Salvatore Bonaccorso
5efdda62b4
kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (CVE-2016-9588)
2017-01-01 09:15:13 +01:00
Salvatore Bonaccorso
e7ccf65ec6
sg_write()/bsg_write() is not fit to be called under KERNEL_DS (CVE-2016-10088)
2016-12-31 20:21:43 +01:00
Ben Hutchings
0aaf8482c2
[x86] Enable LEDS_DELL_NETBOOKS and DELL_SMBIOS as modules
...
This also re-enables DELL_LAPTOP and DELL_WMI as modules.
Closes : #849674
2016-12-29 20:03:59 +00:00
Ben Hutchings
571716aee9
debian/control: Change build-dependency on asciidoc to prefer the new asciidoc-base
...
asciidoc can use LaTeX stuff but previously only Recommended it.
Now asciidoc Depends on it while asciidoc-base can do everything
we need.
2016-12-27 10:26:41 +00:00
Ben Hutchings
b825aa9932
[x86] Enable INTEL_VBTN as module ( Closes : #848967 )
2016-12-27 09:06:29 +00:00
Uwe Kleine-König
61b71464b3
[rt] Update to 4.9-rt1 and reenable
2016-12-23 21:25:24 +01:00
Uwe Kleine-König
f1a1bb5986
[rt] remove unused patches
2016-12-23 21:04:39 +01:00
Uwe Kleine-König
b9aaa1abc5
enable `perf data' support
2016-12-21 09:53:24 +01:00
Ben Hutchings
344453b7f7
Release linux (4.8.15-1).
...
-----BEGIN PGP SIGNATURE-----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=i7IG
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.15-1'
Drop ABI reference files.
2016-12-20 03:58:23 +00:00
Salvatore Bonaccorso
2abddc2aa9
Prepare to release linux (4.8.15-1).
2016-12-19 12:35:29 +01:00
Salvatore Bonaccorso
09027445ba
Fix another mistake in original commit, set Origin propriately
...
Gbp-Dch: Ignore
2016-12-19 09:16:12 +01:00
Salvatore Bonaccorso
46f0821f70
Fix Signed-off-by line for docs-sphinx-extensions-make-rstFlatTable-work-with-d.patch
...
Gbp-Dch: Ignore
2016-12-19 09:14:36 +01:00
Salvatore Bonaccorso
36b7372766
docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
...
Thanks: Dmitry Shachnev <mitya57@debian.org>
Closes : #848349
2016-12-19 08:30:20 +01:00
Ben Hutchings
c77a0899a0
Add link to kernelnewbies summary of 4.9
2016-12-18 19:19:10 +00:00
Ben Hutchings
095cd6c9bc
Correct version in open changelog entry
2016-12-18 19:18:07 +00:00
Ben Hutchings
5fe84e9440
Set ABI to trunk
2016-12-18 19:17:28 +00:00
Uwe Kleine-Koenig
a9f6833ed4
Update to 4.9
2016-12-18 18:00:28 +01:00
Ben Hutchings
be4cc8383e
debian/changelog: Add bug closure for reverting vsyscall change
2016-12-18 02:58:42 +00:00
Ben Hutchings
62be722622
debian/rules: Tighten binNMU version matching, consistent with linux-latest
2016-12-18 02:49:52 +00:00
Ben Hutchings
6b6dd902ca
debian/rules: Use dpkg-parsechangelog -S option to select fields
2016-12-18 02:26:21 +00:00
Salvatore Bonaccorso
e0ceefaa07
Ignore ABI changes in libnvdimm
2016-12-16 11:25:36 +01:00
Salvatore Bonaccorso
8e3469b562
Update to 4.8.15
2016-12-16 11:02:32 +01:00
Ben Hutchings
9768234db4
debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign
2016-12-15 20:27:38 +00:00
Ben Hutchings
9bf892f446
debian/rules.real: Exclude *.pyc from featureset diffs
...
Since jessie's diff returns 2 when it finds a binary (#737180 ) we need
to do this to avoid FTBFS in jessie-backports. Besides which, those
aren't part of the source.
(cherry picked from commit 62cce57936757e7492b082b2845e04be00cda5d2)
2016-12-14 23:05:22 +00:00
Salvatore Bonaccorso
966cf13de0
netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755)
2016-12-14 17:12:59 +01:00
Salvatore Bonaccorso
7a3d9312d0
[rt] Update to 4.8.14-rt9
2016-12-12 20:55:55 +01:00
Salvatore Bonaccorso
14a852ee64
Update to 4.8.14
2016-12-12 20:28:07 +01:00
Roger Shimizu
9382fc4d92
[armel] Update uri of "Origin:" in one patch, which is in v4.9 now
2016-12-12 07:57:20 +09:00
Ben Hutchings
c7f834c8dc
Revert "Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs"
...
This reverts commit a462c39f5d
. mozjs24
got 'fixed' in an ABI-compatible way that had to be reverted, so it's
still broken. Same for mozjs, though it hasn't been reverted yet.
Also, Breaks relations against source package names would not have
been very effective.
2016-12-11 02:15:44 +00:00
Salvatore Bonaccorso
e1625e4a92
[rt] Update to 4.8.11-rt7
2016-12-10 13:13:52 +01:00
Salvatore Bonaccorso
03b836246e
Update to 4.8.13
2016-12-10 13:10:07 +01:00
Salvatore Bonaccorso
93304bd632
net: handle no dst on skb in icmp6_send (CVE-2016-9919)
2016-12-10 07:42:41 +01:00
Salvatore Bonaccorso
d2f4158d99
Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576)
2016-12-10 07:35:50 +01:00
Salvatore Bonaccorso
56659f5080
net: ping: check minimum size on ICMP header length (CVE-2016-8399)
2016-12-10 07:29:51 +01:00
Salvatore Bonaccorso
9b4f84faec
Ignore ABI changes in KVM
2016-12-09 23:05:09 +01:00
Ben Hutchings
33f253b15d
[amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
...
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
Ben Hutchings
37912077cd
Add previous change to debian/changelog
2016-12-09 12:12:16 +00:00
Ben Hutchings
a462c39f5d
Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs
...
mozjs assumed VAs would never be wider than 47 bits. Add versioned
Breaks to force upgrades of those packages.
(luajit has the same problem but only the experimental version
supports arm64. I assume this will be fixed before it goes into
unstable, so we don't need it in Breaks.)
2016-12-09 12:07:18 +00:00
Salvatore Bonaccorso
3a2602da33
Add ABI reference for 4.8.0-2
2016-12-09 06:22:56 +01:00
Ben Hutchings
9287597ec2
debian/patches/features/all/rt/genpatch.py: Catch more specific exception class
...
Now that we use Python 3, we can simply catch FileNotFoundError
instead of checking the IOError error code.
2016-12-08 19:26:46 +00:00
Ben Hutchings
465cba954c
debian/patches/features/all/rt/genpatch.py: Fix support for git repositories
...
- Wrap UTF-8 decoder around pipe from git, since pipes produce bytes in
Python 3
- Correct condition on number of arguments
2016-12-08 19:23:50 +00:00
Salvatore Bonaccorso
be8be2cb5f
net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
2016-12-08 19:28:56 +01:00
Salvatore Bonaccorso
3b66b4fcef
packet: fix race condition in packet_set_ring (CVE-2016-8655)
2016-12-07 10:34:33 +01:00
Salvatore Bonaccorso
27fc4207c6
tipc: check minimum bearer MTU (CVE-2016-8632)
2016-12-07 10:31:56 +01:00
Salvatore Bonaccorso
59ebe22f2f
Update to 4.8.12
2016-12-06 21:19:22 +01:00
Roger Shimizu
8f06e2bdc6
[armel] dts: marvell: fix number of sata port for linkstation ls-gl
...
Closes : #845611
2016-12-06 08:38:19 +09:00
Ben Hutchings
24fc851133
Prepare to release linux (4.9~rc8-1~exp1).
2016-12-05 05:02:30 +00:00
Ben Hutchings
41004b49b6
[sparc64] Don't re-add exports of string functions that are now only defined as macros
...
Together with fixes to DMA address types in 4.9-rc8, this should fix
the previous FTBFS.
2016-12-05 01:45:33 +00:00
Ben Hutchings
251382a142
[arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS)
2016-12-05 01:45:33 +00:00
Ben Hutchings
b3906798a8
Revert "default exported asm symbols to zero"
2016-12-05 01:07:36 +00:00
Ben Hutchings
1c1ab88dbe
Update to 4.9-rc8
2016-12-05 01:02:03 +00:00
Ben Hutchings
cb8d2ff783
debian/control: Fix build-dependency on flex to work with new versions that have M-A: allowed
2016-12-05 00:59:45 +00:00
Uwe Kleine-König
086dccbdfe
[armhf] dts: armada-385: add support for Turris Omnia
2016-12-04 21:18:15 +01:00
Ben Hutchings
aa27137298
[amd64] Remove xen-linux-system-<version> package
...
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
Ben Hutchings
7e80c27706
radeon: Update package name in error message for missing firmware
2016-12-03 03:30:15 +00:00
Ben Hutchings
8b6cd20174
Prepare to release linux (4.9~rc7-1~exp1).
2016-12-03 01:46:12 +00:00
Ben Hutchings
34594185e1
Drop "default exported asm symbols to zero"
...
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
Ben Hutchings
2431e89ed3
Update fixes for exported symbol versions
...
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching. Apply his match but then revert the weakening.
Also add a proposed fix for missing version CRCs, which gives them a
default value of zero. Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
Ben Hutchings
8789780466
Release linux (4.8.11-1).
...
-----BEGIN PGP SIGNATURE-----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=itOd
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.11-1'
Ignore ABI bump.
Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
Salvatore Bonaccorso
489dc40883
Prepare to release linux (4.8.11-1).
2016-12-02 06:35:22 +01:00
Ben Hutchings
ab01013e14
[powerpc*] Fix more exported symbol versions
2016-12-02 02:49:08 +00:00
Ben Hutchings
2661eeaf78
debian/bin/buildcheck.py: Add check for symbols with version CRC of 0
2016-12-02 02:49:08 +00:00
Ben Hutchings
aca57cd0d7
Fix patch header for "x86/kbuild: enable modversions for symbols exported from asm"
2016-12-02 02:49:08 +00:00
Ben Hutchings
aa461be2cb
Add patch reverting s390 asm symbol export changes, missed from previous commit
2016-12-02 02:49:08 +00:00
Ben Hutchings
54d0756a33
Fix exported symbol versions
...
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"
This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
Ben Hutchings
67d96bc121
Update to 4.9-rc7
...
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
Ben Hutchings
eeb496a241
linux-headers-common: Make these packages architecture-independent
...
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
Ben Hutchings
48f370b3c2
debian_linux.gencontrol: Add support for arch-indep per-featureset packages
2016-12-01 19:49:59 +00:00
Salvatore Bonaccorso
ceb75c4337
mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213)
2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso
b67bd212fa
vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084)
2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso
609f818472
mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
2016-11-30 09:04:11 +01:00
Martin Michlmayr
1a0657ea1a
[arm64] Enable ARCH_MVEBU and related options
...
Enable ARCH_MVEBU for 64-bit ARM. While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
Martin Michlmayr
04624dfa7e
[arm64] Enable more QCOM options
...
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
Salvatore Bonaccorso
f82ecfdc9e
Update to 4.8.11
2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso
3536d5d7a6
Update to 4.8.10
2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso
a559c41683
Update to 4.8.9
2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso
b69731a96b
Add CVE reference for CVE-2016-9555
2016-11-23 06:21:23 +01:00
Ben Hutchings
fa9e148da4
Update to 4.9-rc6
2016-11-21 23:52:49 +00:00
Uwe Kleine-König
0971da3b71
[armhf,armel] fix CRC generation for modules
2016-11-19 17:06:08 +01:00
Ben Hutchings
85deb5386a
[x86] video: Disable X86_SYSFB, FB_SIMPLE ( Closes : #822575 )
2016-11-16 21:35:16 +00:00
Ben Hutchings
2d21aaf508
[arm64] Enable more drivers for X-Gene (Really closes : #840061 )
2016-11-16 21:22:18 +00:00
Ben Hutchings
96f3d8b5c3
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" ( Closes : #844491 )
2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso
b7117071e0
fs: Avoid premature clearing of capabilities (CVE-2015-1350)
...
Closes : #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso
b048cc5a7c
fs: Give dentry to inode_change_ok() instead of inode
2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso
2e74b80287
fuse: Propagate dentry down to inode_change_ok()
2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso
055cd5a2d1
ceph: Propagate dentry down to inode_change_ok()
2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso
2683f37d06
xfs: Propagate dentry down to inode_change_ok()
2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso
b7d167eabc
Fix changelog entry for removal of ABI reference
...
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso
17805e05b4
Bump ABI to 2 and remove ABI reference for 4.8.0-2
2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso
26676cdca0
Update to 4.8.8
2016-11-15 22:32:40 +01:00
Ben Hutchings
6c0c9bcf78
Prepare to release linux (4.9~rc5-1~exp1).
2016-11-14 05:19:31 +00:00
Ben Hutchings
4764f3dc4e
w1: Disable W1_MASTER_MATROX
2016-11-13 23:27:39 +00:00
Ben Hutchings
abd19bbc53
Release linux (4.8.7-1).
...
-----BEGIN PGP SIGNATURE-----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=uDst
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.7-1'
Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings
9ab8cb710b
[x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y
2016-11-13 21:00:47 +00:00
Ben Hutchings
b15e0cf459
Update to 4.9-rc5
2016-11-13 20:35:21 +00:00
Ben Hutchings
993ab494e5
[amd64] Explicitly enable VMAP_STACK
2016-11-13 20:04:32 +00:00
Ben Hutchings
343333fea3
Prepare to release linux (4.8.7-1).
2016-11-13 04:38:09 +00:00
Ben Hutchings
772d6648d5
debian/control: Build-Depend on a recent debhelper instead of dh-systemd
2016-11-13 04:38:06 +00:00
Ben Hutchings
15da3c4884
[arm64] Enable more drivers for X-Gene ( Closes : #840061 )
2016-11-13 04:28:46 +00:00
Ben Hutchings
f8420f98bc
Delete some garbage from the upstream shortlog for 4.8.7
2016-11-13 04:01:19 +00:00