebTP9qDHPS5s6UeDJ4yGlv8moLGSQieYpcWHUiLgadE8EGR5/1ykrfc3FsuWS+G
 xCAYoC20G33+krI7mXMQyHil3w4OtYIvaV4LtrxXNRgbixdrP4MVzJMkoPmLLgBH
 J+pFZOgfG2c=
 =7MCr
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.1.5-1'

Conflicts:
	debian/changelog
	debian/patches/series
	debian/rules.real
	debian/templates/control.source.in
2015-08-22 18:07:50 +02:00
Ben Hutchings 13be7e1afd Documentation: Avoid creating man pages in source tree
kernel-doc can currently generate dummy DocBook files using
absolute paths as their titles, which results in man pages being
created in the source tree (and thus going into linux-headers
and linux-source packages).
2015-08-21 22:47:31 +02:00
Ben Hutchings b60f5c4de1 Set LC_ALL=C.UTF-8 for all builds
Upstream sets LC_ALL=C when building most things, and we do that in
one place to ensure consistent ordering.  However the encoding of HTML
docs still differs.  Choose 'C.UTF-8' instead of 'C' because it makes
the HTML docs slightly smaller.
2015-08-21 17:10:12 +02:00
Ben Hutchings c2de3cfb20 debian/control: Correct build-dependency on xz-utils, needed on all arches
Currently we have xz-utils in build-depends-indep as we explicitly
use xz to compress files in linux-source.  We also have a build-
dependency on lzma (now a virtual package provided by xz-utils),
but only on armel which was the first architecture for which we
set CONFIG_KERNEL_XZ=y.

However, since 3.7 we've set CONFIG_KERNEL_XZ for all architectures so
xz-utils is needed everywhere.  Currently we get away with this
because dpkg-dev depends on xz-utils, but this could change in future.
Build-depend on xz-utils without qualification.
2015-08-21 13:08:46 +02:00
Aurelien Jarno 2b363f8a38 mips: Remove r4k-ip22, r5k-ip32 and sb1-bcm91250a flavours. 2015-08-20 23:05:44 +02:00
Aurelien Jarno 081ba19db9 [mips*] Build ext4 as module. Add core-modules and ext4-modules udeb. Fixes FTBFS. 2015-08-20 16:21:08 +02:00
Aurelien Jarno 054d5ce461 [mips*] Build ext4 as module. Add core-modules and ext4-modules udeb. Fixes FTBFS. 2015-08-20 03:37:04 +02:00
Ben Hutchings 68176287bf Update to 4.2-rc7 2015-08-17 10:39:21 +02:00
Ben Hutchings 1243269850 Prepare to release linux (4.1.5-1). 2015-08-15 23:37:31 +02:00
Ben Hutchings 4d2f117436 udeb: Move eeprom_93cx6 to core-modules; make scsi-extra-modules depend on it
Previously it was in nic-wireless-modules as several wireless drivers
depend on it, but now wd719x in scsi-extra-modules does as well.
2015-08-15 21:59:33 +02:00
Ben Hutchings 3d5d7d8cf6 udeb: Add newly enabled drivers 2015-08-15 12:51:18 +02:00
Ben Hutchings 7e2d688bde Prepare to release linux (4.2~rc6-1~exp1). 2015-08-12 20:48:26 +02:00
Ben Hutchings 098767bfb6 debian/control: Drop Frederik Schüler from Uploaders
He hasn't been active on this package for many years.
2015-08-12 20:45:39 +02:00
Ben Hutchings 3bb9b71582 linux-source: Fix compression of the source tarball (Closes: #795199)
When we introduced the find | sort | xargs tar pipeline to make the
tarball reproducible, I was concerned that there could be so many
arguments that xargs would call tar more than once.  I therefore
changed the tar -c option to -r so that it would append rather
than overwriting in this case.

However, the -a option seems to have no effect when -r is used, so
the tarball is no longer compressed.

Instead of using xargs, use tar's -T option and change the -r
back to -c.
2015-08-12 18:02:17 +02:00
Ben Hutchings b13fc71d7e perf: Fix double-free of the AUX buffer 2015-08-12 17:35:24 +02:00
Ben Hutchings eca2a3e0eb Improve changelog for stable updates 4.1.4, 4.1.5
Delete entries for commits that are unimportant or previously cherry-
picked.

Add architecture qualifications, regression versions and one bug number.
2015-08-12 17:35:18 +02:00
Ben Hutchings 517cfd5213 ovl: Add support for NFS as lower filesystem (Closes: #786925) 2015-08-12 12:20:56 +02:00
Ben Hutchings 21364b6286 virtio-net: drop NETIF_F_FRAGLIST (CVE-2015-5156) 2015-08-11 22:54:01 +02:00
Ben Hutchings 279bfdad45 Bump ABI to 2
There are far too many changes to work around.
2015-08-11 22:46:56 +02:00
Ben Hutchings 431395942e Update to 4.1.5 2015-08-11 21:48:34 +02:00
Ben Hutchings ecae9d006f README.Debian, README.source: Update references to svn
(cherry picked from commit 3925828ee5)
2015-08-11 20:33:17 +02:00
Ben Hutchings de372d7baf Update Vcs-* fields to point to git
(cherry picked from commit c388a4feae)
2015-08-11 20:33:12 +02:00
Ben Hutchings ea0978d10c Update .gitignore files based on svn:ignore properties
For the top-level .gitignore, do this via the existing patch.

(cherry picked from commit 55cf50555a)
2015-08-11 20:32:57 +02:00
Ben Hutchings c97aa4ac68 [rt] Disable until it is updated for 4.2 or later 2015-08-11 20:26:50 +02:00
Ben Hutchings 5058702df6 Update to 4.2-rc6 2015-08-11 20:20:40 +02:00
Ben Hutchings 3925828ee5 README.Debian, README.source: Update references to svn 2015-08-11 18:20:05 +02:00
Ben Hutchings c388a4feae Update Vcs-* fields to point to git 2015-08-11 18:17:44 +02:00
Ben Hutchings 55cf50555a Update .gitignore files based on svn:ignore properties
For the top-level .gitignore, do this via the existing patch.
2015-08-11 18:16:38 +02:00
Ben Hutchings 9c536d2d2e [x86] iio: Enable drivers for ACPI-discoverable devices as modules
svn path=/dists/sid/linux/; revision=22937
2015-08-10 09:53:41 +00:00
Ian Campbell 8db2f2efff [armhf] Enable cpufreq on some sunxi platforms (Closes: #793185)
svn path=/dists/sid/linux/; revision=22926
2015-08-04 21:10:12 +00:00
Ben Hutchings 79f636b4bf Update to 4.2-rc5
Refresh/drop patches as needed.

svn path=/dists/trunk/linux/; revision=22909
2015-08-04 01:30:23 +00:00
Ben Hutchings f2378f0aa3 Prepare to release linux (4.1.3-1.
svn path=/dists/trunk/linux/; revision=22894
2015-08-03 22:17:40 +00:00
Ben Hutchings a23c852af4 Set ABI to 1
svn path=/dists/trunk/linux/; revision=22893
2015-08-03 21:17:11 +00:00
Ben Hutchings 621e438f4d security: Apply and enable GRKERNSEC_PERF_HARDEN feature from Grsecurity
This disables use of perf_event_open() by unprivileged users by default
(sysctl: kernel.perf_event_paranoid)

svn path=/dists/trunk/linux/; revision=22892
2015-08-03 12:04:26 +00:00
Ben Hutchings 97c02bf649 debug: Enable DEBUG_LIST
svn path=/dists/trunk/linux/; revision=22891
2015-08-03 02:18:33 +00:00
Ben Hutchings d9cb28cc2e Enable various new features
svn path=/dists/trunk/linux/; revision=22890
2015-08-03 01:29:25 +00:00
Ben Hutchings f3a0728b97 md: use kzalloc() when bitmap is disabled (CVE-2015-5697)
svn path=/dists/trunk/linux/; revision=22886
2015-08-03 00:38:33 +00:00
Ben Hutchings 890d5dc0aa [s390x] cachinfo: add missing facility check to init_cache_level() (Closes: #793929)
svn path=/dists/trunk/linux/; revision=22873
2015-07-29 03:28:09 +00:00
Ben Hutchings dc0f1f767e [i386/586] Enable KEYBOARD_GPIO_POLLED and LEDS_GPIO as modules, and ALIX, NET5501, GEOS (Closes: #734204)
svn path=/dists/trunk/linux/; revision=22872
2015-07-29 03:19:30 +00:00
Ben Hutchings e3254e2395 Add bug closure for fixing uboot-mkimage recommendation
svn path=/dists/trunk/linux/; revision=22869
2015-07-28 22:47:46 +00:00
Ben Hutchings 0c20c49a4d [armel,sh4] linux-image: Recommend u-boot-tools rather than the obsolete uboot-mkimage package
svn path=/dists/trunk/linux/; revision=22868
2015-07-28 22:47:13 +00:00
Ben Hutchings dddb4f3bd6 Set next version to 4.1.3-1 as it will be uploaded to unstable
svn path=/dists/trunk/linux/; revision=22865
2015-07-27 18:18:16 +00:00
Ben Hutchings 4272044bc9 KEYS: ensure we free the assoc array edit if edit is valid (CVE-2015-1333)
svn path=/dists/trunk/linux/; revision=22862
2015-07-27 18:12:37 +00:00
Ben Hutchings 88728c5842 [rt] Update to 4.1.3-rt3 and re-enable
svn path=/dists/trunk/linux/; revision=22861
2015-07-27 13:27:47 +00:00
Ben Hutchings 42b6cc2f10 debian/rules.real: Use dpkg-parsechangelog -S
This option is supported since dpkg 1.17 (i.e. jessie) and allows a
nice little clean-up.

svn path=/dists/trunk/linux/; revision=22852
2015-07-24 20:49:22 +00:00
Ben Hutchings 1617b3f14e Merge changes from sid up to 4.0.8-2
Drop the new rt patches.
Forward-port the NMI fixes to 4.1 (hopefully correctly).

svn path=/dists/trunk/linux/; revision=22851
2015-07-23 01:24:14 +00:00
Ben Hutchings 3209e6d2f9 Update to 4.1.3
svn path=/dists/trunk/linux/; revision=22850
2015-07-23 01:01:27 +00:00
Ben Hutchings ac312fb927 Prepare to release linux (4.0.8-2).
svn path=/dists/sid/linux/; revision=22848
2015-07-22 23:44:02 +00:00
Ben Hutchings 561e869fda [amd64] Fix nested NMI handling (CVE-2015-3290, CVE-2015-3291, CVE-2015-5157)
svn path=/dists/sid/linux/; revision=22842
2015-07-22 20:46:22 +00:00
Uwe Kleine-König 2017c10b63 [rt] Update to 4.0.8-rt6
svn path=/dists/sid/linux/; revision=22841
2015-07-22 18:42:19 +00:00
Ian Campbell 7a2b15aea6 [armhf] Enable new drivers for sunxi platforms (Closes: #792388)
svn path=/dists/trunk/linux/; revision=22839
2015-07-17 07:29:12 +00:00
Ian Campbell bb9ae7db61 [armhf] Set CONFIG_ARM_TEGRA_CPUFREQ as builtin.
It seems to have always been a bool and not a tristate.

svn path=/dists/trunk/linux/; revision=22838
2015-07-17 07:29:09 +00:00
Ben Hutchings ef7d1869f8 [armel/kirkwood] ubi: Change UBIFS_FS and MTD_UBI from built-in to modules, to reduce kernel image size (fixes FTBFS)
svn path=/dists/trunk/linux/; revision=22836
2015-07-15 18:47:14 +00:00
Ben Hutchings 9f5f8ba82a Prepare to release linux (4.1.2-1~exp1).
svn path=/dists/trunk/linux/; revision=22827
2015-07-11 18:29:38 +00:00
Ben Hutchings 78a37b81ea Add bug number for disabling VM86
svn path=/dists/trunk/linux/; revision=22826
2015-07-11 17:01:38 +00:00