6c9c816966
Update to 4.14-rc2
...
aufs: Update support patchset to aufs4.x-rcN-20171002
2017-10-01 20:26:01 +01:00
80832bbbef
Prepare to release linux (4.13.4-1).
2017-10-01 15:52:19 +01:00
e92ee4b5df
Set ABI to 1
2017-10-01 15:52:01 +01:00
884aedc0b4
liblockdep: Define pr_cont()
2017-10-01 15:44:25 +01:00
60879f2bae
liblockdep: Make missing function declarations fatal errors
...
This should catch use of missing kernel APIs. Which has happened yet
again.
2017-10-01 15:43:34 +01:00
e2431bcb2f
[armhf] dts: exynos: Add dwc3 SUSPHY quirk ( Closes : #843448 )
2017-10-01 15:23:55 +01:00
e7b4b7d822
Merge remote-tracking branch 'refs/remotes/alioth/master'
2017-10-01 15:23:05 +01:00
9fe724d67d
linux-image-dbg: Override lintian errors for vDSOs
...
It currently reports errors binary-from-other-architecture and
shlib-without-PT_GNU_STACK-section, which are false positives.
2017-10-01 15:23:01 +01:00
2678c31e68
fix infoleak in waitid(2) (CVE-2017-14954)
2017-10-01 12:02:28 +02:00
a1b309111a
Rename lintian-overrides template files to be consistent
2017-10-01 01:36:27 +01:00
cc91d0cfa2
usbip: Stop building broken libusbip-dev package
...
It has a lintian error (non-empty-dependency_libs-in-la-file) and it
also seems to be missing a header (the newly added
usbip_host_common.h) since Linux 4.7. No-one seems to have noticed,
and it has nothing build-depending on it, so get rid of it.
2017-10-01 01:05:52 +01:00
112ad0c27f
debian/control: Remove obsolete workarounds and alternate build deps
...
The dpkg bugs affecting libssl-dev build deps were fixed in 1.18.8.
The various non-M-A packages for which we used :native qualification
were fixed before stretch release. So neither unstable nor
stretch-backports needs these.
2017-09-30 14:41:19 +01:00
06c36b3662
debian/control: Move many build dependencies to Build-Depends-Arch field
2017-09-30 14:09:54 +01:00
cd2b0b1742
Install copyright file when the nodoc profile is used
...
Revert to running dh_installdocs unconditionally, although that
currently installs more than we want (which is permitted by policy).
When we upgrade to debhelper compat level 11, dh_installdocs will
become sensitive to the profile and will install only the copyright
file in this case. But we shouldn't do that until development of
this level is complete and supported in stretch-backports.
2017-09-30 13:50:34 +01:00
9369849423
Change all binary packages with priority: extra to priority: optional
2017-09-30 13:50:34 +01:00
6d1b6b2dc8
[x86] hyperv-daemons: Create pid files under /run, not /var/run
2017-09-30 13:50:34 +01:00
fe5c3cbe60
linux-doc: Build an empty package when the nodoc profile is used
...
Wiki page BuildProfileSpec says the set of binary packages can change,
but policy says not (since 4.0.0).
2017-09-30 13:50:30 +01:00
51100af154
[x86] hyperv-daemons: Use pid file name in init script status operation
...
While we're here, also drop the unnecessary commands to replicate the
exit code.
2017-09-30 13:29:07 +01:00
9fec004526
[armel] rtc: Disable RTC_NVMEM
...
and explicitly enable it for every other configuration.
2017-09-29 20:34:41 +02:00
069fdfc2ec
ALSA: Enable SND_OSSEMUL, a new dependency of SND_{MIXER,PCM}_OSS
2017-09-29 20:31:23 +02:00
611a8e6726
thp: Enable TRANSPARENT_HUGEPAGE_ALWAYS instead of TRANSPARENT_HUGEPAGE_MADVISE
...
As advised by Andrea Arcangeli - since commit 444eb2a449ef "mm: thp:
set THP defrag by default to madvise and add a stall-free defrag
option" this will generally be best for performance.
2017-09-29 16:32:09 +02:00
f3152ccaad
Update to 4.13.4
2017-09-29 16:29:45 +02:00
480c41a802
[m68k] Enable CONFIG_PATA_FALCON as module
2017-09-27 18:11:13 +02:00
959dc591c3
Revert "[armhf,arm64] Enable OF_OVERLAY"
...
This reverts commit 7c624acb94
2017-09-27 15:57:49 +02:00
7c624acb94
[armhf,arm64] Enable OF_OVERLAY
2017-09-27 13:53:18 +02:00
0138e6bc4e
[armhf] Enable AXP2xx drivers as modules ( Closes : #873038 )
...
Enable AXP20X_ADC, CHARGER_AXP20X, BATTERY_AXP20X, GPIO_AXP209,
AXP288_CHARGER, AXP288_FUEL_GAUGE, EXTCON_AXP288, AXP288_ADC as
modules.
2017-09-24 23:48:46 +01:00
38a5047f64
[x86] Enable INTEL_CHT_INT33FE as module ( Closes : #873164 )
2017-09-24 23:41:47 +01:00
e297d59baf
[mips*r6*] Re-enable these architectures, now that dak knows about them ( Closes : #825024 )
2017-09-24 21:43:23 +01:00
e0200aa8d2
[arm64ilp32] Build a linux-libc-dev package ( Closes : #874536 )
2017-09-24 21:43:23 +01:00
5f4148f52a
[arm64] really enable NET_DSA_MV88E6XXX for Espressobin
2017-09-24 21:06:00 +02:00
45ae1e5611
[armhf,arm64] mmc: Enable MMC_BCM2835 ( Closes : #845422 )
2017-09-22 00:52:45 +01:00
bda17fdc35
Update to 4.13.3
2017-09-22 00:48:13 +01:00
81097bc990
Prepare to release linux (4.13.2-1~exp1).
2017-09-19 18:36:22 +01:00
b80b24d3e0
Release linux (4.12.13-1).
...
-----BEGIN PGP SIGNATURE-----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=Thw/
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.13-1'
Release linux (4.12.13-1).
Drop ABI reference files.
2017-09-19 18:34:53 +01:00
e921bacf69
Update to 4.13.2
2017-09-19 18:33:41 +01:00
44ed7a136d
Prepare to release linux (4.12.13-1).
2017-09-19 01:59:17 +01:00
fd05738927
nfs: Ignore ABI change
2017-09-19 01:59:05 +01:00
a18f05bb5b
Add various security fixes
2017-09-19 00:49:12 +01:00
cb5ce6ce3b
Update to 4.12.13
2017-09-19 00:33:58 +01:00
bec9a8f0bc
Add ABI reference for 4.12.0-2
2017-09-15 17:09:25 +02:00
bfbae48942
Add bug closer for CVE-2017-1000251, #875881
2017-09-15 16:56:55 +02:00
6524072137
[amd64] enable CONFIG_SPI_PXA2XX for Apple MacBook Pro
2017-09-15 10:22:01 +02:00
acfbd0bece
Bluetooth: Properly check L2CAP config option output buffer length (CVE-2017-1000251)
2017-09-14 06:51:56 +02:00
8f075a9a83
xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present (CVE-2017-14340)
2017-09-14 06:51:56 +02:00
bcc9a01d8e
scsi: qla2xxx: Fix an integer overflow in sysfs code (CVE-2017-14051)
2017-09-14 06:51:56 +02:00
2ed545523f
sctp: Avoid out-of-bounds reads from address storage (CVE-2017-7558)
2017-09-14 06:51:56 +02:00
e06a90e2dd
add changelog entries for commits 20dc799b417d..4d7d15c50a23
2017-09-12 15:06:27 +02:00
191373b962
USB/misc: reenable UCSI which got lost due to upstream changes
...
The configure symbols changed upstream, see commits
c1b0bc2dabfa ("usb: typec: Add support for UCSI interface")
8243edf44152 ("usb: typec: ucsi: Add ACPI driver")
2017-09-12 15:03:29 +02:00
b93e46d505
Prepare to release linux (4.13.1-1~exp1).
2017-09-11 05:40:04 +01:00
5a51fd79b5
Release linux (4.12.12-2).
...
-----BEGIN PGP SIGNATURE-----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=iJVA
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.12-2'
Release linux (4.12.12-2).
2017-09-11 05:39:56 +01:00
cfb260a57b
debian/source/lintian-overrides: Override license-problem-gfdl-invariants error
...
The copyright notice in the GFDL itself, mentioning invariant
sections. is just an example. lintian seems to whitelist the
plain-text version but that doesn't cover this ReST version.
2017-09-11 05:38:51 +01:00
f0fb8e6753
Release linux (4.12.12-1).
...
-----BEGIN PGP SIGNATURE-----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=HfH1
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.12-1'
Release linux (4.12.12-1).
2017-09-11 01:20:35 +01:00
5897597d01
Update to 4.13.1
2017-09-11 01:16:41 +01:00
1b4b822c90
[arm64] enable NET_DSA_MV88E6XXX for Espressobin.
2017-09-10 22:38:02 +02:00
5c837ac598
Prepare to release linux (4.12.12-1).
2017-09-10 19:42:51 +01:00
41ff7a03ca
Update to 4.12.12
2017-09-10 12:07:09 +02:00
68b6e32819
Update to 4.12.11
2017-09-09 15:06:49 +02:00
9dd4ddef21
Revert "Add bug closer for #874035 in sid branch"
...
The patchset will be reverted, cf. bug report.
This reverts commit 8d903fd551
2017-09-06 19:20:10 +02:00
4605e36d82
Add CVE identifier for CVE-2017-14140 ("Sanitize 'move_pages()' permission checks")
...
Gbp-Dch: Ignore
2017-09-05 21:03:39 +02:00
8d903fd551
Add bug closer for #874035 in sid branch
...
Gbp-Dch: Ignore
2017-09-04 21:47:01 +02:00
b066a269e0
Update to 4.13
2017-09-04 01:19:41 +01:00
922a5d78d1
Bump ABI to 2
2017-09-03 01:47:43 +01:00
7e3e2b019c
Mark protection keys change as [x86]
2017-09-02 21:06:26 +01:00
579d8e75b8
Delete unimportant changes in 4.12.10 from changelog
2017-09-02 21:05:59 +01:00
11a1869feb
Note closure of #866511
2017-09-02 21:02:35 +01:00
55a7153b7a
Ignore ABI change in iommu_device
2017-09-02 21:02:35 +01:00
c755b1fcfd
pids: Avoid ABI change in 4.12.9
2017-09-02 21:02:35 +01:00
fe31ec4f4a
Ignore ABI changes in nand and perf_event subsystems
2017-09-02 21:02:35 +01:00
418c755613
[mips*/octeon] mmc: Enable MMC_CAVIUM_OCTEON as module ( Closes : #800594 )
2017-09-01 18:42:44 +01:00
8d9993070b
buildcheck.py: Add check for uncompressed Image size
...
Currently only armel/marvell flavour need this check
2017-09-02 00:30:02 +09:00
18564a11d7
Update to 4.12.10
2017-08-31 08:45:23 +02:00
a10934bfec
debian/changelog: Clean up list of stable changes
...
- Delete irrelevant/trivial changes
- Add architecture/flavour qualifications
- Wrap long lines
2017-08-30 23:41:06 +01:00
ab768c9a0b
debian/changelog: Add my name to the open entry
2017-08-30 23:34:05 +01:00
3c3aa2c3a3
Prepare to release linux (4.13~rc7-1~exp1).
2017-08-30 20:39:57 +01:00
5775a8c918
aufs: Update support patchset to aufs4.x-rcN-20170828
2017-08-30 20:39:32 +01:00
cc07e04d02
Add CVE id fixing CVE-2017-12134
2017-08-29 22:37:09 +02:00
4a53c826d6
mtd: nandsim: remove debugfs entries in error path
2017-08-29 22:31:30 +02:00
a2dde14ec6
Update to 4.12.9
2017-08-29 22:20:12 +02:00
df8a5bf53a
Update to 4.13-rc7
2017-08-29 22:07:26 +02:00
b31bdbd377
Add bug closure of #870185
2017-08-28 21:29:05 +09:00
7ab99769cd
Add bug closure of #870185
2017-08-28 01:18:14 +09:00
68e022e33c
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-28 00:43:57 +09:00
c55043a43e
[armel] Change MTD and RTC related to modules (fixes FTBFS)
...
Change MTD_OF_PARTS, MTD_BLOCK, and MTD_PHYSMAP_OF from built-in
to modules.
And, also change all RTC related except RTC_DRV_MV, which includes
RTC_DRV_DS1307, RTC_DRV_RS5C372, RTC_DRV_PCF8563, RTC_DRV_M41T80,
and RTC_DRV_S35390A, to modules. Because most marvell boards use
RTC_DRV_MV.
2017-08-26 11:55:48 +09:00
8e44fd873c
Update to 4.12.7
2017-08-25 21:47:57 +02:00
d0704122dd
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-22 01:01:21 +09:00
a129c1c207
Update to 4.13-rc6
2017-08-21 03:09:19 +01:00
0697a35c1d
[sh4] Do not use hyphen in exported variable names (fixes FTBFS)
2017-08-19 22:37:50 +01:00
4895a85e76
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
...
Closes : #872414
(cherry picked from commit 58cec05a0e
2017-08-17 15:29:32 +01:00
d1e6bb1301
Prepare to release linux (4.13~rc5-1~exp1).
2017-08-14 23:20:50 +01:00
31202be148
Update to 4.13-rc5
2017-08-14 23:18:47 +01:00
3e6866374d
[alpha] udeb: Add i2c-modules (fixes FTBFS)
2017-08-14 19:48:41 +01:00
8c896b2cbc
liblockdep: Re-enable liblockdep packages following upstream fixes
...
This reverts commit 85b468262e87d08943da
2017-08-13 17:42:32 +01:00
c8e760ebac
Remove support for upstream DocBook-based documentation
...
It has finally been removed after all docs were converted to ReST format.
As there is no longer a way to build manpages, remove the linux-manual
package.
2017-08-13 17:26:07 +01:00
58cec05a0e
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
2017-08-13 16:22:35 +01:00
d545b4e4d0
Update to 4.13-rc4
...
Drop and refresh patchs as appropriate.
2017-08-13 14:45:14 +01:00
9f225007dc
Prepare to release linux (4.12.6-1).
2017-08-12 23:09:26 +01:00
66d8e083d5
Merge remote-tracking branch 'alioth/rosh/strip_armel'
...
Note Roger's changes in changelog.
2017-08-12 23:08:53 +01:00
0134b5c8b9
[amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base ( Closes : #869090 )
2017-08-12 23:08:23 +01:00
3322494cdd
netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules ( Closes : #868803 )
2017-08-12 22:40:40 +01:00
aa404ad63b
bfq: Enable auto-loading when built as a module
2017-08-12 22:36:27 +01:00
bea6941301
blk-mq: Enable IOSCHED_BFQ as module ( Closes : #869028 ); enable BFQ_GROUP_IOSCHED
2017-08-12 22:35:11 +01:00
e16a8acf8a
blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
...
Also explicitly set MQ_IOSCHED_DEADLINE to built-in per default.
2017-08-12 22:34:03 +01:00
eb7e4fa1ec
[x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module ( Closes : #869372 )
2017-08-12 22:13:33 +01:00
5df992ba4d
integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS ( Closes : #869565 )
2017-08-12 22:13:33 +01:00
1087d11fd6
[arm64] video: Enable FRAMEBUFFER_CONSOLE ( Closes : #870071 )
2017-08-12 22:13:33 +01:00
831ae89c56
rtlwifi: Fix firmware loading bugs ( Closes : #869084 )
2017-08-12 21:54:36 +01:00
3b32a0551f
xfrm: policy: check policy direction value (CVE-2017-11600)
2017-08-12 21:36:28 +01:00
878e72cc4c
Only list CVEs fixed by 4.12.4-4.12.6
...
As this will already be a major version update for unstable there's little
point in listing the additional changes in stable updates.
2017-08-12 20:34:29 +01:00
851fa7516e
Set ABI to 1
2017-08-12 17:16:42 +02:00
e5fcecb6a6
Drop experimental suffix from next version
...
Gbp-Dch: Ignore
2017-08-12 17:15:04 +02:00
e58e3e6be9
Update to 4.12.6
2017-08-12 16:54:34 +02:00
5bc71d3ff6
Wrap long changelog lines
...
Gbp-Dch: Ignore
2017-08-12 11:42:30 +02:00
0442142ae4
udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
2017-08-11 09:12:58 +02:00
3b6247dba4
packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
2017-08-11 09:09:51 +02:00
dcdb404db7
Add CVE ID for CVE-2017-10663 (f2fs: sanity check checkpoint segno and blkoff)
2017-08-10 08:09:14 +02:00
d977cbc209
[arm64] Add sdhci device for Espressobin
...
This completes the fix for #871049
2017-08-09 09:26:46 +02:00
0f54fcdf56
[arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin
2017-08-08 21:44:03 +00:00
df3ad3271d
readd CVS reference that was dropped by mistake
2017-08-08 10:17:23 +02:00
bc29a1558a
Update to 4.12.5
2017-08-08 09:54:35 +02:00
693284da5b
media: saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
2017-08-03 20:36:47 +02:00
9f89bea8ab
ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
2017-08-03 20:32:16 +02:00
b5081c50bc
dentry name snapshots (CVE-2017-7533)
2017-08-03 20:27:55 +02:00
3341a33e22
Add changelog entry for CVE-2017-7541
...
Gbp-Dch: Ignore
2017-07-24 07:06:09 +02:00
662ee32fad
debian/control: Fix version in dependencies on linux-headers-*-common*
...
linux-headers-*-common* packages are arch-independent since version
4.9~rc7-1~exp1, so to allow for binNMUs we need to specify
${source:Version} in versioned dependencies on them.
Closes : #869511
2017-07-23 22:46:31 +01:00
db815c4a3b
Update to 4.12.3
2017-07-22 18:26:23 +01:00
192ee88a05
[i386] perf tools: Fix unwind build (fixes FTBFS)
2017-07-22 17:41:53 +01:00
b26c964684
[armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
2017-07-22 12:40:05 +01:00
4e4f504451
[armhf] Revert "gpu: host1x: Add IOMMU support" (fixes FTBFS)
2017-07-22 11:26:42 +01:00
e6acb1f3d5
[mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
2017-07-22 00:38:10 +01:00
45a06e2c0f
Clean up symbol version fixes for symbols exported from asm
...
We can't keep reverting these changes, so instead move forward. Most
architectures now have <asm/asm-protoypes.h> and only 3 were left:
- alpha: Added <asm/asm-protoypes.h> and submitted patch upstream
- m68k: Did same, but realised it's only needed for Coldfire configs
so we don't need any patches
- sparc: Cherry-picked changes from upstream
2017-07-19 19:36:04 +01:00
aaafbb9091
[sparc64] Update "Revert "sparc: move exports to definitions"" again
...
This should really fix the FTBFS - at least, the build got as far as
building linux-image packages.
genksyms doesn't recognise __int128 as a type name, so fails to parse
the prototype for __multi3(). I could fix genksyms but would have to
regenerate the parser tables which would be a horrible patch to
maintan. So use a struct type instead for now. gcc doesn't seem to
care about this because it isn't a normal C function.
Also update the patch properly for 4.12 - I removed exports for some
symbols that were not really removed but renamed.
2017-07-18 22:50:53 +01:00
33fb750f9d
media: Enable USB_RAINSHADOW_CEC as module (see #868511 )
2017-07-18 13:27:48 +01:00
4cbd8fdf4b
Prepare to release linux (4.12.2-1~exp1).
2017-07-18 12:19:38 +01:00
094004fb35
Set ABI name to trunk
2017-07-18 12:19:35 +01:00
0e64929fc5
scripts/mod: Update modpost wrapper for 4.12
...
Commit cf0c3e68aa81 "kbuild: fix asm-offset generation to work with clang"
changed the macros used by devicetable-offsets.c. Copy the new sed code
from upstream scripts/Makefile.lib.
2017-07-18 04:45:51 +01:00
50381a0ca2
Update to 4.12.2
...
Refresh aufs4 patches by hand, as there is no release for 4.12 yet.
Refresh lockdown patches with genpatch.py and then by hand, as the
branch is a little out of date and many patches went upstream.
[rt] Disable until it is updated for 4.12 or later
2017-07-18 01:06:31 +01:00
81c11b5921
Add script to regenerate lockdown patch series from git
2017-07-18 00:06:46 +01:00
5886a28670
Prepare to release linux (4.11.11-1).
2017-07-17 03:01:21 +01:00
e9698def40
firmware: dmi: Add DMI_PRODUCT_FAMILY identification string
...
Dependency of "pinctrl: cherryview: Extend the Chromebook DMI quirk to
Intel_Strago systems".
2017-07-17 03:00:56 +01:00
4e322430ec
[armhf] Add ARM Mali Midgard device tree bindings and gpu node for rk3288
...
Thanks: Guillaume Tucker
Closes : #865646
2017-07-17 01:09:51 +01:00
1a49ee814f
udeb: Ship usb3503 module in usb-modules ( Closes : #865645 )
...
This module is needed for e.g. Arndale development boards, thanks to Wei
Liu.
2017-07-17 00:48:46 +01:00
0de513746f
[x86] pinctrl: cherryview: Extend the Chromebook DMI quirk to Intel_Strago systems
...
Closes : #862723
2017-07-17 00:38:29 +01:00
769a37d5bd
[x86] ideapad-laptop: Add various IdeaPad models to no_hw_rfkill list
...
Closes : #866706
2017-07-17 00:04:31 +01:00
bd04387e13
aufs: Update support patchset to aufs4.11.7+-20170703 ( Closes : #867257 )
2017-07-16 23:39:47 +01:00
abb94a6a73
[arm64] sound: Enable SND_HDA_INTEL as module ( Closes : #867611 )
2017-07-16 22:29:47 +01:00
3c66f8f592
udeb: Add dm-raid to md-modules ( Closes : #868251 )
2017-07-16 22:10:36 +01:00
81c2ab92a3
crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules ( Closes : #868291 )
2017-07-16 22:09:02 +01:00
1f47c2fad3
[armhf] udeb: Add sunxi_wdt to kernel-image ( Closes : #866130 )
2017-07-16 21:52:04 +01:00
4f2e547171
media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
...
Closes : #868511
2017-07-16 21:37:15 +01:00
823d15feb8
[rt] Update to 4.11.9-rt7
2017-07-16 21:28:09 +01:00
09f1166971
binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370, CVE-2017-1000371)
2017-07-16 21:24:08 +01:00
292c881344
Update to 4.11.11
2017-07-16 21:22:27 +01:00
5cea93cf9c
[rt] Update to 4.11.8-rt5
2017-07-09 13:45:42 +02:00
5b8fb021cd
Bump ABI to 2
2017-07-09 12:57:02 +02:00
e70c79cce5
Update to 4.11.9
2017-07-09 12:54:43 +02:00
49173dac27
Add CVE id for xen-blkback issue, XSA-216
2017-07-05 06:37:00 +02:00
2125fc6614
Update to 4.11.8
2017-06-29 21:21:01 +02:00
3aaf7fba55
rxrpc: Fix several cases where a padded len isn't checked in ticket decode (CVE-2017-7482)
2017-06-29 08:24:46 +02:00
fe29debbce
[arm64] Enable support for Rockchip systems ( Closes : #860976 ).
2017-06-28 16:43:40 -07:00
6bd12386aa
[arm64] enable FB_SIMPLE
2017-06-28 20:02:24 +00:00
4bffab0d23
Update to 4.11.7
...
Drop upstream applied patch.
Refresh features/all/rt/sched-mmdrop-delayed.patch.
Ignore changes for module: drivers/iio/imu/inv_mpu6050/*.
2017-06-26 22:01:21 +02:00
3f7061bec4
Add ABI reference for 4.11.0-1
2017-06-26 21:25:30 +02:00
ac812885ce
Fix typo in changlog (thanks KiBi)
2017-06-24 18:32:59 +01:00
c63d4533ab
[sparc64] Update "Revert "sparc: move exports to definitions"" for the addition of __multi3 (fixes FTBFS)
2017-06-20 20:08:40 +01:00
63a7595d75
[md68k] udeb: Use only the common module list for nic-shared-modules (fixes FTBFS)
...
Delete all the additional lines:
- 7990, 82596 and 8390p are now included in nic-modules, resulting in the
"some modules are in more than one package" error
- 8390 and libphy are already listed in the common module list
- There's no particular reason to think m68k needs the dummy driver
2017-06-20 19:31:50 +01:00
0d6a5d8794
Prepare to release linux (4.11.6-1).
2017-06-20 00:25:45 +01:00
496cb584dc
Note CVEs fixed in 4.11.5
2017-06-20 00:25:35 +01:00
0f89be27d3
mm: larger stack guard gap, between vmas (CVE-2017-1000364)
2017-06-20 00:19:55 +01:00
a4d082d16d
[armhf] PCI: Enable PCI_HOST_GENERIC ( Closes : #864726 )
2017-06-18 21:08:04 +01:00
52978aae0c
USB: serial: option: add two Longcheer device ids ( Closes : #864604 )
2017-06-18 21:05:59 +01:00
0119f2ad46
fs: Reenable HPFS_FS as module ( Closes : #864878 )
2017-06-18 21:01:55 +01:00
b39658b2cf
[rt] Update to 4.11.5-rt1 and reenable
2017-06-18 18:14:57 +01:00
76ed7c5f09
Update to 4.11.6
2017-06-18 18:12:42 +01:00
21159c097a
Release linux (4.9.30-2).
...
-----BEGIN PGP SIGNATURE-----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=7TPb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.30-2' into sid
2017-06-12 19:09:18 +01:00
8f781e82fb
Prepare to release linux (4.9.30-2).
2017-06-12 16:35:12 +01:00
e43fbf8183
Add summary of what the ipv6 fixes are for
2017-06-12 16:24:03 +01:00
29fbd594e5
NFSv4.x/callback: Create the callback service through svc_create_pooled ( Closes : #862357 )
2017-06-12 16:20:51 +01:00
8fe8c336a3
[armhf] udeb: Add axp20x_usb_power to kernel-image; add i2c-modules package
...
... including i2c-mv64xxx and i2c-rk3x
Thanks to Karsten Merker.
Closes : #856111
2017-06-12 15:49:01 +01:00
f30fbaf597
Merge branch 'stretch-security' into stretch
2017-06-12 15:43:37 +01:00
ab537b5c46
debian/rules.real: Include rules.defs before using architecture variables
...
Closes : #862842
2017-06-10 21:53:27 +01:00
6fdb07003d
Revert "uapi: fix linux/if.h userspace compilation errors"
...
This patch fixes a bug but it broke compilation of radvd (see
by reverting it for stretch.
2017-06-09 15:27:04 +01:00
cb766cd661
Add follow-up fixes for CVE-2017-9074
2017-06-08 15:39:03 +01:00
9bf3ee218c
Add follow-up fixes for CVE-2017-9074
2017-06-08 15:37:04 +01:00
304a2920e5
Update to 4.11.4
2017-06-07 23:41:28 +01:00
2da7c17a3d
ipv6: Check ip6_find_1stfragopt() return value properly.
...
Follow-up to the fix for CVE-2017-9074.
2017-06-07 23:34:55 +01:00
cb232e3cbd
Set ABI to 1
2017-06-07 21:24:14 +01:00
2e4ca2c625
Drop experimental suffix from next version
2017-06-07 21:23:33 +01:00
7618511643
[x86] Enable SERIAL_8250_MID as built-in ( Closes : #864368 )
2017-06-07 21:21:21 +01:00
9da11541bd
[x86] Enable SERIAL_8250_MID as built-in ( Closes : #864368 )
2017-06-07 21:16:14 +01:00
1d233f0650
Merge branch 'm68k' of https://github.com/glaubitz/linux-debian
...
Move the added changelog lines into a new entry, as 4.11.3-1~exp1 has
already been uploaded.
2017-06-06 20:43:50 +01:00
18a83ebe4c
[m68k] udeb: Add atari_scsi, mac_esp, mac_scsi to scsi-modules
2017-06-06 00:27:44 +02:00
dbe60feb5b
[m68k] udeb: Add buddha, falconide, gayle, macide, q40ide to pata-modules
2017-06-06 00:25:47 +02:00
8af4425509
[m68k] udeb: Move non-shared modules from nic-shared-modules to nic-modules
2017-06-06 00:24:40 +02:00
2ae0e6b97a
[m68k] udeb: Build scsi-core-modules package
2017-06-06 00:22:45 +02:00
0f75b878c9
[m68k] udeb: Build pata-modules package
2017-06-06 00:21:33 +02:00
8a4fb2b833
[m68k] udeb: Build nic-modules package
2017-06-06 00:19:15 +02:00
3a28456c15
[m68k] udeb: Build hfs-modules package
2017-06-06 00:17:56 +02:00
a744ec62e0
[m68k] udeb: Build affs-modules package
2017-06-06 00:16:56 +02:00
aca58f8953
Prepare to release linux (4.11.3-1~exp1).
2017-06-05 14:13:41 +01:00
5174845342
Release linux (4.9.30-1).
...
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlkz7vwACgkQ57/I7JWG
EQmWdQ//ctWbgUQezu+yi96QR/algQVpsRH/x1oUVnPIYi96FYOabS9pKaK0aAz1
gvTzEBz+ej2lj+ju51UWGsWHXG9CuBO9i+lRqxf74YdpmDPVco+sDWULBJzEnXqC
rYJsvnwLneDdUOeLd+r9nS/a38PezOqXd0eQApzwzvj4GStrj23aSQeLH7pXqXrr
KI/dORIXEujHoNeWzSzW3XXzOYlg9yAJuLyFmS8FGg7fBaEpnlRA+z2gXtmX7Bdn
SBJxYNttrVbucpHsIwFQysaVU+G0EXnbwgsB/AQBycCrDDIYmhmWLdqlIG+q6lsm
AGLmmX47xxrDpBPhr8iHWJkcmTBBNsSADghLvTru5PSWWTd70P/f2XWGYrfJ5bvU
OrQaV4BFG+zw6RC7Jlzx+byaXyWq15aorRAJSXKaFdebHBZXFzsbKTq4HNTRKV06
3DpoH47C0Jr4YXSbcNvgZiDZnF7OmYw/vsbJk+X4IC+igpriz3dV93QTnL2vf4iO
LaS2KT1MkGInS329DRpjCy14+q1LZM2nti6/mPji2Uqwl6ACvGYgL5y0FJLfEThH
XN+a2So6+u8MvWxrUoNrHIj8aYok96oONpDDbPIueS/PT7TwHBbq2ui1zlE8Uahg
zR3+U/V5VoBEct5n/nm0c8SRhkqsfOk8l42Dj5ibkQAuDzzt39g=
=MA6Q
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.30-1'
Drop ABI reference files and ABI maintenance patch.
2017-06-05 14:12:31 +01:00
7b53b52f6f
Update to 4.11.3
2017-06-05 14:04:06 +01:00
65c1808993
[m68k] Update 'Revert "m68k: move exports to definitions"' for 4.11 (fixes FTBFS)
...
Closes : #862393
2017-06-05 13:51:12 +01:00
6b3812c4f1
Prepare to release linux (4.9.30-1).
2017-06-04 03:03:01 +01:00
894e593fa3
[rt] Update to 4.9.30-rt20
2017-06-04 03:00:42 +01:00
9c84459829
[rt] Add new GPG subkeys for Sebastian Andrzej Siewior
2017-06-04 02:51:04 +01:00
4078eac467
[arm64] serial: pl011: add console matching function ( Closes : #861898 )
2017-06-04 02:40:54 +01:00
0aead2461f
[x86] pinctrl: cherryview: Add a quirk to make Acer Chromebook keyboard work again
...
Closes : #862723
2017-06-04 02:30:55 +01:00
3222b6559c
[m68k] udeb: Build loop-modules package
...
Signed-off-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
[bwh: Add changelog entry]
2017-06-04 02:08:50 +01:00
4ff30925bb
udeb: Add efivarfs to efi-modules.
...
This might be needed to retrieve firmware or configuration bits from
d-i.
[bwh: Add closes : #862555 ]
2017-06-04 01:40:22 +01:00
ae4eed4ced
btrfs: warn about RAID5/6 being experimental at mount time ( Closes : #863290 )
2017-06-04 01:20:23 +01:00
e6c8b0bdf6
Add Debian package version to "hung task" log messages
...
I noticed a couple of bug reports with these messages and unknown
packge version.
2017-06-04 00:02:06 +01:00
9479b65c42
debian/control: Fix compiler build-dependencies for cross-building
...
gcc cross-compilers *do* now have Multi-Arch: foreign, so we have
to take the :native qualfiication off again.
(cherry picked from commit 84e53d21c3Closes : #863907
2017-06-03 22:10:01 +01:00
f66ac78498
Note that "NFSv4: Fix callback server shutdown" closes #862357
2017-06-03 20:43:08 +01:00
b9ea5ea2a4
uapi: fix linux/if.h userspace compilation errors (see #822393 , #824442 )
2017-06-01 17:50:12 +01:00
a843bf5bb3
Merge remote-tracking branch 'alioth/sid' into sid
2017-06-01 14:10:48 +01:00
2502943c58
ipv6: fix out of bound writes in __ip6_append_data() (CVE-2017-9242)
2017-06-01 08:38:02 +02:00
cd87fb7a86
crypto: skcipher - Add missing API setkey checks (CVE-2017-9211)
2017-06-01 08:34:46 +02:00
261dbebcde
ipv6/dccp: do not inherit ipv6_mc_list from parent (CVE-2017-9076 CVE-2017-9077)
2017-06-01 08:13:06 +02:00
3253209d02
sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (CVE-2017-9075)
2017-06-01 08:08:49 +02:00
35c1e8ae8d
ipv6: Prevent overrun when parsing v6 header options (CVE-2017-9074)
2017-06-01 08:05:24 +02:00
a68b36a505
dccp/tcp: do not inherit mc_list from parent (CVE-2017-8890)
2017-06-01 07:43:55 +02:00
20b3d9876a
tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() (CVE-2017-0605)
2017-06-01 07:36:02 +02:00
ad62774819
Add various security fixes
2017-06-01 00:30:04 +01:00
c2d60c744a
Merge branch 'sid' of git+ssh://git.debian.org/git/kernel/linux into sid
2017-05-31 22:10:43 +01:00
39fa3fc3aa
Ignore ABI changes in chipidea driver
2017-05-31 22:26:40 +02:00
7c8c8ef49a
[arm64] Enable DRM modules
2017-05-31 22:25:13 +02:00
e9619f03d3
Update to 4.9.30
...
* Drop/refresh patches as necessary
* Ignore ABI changes in ccp and hid-sensors
* [mips*el/loongson-3] Revert "MIPS: Loongson-3: Select
MIPS_L1_CACHE_SHIFT_6" to avoid ABI change
2017-05-31 21:02:34 +01:00
dd1408c66d
Update to 4.9.28
2017-05-27 17:12:34 +02:00
75d5d0e57f
Update to 4.9.27
2017-05-13 18:52:03 +02:00
3d18d55b64
Update to 4.9.26
...
Ignore changes to module:sound/firewire/snd-firewire-lib
Ignore changes to module:net/l2tp/l2tp_core
2017-05-13 16:07:07 +02:00
f5fd64d72e
[mips*/*-malta] Enable POWER_RESET and POWER_RESET_SYSCON.
2017-05-08 21:12:41 +02:00
0a348a06ca
[armel] udeb: Add af_packet. firmware_class, nls_base to kernel-image (fixes FTBFS)
2017-05-06 03:54:06 +01:00
3b2f2e5859
Prepare to release linux (4.11-1~exp2).
2017-05-05 04:35:12 +01:00
8356e87ef9
[mips*/octeon] Increase RELOCATION_TABLE_SIZE to 0x00110000 (fixes FTBFS)
2017-05-05 04:05:51 +01:00
2d982936e8
usbip: Fix potential format overflow in userspace tools
...
This fixes FTBFS on 64-bit architectures with gcc-7, which in
experimental means at least amd64, ppc64, sparc64.
2017-05-04 02:48:18 +01:00
3c6e75c193
[armel/marvell] Make more things modular (fixes FTBFS)
...
This still gets us to:
Image size 2086338/2097080, using 99.49%. Under 1% space in experimental. Continuing.
which is uncomfortably close.
2017-05-03 22:46:38 +01:00
c6d012b61d
Prepare to release linux (4.11-1~exp1).
2017-05-02 20:57:50 +01:00
44b570caef
block: Enable BLK_WBT, BLK_WBT_MQ ( Closes : #859570 )
2017-05-02 20:06:26 +01:00
a4e087d3b1
Release linux (4.9.25-1).
...
-----BEGIN PGP SIGNATURE-----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=k/sj
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.25-1'
Drop the added patches, which are already in 4.11.
CONFIG_NFP_NETVF is replaced by CONFIG_NFP in 4.11.
2017-05-02 19:57:00 +01:00
fb9c5429ac
Prepare to release linux (4.9.25-1).
2017-05-02 16:21:44 +01:00
38ea360ed4
crypto: Change CRYPTO_SHA256 from module to built-in, as required by IMA
2017-05-02 16:21:36 +01:00
472b038c1a
udeb: Move mfd-core to kernel-image, as both input-modules and mmc-modules need it
2017-05-02 14:11:10 +01:00
c4f7fb8fd3
selinux: Set SECURITY_SELINUX_CHECKREQPROT_VALUE=0, per default
2017-05-02 05:22:00 +01:00
97c9515edc
leds: Enable LEDS_GPIO as module for all configurations with GPIOs ( Closes : #860569 )
2017-05-02 05:19:00 +01:00
29ba603942
udeb: Add tifm_7xx1 to mmc-modules ( Closes : #861195 )
2017-05-02 05:12:01 +01:00
96174d4f99
[arm64] Enable ARMV8_DEPRECATED, SWP_EMULATION, CP15_BARRIER_EMULATION, SETEND_EMULATION ( Closes : #861384 )
2017-05-02 04:57:37 +01:00
c18a3bc8d8
Note that 4.9.25 closes #856843
2017-05-02 04:55:07 +01:00
62f19b9260
crypto: Enable CRYPTO_DEV_CHELSIO as module
2017-05-02 04:53:13 +01:00
1cf36ebc7c
[x86] crypto: Enable CRYPTO_DEV_QAT_C3XXX, CRYPTO_DEV_QAT_C62X, CRYPTO_DEV_QAT_C3XXXVF, CRYPTO_DEV_QAT_C62XVF as modules
2017-05-02 04:53:13 +01:00
52e8d9f36f
[rt] tracing: Enable HWLAT_TRACER
...
This is in mainline but not that useful without PREEMPT_RT.
HWLAT_DETECTOR no longer exists but I didn't notice because
kconfigeditor2 only looks at the mainline Kconfig files.
2017-05-02 04:53:13 +01:00
a315c25499
[x86] hwtracing: Enable INTEL_TH, INTEL_TH_PCI, INTEL_TH_GTH, INTEL_TH_MSU, INTEL_TH_PTI as modules
2017-05-02 04:53:13 +01:00
0f9f62ce3e
[x86] platform: Enable INTEL_HID_EVENT as module
2017-05-02 04:26:32 +01:00
cf48795305
[x86] comedi: Enable COMEDI_ADV_PCI1720, COMEDI_ADV_PCI1760 as modules
2017-05-02 04:26:32 +01:00
f5c277c282
[amd64] EDAC: Enable EDAC_SKX as module
2017-05-02 04:26:32 +01:00
9728988386
IB: Enable INFINIBAND_HFI1, INFINIBAND_I40IW, INFINIBAND_QEDR, RDMA_RXE as modules
2017-05-02 04:26:32 +01:00
fd24af5949
leds: Enable LEDS_TRIGGER_DISK, LEDS_TRIGGER_MTD, LEDS_TRIGGER_PANIC
2017-05-02 04:26:32 +01:00
f965312c8e
USB/misc: Enable UCSI as module
2017-05-02 04:26:32 +01:00
3f68b53e2c
usbip: Enable USBIP_VUDC as module
2017-05-02 04:26:32 +01:00
6dafde3362
leds,USB: Enable USB_LEDS_TRIGGER_USBPORT as module
2017-05-02 04:26:32 +01:00
f98a6c1701
HID: Enable HID_SENSOR_CUSTOM_SENSOR as module
2017-05-02 04:26:32 +01:00
bb3cdfe4f6
hda: Set SND_HDA_PREALLOC_SIZE=2048 as recommended for PulseAudio
2017-05-02 04:26:32 +01:00
6b9daaf87e
[x86] amdgpu,sound/soc: Enable DRM_AMD_ACP; enable SND_SOC_AMD_ACP as module
2017-05-02 04:26:32 +01:00
5ed69967a2
media: Enable VIDEO_TW5864, VIDEO_TW686X as modules
2017-05-02 04:26:32 +01:00
2d277e1fa2
Update to 4.11
...
All patches still apply!
2017-05-01 17:56:56 +01:00
7ba1afb386
nfsd: stricter decoding of write-like NFSv2/v3 ops (CVE-2017-7895)
2017-04-29 22:02:50 +02:00
7961205000
nfsd4: minor NFSv2/v3 write decoding cleanup
2017-04-29 21:59:48 +02:00
0e77dea5fc
nfsd: check for oversized NFSv2/v3 arguments (CVE-2017-7645)
2017-04-29 21:52:43 +02:00
4c666bd4da
Update to 4.9.25
2017-04-27 20:19:04 +02:00
d2be118d62
[m68k] udeb: Enable suffix for kernel-image ( Closes : #859366 )
2017-04-27 18:37:09 +01:00
f3c3de0f60
integrity: Enable IMA and related kconfig symbols (except on armel/marvell)
...
Closes : #788290
Based on advice from Matthew Garrett.
2017-04-27 18:37:09 +01:00
6771be1138
macsec: dynamically allocate space for sglist
2017-04-27 07:42:13 +02:00
7b2acecada
macsec: avoid heap overflow in skb_to_sgvec (CVE-2017-7477)
2017-04-27 06:43:38 +02:00
e7b761c5fd
[arm64] Add bug closure for raising NR_CPUS
2017-04-25 23:40:09 +01:00
4e57833523
watchdog: Enable WATCHDOG_SYSFS
2017-04-25 23:16:40 +01:00
a1a96efe46
[x86] thermal: Enable INT3406_THERMAL as module
2017-04-25 23:13:32 +01:00
8ab44aa518
[x86] gpio: Enable GPIO_AMDPT as module
2017-04-25 22:57:34 +01:00
fd23df3a24
serial/8250: Enable SERIAL_8250_MOXA as module
2017-04-25 22:50:51 +01:00
25cf1aa652
[x86] input/touchscreen: Enable TOUCHSCREEN_SURFACE3_SPI as module
2017-04-25 22:49:04 +01:00
79226c42bf
input: Enable TABLET_USB_PEGASUS as module
2017-04-25 22:48:26 +01:00
e4f8eedb77
net/phy: Enable MICROSEMI_PHY as module
2017-04-25 22:42:23 +01:00
9ee3fb1151
ethernet: Enable NFP_NETVF as module
2017-04-25 22:41:37 +01:00
94b8328125
net/sched: Enable NET_ACT_SKBMOD as module
2017-04-25 22:23:51 +01:00
45a93062df
6lowpan: Enable Generic Header Compression modules
2017-04-25 22:22:50 +01:00
f6ab826219
PCI: Enable PCIE_PTM (except on armel/marvell)
2017-04-25 22:20:09 +01:00
fe7d4b95a0
Add changelog entry for CVE-2017-8061
...
Gbp-Dch: Ignore
2017-04-23 12:15:25 +02:00
1beb630d78
Add changelog entry to record CVE-2017-8063
...
Gbp-Dch: Ignore
2017-04-23 12:09:00 +02:00
dff836d7ec
Add CVE-2017-8064 reference
...
Gbp-Dch: Ignore
2017-04-23 12:02:37 +02:00
1ad0a79c0a
Add changelog entry for CVE-2017-8067
...
Gbp-Dch: Ignore
2017-04-23 11:46:28 +02:00
7bf90ad750
KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (CVE-2017-7472)
2017-04-22 02:26:48 +01:00
89402402c8
KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (CVE-2016-9604)
2017-04-22 02:25:04 +01:00
9c5f88b1f6
Update to 4.9.24
...
Drop most of our bug fix patches, which were included in it.
Adjust context in a couple of rt patches that have textual conflicts.
2017-04-22 00:59:32 +01:00
d518bcf5f3
[mips*el/loongson-3] Disable PAGE_EXTENSION and PAGE_POISONING.
...
This workaround a kernel crash, until the real issue is found. It is
currently being investigated.
2017-04-22 01:16:49 +02:00
f2b1e81469
[mips*/octeon] Drop obsolete patch adding support for the UBNT E200 board.
2017-04-21 11:31:33 +02:00
3cd2ed795d
[arm64] Enable REGULATOR_GPIO as module ( Closes : #860222 )
2017-04-21 01:33:01 +01:00
1e2342437a
[arm64] Enable ARC_SUNXI, RTC_DRV_SUN6I as built-in, MMC_SUNXI and PHY_SUN4I_USB as modules
...
Closes : #860855
2017-04-21 01:00:12 +01:00
259372e240
[x86] Make hyperv-modules depends on nic-shared-modules
...
hv_utils (not hv_netvsc!) now implements a PTP clock.
2017-04-20 19:24:09 +01:00
0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
be339ddfdd
aufs: Update support patchset to aufs4.x-rcN-20170410
2017-04-20 01:48:49 +01:00
327c328b54
Update to 4.11-rc7 (and credit Lukas for his previous work)
2017-04-20 01:11:22 +01:00
f26f2a520d
Update to 4.11-rc6
...
Remove merged patches and rebase remaining patches.
A portion of the secureboot patches have been upstreamed, but were
changed substantially during review, primarily to avoid code
duplication among arches. I've stripped the patches of the merged
bits and rebased the remainder.
Signed-off-by: Lukas Wunner <lukas@wunner.de>
[bwh: Undo some incorrect context changes in
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch]
2017-04-20 00:15:17 +01:00
8701ef58ba
Replace "[media] dvb-usb: Don't use stack for reset either" with upstream fix
2017-04-18 01:16:50 +01:00
3f62574711
crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618)
2017-04-16 23:25:12 +01:00
4d042ae0ff
[rt] Update to 4.9.20-rt16
2017-04-16 21:52:57 +01:00
31945f628c
Update to 4.9.22
...
Drop patches applied upstream.
2017-04-16 21:47:05 +01:00
326a2052e2
linux-image: Disable signing until it's supported in dak
...
Only code signing through dak is going to be acceptable for a stable
release, so disable the current arrangement.
2017-04-16 18:53:52 +01:00
b4b1be4c52
Move debug symbols back to the main archive
...
dak currently allows a binary upload to include debug symbol packages
that don't appear in the overrides file or the Binary field of the
changes file, so long as they have the appropriate
'Auto-Built-Package' field and their name matches another binary
package in the upload plus the '-dbgsym' suffix.
For architectures with code signing enabled, our binary uploads never
match this condition as the corresponding binary package has the
'-unsigned' suffix and the debug symbols package does not. Since we
do list the debug symbol packages in the Binary field, they do get
added to the overrides file when accepted through the NEW queue, but
they are automatically pruned from there some time later. Later
uploads then have to go through NEW even though they are not
introducing new binary packages. This would be a big problem for
stable security updates.
For now, move debug symbols back to the main archive with the old
'-dbg' suffix. Keep them enabled for all architectures.
2017-04-16 18:53:35 +01:00
6ef03e0be7
Merge remote-tracking branch 'alioth/sid' into sid
2017-04-16 17:22:54 +01:00
b80acec65e
[arm64] Set NR_CPUS=256 to allow for multi-SoC systems
...
ThunderX1 has 48 cores and supports 2-way systems for 96 CPUs.
ThunderX2 has 54 cores and also supports 2-way systems for 108 CPUs.
X-Gene 3 "Skylark" is supposed to support 8-way systems with 32
cores each for 256 CPUs (I'm not sure if they're cache-coherent
beyond 2-way though.
2017-04-16 17:19:45 +01:00
01f0df794d
[mips*/octeon] Set NR_CPUS=64 to allow for Cavium CN7890
...
The CN7890 has 48 Octeon III cores.
I don't know whether current configuration will run on a CN7890, but this
should avoid an ABI break if we add support later.
2017-04-16 17:19:00 +01:00
c22c7deb17
[mips*el/loongson-3] Set NR_CPUS=16 to allow for Loongson 3B2000
...
The Loongson 3B2000 has 4 cores and can apparently be used in a 4-way
configuration, for 16 CPUs.
I don't think the current configuration will run on a 3B2000, but this
should avoid an ABI break if we address that.
2017-04-16 17:18:59 +01:00
ba74e6e6c8
[powerpc*/*64*] Enable CPUMASK_OFFSTACK to reduce stack usage
2017-04-16 17:18:44 +01:00
23fadf4f82
Update debian/changelog file
...
Gbp-Dch: Ignore
2017-04-16 08:00:01 +02:00
1d5fde10d8
mm/mempolicy.c: fix error handling in set_mempolicy and mbind (CVE-2017-7616)
2017-04-16 07:59:50 +02:00
b1b8586924
[powerpc/powerpc64,ppc64] Set NR_CPUS=2048, matching ppc64el
2017-04-15 02:41:22 +01:00
9cb1bd16f9
udeb: Include all AHCI drivers in sata-modules ( Closes : #860335 )
2017-04-14 20:35:35 +01:00
263f51b136
cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores ( Closes : #859978 )
2017-04-11 02:57:43 +01:00
5547db97a6
fscrypt: remove broken support for detecting keyring key revocation (CVE-2017-7374)
2017-04-08 09:36:53 +02:00
43f7156d3a
ping: implement proper locking (CVE-2017-2671)
2017-04-08 09:18:35 +02:00
ca91ae2eb7
[powerpc/powerpc64,ppc64*] target: Enable SCSI_IBMVSCSIS as module
...
This driver was removed in 3.18, but has been updated to use the new
target framework and was added again in 4.8.
As it lives under drivers/scsi and not drivers/target, exclude it from
the scsi-modules udeb.
2017-04-08 01:43:00 +01:00
20a0659e24
drm/nouveau/disp/mcp7x: disable dptmds workaround ( Closes : #850219 )
2017-04-07 20:42:59 +01:00
505d589daf
[x86] usbip: Increase USBIP_VHCI_NR_HCS to 8 and USBIP_VHCI_HC_PORTS to 31
...
Closes : #859641
2017-04-07 20:32:56 +01:00
abd4d7ab60
[s390x] Set NR_CPUS=256 ( Closes : #858731 )
2017-04-07 20:29:12 +01:00
1d2e81c18d
Bump ABI to 3
2017-04-07 20:28:09 +01:00
699099dfce
debian/rules.real: Undefine $LANGUAGE, which can break debug symbols for vDSOs
...
Closes : #859807
2017-04-07 20:25:37 +01:00
c59213f33a
Prepare to release linux (4.10.7-1~exp1).
2017-03-31 00:41:15 +01:00
9ee9c719d0
Enable BUG_ON_DATA_CORRUPTION
...
This means errors detected by DEBUG_LIST result in BUG rather than WARN.
2017-03-31 00:33:12 +01:00
fa49af3f6b
[s390x] Set NR_CPUS=256 ( Closes : #858731 )
2017-03-31 00:02:59 +01:00
500ce0c9cd
netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules ( Closes : #858897 )
2017-03-31 00:02:01 +01:00
473a9f83a2
w1: Really enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 18:27:54 +01:00
459f0a48e4
Release linux (4.9.18-1).
...
-----BEGIN PGP SIGNATURE-----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=ONVb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.18-1'
Drop ABI reference files.
Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
2df8b204ea
Update to 4.10.7
2017-03-30 14:04:10 +01:00
9df323e7dd
Prepare to release linux (4.9.18-1).
2017-03-30 02:16:33 +01:00
4adb26a0c1
w1: Enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 01:53:01 +01:00
f294506bfa
netfilter: nft_ct: add notrack support ( Closes : #845500 )
2017-03-30 01:40:57 +01:00
4f10661dbb
[arm64,x86] Enable CROS_KBD_LED_BACKLIGHT as module ( Closes : #856906 )
2017-03-30 01:01:37 +01:00
576f686158
[armhf] sound/soc: Enable SND_SUN4I_SPDIF as module ( Closes : #857410 )
2017-03-30 00:22:17 +01:00
a1503865a9
[sparc64] udeb: Re-add ufs-modules ( Closes : #858049 )
2017-03-30 00:19:48 +01:00
42ea80c71c
[arm64] rtc: tegra: Implement clock handling ( Closes : #858514 )
2017-03-29 23:42:54 +01:00
8a7210aeea
net/packet: Fix integer overflow in various range checks (CVE-2017-7308)
2017-03-29 22:50:53 +01:00
8703214f24
[x86] drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() (CVE-2017-7294)
2017-03-29 22:42:53 +01:00
de3e9af4dc
[x86] vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (CVE-2017-7261)
2017-03-29 22:36:16 +01:00
2dd2d226ca
scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187)
2017-03-29 22:31:24 +01:00
3e739d51e3
xfrm_user: Apply fixes for CVE-2017-7184
2017-03-29 22:28:20 +01:00
9984b67924
[rt] Update to 4.9.18-rt14
2017-03-29 04:57:14 +01:00
5c465af56e
[rt] Update to 4.9.18-rt13 (no functional change)
2017-03-27 23:33:49 +01:00
8f58868ca2
Update to 4.9.18
...
Ignore ABI changes as they don't seem to affect OOT modules.
2017-03-27 23:33:33 +01:00
6f1e58a58e
[powerpc*] Ignore ABI changes in cxl (fixes FTBFS) ( Closes : #858530 )
2017-03-27 22:25:03 +01:00
7a622bd483
Prepare to release linux (4.9.16-1).
2017-03-22 17:01:40 +01:00
b303c03f3b
Update to 4.9.16
...
Drop one patch included in it
2017-03-20 00:12:10 +00:00
529c42c701
Reorganise and improve comments for ignored ABI changes
2017-03-20 00:10:59 +00:00
Ben Hutchings
Salvatore Bonaccorso
John Paul Adrian Glaubitz
Uwe Kleine-König
Roger Shimizu
Cyril Brulebois
Vagrant Cascadian
Aurelien Jarno
Lukas Wunner
James Clarke