2678c31e68
fix infoleak in waitid(2) (CVE-2017-14954)
2017-10-01 12:02:28 +02:00
a1b309111a
Rename lintian-overrides template files to be consistent
2017-10-01 01:36:27 +01:00
cc91d0cfa2
usbip: Stop building broken libusbip-dev package
...
It has a lintian error (non-empty-dependency_libs-in-la-file) and it
also seems to be missing a header (the newly added
usbip_host_common.h) since Linux 4.7. No-one seems to have noticed,
and it has nothing build-depending on it, so get rid of it.
2017-10-01 01:05:52 +01:00
604a4a5743
debian/rules.real: Stop using the mandocs target
...
The upstream doc build system still implements the old mandocs target,
but it's now a no-op. Stop using it, as it will presumably be removed
at some point.
2017-09-30 14:47:20 +01:00
112ad0c27f
debian/control: Remove obsolete workarounds and alternate build deps
...
The dpkg bugs affecting libssl-dev build deps were fixed in 1.18.8.
The various non-M-A packages for which we used :native qualification
were fixed before stretch release. So neither unstable nor
stretch-backports needs these.
2017-09-30 14:41:19 +01:00
06c36b3662
debian/control: Move many build dependencies to Build-Depends-Arch field
2017-09-30 14:09:54 +01:00
d0991cbfc0
Update policy version to 4.1.1
2017-09-30 13:50:56 +01:00
cd2b0b1742
Install copyright file when the nodoc profile is used
...
Revert to running dh_installdocs unconditionally, although that
currently installs more than we want (which is permitted by policy).
When we upgrade to debhelper compat level 11, dh_installdocs will
become sensitive to the profile and will install only the copyright
file in this case. But we shouldn't do that until development of
this level is complete and supported in stretch-backports.
2017-09-30 13:50:34 +01:00
9369849423
Change all binary packages with priority: extra to priority: optional
2017-09-30 13:50:34 +01:00
6d1b6b2dc8
[x86] hyperv-daemons: Create pid files under /run, not /var/run
2017-09-30 13:50:34 +01:00
fe5c3cbe60
linux-doc: Build an empty package when the nodoc profile is used
...
Wiki page BuildProfileSpec says the set of binary packages can change,
but policy says not (since 4.0.0).
2017-09-30 13:50:30 +01:00
51100af154
[x86] hyperv-daemons: Use pid file name in init script status operation
...
While we're here, also drop the unnecessary commands to replicate the
exit code.
2017-09-30 13:29:07 +01:00
9fec004526
[armel] rtc: Disable RTC_NVMEM
...
and explicitly enable it for every other configuration.
2017-09-29 20:34:41 +02:00
069fdfc2ec
ALSA: Enable SND_OSSEMUL, a new dependency of SND_{MIXER,PCM}_OSS
2017-09-29 20:31:23 +02:00
611a8e6726
thp: Enable TRANSPARENT_HUGEPAGE_ALWAYS instead of TRANSPARENT_HUGEPAGE_MADVISE
...
As advised by Andrea Arcangeli - since commit 444eb2a449ef "mm: thp:
set THP defrag by default to madvise and add a stall-free defrag
option" this will generally be best for performance.
2017-09-29 16:32:09 +02:00
f3152ccaad
Update to 4.13.4
2017-09-29 16:29:45 +02:00
480c41a802
[m68k] Enable CONFIG_PATA_FALCON as module
2017-09-27 18:11:13 +02:00
959dc591c3
Revert "[armhf,arm64] Enable OF_OVERLAY"
...
This reverts commit 7c624acb94
2017-09-27 15:57:49 +02:00
a618b8dbbf
[armhf,arm64] nouveau: Explicitly enable NOUVEAU_PLATFORM_DRIVER
2017-09-27 14:25:39 +02:00
7c624acb94
[armhf,arm64] Enable OF_OVERLAY
2017-09-27 13:53:18 +02:00
0138e6bc4e
[armhf] Enable AXP2xx drivers as modules ( Closes : #873038 )
...
Enable AXP20X_ADC, CHARGER_AXP20X, BATTERY_AXP20X, GPIO_AXP209,
AXP288_CHARGER, AXP288_FUEL_GAUGE, EXTCON_AXP288, AXP288_ADC as
modules.
2017-09-24 23:48:46 +01:00
38a5047f64
[x86] Enable INTEL_CHT_INT33FE as module ( Closes : #873164 )
2017-09-24 23:41:47 +01:00
951bbaaefe
debian/config/defines: Sort architecture list
2017-09-24 21:43:23 +01:00
e297d59baf
[mips*r6*] Re-enable these architectures, now that dak knows about them ( Closes : #825024 )
2017-09-24 21:43:23 +01:00
e0200aa8d2
[arm64ilp32] Build a linux-libc-dev package ( Closes : #874536 )
2017-09-24 21:43:23 +01:00
5f4148f52a
[arm64] really enable NET_DSA_MV88E6XXX for Espressobin
2017-09-24 21:06:00 +02:00
45ae1e5611
[armhf,arm64] mmc: Enable MMC_BCM2835 ( Closes : #845422 )
2017-09-22 00:52:45 +01:00
bda17fdc35
Update to 4.13.3
2017-09-22 00:48:13 +01:00
cbc7702377
Clean up kconfig using kconfigeditor2
...
This is just fixing up file headings; ukleinek handled all the renamed
symbols.
2017-09-21 23:49:06 +01:00
81097bc990
Prepare to release linux (4.13.2-1~exp1).
2017-09-19 18:36:22 +01:00
b80b24d3e0
Release linux (4.12.13-1).
...
-----BEGIN PGP SIGNATURE-----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=Thw/
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.13-1'
Release linux (4.12.13-1).
Drop ABI reference files.
2017-09-19 18:34:53 +01:00
e921bacf69
Update to 4.13.2
2017-09-19 18:33:41 +01:00
44ed7a136d
Prepare to release linux (4.12.13-1).
2017-09-19 01:59:17 +01:00
fd05738927
nfs: Ignore ABI change
2017-09-19 01:59:05 +01:00
a18f05bb5b
Add various security fixes
2017-09-19 00:49:12 +01:00
cb5ce6ce3b
Update to 4.12.13
2017-09-19 00:33:58 +01:00
bab2ab0e8d
Fix field name in patch for Bug-Debian
...
Gbp-Dch: Ignore
2017-09-15 17:10:03 +02:00
bec9a8f0bc
Add ABI reference for 4.12.0-2
2017-09-15 17:09:25 +02:00
2afb7462ca
Add bug field to patch
...
Gbp-Dch: Ignore
2017-09-15 16:58:36 +02:00
bfbae48942
Add bug closer for CVE-2017-1000251, #875881
2017-09-15 16:56:55 +02:00
6524072137
[amd64] enable CONFIG_SPI_PXA2XX for Apple MacBook Pro
2017-09-15 10:22:01 +02:00
acfbd0bece
Bluetooth: Properly check L2CAP config option output buffer length (CVE-2017-1000251)
2017-09-14 06:51:56 +02:00
8f075a9a83
xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present (CVE-2017-14340)
2017-09-14 06:51:56 +02:00
bcc9a01d8e
scsi: qla2xxx: Fix an integer overflow in sysfs code (CVE-2017-14051)
2017-09-14 06:51:56 +02:00
2ed545523f
sctp: Avoid out-of-bounds reads from address storage (CVE-2017-7558)
2017-09-14 06:51:56 +02:00
e06a90e2dd
add changelog entries for commits 20dc799b417d..4d7d15c50a23
2017-09-12 15:06:27 +02:00
191373b962
USB/misc: reenable UCSI which got lost due to upstream changes
...
The configure symbols changed upstream, see commits
c1b0bc2dabfa ("usb: typec: Add support for UCSI interface")
8243edf44152 ("usb: typec: ucsi: Add ACPI driver")
2017-09-12 15:03:29 +02:00
2cb3972dfb
Merge remote-tracking branch 'alioth/master'
2017-09-11 14:58:11 +01:00
4d7d15c50a
Update config for upstream changes
...
BLK_DEV_NVME_SCSI removed in 3f7f25a910ed8988b2a87c1ca2bfee6b4fb83ac7
CIFS_SMB2 removed in 2a38e12053b760a8f5e85030eb89512660077c15
FUJITSU_LAPTOP_DEBUG removed in eee77da1a7f02fd114288c4c379fed3d2ca4593d
MCE_AMD_INJ removed in bc8e80d56c1ecb35e65df392d7601d1427d14efe
MMC_BLOCK_BOUNCE removed in c3dccb74be28a345a2ebcc224e41b774529b8b8f
QCA7000_SPI renamed in b2f98200c73cf4bd7c26438490b5a137210e9c7d
RCU_KTHREAD_PRIO removed in f7a10a975036ef9ca957bfe12ab2d4b1a46cccd1
SCM_BLOCK_CLUSTER_WRITE removed in 94d26bfcf31244d24fddbe7ba5b0dd17f3c32b11
SPARSE_RCU_POINTER removed in 41a2901e7d220875752a8c870e0b53288a578c20
TRACE_ENUM_MAP_FILE renamed in 681bec0367c2606b6154060310a2ffa543175980
UCSI renamed in 8243edf44152c08c3efa1d551fc48605d674ad18
2017-09-11 10:41:28 +02:00
54e36b8166
Follow split of LOCKUP_DETECTOR
...
The config option LOCKUP_DETECTOR was split upstream in
05a4a9527931 ("kernel/watchdog: split up config options")
The old setting LOCKUP_DETECTOR=y is equivalent to enabling the soft and
hard detector now.
2017-09-11 10:24:36 +02:00
20dc799b41
[amd64] drop removed Kconfig symbol
...
MOVABLE_NODE was removed in
f70029bbaacb ("mm, memory_hotplug: drop CONFIG_MOVABLE_NODE")
2017-09-11 10:17:58 +02:00
b93e46d505
Prepare to release linux (4.13.1-1~exp1).
2017-09-11 05:40:04 +01:00
5a51fd79b5
Release linux (4.12.12-2).
...
-----BEGIN PGP SIGNATURE-----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=iJVA
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.12-2'
Release linux (4.12.12-2).
2017-09-11 05:39:56 +01:00
cfb260a57b
debian/source/lintian-overrides: Override license-problem-gfdl-invariants error
...
The copyright notice in the GFDL itself, mentioning invariant
sections. is just an example. lintian seems to whitelist the
plain-text version but that doesn't cover this ReST version.
2017-09-11 05:38:51 +01:00
f0fb8e6753
Release linux (4.12.12-1).
...
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlm1ox4ACgkQ57/I7JWG
EQndsRAAn9ooqOo8qGWF28qcVjgMUNWC3wQA9vT3kBvNsqJ8htLWJZhe22rDUU4U
MGdoZ4nchlZumn+nKQiIAgMB+Na1A7aYeR6H06rs6+JoHsHA0T/tjVsmcBCPnNzT
Rnx/nq+sGuJOe0NYqqJgkgjk2otiSUc5EyEMSxSBID8wG9JyLeaZIgmNiYEu1Mvt
8PcNC4AeN1XTFAkCsJgqrEkYw6JNTb7nzJvq6e52FD6GnPn8nfAiSbX/W6zhs8ae
/4lvufDFc/m1xoBPfGwesJLKCgXnc2JPmM48V21zH9Py/Lluwc3sXJG2lj2mwvnG
sbC4UQrtRgQOOV7tZB8/GoOdIUP/OCZWTRtKhy/fApgyZn3V6UT3AyK+kIyz8p4d
ljP7BoHhtMyZBoH2Imw9Lqcp/4FXE/97wHPaK6nINYj/luHJZCTpQdAf27zo38tk
xhep4HVd8DzKQn6FnSjkV9j7m09w96TEHYcG+4kagJ1mVjZymNbE3xZZaX1+9wut
W24E83SggksGiaqClpGNqsyX9MrfqjSJDICu08KRxwG/mc1GNTyzVoghlru8c6sE
EDRvlS84VzPNhYANkQ9WTizQXsDrR2G4z/eOO1+GM8+IXJDtNkyrXzUqNMg93+t0
zC3S3/uf+EIbfkj3BHAOtdDMbVL18szhoA1aM65ePYTxxxthn6U=
=HfH1
-----END PGP SIGNATURE-----
Merge tag 'debian/4.12.12-1'
Release linux (4.12.12-1).
2017-09-11 01:20:35 +01:00
5897597d01
Update to 4.13.1
2017-09-11 01:16:41 +01:00
8bf6315405
rename symbol for MCP23S08
...
This was changed upstream in commit 64ac43e6fa28 ("gpio: mcp23s08: move
to pinctrl")
2017-09-10 22:45:14 +02:00
1b4b822c90
[arm64] enable NET_DSA_MV88E6XXX for Espressobin.
2017-09-10 22:38:02 +02:00
5c837ac598
Prepare to release linux (4.12.12-1).
2017-09-10 19:42:51 +01:00
41ff7a03ca
Update to 4.12.12
2017-09-10 12:07:09 +02:00
68b6e32819
Update to 4.12.11
2017-09-09 15:06:49 +02:00
9dd4ddef21
Revert "Add bug closer for #874035 in sid branch"
...
The patchset will be reverted, cf. bug report.
This reverts commit 8d903fd551
2017-09-06 19:20:10 +02:00
4605e36d82
Add CVE identifier for CVE-2017-14140 ("Sanitize 'move_pages()' permission checks")
...
Gbp-Dch: Ignore
2017-09-05 21:03:39 +02:00
8d903fd551
Add bug closer for #874035 in sid branch
...
Gbp-Dch: Ignore
2017-09-04 21:47:01 +02:00
b066a269e0
Update to 4.13
2017-09-04 01:19:41 +01:00
922a5d78d1
Bump ABI to 2
2017-09-03 01:47:43 +01:00
7e3e2b019c
Mark protection keys change as [x86]
2017-09-02 21:06:26 +01:00
579d8e75b8
Delete unimportant changes in 4.12.10 from changelog
2017-09-02 21:05:59 +01:00
11a1869feb
Note closure of #866511
2017-09-02 21:02:35 +01:00
55a7153b7a
Ignore ABI change in iommu_device
2017-09-02 21:02:35 +01:00
c755b1fcfd
pids: Avoid ABI change in 4.12.9
2017-09-02 21:02:35 +01:00
fe31ec4f4a
Ignore ABI changes in nand and perf_event subsystems
2017-09-02 21:02:35 +01:00
418c755613
[mips*/octeon] mmc: Enable MMC_CAVIUM_OCTEON as module ( Closes : #800594 )
2017-09-01 18:42:44 +01:00
8d9993070b
buildcheck.py: Add check for uncompressed Image size
...
Currently only armel/marvell flavour need this check
2017-09-02 00:30:02 +09:00
18564a11d7
Update to 4.12.10
2017-08-31 08:45:23 +02:00
20791d9bb2
Add ABI reference for 4.12.0-1
2017-08-30 23:46:25 +01:00
a10934bfec
debian/changelog: Clean up list of stable changes
...
- Delete irrelevant/trivial changes
- Add architecture/flavour qualifications
- Wrap long lines
2017-08-30 23:41:06 +01:00
ab768c9a0b
debian/changelog: Add my name to the open entry
2017-08-30 23:34:05 +01:00
3c3aa2c3a3
Prepare to release linux (4.13~rc7-1~exp1).
2017-08-30 20:39:57 +01:00
5775a8c918
aufs: Update support patchset to aufs4.x-rcN-20170828
2017-08-30 20:39:32 +01:00
9ba3914638
Update to 4.13-rc7
2017-08-30 20:34:25 +01:00
cc07e04d02
Add CVE id fixing CVE-2017-12134
2017-08-29 22:37:09 +02:00
4a53c826d6
mtd: nandsim: remove debugfs entries in error path
2017-08-29 22:31:30 +02:00
a2dde14ec6
Update to 4.12.9
2017-08-29 22:20:12 +02:00
df8a5bf53a
Update to 4.13-rc7
2017-08-29 22:07:26 +02:00
b31bdbd377
Add bug closure of #870185
2017-08-28 21:29:05 +09:00
7ab99769cd
Add bug closure of #870185
2017-08-28 01:18:14 +09:00
68e022e33c
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-28 00:43:57 +09:00
c55043a43e
[armel] Change MTD and RTC related to modules (fixes FTBFS)
...
Change MTD_OF_PARTS, MTD_BLOCK, and MTD_PHYSMAP_OF from built-in
to modules.
And, also change all RTC related except RTC_DRV_MV, which includes
RTC_DRV_DS1307, RTC_DRV_RS5C372, RTC_DRV_PCF8563, RTC_DRV_M41T80,
and RTC_DRV_S35390A, to modules. Because most marvell boards use
RTC_DRV_MV.
2017-08-26 11:55:48 +09:00
8e44fd873c
Update to 4.12.7
2017-08-25 21:47:57 +02:00
d0704122dd
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-22 01:01:21 +09:00
a129c1c207
Update to 4.13-rc6
2017-08-21 03:09:19 +01:00
0697a35c1d
[sh4] Do not use hyphen in exported variable names (fixes FTBFS)
2017-08-19 22:37:50 +01:00
918dc43e46
Update metadata for "kbuild: Do not use hyphen in exported variable name"
...
I updated the commit message and re-submitted it after further
investigation.
2017-08-19 22:37:17 +01:00
2b5b06c960
debian/rules.real: Stop using undefined $)BUILD_TARGET)
2017-08-19 00:56:42 +01:00
4895a85e76
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
...
Closes : #872414
(cherry picked from commit 58cec05a0e
2017-08-17 15:29:32 +01:00
d1e6bb1301
Prepare to release linux (4.13~rc5-1~exp1).
2017-08-14 23:20:50 +01:00
31202be148
Update to 4.13-rc5
2017-08-14 23:18:47 +01:00
3e6866374d
[alpha] udeb: Add i2c-modules (fixes FTBFS)
2017-08-14 19:48:41 +01:00
8c896b2cbc
liblockdep: Re-enable liblockdep packages following upstream fixes
...
This reverts commit 85b468262e87d08943da
2017-08-13 17:42:32 +01:00
c8e760ebac
Remove support for upstream DocBook-based documentation
...
It has finally been removed after all docs were converted to ReST format.
As there is no longer a way to build manpages, remove the linux-manual
package.
2017-08-13 17:26:07 +01:00
58cec05a0e
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
2017-08-13 16:22:35 +01:00
d545b4e4d0
Update to 4.13-rc4
...
Drop and refresh patchs as appropriate.
2017-08-13 14:45:14 +01:00
9f225007dc
Prepare to release linux (4.12.6-1).
2017-08-12 23:09:26 +01:00
66d8e083d5
Merge remote-tracking branch 'alioth/rosh/strip_armel'
...
Note Roger's changes in changelog.
2017-08-12 23:08:53 +01:00
0134b5c8b9
[amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base ( Closes : #869090 )
2017-08-12 23:08:23 +01:00
3322494cdd
netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules ( Closes : #868803 )
2017-08-12 22:40:40 +01:00
aa404ad63b
bfq: Enable auto-loading when built as a module
2017-08-12 22:36:27 +01:00
bea6941301
blk-mq: Enable IOSCHED_BFQ as module ( Closes : #869028 ); enable BFQ_GROUP_IOSCHED
2017-08-12 22:35:11 +01:00
e16a8acf8a
blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
...
Also explicitly set MQ_IOSCHED_DEADLINE to built-in per default.
2017-08-12 22:34:03 +01:00
eb7e4fa1ec
[x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module ( Closes : #869372 )
2017-08-12 22:13:33 +01:00
5df992ba4d
integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS ( Closes : #869565 )
2017-08-12 22:13:33 +01:00
1087d11fd6
[arm64] video: Enable FRAMEBUFFER_CONSOLE ( Closes : #870071 )
2017-08-12 22:13:33 +01:00
173e0f7a03
Clean up kconfig using kconfigeditor2
2017-08-12 22:13:33 +01:00
831ae89c56
rtlwifi: Fix firmware loading bugs ( Closes : #869084 )
2017-08-12 21:54:36 +01:00
3b32a0551f
xfrm: policy: check policy direction value (CVE-2017-11600)
2017-08-12 21:36:28 +01:00
878e72cc4c
Only list CVEs fixed by 4.12.4-4.12.6
...
As this will already be a major version update for unstable there's little
point in listing the additional changes in stable updates.
2017-08-12 20:34:29 +01:00
851fa7516e
Set ABI to 1
2017-08-12 17:16:42 +02:00
e5fcecb6a6
Drop experimental suffix from next version
...
Gbp-Dch: Ignore
2017-08-12 17:15:04 +02:00
e58e3e6be9
Update to 4.12.6
2017-08-12 16:54:34 +02:00
5bc71d3ff6
Wrap long changelog lines
...
Gbp-Dch: Ignore
2017-08-12 11:42:30 +02:00
0442142ae4
udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
2017-08-11 09:12:58 +02:00
3b6247dba4
packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
2017-08-11 09:09:51 +02:00
dcdb404db7
Add CVE ID for CVE-2017-10663 (f2fs: sanity check checkpoint segno and blkoff)
2017-08-10 08:09:14 +02:00
d977cbc209
[arm64] Add sdhci device for Espressobin
...
This completes the fix for #871049
2017-08-09 09:26:46 +02:00
0f54fcdf56
[arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin
2017-08-08 21:44:03 +00:00
f302f4dbad
Drop upstream applied patch
...
Gbp-Dch: Ignore
2017-08-08 10:20:30 +02:00
df3ad3271d
readd CVS reference that was dropped by mistake
2017-08-08 10:17:23 +02:00
bc29a1558a
Update to 4.12.5
2017-08-08 09:54:35 +02:00
693284da5b
media: saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
2017-08-03 20:36:47 +02:00
9f89bea8ab
ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
2017-08-03 20:32:16 +02:00
b5081c50bc
dentry name snapshots (CVE-2017-7533)
2017-08-03 20:27:55 +02:00
d7f8738db2
[armel] Change NAND related stuff to modules
...
Change MTD_CFI, MTD_JEDECPROBE, MTD_CFI_INTELEXT, MTD_CFI_AMDSTD,
and MTD_NAND MTD_NAND_ORION from built-in to modules (fixes FTBFS)
2017-07-31 23:34:47 +09:00
3341a33e22
Add changelog entry for CVE-2017-7541
...
Gbp-Dch: Ignore
2017-07-24 07:06:09 +02:00
662ee32fad
debian/control: Fix version in dependencies on linux-headers-*-common*
...
linux-headers-*-common* packages are arch-independent since version
4.9~rc7-1~exp1, so to allow for binNMUs we need to specify
${source:Version} in versioned dependencies on them.
Closes : #869511
2017-07-23 22:46:31 +01:00
db815c4a3b
Update to 4.12.3
2017-07-22 18:26:23 +01:00
192ee88a05
[i386] perf tools: Fix unwind build (fixes FTBFS)
2017-07-22 17:41:53 +01:00
b26c964684
[armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
2017-07-22 12:40:05 +01:00
4e4f504451
[armhf] Revert "gpu: host1x: Add IOMMU support" (fixes FTBFS)
2017-07-22 11:26:42 +01:00
e6acb1f3d5
[mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
2017-07-22 00:38:10 +01:00
45a06e2c0f
Clean up symbol version fixes for symbols exported from asm
...
We can't keep reverting these changes, so instead move forward. Most
architectures now have <asm/asm-protoypes.h> and only 3 were left:
- alpha: Added <asm/asm-protoypes.h> and submitted patch upstream
- m68k: Did same, but realised it's only needed for Coldfire configs
so we don't need any patches
- sparc: Cherry-picked changes from upstream
2017-07-19 19:36:04 +01:00
aaafbb9091
[sparc64] Update "Revert "sparc: move exports to definitions"" again
...
This should really fix the FTBFS - at least, the build got as far as
building linux-image packages.
genksyms doesn't recognise __int128 as a type name, so fails to parse
the prototype for __multi3(). I could fix genksyms but would have to
regenerate the parser tables which would be a horrible patch to
maintan. So use a struct type instead for now. gcc doesn't seem to
care about this because it isn't a normal C function.
Also update the patch properly for 4.12 - I removed exports for some
symbols that were not really removed but renamed.
2017-07-18 22:50:53 +01:00
33fb750f9d
media: Enable USB_RAINSHADOW_CEC as module (see #868511 )
2017-07-18 13:27:48 +01:00
4cbd8fdf4b
Prepare to release linux (4.12.2-1~exp1).
2017-07-18 12:19:38 +01:00
094004fb35
Set ABI name to trunk
2017-07-18 12:19:35 +01:00
0e64929fc5
scripts/mod: Update modpost wrapper for 4.12
...
Commit cf0c3e68aa81 "kbuild: fix asm-offset generation to work with clang"
changed the macros used by devicetable-offsets.c. Copy the new sed code
from upstream scripts/Makefile.lib.
2017-07-18 04:45:51 +01:00
880703ae05
Clean up kconfig with the aid of kconfigeditor2
...
- Various obsolete drivers and broken features were removed in 4.12
- A few symbols were renamed
- A few symbols changed type from tristate to bool
2017-07-18 01:32:33 +01:00
50381a0ca2
Update to 4.12.2
...
Refresh aufs4 patches by hand, as there is no release for 4.12 yet.
Refresh lockdown patches with genpatch.py and then by hand, as the
branch is a little out of date and many patches went upstream.
[rt] Disable until it is updated for 4.12 or later
2017-07-18 01:06:31 +01:00
81c11b5921
Add script to regenerate lockdown patch series from git
2017-07-18 00:06:46 +01:00
3907fb9919
[arm64] udeb: Prepare to add sunxi_wdt to kernel-image
...
It's not currently built for arm64, but when we enable support for
Allwinner SoCs it will be needed to reboot them (see #866130 ).
2017-07-17 22:24:03 +01:00
5886a28670
Prepare to release linux (4.11.11-1).
2017-07-17 03:01:21 +01:00
e9698def40
firmware: dmi: Add DMI_PRODUCT_FAMILY identification string
...
Dependency of "pinctrl: cherryview: Extend the Chromebook DMI quirk to
Intel_Strago systems".
2017-07-17 03:00:56 +01:00
d6692c5a99
integrity: Delete ineffective kconfig assignments
...
We didn't enable INTEGRITY_SIGNATURE and INTEGRITY_ASYMMETRIC_KEYS,
which are dependencies for these. According to bug #865277 , we
should not enable them.
2017-07-17 01:38:00 +01:00
4e322430ec
[armhf] Add ARM Mali Midgard device tree bindings and gpu node for rk3288
...
Thanks: Guillaume Tucker
Closes : #865646
2017-07-17 01:09:51 +01:00
1a49ee814f
udeb: Ship usb3503 module in usb-modules ( Closes : #865645 )
...
This module is needed for e.g. Arndale development boards, thanks to Wei
Liu.
2017-07-17 00:48:46 +01:00
0de513746f
[x86] pinctrl: cherryview: Extend the Chromebook DMI quirk to Intel_Strago systems
...
Closes : #862723
2017-07-17 00:38:29 +01:00
769a37d5bd
[x86] ideapad-laptop: Add various IdeaPad models to no_hw_rfkill list
...
Closes : #866706
2017-07-17 00:04:31 +01:00
bd04387e13
aufs: Update support patchset to aufs4.11.7+-20170703 ( Closes : #867257 )
2017-07-16 23:39:47 +01:00
abb94a6a73
[arm64] sound: Enable SND_HDA_INTEL as module ( Closes : #867611 )
2017-07-16 22:29:47 +01:00
3c66f8f592
udeb: Add dm-raid to md-modules ( Closes : #868251 )
2017-07-16 22:10:36 +01:00
81c2ab92a3
crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules ( Closes : #868291 )
2017-07-16 22:09:02 +01:00
1f47c2fad3
[armhf] udeb: Add sunxi_wdt to kernel-image ( Closes : #866130 )
2017-07-16 21:52:04 +01:00
5129ca9199
[rt] Clean up kconfig with kconfigeditor2
2017-07-16 21:46:00 +01:00
4f2e547171
media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
...
Closes : #868511
2017-07-16 21:37:15 +01:00
823d15feb8
[rt] Update to 4.11.9-rt7
2017-07-16 21:28:09 +01:00
09f1166971
binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370, CVE-2017-1000371)
2017-07-16 21:24:08 +01:00
292c881344
Update to 4.11.11
2017-07-16 21:22:27 +01:00
951507e517
debian/rules.real: Fix dh_install arguments in install-source rule
...
dh_install used to treat each given filename/pattern as space-separated
(bug #198507 ), and we accidentally depended on that. This was recently
fixed, leading to FTBFS.
2017-07-09 20:23:59 +01:00
5cea93cf9c
[rt] Update to 4.11.8-rt5
2017-07-09 13:45:42 +02:00
5b8fb021cd
Bump ABI to 2
2017-07-09 12:57:02 +02:00
e70c79cce5
Update to 4.11.9
2017-07-09 12:54:43 +02:00
49173dac27
Add CVE id for xen-blkback issue, XSA-216
2017-07-05 06:37:00 +02:00
2125fc6614
Update to 4.11.8
2017-06-29 21:21:01 +02:00
3aaf7fba55
rxrpc: Fix several cases where a padded len isn't checked in ticket decode (CVE-2017-7482)
2017-06-29 08:24:46 +02:00
fe29debbce
[arm64] Enable support for Rockchip systems ( Closes : #860976 ).
2017-06-28 16:43:40 -07:00
6bd12386aa
[arm64] enable FB_SIMPLE
2017-06-28 20:02:24 +00:00
4bffab0d23
Update to 4.11.7
...
Drop upstream applied patch.
Refresh features/all/rt/sched-mmdrop-delayed.patch.
Ignore changes for module: drivers/iio/imu/inv_mpu6050/*.
2017-06-26 22:01:21 +02:00
3f7061bec4
Add ABI reference for 4.11.0-1
2017-06-26 21:25:30 +02:00
ac812885ce
Fix typo in changlog (thanks KiBi)
2017-06-24 18:32:59 +01:00
c63d4533ab
[sparc64] Update "Revert "sparc: move exports to definitions"" for the addition of __multi3 (fixes FTBFS)
2017-06-20 20:08:40 +01:00
4d907dfd7a
Revert "Revert "ia64: move exports to definitions""
...
Can't remember why I ever applied this, as we don't have any support
for ia64 any more. In any case ia64 now has an <asm/asm-prototypes.h>.
2017-06-20 19:35:33 +01:00
63a7595d75
[md68k] udeb: Use only the common module list for nic-shared-modules (fixes FTBFS)
...
Delete all the additional lines:
- 7990, 82596 and 8390p are now included in nic-modules, resulting in the
"some modules are in more than one package" error
- 8390 and libphy are already listed in the common module list
- There's no particular reason to think m68k needs the dummy driver
2017-06-20 19:31:50 +01:00
0d6a5d8794
Prepare to release linux (4.11.6-1).
2017-06-20 00:25:45 +01:00
496cb584dc
Note CVEs fixed in 4.11.5
2017-06-20 00:25:35 +01:00
0f89be27d3
mm: larger stack guard gap, between vmas (CVE-2017-1000364)
2017-06-20 00:19:55 +01:00
a4d082d16d
[armhf] PCI: Enable PCI_HOST_GENERIC ( Closes : #864726 )
2017-06-18 21:08:04 +01:00
52978aae0c
USB: serial: option: add two Longcheer device ids ( Closes : #864604 )
2017-06-18 21:05:59 +01:00
0119f2ad46
fs: Reenable HPFS_FS as module ( Closes : #864878 )
2017-06-18 21:01:55 +01:00
b39658b2cf
[rt] Update to 4.11.5-rt1 and reenable
2017-06-18 18:14:57 +01:00
76ed7c5f09
Update to 4.11.6
2017-06-18 18:12:42 +01:00
21159c097a
Release linux (4.9.30-2).
...
-----BEGIN PGP SIGNATURE-----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=7TPb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.30-2' into sid
2017-06-12 19:09:18 +01:00
8f781e82fb
Prepare to release linux (4.9.30-2).
2017-06-12 16:35:12 +01:00
e43fbf8183
Add summary of what the ipv6 fixes are for
2017-06-12 16:24:03 +01:00
29fbd594e5
NFSv4.x/callback: Create the callback service through svc_create_pooled ( Closes : #862357 )
2017-06-12 16:20:51 +01:00
65dde6402d
Fix patch grouping
2017-06-12 16:09:22 +01:00
8fe8c336a3
[armhf] udeb: Add axp20x_usb_power to kernel-image; add i2c-modules package
...
... including i2c-mv64xxx and i2c-rk3x
Thanks to Karsten Merker.
Closes : #856111
2017-06-12 15:49:01 +01:00
f30fbaf597
Merge branch 'stretch-security' into stretch
2017-06-12 15:43:37 +01:00
ab537b5c46
debian/rules.real: Include rules.defs before using architecture variables
...
Closes : #862842
2017-06-10 21:53:27 +01:00
6fdb07003d
Revert "uapi: fix linux/if.h userspace compilation errors"
...
This patch fixes a bug but it broke compilation of radvd (see
by reverting it for stretch.
2017-06-09 15:27:04 +01:00
cb766cd661
Add follow-up fixes for CVE-2017-9074
2017-06-08 15:39:03 +01:00
Salvatore Bonaccorso
Ben Hutchings
John Paul Adrian Glaubitz
Uwe Kleine-König
Roger Shimizu
Cyril Brulebois
Vagrant Cascadian