Commit Graph

11707 Commits

Author SHA1 Message Date
Ben Hutchings 550ac5c6dc linux-image: postrm: Make failure of rmdir on purge non-fatal (Closes: #836282) 2016-09-16 23:49:36 +01:00
Ben Hutchings 45fbf5a22f [armhf] Enable drivers for Novena
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules

Closes: #837627, thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
Ben Hutchings 5e2573002f Update to 4.7.4 2016-09-15 20:27:23 +01:00
Ben Hutchings 900cf04cac xen-linux-system: Relax dependency on linux-image to allow for version suffix added by linux-signed
I don't know what the suffix is going to be next time we need to add
it, but it will sort lower than the '+deb' suffix added for stable
security updates.
2016-09-15 17:06:43 +01:00
Ben Hutchings 22a9e16882 liblockdep-dev: Add dependency on liblockdep<version> (Closes: #837710) 2016-09-13 20:33:06 +01:00
Ben Hutchings ab1157972f [powerpcspe] xmon: Don't use ld on 32-bit (Closes: #836741) 2016-09-12 20:38:54 +01:00
Ben Hutchings 1dda9dd218 [hppa] Disable FTRACE due to huge size cost (Closes: #837588) 2016-09-12 20:28:04 +01:00
Ben Hutchings 09db94d1de [arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs 2016-09-10 01:20:05 +01:00
Ben Hutchings 63e9d321c9 mm, oom: prevent premature OOM killer invocation for high order request
Fixes a regression in 4.7 and someone already asked for this.
2016-09-09 20:49:48 +01:00
Ben Hutchings 5f7e2d6a98 i8042: Revert ABI break in 4.7.3 2016-09-09 02:26:58 +01:00
Ben Hutchings db336de154 [amd64] Enable SIGNED_PE_FILE_VERIFICATION, KEXEC_FILE, KEXEC_VERIFY_SIG, KEXEC_BZIMAGE_VERIFY_SIG 2016-09-07 22:09:23 +01:00
Ben Hutchings 7dd9d01ac5 Update to 4.7.3 2016-09-07 22:07:27 +01:00
Ben Hutchings fe8cdc6d83 Add ABI reference for 4.7.0-1 2016-09-04 15:27:52 +01:00
Ben Hutchings a0fdc8e585 [arm64] Add cpu_to_fdt32() when setting Secure Boot flag in FDT 2016-09-03 18:35:05 +01:00
Ben Hutchings 75b51a8352 Prepare to release linux (4.7.2-1). 2016-08-28 15:56:10 +01:00
Ben Hutchings d66fc07342 debian/rules.real: Avoid error message when usbip's config.h doesn't exist
usbip has its own version number which we combine with the source
package version, which is assigned to VERSION for the install-usbip
target (only).  We find the version number by processing the config.h
file created by autoconf.  The file always exists before the
install-usbip rule is invoked, but the target-specific definition of
VERSION is still evaluated whenever debian/rules.real is used,
resulting in confusing (though harmless) error messages about a
missing file.

We could change VERSION to be a recursively-expanded variable, but
then it would still be evaulated multiple times.  Instead, move the
definition of VERSION into the target's commands.
2016-08-28 15:42:31 +01:00
Ben Hutchings 47ba702e2c liblockdep: Move dummy definition of prandom_u32() to fix missing declaration 2016-08-28 15:03:02 +01:00
Ben Hutchings 68902cad17 Change RXKAD and SERIAL_8250_FINTEK from =m to =y
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
Ben Hutchings 2c76695c24 aacraid: Check size values after double-fetch from user (CVE-2016-6480) 2016-08-27 23:17:17 +01:00
Ben Hutchings 0db6147b7d tcp: fix use after free in tcp_xmit_retransmit_queue() (CVE-2016-6828) 2016-08-27 23:14:24 +01:00
Ben Hutchings 0a8dfe2ccc [arm64] Add support for securelevel and Secure Boot
Closes: #831827, thanks to Linn Crosetto
2016-08-27 22:17:30 +01:00
Ben Hutchings 0e156c15e3 fat: Mitigate the lack of UTF-8 case folding
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names).  And it has to do case
folding in multiple encodings.  Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238.

The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding.  Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.

Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
Ben Hutchings 6ab7944873 kbuild: Do not export variable name with hyphen (Closes: #833561) 2016-08-26 01:43:33 +01:00
Ben Hutchings c464b2eb4b [powerpc*] ipmi: Enable IPMI_POWERNV as module (Closes: #833861) 2016-08-26 00:16:54 +01:00
Ben Hutchings 5c0b3b2b37 aufs: Update support patches to aufs4.7-20160822 (Closes: #834764) 2016-08-26 00:06:54 +01:00
Ben Hutchings fe9ef5846d Add bug closure for last commit 2016-08-25 23:52:35 +01:00
Nicolas LE CAM 7663bbdd65 [amd64] Suggest grub-efi-amd64 instead of grub-efi dummy transitionnal package
[benh: Update changelog]
2016-08-25 23:51:35 +01:00
Ben Hutchings 68c8135d73 Add hppa/parisc bug fixesfrom Helge Deller 2016-08-25 18:30:06 +01:00
Ben Hutchings dd5413ffc1 [arm*] Enable SECCOMP (Closes: #833183) 2016-08-25 18:25:02 +01:00
Ben Hutchings a45b0ae0a3 Note that the previous changes to exclude unreproducible files close #830268 2016-08-25 01:30:01 +01:00
Ben Hutchings 28eab7aa6b linux-headers: Exclude all .cmd files
These are not needed for building OOT modules and their contents may
vary depending on whether /bin/sh is bash.
2016-08-25 01:30:01 +01:00
Ben Hutchings 7231d9e75a usbip: Put all autotools-generated files in the build directory
Currently the linux-source-<version> package may or may not include
these files, depending on the order things are built in.

As autotools always modifies the source directory, copy (rsync) the
source to the build directory and build in-place there.
2016-08-25 01:29:57 +01:00
Ben Hutchings 2fddcf7c7f usbip: Use the locally-installed <linux/usbip.h>
Some years back I patched the #include of <linux/usbip.h> to include
the current, uninstalled version through a relative path because the
system-installed version will normally be outdated.  We're about to
start copying the source to avoid writing autotools crap into the
source directory, which breaks this relative path.

Since we now install the UAPI headers under debian/build at the start
of the tools build, drop the patch and add that directory to the
include path.
2016-08-25 01:28:48 +01:00
Ben Hutchings 7a54b56ad5 Merge branch 'sid'
Drop rt patchset updates as they don't apply to 4.7.

Drop various other patches already in 4.7.

Fold the remaining Debian changes in the open changelog entry for 4.6.7-1
into the open changelog entry here.
2016-08-24 20:43:19 +01:00
Ben Hutchings f445dbb9d9 Update to 4.7.2
Note the CVE IDs and Debian bugs fixed.

Drop the patches that have gone upstream.
2016-08-24 20:40:14 +01:00
Ben Hutchings 1d2857f9c5 [armfh] udeb: Add efi-modules 2016-08-24 01:03:04 +01:00
Salvatore Bonaccorso acf840d3f5 Further cleanup debian/changelog entry for 4.6.7 2016-08-16 22:05:35 +02:00
Salvatore Bonaccorso a8f98e5162 [rt] Refresh 4.6.5-rt10 patchset for rebase to 4.6.7 2016-08-16 12:46:56 +02:00
Salvatore Bonaccorso a7280813ac Update to 4.6.7 2016-08-16 11:13:39 +02:00
Ben Hutchings d48b7fcde1 Clean up changelog for 4.6.6 stable update
Add architecture/flavour qualifications; delete changes to
architectures and drivers we don't build.
2016-08-12 16:40:02 +01:00
Ben Hutchings d42cdc5bfe audit: fix a double fetch in audit_log_single_execve_arg() (CVE-2016-6136) 2016-08-12 16:27:20 +01:00
Ben Hutchings 8bc5e687b1 [powerpc*] KVM: Book3S HV: Save/restore TM state in H_CEDE (CVE-2016-5412) 2016-08-12 16:25:34 +01:00
Ben Hutchings d62992a05c Drop ABI maintenance patches since we're bumping the ABI number 2016-08-12 16:22:46 +01:00
Ben Hutchings aebb6e776f udeb: Include cdc_ncm in nic-usb-modules (Closes: #833918) 2016-08-12 15:59:19 +01:00
Salvatore Bonaccorso 7184d7bfd9 tcp: make challenge acks less predictable (CVE-2016-5696) 2016-08-12 06:52:28 +02:00
Uwe Kleine-König c4c4bb74e0 merge my two groups of log entries
I wonder why dch didn't do the right thing from the start
2016-08-11 22:19:53 +02:00
Uwe Kleine-König a9d7770fa3 [rt] fix conflicts between v4.6.6 and v4.6.5-rt10 2016-08-11 22:13:58 +02:00
Uwe Kleine-König aad68942e4 [rt] Update to 4.6.5-rt10 2016-08-11 21:43:53 +02:00
Uwe Kleine-König 75ae5b06cf rt/genpatch.py: make it work with a git repository again 2016-08-11 21:43:22 +02:00
Salvatore Bonaccorso 3ff8b0fe18 Add CVE reference for CVE-2016-5400 2016-08-11 16:39:01 +02:00