Commit Graph

14216 Commits

Author SHA1 Message Date
Romain Perier d2962338d6 [sparc64] Fix device naming inconsistency between sunhv_console and sunhv_reg (Closes: #926539) 2019-06-19 16:30:43 +02:00
Ben Hutchings 8533f7d9e6 tcp: Avoid ABI change for DoS fixes 2019-06-18 11:43:52 +01:00
Ben Hutchings 2536e21256 Prepare to release linux (4.19.37-4). 2019-06-17 20:00:30 +01:00
Ben Hutchings afceeb64fe debian/changelog: List changes in 4.19.37-rt20 2019-06-17 20:00:14 +01:00
Ben Hutchings 1e253edaa7 Add TCP DoS fixes 2019-06-17 19:46:08 +01:00
Ben Hutchings 4ea468554d mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (CVE-2019-10126) 2019-06-17 19:32:38 +01:00
Ben Hutchings e5664e23f5 mm/mincore.c: make mincore() more conservative (CVE-2019-5489) 2019-06-17 19:29:35 +01:00
Ben Hutchings 1894e89399 mwifiex: Don't abort on small, spec-compliant vendor IEs 2019-06-17 19:29:14 +01:00
Ben Hutchings 70b1e1a8fa mwifiex: Abort at too short BSS descriptor element 2019-06-17 19:25:01 +01:00
Ben Hutchings 54fa813858 mwifiex: Fix possible buffer overflows at parsing bss descriptor (CVE-2019-3846) 2019-06-17 19:24:10 +01:00
Ben Hutchings ff251104cb Merge branch 'sid' into 'sid'
udeb: Include modules for Samsung Chromebook Plus (v1)

See merge request kernel-team/linux!148
2019-06-10 17:06:40 +00:00
Alper Nebi Yasak cc59373e08 [arm64] udeb: fb-modules: Include rockchipdrm, panel-simple, pwm_bl, pwm-cros-ec
Some ChromeOS devices need these for the display.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:46 +03:00
Alper Nebi Yasak c8cdb80b66 [arm64] udeb: mmc-modules: Include phy-rockchip-emmc
Needed for internal storage on some ChromeOS devices.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:46 +03:00
Alper Nebi Yasak cb05f8d52a [arm64] udeb: usb-modules: Include phy-rockchip-typec, extcon-usbc-cros-ec
On Samsung Chromebook Plus (v1) trying to boot from a rootfs on a USB
storage device without these modules in the initramfs, it drops to an
initramfs shell with a non-working display. For the d-i netboot image,
the screen doesn't turn on, but the installer menu works.

A recent change to initramfs-tools includes extcon-usbc-cros-ec, so
include that and a relevant PHY module here as well.

Relevant:
  https://salsa.debian.org/kernel-team/initramfs-tools/commit/994d698a

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:45 +03:00
Alper Nebi Yasak 3c9e2d8dee [arm64] udeb: kernel-image: Include phy-rockchip-pcie
On some ChromeOS devices, this is required to connect to a wireless
network via mwifiex_pcie.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:45 +03:00
Alper Nebi Yasak b68c83d156 [arm64] udeb: kernel-image: Include cros_ec_spi and SPI drivers
The cros_ec multifunction device provides the keyboard services on some
ChromeOS devices, but requires a bus to be enabled to communicate with
it. On Samsung Chromebook Plus (v1), including spi-rockchip and
cros_ec_spi are enough. A recent change in initramfs-tools included all
SPI drivers, so include them here as well.

Relevant:
  https://salsa.debian.org/kernel-team/initramfs-tools/commit/797e5fed

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:45 +03:00
Alper Nebi Yasak 0114d125ba udeb: input-modules: Include all keyboard driver modules
Some important modules like cros_ec_keyb are in input/keyboard. A recent
change in initramfs-tools also includes them, so include them here too.

Relevant:
  https://salsa.debian.org/kernel-team/initramfs-tools/commit/40f66474

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2019-06-10 18:50:45 +03:00
Ben Hutchings d7374fce1e Merge branch 'sparc64-sid' into 'sid'
[sparc64] udeb: Disable suffix for kernel-image

See merge request kernel-team/linux!147
2019-06-09 23:28:08 +00:00
Aurelien Jarno cbcfb20ce0 [mips] Correctly bounds check virt_addr_valid (Closes: #929366) 2019-06-09 00:06:52 +02:00
Salvatore Bonaccorso 3b44df1499 Bluetooth: hidp: fix buffer overflow (CVE-2019-11884) 2019-06-07 15:25:30 +02:00
Salvatore Bonaccorso 8910626bca ext4: zero out the unused memory region in the extent tree block (CVE-2019-11833) 2019-06-07 14:53:07 +02:00
Salvatore Bonaccorso 23527ae20b brcmfmac: add subtype check for event handling in data path (CVE-2019-9503) 2019-06-07 14:49:05 +02:00
Salvatore Bonaccorso 8970aaa563 brcmfmac: assure SSID length from firmware is limited (CVE-2019-9500) 2019-06-07 14:43:58 +02:00
Romain Perier c11ba60cce [rt] Update to 4.19.37-rt20 2019-05-29 21:49:30 +02:00
Ben Hutchings 92a96d298e [x86] lockdown,sysrq: Enable ALLOW_LOCKDOWN_LIFT_BY_SYSRQ (Closes: #929583) 2019-05-26 18:13:59 +01:00
John Paul Adrian Glaubitz db249f2b52 [sparc64] udeb: Disable suffix for kernel-image 2019-05-21 14:29:31 +02:00
Ben Hutchings a8c3d89c71 README.source: Document the various makefiles and use of out-of-tree builds 2019-05-19 15:05:10 +01:00
Ben Hutchings a96bd61a2e libbpf: Build out-of-tree 2019-05-19 14:49:48 +01:00
Ben Hutchings 9b28931859 libbpf: Use only 2 components in soversion, matching package name
Debian policy says the package name must change when the soname
changes.  We don't expect the ABI to change in a stable update,
so use only 2 components in both.
2019-05-19 14:48:13 +01:00
Ben Hutchings a6879552b5 Drop unnecessary changes from "libbpf: add SONAME to shared object"
It's not necessary to delete the definitions of the variables that
become unused.  Nor is it necessary to move the definition of
LIBBPF_VERSION before LIB_FILES, because the latter is defined
as recursively expanded (i.e. its variable references are not
immediately expanded).

This makes the actual change we're making clearer, and should
reduce the future work to maintain this patch.
2019-05-19 14:36:25 +01:00
Ben Hutchings 9329ccdf87 [powerpc*] 64s: Include cpu header (fixes FTBFS) 2019-05-15 23:07:44 +01:00
Ben Hutchings 85eddd4dd2 Prepare to release linux (4.19.37-2). 2019-05-14 17:34:46 +01:00
Ben Hutchings 4abc99e835 [x86] linux-cpupower: Update CPPFLAGS for change in <asm/msr-index.h> 2019-05-14 17:34:29 +01:00
Ben Hutchings 1565dc00f4 [x86] Mitigate Microarchitectural Data Sampling (MDS) vulnerabilities
Together with a microcode update, this mitigates CVE-2018-12126,
CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091.
2019-05-10 12:03:12 +01:00
Ben Hutchings 98cbc347d3 debian/bin: Fix Python static checker regressions (Closes: #928618) 2019-05-07 21:04:05 +01:00
Ben Hutchings 5ece558b8d Prepare to release linux (4.19.37-1). 2019-05-05 19:32:32 +01:00
Ben Hutchings 2468672816 lockdown: Replace the other reference to a nonexistent manual page 2019-05-05 19:31:41 +01:00
Ben Hutchings ece5b4e4cd mm,fs: Prevent page refcount overflow (CVE-2019-11487) 2019-05-05 15:44:05 +01:00
Ben Hutchings 83f5e0f1ef tracing: Fix buffer_ref pipe ops
This is preparation for fixing CVE-2019-11487.
2019-05-05 15:42:32 +01:00
Ben Hutchings 4f3fa1e296 aio: Apply fixes from 4.19.38 (CVE-2019-10125) 2019-05-05 15:41:31 +01:00
Ben Hutchings ee337c6a41 Merge branch 'cherry-pick-CVE-fixes-up-to-4.19.39' into 'sid'
Cherry-pick further CVE fixes from versions up to 4.19.39

See merge request kernel-team/linux!146
2019-05-05 14:12:31 +00:00
Salvatore Bonaccorso 55a23e404a [amd64,arm64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882) 2019-05-05 16:06:15 +02:00
Ben Hutchings 542ea0941f Undo typo 2019-05-05 13:54:32 +01:00
Ben Hutchings 2c62d20848 MODSIGN: Make shash allocation failure fatal 2019-05-05 13:47:00 +01:00
Ben Hutchings d220ad4bb0 Fix up headers for db/MOK patches
* Set a correct, specific Origin header for each patch, instead of a
  repo URL and "cherry picked" message
* Add back Date header and Cc pseudo-headers for the second series
* Note which patches have been modified by Luca
2019-05-05 13:41:38 +01:00
Ben Hutchings 06cccfd2c3 Merge branch 'bluca/linux-mod_db' into sid
Add patches to enable loading db and MOK keys

See merge request kernel-team/linux!139
2019-05-05 13:16:03 +01:00
Ben Hutchings 95f09d9f29 Merge branch 'sid' of salsa.debian.org:kernel-team/linux into sid 2019-05-05 13:15:29 +01:00
Salvatore Bonaccorso 319a580681 Add Debian bug closer for #928457 2019-05-05 10:25:26 +02:00
Vagrant Cascadian 5be0740b91 Add changelog entry for "gencontrol_signed.py: Sort list of modules..." 2019-05-04 18:39:31 -07:00
Ben Hutchings f79da03296 drivers/firmware/google: Adjust configuration for 4.19 2019-05-04 22:40:59 +01:00