d518bcf5f3
[mips*el/loongson-3] Disable PAGE_EXTENSION and PAGE_POISONING.
...
This workaround a kernel crash, until the real issue is found. It is
currently being investigated.
2017-04-22 01:16:49 +02:00
f2b1e81469
[mips*/octeon] Drop obsolete patch adding support for the UBNT E200 board.
2017-04-21 11:31:33 +02:00
3cd2ed795d
[arm64] Enable REGULATOR_GPIO as module ( Closes : #860222 )
2017-04-21 01:33:01 +01:00
1e2342437a
[arm64] Enable ARC_SUNXI, RTC_DRV_SUN6I as built-in, MMC_SUNXI and PHY_SUN4I_USB as modules
...
Closes : #860855
2017-04-21 01:00:12 +01:00
259372e240
[x86] Make hyperv-modules depends on nic-shared-modules
...
hv_utils (not hv_netvsc!) now implements a PTP clock.
2017-04-20 19:24:09 +01:00
0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
be339ddfdd
aufs: Update support patchset to aufs4.x-rcN-20170410
2017-04-20 01:48:49 +01:00
327c328b54
Update to 4.11-rc7 (and credit Lukas for his previous work)
2017-04-20 01:11:22 +01:00
f26f2a520d
Update to 4.11-rc6
...
Remove merged patches and rebase remaining patches.
A portion of the secureboot patches have been upstreamed, but were
changed substantially during review, primarily to avoid code
duplication among arches. I've stripped the patches of the merged
bits and rebased the remainder.
Signed-off-by: Lukas Wunner <lukas@wunner.de>
[bwh: Undo some incorrect context changes in
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch]
2017-04-20 00:15:17 +01:00
8701ef58ba
Replace "[media] dvb-usb: Don't use stack for reset either" with upstream fix
2017-04-18 01:16:50 +01:00
3f62574711
crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618)
2017-04-16 23:25:12 +01:00
4d042ae0ff
[rt] Update to 4.9.20-rt16
2017-04-16 21:52:57 +01:00
31945f628c
Update to 4.9.22
...
Drop patches applied upstream.
2017-04-16 21:47:05 +01:00
326a2052e2
linux-image: Disable signing until it's supported in dak
...
Only code signing through dak is going to be acceptable for a stable
release, so disable the current arrangement.
2017-04-16 18:53:52 +01:00
b4b1be4c52
Move debug symbols back to the main archive
...
dak currently allows a binary upload to include debug symbol packages
that don't appear in the overrides file or the Binary field of the
changes file, so long as they have the appropriate
'Auto-Built-Package' field and their name matches another binary
package in the upload plus the '-dbgsym' suffix.
For architectures with code signing enabled, our binary uploads never
match this condition as the corresponding binary package has the
'-unsigned' suffix and the debug symbols package does not. Since we
do list the debug symbol packages in the Binary field, they do get
added to the overrides file when accepted through the NEW queue, but
they are automatically pruned from there some time later. Later
uploads then have to go through NEW even though they are not
introducing new binary packages. This would be a big problem for
stable security updates.
For now, move debug symbols back to the main archive with the old
'-dbg' suffix. Keep them enabled for all architectures.
2017-04-16 18:53:35 +01:00
6ef03e0be7
Merge remote-tracking branch 'alioth/sid' into sid
2017-04-16 17:22:54 +01:00
b80acec65e
[arm64] Set NR_CPUS=256 to allow for multi-SoC systems
...
ThunderX1 has 48 cores and supports 2-way systems for 96 CPUs.
ThunderX2 has 54 cores and also supports 2-way systems for 108 CPUs.
X-Gene 3 "Skylark" is supposed to support 8-way systems with 32
cores each for 256 CPUs (I'm not sure if they're cache-coherent
beyond 2-way though.
2017-04-16 17:19:45 +01:00
01f0df794d
[mips*/octeon] Set NR_CPUS=64 to allow for Cavium CN7890
...
The CN7890 has 48 Octeon III cores.
I don't know whether current configuration will run on a CN7890, but this
should avoid an ABI break if we add support later.
2017-04-16 17:19:00 +01:00
c22c7deb17
[mips*el/loongson-3] Set NR_CPUS=16 to allow for Loongson 3B2000
...
The Loongson 3B2000 has 4 cores and can apparently be used in a 4-way
configuration, for 16 CPUs.
I don't think the current configuration will run on a 3B2000, but this
should avoid an ABI break if we address that.
2017-04-16 17:18:59 +01:00
ba74e6e6c8
[powerpc*/*64*] Enable CPUMASK_OFFSTACK to reduce stack usage
2017-04-16 17:18:44 +01:00
23fadf4f82
Update debian/changelog file
...
Gbp-Dch: Ignore
2017-04-16 08:00:01 +02:00
1d5fde10d8
mm/mempolicy.c: fix error handling in set_mempolicy and mbind (CVE-2017-7616)
2017-04-16 07:59:50 +02:00
b1b8586924
[powerpc/powerpc64,ppc64] Set NR_CPUS=2048, matching ppc64el
2017-04-15 02:41:22 +01:00
9cb1bd16f9
udeb: Include all AHCI drivers in sata-modules ( Closes : #860335 )
2017-04-14 20:35:35 +01:00
263f51b136
cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores ( Closes : #859978 )
2017-04-11 02:57:43 +01:00
5547db97a6
fscrypt: remove broken support for detecting keyring key revocation (CVE-2017-7374)
2017-04-08 09:36:53 +02:00
43f7156d3a
ping: implement proper locking (CVE-2017-2671)
2017-04-08 09:18:35 +02:00
ca91ae2eb7
[powerpc/powerpc64,ppc64*] target: Enable SCSI_IBMVSCSIS as module
...
This driver was removed in 3.18, but has been updated to use the new
target framework and was added again in 4.8.
As it lives under drivers/scsi and not drivers/target, exclude it from
the scsi-modules udeb.
2017-04-08 01:43:00 +01:00
20a0659e24
drm/nouveau/disp/mcp7x: disable dptmds workaround ( Closes : #850219 )
2017-04-07 20:42:59 +01:00
505d589daf
[x86] usbip: Increase USBIP_VHCI_NR_HCS to 8 and USBIP_VHCI_HC_PORTS to 31
...
Closes : #859641
2017-04-07 20:32:56 +01:00
abd4d7ab60
[s390x] Set NR_CPUS=256 ( Closes : #858731 )
2017-04-07 20:29:12 +01:00
1d2e81c18d
Bump ABI to 3
2017-04-07 20:28:09 +01:00
699099dfce
debian/rules.real: Undefine $LANGUAGE, which can break debug symbols for vDSOs
...
Closes : #859807
2017-04-07 20:25:37 +01:00
c59213f33a
Prepare to release linux (4.10.7-1~exp1).
2017-03-31 00:41:15 +01:00
9ee9c719d0
Enable BUG_ON_DATA_CORRUPTION
...
This means errors detected by DEBUG_LIST result in BUG rather than WARN.
2017-03-31 00:33:12 +01:00
fa49af3f6b
[s390x] Set NR_CPUS=256 ( Closes : #858731 )
2017-03-31 00:02:59 +01:00
500ce0c9cd
netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules ( Closes : #858897 )
2017-03-31 00:02:01 +01:00
473a9f83a2
w1: Really enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 18:27:54 +01:00
459f0a48e4
Release linux (4.9.18-1).
...
-----BEGIN PGP SIGNATURE-----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=ONVb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.18-1'
Drop ABI reference files.
Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
2df8b204ea
Update to 4.10.7
2017-03-30 14:04:10 +01:00
9df323e7dd
Prepare to release linux (4.9.18-1).
2017-03-30 02:16:33 +01:00
4adb26a0c1
w1: Enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 01:53:01 +01:00
f294506bfa
netfilter: nft_ct: add notrack support ( Closes : #845500 )
2017-03-30 01:40:57 +01:00
4f10661dbb
[arm64,x86] Enable CROS_KBD_LED_BACKLIGHT as module ( Closes : #856906 )
2017-03-30 01:01:37 +01:00
576f686158
[armhf] sound/soc: Enable SND_SUN4I_SPDIF as module ( Closes : #857410 )
2017-03-30 00:22:17 +01:00
a1503865a9
[sparc64] udeb: Re-add ufs-modules ( Closes : #858049 )
2017-03-30 00:19:48 +01:00
42ea80c71c
[arm64] rtc: tegra: Implement clock handling ( Closes : #858514 )
2017-03-29 23:42:54 +01:00
8a7210aeea
net/packet: Fix integer overflow in various range checks (CVE-2017-7308)
2017-03-29 22:50:53 +01:00
8703214f24
[x86] drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() (CVE-2017-7294)
2017-03-29 22:42:53 +01:00
de3e9af4dc
[x86] vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (CVE-2017-7261)
2017-03-29 22:36:16 +01:00
2dd2d226ca
scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187)
2017-03-29 22:31:24 +01:00
3e739d51e3
xfrm_user: Apply fixes for CVE-2017-7184
2017-03-29 22:28:20 +01:00
9984b67924
[rt] Update to 4.9.18-rt14
2017-03-29 04:57:14 +01:00
5c465af56e
[rt] Update to 4.9.18-rt13 (no functional change)
2017-03-27 23:33:49 +01:00
8f58868ca2
Update to 4.9.18
...
Ignore ABI changes as they don't seem to affect OOT modules.
2017-03-27 23:33:33 +01:00
6f1e58a58e
[powerpc*] Ignore ABI changes in cxl (fixes FTBFS) ( Closes : #858530 )
2017-03-27 22:25:03 +01:00
7a622bd483
Prepare to release linux (4.9.16-1).
2017-03-22 17:01:40 +01:00
b303c03f3b
Update to 4.9.16
...
Drop one patch included in it
2017-03-20 00:12:10 +00:00
529c42c701
Reorganise and improve comments for ignored ABI changes
2017-03-20 00:10:59 +00:00
f271c6453d
Update to 4.9.15
...
Drop one patch included in 4.9.15
Ignore ABI changes for
module:drivers/nvdimm/libnvdimm
module:drivers/target/**
debugfs_create_automount
2017-03-19 21:41:18 +01:00
73b2f137b6
fjes: Disable auto-loading, as this driver matches a very common ACPI ID ( Closes : #853976 )
2017-03-18 20:51:22 +00:00
15269fa16f
Add bug closer for CVE-2017-2636
2017-03-18 17:13:39 +01:00
edfd36210e
[hppa] Switch to debian default config option for bonding, irda and atalk
2017-03-18 00:30:00 +01:00
4c22453363
[amd64] Don't WARN about expected W+X pages on Xen (see #852324 )
2017-03-16 04:14:51 +00:00
8851d0b7ac
ucount: Remove the atomicity from ucount->count (CVE-2017-6874)
...
...and avoid an ABI change.
2017-03-14 21:39:16 +00:00
f8dd73abfa
Ignore ABI change for first_ec (not declared in public header)
2017-03-14 07:02:46 +01:00
e67a9e0c75
Ignore ABI changes for acpi_ec_{add,remove}_query_handler
2017-03-13 21:36:31 +01:00
42afd6a1f7
Sync debian/changelog entries with git log
...
Gbp-Dch: Ignore
2017-03-13 07:35:13 +01:00
11c1294899
ACPI / EC: Use busy polling mode when GPE is not enabled
...
Thanks: Jakobus Schurz <jakobus.schurz@gmail.com>
Closes : #846792
2017-03-13 07:34:43 +01:00
f96b366d00
Update to 4.9.14
...
Drop a patch applied upstream.
Ignore ABI changes as they shouldn't affect OOT modules.
2017-03-12 18:35:37 +00:00
11d69f4069
tty: n_hdlc: get rid of racy n_hdlc.tbuf (CVE-2017-2636)
2017-03-08 03:07:36 +00:00
cd00ebfdee
[rt] Update to 4.9.13-rt12
2017-03-08 03:01:24 +00:00
7513bdfe2b
Kbuild.include: addtree: Remove quotes before matching path (regression in 4.8)
...
loses: #856474
2017-03-04 02:19:07 +00:00
79e486b59b
[media] dvb-usb: don't use stack for firmware load or reset ( Closes : #853894 )
2017-03-01 15:43:37 +00:00
f1c761e452
Prepare to release linux (4.9.13-1).
2017-02-27 15:58:07 +00:00
ab97125626
[rt] Update to 4.9.13-rt10
2017-02-27 15:57:02 +00:00
49569a3b8c
sctp: deny peeloff operation on asocs with threads sleeping on it (CVE-2017-6353)
2017-02-27 15:49:27 +00:00
28bcf3a477
Add CVE-2017-6348 CVE identifier
2017-02-27 06:52:48 +01:00
3333d73728
Add CVE-2017-6347 CVE identifier
2017-02-27 06:48:34 +01:00
ba31bbd36f
Add CVE-2017-6346 identifier
2017-02-27 06:42:54 +01:00
62bab38998
Add CVE-2017-6345 identifier
2017-02-27 06:38:46 +01:00
49c2b92937
time: Disable TIMER_STATS (CVE-2017-5967)
...
The upstream "fix" for this is to remove the feature, as it is
redundant with tracing. I'd be quite happy to do that, but it
introduces several conflicts with the PREEMPT_RT patch series.
Unless and until those are resolved in 4.9-stable and 4.9-rt, disable
it in our kconfig and add a dependency on BROKEN to ensure it's
disabled in custom kernels too.
2017-02-26 21:05:05 +00:00
f32a03523e
ipc/shm: Fix shmat mmap nil-page protection (CVE-2017-5669)
2017-02-26 20:51:00 +00:00
003300166a
[x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596)
2017-02-26 20:29:29 +00:00
93819d25f0
Update to 4.9.13
2017-02-26 20:10:47 +00:00
5d326c4855
udeb: Add more USB host and dual-role drivers to usb-modules ( Closes : #856111 )
...
This mostly affects armhf, but it should be safe to list all the
directories in the common usb-modules. The module list should now
match initramfs-tools.
Remove the redundant list of specific modules for armhf-armmp.
2017-02-25 21:40:03 +00:00
a5fbe7bcef
Update to 4.9.12
2017-02-25 21:36:31 +00:00
fe42826053
Wrap two long changelog entries
2017-02-23 19:18:07 +01:00
4746877ba5
Add CVE id for CVE-2017-6214
2017-02-23 19:17:24 +01:00
1bdf4070d4
Prepare to release linux (4.10-1~exp1).
2017-02-22 20:58:19 +00:00
1fcade696a
Update to 4.10
2017-02-22 20:58:16 +00:00
8c94f719fa
Release linux (4.9.10-1).
...
-----BEGIN PGP SIGNATURE-----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=rRkU
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.10-1'
Drop changes to aufs.
2017-02-22 20:57:36 +00:00
e88bad2d33
Add CVE-2017-5897 CVE id to changelog entry
2017-02-20 15:10:28 +01:00
8db6ed9e89
dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074)
2017-02-19 10:46:20 +01:00
4fe7cfed42
Update to 4.9.11
...
Ignore/avoid a few ABI changes in net.
2017-02-18 21:54:07 +00:00
7b50304bda
Update to 4.9.11
2017-02-18 20:53:41 +00:00
5e5afa386a
[armhf] Enable DRM_OMAP_PANEL_TPO_TD028TTEC1, PWM_OMAP_DMTIMER as modules ( Closes : #855472 )
2017-02-18 20:29:32 +00:00
5d590456c4
[armel] dts: kirkwood: Fix SATA pinmux-ing for TS419 ( Closes : #855017 )
2017-02-18 00:38:36 +00:00
ad25780220
Prepare to release linux (4.9.10-1).
2017-02-17 13:18:17 +00:00
92d269eac2
media: dvb-usb-dibusb-mc-common: Add MODULE_LICENSE ( Closes : #853110 )
2017-02-17 02:56:32 +00:00
4e1df53c24
[x86] xen: Fix APIC id mismatch warning on Intel ( Closes : #853193 )
2017-02-17 02:42:17 +00:00
31532f0851
[x86] platform: acer-wmi: setup accelerometer when machine has appropriate notify event ( Closes : #853067 )
2017-02-17 02:37:50 +00:00
fdd44fecba
udeb: Add bcache to md-modules ( Closes : #718548 )
2017-02-17 02:26:47 +00:00
d7a4c15c51
[m68k] Change MAC8390, MAC_SCSI from built-in to modules ( Closes : #826614 )
...
udeb: Add mac8390 to nic-shared-modules
2017-02-17 02:21:21 +00:00
df90250caf
[armel/marvell] hwmon: Enable SENSORS_G762 as module ( Closes : #854662 )
2017-02-17 02:14:35 +00:00
daef7b18db
[arm64] drm: Enable DRM_AST as module ( Closes : #820168 )
...
udeb: Add ast to fb-modules
2017-02-17 02:05:03 +00:00
c69737eaf8
Note that 4.9.9 closes #853073 , #855055
2017-02-17 01:58:58 +00:00
e035177b13
net: ipv6: check route protocol when deleting routes ( Closes : #855153 )
2017-02-17 00:58:21 +00:00
8cf3230524
dccp: Disable auto-loading as mitigation against local exploits
2017-02-16 19:11:26 +00:00
10f2dad569
Update to 4.9.10
2017-02-16 19:06:43 +00:00
452d9f1e7d
Add CVE-2017-6001 CVE id to changelog for 4.9.9-1
2017-02-16 05:14:56 +01:00
58fbff3df5
sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986)
2017-02-15 11:54:59 +01:00
9e381d5c13
ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970)
2017-02-15 11:50:22 +01:00
4e5e705c5f
selinux: fix off-by-one in setprocattr (CVE-2017-2618)
2017-02-15 11:44:55 +01:00
4a1042f1a0
IB/rxe: Fix mem_check_range integer overflow (CVE-2016-8636)
2017-02-15 11:41:25 +01:00
848ab3cd4d
CVE-2016-10208 pending for 4.9.9-1
2017-02-14 20:48:26 +01:00
82f952c50f
[rt] Update to 4.9.9-rt6
2017-02-11 14:49:54 +00:00
9ee6dbd395
Update to 4.9.9
...
Drop revert-patch which is superseded by upstream fix in 4.9.9.
Delete log line for commit that went into 4.9.7 and has now been
reverted.
2017-02-10 00:04:25 +00:00
06c483a015
debian/copyright: Prefer https URL than http for security merit
...
Also changed bit for debian/README.source
2017-02-10 07:44:04 +09:00
4b402f4b97
[armel] ARM: orion5x: fix Makefile for linkstation-lschl.dtb
...
Note the patch in changelog and add Origin to the patch
2017-02-09 23:18:25 +09:00
fc4d14f63f
test-patches: Set default number of jobs to number of available processors
...
With the current default of 1, most users are going to be kept waiting
unncessarily.
2017-02-08 02:05:30 +00:00
bd4315df9c
test-patches: Use the pkg.linux.notools build profile
...
test-patches never builds tools, and this greatly reduces the
build-dependencies.
2017-02-07 23:47:20 +00:00
fb27baab98
pegasus: Use heap buffers for all register access ( Closes : #852556 )
2017-02-07 01:44:24 +00:00
abd788f1da
cpumask: use nr_cpumask_bits for parsing functions ( Closes : #848682 )
2017-02-07 01:40:13 +00:00
a6f6ce057f
[rt] Update to 4.9.6-rt4
2017-02-07 00:55:55 +00:00
bfd586db54
aufs: Update support patchset to aufs4.9-20170206
2017-02-07 00:48:26 +00:00
6a7f3d6b71
aufs: Update support patchset to aufs4.x-rcN-20170206
2017-02-07 00:47:34 +00:00
63ef596c74
Update to 4.10-rc7
2017-02-07 00:39:58 +00:00
6dfab36dd8
Update to 4.9.8
2017-02-06 15:59:29 +00:00
7eec246dc0
Update to 4.9.7
...
Drop patches applied upstream.
2017-02-03 13:51:44 +00:00
701bf4b244
Revert efistub changes, Closes : #853170
...
[benh: Update changelog]
2017-02-03 03:51:48 +00:00
3af020874b
Prepare to release linux (4.10~rc6-1~exp2).
2017-02-02 03:44:51 +00:00
6da646ca30
[armel] Adjust configuration to reduce image size (fixes FTBFS)
2017-02-02 03:44:43 +00:00
84e53d21c3
debian/control: Fix compiler build-dependencies for cross-building
...
gcc cross-compilers *do* now have Multi-Arch: foreign, so we have
to take the :native qualfiication off again.
2017-02-02 02:36:49 +00:00
aca7f25415
[ppc64el] Disable IBMEBUS; this bus does not exist on POWER8 systems
...
In 4.10 its dependencies are changed accordingly. We might as well
disable it here as well.
Also explicitly disable EHEA, which depends on IBMEBUS, and exclude
ehea from nic-modules.
2017-02-02 00:53:44 +00:00
fd8856b5ca
[ppc64el] udeb: Exclude ehea from nic-modules
...
It depends on IBMEBUS which can no longer be enabled on this
architecture as the bus isn't present in POWER8 systems.
2017-02-01 23:54:02 +00:00
1ca7f0fad2
[powerpc*] Fix missing CRC for _mcount
2017-02-01 23:53:37 +00:00
000457eb03
[powerpc*] Revert the initial stack protector support
...
Fixes build failure on ppc32 (or one reason for it) and boot failure on
ppc64.
2017-02-01 23:51:09 +00:00
9805479fdb
[sparc64] topology_64.h: Fix condition for including cpudata.h
...
This might fix the FTBFS, but as I can't currently do a test build
I'm not sure.
2017-02-01 23:50:15 +00:00
cebb2af7dd
[s390x] Un-revert upstream change moving exports to assembly sources
...
s390 now has <asm/asm-prototypes.h>, so exports from asm should have
versions. It also gained another EXPORT_SYMBOL() in asm that we
didn't revert, leading to FTBFS.
2017-02-01 23:49:39 +00:00
63915af674
Prepare to release linux (4.10~rc6-1~exp1).
2017-01-31 15:33:20 +00:00
3c80d83bb1
linux-doc: Copy source to build directory
...
This is necessary to avoid creating files in source directory, which
makes the linux-source package unclean (and unreproducible).
Firstly, Python creates bytecode files alongside the module sources.
We can and do exclude those, though.
Secondly, starting with 4.10, Documentation/media/Makefile converts
from dot to SVG and from SVG to PDF in the source directory. These
can't easily be excluded, as SVG is also used as a source format.
2017-01-31 15:32:40 +00:00
90c2b44bab
debian/control: Add build-dependency on graphviz for documentation
2017-01-30 20:31:24 +00:00
20f61fd51d
linux-doc: Fix up symlinks to gzipped docs
...
Some files are moving around under Documentation and being replaced
with symlinks.
gzip -r doesn't even check for symlinks, and fails when they're broken
(which happens if the destination was found first). So use find and
xargs instead, and deal with the symlinks separately.
2017-01-30 17:53:40 +00:00
8d3d6efcde
linux-doc: Update documentation file list for 4.10
...
REPORTING-BUGS moved to Documentation/admin-guide/reporting-bugs.rst
and doesn't need to be listed separately.
Many of the ReST files in Documentation used to be plain-text and
users may want to continue reading them as such, so don't prune
*.rst.
2017-01-30 17:21:50 +00:00
28002f99bf
[armel] ARM: dts: orion5x-linkstation-lschl
...
- Fix model name
- More consistent naming on linkstation series
2017-01-31 02:11:17 +09:00
9c3f98c0c4
cpupower: Fix compiler options for turbostat on 4.10
2017-01-30 16:28:55 +00:00
6b038a62ac
Update to 4.10-rc6
2017-01-30 16:28:55 +00:00
b476f54cc9
net: Enable SFC_FALCON as module; SFC_FALCON_MTD
2017-01-30 16:28:55 +00:00
1b9aa796be
Note adding GPL/X11 Dual License in changelog
2017-01-30 21:26:52 +09:00
855efa4b7b
Merge remote-tracking branch 'alioth/sid' into sid
...
Bump the changelog version (again) for the unreleased changes.
2017-01-28 22:48:16 +00:00
e09f27e767
btree,musb,st_sensors: Ignore ABI changes (fixes FTBFS on armel,armhf)
2017-01-28 16:11:50 +00:00
ed41b63580
[arm64] Enable more Meson drivers
...
As requested in #852132 for 4.10.
2017-01-28 01:40:45 +00:00
6adadc8ec6
Release linux (4.9.6-2).
...
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAliL3k0ACgkQ57/I7JWG
EQlmog/8D/DowVsxEjNdiHAewH7HUyqdADkCRkeqsmKgCtZEmvEaYE0RijZzGDhm
Ge4PxOzhLE/DRxJF2gN8y0hIVOnigje9qYN5OBdgB/FNNKThL6ARwiu2LD6DYcwU
+Lu6g8iHqsKHZ+NllHEiiwJ4rR39qf3Tkzz5cgm4jEi+5IjnoefOhaFhyPzBkz8i
p6fWklEhev8+lQ1sW9gF94p3t0dOp/31TWACagRQronrTtT2xAzdrR5ESPTo6FFg
gtcfqoB7AYA4LTuzoKIQRgGLsgKk73iLPF874ZuK9g/+4Z2lF9NBbwve3O0qYKCy
NERddjjx9QEf4cjToqAii10AzAfuBFDG/b77ZscREwysUwMhkz47ADefu5v1P2kJ
XdL/sJ/nXyhItV/VK8ym9lg4jAA8K5UOjn+8RtWBTE8091N7y7kyNHTQ4SppySIZ
Ow+NsWkMd+WYxkdGPSYc7nHthhVRvfC9C4cxamn9en+MNmakMgJcOZTxS4/gcTvx
DMCWGmEJrD5Bu3m9GrJzwfaXteWxMYihsq9ofjXeaeYqxgXZ62GuxMeRq3kBOhSw
H9MUITkqfsjcg7eAz8elFhRvrurlVUWFsSCGr4Fd1Tv9zrFw8OXNRrApy4UQOQ4x
Uw5AcA/3ZA3QCPsOuU8ENES57vJb+D3E/LZZJdTktVLUcoxA0tA=
=C8FJ
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.6-2'
2017-01-28 01:19:31 +00:00
21820614f6
Merge remote-tracking branch 'alioth/sid' into sid
...
Bump the changelog version for the unreleased changes.
2017-01-27 23:58:22 +00:00
ceaee3f154
linux-cpupower: Use dh-exec architecture filtering for x86-specific files
...
Listing usr/sbin in linux-cpupower.install caused FTBFS on !x86 as
cpupower itself doesn't install anything there. Do the architecture
filtering in the debhelper lists instead of complicating
debian/rules.real further.
2017-01-27 22:10:56 +00:00
bb91742cb9
[arm64,armhf,x86] usb: gadget: Enable configfs and mot useful legacy functions
...
If CONFIG_USB_GADGET is selected, enable all configfs functions as
modules and most popular legacy modules (ethernet and serial).
g_nokia left as armhf specific (Nokia N900 tradition)
[benh: Changed subject line]
2017-01-27 21:10:08 +00:00
079c50f68a
[arm64] Enable KEXEC ( Closes : #852747 )
2017-01-27 18:21:33 +00:00
840d5e6afd
[or1k] Remove configuration, as the port has been abandoned
2017-01-27 18:20:49 +00:00
79253df3bb
Bump ABI to 2
2017-01-27 18:14:37 +00:00
8c4510fb2e
Prepare to release linux (4.9.6-1).
2017-01-27 07:44:54 +00:00
d24fc81c52
Move CVE-2016-10153 note next to the correct upstream commit subject
2017-01-27 07:43:54 +00:00
eb850b980b
[arm64] Enable ARCH_THUNDER and many additional drivers requested by Riku Voipio
2017-01-27 06:16:36 +00:00
73363a0bd3
bq27xxx_battery: Ignore ABI change
2017-01-27 06:16:19 +00:00
6f6fc512f3
[arm64] ptrace: Avoid ABI change in 4.9.6
2017-01-27 06:16:18 +00:00
e345ccbabe
[armhf,arm64] Add security fixes for vc4 driver
2017-01-26 21:27:04 +00:00
810b36a1d3
fbdev: color map copying bounds checking (CVE-2016-8405)
2017-01-26 21:15:56 +00:00
222ff09d3e
Note that 4.9.6 includes the fix for CVE-2016-10153
2017-01-26 21:09:34 +00:00
b2ae9cd710
libceph: Ignore ABI change in 4.9.6
2017-01-26 21:05:36 +00:00
a873a1d79d
Update to 4.9.6
...
Drop patches which are included in it.
2017-01-26 19:24:36 +00:00
74f87b226a
[amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
...
Closes : #852620
Nothing in the 'stretch' release uses vsyscall (so far as I can see),
so this is now safe to do.
2017-01-25 17:50:39 +00:00
b5cdf98158
[rt] genpatch.py: Verify tag and tarball signatures
2017-01-25 04:30:46 +00:00
6dea280bae
fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
2017-01-24 20:49:30 +00:00
601b9e92a1
Update to 4.10-rc5
...
Drop/refresh patches as appropriate.
[rt] Disable until it is updated for 4.10 or later
2017-01-24 19:26:38 +00:00
7db3a7935f
Release linux (4.9.2-2).
...
-----BEGIN PGP SIGNATURE-----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=y3x5
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.2-2'
Bump the changelog version for the unreleased change.
2017-01-24 18:26:07 +00:00
5707fdcfe2
Wrap over-long lines in the current changelog entry
2017-01-24 14:27:37 +00:00
7a613e23af
nbd: fix 64-bit division
2017-01-24 21:35:14 +09:00
3ed01076a0
[arm64,armhf] video/fbdev: Enable FB_EFI ( Closes : #851778 )
2017-01-24 05:22:41 +00:00
b30786ada7
[arm64] video: Change FB from module to built-in
...
Currently we don't explicitly set CONFIG_FB for arm64, and the only
reason it's enabled as a module is that the DRM drivers (which are
built as modules) select it. We *do* explicitly set CONFIG_FB=y on
almost all other architectures and flavours.
Simplify this by setting CONFIG_FB=y at the top level and overriding
where needed (not arm64).
2017-01-24 05:22:28 +00:00
a90b078bc7
[x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
...
Closes : #851916
2017-01-24 04:43:45 +00:00
a2704d736e
[x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
...
This also allows enabling SND_SOC_INTEL_BDW_RT5677_MACH without
DW_DMAC_CORE built-in.
2017-01-24 04:43:02 +00:00
cf9d2d33be
[arm64] dts: meson-gx: Add firmware reserved memory zones
...
An important bug fix for this newly enabled hardware, requested in #852132 .
2017-01-24 04:42:22 +00:00
f1d6a10e4d
[arm64] Enable ARCH_MESON and related drivers ( Closes : #852132 )
2017-01-24 04:04:56 +00:00
1b1a09ae42
[x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
...
Closes : #778249
2017-01-24 03:55:26 +00:00
faed0c04c6
linux-image: Increase minimum version of initramfs-tools
...
This pulls in various fixes wanted for newer kernel versions:
- more HID drivers will be included if MODULES=most
- early microcode is supported
- ehci-orion, ohci-pci will be included if MODULES=most
- virtio-mmio will be included as appropriate
- crc32c will be included if needed for btrfs
- PHY, clk, gpio, pinctrl and regulator drivers will be included as
appropriate
- the nvme module will be included if MODULES=most
It is also satisfiable in stable.
2017-01-24 03:12:59 +00:00
3c00650618
ieee802154: atusb: do not use the stack for buffers to make them DMA able (CVE-2017-5548)
2017-01-23 20:59:51 +01:00
c74f7d65fe
HID: corsair: fix DMA buffers on stack (CVE-2017-5547)
2017-01-23 20:57:07 +01:00
ef0901f1ca
Fix/ignore ABI changes in 4.9.3-4.9.5 as appropriate
2017-01-23 15:37:01 +00:00
8e8857bdc8
debian/changelog: Add bug closure of #851928
2017-01-22 10:52:41 +09:00
4686b122fc
Update to 4.9.5
2017-01-21 15:52:44 +01:00
e888ec46f1
[mips/octeon] hwmon: Enable SENSORS_ADM1031 as module
...
Thanks to James Cowgill.
Closes : #851963
2017-01-21 19:36:13 +09:00
6e04c10615
drivers/input: Enable TOUCHSCREEN_GOODIX as module
...
Closes : #851821
2017-01-21 16:56:44 +09:00
40c7208b1e
Merge branch 'master' (only 1 commit)
2017-01-21 16:55:42 +09:00
8a1cf72b51
Add CVE reference for CVE-2017-5551
2017-01-21 08:18:06 +01:00
f18792b8fa
[x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
2017-01-19 13:13:14 +01:00
5745d97d88
[x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
2017-01-19 13:09:22 +01:00
6f47d53476
[armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL)
2017-01-19 01:12:36 +09:00
c6b1f1b2b1
ath9k: fix NULL pointer dereference ( Closes : #851621 )
2017-01-17 03:51:38 +00:00
d264d7d524
tmpfs: clear S_ISGID when setting posix ACLs
2017-01-16 09:31:01 +01:00
a126d0bd27
sysctl: Drop reference added by grab_header in proc_sys_readdir (CVE-2016-9191)
2017-01-16 09:26:36 +01:00
a7f877c1f1
nbd: use loff_t for blocksize and nbd_set_size args ( Closes : #851533 )
2017-01-16 02:36:18 +00:00
e7895080f2
Update to 4.9.4
2017-01-15 19:45:16 +01:00
cfe4a19c0d
[armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler support
...
Closes : #851481
I missed the linux-headers dependency overrides when updating to gcc-6.
2017-01-15 17:23:59 +00:00
9f6f469d8d
Update to 4.9.3
2017-01-15 16:52:40 +01:00
2811d70e3f
Prepare to release linux (4.9.2-2).
2017-01-12 15:52:37 +00:00
97dc926bb7
Revert "Remove debug symbol packages from debian/control to work around dak bug"
...
This reverts commit 99d37f9b16
2017-01-12 15:44:11 +00:00
39fa6fb0e9
[sparc64] Export memcpy and memset to modules again (fixes FTBFS)
2017-01-12 02:09:42 +00:00
5b0131c972
Prepare to release linux (4.9.2-1).
2017-01-11 04:42:36 +00:00
ff396294d0
Set ABI to 1
2017-01-11 04:41:30 +00:00
2ebf1235ed
Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
...
It causes USB_COMMON to be built-in for no good reason.
2017-01-11 04:40:28 +00:00
7a737f217d
8250: Disable SERIAL_8250_LPSS, since it causes DW_DMAC_CORE to be built-in
2017-01-11 04:40:08 +00:00
b5bf17149c
drm: Enable DRM_LEGACY
...
This is a new dependency (in 4.9) for DRM drivers that don't include KMS.
2017-01-11 04:15:25 +00:00
ddef39bbd1
cxgb4: Enable CHELSIO_T4_FCOE
2017-01-11 04:07:16 +00:00
12fe2ee262
net: Enable MACSEC as module
2017-01-11 04:07:16 +00:00
7d782712b9
target: Enable ISCSI_TARGET_CXGB4 as module
2017-01-11 04:07:16 +00:00
b9dec29dfb
SCSI: Enable SCSI_SMARTPQI as module
2017-01-11 04:07:16 +00:00
0be187c8a3
net: Enable NET_DEVLINK as module
2017-01-11 04:07:15 +00:00
6e618742b2
rxrpc: Enable AF_RXRPC_IPV6
2017-01-11 02:39:16 +00:00
8af88a5cba
hci_uart: Enable BT_HCIUART_MRVL
2017-01-11 02:39:16 +00:00
f967694f22
vsock: Enable VSOCKETS, VHOST_VSOCK, VIRTIO_VSOCKETS as modules
2017-01-11 02:39:09 +00:00
0277842acf
net/sched: Enable NET_ACT_TUNNEL_KEY, NET_IFE_SKBTCINDEX as modules
2017-01-11 02:23:45 +00:00
84eba65d8d
netfilter: Enable NFT_NUMGEN, NFT_QUOTA as modules
2017-01-11 02:10:10 +00:00
6ef612c9c4
Use 'udeb:' prefix for changelog line about nic-modules udeb
2017-01-11 02:08:34 +00:00
aed242158b
[arm64] Enable MV_XOR and MV_XOR_V2
2017-01-10 16:50:40 -08:00
13c410d6c1
Update to 4.9.2
2017-01-09 21:06:30 +00:00
1eea5583cd
[sh3] Build a linux-libc-dev package ( Closes : #850732 )
2017-01-09 20:29:41 +00:00
d669b4e8e9
Merge branch 'sid'
2017-01-09 20:10:42 +00:00
99d37f9b16
Remove debug symbol packages from debian/control to work around dak bug
...
Any packages listed in debian/control that are not installed in the
main archive will always be seen as NEW. This might be fixable by
archive configuration changes, but for now we'll generate them in a
similar way to debhelper.
2017-01-07 21:48:47 +00:00
9747655f89
Make the pickled config (config.defines.dump) reproducible
2017-01-07 18:25:56 +00:00
2c8163e1f1
abiupdate.py: Add support for incoming.ports.debian.org
2017-01-07 18:00:21 +00:00
2ee6bc5ea0
abiupdate.py: Update base URLs
...
- incoming.debian.org now uses pool layout
- deb.debian.org is a better default than ftp.de.debian.org
- ftp.debian-ports.org redirects to ftp.ports.debian.org, so use the
latter directly
2017-01-07 17:57:38 +00:00
f3ddd1118d
abiupdate.py: Use current config instead of downloading previous config
...
Until we authenticate downloads we should not do this as pickle.load
allows running arbitrary code.
2017-01-07 17:43:24 +00:00
994541dfec
Prepare to release linux (4.9.1-1~exp1).
2017-01-07 03:44:26 +00:00
0814db65a8
Update to 4.9.1
...
Drop two obsolete patches.
"ptrace: being capable wrt a process requires mapped uids/gids"
appears to be obsoleted by upstream commit bfedb589252c "mm: Add
a user_ns owner to mm_struct and fix ptrace permission checks".
2017-01-07 03:27:13 +00:00
f5af248fc0
genorig.py: Verify tag signatures (based on work by Yves-Alexis Perez)
...
I changed the wrapper to call gpgv instead of gpg. It is much easier
and cleaner to use local configuration this way, and it won't produce
a warning that the key isn't trusted.
I also removed used of an environment variable, as we (currently) only
pass one keyring filename here.
2017-01-07 02:57:59 +00:00
9e92fc9bab
Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs
...
mozjs assumed VAs would never be wider than 47 bits. Add Breaks to
force upgrades of those packages. For mozjs 1.8.5 the fix requires an
ABI change so this is unversioned; for mozjs 24 there was no ABI
change so this is versioned.
(luajit has the same problem but only the experimental version
supports arm64. I assume this will be fixed before it goes into
unstable, so we don't need it in Breaks.)
2017-01-07 02:07:50 +00:00
b6e260f0b4
[arm64] Enable RTC_DRV_DS1307.
...
The Raspberry PIs do not have an RTC, and many expansion boards provide
an RTC using a DS1307 chip (or one of the zillon clones). Enable it for
arm64 like on armhf, so that these expansion boards also work on the
Raspberry PI 3 running in 64-bit mode.
2017-01-06 21:01:31 +01:00
285199d96c
Fix my typo in changelog
2017-01-06 18:51:49 +00:00
a3e600085e
[armhf] Add support for switch hardware on Turris Omnia
2017-01-06 17:59:21 +01:00
4650abe50b
nic-modules: Include switch (DSA) drivers ( Closes : #845075 )
2017-01-05 17:16:43 +00:00
0ae467ce6f
Use debhelper compatibility level 9
2017-01-05 17:05:57 +00:00
dacad5c64e
aufs: Update support patchest to aufs4.9-20161219
2017-01-05 04:20:11 +00:00
ec36e35f50
[armhf] gpio: Enable GPIO_MCP23S08 as module ( Closes : #845064 )
2017-01-05 04:04:33 +00:00
8c35b862a7
net: Enable GTP as module ( Closes : #846913 )
2017-01-05 03:30:49 +00:00
7aee63d8bc
Enable drivers requested in #847017
...
* [x86] iio,HID: Enable INTEL_ISH_HID as module
* hwmon,watchdog: Enable SENSORS_FTSTEUTATES as module
2017-01-05 03:29:38 +00:00
c45f83ebe7
[armhf] leds,gpio: Enable LEDS_TCA6507 as module ( Closes : #847770 )
2017-01-05 03:12:30 +00:00
359bc84534
ieee802154: Enable IEEE802154_FAKELB as module
2017-01-05 03:09:11 +00:00
f08186c06a
mm: Enable PAGE_POISONING ( Closes : #849450 ), PAGE_POISONING_NO_SANITY
...
...except on armel/marvell
2017-01-05 03:01:05 +00:00
589b068d1b
[x86] PCI: Enable VMD as module
2017-01-05 02:56:44 +00:00
3131927f49
Enable USERFAULTFD (except on armel/marvell)
2017-01-05 01:45:08 +00:00
Aurelien Jarno
Ben Hutchings
Lukas Wunner
Salvatore Bonaccorso
James Clarke
Helge Deller
Roger Shimizu
Riku Voipio
Martin Michlmayr
John Paul Adrian Glaubitz
Uwe Kleine-König