Commit Graph

6687 Commits

Author SHA1 Message Date
Bastian Blank cf16dd6fec Move debug symbols into the debug archive
Currently the extra setting Auto-Built-Package: debug-symbols is needed
to actually move it in addition to the debug section.
2016-07-07 19:43:59 +02:00
Ben Hutchings 227bd93ded Release linux (4.6.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV3yLEue/yOyVhhEJAQrB2hAAg7HB6NkS0qupN5a/pjupxrtDzbWAoCKH
 uv3lbVe+y13lp5tMDB4ZeALxQf7/YHKqKF6ZUUvPx5oYyRtlE3qvqEVuwtd4CLmg
 81SIIJYLZKxom9snqoJz7kjf48B4iBiJv/LXJbDx1ulE9jS1C44crwR6gIa0Bv3x
 88OjmpSFrHafetM7TF+ZR27NapBnxlwvGpBay3fjjLl+WAUKawZd7dfZ/V5f964M
 2SmKkjBzUg2ULdRzwv83X2kf2PDuv7FrEeVexbeWvbnfea2yu0s/Y77EcQFFuAUY
 ffsIrEtO7yvPKLF2np070UG9maKyOa4T450CxrFsR1bL4EvJUjRClJias1XqePn4
 mAUVfzMKB3FPAYtn78wxo7QD2c4ymYL0MQU2IGVn1WQYf0zaCszvbMmAJjJY6PND
 mQlD0rtYYKHVde3fjuxb2gbji93L88b2kj9m74PpwIo44sGuzXiX4PJLYcJpcTnq
 WzckVD5j/Kmw5lH/q/zDhWt1QlA7+YfE9kYDT/LFc4Vo24eGLcFhJWuXy+ICMK2j
 4n5i5cnWOvpyYAJW7epu0VCKL8qj7DH70Eff8dNi6gfXwZCRTvJMpjpt4P99Q8k3
 coCvQR5KyiWVPKc/xBnTYadr2blWRgm+GcN27x2PykONlYNhjsxHh7Ea7faGBFEt
 kwdBl15bzSE=
 =uSZq
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.3-1'

Drop patches included upstream.

Drop ABI maintenance changes.
2016-07-06 22:08:50 +02:00
Ben Hutchings c78d9ff512 Update to 4.7-rc6 2016-07-06 22:06:27 +02:00
Ben Hutchings 2064fe3730 Prepare to release linux (4.6.3-1). 2016-07-04 20:10:24 +02:00
Ben Hutchings ade54804a1 [powerpc*] tm: Always reclaim in start_thread() for exec() class syscalls (CVE-2016-5828) 2016-07-03 16:33:29 +02:00
Ben Hutchings aab434acde [x86] Fix incompatiblity between kaslr and hibernation
* [amd64] power: Fix crash whan the hibernation code passes control to the
  image kernel
* [x86] KASLR, power: Remove x86 hibernation restrictions
2016-07-02 19:29:28 +02:00
Ben Hutchings f513bc42ae debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed 2016-07-02 09:44:37 +02:00
Salvatore Bonaccorso 3c35987b05 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (CVE-2016-5829) 2016-06-30 14:53:31 +02:00
Ben Hutchings 419d6356df Update to 4.6.3 2016-06-27 00:58:54 +02:00
Ben Hutchings 15c473a9c7 Prepare to release linux (4.6.2-2). 2016-06-25 11:22:27 +02:00
Salvatore Bonaccorso c42ea367e3 Add CVE identifier for nfsd issue 2016-06-25 07:22:30 +02:00
Ben Hutchings 0bb71866b7 Ignore ABI change in x_tables 2016-06-25 02:05:12 +02:00
Ben Hutchings 12183bf924 nfsd: check permissions when setting ACLs (CVE-2016-XXXX) 2016-06-25 00:56:15 +02:00
Ben Hutchings 9fd7bbdf1a netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings f5f99415a2 percpu: Fix synchronization with chunk destruction (CVE-2016-4794) 2016-06-25 00:19:08 +02:00
Ben Hutchings b782c52536 KEYS: potential uninitialized variable (CVE-2016-4470) 2016-06-25 00:18:47 +02:00
Martin Michlmayr fcf753ae77 [armhf, arm64] Enable DRM_TEGRA_STAGING
DRM_TEGRA_STAGING must currently be enabled in the kernel and libdrm
must be built with --enable-tegra-experimental-api.  Our libdrm package
already does the latter (at least on armhf), so enable the former as
well.
2016-06-23 18:13:27 -07:00
Ben Hutchings e25a0f09c3 Merge remote-tracking branch 'alioth/master'
Conflicts:
	debian/changelog
2016-06-21 20:44:48 +01:00
Aurelien Jarno 9e45452683 [mipsel] Remove loongson-2e and loongson-2f flavours (Closes: #827790). 2016-06-21 21:11:23 +02:00
Ben Hutchings e4b00d29cc Prepare to release linux (4.7~rc4-1~exp1). 2016-06-21 00:41:23 +01:00
Ben Hutchings eb1373a157 Update to 4.7-rc4 2016-06-20 13:40:09 +01:00
Ben Hutchings b9ef626a40 [rt] Update to 4.6.2-rt5 2016-06-19 22:11:38 +01:00
Ben Hutchings e65d07eb2b [armel] Disable module signing for all flavours (fixes FTBFS)
We only build udebs for modules that will not be signed, but we don't
currently have a way to selectively build udebs for only some
flavours.
2016-06-19 19:36:05 +01:00
Ben Hutchings 4981b73c71 Prepare to release linux (4.7~rc3-1~exp1). 2016-06-18 23:50:39 +01:00
Ben Hutchings 5e48a143f6 debian/control: Add workaround for libdpkg-perl bugs #827628, #827633
Dpkg::Deps has a couple of bugs that were resulting in the
libssl-dev:native build-dependency being discarded by dpkg-source.
2016-06-18 23:49:47 +01:00
Ben Hutchings 60b1e00fa0 Note closure of bug #827618 2016-06-18 21:30:55 +01:00
Ben Hutchings a808d3112b Release linux (4.6.2-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABCgAGBQJXYbBEAAoJEAVMuPMTQ89EM8wP/3llI8Jr6Q+2ktVOqYQ7U0JT
 +UEzEuKlVS+3/SjFZv8dAqpM018OJDIiccgzjvuny6MSYHiH//yWG4lC8O2WikBA
 RhfbUsNWFImEkwhY8wD1cjuF0QIXNtR7qOKdCPX5wQUiG469WF4F4l3lgWoo01ub
 hYXNsGebIjZTQE6KWGm97pvSRNFPT18DulANGpe9m804y2Xs+dQn6dVHKaSYT0BF
 labA6C+hCmbMos3gEYNzjbmU9fxYpS98pXq7uc04ryBj3UjGoBlmxeip9yrIiC0I
 oZr8kAxz5PCRSqPnhZqE51WO6eLaWIrEGGTnb6sOtbHYsTrNu8iHpWXVCkB8/2GL
 LYhOJn3AyqJE4yb69EKSWL7cbVEqyVJHkGntGhTm+tKJP0QmnKlhQY47aViPt4Fc
 IXQvUOeG94GROooRTNLp9/3N2di4p4YPNv2QgM5lUJjySWUMCNzw/MjpYfvuIHrp
 bowSN5EYDpO6WqcZZVHogM9hJ2Aq+zWYkfK4f38r4T4+g0T8IQ8qMCY/o/LV7uod
 KUbQ7SIHK7uAMT9BpJuslCwvwhKdf/9y/bcuOkB2alfR52uApdDkL04uD5jIbjaL
 fElOyQPmJPNe0zxP6yZp4G3/JbMhWdX+qc77+GWkj27mBqnBEZKBHjCmU/6Vfv2Y
 VolsoZ6sfxJ1pxlUcWPt
 =li3O
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.2-1'
2016-06-18 12:59:57 +01:00
Ben Hutchings 7f701b08f9 Update to 4.7-rc3 2016-06-18 12:53:02 +01:00
Ben Hutchings 9edbacb8a5 MIPS: libgcc: Fix ABI change in 4.6.2 2016-06-17 01:50:50 +01:00
Ben Hutchings 966488336f [mips*] Fix ABI change in 4.6.2 2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso 86e7845331 Prepare to release linux (4.6.2-1). 2016-06-15 21:45:02 +02:00
Ben Hutchings ece80cbbec liblockdep: Add all the patches submitted upstream; drop one that's obsolete
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Aurelien Jarno 70251fbb57 [ppc64*] Enable SPAPR_TCE_IOMMU, VFIO and VFIO_PCI (Closes: #826367). 2016-06-13 22:51:06 +02:00
Ben Hutchings 8bef69e784 Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-06-13 02:08:57 +01:00
Ben Hutchings 0ad327058f Fix build rules for userland tools to support cross-building
Pass $(CROSS_COMPILE) or host GNU type through to upstream build rules.

debian/rules.real: Filter tools packages by host arch, not build arch

debian/rules.d/Makefile: Build the tools needed for headers_install in
a separate subdirectory
2016-06-13 02:06:19 +01:00
Ben Hutchings a7ebaf2684 Add support for the nopython build profile, disabling the linux-perf package
Currently we build-depend on the native python (via asciidoc), and on
the host python (via python-dev).  As these are not coinstallable it
is impossible to perform a complete cross-build.  Until that's resolved,
this will allow cross-building of most of the package with the
combination of the 'cross' and 'nopython' profiles.

(This also sidesteps the issue of perf wanting a multilib compiler.)
2016-06-13 02:04:39 +01:00
Ben Hutchings 0aceb8739a debian/control: Fix build-dependencies for cross-building
The current cross-compiler packages don't set the Multi-Arch field, so
specify that the cross-compiler package must be native, rather than any
architecture.

flex doesn't support multi-arch, and this would require splitting it
(#611230, #761449).  Force use of the native package for now.

openssl doesn't support multi-arch but probably easily could (#827028).
Force use of the native package for now.

We need the native libssl-dev while building the kernel itself and the
host libssl-dev while building tools for linux-kbuild.

Document the state of cross-building in README.source.
2016-06-13 02:02:54 +01:00
Ben Hutchings cc2ac0be61 debian/README.source: Document the supported build profiles 2016-06-13 00:38:28 +01:00
Ben Hutchings 1ed7b4bdf1 linux-cpupower: Define PACKAGE_BUGREPORT to refer to reportbug, not upstream 2016-06-13 00:23:09 +01:00
Ben Hutchings 7d8366f375 debian/rules.d/Makefile: Override architecture detection when building userland headers
Martin Michlmayr found that userland builds fail if 'uname -m' reports
the native kernel architecture, and that's because we don't explicitly
set ARCH for the headers_install target.  That's fine for most cases
of a 32-bit chroot on a 64-bit kernel because a single source
architecture covers both, but arm/arm64 is an exception.

This doesn't make actual cross-builds of userland tools work.
2016-06-12 20:47:56 +01:00
Martin Michlmayr 66c93587c9 [armhf] Enable SPI_TEGRA114 2016-06-12 11:58:47 -07:00
Martin Michlmayr 2f9a7600a6 [arm64] Enable MAX77620 and PCA9539 which are required by Jetson TX1
Enable some options used by the Jetson TX1 board.  MAX77620 is used
as system PMIC and PCA9539 as I2C GPIO bus expander.

Set I2C=y since this is required by MFD_MAX77620.

CONFIG_GPIO_MAX77620 and CONFIG_GPIO_MAX77620 are not upstream yet
but will be.  I'm adding the options now to make the commit cover
everything needed.

This is patched on a patch submitted upstream by Laxman Dewangan.
2016-06-11 22:27:41 -07:00
Martin Michlmayr 14a65240ad [arm64] Enable more QCOM options 2016-06-11 00:32:32 -07:00
Martin Michlmayr 8d2b25e989 [armhf] Enable TEGRA_SOCTHERM 2016-06-11 00:29:15 -07:00
Martin Michlmayr 6902e92ec8 [arm64] Enable THERMAL
We had some thermal options in the config file but they weren't enabled
because CONFIG_THERMAL wasn't enabled.
2016-06-11 00:25:35 -07:00
Martin Michlmayr cb248f2010 [arm64] Enable TEGRA210_ADMA 2016-06-11 00:21:15 -07:00
Martin Michlmayr 25e663afc5 [armhf, arm64] Enable PHY_TEGRA_XUSB and USB_XHCI_TEGRA 2016-06-11 00:20:18 -07:00
Salvatore Bonaccorso 95cba203d5 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244) 2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso f1921659a4 Add missing changelog entry for CVE-2016-5243 2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso 91d6f22ed8 Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
proc: prevent stacking filesystems on top

ecryptfs: forbid opening files without mmap handler

sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings ff5804f208 cpupower: Bump soname version and rename library package accordingly 2016-06-10 14:47:48 +01:00
Ben Hutchings 906f7b1351 Update to 4.7-rc2
[rt] Disable until it is updated for 4.7 or later
2016-06-10 14:47:48 +01:00
Ben Hutchings 72f58e83ea linux-image: Add '-unsigned' suffix to packages with modules that will later be signed 2016-06-10 14:47:47 +01:00
Ben Hutchings 5a1dc12690 udeb: Drop packages for modules that will later be signed
These packages will be taken over by src:linux-signed.  Still do
everything but building the packages so we find configuration
errors before building linux-signed.
2016-06-10 02:54:44 +01:00
Ben Hutchings 2622600fec [armel,armhf,sh4] linux-image: Do not suggest fdutils
BLK_DEV_FD has *never* been enabled on any of these architectures!
The old arm/footbridge configuration did enable it and this suggestion
seems to be have been thoughtlessly copied over to these other
architectures.
2016-06-09 17:44:47 +01:00
Ben Hutchings 1537ff1314 Update to 4.6.2 2016-06-09 17:44:47 +01:00
Ben Hutchings fb5d796272 Move merge_packages function from debian/bin/gencontrol.py to gencontrol module
linux-signed will use this function in future.
2016-06-08 23:24:07 +01:00
Ben Hutchings 5cdbf6167d bug script: Put binary package name and version in the info file so linux-signed can easily replace them 2016-06-07 19:40:17 +01:00
Ben Hutchings fb04cb5ff1 Prepare to release linux (4.6.1-1). 2016-06-06 18:13:57 +01:00
Ben Hutchings 16ef878aea Set ABI to 1 and version to 4.6.1-1 2016-06-06 18:13:54 +01:00
Ben Hutchings cab1f743c8 Disable MODULE_SIG for architectures not supported by linux-signed 2016-06-06 18:12:47 +01:00
Ben Hutchings 3df161c94f linux-image: Use linux-check-removal command in prerm; remove debconf templates
This removes most of the remaining complexity from the script.
2016-06-06 17:21:34 +01:00
Ben Hutchings c739973adc debian/control: Update policy version to 3.9.8; no changes required 2016-06-05 23:32:11 +01:00
Ben Hutchings 7d4efba38e linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
linux-kernel-headers was removed from unstable in 2007, so presumably
was last released in etch.

libkxl0-dev still depends on it, so don't remove the Provides yet.
2016-06-05 23:21:01 +01:00
Ben Hutchings f12b93bb75 debian/control: Drop obsolete versioned Depends and Breaks
The versions in stable are new enough to satisfy these.
2016-06-05 23:17:23 +01:00
Ben Hutchings cb9d6a9756 [rt] Update to 4.6.1-rt3 2016-06-05 19:23:39 +01:00
Ben Hutchings 27d73ecf49 debian/patches/features/all/rt/genpatch.py: Use stable URLs in patch Origin headers
Previously each tarball would be uploaded to .../rt/<upstream-version>/
and then later moved to .../rt/<upstream-version>/older/.  Now they are
appearing in .../older/ immediately so we can construct stable URLs
under there.
2016-06-05 18:33:18 +01:00
Ben Hutchings 964980804a debian/patches/features/all/rt/genpatch.py: Use upstream tarball directly 2016-06-05 18:33:11 +01:00
Ben Hutchings 07db14c867 debian/patches/features/all/rt/genpatch.py: Fix mapping of -rt version to upstream version
Specifically, allow for a -rcN suffix on the upstream version.
2016-06-05 18:31:38 +01:00
Ben Hutchings 0724abc432 debian/patches/features/all/rt/genpatch.py: Use Python 3 2016-06-05 17:41:39 +01:00
Ben Hutchings 4e2a281abe Update to 4.6.1 2016-06-05 14:30:35 +01:00
Ben Hutchings 7569482f9b Merge branch 'sid' 2016-06-05 14:16:31 +01:00
Ben Hutchings 8ed7991db8 linux-image: Make a newly installed kernel the default if the package was previously removed
Currently the postinst script distinguishes installation vs upgrade by
checking whether its second argument is empty.  However, it will only
be empty if the package was *never* installed before, or was purged.
If the package has been installed, then removed, and is now being
installed again, it's seen as an upgrade.

Unfortunately dpkg only tells the preinst script whether or not this
is an upgrade.  So create a flag file there, consume it in postinst
and remove it in postrm.
2016-06-05 02:11:45 +01:00
Ben Hutchings 586edb84cd linux-image: postrm: Update default symlinks before running hook scripts
Currently the default symlinks may be broken when we run hook scripts,
causing removal to fail if a hook (e.g. lilo) relies on them.
2016-06-05 02:11:44 +01:00
Ben Hutchings e4657e0ec4 linux-image: Rewrite maintainer scripts in shell
Use the new linux-update-symlinks command for symlink updates.
Drop support for minimal_swap, no_symlinks, use_hard_links and *_hook
parameters in /etc/kernel-img.conf.

Thanks to Aurelien Jarno and Santiago Vila for pointing out the
ischroot command and that it's in an essential package (i.e. doesn't
add a dependency).
2016-06-05 02:11:44 +01:00
Ben Hutchings c631f1f543 [mips*r6*] Disable these architectures until dak recognises them as valid in the control file 2016-06-04 18:33:37 +01:00
Ben Hutchings a8fb2b9fbe mtd: Disable slram and phram when securelevel is enabled 2016-06-03 01:15:37 +01:00
Ben Hutchings a2480e25d8 Prepare to release linux (4.6-1~exp2). 2016-05-30 04:44:45 +01:00
Ben Hutchings 6976b08b12 Release linux (4.5.5-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV0te3Oe/yOyVhhEJAQodqBAAjpkEuBm2kSlQD1y8qeb/+1+CxJPcqIH1
 DHTyMpFHQvX5VT+vCX83WhiWncMz85z7f0wcElpNaZ/3ExOQzbmrIwsucgXRXVUS
 txKxHaQQv8uU1m8dgxqjOWP80+IT71H9rBcitfrRqyzLiEhC1mPOfvxjtGTOJWw+
 Lohie5WPMMsfrahQGw4srPMcpVRwVKuX5N+azgk6rg8VA7rxyxQaMZRg3rr+N7Aw
 btwVC5vyL8K5Be0LnveR/PdOosaUU6XzyT7kNT0fLSO9H4bWenielHaduSDI5iU4
 WcPRhymrHv0dBDvbyw8vkJMDd+/1x9gWk4/DHFQNw1miaUx87N+vKyC4rZ7Lqc2d
 4n/hpq3HjPBZqC07Q0mddeTy7OoN4obYSXTipIu9rWBsTJtcxxwSUVg86+xo03Zg
 bb0VoEudp9JZGBMLS8PjBJ66d+/p7Q47YnKV7ZwNKyLwRq4AMo65L7PeUJflNHvj
 UmJrOG/6AJ6bi+eXrWDbwAA8mrwdPPKu+QzBSQ9c6hm4CFmgkgWTH/oA2iPsp7AX
 iqcPgKp6XA8YLXpiDeCqvMV5cSkGD67cpIcgTB0CrH7KILXD61cP8QEl7eaWiBMW
 MW9IPDeEBEmEN3ST2tg1H7udEzzpEZXHg4NZ5gOZ7lMZphbILrapJYuUf3PDdZKL
 Ccz9YH5eSuE=
 =gSlx
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.5.5-1'
2016-05-29 22:33:26 +01:00
Ben Hutchings f122b3358b Prepare to release linux (4.5.5-1). 2016-05-29 22:21:11 +01:00
Ben Hutchings 1edaa5dd82 Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
This was reverted upstream in 4.5.5 due to a regression but we have a fix for
the regression (probably).
2016-05-29 22:20:52 +01:00
Ben Hutchings 46e3b9492a dwc3-exynos: Fix deferred probing storm
Closes: #823552; thanks to Steinar H. Gunderson
2016-05-29 22:05:54 +01:00
Ben Hutchings 676db12dca Put architecture names in brackets in Roger's list of changes 2016-05-29 21:29:11 +01:00
Ben Hutchings 08942bb065 Add upstream fixes for various information leaks 2016-05-29 21:25:44 +01:00
Ben Hutchings 97c01265fe [s390] udeb: Drop all packages, since s390 no longer has its own kernel 2016-05-29 14:50:24 +01:00
Ben Hutchings 5478b6afe5 [mipsn32{,r6}{,el}] Note that we build tools packages for these architectures 2016-05-29 14:46:02 +01:00
Roger Shimizu 59fd45aa71 Change MFD_MAX77686 and RTC_DRV_MAX77686 from module to built-in
So far all RTC drivers enabled are built-in
2016-05-29 17:48:01 +09:00
Roger Shimizu 2cbff33b34 For Odroid-U3 support, add bug closure and re-order the module appended 2016-05-29 14:16:04 +09:00
Roger Shimizu 054bd88a7e armhf: Enable SENSORS_PWM_FAN / PWM_SAMSUNG as module
Recommended by Steinar H. Gunderson.
(Closes: #824941)
2016-05-29 13:40:29 +09:00
Ben Hutchings 0d36d6c16e Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-05-27 14:44:45 +01:00
Ben Hutchings 9f4d29bb04 linux-image: prerm: Ignore version of running kernel inside a container or chroot 2016-05-27 11:54:02 +01:00
Ben Hutchings 49b5fbab50 linux-image: prerm: Allow removal of running kernel if we can't ask debconf questions
Closes: #825423
2016-05-27 11:54:02 +01:00
Ben Hutchings b621344bd9 linux-image: Add workaround for bug #817083 in debconf 2016-05-27 11:54:02 +01:00
Ben Hutchings 30ae9b2024 linux-image: Stop setting $STEM in environment for maintainer script hooks
This seems to have been a transitional feature for the switch
from kernel-image to linux-image.  mkvmlinuz still uses it but
no hook scripts appear to depend on it.
2016-05-27 11:54:02 +01:00
Ben Hutchings ace08191f9 [rt] Override SYSTEM_TRUSTED_KEYS to work from the source_rt directory 2016-05-27 11:54:01 +01:00
Martin Michlmayr 435a974818 [armhf] Enable more NVIDIA Tegra options 2016-05-26 19:49:44 -07:00
Aurelien Jarno e3c5586a6b Also switch mips64 to R2 2016-05-24 19:09:53 +02:00
Ben Hutchings adc4395a1e [mips*/*-malta] udeb: Add ata-modules package 2016-05-24 14:21:52 +01:00
Salvatore Bonaccorso 2a7ca94d22 Add CVE reference for CVE-2016-4580 fix 2016-05-24 08:11:03 +02:00
Ben Hutchings e8cbc41731 [mips{,64}r6{,el}] Add kernel flavours for the Malta platform; build linux-libc-dev and tools packages
Closes: #825024; thanks to YunQiang Su
2016-05-23 23:03:41 +01:00
Ben Hutchings e41dc6a9cb 8139too: Use same configuration on all architectures
Enable 8139TOO_TUNE_TWISTER, 8139TOO_8129 and disable 8139TOO_PIO.
2016-05-23 21:43:19 +01:00
Ben Hutchings 6468e3b19a [mips*] Change NFS and various storage and network drivers from built-in to modules 2016-05-23 21:42:54 +01:00
Ben Hutchings 5bec7a0097 [x86] kvm:vmx: more complete state update on APICv on/off (CVE-2016-4440) 2016-05-23 02:35:36 +01:00
Ben Hutchings 327c921aa7 Update to 4.5.5
Drop changes that were applied upstream.

Fix/ignore ABI changes.
2016-05-23 02:34:41 +01:00
Ben Hutchings b88823f96b Revert "stmmac: Fix 'eth0: No PHY found' regression" (Closes: #823493) 2016-05-23 00:59:46 +01:00
Ben Hutchings 3cbe9e18c1 aufs: Update support patches to aufs4.5-20160523
- mmap: Fix use-after-free in remap_file_pages(2)
2016-05-23 00:47:15 +01:00
Ben Hutchings e42a61b7e0 aufs: Update support patches to aufs4.6-20160523
- mmap: Fix use-after-free in remap_file_pages(2)
2016-05-23 00:45:08 +01:00
Salvatore Bonaccorso 342ba3d57d tipc: check nl sock before parsing nested attributes (CVE-2016-4951) 2016-05-21 16:53:08 +02:00
Aurelien Jarno 550ea78195 [mips] Set CPU to MIPS32/64 R2. 2016-05-20 22:47:26 +02:00
Aurelien Jarno 9a3028f2d4 [mips64el] Set CPU to MIPS64 R2. 2016-05-19 23:59:47 +02:00
Ben Hutchings 4bd293fc1d debian/README.source: Rewrite and expand explanation of kernel config file construction 2016-05-18 04:34:27 +01:00
Ben Hutchings 7275f364d9 Fold debian/config/README into debian/README.source 2016-05-18 03:59:34 +01:00
Ben Hutchings 871f1c46dc [rt] Update to 4.6-rc7-rt1 and re-enable 2016-05-17 23:47:48 +01:00
Ben Hutchings fcb3296dc1 [tilegx] linux-libc-dev: Install <arch/*> headers in arch-specific directory
Closes: #823632; thanks to Helmut Grohne
2016-05-17 23:47:17 +01:00
Ben Hutchings 876e9c24a6 [tilegx] Build a linux-libc-dev package (Closes: #824524; thanks to Helmut Grohne) 2016-05-17 23:41:58 +01:00
Ben Hutchings 817759669d Prepare to release linux (4.6-1~exp1). 2016-05-17 02:39:47 +01:00
Ben Hutchings e0d8be480a [armhf] dsa: Enable NET_DSA_MV88E6123 as module, replacing NET_DSA_MV88E6123_61_65
The driver and kconfig symbol were renamed in 4.6.
2016-05-17 01:58:25 +01:00
Ben Hutchings 135b1b0d39 [arm64] Enable RANDOMIZE_BASE (kASLR) 2016-05-17 01:56:43 +01:00
Ben Hutchings 5ba72559a1 Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
This was reverted upstream in 4.6 due to a regression but we have a fix for
the regression (probably).
2016-05-16 20:06:26 +01:00
Ben Hutchings eaafcf8a39 Release linux (4.5.4-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVzoWxue/yOyVhhEJAQrD5RAAnOQWbgH3JJ/48u366vvlvebkKdfgdUQw
 wyj+rfxCxWbb2i8iGh+gk4aN9FlNfmzUlPgA2esXJiCpjmZ+Ffj0aF8k7W4HkGPw
 /dX2tuBEj7NKQ6TLY1BK9rzs8DQKMRw7lQ7r+uLlt0o8MjKMJg0FaA1UteC09trB
 AXcSZdIeAtyPaMk1mBk3qcNsDMTIb/K3zk03sGy8HKwWgJJmHbcTm4/XWEzOOZUd
 HYInRPiK724qMoIG+BkI+oigvaXEvuxHKMfKWdryKHsIyvAu4l/1myeBk/xy65Cv
 /ga+NQQHJt8mfiWfleljKU9DC4wN/SQ5Nr9wzFC512TQfFVmu47BlIQPQWZ1oHjP
 FQom301HEFTKqZRTIqOU6IQ+TPSSHWPPvD8jmmRFXycasvDkP0t2RNuM3gbhwU3b
 9hui/YUlbzQUJOgWRitnRMk1jXtHLkQm8vRf7AIVXxT5+6u4EiZUvk6gNjg3Jz6h
 dHkkrgCWzZgYIdAvqa8OF2j2ejSQUcBW3yxpSnw0T9YOxo4IiF+Il/dxwSDSX5BI
 tBoNyzNH62yMOjGSQXcYOdr64KE1mjXpST+x1tRdU+n74ifP2CtA57o93WB6Gn5z
 wVAuVeGmEAbIl7EcHl5r6ZC58da5syTl0BZEbH9YM54eLlM+qyLOwM0vWAztuIa5
 ciXotUkDZrM=
 =oSkt
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.5.4-1'
2016-05-16 20:00:43 +01:00
Ben Hutchings 0c5a10d4c1 Update to 4.6
Rebase patch series.
2016-05-16 19:49:24 +01:00
Ben Hutchings 5f0787708a Prepare to release linux (4.5.4-1). 2016-05-16 19:17:22 +01:00
Ben Hutchings 4665b0730f [armhf] Enable Exynos video drivers (Closes: #824435)
- drm: Enable DRM_EXYNOS as module, DRM_EXYNOS_MIXER, DRM_EXYNOS_FIMD,
  DRM_EXYNOS_DSI, DRM_EXYNOS_DP, DRM_EXYNOS_HDMI
- phy: Enable PHY_EXYNOS_MIPI_VIDEO, PHY_EXYNOS_DP_VIDEO as modules
- cpuidle: Enable ARM_EXYNOS_CPUIDLE
- iio: Enable EXYNOS_ADC as module
2016-05-16 19:13:58 +01:00
Salvatore Bonaccorso be1c8b16ab KVM: MTRR: remove MSR 0x2f8 (CVE-2016-3713) 2016-05-16 13:47:07 +02:00
Ben Hutchings 48902f4f1a videobuf2-core: Fix crash after fixing CVE-2016-4568 2016-05-16 03:33:38 +01:00
Ben Hutchings 3eae053b85 uapi glibc compat: fix compile errors when glibc net/if.h included before linux/if.h
Closes: #822393
2016-05-16 03:23:55 +01:00
Ben Hutchings efbab1e4bf Add various upstream fixes with known or probable security impact 2016-05-16 03:23:35 +01:00
Salvatore Bonaccorso 878c650ebf Revert "Add CVE reference for CVE-2016-4805"
This reverts commit 066544159a.

We do not update debian/changelog entries for already released versions.
Tracked via kernel-sec and security-tracker.
2016-05-15 21:58:43 +02:00
Salvatore Bonaccorso 88ec3673ad net: fix infoleak in llc (CVE-2016-4485) 2016-05-15 20:04:29 +02:00
Salvatore Bonaccorso 066544159a Add CVE reference for CVE-2016-4805 2016-05-15 18:44:34 +02:00
Ben Hutchings 64ecb1331b Add/correct architecture prefixes to changelog for 4.5.4
Also delete mention of clk-meson, which we don't build at all.
2016-05-15 03:29:08 +01:00
Ben Hutchings 00d06a9006 Word-wrap changelog for 4.5.4 2016-05-15 03:22:33 +01:00
Ben Hutchings a126067de6 debian/control: Remove alternate build-dependency on binutils-dev
This was used for backports from to wheezy, but we don't backport from
stretch/sid to wheezy.
2016-05-15 03:11:42 +01:00
Ben Hutchings 59b5fabac6 debian/control,debian/rules,debian/rules.d: Support the 'nodoc' build profile 2016-05-15 03:11:42 +01:00
Ben Hutchings 43640872d9 debian/control,debian/rules: Support a 'pkg.linux.notools' build profile
...which does not build tools packages
2016-05-14 20:46:46 +01:00
Ben Hutchings f865a890fd debian/control: Exclude tools from 'stage1' build profile 2016-05-14 20:06:34 +01:00
Yves-Alexis Perez 0dd643da08 fix tools disabling in arch-specific rules
(cherry picked from commit 3aa2269f2b3162772d052154d8bed726ff18df1e)

[bwh: Note this in debian/changelog.  Neaten vertical spacing.]
2016-05-14 19:07:15 +01:00
Salvatore Bonaccorso de9a44e36f KEYS: Fix ASN.1 indefinite length object parsing (CVE-2016-0758) 2016-05-14 05:18:04 +02:00
Aurelien Jarno 5bd961d21f Add bug number 2016-05-13 19:27:17 +02:00
Aurelien Jarno 3ec9fea9ef [mipsel/octeon] Activate flavour on mipsel. 2016-05-13 18:58:54 +02:00
Aurelien Jarno 4a8b374466 [mips*/octeon] Add support for byte swapped initramfs to handle u-boot and kernel running with a different endianness. 2016-05-13 18:54:45 +02:00
Ben Hutchings 594eaf7125 Add bug closure for new netfilter modules 2016-05-13 12:14:39 +01:00
Roger Shimizu 1f6b038c6f netfilter: Enable NF_DUP_NETDEV / NFT_DUP_NETDEV / NFT_FWD_NETDEV as module
Recommended by Arturo Borrero Gonzalez.
2016-05-13 19:26:17 +09:00
Aurelien Jarno 1275559aac [arm,x86] Fix memory corruption in KVM with THP enabled. 2016-05-12 23:52:30 +02:00
Salvatore Bonaccorso 99cf691f48 Improve changelog for stable update 4.5.4 2016-05-12 22:28:05 +02:00
Salvatore Bonaccorso 09efe199c6 Add CVE-2016-4581 to changelog entry 2016-05-12 21:23:34 +02:00
Salvatore Bonaccorso 2c6d72a09e Update to 4.5.4 2016-05-12 21:22:09 +02:00
Aurelien Jarno 102221d3f4 [i386] Stop recommending libc6-i686. 2016-05-12 14:34:03 +02:00
Aurelien Jarno b101f08c76 [mips*] Fix PR_SET_FPMODE issues with multi-threaded programs. 2016-05-11 00:17:22 +02:00
Ben Hutchings ac864cd6a7 Prepare to release linux (4.6~rc7-1~exp1). 2016-05-09 03:39:32 +01:00