Commit Graph

6986 Commits

Author SHA1 Message Date
Ben Hutchings eeb90d2453 tcp: Enable TCP_CONG_BBR as module 2016-11-13 03:26:49 +00:00
Ben Hutchings 88d5cdd0e7 Update kconfig for 4.9
- Various ancient SCSI drivers were removed; delete config for them
- r8723au was replaced by rtl8xxxu; enable the latter instead and for
  all architectures
- netfilter config symbols were renamed; enable the new ones
- Various other config symbols are obsolete; delete them
- Various other config symbols moved to different Kconfig files
2016-11-13 03:23:23 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Ben Hutchings 82c55764b5 kbuild: Update -fno-PIE patches to match upstream 2016-11-10 20:26:29 +00:00
Ben Hutchings aecf13fddd linux-perf: Exclude perf-read-vdso* from shared library dependency check
Fixes FTBFS on sparc64:

    dpkg-shlibdeps: error: no dependency information found for /usr/lib32/libc.so.6 (used by debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32)
    Hint: check if the library actually comes from a package.
    dh_shlibdeps: dpkg-shlibdeps -Tdebian/linux-perf-4.9.substvars debian/linux-perf-4.9/usr/bin/perf_4.9 debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_xen.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_hrtimer.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_jbd2.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_function.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_mac80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_sched_switch.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kvm.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_cfg80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_scsi.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kmem.so debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32 returned exit code 2
2016-11-07 23:42:33 +00:00
Ben Hutchings 11740f3768 [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS) 2016-11-07 23:37:37 +00:00
Salvatore Bonaccorso d99e060fe3 [x86] kvm: Check memopp before dereference (CVE-2016-8630) 2016-11-06 17:54:35 +01:00
Aurelien Jarno 83309d3e08 [arm64] Enable VIRTUALIZATION and KVM. 2016-11-05 23:24:14 +01:00
Aurelien Jarno 0f6628f57c Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230, IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40. 2016-11-05 23:18:39 +01:00
Ben Hutchings 790f2d1ab5 perf: Disable use of libcrypto (Closes: #843199) 2016-11-04 15:41:12 -06:00
Ben Hutchings 0384bbbffa Prepare to release linux (4.9~rc3-1~exp1). 2016-11-03 16:51:55 -06:00
Ben Hutchings 25e532ff97 debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)

(cherry picked from commit 8e552ff10c)
2016-11-03 16:14:59 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 18036575a7 HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules 2016-11-03 15:03:01 -06:00
Ben Hutchings 6159bcf693 Revert "Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6""
This reverts commit 6f85def7ca.  It
should be OK to use gcc-6 now that we pass the -fno-PIE option where
necessary.
2016-11-03 13:33:44 -06:00
Ben Hutchings 586b6ef20b kbuild: add -fno-PIE (Closes: #841368) 2016-11-03 13:32:07 -06:00
Ben Hutchings c6318ee2ee Update to 4.9-rc3 2016-11-03 13:04:20 -06:00
Ben Hutchings 4975a766e7 [rt] Update to 4.8.6-rt5 2016-11-03 12:16:32 -06:00
Ben Hutchings 0acd08301d Update to 4.8.6 2016-11-03 12:08:20 -06:00
Ben Hutchings 8e552ff10c debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)
2016-11-02 12:21:30 -06:00
Ben Hutchings 4ac6860c3b Update to 4.9-rc2
Drop/refresh patches as appropriate.
2016-11-01 09:39:31 -06:00
Ben Hutchings 4c9bb889ce Prepare to release linux (4.8.5-1). 2016-10-28 20:34:09 +01:00
Ben Hutchings 64e2286fbd Update to 4.8.5
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
Ben Hutchings a5f9f74d46 Set ABI to 1 and version to 4.8.4-1 2016-10-28 20:20:49 +01:00
Ben Hutchings e34c6c01c6 [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled (Closes: #835160) 2016-10-28 20:18:08 +01:00
Ben Hutchings 4456cb3bc3 [x86] Input: i8042 - skip selftest on ASUS laptops 2016-10-28 20:16:42 +01:00
Ben Hutchings d9f03c486b netfilter: xt_NFLOG: fix unexpected truncated packet (Closes: #841261) 2016-10-28 20:16:09 +01:00
Salvatore Bonaccorso f86bc88075 [x86] boot/smp: Don't try to poke disabled/non-existent APIC
Closes: #841850
2016-10-26 09:17:48 +02:00
Ben Hutchings 8d9687d592 kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig (Closes: #841357) 2016-10-24 02:34:51 +01:00
Ben Hutchings 20ade9991b [armhf] dts: imx53: add support for USB armory board (Closes: #840137) 2016-10-24 02:31:45 +01:00
Ben Hutchings 0fc6a741fc cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular 2016-10-24 02:28:32 +01:00
Ben Hutchings 261ee0b56f Prepare to release linux (4.8.4-1~exp1). 2016-10-23 17:21:13 +01:00
Ben Hutchings 004996eaf0 [rt] Update to 4.8.2-rt2 2016-10-23 04:47:23 +01:00
Ben Hutchings 68bef0cc04 Release linux (4.7.8-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKPBAABCgB5BQJYB7RuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
 NTRDQjhGMzEzNDNDRjQ0EhxjYXJuaWxAZGViaWFuLm9yZwAKCRAFTLjzE0PPRKbv
 EACPw/ltBkYlQohcTxO+Jwg6Pj9J2UAcuQeDBsRLxOONLEcfChUtB6YbWnjpP4n7
 PBjFl1oXFlRL2AIp8yJJDNyLRApNHaIJ5Rw15OU0XBZi61iFkMhvZHtFUJI0VifU
 40otIo4/IAgWfYjcIl445m13bS21XzaYkT5hDmKihp1975gBP51LyVXtMPvYC2HO
 2grpj37HbDEhKfXSxPDG++ID20VrHOyKVNnfyzg9lOe0oNRT36j5i1QJtqQPekh1
 gWx98W/QqVpmeyRV1xvFjit2AzjwrIyp8H22wlN5IOG0HXitOrEA0AiQi1pjcMM0
 3O6wRmWTiOoiMiCQEQ+O+92U+uALTG0ssq/9rubAW70CieiQLKmQBZiSoY3JVDfl
 AojNP89QIx273w2aGQpZUY/RJnFWFy3fdh+c8wuLbTGkV3cCwXTd1VpNvi1EVKKK
 SjFytKI3AGLAihXiThbICSiynqsRKdh7ypWzoCF5OxdURk9/HXSOYpk0Ieuqze+R
 niLpETsVpfZCSHjjlG/7oaPAdGEqTm1BZ8a36HmzuByGftARwZ0XqaSUMsbOJC+n
 nZrljSt1migRNKcONPuAvVucOjtI6Bj52Azdq2KutQiKZt1Kie9jLSA32/VNT6u5
 xCRtMNQnatFCUqdJm5pI0pnUgdpL9nykbggY/g0uPBJfEg==
 =6RXa
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.8-1'
2016-10-23 04:43:12 +01:00
Ben Hutchings bc7a3c1c03 Update to 4.8.4
[rt] Drop fixes included in 4.8.4
2016-10-23 04:38:17 +01:00
Ben Hutchings 6f85def7ca Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6"
This reverts commits d7eadea702 and
5dbd80758c.  gcc-6 currently can't
compile the kernel on amd64 due to conflicts the way it enables PIE by
default.
2016-10-23 04:35:42 +01:00
Salvatore Bonaccorso 9586076613 Prepare to release linux (4.7.8-1). 2016-10-19 17:58:10 +02:00
Salvatore Bonaccorso c5c7172244 mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (CVE-2016-5195) 2016-10-19 17:56:02 +02:00
Salvatore Bonaccorso bcfd608039 Update to 4.7.8 2016-10-17 21:26:34 +02:00
Aurelien Jarno e7a457a218 [arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3. 2016-10-14 07:23:06 +02:00
Salvatore Bonaccorso 82d68fe753 KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042) 2016-10-13 22:50:12 +02:00
Ben Hutchings ae695bc66b scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425) 2016-10-13 00:24:49 +01:00
Ben Hutchings efccbd4eb2 posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097) 2016-10-13 00:23:11 +01:00
Ben Hutchings c27b72f255 net: add recursion limit to GRO (CVE-2016-7039) 2016-10-13 00:17:03 +01:00
Ben Hutchings 2456c48897 Update to 4.7.7
Ignore ABI change in CAN.
2016-10-11 23:18:44 +01:00
Ben Hutchings 49bfd9c5b2 aufs: Update support patchest to aufs4.8-20161010 (no functional change) 2016-10-11 20:02:43 +01:00
Ben Hutchings 387dbb7803 [rt] Update to 4.8-rt1 and re-enable 2016-10-11 19:58:48 +01:00
Aurelien Jarno b2080e6bd9 [mips*] Enable RELOCATABLE, required to enabled RANDOMIZE_BASE. 2016-10-10 20:53:23 +02:00
Ben Hutchings d288d4c41c Update to 4.8.1 2016-10-07 21:04:31 +01:00
Ben Hutchings 6429254d8f Release linux (4.7.6-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX9/r9AAoJEOe/yOyVhhEJaFIQANHw/AYqMiP/0fnT8TRl1ISq
 1jK7KhHKs4h7O+f4r/D31FLUAC+YVhpAqw4aHCiTwg9fjVULLcxaX91AAtpdliGm
 NhWPT7/p8S6SiLTZtVxEb8MAzNqTnN4UdoBMdetWvHYSD/zq5U/BSWCTmm5pOu+X
 E6mzwHdkgzUF/Wnt3bmmSmU415BG4nW6xIroYfH3DDSoj1pkxSW9BUhIv2L5mY25
 emjFyXMqYRKJ93CBbCewNy0sLiL1V94P0r8HIdo2JDQg1QecYnYtV0AC/2kZODhm
 9l3OyB6Dp20y5ib+t6/+4WqvmXl6XrvvjZMtHXsyv44gC1j7e0ChrXbsYk//4Lpo
 FgQ8IYaNLskPEXyjzNHhwt61i0BIfZmKSJ17ldkgofAmt+Wa1926jFih5twFu5fj
 pMkkxlJUZU7QKxEtuhC7bSOzRzoXjb+xx21Zgenhc89GamagRAKncFbRlJ6K+4pS
 SMVlnXuLC0MHlUnAxZQ/N7hdhS235UxSFBp3qyOrYDWmjxyXkItyRfd7SKeSk3Vx
 ZikpGlvsvExvyzrjTdyLwBmlyj2I+XZxGxOT2pe4EYb1xxLXUTBAqU1Ycsd8XjC3
 lUqTn3r29PYeXRYC9eUsJryLJjejdkTIssM5Y9hhoi9KjMnLptRS7tJAeCO+C8QF
 Qyhb3De7DCWrkcl8YSJI
 =fl9b
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.6-1'
2016-10-07 21:04:15 +01:00
Ben Hutchings 8645d4069f bug script: Optionally use sudo to read a restricted kernel log
If kernel.dmesg_restrict is enabled (which it now will be by default)
and sudo is installed, ask whether to use sudo.  If this is denied or
fails then fall back to writing a placeholder in the bug report.
2016-10-07 03:11:08 +01:00
Ben Hutchings f3b836ba7c security,printk: Enable SECURITY_DMESG_RESTRICT
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
Ben Hutchings d7eadea702 Compile with gcc-6 on all architectures 2016-10-07 02:33:25 +01:00
Ben Hutchings b597bdebea [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
Closes: #838604, #838605
2016-10-07 02:30:49 +01:00
Ben Hutchings 4c6ac698fb Prepare to release linux (4.7.6-1). 2016-10-07 02:11:51 +01:00
Ben Hutchings ec2dc97fc9 mm: memcontrol: use special workqueue for creating per-memcg caches 2016-10-07 00:59:09 +01:00
Ben Hutchings 34bf1f9c3f [amd64] Enable RANDOMIZE_MEMORY 2016-10-05 22:38:43 +01:00
Ben Hutchings 6573a2a7c7 security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
This hasn't been *accepted* upstream, but maybe some day?  It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings 0118390eaa [mips*] Enable RANDOMIZE_BASE 2016-10-05 21:13:04 +01:00
Ben Hutchings a6562544cc Update to 4.8 2016-10-05 21:06:42 +01:00
Ben Hutchings 224b1e126d [armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module 2016-10-02 16:34:25 +01:00
Ben Hutchings 78f97bb258 Add of_mdio fixes to make device tree fixed-link definitions work properly 2016-10-02 16:26:16 +01:00
Ben Hutchings 5e04e30299 Add bug number for KiBi's installer fix 2016-10-02 02:50:12 +01:00
Ben Hutchings 0fadb11944 Update to 4.7.6 2016-10-02 02:46:17 +01:00
Ben Hutchings ac65dbd50d udeb: Move nls_utf8 from fat-modules to kernel-image
Many other filesystems need it but vfat no longer does.  It calls
built-in UTF-8 functions directly, while nominally using nls_ascii
as its I/O charset.
2016-10-02 02:19:16 +01:00
Ben Hutchings b324a81a22 udeb: Fold core-modules into kernel-image
So many module packages depend on core-modules already that almost
every installer image includes it.

The only obvious exceptions are the sh4 installer builds, as there
was no core-modules package on sh4.  For consistency, include the
default set of modules in its kernel-image package now.
2016-10-02 02:16:10 +01:00
Cyril Brulebois b4bacd23c4 Add nls_ascii to the fat-modules udeb.
See commit 0e156c15e3 for the details
about utf8 vs. ascii iocharset for FAT. This fixes a regression with
EFI-related mounts within the Debian Installer.

Signed-off-by: Cyril Brulebois <kibi@debian.org>
2016-10-02 01:09:25 +01:00
Ben Hutchings f925c51d8a linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS on hppa) 2016-10-02 00:46:13 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 2aced7818a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
Ben Hutchings be7e4761f8 debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under dpkg-buildpackage
By default dpkg-architecture lets the current environment override the
architecture specified by the -a option.  We mustn't let that happen
here as we are considering all architectures.  Use the -f option to
force use of our specified architecture.
2016-09-26 22:31:21 +01:00
Ben Hutchings 1c213f98f9 Prepare to release linux (4.8~rc8-1~exp1). 2016-09-26 04:27:06 +01:00
Ben Hutchings 978f935022 Update to 4.8-rc8 2016-09-26 04:27:02 +01:00
Ben Hutchings b2480a3dfe Release linux (4.7.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX6HXOAAoJEOe/yOyVhhEJA68QAJSLxpMHBbl9474Q/SPonncf
 S7NXiYZQuo7STq0uHUVxtOTpVKRc/7y793tdtpI3Ec6nZqilS+4uKq1QNAh7kj6n
 JwilTLkfbjRS4+VqEEHJtVfK/bjijEep943W+uv3foMXPzbJulgRNrf54nUOFA2n
 WY1ZfL6Dp+tvys49UrK+3lsuY/ZCLzpck3m0rScGYgalfnZo00ttPto29YZjVXrp
 7RZset950hvEvL7cD7GXi2pqoEcvV3AISOABgKU0U6VitS1E8wJHW1pDZvHgZDKO
 55lAdyyEsAE96J1RzKwPjyHTKDmr1v6AiqNxwviLndwoLflYHUbsZBx0H9pRE0Gi
 45IDQELGFToJ/4dDNijk3oyOsQaV06f0gYv+FqGnN33IWxrlz9oQ3PSWB6qA9dr5
 vBGG1tzoYFdManBwZvH5smD25Ckc3TK2UzMqJA1BIjRpCoajxfmZWcgfPH8Z9gwJ
 5giCQkEKCbbwAXmRwVCYDFp5t0DlnyiY0/IizunHUxFapl9B6SNRFPhJVbUCNV07
 /yzsRU+TcNnV1oGQE9+uWTIelUQmc5cvMiaIlW7fifrqPAKCCnk2imYI1Tx1jsVl
 VqLo1Jalt+iZGKsEt6I3ST6LX1k/QFkz7BmJ4Yz+NdwwN6/Jq5rufFxLWGdIYPdI
 N4PnNBVMK0ooLqbaatRO
 =PYYu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.5-1'

Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00
Ben Hutchings f7d84f7a69 Prepare to release linux (4.7.5-1). 2016-09-26 01:48:21 +01:00
Ben Hutchings 7a0f81fe53 ext4: Fix checksum validation for inodes with small i_extra_isize
Closes: #838544, regression in 4.7.4
2016-09-25 22:00:56 +01:00
Ben Hutchings bdec0fe8f0 Update to 4.7.5 2016-09-25 03:05:35 +01:00
Ben Hutchings c0b958cd5f [powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
Currently on powerpc, powerpcspe and ppc64 we get an automatic dbgsym
package with symbols for the bootwrapper tools (addnote, hack-coff,
mktree).  We should either put them in linux-image-*-dbgsym or
nowhere.  For now, opt for nowhere.

Move the dh_strip invocation from the install-base rule to the
install-image_... rule.  None of the other packages using install-base
should contain any executables.
2016-09-23 03:21:18 +01:00
Ben Hutchings 24358fda8e [hppa] tracing: Re-enable FTRACE 2016-09-23 00:53:08 +01:00
Ben Hutchings 9067a5df84 [hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux (really closes: #837588) 2016-09-23 00:51:50 +01:00
Ben Hutchings 656e46ab02 Update to 4.8-rc7 2016-09-22 03:25:31 +01:00
Ben Hutchings 04355bf580 [armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
Originally done in 4.7.4-1 then reverted due to ABI breakage.
2016-09-22 01:19:37 +01:00
Ben Hutchings b37c595561 Release linux (4.7.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX4HvgAAoJEOe/yOyVhhEJq9cP/j1XO1dNpOXxq0JZod66K1sl
 JIC4LPZ3i+kiAD0amMZiAexAuCpqCDjinjVr/pAhEoAa79983tFoY9yWjDCAW+9H
 0j7Torb5wQ76BlyXCjSoaztcQmzQ1YiCvjIzk4hCJCcvqdTuA1MMr7+AbXAgi3xE
 Es/G7ai+7SK5suEYgsbliM2ndFFMtIDqgpvDVDFNBDt61m2RXKxw7SQwyItIx+Hn
 n7Aq/P+LP7BjMSP6nW6EafF/RidbAwq4x+FKqzGyZhVQV7c3YFbh0EA7lVcTDhC7
 A1ZbdeUjiFhUKchRPa56qf+eAI8sBEeU3Ga1mhpkxL8RkFKwvWmmB2J0tBE7KHgw
 WCy+8nPxnLAq3eVIkOcB3MuvNdM9DvvtQ7X5NjXnBIfq06OX4y+C+udMpafmegTG
 5YB3FVppFQNGZcOxeF9hCQspHGvBsTGRYoK3hxzx4AY94E1cakl08oZte4dHYALz
 GvP/tjbLH5i/g9djVNGtfZCHKMZbDq2QhD60GNwFoN/ssX4Q/L3q4N+eyJD9KoQM
 Bu44v1ZY7M13F4t5JUomjU2e5mze3opxEB2C7vIoyJfaUvtAWX/mn8SysDGdT0OJ
 zd8ow6IntzcL+mqxrarOPMenSt2yqoQ6WdkYkpF5aCTj2GJyAkU7dUWfWdKWtLM7
 yjuIvqRAcVzMU9XuU8uf
 =s0s4
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.4-2'

- Drop ABI references and ABI maintenance patches
- Fix Kconfig symbols for omapdss sub-drivers, which were renamed for 4.8
2016-09-22 01:17:51 +01:00
Ben Hutchings 95d8991d55 Prepare to release linux (4.7.4-2). 2016-09-19 22:09:42 +01:00
Ben Hutchings 7c621c6961 [hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS) 2016-09-19 19:56:18 +01:00
Ben Hutchings 04accecc7b [armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI change (fixes FTBFS) 2016-09-19 18:28:33 +01:00
Ben Hutchings 5a8adae35b [arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO" (fixes FTBFS) 2016-09-19 18:10:01 +01:00
Ben Hutchings aaa85335e1 Prepare to release linux (4.7.4-1). 2016-09-18 14:56:02 +01:00
Ben Hutchings 35221d0e23 bug script: Stop describing TAINT_UNSIGNED_MODULE as expected 2016-09-18 14:46:25 +01:00
Ben Hutchings b8c6a37dd9 Wrap a long line in changelog 2016-09-17 00:24:47 +01:00
Ben Hutchings 25ac8ad209 [armhf] Enable drivers and options for OpenPandora console
POWER_AVS_OMAP as built-in; DISPLAY_CONNECTOR_ANALOG_TV,
DISPLAY_PANEL_TPO_TD043MTEA1, SENSORS_TWL4030_MADC, VIDEO_OMAP3,
BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA, HDQ_MASTER_OMAP as modules;
OMAP2_DSS_DSI

Closes: #835893, thanks to Vagrant Cascadian
2016-09-17 00:22:55 +01:00
Ben Hutchings ec2a255f35 [armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1)
B53, B53_MDIO_DRIVER as modules

Closes: #836231, thanks to Vagrant Cascadian
2016-09-17 00:12:49 +01:00
Ben Hutchings 96e33a9436 [armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy)
MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules

Closes: #836251, thanks to Vagrant Cascadian
2016-09-17 00:06:43 +01:00
Ben Hutchings 550ac5c6dc linux-image: postrm: Make failure of rmdir on purge non-fatal (Closes: #836282) 2016-09-16 23:49:36 +01:00
Ben Hutchings fca831a4d1 [armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in nic-modules
Closes: #837110, thanks to Vagrant Cascadian
2016-09-16 23:29:04 +01:00
Ben Hutchings 45fbf5a22f [armhf] Enable drivers for Novena
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules

Closes: #837627, thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
Ben Hutchings 2d327101d1 [arm64] mm: Limit TASK_SIZE_64 for compatibility 2016-09-16 16:40:35 +01:00
Ben Hutchings 888d6ec092 linux-doc: Exclude Sphinx support code and Makefiles 2016-09-16 16:40:35 +01:00
Ben Hutchings 51f0aa4b84 linux-headers: Stop including unused arch/*/kernel/asm-offsets.s files 2016-09-16 16:40:35 +01:00
Ben Hutchings 725eaac2b5 Set -fdebug-prefix-map=... in compiler options for kernel and userland
For userland we already got this through dpkg-buildflags, but it uses
the current directory rather than the source package's top directory
as the default 'old' path.  Set DEB_BUILD_PATH to fix this.
2016-09-16 16:40:35 +01:00
Ben Hutchings ab1ec6c094 linux-source: Exclude Python bytecode generated when running Sphinx 2016-09-16 16:40:32 +01:00
Ben Hutchings ec5c662dbf Add Héctor's recent changes to the changelog 2016-09-16 16:40:07 +01:00
Ben Hutchings 5e2573002f Update to 4.7.4 2016-09-15 20:27:23 +01:00
Ben Hutchings 900cf04cac xen-linux-system: Relax dependency on linux-image to allow for version suffix added by linux-signed
I don't know what the suffix is going to be next time we need to add
it, but it will sort lower than the '+deb' suffix added for stable
security updates.
2016-09-15 17:06:43 +01:00
Ben Hutchings 22a9e16882 liblockdep-dev: Add dependency on liblockdep<version> (Closes: #837710) 2016-09-13 20:33:06 +01:00
Ben Hutchings ab1157972f [powerpcspe] xmon: Don't use ld on 32-bit (Closes: #836741) 2016-09-12 20:38:54 +01:00
Ben Hutchings 1dda9dd218 [hppa] Disable FTRACE due to huge size cost (Closes: #837588) 2016-09-12 20:28:04 +01:00
Ben Hutchings 09db94d1de [arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs 2016-09-10 01:20:05 +01:00
Ben Hutchings 63e9d321c9 mm, oom: prevent premature OOM killer invocation for high order request
Fixes a regression in 4.7 and someone already asked for this.
2016-09-09 20:49:48 +01:00
Ben Hutchings 5f7e2d6a98 i8042: Revert ABI break in 4.7.3 2016-09-09 02:26:58 +01:00
Ben Hutchings db336de154 [amd64] Enable SIGNED_PE_FILE_VERIFICATION, KEXEC_FILE, KEXEC_VERIFY_SIG, KEXEC_BZIMAGE_VERIFY_SIG 2016-09-07 22:09:23 +01:00
Ben Hutchings 7dd9d01ac5 Update to 4.7.3 2016-09-07 22:07:27 +01:00
Ben Hutchings 1ee2ca9d30 Prepare to release linux (4.8~rc5-1~exp1). 2016-09-07 21:52:47 +01:00
Ben Hutchings 0e5f2ca52a Enable BH1780 as module instead of SENSORS_BH1780 2016-09-07 21:33:23 +01:00
Ben Hutchings bb9f2e4f50 Fix list item markers in changelog 2016-09-07 21:32:50 +01:00
Ben Hutchings 95a7eda177 Update to 4.8-rc5 2016-09-07 21:27:44 +01:00
Ben Hutchings 7a4881e4d1 linux-doc: Build and install HTML pages from reStructuredText sources
- Add python-sphinx and python-sphinx-rtd-theme to Build-Depends-Indep
- Install files from both HTML output directories into the package
- Exclude RST sources from the package
2016-09-04 15:39:34 +01:00
Ben Hutchings 87d08943da liblockdep: Stop trying to build packages, as it failed to build again 2016-09-04 03:46:54 +01:00
Ben Hutchings a0fdc8e585 [arm64] Add cpu_to_fdt32() when setting Secure Boot flag in FDT 2016-09-03 18:35:05 +01:00
Ben Hutchings 8dccb841ee Update to 4.8-rc4 2016-09-03 13:00:10 +01:00
Martin Michlmayr 267130493a [arm64] Enable Hisilicon Ethernet devices 2016-08-29 21:25:22 -07:00
Martin Michlmayr ec43be6f74 [arm64] Enable TI WLAN (WLAN_VENDOR_TI) 2016-08-29 21:22:16 -07:00
Martin Michlmayr 96bde36948 [arm64] Enable more HISI options 2016-08-29 21:20:48 -07:00
Martin Michlmayr 5532e797b2 [arm64] Enable USB_DWC2 and USB_DWC3 2016-08-28 14:43:45 -07:00
Martin Michlmayr 9f32d6a1dd [arm64] Enable support for BCM2837 (Raspberry Pi 3) 2016-08-28 14:43:40 -07:00
Ben Hutchings cce3a89e12 Update config for 4.8 2016-08-28 21:51:18 +01:00
Martin Michlmayr 65105d535d [arm64] Enable more QCOM options
Enable MSM_GCC_8996, MSM_MMCC_8996, QCOM_HIDMA, QCOM_HIDMA_MGMT,
PCIE_QCOM, PINCTRL_MSM8996, QCOM_Q6V5_PIL.
2016-08-28 12:30:40 -07:00
Martin Michlmayr 43a9c9242b [arm64] Enable more Tegra options: TEGRA_ACONNECT 2016-08-28 12:28:17 -07:00
Ben Hutchings 1222968771 Update to 4.8-rc3 2016-08-28 19:52:50 +01:00
Ben Hutchings 75b51a8352 Prepare to release linux (4.7.2-1). 2016-08-28 15:56:10 +01:00
Ben Hutchings d66fc07342 debian/rules.real: Avoid error message when usbip's config.h doesn't exist
usbip has its own version number which we combine with the source
package version, which is assigned to VERSION for the install-usbip
target (only).  We find the version number by processing the config.h
file created by autoconf.  The file always exists before the
install-usbip rule is invoked, but the target-specific definition of
VERSION is still evaluated whenever debian/rules.real is used,
resulting in confusing (though harmless) error messages about a
missing file.

We could change VERSION to be a recursively-expanded variable, but
then it would still be evaulated multiple times.  Instead, move the
definition of VERSION into the target's commands.
2016-08-28 15:42:31 +01:00
Ben Hutchings 47ba702e2c liblockdep: Move dummy definition of prandom_u32() to fix missing declaration 2016-08-28 15:03:02 +01:00
Ben Hutchings 68902cad17 Change RXKAD and SERIAL_8250_FINTEK from =m to =y
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
Ben Hutchings 2c76695c24 aacraid: Check size values after double-fetch from user (CVE-2016-6480) 2016-08-27 23:17:17 +01:00
Ben Hutchings 0db6147b7d tcp: fix use after free in tcp_xmit_retransmit_queue() (CVE-2016-6828) 2016-08-27 23:14:24 +01:00
Ben Hutchings 0a8dfe2ccc [arm64] Add support for securelevel and Secure Boot
Closes: #831827, thanks to Linn Crosetto
2016-08-27 22:17:30 +01:00
Ben Hutchings 0e156c15e3 fat: Mitigate the lack of UTF-8 case folding
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names).  And it has to do case
folding in multiple encodings.  Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238.

The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding.  Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.

Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
Ben Hutchings 6ab7944873 kbuild: Do not export variable name with hyphen (Closes: #833561) 2016-08-26 01:43:33 +01:00
Ben Hutchings c464b2eb4b [powerpc*] ipmi: Enable IPMI_POWERNV as module (Closes: #833861) 2016-08-26 00:16:54 +01:00
Ben Hutchings 5c0b3b2b37 aufs: Update support patches to aufs4.7-20160822 (Closes: #834764) 2016-08-26 00:06:54 +01:00
Ben Hutchings fe9ef5846d Add bug closure for last commit 2016-08-25 23:52:35 +01:00
Nicolas LE CAM 7663bbdd65 [amd64] Suggest grub-efi-amd64 instead of grub-efi dummy transitionnal package
[benh: Update changelog]
2016-08-25 23:51:35 +01:00
Ben Hutchings 68c8135d73 Add hppa/parisc bug fixesfrom Helge Deller 2016-08-25 18:30:06 +01:00
Ben Hutchings dd5413ffc1 [arm*] Enable SECCOMP (Closes: #833183) 2016-08-25 18:25:02 +01:00
Ben Hutchings a45b0ae0a3 Note that the previous changes to exclude unreproducible files close #830268 2016-08-25 01:30:01 +01:00
Ben Hutchings 28eab7aa6b linux-headers: Exclude all .cmd files
These are not needed for building OOT modules and their contents may
vary depending on whether /bin/sh is bash.
2016-08-25 01:30:01 +01:00
Ben Hutchings 7231d9e75a usbip: Put all autotools-generated files in the build directory
Currently the linux-source-<version> package may or may not include
these files, depending on the order things are built in.

As autotools always modifies the source directory, copy (rsync) the
source to the build directory and build in-place there.
2016-08-25 01:29:57 +01:00
Ben Hutchings 2fddcf7c7f usbip: Use the locally-installed <linux/usbip.h>
Some years back I patched the #include of <linux/usbip.h> to include
the current, uninstalled version through a relative path because the
system-installed version will normally be outdated.  We're about to
start copying the source to avoid writing autotools crap into the
source directory, which breaks this relative path.

Since we now install the UAPI headers under debian/build at the start
of the tools build, drop the patch and add that directory to the
include path.
2016-08-25 01:28:48 +01:00
Ben Hutchings 7a54b56ad5 Merge branch 'sid'
Drop rt patchset updates as they don't apply to 4.7.

Drop various other patches already in 4.7.

Fold the remaining Debian changes in the open changelog entry for 4.6.7-1
into the open changelog entry here.
2016-08-24 20:43:19 +01:00
Ben Hutchings f445dbb9d9 Update to 4.7.2
Note the CVE IDs and Debian bugs fixed.

Drop the patches that have gone upstream.
2016-08-24 20:40:14 +01:00
Ben Hutchings 1d2857f9c5 [armfh] udeb: Add efi-modules 2016-08-24 01:03:04 +01:00
Salvatore Bonaccorso acf840d3f5 Further cleanup debian/changelog entry for 4.6.7 2016-08-16 22:05:35 +02:00
Salvatore Bonaccorso a8f98e5162 [rt] Refresh 4.6.5-rt10 patchset for rebase to 4.6.7 2016-08-16 12:46:56 +02:00
Salvatore Bonaccorso a7280813ac Update to 4.6.7 2016-08-16 11:13:39 +02:00
Ben Hutchings d48b7fcde1 Clean up changelog for 4.6.6 stable update
Add architecture/flavour qualifications; delete changes to
architectures and drivers we don't build.
2016-08-12 16:40:02 +01:00
Ben Hutchings d42cdc5bfe audit: fix a double fetch in audit_log_single_execve_arg() (CVE-2016-6136) 2016-08-12 16:27:20 +01:00
Ben Hutchings 8bc5e687b1 [powerpc*] KVM: Book3S HV: Save/restore TM state in H_CEDE (CVE-2016-5412) 2016-08-12 16:25:34 +01:00
Ben Hutchings aebb6e776f udeb: Include cdc_ncm in nic-usb-modules (Closes: #833918) 2016-08-12 15:59:19 +01:00
Salvatore Bonaccorso 7184d7bfd9 tcp: make challenge acks less predictable (CVE-2016-5696) 2016-08-12 06:52:28 +02:00
Uwe Kleine-König c4c4bb74e0 merge my two groups of log entries
I wonder why dch didn't do the right thing from the start
2016-08-11 22:19:53 +02:00
Uwe Kleine-König a9d7770fa3 [rt] fix conflicts between v4.6.6 and v4.6.5-rt10 2016-08-11 22:13:58 +02:00
Uwe Kleine-König aad68942e4 [rt] Update to 4.6.5-rt10 2016-08-11 21:43:53 +02:00
Salvatore Bonaccorso 3ff8b0fe18 Add CVE reference for CVE-2016-5400 2016-08-11 16:39:01 +02:00
Salvatore Bonaccorso 457d8bb6bd Update to 4.6.6 2016-08-11 16:29:28 +02:00
Martin Michlmayr 610bb612cf Enable more Qualcomm options
Enable more Qualcomm options required by the DragonBoard 410c.

PINCTRL_QCOM_SPMI_PMIC was changed to built-in in line with
other similar options.
2016-08-05 17:43:42 -07:00
Ben Hutchings d5ac562bf2 Drop my name from the upstream stable update 2016-08-05 19:51:19 +01:00
Ben Hutchings 3a410c0e4d Bump ABI to 2 2016-08-05 19:49:46 +01:00
Ben Hutchings df9be3c95e linux-kbuild: Include headers_install.sh and unifdef (Closes: #832359) 2016-08-05 19:15:54 +01:00
Salvatore Bonaccorso c0e269c0cd libata: LITE-ON CX1-JB256-HP needs lower max_sectors
Closes: #830971
2016-08-05 15:40:08 +02:00
Martin Michlmayr ce0127a26b [arm64] Enable more Tegra related options
Enable options for Tegra-baseddevices Jetson TX1 and Google Pixel C.

This is based on upstream commit 10a7b37b5b969d9998912e50946f7a03111037eb
2016-08-02 17:39:40 -07:00
Martin Michlmayr 1b4a6ac3f2 [arm64] Build in SERIAL_TEGRA
For consistency with other SERIAL_ options.
2016-08-02 16:50:12 -07:00
Martin Michlmayr a546b9192c [arm64] Enable ARM64_ERRATUM_834220 2016-08-02 16:36:28 -07:00
Martin Michlmayr 3da99236e3 [arm64] Enable REGULATOR_FIXED_VOLTAGE
Enable REGULATOR_FIXED_VOLTAGE which is used at least by the NVIDIA
Jetson TX1.
2016-08-02 15:55:13 -07:00
Martin Michlmayr 02b2135a4b Add USB support for NVIDIA Jetson TX1 Developer Kit
Add patches from 4.8-rc1 required for USB support on the NVIDIA Jetson
TX1 Developer Kit.
2016-08-02 15:54:01 -07:00
Salvatore Bonaccorso c2a8f662b5 vfs: ioctl: prevent double-fetch in dedupe ioctl (CVE-2016-6516) 2016-08-02 06:47:28 +02:00
Martin Michlmayr 75ed810e36 [armhf] Enable HW_RANDOM_BCM2835
This was built already implicitly but let's add it explicitly.
2016-07-31 15:28:39 -07:00
Martin Michlmayr 49a2579f52 [armhf] Enable MMC_SDHCI_IPROC 2016-07-31 15:23:38 -07:00
Uwe Kleine-König f8edc4357a Fix perf to be able to find debug info based on build-id. 2016-07-31 22:35:09 +02:00
Ben Hutchings e8c1b8e306 Update to 4.6.5
Drop patches applied upstream.

There are some ABI changes still to be resolved.
2016-07-31 01:50:59 +01:00
Ben Hutchings 0ddaf6aed3 cgroups: Enable memory controller by default 2016-07-29 12:23:32 +01:00
Ben Hutchings 7aa0b02a27 Clean up kconfig with the aid of kconfigeditor2
Re-enable various options disabled by name changes in 4.7.

Delete options completely removed in 4.7.
2016-07-20 04:13:49 +01:00
Ben Hutchings 50f9dba92e sched: Enable SCHEDSTATS (Closes: #796674) 2016-07-20 03:55:56 +01:00
Salvatore Bonaccorso 9da8616b57 Prepare to release linux (4.6.4-1). 2016-07-18 21:58:05 +02:00
Ben Hutchings 2b5e0aac58 Prepare to release linux (4.7~rc7-1~exp1). 2016-07-14 13:35:22 +01:00
Ben Hutchings 55947fe980 Revert "debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed"
This reverts commit f513bc42ae.  Bug
2016-07-14 13:34:20 +01:00
Ben Hutchings 6d39ffde84 Change names and descriptions of debug symbol packages to match debhelper 2016-07-14 11:42:15 +01:00
Ben Hutchings 619cd907a8 debian/lib/python/debian_linux/debian.py: Handle packages with only short descriptions 2016-07-14 11:41:47 +01:00
Ben Hutchings 775cc1229e Define Auto-Built-Package field when running dpkg-gencontrol
dpkg-source doesn't like to see it in debian/control.
2016-07-14 11:25:16 +01:00
Ben Hutchings 4e86887dda Update to 4.7-rc7 2016-07-14 10:50:31 +01:00
Ben Hutchings b19064d381 [rt] Update to 4.6.4-rt6 (no functional change) 2016-07-14 00:40:00 +01:00
Ben Hutchings bd2f2b2ea4 bridge: Fix ABI change in 4.6.4 2016-07-14 00:33:32 +01:00
Salvatore Bonaccorso f000506362 apparmor: fix oops, validate buffer size in apparmor_setprocattr() (CVE-2016-6187) 2016-07-13 20:30:05 +02:00
Salvatore Bonaccorso 1a1a829223 Update to 4.6.4 2016-07-13 17:57:14 +02:00
Ben Hutchings 38ec618a21 fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS (Closes: #690737)
Various free and proprietary AV products use this feature and users
apparently want it.  But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that.  So warn and taint the kernel if this feature is
actually used.
2016-07-13 01:53:59 +01:00
Uwe Kleine-König 0818af71cc Cherry pick patches for rtc-s35390a from next
This fixes shutting down some QNAP NAS devices after being waked up by
the rtc.
2016-07-12 21:44:39 +02:00
Bastian Blank 5e52b9de5c Build debug symbols for all images 2016-07-07 19:43:59 +02:00
Bastian Blank cf16dd6fec Move debug symbols into the debug archive
Currently the extra setting Auto-Built-Package: debug-symbols is needed
to actually move it in addition to the debug section.
2016-07-07 19:43:59 +02:00
Ben Hutchings 227bd93ded Release linux (4.6.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV3yLEue/yOyVhhEJAQrB2hAAg7HB6NkS0qupN5a/pjupxrtDzbWAoCKH
 uv3lbVe+y13lp5tMDB4ZeALxQf7/YHKqKF6ZUUvPx5oYyRtlE3qvqEVuwtd4CLmg
 81SIIJYLZKxom9snqoJz7kjf48B4iBiJv/LXJbDx1ulE9jS1C44crwR6gIa0Bv3x
 88OjmpSFrHafetM7TF+ZR27NapBnxlwvGpBay3fjjLl+WAUKawZd7dfZ/V5f964M
 2SmKkjBzUg2ULdRzwv83X2kf2PDuv7FrEeVexbeWvbnfea2yu0s/Y77EcQFFuAUY
 ffsIrEtO7yvPKLF2np070UG9maKyOa4T450CxrFsR1bL4EvJUjRClJias1XqePn4
 mAUVfzMKB3FPAYtn78wxo7QD2c4ymYL0MQU2IGVn1WQYf0zaCszvbMmAJjJY6PND
 mQlD0rtYYKHVde3fjuxb2gbji93L88b2kj9m74PpwIo44sGuzXiX4PJLYcJpcTnq
 WzckVD5j/Kmw5lH/q/zDhWt1QlA7+YfE9kYDT/LFc4Vo24eGLcFhJWuXy+ICMK2j
 4n5i5cnWOvpyYAJW7epu0VCKL8qj7DH70Eff8dNi6gfXwZCRTvJMpjpt4P99Q8k3
 coCvQR5KyiWVPKc/xBnTYadr2blWRgm+GcN27x2PykONlYNhjsxHh7Ea7faGBFEt
 kwdBl15bzSE=
 =uSZq
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.3-1'

Drop patches included upstream.

Drop ABI maintenance changes.
2016-07-06 22:08:50 +02:00
Ben Hutchings c78d9ff512 Update to 4.7-rc6 2016-07-06 22:06:27 +02:00
Ben Hutchings 2064fe3730 Prepare to release linux (4.6.3-1). 2016-07-04 20:10:24 +02:00
Ben Hutchings ade54804a1 [powerpc*] tm: Always reclaim in start_thread() for exec() class syscalls (CVE-2016-5828) 2016-07-03 16:33:29 +02:00
Ben Hutchings aab434acde [x86] Fix incompatiblity between kaslr and hibernation
* [amd64] power: Fix crash whan the hibernation code passes control to the
  image kernel
* [x86] KASLR, power: Remove x86 hibernation restrictions
2016-07-02 19:29:28 +02:00
Ben Hutchings f513bc42ae debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed 2016-07-02 09:44:37 +02:00
Salvatore Bonaccorso 3c35987b05 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (CVE-2016-5829) 2016-06-30 14:53:31 +02:00
Ben Hutchings 419d6356df Update to 4.6.3 2016-06-27 00:58:54 +02:00
Ben Hutchings 15c473a9c7 Prepare to release linux (4.6.2-2). 2016-06-25 11:22:27 +02:00
Salvatore Bonaccorso c42ea367e3 Add CVE identifier for nfsd issue 2016-06-25 07:22:30 +02:00
Ben Hutchings 0bb71866b7 Ignore ABI change in x_tables 2016-06-25 02:05:12 +02:00
Ben Hutchings 12183bf924 nfsd: check permissions when setting ACLs (CVE-2016-XXXX) 2016-06-25 00:56:15 +02:00
Ben Hutchings 9fd7bbdf1a netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings f5f99415a2 percpu: Fix synchronization with chunk destruction (CVE-2016-4794) 2016-06-25 00:19:08 +02:00
Ben Hutchings b782c52536 KEYS: potential uninitialized variable (CVE-2016-4470) 2016-06-25 00:18:47 +02:00
Martin Michlmayr fcf753ae77 [armhf, arm64] Enable DRM_TEGRA_STAGING
DRM_TEGRA_STAGING must currently be enabled in the kernel and libdrm
must be built with --enable-tegra-experimental-api.  Our libdrm package
already does the latter (at least on armhf), so enable the former as
well.
2016-06-23 18:13:27 -07:00
Ben Hutchings e25a0f09c3 Merge remote-tracking branch 'alioth/master'
Conflicts:
	debian/changelog
2016-06-21 20:44:48 +01:00
Aurelien Jarno 9e45452683 [mipsel] Remove loongson-2e and loongson-2f flavours (Closes: #827790). 2016-06-21 21:11:23 +02:00
Ben Hutchings e4b00d29cc Prepare to release linux (4.7~rc4-1~exp1). 2016-06-21 00:41:23 +01:00
Ben Hutchings eb1373a157 Update to 4.7-rc4 2016-06-20 13:40:09 +01:00
Ben Hutchings b9ef626a40 [rt] Update to 4.6.2-rt5 2016-06-19 22:11:38 +01:00
Ben Hutchings e65d07eb2b [armel] Disable module signing for all flavours (fixes FTBFS)
We only build udebs for modules that will not be signed, but we don't
currently have a way to selectively build udebs for only some
flavours.
2016-06-19 19:36:05 +01:00
Ben Hutchings 4981b73c71 Prepare to release linux (4.7~rc3-1~exp1). 2016-06-18 23:50:39 +01:00
Ben Hutchings 5e48a143f6 debian/control: Add workaround for libdpkg-perl bugs #827628, #827633
Dpkg::Deps has a couple of bugs that were resulting in the
libssl-dev:native build-dependency being discarded by dpkg-source.
2016-06-18 23:49:47 +01:00
Ben Hutchings 60b1e00fa0 Note closure of bug #827618 2016-06-18 21:30:55 +01:00
Ben Hutchings a808d3112b Release linux (4.6.2-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABCgAGBQJXYbBEAAoJEAVMuPMTQ89EM8wP/3llI8Jr6Q+2ktVOqYQ7U0JT
 +UEzEuKlVS+3/SjFZv8dAqpM018OJDIiccgzjvuny6MSYHiH//yWG4lC8O2WikBA
 RhfbUsNWFImEkwhY8wD1cjuF0QIXNtR7qOKdCPX5wQUiG469WF4F4l3lgWoo01ub
 hYXNsGebIjZTQE6KWGm97pvSRNFPT18DulANGpe9m804y2Xs+dQn6dVHKaSYT0BF
 labA6C+hCmbMos3gEYNzjbmU9fxYpS98pXq7uc04ryBj3UjGoBlmxeip9yrIiC0I
 oZr8kAxz5PCRSqPnhZqE51WO6eLaWIrEGGTnb6sOtbHYsTrNu8iHpWXVCkB8/2GL
 LYhOJn3AyqJE4yb69EKSWL7cbVEqyVJHkGntGhTm+tKJP0QmnKlhQY47aViPt4Fc
 IXQvUOeG94GROooRTNLp9/3N2di4p4YPNv2QgM5lUJjySWUMCNzw/MjpYfvuIHrp
 bowSN5EYDpO6WqcZZVHogM9hJ2Aq+zWYkfK4f38r4T4+g0T8IQ8qMCY/o/LV7uod
 KUbQ7SIHK7uAMT9BpJuslCwvwhKdf/9y/bcuOkB2alfR52uApdDkL04uD5jIbjaL
 fElOyQPmJPNe0zxP6yZp4G3/JbMhWdX+qc77+GWkj27mBqnBEZKBHjCmU/6Vfv2Y
 VolsoZ6sfxJ1pxlUcWPt
 =li3O
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.2-1'
2016-06-18 12:59:57 +01:00
Ben Hutchings 7f701b08f9 Update to 4.7-rc3 2016-06-18 12:53:02 +01:00
Ben Hutchings 9edbacb8a5 MIPS: libgcc: Fix ABI change in 4.6.2 2016-06-17 01:50:50 +01:00
Ben Hutchings 966488336f [mips*] Fix ABI change in 4.6.2 2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso 86e7845331 Prepare to release linux (4.6.2-1). 2016-06-15 21:45:02 +02:00
Ben Hutchings ece80cbbec liblockdep: Add all the patches submitted upstream; drop one that's obsolete
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Aurelien Jarno 70251fbb57 [ppc64*] Enable SPAPR_TCE_IOMMU, VFIO and VFIO_PCI (Closes: #826367). 2016-06-13 22:51:06 +02:00
Ben Hutchings 8bef69e784 Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-06-13 02:08:57 +01:00
Ben Hutchings 0ad327058f Fix build rules for userland tools to support cross-building
Pass $(CROSS_COMPILE) or host GNU type through to upstream build rules.

debian/rules.real: Filter tools packages by host arch, not build arch

debian/rules.d/Makefile: Build the tools needed for headers_install in
a separate subdirectory
2016-06-13 02:06:19 +01:00
Ben Hutchings a7ebaf2684 Add support for the nopython build profile, disabling the linux-perf package
Currently we build-depend on the native python (via asciidoc), and on
the host python (via python-dev).  As these are not coinstallable it
is impossible to perform a complete cross-build.  Until that's resolved,
this will allow cross-building of most of the package with the
combination of the 'cross' and 'nopython' profiles.

(This also sidesteps the issue of perf wanting a multilib compiler.)
2016-06-13 02:04:39 +01:00
Ben Hutchings 0aceb8739a debian/control: Fix build-dependencies for cross-building
The current cross-compiler packages don't set the Multi-Arch field, so
specify that the cross-compiler package must be native, rather than any
architecture.

flex doesn't support multi-arch, and this would require splitting it
(#611230, #761449).  Force use of the native package for now.

openssl doesn't support multi-arch but probably easily could (#827028).
Force use of the native package for now.

We need the native libssl-dev while building the kernel itself and the
host libssl-dev while building tools for linux-kbuild.

Document the state of cross-building in README.source.
2016-06-13 02:02:54 +01:00
Ben Hutchings cc2ac0be61 debian/README.source: Document the supported build profiles 2016-06-13 00:38:28 +01:00
Ben Hutchings 1ed7b4bdf1 linux-cpupower: Define PACKAGE_BUGREPORT to refer to reportbug, not upstream 2016-06-13 00:23:09 +01:00
Ben Hutchings 7d8366f375 debian/rules.d/Makefile: Override architecture detection when building userland headers
Martin Michlmayr found that userland builds fail if 'uname -m' reports
the native kernel architecture, and that's because we don't explicitly
set ARCH for the headers_install target.  That's fine for most cases
of a 32-bit chroot on a 64-bit kernel because a single source
architecture covers both, but arm/arm64 is an exception.

This doesn't make actual cross-builds of userland tools work.
2016-06-12 20:47:56 +01:00
Martin Michlmayr 66c93587c9 [armhf] Enable SPI_TEGRA114 2016-06-12 11:58:47 -07:00
Martin Michlmayr 2f9a7600a6 [arm64] Enable MAX77620 and PCA9539 which are required by Jetson TX1
Enable some options used by the Jetson TX1 board.  MAX77620 is used
as system PMIC and PCA9539 as I2C GPIO bus expander.

Set I2C=y since this is required by MFD_MAX77620.

CONFIG_GPIO_MAX77620 and CONFIG_GPIO_MAX77620 are not upstream yet
but will be.  I'm adding the options now to make the commit cover
everything needed.

This is patched on a patch submitted upstream by Laxman Dewangan.
2016-06-11 22:27:41 -07:00
Martin Michlmayr 14a65240ad [arm64] Enable more QCOM options 2016-06-11 00:32:32 -07:00
Martin Michlmayr 8d2b25e989 [armhf] Enable TEGRA_SOCTHERM 2016-06-11 00:29:15 -07:00
Martin Michlmayr 6902e92ec8 [arm64] Enable THERMAL
We had some thermal options in the config file but they weren't enabled
because CONFIG_THERMAL wasn't enabled.
2016-06-11 00:25:35 -07:00
Martin Michlmayr cb248f2010 [arm64] Enable TEGRA210_ADMA 2016-06-11 00:21:15 -07:00
Martin Michlmayr 25e663afc5 [armhf, arm64] Enable PHY_TEGRA_XUSB and USB_XHCI_TEGRA 2016-06-11 00:20:18 -07:00
Salvatore Bonaccorso 95cba203d5 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244) 2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso f1921659a4 Add missing changelog entry for CVE-2016-5243 2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso 91d6f22ed8 Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
proc: prevent stacking filesystems on top

ecryptfs: forbid opening files without mmap handler

sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings ff5804f208 cpupower: Bump soname version and rename library package accordingly 2016-06-10 14:47:48 +01:00