debian-packaging
/
linux
8
0
Fork 0
Code Releases Activity
12,734 Commits 2 Branches 0 Tags 493 MiB
Commit Graph

12734 Commits

Author SHA1 Message Date
Ben Hutchings 2cc01f34ce [powerpc*/*64*] drm: Enable DRM_AMDGPU as module (Closes: #881593) 2017-11-16 18:42:09 +00:00
Ben Hutchings 9f5b9b8ff8 nftables: Enable NFT_RT, NFT_SET_BITMAP, NFT_OBJREF as modules (Closes: #881931) 2017-11-16 18:37:11 +00:00
Ben Hutchings 58e12683e1 net: qmi_wwan: fix divide by 0 on bad descriptors (CVE-2017-16650) 2017-11-16 18:13:46 +00:00
Ben Hutchings 91a7ba9320 net: cdc_ether: fix divide by 0 on bad descriptors (CVE-2017-16649) 2017-11-16 18:12:24 +00:00
Ben Hutchings 4ee0c56703 net: usb: asix: fill null-ptr-deref in asix_suspend (CVE-2017-16647) 2017-11-16 18:11:00 +00:00
Ben Hutchings ed4bdea861 media: dib0700: fix invalid dvb_detach argument (CVE-2017-16646) 2017-11-16 18:10:19 +00:00
Ben Hutchings c718be9d81 media: imon: Fix null-ptr-deref in imon_probe (CVE-2017-16537) 2017-11-16 18:04:43 +00:00
Ben Hutchings a06739ccd2 media: cx231xx-cards: fix NULL-deref on missing association descriptor (CVE-2017-16536) 2017-11-16 18:03:20 +00:00
Ben Hutchings c08c3b8b25 usb: usbtest: fix NULL pointer dereference (CVE-2017-16532) 2017-11-16 17:40:00 +00:00
Ben Hutchings 1549b29ea0 Add follow-up fixes relatd to CVE-2017-13080 2017-11-16 17:35:46 +00:00
Ben Hutchings f4e45ee455 Update to 4.13.13 2017-11-16 17:32:44 +00:00
Salvatore Bonaccorso 6ff07bd9a5 sctp: do not peel off an assoc from one netns to another one (CVE-2017-15115) 2017-11-16 15:22:47 +01:00
Salvatore Bonaccorso 5d9e74ced8 mac80211: accept key reinstall without changing anything (CVE-2017-13080) 2017-11-16 15:18:54 +01:00
Ben Hutchings d8d66235a8 Update to 4.14 2017-11-14 13:02:01 +00:00
Ben Hutchings a2708107ce swap: Avoid ABI change in 4.13.12 2017-11-12 01:09:18 +00:00
Ben Hutchings 86b8621ec9 [powerpc*] kvm: Ignore ABI change in 4.13.6 (fixes FTBFS) 2017-11-11 20:53:08 +00:00
Ben Hutchings fdf384b742 [powerpc*] Ignore kvm-related ABI changes (fixes FTBFS) 2017-11-11 20:50:42 +00:00
Salvatore Bonaccorso 95757c39a8 Update to 4.13.12 2017-11-11 09:29:31 +01:00
Riku Voipio ed497f3cb7 Add server and 96boards options 
Generic server options NUMA, ACPI_NUMA, CRASH_DUMP, VFIO, *WATCHDOG

Servers specific options:

APM X-gene: NET_XGENE_V2
Cavium ThunderX: EDAC_THUNDERX, MMC_CAVIUM_THUNDER, CRYPTO_DEV_CAVIUM*
Cavium ThunderX 2: GPIO_XLP, I2C_XLP9XX, SPI_XLP
Hisilicon: DRM_HISI_HIBMC, SCSI_HISI_SAS_PCI
Marvell Armada 7k/8k/3700: CRYPTO_DEV_MARVELL_CESA, MARVELL_PHY,
        MARVELL_10G_PHY, PHY_MVEBU_CP110_COMPHY, RTC_DRV_MV,
        RTC_DRV_ARMADA38X, SPI_ARMADA_3700, ARMADA_THERMAL,
        NOP_USB_XCEIV, HW_RANDOM_OMAP, CRYPTO_DEV_SAFEXCE

96boards:

Hikey: PCIE_KIRIN, TEE, OPTEE, SND_I2S_HI6210_I2S, DRM_I2C_ADV7511_AUDIO
DragonBoard 410c: *QCOM*, CONFIG_CMA, USB changes

Signed-off-by: Riku Voipio <riku.voipio@linaro.org>
 2017-11-09 15:44:47 +02:00
Salvatore Bonaccorso f13763371c Add CVE id reference for CVE-2017-16643 
Gbp-Dch: Ignore
 2017-11-08 10:45:20 +01:00
Salvatore Bonaccorso 4a745d05b1 Add CVE id for CVE-2017-15306 
Gbp-Dch: Ignore
 2017-11-06 13:04:31 +01:00
Bastian Blank 7522aac927 Enable CRYPTO_SHA3 2017-11-06 11:22:29 +01:00
Ben Hutchings bd1e10f8bd linux-image: Recommend apparmor (Closes: #880441) 
The apparmor package is needed for loading profiles.  In theory,
enabling AppArmor without any profiles loaded should do nothing, so
this is not really a dependency of the kernel.  However, if a systemd
unit specifies a AppArmor profile and the kernel has AppArmor enabled
then failure to load the profile is fatal.

As the linux-image packages select AppArmor as the default LSM, they
should probably also be responsible for getting the necessary userland
support installed.  But since the default can be overridden, use
Recommends rather than Depends.
 2017-11-05 01:54:12 +00:00
Salvatore Bonaccorso 43a5e411fd Add bug closer for #879768 
Gbp-Dch: Ignore
 2017-11-04 16:57:42 +01:00
Salvatore Bonaccorso e7fd57b49f netfilter: nft_set_hash: disable fast_ops for 2-len keys 
Closes: #880145
 2017-11-04 15:43:57 +01:00
Salvatore Bonaccorso 4b0df3bed7 cifs: check MaxPathNameComponentLength != 0 before using it 
Thanks: Andrew Chadwick

Closes: #880504
 2017-11-04 09:55:14 +01:00
Salvatore Bonaccorso 384fa91229 Update to 4.13.11 2017-11-04 09:06:37 +01:00
Ben Hutchings c8b3153d0d debian/control: Set Rules-Requires-Root to no 
Tell dpkg and debhelper that we can install without (fake)root and
then dpkg-deb should then override all ownership to root:root.

Draft specification for this field:
https://lists.debian.org/debian-devel/2017/10/msg00520.html
 2017-10-30 21:58:12 +00:00
Ben Hutchings 85565e1ae2 Prepare to release linux (4.14~rc7-1~exp1). 2017-10-30 18:31:38 +00:00
Ben Hutchings e59d862868 Release linux (4.13.10-1). 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAln3apoACgkQ57/I7JWG
 EQllsQ//fyZFkoGOLpHjkS3sNtMxfh1J9+f+JJI33WF9vA/w7SnRfg/Rdbjx+rY8
 LRCnviTyh5tuxKSPKHerpUqjNbYi7Hcr0LXxxOPL1Rr+BTFKQuaSDYNzt10bT2mJ
 9B0ZYI+Q8n7rAq1/MeSKygV6zh+5MxywN8LZlqg0Au8/7/c7H0nR3MOEFz29imL0
 jBMOhy7a+Gby3Qs5ZdKGf0i4RZT9Y/9Ozu9sFpVGqrTyY+FlEd0y1KUvIipbdLTH
 S/oRFF1m4IeS7tF6AIprCPMIMPt8tcQrSLvB01REpbvSJvDg+laEgmHnb0PKlOpW
 RAeQn2r1NCEjjZcKll8dCMp+sTiLhx+us4L3Jumwb2Yno+219zuScFg2MR0zu5U/
 XCB5zG2U5XENH+fRdDnWROkXJ/o1Dtk+Ix1aPySa8I9IdlP45n+Q4LCLw3eg5h3I
 CdITwTJxWlnLJVI852wh1qorBuUs5lac9HZ8u0s5MDFXNQkWOVQKRPZN0sA3hwwp
 wjudMsGgq6kkoknnEcwTKV4JFWJdfJ0SieaWBv1LSQwAmVy3/QvOTvDBLzRxmtUX
 tygPktH53HLp4z6qPOcKD+hGLcdlD5oTWYb2O5MqVlSI8MjONOcjpRGAP2fhIf2t
 3INpM9sJPHILXqpEMH6co4VzxnQq1OElMjcA5nqD2A7HLOSDhZg=
 =x3uW
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.10-1'

Release linux (4.13.10-1).
 2017-10-30 18:31:31 +00:00
Ben Hutchings 375e4b8147 Update to 4.14-rc7 2017-10-30 18:28:33 +00:00
Vagrant Cascadian 38106d0ef0 Enable SQUASHFS_LZ4 in default config. 2017-10-30 16:52:53 +01:00
Ben Hutchings ed0765f59c Prepare to release linux (4.13.10-1). 2017-10-30 15:32:11 +00:00
Ben Hutchings 67b30e51e2 [armel] Ignore ABI change for removal of selinux_is_enabled 2017-10-30 15:32:03 +00:00
Ben Hutchings 9bf0fcf06e [armel,armhf] mbus: Ignore ABI change in 4.13.10 2017-10-30 15:32:03 +00:00
Ben Hutchings 1ea9c5efa8 snd-seq: Ignore ABI changes 
Commit 8009d506a1dd "ALSA: seq: Enable 'use' locking in all
configurations" which was backported into 4.13.10 will result in an
ABI change for !SMP configurations.  Ignore this, as I don't expect
there to be any out-of-tree sequencer drivers.
 2017-10-30 12:45:19 +00:00
Ben Hutchings 15c6a89208 Update to 4.13.10 
Limit the ABI change in keys.
 2017-10-29 12:13:18 +00:00
Ben Hutchings f1e87af382 [x86] rmi4: Enable RMI4_SMB as module (Closes: #875621) 2017-10-28 20:53:13 +01:00
Ben Hutchings ec3cd54d45 Avoid/ignore more ABI changes in 4.13.y 2017-10-28 20:50:11 +01:00
Ben Hutchings 0b4bd142ab Add necessary declarations of arch_wb_cache_pmem() in dax ABI patch 
Annoyingly, arch_wb_cache_pmem() isn't declared in any common header
but only in drivers/nvdimm/pmem.h.
 2017-10-27 23:33:54 +02:00
Salvatore Bonaccorso d2ca70712e Add CVE ids for some issues fixed with the 4.13.9 import 2017-10-27 16:26:15 +02:00
Ben Hutchings 43a809fe93 security: Enable DEFAULT_SECURITY_APPARMOR 2017-10-26 22:51:36 +02:00
Ben Hutchings 50f87144fd [armel] security: Enable SECURITY_APPARMOR and disable SECURITY_SELINUX 2017-10-26 22:50:16 +02:00
Ben Hutchings 48bb38a3f7 Update to 4.13.9 
Drop many patches which are now upstream.

Avoid/ignore ABI changes as appropriate.
 2017-10-26 22:41:11 +02:00
Uwe Kleine-König 28f20726e5 [arm64] add BRCMFMAC_SDIO for wifi on Raspberry Pi 3 2017-10-26 17:53:57 +02:00
Ben Hutchings de909222d8 Add ABI reference for 4.13.0-1 2017-10-26 11:25:36 +02:00
Ben Hutchings fca5e9fddf [x86] udeb: Explicitly remove fbcon from fb-modules 
It was optional before, and will now never be included since it has to
be built-in.
 2017-10-20 17:30:30 +01:00
Ben Hutchings ab40ca5985 [armel] udeb: Remove fbcon from fb-modules package 
It can't be built as a module any more.
 2017-10-20 17:29:46 +01:00
Ben Hutchings 548cef1805 [alpha] udeb: Remove empty fb-modules package (fixes FTBFS) 
The module list for fb-modules included several optional modules that
seem to have never been built on alpha(!) and fbcon which is now
built-in.
 2017-10-20 17:27:35 +01:00
Ben Hutchings 2629671100 debian/bin/gencontrol.py: Set encoding to UTF-8 globally 
I just made this change for firmware-nonfree, for which I wrote:

    We open some, but not all, files with an explicit UTF-8 encoding.  One
    of the open calls that I missed has just caused gencontrol.py to fail
    instead a pbuilder environment.  Instead of continuing to set an
    explicit encoding for each open call, use locale.setlocale to set it
    globally.

I haven't hit such a problem here, but let's do it anyway.

Keep using explicit encodings in debian/lib for now, since we can't
assume all calling programs will set the locale.
 2017-10-20 02:56:35 +01:00