diff --git a/debian/changelog b/debian/changelog index 03539e029..b1b710afa 100644 --- a/debian/changelog +++ b/debian/changelog @@ -60,6 +60,255 @@ linux (4.9~rc3-1~exp1) experimental; urgency=medium -- Ben Hutchings Thu, 03 Nov 2016 16:51:55 -0600 +linux (4.8.11-1) unstable; urgency=medium + + * New upstream stable update: + https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8 + - net: fec: set mac address unconditionally + - net: pktgen: fix pkt_size + - net/sched: act_vlan: Push skb->data to mac_header prior calling + skb_vlan_*() functions + - net: Add netdev all_adj_list refcnt propagation to fix panic + - packet: call fanout_release, while UNREGISTERING a netdev + - netlink: do not enter direct reclaim from netlink_dump() + - drivers/ptp: Fix kernel memory disclosure + - net_sched: reorder pernet ops and act ops registrations + - ipv6: tcp: restore IP6CB for pktoptions skbs + - net: phy: Trigger state machine on state change and not polling. + - ip6_tunnel: fix ip6_tnl_lookup + - ipv6: correctly add local routes when lo goes up + - IB/ipoib: move back IB LL address into the hard header + - net/mlx4_en: fixup xdp tx irq to match rx + - net: pktgen: remove rcu locking in pktgen_change_name() + - bridge: multicast: restore perm router ports on multicast enable + - switchdev: Execute bridge ndos only for bridge ports + - rtnetlink: Add rtnexthop offload flag to compare mask + - net: core: Correctly iterate over lower adjacency list + - net: add recursion limit to GRO + - ipv4: disable BH in set_ping_group_range() + - ipv4: use the right lock for ping_group_range + - net: fec: Call swap_buffer() prior to IP header alignment + - net: sctp, forbid negative length + - sctp: fix the panic caused by route update + - udp: fix IP_CHECKSUM handling + - [x86] netvsc: fix incorrect receive checksum offloading + - net: ipv6: Do not consider link state for nexthop validation + - net sched filters: fix notification of filter delete with proper handle + - sctp: validate chunk len before actually using it (CVE-2016-9555) + - ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit() + - packet: on direct_xmit, limit tso and csum to supported devices + - [powerpc] Update parameters for csum_tcpudp_magic & csum_tcpudp_nofold + - [arm64, armhf] usb: dwc3: gadget: properly account queued requests + - scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough) + devices + - scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression + https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.9 + - ALSA: info: Return error for invalid read/write + - ALSA: info: Limit the proc text input size + - dib0700: fix nec repeat handling + - mm, frontswap: make sure allocated frontswap map is assigned + - shmem: fix pageflags after swapping DMA32 object + - swapfile: fix memory corruption via malformed swapfile + - mm: hwpoison: fix thp split handling in memory_failure() + - mm/hugetlb: fix huge page reservation leak in private mapping error paths + - coredump: fix unfreezable coredumping task + - [s390x] hypfs: Use get_free_page() instead of kmalloc to ensure page + alignment + - PCI: Don't attempt to claim shadow copies of ROM + - [x86] pinctrl: cherryview: Serialize register access in suspend/resume + - [x86] pinctrl: cherryview: Prevent possible interrupt storm on resume + - cpupower: Correct return type of cpu_power_is_cpu_online() in cpufreq-set + - mmc: sdhci: Fix CMD line reset interfering with ongoing data transfer + - mmc: sdhci: Fix unexpected data interrupt handling + - mmc: mmc: Use 500ms as the default generic CMD6 timeout + - [arm64, armhf] usb: dwc3: Fix error handling for core init + - USB: cdc-acm: fix TIOCMIWAIT + - usb: gadget: u_ether: remove interrupt throttling + - drbd: Fix kernel_sendmsg() usage - potential NULL deref + - cdc-acm: fix uninitialized variable + - scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init + - scsi: mpt3sas: Fix for block device of raid exists even after deleting + raid disk + - scsi: scsi_dh_alua: fix missing kref_put() in alua_rtpg_work() + - scsi: scsi_dh_alua: Fix a reference counting bug + - [arm64] KVM: vgic: Prevent access to invalid SPIs + - drm/radeon: disable runtime pm in certain cases + - [x86] drm/i915: Respect alternate_ddc_pin for all DDI ports + - [x86] drm/i915/dp: BDW cdclk fix for DP audio + - [x86] drm/i915/dp: Extend BDW DP audio workaround to GEN9 platforms + - [x86] drm/amdgpu: disable runtime pm in certain cases + - xprtrdma: use complete() instead complete_all() + - xprtrdma: Fix DMAR failure in frwr_op_map() after reconnect + - [amd64] iommu/amd: Free domain id when free a domain of struct + dma_ops_domain + - [x86] iommu/vt-d: Fix dead-locks in disable_dmar_iommu() path + - [x86] agp/intel: Flush chipset writes after updating a single PTE + - watchdog: core: Fix devres_alloc() allocation size + - perf top: Fix refreshing hierarchy entries on TUI + - [x86] mei: bus: fix received data size check in NFC fixup + - svcrdma: Skip put_page() when send_reply() fails + - svcrdma: Tail iovec leaves an orphaned DMA mapping + - nvme: Delete created IO queues on reset + - [s390x] dumpstack: restore reliable indicator for call traces + - hwrng: core - Don't use a stack buffer in add_early_randomness() + - i40e: fix call of ndo_dflt_bridge_getlink() + - [arm64] mmc: sdhci-msm: Fix error return code in sdhci_msm_probe() + - [x86] ACPI / APEI: Fix incorrect return value of ghes_proc() + - ACPI/PCI/IRQ: assign ISA IRQ directly during early boot stages + - ACPI/PCI: pci_link: penalize SCI correctly + - ACPI/PCI: pci_link: Include PIRQ_PENALTY_PCI_USING for ISA IRQs + - batman-adv: Modify neigh_list only with rcu-list functions + - [armel, armhf] gpio/mvebu: Use irq_domain_add_linear + - ASoC: Intel: Skylake: Always acquire runtime pm ref on unload + - [armhf] ASoC: sun4i-codec: return error code instead of NULL when + create_card fails + - memcg: prevent memcg caches to be both OFF_SLAB & OBJFREELIST_SLAB + - libceph: fix legacy layout decode with pool 0 + - [x86] drm/amdgpu: fix fence slab teardown + - [x86] drm/amdgpu: fix a vm_flush fence leak + - [x86] drm/i915: Fix mismatched INIT power domain disabling during + suspend + - netfilter: fix namespace handling in nf_log_proc_dostring + https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10 + - dctcp: avoid bogus doubling of cwnd after loss + - net: clear sk_err_soft in sk_clone_lock() + - net: mangle zero checksum in skb_checksum_help() + - ip6_tunnel: Clear IP6CB in ip6tunnel_xmit() + - tcp: fix potential memory corruption + - ipv4: allow local fragmentation in ip_finish_output_gso() + - tcp: fix return value for partial writes + - dccp: do not release listeners too soon + - dccp: do not send reset to already closed sockets + - dccp: fix out of bound access in dccp_v4_err() + - ipv6: dccp: fix out of bound access in dccp_v6_err() + - ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped + - sctp: assign assoc_id earlier in __sctp_connect + - bpf: fix htab map destruction when extra reserve is in use + - net: icmp6_send should use dst dev to determine L3 domain + - fib_trie: Correct /proc/net/route off by one error + - sock: fix sendmmsg for partial sendmsg + - net: icmp_route_lookup should use rt dev to determine L3 domain + - net: __skb_flow_dissect() must cap its return value + - ipv4: use new_gw for redirect neigh lookup + - tcp: take care of truncations done by sk_filter() (CVE-2016-8645) + - Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" + (Closes: #844491) + - Revert "bnx2: Reset device during driver initialization" + - bnx2: Wait for in-flight DMA to complete at probe stage + - sctp: change sk state only when it has assocs in sctp_shutdown + - [arm64, armhf] net: stmmac: Fix lack of link transition for fixed PHYs + - [sparc] Handle negative offsets in arch_jump_label_transform + - [sparc64] Handle extremely large kernel TSB range flushes sanely. + - [sparc64] Fix illegal relative branches in hypervisor patched TLB code. + - [sparc64] Fix instruction count in comment for + __hypervisor_flush_tlb_pending. + - [sparc64] Fix illegal relative branches in hypervisor patched TLB + cross-call code. + - [sparc64] Handle extremely large kernel TLB range flushes more + gracefully. + - [sparc64] Delete __ret_efault. + - [sparc64] Prepare to move to more saner user copy exception handling. + - [sparc64] Convert copy_in_user to accurate exception reporting. + - [sparc64] Convert GENcopy_{from,to}_user to accurate exception + reporting. + - [sparc64] Convert U1copy_{from,to}_user to accurate exception reporting. + - [sparc64] Convert NG4copy_{from,to}_user to accurate exception + reporting. + - [sparc64] Convert NGcopy_{from,to}_user to accurate exception reporting. + - [sparc64] Convert NG2copy_{from,to}_user to accurate exception + reporting. + - [sparc64] Convert U3copy_{from,to}_user to accurate exception reporting. + - [sparc64] Delete now unused user copy assembler helpers. + - [sparc64] Delete now unused user copy fixup functions. + - usb: gadget: f_fs: edit epfile->ep under lock + - usb: gadget: f_fs: stop sleeping in ffs_func_eps_disable + https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.11 + - [x86] cpu/AMD: Fix cpu_llc_id for AMD Fam17h systems + - [x86] KVM: fix missed SRCU usage in kvm_lapic_set_vapic_addr + - [x86] KVM: Disable irq while unregistering user notifier + - ftrace: Ignore FTRACE_FL_DISABLED while walking dyn_ftrace records + - ftrace: Add more checks for FTRACE_FL_DISABLED in processing ip records + - genirq: Use irq type from irqdata instead of irqdesc + - fuse: fix fuse_write_end() if zero bytes were copied + - IB/rdmavt: rdmavt can handle non aligned page maps + - IB/hfi1: Fix rnr_timer addition + - [x86] mfd: intel-lpss: Do not put device in reset state on suspend + - [armhf] mfd: stmpe: Fix RESET regression on STMPE2401 + - can: bcm: fix warning in bcm_connect/proc_register + - gpio: do not double-check direction on sleeping chips + - [x86] ALSA: usb-audio: Fix use-after-free of usb_device at disconnect + - [x86] ALSA: hda - add a new condition to check if it is thinkpad + - ALSA: hda - Fix mic regression by ASRock mobo fixup + - [armhf] i2c: mux: fix up dependencies + - [armhf] i2c: i2c-mux-pca954x: fix deselect enabling for device-tree + - kbuild: add -fno-PIE + - scripts/has-stack-protector: add -fno-PIE + - x86/kexec: add -fno-PIE + - kbuild: Steal gcc's pie from the very beginning + - ext4: sanity check the block and cluster size at mount time + - [armhf] dts: imx53-qsb: Fix regulator constraints + - crypto: caam - do not register AES-XTS mode on LP units + - [powerpc*] Fix setting of AIL in hypervisor mode + - [x86] drm/amdgpu: Attach exclusive fence to prime exported bo's. + - [x86] drm/i915: Refresh that status of MST capable connectors in + ->detect() + - [x86] drm/i915: Assume non-DP++ port if dvo_port is HDMI and there's no + AUX ch specified in the VBT + - virtio-net: drop legacy features in virtio 1 mode + - [armhf] clk: imx: fix integer overflow in AV PLL round rate + - [armhf] rtc: omap: Fix selecting external osc + - iwlwifi: pcie: fix SPLC structure parsing + - iwlwifi: pcie: mark command queue lock with separate lockdep class + - iwlwifi: mvm: fix netdetect starting/stopping for unified images + - iwlwifi: mvm: fix d3_test with unified D0/D3 images + - iwlwifi: mvm: wake the wait queue when the RX sync counter is zero + - mfd: core: Fix device reference leak in mfd_clone_cell + - sunrpc: svc_age_temp_xprts_now should not call setsockopt non-tcp + transports + - uwb: fix device reference leaks + - PM / sleep: fix device reference leak in test_suspend + - PM / sleep: don't suspend parent when async child suspend_{noirq, + late} fails + - perf hists: Fix column length on --hierarchy + - IB/mlx4: Check gid_index return value + - IB/mlx4: Fix create CQ error flow + - IB/mlx5: Validate requested RQT size + - IB/mlx5: Use cache line size to select CQE stride + - IB/mlx5: Fix memory leak in query device + - IB/mlx5: Fix fatal error dispatching + - IB/mlx5: Fix NULL pointer dereference on debug print + - IB/core: Avoid unsigned int overflow in sg_alloc_table + - IB/hfi1: Remove incorrect IS_ERR check + - IB/uverbs: Fix leak of XRC target QPs + - IB/cm: Mark stale CM id's whenever the mad agent was unregistered + - netfilter: nft_dynset: fix element timeout for HZ != 1000 + - [arm64, armhf] gpio: pca953x: Move memcpy into mutex lock for set + multiple + - [arm64, armhf] gpio: pca953x: Fix corruption of other gpios in + set_multiple. + + [ Salvatore Bonaccorso ] + * Bump ABI to 2 and remove ABI reference for 4.8.0-1 + * xfs: Propagate dentry down to inode_change_ok() + * ceph: Propagate dentry down to inode_change_ok() + * fuse: Propagate dentry down to inode_change_ok() + * fs: Give dentry to inode_change_ok() instead of inode + * fs: Avoid premature clearing of capabilities (CVE-2015-1350) + (Closes: #770492) + * mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) + * vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 + CVE-2016-9084) + * mnt: Add a per mount namespace limit on the number of mounts + (CVE-2016-6213) + + [ Ben Hutchings ] + * [arm64] Enable more drivers for X-Gene (Really closes: #840061): + - DMA: Enable XGENE_DMA as module + - EDAC: Enable EDAC and EDAC_MM_EDAC, EDAC_XGENE as modules + * [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) + + -- Salvatore Bonaccorso Fri, 02 Dec 2016 06:35:22 +0100 + linux (4.8.7-1) unstable; urgency=medium * New upstream stable update: diff --git a/debian/config/arm64/config b/debian/config/arm64/config index 31aff65e0..87ca6857b 100644 --- a/debian/config/arm64/config +++ b/debian/config/arm64/config @@ -121,6 +121,7 @@ CONFIG_DMADEVICES=y CONFIG_DMA_BCM2835=y CONFIG_TEGRA20_APB_DMA=y CONFIG_TEGRA210_ADMA=y +CONFIG_XGENE_DMA=m ## ## file: drivers/dma/qcom/Kconfig @@ -129,6 +130,13 @@ CONFIG_QCOM_BAM_DMA=m CONFIG_QCOM_HIDMA_MGMT=m CONFIG_QCOM_HIDMA=m +## +## file: drivers/edac/Kconfig +## +CONFIG_EDAC=y +CONFIG_EDAC_MM_EDAC=m +CONFIG_EDAC_XGENE=m + ## ## file: drivers/extcon/Kconfig ## diff --git a/debian/config/kernelarch-x86/config b/debian/config/kernelarch-x86/config index 6a8d2fcff..d51abe5a1 100644 --- a/debian/config/kernelarch-x86/config +++ b/debian/config/kernelarch-x86/config @@ -70,7 +70,8 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_PCI=y # CONFIG_PCI_CNB20LE_QUIRK is not set # CONFIG_RAPIDIO is not set -CONFIG_X86_SYSFB=y +#. Doesn't support handover; see #822575 +# CONFIG_X86_SYSFB is not set CONFIG_IA32_EMULATION=y CONFIG_IA32_AOUT=y @@ -1773,7 +1774,8 @@ CONFIG_FB_VOODOO1=m CONFIG_FB_TRIDENT=m CONFIG_FB_VIRTUAL=m CONFIG_FB_HYPERV=m -CONFIG_FB_SIMPLE=y +#. Doesn't support handover; see #822575 +# CONFIG_FB_SIMPLE is not set ## ## file: drivers/video/fbdev/geode/Kconfig diff --git a/debian/patches/features/all/rt/kbuild-add-fno-PIE.patch b/debian/patches/features/all/rt/kbuild-add-fno-PIE.patch deleted file mode 100644 index b15603ac6..000000000 --- a/debian/patches/features/all/rt/kbuild-add-fno-PIE.patch +++ /dev/null @@ -1,37 +0,0 @@ -From 5f490bfc33f69f490c6c7a90889287e84f1556c0 Mon Sep 17 00:00:00 2001 -From: Sebastian Andrzej Siewior -Date: Fri, 21 Oct 2016 12:21:07 +0200 -Subject: [PATCH] kbuild: add -fno-PIE -Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/4.8/older/patches-4.8.6-rt5.tar.xz - -Debian started to build the gcc with -fPIE by default so the kernel -build ends before it starts properly with: -|kernel/bounds.c:1:0: error: code model kernel does not support PIC mode - -Also add to KBUILD_AFLAGSi due to: - -|gcc -Wp,-MD,arch/x86/entry/vdso/vdso32/.note.o.d … -mfentry -DCC_USING_FENTRY … vdso/vdso32/note.S -|arch/x86/entry/vdso/vdso32/note.S:1:0: sorry, unimplemented: -mfentry isn’t supported for 32-bit in c ombination with -fpic - -Signed-off-by: Sebastian Andrzej Siewior ---- - Makefile | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - ---- a/Makefile -+++ b/Makefile -@@ -398,12 +398,12 @@ KBUILD_CPPFLAGS := -D__KERNEL__ - KBUILD_CFLAGS := -Wall -Wundef -Wstrict-prototypes -Wno-trigraphs \ - -fno-strict-aliasing -fno-common \ - -Werror-implicit-function-declaration \ -- -Wno-format-security \ -+ -Wno-format-security -fno-PIE \ - -std=gnu89 - - KBUILD_AFLAGS_KERNEL := - KBUILD_CFLAGS_KERNEL := --KBUILD_AFLAGS := -D__ASSEMBLY__ -+KBUILD_AFLAGS := -D__ASSEMBLY__ -fno-PIE - KBUILD_AFLAGS_MODULE := -DMODULE - KBUILD_CFLAGS_MODULE := -DMODULE - KBUILD_LDFLAGS_MODULE := -T $(srctree)/scripts/module-common.lds diff --git a/debian/patches/series-rt b/debian/patches/series-rt index fdb6673bb..bf36e4a96 100644 --- a/debian/patches/series-rt +++ b/debian/patches/series-rt @@ -37,7 +37,6 @@ features/all/rt/iommu-vt-d-don-t-disable-preemption-while-accessing-.patch features/all/rt/lockdep-Quiet-gcc-about-dangerous-__builtin_return_a.patch features/all/rt/x86-apic-get-rid-of-warning-acpi_ioapic_lock-defined.patch features/all/rt/rxrpc-remove-unused-static-variables.patch -features/all/rt/kbuild-add-fno-PIE.patch # Wants a different fix for upstream features/all/rt/NFSv4-replace-seqcount_t-with-a-seqlock_t.patch