Commit Graph

3243 Commits

Author SHA1 Message Date
Ben Hutchings fbee7ded77 [rt] Update to 4.4-rt2 2016-01-15 13:23:17 +00:00
Ben Hutchings 18e70e2c53 Add some security fixes 2016-01-14 23:39:40 +00:00
Ben Hutchings d2547e3561 xen/gntdev: Grant maps should not be subject to NUMA balancing (Closes: #810472) 2016-01-08 19:32:35 +00:00
Ben Hutchings 64474e57fd [rt] latency_hist: Update sched_switch probe 2016-01-04 17:23:09 +00:00
Ben Hutchings 0f11ea7f19 Update to 4.4-rc8 2016-01-04 01:57:00 +00:00
Ben Hutchings 4689e6426d Regroup patches in series 2016-01-02 19:20:40 +00:00
Ben Hutchings e2abaa403e Merge tag 'debian/4.3.3-3'
Drop the ABI reference and ignored symbols.

Drop most of the patches, as they're already upstream.
2016-01-02 19:18:54 +00:00
Ben Hutchings e148000b24 ptrace: Fix ABI change for priv-esc fix 2016-01-02 16:27:28 +00:00
Ben Hutchings eafb4c30fd Revert "xhci: don't finish a TD if we get a short transfer event mid TD"
Closes: #808602, #808953, regression in 4.3-rc7
2016-01-02 03:09:56 +00:00
Ben Hutchings 50c5af2358 [armhf] crypto: sun4i-ss - add missing statesize (Closes: #808625) 2016-01-01 19:46:24 +00:00
Ben Hutchings 50263628e4 [x86] drm/i915: Don't compare has_drrs strictly in pipe config (Closes: #808720) 2016-01-01 19:24:50 +00:00
Ben Hutchings 45e2ecad07 drm/nouveau/pmu: do not assume a PMU is present (Closes: #809481) 2016-01-01 18:41:43 +00:00
Salvatore Bonaccorso abab5c2745 [x86] kvm: Reload pit counters for all channels when restoring state (CVE-2015-7513) 2015-12-31 15:49:59 +01:00
Ben Hutchings e57c91d886 KEYS: Fix race between read and revoke (CVE-2015-7550) 2015-12-31 02:53:31 +00:00
Ben Hutchings 6642f73533 [armhf] Add support for BCM2836 and Raspberry Pi 2
- Patches for BCM283x drivers taken from linux-next
- A few more changes requested for 4.5:
  http://thread.gmane.org/gmane.linux.kernel/2115942
- Enable all the drivers
- Add SD and USB controller drivers to udebs
2015-12-30 04:18:26 +00:00
Ben Hutchings 0a44c00d5c [rt] Add the patch series file to git 2015-12-29 01:19:13 +00:00
Ben Hutchings fd75678652 Update 'net: add validation for the socket syscall protocol argument' to upstream version 2015-12-27 19:21:59 +00:00
Ben Hutchings 6408412cc6 Add upstream references to selftest patches 2015-12-27 14:14:49 +00:00
Ben Hutchings a52be96b10 Regroup patches in series 2015-12-27 14:11:18 +00:00
Ben Hutchings 3fac5cf03c ptrace: being capable wrt a process requires mapped uids/gids 2015-12-27 06:19:08 +00:00
Ben Hutchings 7b6f99cec5 [xen] pciback: Fix state validation in MSI control operations (CVE-2015-8551, CVE-2015-8852, XSA-157) 2015-12-27 05:54:06 +00:00
Ben Hutchings 94b974ce0f [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155) 2015-12-27 05:49:13 +00:00
Ben Hutchings 1ff79b037c bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575) 2015-12-27 04:26:45 +00:00
Ben Hutchings e9708970a6 pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569) 2015-12-27 04:26:45 +00:00
Ben Hutchings 5db0f0e307 block: ensure to split after potentially bouncing a bio (Closes: #809082) 2015-12-27 04:26:45 +00:00
Ben Hutchings 47bc73ef73 [rt] Fix build error in kernel/time/hrtimer.c 2015-12-24 23:37:10 +00:00
Ben Hutchings fb638c19f7 [rt] Update to 4.4-rc6-rt1 and re-enable 2015-12-24 21:29:36 +00:00
Salvatore Bonaccorso d6b9e3f082 ovl: fix permission checking for setattr (CVE-2015-8660) 2015-12-24 06:42:25 +01:00
Ben Hutchings 0aaf811548 Update to 4.4-rc6 2015-12-21 11:13:30 +00:00
Ben Hutchings fc3ff0606d mm: Fix missing #include in <linux/mmdebug.h> (fixes FTBFS on arm64) 2015-12-19 20:32:14 +00:00
Ben Hutchings ee4980cb32 [armhf,sparc64] Force ZONE_DMA to be enabled, reversing ABI change in 4.3.3 (fixes FTBFS) 2015-12-17 17:59:24 +00:00
Ben Hutchings 70157abb7d Release linux (4.3.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVnCT2+e/yOyVhhEJAQr+qw/9E5dEKfpAfOywx9lA0eQKKBx2yt2IkdGc
 0k9UFJlJc5xpOwEH03WOlU3XktlrwNzaT6U0Qvu6MW4Y77G60fDbAB/J+1jlYatK
 02CEUmBgrD5M6Cm/9J085mglIEt+5tq0RIZwAWx7iki53H/y1KQ6uski3oZwcguu
 Go5KP744Osen5cyJKgT+vV/VGHc+BJEMcNFNI1nlh71owTQKT2ZsLx8fd3ZIdGsB
 8rTC3pIsE8YjTcaRhKcJ1t6a19fX/2fD7KsfZTo8YdfLReg29CZ6TlQF8clzh8yH
 37RWnEEYZT3vDbLVFOr4RVj0/b5skJQmuC7Bs40dywPyjEK/OQHMUWdcw4ZAxsq1
 kNL9DhShF4G+HW58VOCRZSMO+R4R2Cl7JIz4bjhhPIOka9X/vn0yk/QgR6z16g0J
 DHc2zx9+OHlUgk89KpCtDYdzHth7uQAmg6WIJemVU1Mt4jdaHKoEtAI4iNkEjdby
 1LNnmYjukIixpTtb/NJGtyQPWSOOHnRQa7Cq36SngZoT4Gowb5hbDI9v+IrSQZUj
 ruEMqMl4Bcq3/R1HKdqcs0FK+obKceaHSoLH+ludH0U7UAjh3dqCotxHkX4DT+ws
 0CJAM1PIiiXG6n+TQve/wepG/Fv2yuOJg1BEo32Qjy5RtzhZf4vgZEYKJFrCGxR3
 oBYzz+yPcvg=
 =AlwC
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.3.3-1'

Drop the ABI reference and ignored symbols.

Drop most of the patches, as they're already upstream.
2015-12-16 17:15:08 +00:00
Ben Hutchings ca0bbf698b tipc: Fix kfree_skb() of uninitialised pointer (regression in 4.3.3) 2015-12-15 21:25:16 +00:00
Ben Hutchings 8fd06d9868 vrf: Fix broken backport of "vrf: fix double free and memory corruption on register_netdevice failure" in 4.3.3 2015-12-15 17:44:38 +00:00
Ben Hutchings c4e89babe4 Update to 4.3.3
Drop 3 security fixes that were included in it.
2015-12-15 17:40:55 +00:00
Ben Hutchings 61acdc692c net: add validation for the socket syscall protocol argument (CVE-2015-8543) 2015-12-14 20:59:45 +00:00
Ben Hutchings c3ac7c57ca cirrus,mgag200: Drop patches for compatibility with wheezy userland 2015-12-14 14:36:05 +00:00
Ben Hutchings e97c318264 Drop another obsolete patch for X-Gene
The xgene-reboot driver is now unused.
2015-12-14 14:21:51 +00:00
Ben Hutchings a4febbdc67 [arm64] Drop now-redundant patch for X-Gene device tree (fixes FTBFS) 2015-12-14 02:51:41 +00:00
Ben Hutchings 1adea41376 Update metadata for patches that are in mainline with another commit hash 2015-12-13 04:52:07 +00:00
Ben Hutchings 2f38533595 [armhf] Add support for Odroid-XU4 (Closes: #804850) 2015-12-13 00:34:44 +00:00
Ben Hutchings 405f12a12b [x86] nouveau: bios: return actual size of the buffer retrieved via _ROM (Closes: #772716) 2015-12-13 00:34:44 +00:00
Ben Hutchings efc870db16 [x86] drm/i915: Mark uneven memory banks on gen4 desktop as unknown swizzling (Closes: #780363) 2015-12-12 22:53:37 +00:00
Ben Hutchings d89f74a7ba [armel/kirkwood] dts: Fix QNAP TS219 power-off (Closes: #807696) 2015-12-11 18:36:54 +00:00
Ben Hutchings 5df4b39d02 aufs: Update support patches to aufs4.x-rcN-20151123 2015-12-10 18:25:40 +00:00
Ben Hutchings 824b04a59d Update to 4.4-rc4
Refresh and drop patches as appropriate.

- Rewrite memcg disable patch to operate on cgroup_disable_mask
- The ancient Advansys Kconfig bug was fixed (differently) upstream
- ft1000 driver is gone, so we no longer need to remove its firmware
- One hunk of aufs4-mmap.patch is obsolete
2015-12-10 18:13:16 +00:00
Ben Hutchings 26e03c2621 Update to 4.3.1 2015-12-09 23:48:47 +00:00
Ben Hutchings 12dc87aa9c Release linux (4.2.6-2).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVmHQq+e/yOyVhhEJAQoKGw/+L3omCHQc+jEfre5v9KaKEFfDn/5wh2fF
 C1U2n9tW3Dje//k1t5IalN2bxugjg86lvyobnNo+fP3GxbEftr0OJFKspWDlREcT
 epebhVQwzIY5ilNaayIqU8+wO6N/Ocy7kDspDjT7aqKFs5ZxmKReR6mvqZzYtJX5
 W6lrinX03bcBLaFGgHOFJeI/6JapVC8LxQPiek2NYuEAnMsGdN0CDpZRqsmgNtjn
 PBYbfsfk/JMubr+2ddksZcQTPKoK5fcbbgHRgN76eKDEGZ9XychWlhA8VANw+dhx
 I572cypGXxfV6AoLky7VcP8WKmWQVNWsXTMaFd8j0703xF/ands/Ic8mZOiftfh9
 9Qg6yhDt16zBPk+6Ct2ce04TAEdaY6Zr4WZdYphgVrkoZQrMc1PUVJkg6cPC7bKZ
 XANEWus39vJmHIM82ETY2BpZ8+kdFqehWpo0PM8kCfL06fAm3inIsKDa7iyrpLbJ
 DSdrQiRPeGr9jjB6mOuAIw/Otlq+M8kHfBGD1lgf7luLWOuP7z67mj2kjhNUP+pI
 yKZI6+xbwZ79+Sr6ZFQBPDVH400zbvinV0B3xV+ZUU/3ze6j3QVFEuA9KsqAVqN6
 R9CiQJ3lP3SL64P9FMQDfQL75HD0CZnEULlqDIYAzBmtz2B/H0lhrODoO2oZHHKT
 jmxxrVLxbPg=
 =jlfq
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.2.6-2'

Exclude one new patch that's already in 4.3, and the ABI stuff.

Remove items from the open changelog entry that are now redundant.
2015-12-04 18:03:02 +00:00
Ben Hutchings b1805eb5b3 [x86] drm/i915: shut up gen8+ SDE irq dmesg noise (Closes: #806304)
(cherry picked from commit fd13855f77)
2015-12-04 01:18:53 +00:00
Ben Hutchings 7d0a4425fd firmware_class: Fix condition in directory search loop (Closes: #804862)
(cherry picked from commit 5269f93afe)
2015-12-04 01:15:54 +00:00
Ben Hutchings 7517e45eec qxl: Enable by default (Closes: #779515)
(cherry picked from commit 7f648db4e2)
2015-12-04 01:14:07 +00:00
Ben Hutchings 4668d13b75 Btrfs: fix truncation of compressed and inlined extents (CVE-2015-8374) 2015-12-03 00:50:36 +00:00
Ben Hutchings 1060c43c3d ppp, slip: Validate VJ compression slot parameters completely (CVE-2015-7799)
Plus a preparatory fix to isdn_ppp.
2015-12-03 00:48:31 +00:00
Ben Hutchings 045f1d7a16 unix: avoid use-after-free in ep_remove_wait_queue (CVE-2013-7446) 2015-12-03 00:45:29 +00:00
Ben Hutchings fd13855f77 [x86] drm/i915: shut up gen8+ SDE irq dmesg noise (Closes: #806304) 2015-11-26 20:47:26 +00:00
Ben Hutchings 22ad2142d1 media: usbvision: fix crash on detecting device with invalid configuration
(CVE-2015-7833, partly fixed in 4.2.6-1)

Also update headers of the previous patch to match the commit in
media_tree.git.
2015-11-24 17:09:48 +00:00
Ian Campbell 00e7e4e3ed [x86] Xen: expose a more realistic max p2m size in the shared info
Fixes migration (Closes: #797205)
2015-11-21 13:48:44 +00:00
Ben Hutchings f2a0d6dbc3 aufs: Update support patches to aufs4.3-20151116 2015-11-17 14:57:05 +00:00
Salvatore Bonaccorso 3dd5f35dcb Refresh patch headers for patches for CVE-2015-8104 2015-11-15 09:48:31 +01:00
Ben Hutchings 5269f93afe firmware_class: Fix condition in directory search loop (Closes: #804862) 2015-11-12 14:59:37 +00:00
Salvatore Bonaccorso 1d08805288 [x86] KVM: rename update_db_bp_intercept to update_bp_intercept 2015-11-10 22:14:32 +01:00
Salvatore Bonaccorso 45bf582b02 [x86] KVM: svm: unconditionally intercept #DB (CVE-2015-8104) 2015-11-10 22:14:32 +01:00
Ben Hutchings b531af6929 Release linux (4.2.6-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVkIVT+e/yOyVhhEJAQo9JxAAzMhh283CLxwNC9+oJKEpfD/ve+WLEcKI
 7TiyttUesYegG0/5JAPU//S8LyHOXeu+6vqEO0NzReCTGdQi4oXZTpUQA9KNzCTF
 TLsdFBa6z5mRYcRHeGVYjmhKr8MTVRumXv/3WTVSwp71t1W7dce4qTboMsFr/kmk
 c6rGv5GNTtpHpyjevIrLAkBq83rwdbPz6dtNnBAna38awY61a7snFPr81WUvNu3I
 uVD5Dcm+efAzL/tPSxwdZRhQ7Qi5SnqUgP/c/3keDYeCLgj87FxdXK4vlJvkgmQs
 VGX/D9VyCQvFbtWmEtAdOJHqu2LuYd0ZljFvx3Fo59KHDm6GV60jsHaGYjc8a6o1
 F7r6vaRGMLDtZhjFeYwVgJYCcHmQ8RO0fuKe4hslaiItg1rKLV738SrVRzl/oTq+
 l/HwdWxyeEbqMi1rc8bzwnFaet2Av+eArEfsla4uul1ZgNwkGbV/qZjDW/lIHcLS
 7cIYdiiv719AVU9rRR1JZR+92k4MsDaqerKNUl72yHr6F8YMY0T10GY5ddlyzAjD
 gbOkqcAIxlwVdxzXjzVUdA6T2R7edEbGnVtSaqKdFJUgRuGMqqGlcQ5xsK3CN4LC
 YlbHa2y90BpOro6E6d4Tt4dLBvq49PQ2QJio8JJNtIrpAEjN41xIXUD1AOsLvC56
 S737q+9MAIg=
 =Bxdo
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.2.6-1'

Refresh some patches.
2015-11-10 16:12:32 +00:00
Ben Hutchings 7f79eccf5e Update to 4.2.6 2015-11-10 11:32:17 +00:00
Ben Hutchings ef1fd62260 [x86] KVM: Intercept #AC to avoid guest->host denial-of-service (CVE-2015-5307) 2015-11-08 15:13:48 +00:00
Ben Hutchings b2076bbc37 media/vivid-osd: fix info leak in ioctl (CVE-2015-7884) 2015-11-08 15:01:04 +00:00
Ben Hutchings ed853af7cb RDS: fix race condition when sending a message on unbound socket (CVE-2015-7990) 2015-11-08 14:48:48 +00:00
Ben Hutchings 222755c823 usbvision: fix overflow of interfaces array (CVE-2015-7833) 2015-11-08 14:48:04 +00:00
Ben Hutchings e317536be0 mv643xx_eth: Re-enable TSO, fixed upstream in 4.3 2015-11-07 14:23:40 +00:00
Ben Hutchings 7f648db4e2 qxl: Enable by default (Closes: #779515) 2015-11-07 14:19:28 +00:00
Ben Hutchings c5e06b9078 Update to 4.3 2015-11-02 10:29:06 +00:00
Ben Hutchings 4c1226a6c4 selftests: breakpoint: Actually build it 2015-10-31 22:04:13 +00:00
Ben Hutchings a29879587a selftests: vm: Try harder to allocate huge pages 2015-10-31 22:04:13 +00:00
Ben Hutchings a748a69c46 selftests: Make scripts executable 2015-10-31 22:04:13 +00:00
Ben Hutchings 47af940cea selftests: kprobe: Choose an always-defined function to probe 2015-10-31 22:04:13 +00:00
Ben Hutchings ac28c69026 selftests: Ignore compiler warnings
We can't fix them all yet, and they shouldn't cause a test failure.
Patch memfd makefile to ensure we don't rebuild it and thus emit
warnings during a test run.
2015-10-31 22:04:13 +00:00
Ben Hutchings 499a3df5b5 selftests: Add missing #include directives 2015-10-31 22:04:13 +00:00
Ben Hutchings 61407a46ed Update to 4.2.5 2015-10-27 11:01:28 +09:00
Ben Hutchings 5c41cc7594 Update to 4.3-rc7 2015-10-25 19:47:58 +09:00
Ben Hutchings 53dc794e5f [x86] smpboot: Fix CPU #1 boot timeout (Closes: #802464) 2015-10-24 10:50:52 +09:00
Ben Hutchings 3bbce43ea7 Update to 4.2.4
Drop patches applied upstream.

Fix two ABI changes.
2015-10-23 01:37:19 +01:00
Salvatore Bonaccorso 4a5cabce55 Rename patches for crash issue when attempting to garbage collect an uninstantiated keyring 2015-10-20 14:06:05 +02:00
Salvatore Bonaccorso 6dd6bf4bb2 KEYS: Don't permit request_key() to construct a new keyring 2015-10-19 21:33:39 +02:00
Salvatore Bonaccorso a4b71a2ac3 KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring 2015-10-19 21:31:55 +02:00
Salvatore Bonaccorso 0856d72c31 KEYS: Fix race between key destruction and finding a keyring by name 2015-10-19 21:24:41 +02:00
Ben Hutchings 79863cf1e4 Update to 4.3-rc6 2015-10-19 02:29:50 +01:00
Ben Hutchings 96c69c65e9 Update to 4.3-rc5 2015-10-13 22:00:37 +01:00
Ben Hutchings e3bec54b78 nbd: Restore request timeout detection (Closes: #770479) 2015-10-08 21:26:03 +01:00
Ben Hutchings 48bbfe3b4f Update to 4.3-rc4 2015-10-06 23:13:52 +01:00
Ben Hutchings 74a655e99e Release linux (4.2.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVhQlHee/yOyVhhEJAQp14g//bgpNy9R1+sRM/tDsNhW3H331YOLlLnf5
 1F6VXgzHnDspblgJctDmYAFKIujRNO/Rn1qDXJzh6bRrHnehnH/kJmu8fXk7zbHz
 zT35/HhPIDQV04OTIne+6Pj56iMAneplPhoxtfEPUbLsqzcS9xriTIU3Hv+U7i4a
 y7hfw5lYjbNFdkeJ91VmBFF6U2usmYYPFxokua4vFNsBAStayhoq0ozbaWCePMwn
 V+tgR4GxlbPNvlfTMmEVITTM1M3wXLc9Gq87yEVwLVooshu0yQEmYD3KE87nLLAa
 9zUpH5xK05EKZEPFDtLIcLa3JIB36BfNGqPLICGnw6EesHBU2ywGTDmQlQSd262W
 byhbBMEMrCOQYkL53oMPXjBK5Sf+QuXlbaV+EOXUaolKS0qS+ss/ceip799RHa/F
 JrEYJCLbboML6+2uE47cXugnEz2aYkDeiFygC4qTYxZAbGd6udZpsRVQTpjrhhoK
 B+FPxwK8r5OX6OG6TOfr3XqmAeifTLn7g0IwQ5xqILO/6II/aZI6YvwF7DOrJx3+
 0k6T+RwhSjy55l/8nCZnsbFQvxbYbVON7eQk5TNkting9CDHmWNzE5bTo0sUzWFt
 ajrtrWQ34Z98a30GqMWPT8vPjgQx6Jos1XHzGa379W/jyArqe2QAedSfauWIszez
 e4BdJBFD1YY=
 =C10r
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.2.3-1'

Drop ABI reference files and ABI fixes.
2015-10-06 22:16:11 +01:00
Ben Hutchings 25353e24ef [mips*] io: Define ioremap_uc (fixes FTBFS) 2015-10-06 22:00:43 +01:00
Ben Hutchings 14667fb8db [x86] crypto camellia_aesni_avx: Fix CPU feature checks (Closes: #800934) 2015-10-06 12:34:12 +01:00
Ben Hutchings 8418beadb6 [armhf] dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus (fixes FTBFS) 2015-10-06 00:01:48 +01:00
Ben Hutchings 8ef7aab26b Ignore/fix ABI changes as appropriate
sdhci and wireless driver interfaces shouldn't be used from OOT.
The block change is a false positive from genksyms.
2015-10-05 21:19:16 +01:00
Ben Hutchings 11e8b8bbe3 Update to 4.2.3 2015-10-04 02:27:48 +01:00
Ben Hutchings f7856192d9 ath10k: add qca6164 support (Closes: #800703) 2015-10-04 00:49:40 +01:00
Salvatore Bonaccorso b532cf080d ipc: Initialize msg/shm IPC objects before doing ipc_addid() (CVE-2015-7613) 2015-10-03 15:26:49 +02:00
Ben Hutchings 9490057db7 netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths (Closes: #800445) 2015-10-03 02:33:14 +01:00
Ben Hutchings 721a706dea [x86] ALSA: hda - Disable power_save_node for Thinkpads (Closes: #800694) 2015-10-03 01:58:54 +01:00
Ben Hutchings 7427111a9f ovl: conditionally use O_LARGEFILE in ovl_copy_up() (Closes: #800724) 2015-10-03 01:41:31 +01:00