966488336f
[mips*] Fix ABI change in 4.6.2
2016-06-16 12:37:35 +01:00
ece80cbbec
liblockdep: Add all the patches submitted upstream; drop one that's obsolete
...
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
95cba203d5
rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244)
2016-06-11 07:26:02 +02:00
01be9139c0
tipc: fix an infoleak in tipc_nl_compat_link_dump (CVE-2016-5243)
2016-06-11 07:18:28 +02:00
91d6f22ed8
Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
...
proc: prevent stacking filesystems on top
ecryptfs: forbid opening files without mmap handler
sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
ff5804f208
cpupower: Bump soname version and rename library package accordingly
2016-06-10 14:47:48 +01:00
906f7b1351
Update to 4.7-rc2
...
[rt] Disable until it is updated for 4.7 or later
2016-06-10 14:47:48 +01:00
1537ff1314
Update to 4.6.2
2016-06-09 17:44:47 +01:00
4e2a281abe
Update to 4.6.1
2016-06-05 14:30:35 +01:00
7569482f9b
Merge branch 'sid'
2016-06-05 14:16:31 +01:00
a8fb2b9fbe
mtd: Disable slram and phram when securelevel is enabled
2016-06-03 01:15:37 +01:00
6976b08b12
Release linux (4.5.5-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=gSlx
-----END PGP SIGNATURE-----
Merge tag 'debian/4.5.5-1'
2016-05-29 22:33:26 +01:00
1edaa5dd82
Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
...
This was reverted upstream in 4.5.5 due to a regression but we have a fix for
the regression (probably).
2016-05-29 22:20:52 +01:00
46e3b9492a
dwc3-exynos: Fix deferred probing storm
...
Closes : #823552 ; thanks to Steinar H. Gunderson
2016-05-29 22:05:54 +01:00
08942bb065
Add upstream fixes for various information leaks
2016-05-29 21:25:44 +01:00
5bec7a0097
[x86] kvm:vmx: more complete state update on APICv on/off (CVE-2016-4440)
2016-05-23 02:35:36 +01:00
327c921aa7
Update to 4.5.5
...
Drop changes that were applied upstream.
Fix/ignore ABI changes.
2016-05-23 02:34:41 +01:00
b88823f96b
Revert "stmmac: Fix 'eth0: No PHY found' regression" ( Closes : #823493 )
2016-05-23 00:59:46 +01:00
342ba3d57d
tipc: check nl sock before parsing nested attributes (CVE-2016-4951)
2016-05-21 16:53:08 +02:00
5ba72559a1
Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
...
This was reverted upstream in 4.6 due to a regression but we have a fix for
the regression (probably).
2016-05-16 20:06:26 +01:00
eaafcf8a39
Release linux (4.5.4-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUAVzoWxue/yOyVhhEJAQrD5RAAnOQWbgH3JJ/48u366vvlvebkKdfgdUQw
wyj+rfxCxWbb2i8iGh+gk4aN9FlNfmzUlPgA2esXJiCpjmZ+Ffj0aF8k7W4HkGPw
/dX2tuBEj7NKQ6TLY1BK9rzs8DQKMRw7lQ7r+uLlt0o8MjKMJg0FaA1UteC09trB
AXcSZdIeAtyPaMk1mBk3qcNsDMTIb/K3zk03sGy8HKwWgJJmHbcTm4/XWEzOOZUd
HYInRPiK724qMoIG+BkI+oigvaXEvuxHKMfKWdryKHsIyvAu4l/1myeBk/xy65Cv
/ga+NQQHJt8mfiWfleljKU9DC4wN/SQ5Nr9wzFC512TQfFVmu47BlIQPQWZ1oHjP
FQom301HEFTKqZRTIqOU6IQ+TPSSHWPPvD8jmmRFXycasvDkP0t2RNuM3gbhwU3b
9hui/YUlbzQUJOgWRitnRMk1jXtHLkQm8vRf7AIVXxT5+6u4EiZUvk6gNjg3Jz6h
dHkkrgCWzZgYIdAvqa8OF2j2ejSQUcBW3yxpSnw0T9YOxo4IiF+Il/dxwSDSX5BI
tBoNyzNH62yMOjGSQXcYOdr64KE1mjXpST+x1tRdU+n74ifP2CtA57o93WB6Gn5z
wVAuVeGmEAbIl7EcHl5r6ZC58da5syTl0BZEbH9YM54eLlM+qyLOwM0vWAztuIa5
ciXotUkDZrM=
=oSkt
-----END PGP SIGNATURE-----
Merge tag 'debian/4.5.4-1'
2016-05-16 20:00:43 +01:00
0c5a10d4c1
Update to 4.6
...
Rebase patch series.
2016-05-16 19:49:24 +01:00
be1c8b16ab
KVM: MTRR: remove MSR 0x2f8 (CVE-2016-3713)
2016-05-16 13:47:07 +02:00
48902f4f1a
videobuf2-core: Fix crash after fixing CVE-2016-4568
2016-05-16 03:33:38 +01:00
3eae053b85
uapi glibc compat: fix compile errors when glibc net/if.h included before linux/if.h
...
Closes : #822393
2016-05-16 03:23:55 +01:00
efbab1e4bf
Add various upstream fixes with known or probable security impact
2016-05-16 03:23:35 +01:00
88ec3673ad
net: fix infoleak in llc (CVE-2016-4485)
2016-05-15 20:04:29 +02:00
de9a44e36f
KEYS: Fix ASN.1 indefinite length object parsing (CVE-2016-0758)
2016-05-14 05:18:04 +02:00
4a8b374466
[mips*/octeon] Add support for byte swapped initramfs to handle u-boot and kernel running with a different endianness.
2016-05-13 18:54:45 +02:00
1275559aac
[arm,x86] Fix memory corruption in KVM with THP enabled.
2016-05-12 23:52:30 +02:00
2c6d72a09e
Update to 4.5.4
2016-05-12 21:22:09 +02:00
b101f08c76
[mips*] Fix PR_SET_FPMODE issues with multi-threaded programs.
2016-05-11 00:17:22 +02:00
b92b4d15f0
Update to 4.6-rc7
2016-05-08 23:56:51 +01:00
be31f1ecd5
Release linux (4.5.3-2).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jVBT
-----END PGP SIGNATURE-----
Merge tag 'debian/4.5.3-2'
Drop the ABI reference files and patches.
Rebase patches added on the sid branch.
2016-05-08 21:47:32 +01:00
4ebee8024b
[powerpc*] Fix sstep compile on powerpcspe
...
Closes : #823526 ; thanks to Lennart Sorensen
2016-05-08 12:08:04 +01:00
231812b47f
Re-group the patch series
2016-05-07 19:40:36 +01:00
8b31e1c0a6
Update to 4.5.3
...
Drop changes which were included or superceded upstream.
Fix ABI changes.
2016-05-07 19:40:36 +01:00
405645d788
Add bpf security fixes
2016-05-05 23:13:51 +01:00
ae6831e8b6
Update to 4.6-rc6
2016-05-05 22:17:45 +01:00
5416c1a1e3
Revert "sp5100_tco: fix the device check for SB800 and later chipsets"
...
Probably fixes #822651 , #823146
2016-05-02 21:25:40 +02:00
fc5b920758
Release linux (4.5.2-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUAVyKf7Oe/yOyVhhEJAQqAnQ//cXPxmlNgmpwl9YUWt7WWjMBr4fyShKp0
0MIcV8O7G1Jaov8valxFnSp7/LEDkA5bkQFec39ZKR4jjnkATCY7LWhC35PDe7fK
gSIu4+jhnAFMsedRcqlbugsnQAkZGfxPWvxBVqy7veBmMSEywnEs7XW/PVZBWLdX
kBmTwqoE5aKnaEYa2HwT53zKZBO4zG3AqHJAnU71DLf20cIPXm/zYthxatQs8GYs
AybmlejWWkZgpob6CSax8zoSvUuSJGIU63RaH4z8IT6I7C0imcAJ6qwqR5nKtkzb
zDmG81mmxGT1JAxptIeaJQw9qAnygFWKrRxk/uERoFhpFXYiropCuP7bTG7DZgDc
Nqec5PLt37Y6bV6eaKXpk/0IyvBdO5We+GUOTgf39v9HtDc6rKvHrTMtlr7DEKot
9d+P9ybQlEwB61pe1HU9lGUKSjMAA6RKsa3qAWcZJQYLylrFVYPbnIsVk3EG6z5v
0+F1rzTGPcB9iEUp1lKTOw+qk/13tKrLNvAX/Wz9RBpPUvNy2BBXNnEP8I5pCBV4
C2iyQZAJuGtTHdH96LjVXq9vX78ohnRcOQVrimq8/X6HWrOSU0WYWWJkxcHl4D3d
3Z6iOrrqWg95NIC/YH3iZHdKsq2KeHGsApZBBYitKCtCfkVchv7nfAb5rocc7u25
LeOq7Rc/dIM=
=BJL3
-----END PGP SIGNATURE-----
Merge tag 'debian/4.5.2-1'
2016-04-29 02:25:02 +02:00
d345dad8c9
Input: gtco - fix crash on detecting device without endpoints (CVE-2016-2187)
2016-04-28 17:21:17 +02:00
127b7cf9a4
Re-group the patch series
2016-04-28 17:17:53 +02:00
d251b99807
memcg: remove lru_add_drain_all() invocation from mem_cgroup_move_charge()
...
Closes : #822084
2016-04-28 16:24:28 +02:00
9321f394c6
[sparc] Implement and wire up hotplug and modalias_show for vio
...
Thanks to Adrian Glaubitz; closes : #815977
2016-04-28 00:09:05 +02:00
dff5585589
module: Invalidate signatures on force-loaded modules
2016-04-23 20:48:33 +02:00
2d9dcd6be6
atl2: Disable unimplemented scatter/gather feature (CVE-2016-2117)
2016-04-22 08:10:30 +01:00
b20f5e22b0
[armel/marvell] dts: kirkwood: fix SD slot default configuration for OpenRD ( Closes : #811351 )
2016-04-22 08:06:49 +01:00
fe835b64b1
Update to 4.5.2
...
As this includes changes to header_ops and dentry_operations, bump
the ABI number to 2.
2016-04-22 08:05:48 +01:00
c5cec59895
[mips*] Emulate unaligned LDXC1 and SDXC1 instructions.
2016-04-22 00:01:29 +02:00
9c63adf133
[x86] USB: usbip: fix potential out-of-bounds write (CVE-2016-3955)
2016-04-19 16:30:27 +02:00
92f972094e
[x86] xen: suppress hugetlbfs in PV guests (CVE-2016-3961)
2016-04-14 20:57:52 +02:00
f4701f7d70
Update to 4.6-rc3
...
Refresh or drop *many* patches.
aufs: Update support patches to aufs4.x-rcN-20160328
2016-04-14 15:00:19 +01:00
c37887e538
Re-group the patch series
2016-04-13 23:31:28 +01:00
a8c2d3c699
nbd: Create size change events for userspace ( Closes : #812487 )
2016-04-13 23:23:32 +01:00
1d7f287b7a
[x86] ACPI / processor: Request native thermal interrupt handling via _OSC ( Closes : #817016 , #819336 )
2016-04-13 23:06:17 +01:00
df965c4112
fs: Add MODULE_SOFTDEP declarations for hard-coded crypto drivers ( Closes : #819725 )
2016-04-13 22:17:00 +01:00
aac56d9572
[x86] mm/32: Enable full randomization on i386 and X86_32 (CVE-2016-3672)
2016-04-13 21:26:06 +01:00
e01d7b854c
ipv4: Don't do expensive useless work during inetdev destroy (CVE-2016-3156)
2016-04-13 21:24:19 +01:00
d0292c6f67
netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
2016-04-13 21:11:40 +01:00
68c5c5997c
Merge remote-tracking branch 'alioth/sid'
...
Merge open changelog entry for 4.4.6-2 into our open changelog entry.
Refresh the new patches.
2016-04-13 20:52:01 +01:00
6e05e68d7a
Update to 4.5.1
2016-04-13 20:49:29 +01:00
5c3489a433
[armel/marvell] Add DT support for "Buffalo/Revogear Kurobox Pro"
2016-04-08 08:33:27 +09:00
119c44d06d
Merge branch 'benh/secure-boot'
2016-04-05 13:59:42 +01:00
24993989ff
[mips*/octeon] Backport Octeon III CN7xxx interface detection from 4.7 queue.
2016-04-04 22:51:21 +02:00
7836b549be
[mips*/octeon] Backport OCTEON SATA controller support from 4.6-rc1. Enable AHCI_OCTEON.
2016-04-04 22:51:11 +02:00
76de9f06e0
scripts: Fix X.509 PEM support in sign-file
...
DER format works but it's easier if we can use PEM everywhere.
2016-04-04 19:28:26 +01:00
7321950826
Add Matthew Garrett's securelevel patchset in preparation for Secure Boot support
2016-04-03 04:31:52 +01:00
ea7af96b4d
Merge branch 'benh/merge-linux-tools'
...
The primary reason not to build userland tools from src:linux was that
it allowed building with a minimal cross-toolchain and without the
target's glibc development files. In particular, the CI system at
kernel-archive.buildserver.net used such minimal cross-toolchains.
It is been a long time since kernel-archive.buildserver.net was
running, so the original reason for the separation no longer exists.
If we implement CI using similarly limited toolchains again, we can use
a build-profile to exclude userland builds, as these are now well
supported.
This merges the full history of both source packages together,
including in debian/changelog (which looks rather weird). The binary
packages resulting from this merge appear to be functionally the same,
though I can't be certain there's no regression.
2016-04-02 15:13:23 +01:00
b1e9b11e7a
[armel/marvell] Add DT support for "Synology DS112" and "Zyxel NSA320"
...
Thanks to Heinrich Schuchardt.
(Closes : #819393 )
2016-03-31 00:30:03 +09:00
d3da98fed6
Cherry-pick ZONE_DEVICE changes from linux-next
2016-03-25 13:45:59 +00:00
f24971b257
Rename and regroup patches from linux-tools
...
Move patches specific to Debian packaging under debian/, and bug fixes that
could go upstream belong under bugfix/. Put them in two separate groups in
the series.
2016-03-21 03:14:46 +00:00
a5f7516c0c
Merge linux-tools source package into linux ( Closes : #550379 , #573483 , #816500 )
...
* Drop redundant gitignore.patch from linux-tools
* Rename linux-tools' debian/templates/control.main.in to
debian/templates/control.tools.in
* Combine changelogs, putting all entries for each upstream release
cycle in chronological order
* Combine rules and gencontrol.py code
2016-03-21 01:32:16 +00:00
fd89731014
linux-perf: Fix use of uninitialized variables
2016-03-20 21:20:16 +00:00
4fe6a76379
Release linux-tools (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=sw9T
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
Move debian/build/tools/power/cpupower/Makefile to
debian/rules.d/tools/power/cpupower/Makefile where it belongs now.
2016-03-20 20:07:25 +00:00
96559e9c4c
Build tools from power/cpupower
...
They'll eventually replace cpufrequtils and libcpufreq{0,-dev} so the
structure of the packages is the same.
2016-03-20 15:49:21 +00:00
8c0226951b
Update to 4.4.6
2016-03-20 15:40:05 +00:00
5c1a796192
[x86] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (regression in 4.5)
2016-03-20 11:38:22 +00:00
42fd34bcd1
Release linux (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=5Nfc
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
2016-03-20 01:15:39 +00:00
962c3c4a6f
[x86] iopl/64: properly context-switch IOPL on Xen PV (CVE-2016-3157)
2016-03-17 18:21:13 +01:00
37886b6ea3
netfilter: x_tables: check for size overflow (CVE-2016-3135)
2016-03-17 01:15:05 +00:00
67517892da
Update to 4.4.6
2016-03-17 01:04:39 +00:00
35ecf69e71
Revert "drm/radeon/pm: adjust display configuration after powerstate"
...
Reported to cause a regression on some older hardware.
2016-03-16 04:09:45 +00:00
328762c833
[amd64] Fix more regressions due to "efi: Build our own page table structure"
...
- efi: Fix boot crash by always mapping boot service regions into new EFI
page tables (Closes : #815125 )
- mm/pat: Fix boot crash when 1GB pages are not supported by cpu
Although I don't have confirmation from Norbert Preining for #815125 , it
does look like these fix all the remaining regressions.
2016-03-14 23:45:22 +00:00
20994ffba4
Fix ABI changes in 4.4.5
2016-03-14 23:33:23 +00:00
1e5b912113
Update to 4.5
2016-03-14 11:51:52 +00:00
f0dae39dd6
[x86] drm/i915: Fix oops caused by fbdev initialization failure
2016-03-12 12:13:53 +00:00
f909b077b6
[powerpc*] Revert "powerpc: Simplify module TOC handling"
...
It is not needed to fix #808043 and causes a regression on ppc64el.
See http://thread.gmane.org/gmane.linux.kernel.stable/166201/focus=166415
2016-03-09 02:14:30 +00:00
acdae5bf41
Release linux (4.4.4-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=g/x1
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.4-1'
Drop changes to the ABI reference and ignore list.
Drop most of the new patches as they're already upstream.
Drop the -rt featureset update.
2016-03-07 22:19:34 +00:00
80ba0eaab8
[powerpc*] Fix module linking to work with binutils 2.26 ( Closes : #808043 )
...
Cherry-picked these two patches from upstream:
- Simplify module TOC handling
- Fix dedotify for binutils >= 2.26
2016-03-07 15:37:29 +00:00
d2894c9e58
Revert "drm/radeon: call hpd_irq_event on resume"
...
It is reported to cause regressions (crash/hang) on some systems.
2016-03-07 07:58:04 +00:00
ab1abc27cc
Fix/ignore module ABI changes in 4.4.4 as appropriate
2016-03-06 03:26:49 +00:00
9f9bdca061
uas: Fix high-order alloc
2016-03-05 18:44:05 +00:00
13ca0a257b
Update to 4.4.4
...
Drop patches included in it.
2016-03-04 14:42:26 +01:00
62226211b4
Update to 4.5-rc6
2016-03-02 14:33:44 +00:00
4db36a2b1c
genirq: Validate action before dereferencing it in handle_irq_event_percpu()
2016-03-01 20:15:44 +01:00
385f5a4548
[armfh] dts: Add DTB for Novena, patches from Vagrant Cascadian
...
(Closes : #815324 )
2016-02-28 19:02:09 +00:00
bcf60af755
Update to 4.4.3
...
Drop several patches that are included in it.
2016-02-28 07:57:17 +01:00
dbe11b4d3b
[x86] KVM: fix conversion of addresses to linear in 32-bit protected mode.
2016-02-26 09:29:37 +01:00
54248be7f5
[armel] dts: Add various device-tree fixes and improvements for Buffalo Linkstation devices.
2016-02-24 18:30:56 +09:00
5810ec7828
unix: correctly track in-flight fds in sending process user_struct
...
Fixes a regression caused by the previous partial fix for CVE-2013-4312.
Ignore ABI changes as we never build unix sockets as a module and
nothing OOT should use the scm functions.
2016-02-24 01:47:32 +00:00
837fc752ad
[armhf] dts: imx6dlq-wandboard-revb1: use unique model id ( Closes : #813881 )
2016-02-24 07:59:05 +09:00
c31998793f
tools/build: Remove bpf() run-time check at build time
2016-02-21 16:45:41 +00:00
eb215f16de
Release linux-tools (4.4-3).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=6e+I
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4-3'
Move check-hyperv.c under debian/rules.d.
2016-02-21 16:29:48 +00:00
38cac73239
Update patches to upstream versions
2016-02-21 15:30:51 +00:00
c9699a3466
Release linux (4.4.2-3).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Htrh
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.2-3'
2016-02-21 13:17:07 +00:00
aae9cf4b6f
Update to 4.5-rc5
2016-02-21 04:12:42 +00:00
88d259a75c
[x86] efi-bgrt: Fix kernel panic when mapping BGRT data ( Closes : #815125 )
...
Plus the following fix-up.
2016-02-20 23:25:05 +00:00
416a13b622
[powerpc] mm: Fix HAVE_ARCH_SOFT_DIRTY dependencies (fixes FTBFS)
...
Drop the previous attempted fix, which didn't work.
2016-02-20 17:29:49 +00:00
6b46662b94
swapops.h: Add #include to fix build failure on powerpc
2016-02-20 04:31:41 +00:00
b0a0319c86
Build fixdep under debian/build and clean it up properly
...
Mattia Dongili noted that it's currently built under tools/build
(upstream bug). Build it under the current output directory
(which means we build it multiple times) and clean all copies.
2016-02-19 01:17:12 +00:00
d97f0b3ee8
[alpha,sh4] Attempt to fix build failures
2016-02-18 23:40:09 +00:00
c232b093cb
[armel,armhf] net: mv643xx_eth: fix packet corruption with TSO and tiny unaligned packets.
...
This looks like it fixes #814681 .
2016-02-18 16:45:54 +00:00
32be752344
lockdep: Add missing macros
2016-02-18 04:14:17 +00:00
c536b8098a
Update to 4.5-rc4
...
Drop/refresh patches as appropriate.
2016-02-18 03:24:24 +00:00
cdcc46b5c4
Release linux (4.4.2-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=syys
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.2-1'
Drop rt featureset changes.
Drop patches that are already in 4.5-rc4.
Keep the ABI version at 'trunk'.
2016-02-17 22:45:34 +00:00
edd433b85f
Update to 4.4.2
...
Drop patches included in it.
Refresh rt patches with textual conflicts.
2016-02-17 21:19:37 +00:00
96504c2870
IFF_NO_QUEUE: Fix for drivers not calling ether_setup() (regression in 4.3)
2016-02-17 18:00:31 +00:00
5427214b64
[i386/686-pae] PCI: Set pci=nobios by default
2016-02-16 02:51:44 +00:00
fcd5547ba0
[i386/686-pae] mm: Fix types used in pgprot cacheability flags translations
2016-02-16 02:04:23 +00:00
5b76884dc2
[amd64] efi: Build our own page table structure
...
This avoids adding W+X pages to the default page table, which is not
only bad for security but also now triggers a warning on boot.
2016-02-16 02:03:55 +00:00
4b4fa14653
Update to 4.5-rc4
...
Drop many, many patches which went upstream. Refresh others for
filename or context changes, and for removal of radeon UMS support.
[rt] Disable until it is updated for 4.5 or later
aufs: Update support patches to aufs4.x-rcN-20160215
2016-02-15 17:37:08 +00:00
b84086545e
ALSA: usb-audio: avoid freeing umidi object twice (CVE-2016-XXXX)
2016-02-14 04:55:59 +00:00
29ef5032ac
bpf: fix branch offset adjustment on backjumps after patching ctx expansion
...
CVE ID to be assigned.
2016-02-14 04:54:45 +00:00
3c25ed439a
af_unix: Don't set err in unix_stream_read_generic unless there was an error
...
This fixes a regression in 4.4, also introduced in 4.3.4 and various
other stable updates.
2016-02-13 00:56:13 +00:00
2d5f78b62a
Revert "workqueue: make sure delayed work run in local cpu"
...
This caused a regression in 4.3
2016-02-13 00:30:07 +00:00
83fd76229d
af_unix: Guard against other == sk in unix_dgram_sendmsg (regression in 4.2.6-2)
2016-02-13 00:23:18 +00:00
1c28b9c3ed
fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (CVE-2016-0617)
...
Fixes a regression in 4.3.
2016-02-12 23:43:07 +00:00
95ece6ebc6
iw_cxgb3: Fix incorrectly returning error on success (CVE-2015-8812)
2016-02-12 23:34:37 +00:00
7f810117b9
[armel] Replace kirkwood and orion5x flavours with a 'marvell' flavour
...
Apply upstream patches from 4.5-rc1 to enable inclusion of orion5x in a
multiplatform build.
Merge configurations as well as possible.
2016-02-07 18:14:32 +00:00
43671fd62b
Re-group fixes in the patch series
2016-02-07 18:08:27 +00:00
536da2762d
Drop ABI fix, not needed in experimental
2016-02-07 18:05:13 +00:00
6c26fa513e
Release linux (4.3.5-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=cqNy
-----END PGP SIGNATURE-----
Merge tag 'debian/4.3.5-1'
2016-02-07 05:28:43 +00:00
af8b80ce07
Fix yet another ABI change due to CVE-2013-4312 mitigation
2016-02-06 23:25:11 +00:00
0df8f2e3e7
hwrng: n2 - Attach on T5/M5, T7/M7 SPARC CPUs ( Closes : #809815 )
2016-02-06 21:25:49 +00:00
ef736f8440
pipe: limit the per-user amount of pages allocated in pipes (CVE-2013-4312)
2016-02-04 20:34:11 +00:00
3180443250
rt2x00: fix monitor mode regression (regression in 4.2)
2016-02-01 17:16:15 +00:00
1ba618c3d3
Update to 4.4.1
2016-02-01 10:59:35 +00:00
ba1393105a
Update to 4.3.5
...
Drop several patches that are included in it.
Fix/ignore various ABI changes.
2016-02-01 10:27:12 +00:00
20ed8bdbac
x86/mm: Add barriers and document switch_mm()-vs-flush synchronization (CVE-2016-2069)
...
Plus a follow-up fix to the comments.
2016-01-29 03:42:16 +00:00
237b83662e
[mips*] Backport math emulation fix from 4.5.
2016-01-27 22:33:18 +01:00
b1fa3fac88
netfilter: nf_nat_redirect: add missing NULL pointer check (CVE-2015-8787)
2016-01-27 19:25:20 +01:00
76c256b5b8
SCSI: fix crashes in sd and sr runtime PM ( Closes : #801925 )
2016-01-27 01:32:15 +00:00
cdfc3b2f30
tcp: fix zero cwnd in tcp_cwnd_reduction (CVE-2016-2070)
2016-01-26 09:00:04 +01:00
024851fa3a
fuse: break infinite loop in fuse_fill_write_pages()
...
This doesn't have a CVE ID yet.
2016-01-23 22:57:21 +00:00
9b355e6846
Update to 4.3.4
2016-01-23 12:11:55 +00:00
68515dfcb9
linux-perf: Fix FTBFS with gcc 6 (used on hppa, sparc64)
2016-01-19 22:11:16 +00:00
72a63706a0
Re-group fixes in the patch series
2016-01-19 13:50:23 +00:00
7aef5117c3
Release linux (4.3.3-6).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=vF8G
-----END PGP SIGNATURE-----
Merge tag 'debian/4.3.3-6'
2016-01-19 13:44:04 +00:00
e9490659aa
KEYS: Fix keyring ref leak in join_session_keyring() (CVE-2016-0728)
2016-01-19 00:41:25 +00:00
ea4dea20ad
linux-perf: Fix reading of build-id from vDSO
2016-01-19 00:18:11 +00:00
e90dec2a0e
bcache: Add upstream fixes marked for stable
...
- fix a livelock when we cause a huge number of cache misses
- Add a cond_resched() call to gc
- clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
- fix a leak in bch_cached_dev_run()
- unregister reboot notifier if bcache fails to unregister device
- allows use of register in udev to avoid "device_busy" error.
- prevent crash on changing writeback_running
- Change refill_dirty() to always scan entire disk if necessary
As requested in
https://lists.debian.org/debian-backports/2016/01/msg00067.html
2016-01-17 21:59:33 +00:00
a9736a8ea4
Revert "block/sd: Fix device-imposed transfer length limits"
...
This introduces an ABI change and it's not obvious how to work around that.
2016-01-17 16:40:35 +00:00
18b52b0baa
unix: Fix ABI change for CVE-2013-4312
2016-01-17 16:39:58 +00:00
f335c0cfcc
unix: properly account for FDs passed over unix sockets (CVE-2013-4312)
2016-01-17 09:27:47 +01:00
10211ef4c3
[x86] drm/vmwgfx: Fix a width / pitch mismatch on framebuffer updates
2016-01-16 04:04:53 +00:00
74cadf39f7
block/sd: Fix device-imposed transfer length limits ( Closes : #805252 )
2016-01-16 03:50:08 +00:00
18e70e2c53
Add some security fixes
2016-01-14 23:39:40 +00:00
d2547e3561
xen/gntdev: Grant maps should not be subject to NUMA balancing ( Closes : #810472 )
2016-01-08 19:32:35 +00:00
0f11ea7f19
Update to 4.4-rc8
2016-01-04 01:57:00 +00:00
4689e6426d
Regroup patches in series
2016-01-02 19:20:40 +00:00
e2abaa403e
Merge tag 'debian/4.3.3-3'
...
Drop the ABI reference and ignored symbols.
Drop most of the patches, as they're already upstream.
2016-01-02 19:18:54 +00:00
e148000b24
ptrace: Fix ABI change for priv-esc fix
2016-01-02 16:27:28 +00:00
eafb4c30fd
Revert "xhci: don't finish a TD if we get a short transfer event mid TD"
...
Closes : #808602 , #808953 , regression in 4.3-rc7
2016-01-02 03:09:56 +00:00
50c5af2358
[armhf] crypto: sun4i-ss - add missing statesize ( Closes : #808625 )
2016-01-01 19:46:24 +00:00
50263628e4
[x86] drm/i915: Don't compare has_drrs strictly in pipe config ( Closes : #808720 )
2016-01-01 19:24:50 +00:00
45e2ecad07
drm/nouveau/pmu: do not assume a PMU is present ( Closes : #809481 )
2016-01-01 18:41:43 +00:00
abab5c2745
[x86] kvm: Reload pit counters for all channels when restoring state (CVE-2015-7513)
2015-12-31 15:49:59 +01:00
e57c91d886
KEYS: Fix race between read and revoke (CVE-2015-7550)
2015-12-31 02:53:31 +00:00
6642f73533
[armhf] Add support for BCM2836 and Raspberry Pi 2
...
- Patches for BCM283x drivers taken from linux-next
- A few more changes requested for 4.5:
http://thread.gmane.org/gmane.linux.kernel/2115942
- Enable all the drivers
- Add SD and USB controller drivers to udebs
2015-12-30 04:18:26 +00:00
a52be96b10
Regroup patches in series
2015-12-27 14:11:18 +00:00
3fac5cf03c
ptrace: being capable wrt a process requires mapped uids/gids
2015-12-27 06:19:08 +00:00
7b6f99cec5
[xen] pciback: Fix state validation in MSI control operations (CVE-2015-8551, CVE-2015-8852, XSA-157)
2015-12-27 05:54:06 +00:00
94b974ce0f
[xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155)
2015-12-27 05:49:13 +00:00
1ff79b037c
bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575)
2015-12-27 04:26:45 +00:00
e9708970a6
pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569)
2015-12-27 04:26:45 +00:00
5db0f0e307
block: ensure to split after potentially bouncing a bio ( Closes : #809082 )
2015-12-27 04:26:45 +00:00
d6b9e3f082
ovl: fix permission checking for setattr (CVE-2015-8660)
2015-12-24 06:42:25 +01:00
0aaf811548
Update to 4.4-rc6
2015-12-21 11:13:30 +00:00
fc3ff0606d
mm: Fix missing #include in <linux/mmdebug.h> (fixes FTBFS on arm64)
2015-12-19 20:32:14 +00:00
ee4980cb32
[armhf,sparc64] Force ZONE_DMA to be enabled, reversing ABI change in 4.3.3 (fixes FTBFS)
2015-12-17 17:59:24 +00:00
70157abb7d
Release linux (4.3.3-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=AlwC
-----END PGP SIGNATURE-----
Merge tag 'debian/4.3.3-1'
Drop the ABI reference and ignored symbols.
Drop most of the patches, as they're already upstream.
2015-12-16 17:15:08 +00:00
ca0bbf698b
tipc: Fix kfree_skb() of uninitialised pointer (regression in 4.3.3)
2015-12-15 21:25:16 +00:00
8fd06d9868
vrf: Fix broken backport of "vrf: fix double free and memory corruption on register_netdevice failure" in 4.3.3
2015-12-15 17:44:38 +00:00
c4e89babe4
Update to 4.3.3
...
Drop 3 security fixes that were included in it.
2015-12-15 17:40:55 +00:00
61acdc692c
net: add validation for the socket syscall protocol argument (CVE-2015-8543)
2015-12-14 20:59:45 +00:00
c3ac7c57ca
cirrus,mgag200: Drop patches for compatibility with wheezy userland
2015-12-14 14:36:05 +00:00
e97c318264
Drop another obsolete patch for X-Gene
...
The xgene-reboot driver is now unused.
2015-12-14 14:21:51 +00:00
a4febbdc67
[arm64] Drop now-redundant patch for X-Gene device tree (fixes FTBFS)
2015-12-14 02:51:41 +00:00
c353d9e9f8
Fix reference to non-UAPI <linux/nvme.h> in include/uapi/linux/Kbuild
2015-12-14 01:16:03 +00:00
e808d0a3f7
Update to 4.4-rc4
2015-12-14 00:53:56 +00:00
2f38533595
[armhf] Add support for Odroid-XU4 ( Closes : #804850 )
2015-12-13 00:34:44 +00:00
405f12a12b
[x86] nouveau: bios: return actual size of the buffer retrieved via _ROM ( Closes : #772716 )
2015-12-13 00:34:44 +00:00
efc870db16
[x86] drm/i915: Mark uneven memory banks on gen4 desktop as unknown swizzling ( Closes : #780363 )
2015-12-12 22:53:37 +00:00
d89f74a7ba
[armel/kirkwood] dts: Fix QNAP TS219 power-off ( Closes : #807696 )
2015-12-11 18:36:54 +00:00
824b04a59d
Update to 4.4-rc4
...
Refresh and drop patches as appropriate.
- Rewrite memcg disable patch to operate on cgroup_disable_mask
- The ancient Advansys Kconfig bug was fixed (differently) upstream
- ft1000 driver is gone, so we no longer need to remove its firmware
- One hunk of aufs4-mmap.patch is obsolete
2015-12-10 18:13:16 +00:00
26e03c2621
Update to 4.3.1
2015-12-09 23:48:47 +00:00
12dc87aa9c
Release linux (4.2.6-2).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jlfq
-----END PGP SIGNATURE-----
Merge tag 'debian/4.2.6-2'
Exclude one new patch that's already in 4.3, and the ABI stuff.
Remove items from the open changelog entry that are now redundant.
2015-12-04 18:03:02 +00:00
b1805eb5b3
[x86] drm/i915: shut up gen8+ SDE irq dmesg noise ( Closes : #806304 )
...
(cherry picked from commit fd13855f77
2015-12-04 01:18:53 +00:00
7517e45eec
qxl: Enable by default ( Closes : #779515 )
...
(cherry picked from commit 7f648db4e2
2015-12-04 01:14:07 +00:00
4668d13b75
Btrfs: fix truncation of compressed and inlined extents (CVE-2015-8374)
2015-12-03 00:50:36 +00:00
1060c43c3d
ppp, slip: Validate VJ compression slot parameters completely (CVE-2015-7799)
...
Plus a preparatory fix to isdn_ppp.
2015-12-03 00:48:31 +00:00
045f1d7a16
unix: avoid use-after-free in ep_remove_wait_queue (CVE-2013-7446)
2015-12-03 00:45:29 +00:00
fd13855f77
[x86] drm/i915: shut up gen8+ SDE irq dmesg noise ( Closes : #806304 )
2015-11-26 20:47:26 +00:00
22ad2142d1
media: usbvision: fix crash on detecting device with invalid configuration
...
(CVE-2015-7833, partly fixed in 4.2.6-1)
Also update headers of the previous patch to match the commit in
media_tree.git.
2015-11-24 17:09:48 +00:00
00e7e4e3ed
[x86] Xen: expose a more realistic max p2m size in the shared info
...
Fixes migration (Closes : #797205 )
2015-11-21 13:48:44 +00:00
1d08805288
[x86] KVM: rename update_db_bp_intercept to update_bp_intercept
2015-11-10 22:14:32 +01:00
45bf582b02
[x86] KVM: svm: unconditionally intercept #DB (CVE-2015-8104)
2015-11-10 22:14:32 +01:00
b531af6929
Release linux (4.2.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Bxdo
-----END PGP SIGNATURE-----
Merge tag 'debian/4.2.6-1'
Refresh some patches.
2015-11-10 16:12:32 +00:00
7f79eccf5e
Update to 4.2.6
2015-11-10 11:32:17 +00:00
ef1fd62260
[x86] KVM: Intercept #AC to avoid guest->host denial-of-service (CVE-2015-5307)
2015-11-08 15:13:48 +00:00
b2076bbc37
media/vivid-osd: fix info leak in ioctl (CVE-2015-7884)
2015-11-08 15:01:04 +00:00
ed853af7cb
RDS: fix race condition when sending a message on unbound socket (CVE-2015-7990)
2015-11-08 14:48:48 +00:00
222755c823
usbvision: fix overflow of interfaces array (CVE-2015-7833)
2015-11-08 14:48:04 +00:00
e317536be0
mv643xx_eth: Re-enable TSO, fixed upstream in 4.3
2015-11-07 14:23:40 +00:00
7f648db4e2
qxl: Enable by default ( Closes : #779515 )
2015-11-07 14:19:28 +00:00
c5e06b9078
Update to 4.3
2015-11-02 10:29:06 +00:00
4c1226a6c4
selftests: breakpoint: Actually build it
2015-10-31 22:04:13 +00:00
a29879587a
selftests: vm: Try harder to allocate huge pages
2015-10-31 22:04:13 +00:00
a748a69c46
selftests: Make scripts executable
2015-10-31 22:04:13 +00:00
47af940cea
selftests: kprobe: Choose an always-defined function to probe
2015-10-31 22:04:13 +00:00
ac28c69026
selftests: Ignore compiler warnings
...
We can't fix them all yet, and they shouldn't cause a test failure.
Patch memfd makefile to ensure we don't rebuild it and thus emit
warnings during a test run.
2015-10-31 22:04:13 +00:00
499a3df5b5
selftests: Add missing #include directives
2015-10-31 22:04:13 +00:00
61407a46ed
Update to 4.2.5
2015-10-27 11:01:28 +09:00
5c41cc7594
Update to 4.3-rc7
2015-10-25 19:47:58 +09:00
53dc794e5f
[x86] smpboot: Fix CPU #1 boot timeout ( Closes : #802464 )
2015-10-24 10:50:52 +09:00
3bbce43ea7
Update to 4.2.4
...
Drop patches applied upstream.
Fix two ABI changes.
2015-10-23 01:37:19 +01:00
4a5cabce55
Rename patches for crash issue when attempting to garbage collect an uninstantiated keyring
2015-10-20 14:06:05 +02:00
6dd6bf4bb2
KEYS: Don't permit request_key() to construct a new keyring
2015-10-19 21:33:39 +02:00
a4b71a2ac3
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
2015-10-19 21:31:55 +02:00
0856d72c31
KEYS: Fix race between key destruction and finding a keyring by name
2015-10-19 21:24:41 +02:00
79863cf1e4
Update to 4.3-rc6
2015-10-19 02:29:50 +01:00
2b5f419b85
Update to 4.3-rc5
2015-10-13 22:02:43 +01:00
96c69c65e9
Update to 4.3-rc5
2015-10-13 22:00:37 +01:00
e3bec54b78
nbd: Restore request timeout detection ( Closes : #770479 )
2015-10-08 21:26:03 +01:00
81a7a029f9
Use upstream fix for perf build breakage
2015-10-08 21:01:23 +01:00
4a03a090be
perf: Fix build on architectures without CONFIG_PERF_REGS
2015-10-08 17:54:22 +01:00
2f0a4173ed
Release linux-tools (4.2-2).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=HuYh
-----END PGP SIGNATURE-----
Merge tag 'debian/4.2-2'
2015-10-06 23:57:50 +01:00
ec98f72b18
Update to 4.3-rc3
2015-10-06 23:56:52 +01:00
48bbfe3b4f
Update to 4.3-rc4
2015-10-06 23:13:52 +01:00
74a655e99e
Release linux (4.2.3-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=C10r
-----END PGP SIGNATURE-----
Merge tag 'debian/4.2.3-1'
Drop ABI reference files and ABI fixes.
2015-10-06 22:16:11 +01:00
25353e24ef
[mips*] io: Define ioremap_uc (fixes FTBFS)
2015-10-06 22:00:43 +01:00
14667fb8db
[x86] crypto camellia_aesni_avx: Fix CPU feature checks ( Closes : #800934 )
2015-10-06 12:34:12 +01:00
8418beadb6
[armhf] dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus (fixes FTBFS)
2015-10-06 00:01:48 +01:00
8ef7aab26b
Ignore/fix ABI changes as appropriate
...
sdhci and wireless driver interfaces shouldn't be used from OOT.
The block change is a false positive from genksyms.
2015-10-05 21:19:16 +01:00
11e8b8bbe3
Update to 4.2.3
2015-10-04 02:27:48 +01:00
f7856192d9
ath10k: add qca6164 support ( Closes : #800703 )
2015-10-04 00:49:40 +01:00
b532cf080d
ipc: Initialize msg/shm IPC objects before doing ipc_addid() (CVE-2015-7613)
2015-10-03 15:26:49 +02:00
9490057db7
netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths ( Closes : #800445 )
2015-10-03 02:33:14 +01:00
721a706dea
[x86] ALSA: hda - Disable power_save_node for Thinkpads ( Closes : #800694 )
2015-10-03 01:58:54 +01:00
Ben Hutchings
Salvatore Bonaccorso
Aurelien Jarno
Roger Shimizu
Mattia Dongili
Uwe Kleine-König
Ian Campbell