d0292c6f67
netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
2016-04-13 21:11:40 +01:00
c972e924a7
Prepare for unstable upload: set ABI to 1 and drop ~exp1 from the version
2016-04-13 20:53:11 +01:00
2b5668bad8
linux-support: Include udeb configuration from debian/installer
...
This will be used by the linux-signed package.
2016-04-13 20:53:05 +01:00
74940e0a05
Disable UNUSED_SYMBOLS; it is now itself unused
2016-04-13 20:52:59 +01:00
68c5c5997c
Merge remote-tracking branch 'alioth/sid'
...
Merge open changelog entry for 4.4.6-2 into our open changelog entry.
Refresh the new patches.
2016-04-13 20:52:01 +01:00
6e05e68d7a
Update to 4.5.1
2016-04-13 20:49:29 +01:00
dfd9a83664
[armhf/armmp] Enable DW_WATCHDOG as module
...
Enable DW_WATCHDOG as module, used on Firefly-RK3288.
Patch by Vagrant Cascadian.
(Closes : #820834 )
2016-04-13 22:37:43 +09:00
5c3489a433
[armel/marvell] Add DT support for "Buffalo/Revogear Kurobox Pro"
2016-04-08 08:33:27 +09:00
062efc4b3f
[mips*/octeon] Enable CRYPTO_MD5_OCTEON, CRYPTO_SHA1_OCTEON, CRYPTO_SHA256 and CRYPTO_SHA512_OCTEON.
2016-04-06 13:08:06 +02:00
4f0dd22673
[mips*/octeon] Bump CONFIG_NR_CPUS to 32 to accomodate recent Octeon III SoCs.
2016-04-06 12:27:15 +02:00
c068d48b25
[mips*/octeon] udeb: Add ahci_octeon and ahci_platform modules to sata-modules.
2016-04-06 00:06:31 +02:00
511d4cedbc
[mips*/octeon] Enable SPI_OCTEON.
2016-04-05 23:58:00 +02:00
54ab3395af
Group all securelevel and Secure Boot changes together, closing #820008
2016-04-05 14:03:57 +01:00
119c44d06d
Merge branch 'benh/secure-boot'
2016-04-05 13:59:42 +01:00
7836b549be
[mips*/octeon] Backport OCTEON SATA controller support from 4.6-rc1. Enable AHCI_OCTEON.
2016-04-04 22:51:11 +02:00
d514efc4cc
[mipsel/mips/config.loongson-2f] Disable VIDEO_CX23885, VIDEO_IVTV, VIDEO_CX231XX, VIDEO_PVRUSB2 (fixes FTBFS).
...
This workaround the failed compilation of cx25840-core.c:
| {standard input}: Assembler messages:
| {standard input}:583: Error: branch out of range
| {standard input}:636: Error: branch out of range
| {standard input}:40094: Error: branch out of range
These are caused by the -Wa,-mfix-loongson2f-jump, which replaces the
"jalr t9" instruction by the "or t9, t9, 0x80000000; jalr t9"
instructions, thus causing an increase in code size.
This is probably the best way to workaround the FTBFS, especially given
that the loongson-2e/2f flavour are likely going to be removed for
stretch.
2016-04-04 22:20:30 +02:00
76de9f06e0
scripts: Fix X.509 PEM support in sign-file
...
DER format works but it's easier if we can use PEM everywhere.
2016-04-04 19:28:26 +01:00
6e18d075e9
linux-kbuild: Add extract-cert and sign-file programs
2016-04-04 10:41:48 +01:00
23d1e0f3c2
debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
...
This is significant because they link with OpenSSL.
2016-04-04 10:41:48 +01:00
f880a7ff25
Fix config for module signing
...
Replace my pubkey with an X.509 (PEM encoded) certificate as actually
required. Add quotes around the filenames in kconfig.
2016-04-04 10:41:46 +01:00
a6aaaeb263
Note added build-dependency on openssl too
2016-04-04 02:04:53 +01:00
969431b952
certs: Set SYSTEM_TRUSTED_KEYS to my own personal key to support initial testing of signed modules
...
Also set MODULE_SIG_KEY to empty string to avoid including a build-
time generated key.
2016-04-03 13:12:23 +01:00
c955e35c32
modules: Enable MODULE_SIG and MODULE_SIG_SHA256
...
...but not MODULE_SIG_ALL as signatures will be packaged separately
2016-04-03 13:12:23 +01:00
7321950826
Add Matthew Garrett's securelevel patchset in preparation for Secure Boot support
2016-04-03 04:31:52 +01:00
ea7af96b4d
Merge branch 'benh/merge-linux-tools'
...
The primary reason not to build userland tools from src:linux was that
it allowed building with a minimal cross-toolchain and without the
target's glibc development files. In particular, the CI system at
kernel-archive.buildserver.net used such minimal cross-toolchains.
It is been a long time since kernel-archive.buildserver.net was
running, so the original reason for the separation no longer exists.
If we implement CI using similarly limited toolchains again, we can use
a build-profile to exclude userland builds, as these are now well
supported.
This merges the full history of both source packages together,
including in debian/changelog (which looks rather weird). The binary
packages resulting from this merge appear to be functionally the same,
though I can't be certain there's no regression.
2016-04-02 15:13:23 +01:00
b1e9b11e7a
[armel/marvell] Add DT support for "Synology DS112" and "Zyxel NSA320"
...
Thanks to Heinrich Schuchardt.
(Closes : #819393 )
2016-03-31 00:30:03 +09:00
e8347a4589
ntfs: Disable NTFS_RW ( Closes : #566356 )
...
ntfs-3g has much more complete write support.
2016-03-25 15:54:51 +00:00
fac738652d
[amd64] Re-enable ZONE_DMA and sound drivers that depend on it ( Closes : #814855 )
2016-03-25 13:47:58 +00:00
d3da98fed6
Cherry-pick ZONE_DEVICE changes from linux-next
2016-03-25 13:45:59 +00:00
cea35dbc2d
[armel/marvell] Change MTD_CFI_AMDSTD from module to built-in
...
Because orion5x-based Buffalo Linkstation devices still need it
(Closes : #818598 )
2016-03-24 08:21:40 +09:00
a5f7516c0c
Merge linux-tools source package into linux ( Closes : #550379 , #573483 , #816500 )
...
* Drop redundant gitignore.patch from linux-tools
* Rename linux-tools' debian/templates/control.main.in to
debian/templates/control.tools.in
* Combine changelogs, putting all entries for each upstream release
cycle in chronological order
* Combine rules and gencontrol.py code
2016-03-21 01:32:16 +00:00
4263a6e85d
Prepare to release linux-tools (4.5-1~exp1).
2016-03-20 21:20:22 +00:00
fd89731014
linux-perf: Fix use of uninitialized variables
2016-03-20 21:20:16 +00:00
4fe6a76379
Release linux-tools (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=sw9T
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
Move debian/build/tools/power/cpupower/Makefile to
debian/rules.d/tools/power/cpupower/Makefile where it belongs now.
2016-03-20 20:07:25 +00:00
6e8c2c9ccd
Prepare to release linux-tools (4.4.6-1).
2016-03-20 19:08:47 +00:00
cb4117a268
debian/copyright: Move GPL-2 boilerplate to its own paragraph
...
It is apparently valid to refer to licenses by short name alone only
if the full text is placed in a standalone License paragraph, not as
part of an earlier Files paragraph.
2016-03-20 19:08:47 +00:00
466e99f397
linux-perf: Override lintian errors for perf-read-vdso{,x}32 in 64-bit packages
2016-03-20 19:08:47 +00:00
cf4f32ccd1
debian/control: Update policy version to 3.9.7; no changes required
2016-03-20 16:06:01 +00:00
96559e9c4c
Build tools from power/cpupower
...
They'll eventually replace cpufrequtils and libcpufreq{0,-dev} so the
structure of the packages is the same.
2016-03-20 15:49:21 +00:00
8c0226951b
Update to 4.4.6
2016-03-20 15:40:05 +00:00
545a89a7a3
Update to 4.5
2016-03-20 15:33:22 +00:00
9bbc2cf793
Prepare to release linux (4.5-1~exp1).
2016-03-20 12:06:57 +00:00
5c1a796192
[x86] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (regression in 4.5)
2016-03-20 11:38:22 +00:00
968b97dacd
[x86] Enable RANDOMIZE_BASE (kASLR) ( Closes : #816067 )
...
Briefly mention need to use a kernel parameter.
2016-03-20 01:45:53 +00:00
386c2986a1
[x86] amdgpu: Enable DRM_AMD_POWERPLAY ( Closes : #818174 )
2016-03-20 01:45:34 +00:00
a8bcbc8801
[x86] input: Enable ASUS_WIRELESS as module ( Closes : #818487 )
2016-03-20 01:28:20 +00:00
42fd34bcd1
Release linux (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=5Nfc
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
2016-03-20 01:15:39 +00:00
962c3c4a6f
[x86] iopl/64: properly context-switch IOPL on Xen PV (CVE-2016-3157)
2016-03-17 18:21:13 +01:00
5b884b50ae
Prepare to release linux (4.4.6-1).
2016-03-17 01:25:23 +00:00
6a9bf9b4b4
changelog: Fix some architecture prefixes
2016-03-17 01:25:18 +00:00
Ben Hutchings
Roger Shimizu
Aurelien Jarno
Mattia Dongili
Salvatore Bonaccorso