Ben Hutchings
0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
Ben Hutchings
be339ddfdd
aufs: Update support patchset to aufs4.x-rcN-20170410
2017-04-20 01:48:49 +01:00
Ben Hutchings
327c328b54
Update to 4.11-rc7 (and credit Lukas for his previous work)
2017-04-20 01:11:22 +01:00
Lukas Wunner
f26f2a520d
Update to 4.11-rc6
...
Remove merged patches and rebase remaining patches.
A portion of the secureboot patches have been upstreamed, but were
changed substantially during review, primarily to avoid code
duplication among arches. I've stripped the patches of the merged
bits and rebased the remainder.
Signed-off-by: Lukas Wunner <lukas@wunner.de>
[bwh: Undo some incorrect context changes in
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch]
2017-04-20 00:15:17 +01:00
Ben Hutchings
c59213f33a
Prepare to release linux (4.10.7-1~exp1).
2017-03-31 00:41:15 +01:00
Ben Hutchings
9ee9c719d0
Enable BUG_ON_DATA_CORRUPTION
...
This means errors detected by DEBUG_LIST result in BUG rather than WARN.
2017-03-31 00:33:12 +01:00
Ben Hutchings
fa49af3f6b
[s390x] Set NR_CPUS=256 ( Closes : #858731 )
2017-03-31 00:02:59 +01:00
Ben Hutchings
500ce0c9cd
netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules ( Closes : #858897 )
2017-03-31 00:02:01 +01:00
Ben Hutchings
459f0a48e4
Release linux (4.9.18-1).
...
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAljcf5EACgkQ57/I7JWG
EQmFcQ/8DoBxenUbNW5cY+YbwBKsjuBb8Q6gnqQLOX/JtOJ8MtpQ1t2QQPvMYdXJ
PTcNZAKm8mrsWJxos9WsUHjkdrfuLAsMTisC5FvDkE6myBt++GH3gRtKCT0A2nep
ZU17YeHYfcqv6UK90Jg0p+xAKQEEqKZrryP7fvb8oX5wOORwlLMxBScErftbB/vV
hBvwybq7gfA/4KxDTnWgadpidg16/67ZgKd0EoSsbCpFAJble/hRroMwzKUSzFW+
2yFxrmUNFoIXddoDtORNNdK0nM6b2MKeWKjmndknz4QehlayZWCg1+mEjp7A7Wqp
9naONqhQWMibARGkDl5Y7SZ9/XJXjPmDFXi3EIbhrWMN2TUkzUN14A1YHw+M9p5Q
9UbnpI6eDxjvlezcPjqucIM0ywFwljBrDsQXfGsR6ogQbYvA7nJ0dK63/EXzvl1U
UGUBwHtDhLHxtv85/JsUqq9/UVGbZjcHvyEfmE1mvbMcNxkSLSewt+jd78h7xIyL
tOZP24ARPKqcQ1detou47o8cMmwTqVl6xu08w83xin2Xux+UlYFTtI/LVws3oYNb
F3uEzIgtJbu7ENxCkY5RmIJG9qRJZJ2f6dnpLLld6D52paD5OYNrk1NShtf/Dp+r
zjJoiIRTcO9fPatjl07Y2eDeFeo2SKoD+Xd/5nGDoytE6JiDEXg=
=ONVb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.18-1'
Drop ABI reference files.
Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
Ben Hutchings
2df8b204ea
Update to 4.10.7
2017-03-30 14:04:10 +01:00
Ben Hutchings
9df323e7dd
Prepare to release linux (4.9.18-1).
2017-03-30 02:16:33 +01:00
Ben Hutchings
4adb26a0c1
w1: Enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 01:53:01 +01:00
Ben Hutchings
f294506bfa
netfilter: nft_ct: add notrack support ( Closes : #845500 )
2017-03-30 01:40:57 +01:00
Ben Hutchings
4f10661dbb
[arm64,x86] Enable CROS_KBD_LED_BACKLIGHT as module ( Closes : #856906 )
2017-03-30 01:01:37 +01:00
Ben Hutchings
576f686158
[armhf] sound/soc: Enable SND_SUN4I_SPDIF as module ( Closes : #857410 )
2017-03-30 00:22:17 +01:00
James Clarke
a1503865a9
[sparc64] udeb: Re-add ufs-modules ( Closes : #858049 )
2017-03-30 00:19:48 +01:00
Ben Hutchings
42ea80c71c
[arm64] rtc: tegra: Implement clock handling ( Closes : #858514 )
2017-03-29 23:42:54 +01:00
Ben Hutchings
8a7210aeea
net/packet: Fix integer overflow in various range checks (CVE-2017-7308)
2017-03-29 22:50:53 +01:00
Ben Hutchings
8703214f24
[x86] drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() (CVE-2017-7294)
2017-03-29 22:42:53 +01:00
Ben Hutchings
de3e9af4dc
[x86] vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (CVE-2017-7261)
2017-03-29 22:36:16 +01:00
Ben Hutchings
2dd2d226ca
scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187)
2017-03-29 22:31:24 +01:00
Ben Hutchings
3e739d51e3
xfrm_user: Apply fixes for CVE-2017-7184
2017-03-29 22:28:20 +01:00
Ben Hutchings
9984b67924
[rt] Update to 4.9.18-rt14
2017-03-29 04:57:14 +01:00
Ben Hutchings
5c465af56e
[rt] Update to 4.9.18-rt13 (no functional change)
2017-03-27 23:33:49 +01:00
Ben Hutchings
8f58868ca2
Update to 4.9.18
...
Ignore ABI changes as they don't seem to affect OOT modules.
2017-03-27 23:33:33 +01:00
Ben Hutchings
6f1e58a58e
[powerpc*] Ignore ABI changes in cxl (fixes FTBFS) ( Closes : #858530 )
2017-03-27 22:25:03 +01:00
Salvatore Bonaccorso
7a622bd483
Prepare to release linux (4.9.16-1).
2017-03-22 17:01:40 +01:00
Ben Hutchings
b303c03f3b
Update to 4.9.16
...
Drop one patch included in it
2017-03-20 00:12:10 +00:00
Ben Hutchings
529c42c701
Reorganise and improve comments for ignored ABI changes
2017-03-20 00:10:59 +00:00
Salvatore Bonaccorso
f271c6453d
Update to 4.9.15
...
Drop one patch included in 4.9.15
Ignore ABI changes for
module:drivers/nvdimm/libnvdimm
module:drivers/target/**
debugfs_create_automount
2017-03-19 21:41:18 +01:00
Ben Hutchings
73b2f137b6
fjes: Disable auto-loading, as this driver matches a very common ACPI ID ( Closes : #853976 )
2017-03-18 20:51:22 +00:00
Salvatore Bonaccorso
15269fa16f
Add bug closer for CVE-2017-2636
2017-03-18 17:13:39 +01:00
Helge Deller
edfd36210e
[hppa] Switch to debian default config option for bonding, irda and atalk
2017-03-18 00:30:00 +01:00
Ben Hutchings
4c22453363
[amd64] Don't WARN about expected W+X pages on Xen (see #852324 )
2017-03-16 04:14:51 +00:00
Ben Hutchings
8851d0b7ac
ucount: Remove the atomicity from ucount->count (CVE-2017-6874)
...
...and avoid an ABI change.
2017-03-14 21:39:16 +00:00
Salvatore Bonaccorso
f8dd73abfa
Ignore ABI change for first_ec (not declared in public header)
2017-03-14 07:02:46 +01:00
Salvatore Bonaccorso
e67a9e0c75
Ignore ABI changes for acpi_ec_{add,remove}_query_handler
2017-03-13 21:36:31 +01:00
Salvatore Bonaccorso
42afd6a1f7
Sync debian/changelog entries with git log
...
Gbp-Dch: Ignore
2017-03-13 07:35:13 +01:00
Salvatore Bonaccorso
11c1294899
ACPI / EC: Use busy polling mode when GPE is not enabled
...
Thanks: Jakobus Schurz <jakobus.schurz@gmail.com>
Closes : #846792
2017-03-13 07:34:43 +01:00
Ben Hutchings
f96b366d00
Update to 4.9.14
...
Drop a patch applied upstream.
Ignore ABI changes as they shouldn't affect OOT modules.
2017-03-12 18:35:37 +00:00
Ben Hutchings
11d69f4069
tty: n_hdlc: get rid of racy n_hdlc.tbuf (CVE-2017-2636)
2017-03-08 03:07:36 +00:00
Ben Hutchings
cd00ebfdee
[rt] Update to 4.9.13-rt12
2017-03-08 03:01:24 +00:00
Ben Hutchings
7513bdfe2b
Kbuild.include: addtree: Remove quotes before matching path (regression in 4.8)
...
loses: #856474
2017-03-04 02:19:07 +00:00
Ben Hutchings
79e486b59b
[media] dvb-usb: don't use stack for firmware load or reset ( Closes : #853894 )
2017-03-01 15:43:37 +00:00
Ben Hutchings
f1c761e452
Prepare to release linux (4.9.13-1).
2017-02-27 15:58:07 +00:00
Ben Hutchings
ab97125626
[rt] Update to 4.9.13-rt10
2017-02-27 15:57:02 +00:00
Ben Hutchings
49569a3b8c
sctp: deny peeloff operation on asocs with threads sleeping on it (CVE-2017-6353)
2017-02-27 15:49:27 +00:00
Salvatore Bonaccorso
28bcf3a477
Add CVE-2017-6348 CVE identifier
2017-02-27 06:52:48 +01:00
Salvatore Bonaccorso
3333d73728
Add CVE-2017-6347 CVE identifier
2017-02-27 06:48:34 +01:00
Salvatore Bonaccorso
ba31bbd36f
Add CVE-2017-6346 identifier
2017-02-27 06:42:54 +01:00