Commit Graph

7817 Commits

Author SHA1 Message Date
Ben Hutchings 975e4433ed [x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)
Apply all the SSB-related patches pending for 4.16-stable.
2018-05-22 12:26:02 +02:00
Ben Hutchings baa5254a6f [rt] Update to 4.16.8-rt3 2018-05-22 00:55:31 +02:00
Ben Hutchings b1a9e2470a Update to 4.16.10 2018-05-22 00:49:31 +02:00
Salvatore Bonaccorso c2dbc30362 proc: do not access cmdline nor environ from file-backed areas (CVE-2018-1120) 2018-05-17 23:15:48 +02:00
Ben Hutchings 9deec69be4 Bump ABI to 2 2018-05-13 01:14:24 +01:00
Salvatore Bonaccorso 9febee02d1 mm, oom: fix concurrent munlock and oom reaper unmap (CVE-2018-1000200) 2018-05-12 16:49:55 +02:00
Salvatore Bonaccorso 5903405411 [rt] certs: Reference certificate for test key used in Debian signing service 2018-05-12 10:20:40 +02:00
Salvatore Bonaccorso 5f1b90fa69 Update to 4.16.7-rt1 and reenable 2018-05-12 10:14:20 +02:00
Salvatore Bonaccorso 1173c652e9 Update to 4.16.8
Cleanup debian/changelog file
2018-05-10 16:46:46 +02:00
Salvatore Bonaccorso 24b281238c Update to 4.16.7
Refresh bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch

Drop patches applied upstream related to CVE-2018-1093

Cleanup debian/changelog entries
2018-05-10 15:01:21 +02:00
Salvatore Bonaccorso 3f624e1bcf Update to 4.16.6
Cleanup debian/changelog file

Add CVE identifier for CVE-2018-10940

Add TODO item (ABI changes or ABI bump)
2018-05-10 08:59:32 +02:00
Romain Perier c171f70365 [armhf] MFD: Enable MFD_TPS65217 (Closes: #897590)
This enables MFD TPS65217 that is the PMIC found on the BeagleBone
Black. So the board can be powered off safely.
2018-05-04 22:14:33 +02:00
Ben Hutchings 00e2f5f30e kbuild: use -fmacro-prefix-map to make __FILE__ a relative path 2018-05-02 23:47:40 +01:00
Vagrant Cascadian 8a269b84e6 Add changelog entry for [armhf] DRM: Enable DW_HDMI_AHB_AUDIO and
DW_HDMI_CEC (Closes: #897204) by Romain Perier.
2018-04-30 11:24:39 -07:00
Ben Hutchings f36c7f9bd9 Prepare to release linux (4.16.5-1). 2018-04-29 17:09:15 +01:00
Ben Hutchings f78b896b8b debian/lib/python/debian_linux/gencontrol.py: Allow uploads to *-security with a simple revision 2018-04-28 21:42:12 +01:00
Ben Hutchings 498cb2c129 Update to 4.16.5 2018-04-27 18:25:27 +01:00
Ben Hutchings 5b54699034 ext4: fix bitmap position validation
Un-revert "ext4: add validity checks for bitmap block numbers" and
apply this new fix on top of it.
2018-04-27 18:08:44 +01:00
Ben Hutchings c3c6a03a9c udeb: Add algif_skcipher to crypto-modules (Closes: #896968) 2018-04-27 00:05:25 +01:00
Ben Hutchings 019c1fa6f3 xfs: set format back to extents if xfs_bmap_extents_to_btree (CVE-2018-10323) 2018-04-25 21:23:07 +01:00
Ben Hutchings f78c3b3434 xfs: enhance dinode verifier (CVE-2018-10322) 2018-04-25 21:22:21 +01:00
Ben Hutchings 9f2182e09a Revert "ext4: add validity checks for bitmap block numbers", which caused a regression 2018-04-25 21:15:48 +01:00
Ben Hutchings 98017b2bd7 Update to 4.16.4 2018-04-25 21:14:23 +01:00
Ben Hutchings f4dbf1aa82 debian/lib/python/debian_linux/debian.py: Fix binNMU revision parsing
In VersionLinux, any binNMU version will currently match the
revision_other group in the regexp and therefore never be recognised
as an experimental, security, or backport version.  This is probably
harmless in practice because:

- binNMUs don't happen in those suites
- Only debian/bin/gencontrol.py cares about the linux_revision_other
  attribute, and it won't be run for a binNMU version

But let's fix it by matching the binNMU suffix separately.
2018-04-24 20:40:27 +01:00
Ben Hutchings 90f09743ec debian/lib/python/debian_linux/debian.py: Fix binNMU changelog parsing
I incorrectly added a requirement of a newline after urgency in the
changelog entry top line as part of
"debian/lib/python/debian_linux/debian.py: Parse bottom lines of
changelog entries".  For a binNMU, there will be ", binary-only=yes"
after the urgency.  Since we don't currently care about any fields
after urgency, allow either a comma or newline.
2018-04-24 20:20:47 +01:00
Ben Hutchings cb7c0036b0 Update to 4.16.3 2018-04-19 15:04:56 +01:00
Ben Hutchings ac5eca03c1 [x86,arm64] Disable code signing for upload to unstable 2018-04-19 14:51:22 +01:00
Ben Hutchings 71f21e927e For unstable, set ABI to 1 and remove ~exp1 suffix from version 2018-04-19 14:51:02 +01:00
Ben Hutchings fcb558d168 Merge branch 'sid'
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
  applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
  selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
  options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
Ben Hutchings 0b520de976 Prepare to release linux (4.15.17-1). 2018-04-19 11:13:03 +01:00
Ben Hutchings 4220b94e90 udeb: Add zstd_decompress to compress-modules and make squashfs-modules depend on it
zstd_decompress is now used by both btrfs and squashfs, so it needs
to be in a common dependency of their udebs.
2018-04-19 11:12:40 +01:00
Ben Hutchings cdd19a1d2d udeb: Rename lzo-modules to compress-modules 2018-04-19 11:12:13 +01:00
Ben Hutchings 8bf0fade16 [amd64] net: Enable AQTION as module
I'm enabling it in the top-level config, but currently it has
'depends on X86_64' so it will only be built for amd64.

References: https://lists.debian.org/CAMVG2svxkO42pr7VgjFxv1o5hiw9-1cAgBuhyEem1foTH2M6zw@mail.gmail.com
2018-04-19 00:23:00 +01:00
Ben Hutchings 5014bbfd99 [arm64] PCI: Enable PCI_TEGRA (Closes: #888817) 2018-04-19 00:19:47 +01:00
Ben Hutchings ae9bb017a0 [arm64] Enable ARCH_SYNQUACER and related driver modules (Closes: #891787) 2018-04-19 00:15:08 +01:00
Ben Hutchings a529c97bc1 block: Enable BLK_SED_OPAL (except on armel) 2018-04-19 00:11:59 +01:00
Ben Hutchings b776a2b257 squashfs: Enable SQUASHFS_ZSTD (Closes: #883410) 2018-04-19 00:03:22 +01:00
Ben Hutchings fc0c66ddb9 ath9k_htc: Fix regression in 4.15, thanks to Ben Caradoc-Davies (Closes: #891060)
- mac80211: add ieee80211_hw flag for QoS NDP support
- ath9k_htc: use non-QoS NDP for AP probing
2018-04-19 00:01:09 +01:00
Ben Hutchings 4bb4183118 [x86] platform: Enable DELL_SMBIOS_SMM, DELL_SMBIOS_WMI as modules (closes: #893976) 2018-04-18 23:52:47 +01:00
Ben Hutchings f3cb525153 [x86] net: Enable THUNDERBOLT_NET as module (Closes: #894310) 2018-04-18 23:50:16 +01:00
Ben Hutchings 91b60c01c7 [arm64] net/phy: Enable MDIO_BUS_MUX_MMIOREG as module (Closes: #894336) 2018-04-18 23:47:39 +01:00
Ben Hutchings 9926a8790e w1: Enable all "slave" device drivers (Closes: #895340) 2018-04-18 23:39:48 +01:00
Ben Hutchings 95cf0f2687 [x86] Enable MFD_AXP20X_I2C, AXP288_FUEL_GAUGE as modules (Closes: #895129) 2018-04-18 23:31:26 +01:00
Ben Hutchings 0fefb6932b SCSI: Enable SCSI_SYM53C8XX_2 as module on all architectures (Closes: #895532) 2018-04-18 23:27:21 +01:00
Ben Hutchings 31ed54f425 udeb: Move arc4 and ecb from nic-wireless-modules to crypto-modules (Closes: #895362) 2018-04-18 23:24:08 +01:00
Ben Hutchings e663157b88 [arm*] iio: Enable DHT11 as module (Closes: #873176) 2018-04-18 22:33:41 +01:00
Ben Hutchings 7c4275d142 [armhf] udeb: Add i2c-exynos5 to i2c-modules (Closes: #895976) 2018-04-18 22:28:53 +01:00
Ben Hutchings ba793f6361 [armel/marvell] linux-image: Replace supported model list with wiki link 2018-04-18 22:12:35 +01:00
Uwe Kleine-König a8c6014b43 [amd64] enable AMD 10GbE Ethernet driver (CONFIG_AMD_XGBE=m) 2018-04-18 17:16:16 +02:00
Helge Deller f147fe68c4 [hppa] Switch to self-decompressing kernel 2018-04-18 08:34:17 +02:00