Commit Graph

7240 Commits

Author SHA1 Message Date
Ben Hutchings 8cf3230524 dccp: Disable auto-loading as mitigation against local exploits 2017-02-16 19:11:26 +00:00
Ben Hutchings 10f2dad569 Update to 4.9.10 2017-02-16 19:06:43 +00:00
Salvatore Bonaccorso 452d9f1e7d Add CVE-2017-6001 CVE id to changelog for 4.9.9-1 2017-02-16 05:14:56 +01:00
Salvatore Bonaccorso 58fbff3df5 sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986) 2017-02-15 11:54:59 +01:00
Salvatore Bonaccorso 9e381d5c13 ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970) 2017-02-15 11:50:22 +01:00
Salvatore Bonaccorso 4e5e705c5f selinux: fix off-by-one in setprocattr (CVE-2017-2618) 2017-02-15 11:44:55 +01:00
Salvatore Bonaccorso 4a1042f1a0 IB/rxe: Fix mem_check_range integer overflow (CVE-2016-8636) 2017-02-15 11:41:25 +01:00
Salvatore Bonaccorso 848ab3cd4d CVE-2016-10208 pending for 4.9.9-1 2017-02-14 20:48:26 +01:00
Ben Hutchings 82f952c50f [rt] Update to 4.9.9-rt6 2017-02-11 14:49:54 +00:00
Ben Hutchings 9ee6dbd395 Update to 4.9.9
Drop revert-patch which is superseded by upstream fix in 4.9.9.

Delete log line for commit that went into 4.9.7 and has now been
reverted.
2017-02-10 00:04:25 +00:00
Roger Shimizu 06c483a015 debian/copyright: Prefer https URL than http for security merit
Also changed bit for debian/README.source
2017-02-10 07:44:04 +09:00
Roger Shimizu 4b402f4b97 [armel] ARM: orion5x: fix Makefile for linkstation-lschl.dtb
Note the patch in changelog and add Origin to the patch
2017-02-09 23:18:25 +09:00
Ben Hutchings fc4d14f63f test-patches: Set default number of jobs to number of available processors
With the current default of 1, most users are going to be kept waiting
unncessarily.
2017-02-08 02:05:30 +00:00
Ben Hutchings bd4315df9c test-patches: Use the pkg.linux.notools build profile
test-patches never builds tools, and this greatly reduces the
build-dependencies.
2017-02-07 23:47:20 +00:00
Ben Hutchings fb27baab98 pegasus: Use heap buffers for all register access (Closes: #852556) 2017-02-07 01:44:24 +00:00
Ben Hutchings abd788f1da cpumask: use nr_cpumask_bits for parsing functions (Closes: #848682) 2017-02-07 01:40:13 +00:00
Ben Hutchings a6f6ce057f [rt] Update to 4.9.6-rt4 2017-02-07 00:55:55 +00:00
Ben Hutchings bfd586db54 aufs: Update support patchset to aufs4.9-20170206 2017-02-07 00:48:26 +00:00
Ben Hutchings 6a7f3d6b71 aufs: Update support patchset to aufs4.x-rcN-20170206 2017-02-07 00:47:34 +00:00
Ben Hutchings 63ef596c74 Update to 4.10-rc7 2017-02-07 00:39:58 +00:00
Ben Hutchings 6dfab36dd8 Update to 4.9.8 2017-02-06 15:59:29 +00:00
Ben Hutchings 7eec246dc0 Update to 4.9.7
Drop patches applied upstream.
2017-02-03 13:51:44 +00:00
Riku Voipio 701bf4b244 Revert efistub changes, Closes: #853170
[benh: Update changelog]
2017-02-03 03:51:48 +00:00
Ben Hutchings 3af020874b Prepare to release linux (4.10~rc6-1~exp2). 2017-02-02 03:44:51 +00:00
Ben Hutchings 6da646ca30 [armel] Adjust configuration to reduce image size (fixes FTBFS) 2017-02-02 03:44:43 +00:00
Ben Hutchings 84e53d21c3 debian/control: Fix compiler build-dependencies for cross-building
gcc cross-compilers *do* now have Multi-Arch: foreign, so we have
to take the :native qualfiication off again.
2017-02-02 02:36:49 +00:00
Ben Hutchings aca7f25415 [ppc64el] Disable IBMEBUS; this bus does not exist on POWER8 systems
In 4.10 its dependencies are changed accordingly.  We might as well
disable it here as well.

Also explicitly disable EHEA, which depends on IBMEBUS, and exclude
ehea from nic-modules.
2017-02-02 00:53:44 +00:00
Ben Hutchings fd8856b5ca [ppc64el] udeb: Exclude ehea from nic-modules
It depends on IBMEBUS which can no longer be enabled on this
architecture as the bus isn't present in POWER8 systems.
2017-02-01 23:54:02 +00:00
Ben Hutchings 1ca7f0fad2 [powerpc*] Fix missing CRC for _mcount 2017-02-01 23:53:37 +00:00
Ben Hutchings 000457eb03 [powerpc*] Revert the initial stack protector support
Fixes build failure on ppc32 (or one reason for it) and boot failure on
ppc64.
2017-02-01 23:51:09 +00:00
Ben Hutchings 9805479fdb [sparc64] topology_64.h: Fix condition for including cpudata.h
This might fix the FTBFS, but as I can't currently do a test build
I'm not sure.
2017-02-01 23:50:15 +00:00
Ben Hutchings cebb2af7dd [s390x] Un-revert upstream change moving exports to assembly sources
s390 now has <asm/asm-prototypes.h>, so exports from asm should have
versions.  It also gained another EXPORT_SYMBOL() in asm that we
didn't revert, leading to FTBFS.
2017-02-01 23:49:39 +00:00
Ben Hutchings 63915af674 Prepare to release linux (4.10~rc6-1~exp1). 2017-01-31 15:33:20 +00:00
Ben Hutchings 3c80d83bb1 linux-doc: Copy source to build directory
This is necessary to avoid creating files in source directory, which
makes the linux-source package unclean (and unreproducible).

Firstly, Python creates bytecode files alongside the module sources.
We can and do exclude those, though.

Secondly, starting with 4.10, Documentation/media/Makefile converts
from dot to SVG and from SVG to PDF in the source directory.  These
can't easily be excluded, as SVG is also used as a source format.
2017-01-31 15:32:40 +00:00
Ben Hutchings 90c2b44bab debian/control: Add build-dependency on graphviz for documentation 2017-01-30 20:31:24 +00:00
Ben Hutchings 20f61fd51d linux-doc: Fix up symlinks to gzipped docs
Some files are moving around under Documentation and being replaced
with symlinks.

gzip -r doesn't even check for symlinks, and fails when they're broken
(which happens if the destination was found first).  So use find and
xargs instead, and deal with the symlinks separately.
2017-01-30 17:53:40 +00:00
Ben Hutchings 8d3d6efcde linux-doc: Update documentation file list for 4.10
REPORTING-BUGS moved to Documentation/admin-guide/reporting-bugs.rst
and doesn't need to be listed separately.

Many of the ReST files in Documentation used to be plain-text and
users may want to continue reading them as such, so don't prune
*.rst.
2017-01-30 17:21:50 +00:00
Roger Shimizu 28002f99bf [armel] ARM: dts: orion5x-linkstation-lschl
- Fix model name
- More consistent naming on linkstation series
2017-01-31 02:11:17 +09:00
Ben Hutchings 9c3f98c0c4 cpupower: Fix compiler options for turbostat on 4.10 2017-01-30 16:28:55 +00:00
Ben Hutchings 6b038a62ac Update to 4.10-rc6 2017-01-30 16:28:55 +00:00
Ben Hutchings b476f54cc9 net: Enable SFC_FALCON as module; SFC_FALCON_MTD 2017-01-30 16:28:55 +00:00
Roger Shimizu 1b9aa796be Note adding GPL/X11 Dual License in changelog 2017-01-30 21:26:52 +09:00
Ben Hutchings 855efa4b7b Merge remote-tracking branch 'alioth/sid' into sid
Bump the changelog version (again) for the unreleased changes.
2017-01-28 22:48:16 +00:00
Ben Hutchings e09f27e767 btree,musb,st_sensors: Ignore ABI changes (fixes FTBFS on armel,armhf) 2017-01-28 16:11:50 +00:00
Ben Hutchings ed41b63580 [arm64] Enable more Meson drivers
As requested in #852132 for 4.10.
2017-01-28 01:40:45 +00:00
Ben Hutchings 6adadc8ec6 Release linux (4.9.6-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAliL3k0ACgkQ57/I7JWG
 EQlmog/8D/DowVsxEjNdiHAewH7HUyqdADkCRkeqsmKgCtZEmvEaYE0RijZzGDhm
 Ge4PxOzhLE/DRxJF2gN8y0hIVOnigje9qYN5OBdgB/FNNKThL6ARwiu2LD6DYcwU
 +Lu6g8iHqsKHZ+NllHEiiwJ4rR39qf3Tkzz5cgm4jEi+5IjnoefOhaFhyPzBkz8i
 p6fWklEhev8+lQ1sW9gF94p3t0dOp/31TWACagRQronrTtT2xAzdrR5ESPTo6FFg
 gtcfqoB7AYA4LTuzoKIQRgGLsgKk73iLPF874ZuK9g/+4Z2lF9NBbwve3O0qYKCy
 NERddjjx9QEf4cjToqAii10AzAfuBFDG/b77ZscREwysUwMhkz47ADefu5v1P2kJ
 XdL/sJ/nXyhItV/VK8ym9lg4jAA8K5UOjn+8RtWBTE8091N7y7kyNHTQ4SppySIZ
 Ow+NsWkMd+WYxkdGPSYc7nHthhVRvfC9C4cxamn9en+MNmakMgJcOZTxS4/gcTvx
 DMCWGmEJrD5Bu3m9GrJzwfaXteWxMYihsq9ofjXeaeYqxgXZ62GuxMeRq3kBOhSw
 H9MUITkqfsjcg7eAz8elFhRvrurlVUWFsSCGr4Fd1Tv9zrFw8OXNRrApy4UQOQ4x
 Uw5AcA/3ZA3QCPsOuU8ENES57vJb+D3E/LZZJdTktVLUcoxA0tA=
 =C8FJ
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.6-2'
2017-01-28 01:19:31 +00:00
Ben Hutchings 21820614f6 Merge remote-tracking branch 'alioth/sid' into sid
Bump the changelog version for the unreleased changes.
2017-01-27 23:58:22 +00:00
Ben Hutchings ceaee3f154 linux-cpupower: Use dh-exec architecture filtering for x86-specific files
Listing usr/sbin in linux-cpupower.install caused FTBFS on !x86 as
cpupower itself doesn't install anything there.  Do the architecture
filtering in the debhelper lists instead of complicating
debian/rules.real further.
2017-01-27 22:10:56 +00:00
Riku Voipio bb91742cb9 [arm64,armhf,x86] usb: gadget: Enable configfs and mot useful legacy functions
If CONFIG_USB_GADGET is selected, enable all configfs functions as
modules and most popular legacy modules (ethernet and serial).
g_nokia left as armhf specific (Nokia N900 tradition)

[benh: Changed subject line]
2017-01-27 21:10:08 +00:00
Ben Hutchings 079c50f68a [arm64] Enable KEXEC (Closes: #852747) 2017-01-27 18:21:33 +00:00
Ben Hutchings 840d5e6afd [or1k] Remove configuration, as the port has been abandoned 2017-01-27 18:20:49 +00:00
Ben Hutchings 79253df3bb Bump ABI to 2 2017-01-27 18:14:37 +00:00
Ben Hutchings 8c4510fb2e Prepare to release linux (4.9.6-1). 2017-01-27 07:44:54 +00:00
Ben Hutchings d24fc81c52 Move CVE-2016-10153 note next to the correct upstream commit subject 2017-01-27 07:43:54 +00:00
Ben Hutchings eb850b980b [arm64] Enable ARCH_THUNDER and many additional drivers requested by Riku Voipio 2017-01-27 06:16:36 +00:00
Ben Hutchings 73363a0bd3 bq27xxx_battery: Ignore ABI change 2017-01-27 06:16:19 +00:00
Ben Hutchings 6f6fc512f3 [arm64] ptrace: Avoid ABI change in 4.9.6 2017-01-27 06:16:18 +00:00
Ben Hutchings e345ccbabe [armhf,arm64] Add security fixes for vc4 driver 2017-01-26 21:27:04 +00:00
Ben Hutchings 810b36a1d3 fbdev: color map copying bounds checking (CVE-2016-8405) 2017-01-26 21:15:56 +00:00
Ben Hutchings 222ff09d3e Note that 4.9.6 includes the fix for CVE-2016-10153 2017-01-26 21:09:34 +00:00
Ben Hutchings b2ae9cd710 libceph: Ignore ABI change in 4.9.6 2017-01-26 21:05:36 +00:00
Ben Hutchings a873a1d79d Update to 4.9.6
Drop patches which are included in it.
2017-01-26 19:24:36 +00:00
Ben Hutchings 74f87b226a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
Closes: #852620

Nothing in the 'stretch' release uses vsyscall (so far as I can see),
so this is now safe to do.
2017-01-25 17:50:39 +00:00
Ben Hutchings b5cdf98158 [rt] genpatch.py: Verify tag and tarball signatures 2017-01-25 04:30:46 +00:00
Ben Hutchings 6dea280bae fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10 2017-01-24 20:49:30 +00:00
Ben Hutchings 601b9e92a1 Update to 4.10-rc5
Drop/refresh patches as appropriate.

[rt] Disable until it is updated for 4.10 or later
2017-01-24 19:26:38 +00:00
Ben Hutchings 7db3a7935f Release linux (4.9.2-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlh3y9sACgkQ57/I7JWG
 EQnjEA//SYhOSNqUHviXtGy8oEEarDM3X4Vh2WlItwM4+E0MHmwqscRA3prE9QBC
 HIBBYf8Ug6p3n4e/rtoW9/ACqGmcvALefTUNjV6g8fED/CoK/EOoBxx3lXAKZIYR
 Bf5OXoMVLSKSmDkKdR2Yxj+w3jVrYg0zUX6QAdkQ9sGNvy3e9nFy1HMzm37MuyR/
 ak3phLSDr0MntJRolb2mcUrUWlt24UC+JlXmlMrEIARTGplY97/yJF7z+1r7IrFb
 2GxWne7uqko5KDVeeG7rdlCobnWOKeNEmqn9P/RCy8ojL/xmcJefCuT8MNNh7Yzr
 6N5XdJLg6mPbV7k6DXrvbIDI4+ti5trA//yFfrggh4KSaAFphTxRrOfExN5Nk46v
 sPEchu08fseG80J3KZYvlFjTbcGgB1jfNYC8E2qtEpvcEnh+QaJBKW+94KD+YoRK
 5MjnpDa4FvTB1WPEPXBM/FQZc3C8i4l0jdv0ApxQNemnJaxgS+xdTZ4jxgNOHnzl
 vIi7UQ9mGb14/hKOWhlAs9wvHobGqgT0OjwabiY8Qa8TV4hGCXECM74kLgZcA2Zk
 njR+Cn5kOw8+eeVCfKCtTon9dxIdtjrL4xfGp9ga3dgwd2h9XvLswaM5lNECBtn4
 dZyDx0Jdi+af10L4G9xe70bQb8KHLKgU0fpazxxvwSQe1OzFmnw=
 =y3x5
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.2-2'

Bump the changelog version for the unreleased change.
2017-01-24 18:26:07 +00:00
Ben Hutchings 5707fdcfe2 Wrap over-long lines in the current changelog entry 2017-01-24 14:27:37 +00:00
Roger Shimizu 7a613e23af nbd: fix 64-bit division 2017-01-24 21:35:14 +09:00
Ben Hutchings 3ed01076a0 [arm64,armhf] video/fbdev: Enable FB_EFI (Closes: #851778) 2017-01-24 05:22:41 +00:00
Ben Hutchings b30786ada7 [arm64] video: Change FB from module to built-in
Currently we don't explicitly set CONFIG_FB for arm64, and the only
reason it's enabled as a module is that the DRM drivers (which are
built as modules) select it.  We *do* explicitly set CONFIG_FB=y on
almost all other architectures and flavours.

Simplify this by setting CONFIG_FB=y at the top level and overriding
where needed (not arm64).
2017-01-24 05:22:28 +00:00
Ben Hutchings a90b078bc7 [x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
Closes: #851916
2017-01-24 04:43:45 +00:00
Ben Hutchings a2704d736e [x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
This also allows enabling SND_SOC_INTEL_BDW_RT5677_MACH without
DW_DMAC_CORE built-in.
2017-01-24 04:43:02 +00:00
Ben Hutchings cf9d2d33be [arm64] dts: meson-gx: Add firmware reserved memory zones
An important bug fix for this newly enabled hardware, requested in #852132.
2017-01-24 04:42:22 +00:00
Ben Hutchings f1d6a10e4d [arm64] Enable ARCH_MESON and related drivers (Closes: #852132) 2017-01-24 04:04:56 +00:00
Ben Hutchings 1b1a09ae42 [x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
Closes: #778249
2017-01-24 03:55:26 +00:00
Ben Hutchings faed0c04c6 linux-image: Increase minimum version of initramfs-tools
This pulls in various fixes wanted for newer kernel versions:

- more HID drivers will be included if MODULES=most
- early microcode is supported
- ehci-orion, ohci-pci will be included if MODULES=most
- virtio-mmio will be included as appropriate
- crc32c will be included if needed for btrfs
- PHY, clk, gpio, pinctrl and regulator drivers will be included as
  appropriate
- the nvme module will be included if MODULES=most

It is also satisfiable in stable.
2017-01-24 03:12:59 +00:00
Salvatore Bonaccorso 3c00650618 ieee802154: atusb: do not use the stack for buffers to make them DMA able (CVE-2017-5548) 2017-01-23 20:59:51 +01:00
Salvatore Bonaccorso c74f7d65fe HID: corsair: fix DMA buffers on stack (CVE-2017-5547) 2017-01-23 20:57:07 +01:00
Ben Hutchings ef0901f1ca Fix/ignore ABI changes in 4.9.3-4.9.5 as appropriate 2017-01-23 15:37:01 +00:00
Roger Shimizu 8e8857bdc8 debian/changelog: Add bug closure of #851928 2017-01-22 10:52:41 +09:00
Salvatore Bonaccorso 4686b122fc Update to 4.9.5 2017-01-21 15:52:44 +01:00
Roger Shimizu e888ec46f1 [mips/octeon] hwmon: Enable SENSORS_ADM1031 as module
Thanks to James Cowgill.

Closes: #851963
2017-01-21 19:36:13 +09:00
Roger Shimizu 6e04c10615 drivers/input: Enable TOUCHSCREEN_GOODIX as module
Closes: #851821
2017-01-21 16:56:44 +09:00
Roger Shimizu 40c7208b1e Merge branch 'master' (only 1 commit) 2017-01-21 16:55:42 +09:00
Salvatore Bonaccorso 8a1cf72b51 Add CVE reference for CVE-2017-5551 2017-01-21 08:18:06 +01:00
Salvatore Bonaccorso f18792b8fa [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583) 2017-01-19 13:13:14 +01:00
Salvatore Bonaccorso 5745d97d88 [x86] KVM: Introduce segmented_write_std (CVE-2017-2584) 2017-01-19 13:09:22 +01:00
Roger Shimizu 6f47d53476 [armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL) 2017-01-19 01:12:36 +09:00
Ben Hutchings c6b1f1b2b1 ath9k: fix NULL pointer dereference (Closes: #851621) 2017-01-17 03:51:38 +00:00
Salvatore Bonaccorso d264d7d524 tmpfs: clear S_ISGID when setting posix ACLs 2017-01-16 09:31:01 +01:00
Salvatore Bonaccorso a126d0bd27 sysctl: Drop reference added by grab_header in proc_sys_readdir (CVE-2016-9191) 2017-01-16 09:26:36 +01:00
Ben Hutchings a7f877c1f1 nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533) 2017-01-16 02:36:18 +00:00
Salvatore Bonaccorso e7895080f2 Update to 4.9.4 2017-01-15 19:45:16 +01:00
Ben Hutchings cfe4a19c0d [armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler support
Closes: #851481

I missed the linux-headers dependency overrides when updating to gcc-6.
2017-01-15 17:23:59 +00:00
Salvatore Bonaccorso 9f6f469d8d Update to 4.9.3 2017-01-15 16:52:40 +01:00
Ben Hutchings 2811d70e3f Prepare to release linux (4.9.2-2). 2017-01-12 15:52:37 +00:00
Ben Hutchings 97dc926bb7 Revert "Remove debug symbol packages from debian/control to work around dak bug"
This reverts commit 99d37f9b16, which
caused most binary uploads to be rejected.  dak's allows upload of
debug symbol packages not listed in the Binary field only if there is
a corresponding binary package without the -dbgsym suffix, which is
not the case on architectures where we use a -unsigned suffix.
2017-01-12 15:44:11 +00:00
Ben Hutchings 39fa6fb0e9 [sparc64] Export memcpy and memset to modules again (fixes FTBFS) 2017-01-12 02:09:42 +00:00
Ben Hutchings 5b0131c972 Prepare to release linux (4.9.2-1). 2017-01-11 04:42:36 +00:00
Ben Hutchings ff396294d0 Set ABI to 1 2017-01-11 04:41:30 +00:00
Ben Hutchings 2ebf1235ed Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
It causes USB_COMMON to be built-in for no good reason.
2017-01-11 04:40:28 +00:00
Ben Hutchings 7a737f217d 8250: Disable SERIAL_8250_LPSS, since it causes DW_DMAC_CORE to be built-in 2017-01-11 04:40:08 +00:00
Ben Hutchings b5bf17149c drm: Enable DRM_LEGACY
This is a new dependency (in 4.9) for DRM drivers that don't include KMS.
2017-01-11 04:15:25 +00:00
Ben Hutchings ddef39bbd1 cxgb4: Enable CHELSIO_T4_FCOE 2017-01-11 04:07:16 +00:00
Ben Hutchings 12fe2ee262 net: Enable MACSEC as module 2017-01-11 04:07:16 +00:00
Ben Hutchings 7d782712b9 target: Enable ISCSI_TARGET_CXGB4 as module 2017-01-11 04:07:16 +00:00
Ben Hutchings b9dec29dfb SCSI: Enable SCSI_SMARTPQI as module 2017-01-11 04:07:16 +00:00
Ben Hutchings 0be187c8a3 net: Enable NET_DEVLINK as module 2017-01-11 04:07:15 +00:00
Ben Hutchings 6e618742b2 rxrpc: Enable AF_RXRPC_IPV6 2017-01-11 02:39:16 +00:00
Ben Hutchings 8af88a5cba hci_uart: Enable BT_HCIUART_MRVL 2017-01-11 02:39:16 +00:00
Ben Hutchings f967694f22 vsock: Enable VSOCKETS, VHOST_VSOCK, VIRTIO_VSOCKETS as modules 2017-01-11 02:39:09 +00:00
Ben Hutchings 0277842acf net/sched: Enable NET_ACT_TUNNEL_KEY, NET_IFE_SKBTCINDEX as modules 2017-01-11 02:23:45 +00:00
Ben Hutchings 84eba65d8d netfilter: Enable NFT_NUMGEN, NFT_QUOTA as modules 2017-01-11 02:10:10 +00:00
Ben Hutchings 6ef612c9c4 Use 'udeb:' prefix for changelog line about nic-modules udeb 2017-01-11 02:08:34 +00:00
Martin Michlmayr aed242158b [arm64] Enable MV_XOR and MV_XOR_V2 2017-01-10 16:50:40 -08:00
Ben Hutchings 13c410d6c1 Update to 4.9.2 2017-01-09 21:06:30 +00:00
John Paul Adrian Glaubitz 1eea5583cd [sh3] Build a linux-libc-dev package (Closes: #850732) 2017-01-09 20:29:41 +00:00
Ben Hutchings d669b4e8e9 Merge branch 'sid' 2017-01-09 20:10:42 +00:00
Ben Hutchings 99d37f9b16 Remove debug symbol packages from debian/control to work around dak bug
Any packages listed in debian/control that are not installed in the
main archive will always be seen as NEW.  This might be fixable by
archive configuration changes, but for now we'll generate them in a
similar way to debhelper.
2017-01-07 21:48:47 +00:00
Ben Hutchings 9747655f89 Make the pickled config (config.defines.dump) reproducible 2017-01-07 18:25:56 +00:00
Ben Hutchings 2c8163e1f1 abiupdate.py: Add support for incoming.ports.debian.org 2017-01-07 18:00:21 +00:00
Ben Hutchings 2ee6bc5ea0 abiupdate.py: Update base URLs
- incoming.debian.org now uses pool layout
- deb.debian.org is a better default than ftp.de.debian.org
- ftp.debian-ports.org redirects to ftp.ports.debian.org, so use the
  latter directly
2017-01-07 17:57:38 +00:00
Ben Hutchings f3ddd1118d abiupdate.py: Use current config instead of downloading previous config
Until we authenticate downloads we should not do this as pickle.load
allows running arbitrary code.
2017-01-07 17:43:24 +00:00
Ben Hutchings 994541dfec Prepare to release linux (4.9.1-1~exp1). 2017-01-07 03:44:26 +00:00
Ben Hutchings 0814db65a8 Update to 4.9.1
Drop two obsolete patches.

"ptrace: being capable wrt a process requires mapped uids/gids"
appears to be obsoleted by upstream commit bfedb589252c "mm: Add
a user_ns owner to mm_struct and fix ptrace permission checks".
2017-01-07 03:27:13 +00:00
Ben Hutchings f5af248fc0 genorig.py: Verify tag signatures (based on work by Yves-Alexis Perez)
I changed the wrapper to call gpgv instead of gpg.  It is much easier
and cleaner to use local configuration this way, and it won't produce
a warning that the key isn't trusted.

I also removed used of an environment variable, as we (currently) only
pass one keyring filename here.
2017-01-07 02:57:59 +00:00
Ben Hutchings 9e92fc9bab Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs
mozjs assumed VAs would never be wider than 47 bits.  Add Breaks to
force upgrades of those packages.  For mozjs 1.8.5 the fix requires an
ABI change so this is unversioned; for mozjs 24 there was no ABI
change so this is versioned.

(luajit has the same problem but only the experimental version
supports arm64.  I assume this will be fixed before it goes into
unstable, so we don't need it in Breaks.)
2017-01-07 02:07:50 +00:00
Aurelien Jarno b6e260f0b4 [arm64] Enable RTC_DRV_DS1307.
The Raspberry PIs do not have an RTC, and many expansion boards provide
an RTC using a DS1307 chip (or one of the zillon clones). Enable it for
arm64 like on armhf, so that these expansion boards also work on the
Raspberry PI 3 running in 64-bit mode.
2017-01-06 21:01:31 +01:00
Ben Hutchings 285199d96c Fix my typo in changelog 2017-01-06 18:51:49 +00:00
Uwe Kleine-König a3e600085e [armhf] Add support for switch hardware on Turris Omnia 2017-01-06 17:59:21 +01:00
Ben Hutchings 4650abe50b nic-modules: Include switch (DSA) drivers (Closes: #845075) 2017-01-05 17:16:43 +00:00
Ben Hutchings 0ae467ce6f Use debhelper compatibility level 9 2017-01-05 17:05:57 +00:00
Ben Hutchings dacad5c64e aufs: Update support patchest to aufs4.9-20161219 2017-01-05 04:20:11 +00:00
Ben Hutchings ec36e35f50 [armhf] gpio: Enable GPIO_MCP23S08 as module (Closes: #845064) 2017-01-05 04:04:33 +00:00
Ben Hutchings 8c35b862a7 net: Enable GTP as module (Closes: #846913) 2017-01-05 03:30:49 +00:00
Ben Hutchings 7aee63d8bc Enable drivers requested in #847017
* [x86] iio,HID: Enable INTEL_ISH_HID as module
* hwmon,watchdog: Enable SENSORS_FTSTEUTATES as module
2017-01-05 03:29:38 +00:00
Ben Hutchings c45f83ebe7 [armhf] leds,gpio: Enable LEDS_TCA6507 as module (Closes: #847770) 2017-01-05 03:12:30 +00:00
Ben Hutchings 359bc84534 ieee802154: Enable IEEE802154_FAKELB as module 2017-01-05 03:09:11 +00:00
Ben Hutchings f08186c06a mm: Enable PAGE_POISONING (Closes: #849450), PAGE_POISONING_NO_SANITY
...except on armel/marvell
2017-01-05 03:01:05 +00:00
Ben Hutchings 589b068d1b [x86] PCI: Enable VMD as module 2017-01-05 02:56:44 +00:00
Ben Hutchings 3131927f49 Enable USERFAULTFD (except on armel/marvell) 2017-01-05 01:45:08 +00:00
Ben Hutchings 97ab9059a9 Release linux (4.8.15-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlhtitEACgkQ57/I7JWG
 EQlPqQ//V6+eUGkATmlFFyxsM91OsMgZyxtt0Pzf7XvFg4gBr+hJIaJwxasVRZGi
 w/r4uYHmiX7fLrXnanT+RekT1zCGQBOLUvm2Rlwi845PAl9fMCSb+9Jiz60THeN7
 cHg7JEvNhTEEDpLK1FJlU3fiMqb5LRdUTkz+RkhKRfITm4/bT3h0Ow72/Xy6JsrI
 nAf/AyncvBCQvrIUXYyfyHUPhkYMk8L7bC6G4o803kFdPYTb1WR2gRbpsI6jSVs8
 YFbrfMpH1foPHiTVWP+inDN9LA2TO8QGMvAuCAQzQuLzKztrU0i/1shjDfaN61qx
 xQhXE08TwNnkDZQCtIFZrLkRPSFlLqFqVWyL9eyPAYNAnZeugxB6F3HOWk5cKWqj
 NPpZ10zAnKliPnL7z+eFlxLq34UgVqqe1FeRB5iBEC2dQYEs3LuB1RF2zFOuZ74T
 cvXKJJhuR4iMNcAOax6Uab+3iyC/PGm5VSiCL+IPbD7H9IaXLcICE8l1r0zRs5Sa
 Um4YQKTy8kFK/CRsEOB8CofXMuBXLzEw2xeNn6187d/ZeA7uiUsyd2nVkXnO0FNt
 B2JkV6kwO99WAnNwTZSwF7QJJe8ir7X4X1qdk00sqNYiDff/CBHjRT1gLRzNyOuJ
 r9QFKRt4UGF3XGpE89czRRoHfP9WkdrmdmP1i/DnkSVO6L8/y6Y=
 =AxAX
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.15-2'
2017-01-05 00:01:00 +00:00
Ben Hutchings b977a70115 Prepare to release linux (4.8.15-2). 2017-01-04 19:39:36 +00:00
Ben Hutchings f66a36aee0 [rt] Update to 4.8.15-rt10 (no functional change) 2017-01-04 19:39:22 +00:00
Ben Hutchings 65510d6128 debian/control: Add Salvatore Bonaccorso to Uploaders 2017-01-04 19:39:22 +00:00
Ben Hutchings feb5d84961 [amd64] mic: Enable VOP_BUS and VOP as modules; re-enable INTEL_MIC_HOST as module 2017-01-04 19:39:21 +00:00
Ben Hutchings 8ad41fe983 nvme: Enable NVME_RDMA, NVME_TARGET, NVME_TARGET_RDMA as modules 2017-01-04 19:39:21 +00:00
Ben Hutchings 5fdbe9768e hci_uart: Enable BT_HCIUART_AG6XX 2017-01-04 19:39:21 +00:00
Ben Hutchings 60b816f0e8 net/sched: Enable NET_CLS_MATCHALL, NET_ACT_IFE, NET_IFE_SKBMARK, NET_IFE_SKBPRIO as modules 2017-01-04 19:39:21 +00:00
Ben Hutchings ac48b8b17c ipv6: Enable IPV6_ILA as module 2017-01-04 19:39:21 +00:00
Ben Hutchings acc71539d4 tcp: Enable TCP_CONG_NV as module 2017-01-04 19:39:20 +00:00
Ben Hutchings c417304ac9 inet: Enable INET_DIAG_DESTROY 2017-01-04 19:39:18 +00:00
Ben Hutchings f887a754d8 [amd64] PCI: Enable PCI_HYPERV as module 2017-01-04 15:08:01 +00:00
Ben Hutchings 5bdfbe981b PCI: Enable PCIE_DPC (except for armel/versatile) 2017-01-04 15:08:00 +00:00
Ben Hutchings 0b0d06c41a [x86] perf: Change PERF_EVENTS_INTEL_{CSTATE,RAPL,UNCORE} from built-in to modules 2017-01-02 03:37:41 +00:00
Ben Hutchings 1379f4e7c4 [x86] perf: Enable PERF_EVENTS_AMD_POWER as module 2017-01-02 03:37:40 +00:00
Ben Hutchings 14f4f7359e [x86] ACPI: Enable DPTF_POWER as module 2017-01-02 03:37:40 +00:00
Ben Hutchings dc0857b075 cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module 2017-01-02 03:37:37 +00:00
Ben Hutchings bc0de8a222 [powerpc*] boot: Request no dynamic linker for boot wrapper
Closes: #848851, FTBFS on ppc6el
2017-01-02 03:09:22 +00:00
Salvatore Bonaccorso 5efdda62b4 kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (CVE-2016-9588) 2017-01-01 09:15:13 +01:00
Salvatore Bonaccorso e7ccf65ec6 sg_write()/bsg_write() is not fit to be called under KERNEL_DS (CVE-2016-10088) 2016-12-31 20:21:43 +01:00
Ben Hutchings 0aaf8482c2 [x86] Enable LEDS_DELL_NETBOOKS and DELL_SMBIOS as modules
This also re-enables DELL_LAPTOP and DELL_WMI as modules.

Closes: #849674
2016-12-29 20:03:59 +00:00
Ben Hutchings 571716aee9 debian/control: Change build-dependency on asciidoc to prefer the new asciidoc-base
asciidoc can use LaTeX stuff but previously only Recommended it.
Now asciidoc Depends on it while asciidoc-base can do everything
we need.
2016-12-27 10:26:41 +00:00
Ben Hutchings b825aa9932 [x86] Enable INTEL_VBTN as module (Closes: #848967) 2016-12-27 09:06:29 +00:00
Uwe Kleine-König 61b71464b3 [rt] Update to 4.9-rt1 and reenable 2016-12-23 21:25:24 +01:00
Uwe Kleine-König b9aaa1abc5 enable `perf data' support 2016-12-21 09:53:24 +01:00
Ben Hutchings 344453b7f7 Release linux (4.8.15-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhYKrFfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89E6xQP/1MRca+ekUynYy2IFUipst1zlvO94p59
 79Pe26mFBb05MuDdU1DaA/fJvlpG14rDCnXCid8AAGF9LtuCzrxo6K2RdHpCi8h8
 JuJCRSMrh3p3SvkeTDm3osLuRgaARvD7ruBOpWYki3D3TORpJk9IELK+HLw4CfBb
 I50sJQSfTQm1/TKEwbHIHc0L1/FH5yVqMYA8v5KvJsz94ICXe4J5FJyIReexqVIL
 LGO45r23eOHJ9rmO/XP1gtp9sRtPev2ZAbL4VwOqbku/KVQGQUMsikv0TUHBZT1C
 jCz2ffFaJtTWWFhoKTUqCmKyqhuIklGMS4MOPHMxjXBdgA6Nb2iGOWc53ilQ35v+
 umh4BJWNgqtJfkibJTDD/gA/f/U2f7O+a2ZTOXZjJPbK8bVNiyqnImHP4XWDS4OC
 5IW7swgvvBVDIk7eDzDd3lKK8O1ZcWjS5U9PbaXu9C0XDeTSOKQUhfpRkfvUaqzQ
 BshFmULrdvFKQzS/FJdcW/DkjGdcyYLjYtB+jPaHTG/ZytGDBqZIu4Yb4/hFAdUd
 rk1MgyI4GfeBFT7RlItBJK+12WtdyTbfaiCDS4O+av0yM0drBIpm6wpl2OHZrP0R
 70nZKVTcdSu+4TN3uoy2ZHHaw/ZsrsAE3EePQtdNtDAFYj7oIWjDDCVHJH4zdFHl
 ekMUyxf7Hzun
 =i7IG
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.15-1'

Drop ABI reference files.
2016-12-20 03:58:23 +00:00
Salvatore Bonaccorso 2abddc2aa9 Prepare to release linux (4.8.15-1). 2016-12-19 12:35:29 +01:00
Salvatore Bonaccorso 36b7372766 docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
Thanks: Dmitry Shachnev <mitya57@debian.org>
Closes: #848349
2016-12-19 08:30:20 +01:00
Ben Hutchings c77a0899a0 Add link to kernelnewbies summary of 4.9 2016-12-18 19:19:10 +00:00
Ben Hutchings 095cd6c9bc Correct version in open changelog entry 2016-12-18 19:18:07 +00:00
Ben Hutchings 5fe84e9440 Set ABI to trunk 2016-12-18 19:17:28 +00:00
Uwe Kleine-Koenig a9f6833ed4 Update to 4.9 2016-12-18 18:00:28 +01:00
Ben Hutchings be4cc8383e debian/changelog: Add bug closure for reverting vsyscall change 2016-12-18 02:58:42 +00:00
Ben Hutchings 62be722622 debian/rules: Tighten binNMU version matching, consistent with linux-latest 2016-12-18 02:49:52 +00:00
Ben Hutchings 6b6dd902ca debian/rules: Use dpkg-parsechangelog -S option to select fields 2016-12-18 02:26:21 +00:00
Salvatore Bonaccorso e0ceefaa07 Ignore ABI changes in libnvdimm 2016-12-16 11:25:36 +01:00
Salvatore Bonaccorso 8e3469b562 Update to 4.8.15 2016-12-16 11:02:32 +01:00
Ben Hutchings 9768234db4 debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign 2016-12-15 20:27:38 +00:00
Ben Hutchings 9bf892f446 debian/rules.real: Exclude *.pyc from featureset diffs
Since jessie's diff returns 2 when it finds a binary (#737180) we need
to do this to avoid FTBFS in jessie-backports.  Besides which, those
aren't part of the source.

(cherry picked from commit 62cce57936757e7492b082b2845e04be00cda5d2)
2016-12-14 23:05:22 +00:00
Salvatore Bonaccorso 966cf13de0 netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755) 2016-12-14 17:12:59 +01:00
Salvatore Bonaccorso 7a3d9312d0 [rt] Update to 4.8.14-rt9 2016-12-12 20:55:55 +01:00
Salvatore Bonaccorso 14a852ee64 Update to 4.8.14 2016-12-12 20:28:07 +01:00
Ben Hutchings c7f834c8dc Revert "Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs"
This reverts commit a462c39f5d.  mozjs24
got 'fixed' in an ABI-compatible way that had to be reverted, so it's
still broken.  Same for mozjs, though it hasn't been reverted yet.

Also, Breaks relations against source package names would not have
been very effective.
2016-12-11 02:15:44 +00:00
Salvatore Bonaccorso e1625e4a92 [rt] Update to 4.8.11-rt7 2016-12-10 13:13:52 +01:00
Salvatore Bonaccorso 03b836246e Update to 4.8.13 2016-12-10 13:10:07 +01:00
Salvatore Bonaccorso 93304bd632 net: handle no dst on skb in icmp6_send (CVE-2016-9919) 2016-12-10 07:42:41 +01:00
Salvatore Bonaccorso d2f4158d99 Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576) 2016-12-10 07:35:50 +01:00
Salvatore Bonaccorso 56659f5080 net: ping: check minimum size on ICMP header length (CVE-2016-8399) 2016-12-10 07:29:51 +01:00
Salvatore Bonaccorso 9b4f84faec Ignore ABI changes in KVM 2016-12-09 23:05:09 +01:00
Ben Hutchings 33f253b15d [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
Ben Hutchings 37912077cd Add previous change to debian/changelog 2016-12-09 12:12:16 +00:00
Salvatore Bonaccorso 3a2602da33 Add ABI reference for 4.8.0-2 2016-12-09 06:22:56 +01:00
Salvatore Bonaccorso be8be2cb5f net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793) 2016-12-08 19:28:56 +01:00
Salvatore Bonaccorso 3b66b4fcef packet: fix race condition in packet_set_ring (CVE-2016-8655) 2016-12-07 10:34:33 +01:00
Salvatore Bonaccorso 27fc4207c6 tipc: check minimum bearer MTU (CVE-2016-8632) 2016-12-07 10:31:56 +01:00
Salvatore Bonaccorso 59ebe22f2f Update to 4.8.12 2016-12-06 21:19:22 +01:00
Roger Shimizu 8f06e2bdc6 [armel] dts: marvell: fix number of sata port for linkstation ls-gl
Closes: #845611
2016-12-06 08:38:19 +09:00
Ben Hutchings 24fc851133 Prepare to release linux (4.9~rc8-1~exp1). 2016-12-05 05:02:30 +00:00
Ben Hutchings 41004b49b6 [sparc64] Don't re-add exports of string functions that are now only defined as macros
Together with fixes to DMA address types in 4.9-rc8, this should fix
the previous FTBFS.
2016-12-05 01:45:33 +00:00
Ben Hutchings 251382a142 [arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS) 2016-12-05 01:45:33 +00:00
Ben Hutchings b3906798a8 Revert "default exported asm symbols to zero" 2016-12-05 01:07:36 +00:00
Ben Hutchings 1c1ab88dbe Update to 4.9-rc8 2016-12-05 01:02:03 +00:00
Ben Hutchings cb8d2ff783 debian/control: Fix build-dependency on flex to work with new versions that have M-A: allowed 2016-12-05 00:59:45 +00:00
Uwe Kleine-König 086dccbdfe [armhf] dts: armada-385: add support for Turris Omnia 2016-12-04 21:18:15 +01:00
Ben Hutchings aa27137298 [amd64] Remove xen-linux-system-<version> package
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
Ben Hutchings 7e80c27706 radeon: Update package name in error message for missing firmware 2016-12-03 03:30:15 +00:00
Ben Hutchings 8b6cd20174 Prepare to release linux (4.9~rc7-1~exp1). 2016-12-03 01:46:12 +00:00
Ben Hutchings 34594185e1 Drop "default exported asm symbols to zero"
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
Ben Hutchings 2431e89ed3 Update fixes for exported symbol versions
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching.  Apply his match but then revert the weakening.

Also add a proposed fix for missing version CRCs, which gives them a
default value of zero.  Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
Ben Hutchings 8789780466 Release linux (4.8.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhBGM5fFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ei1oQAKBvUPEti/KYiLL+WpxR134LO8Pw2gGz
 XYFeF0lIkf++2ipAPU0hNrvnZZoi6sWJce+28R4/v1TgxhKYIU0Bx5Nutbcn8Bq0
 9d206ef/NR6K73zsBuf9gp3NdPWUdJ2068YUPfEHIiyKvuaf3i1H7fl8p0h9TSuD
 fHgpoCw0Qpbug0zxaFRB81mOa+rZdcY9vjAfm91lME/DRqX+9iUwgfOh21TAzHWm
 Y7hcYfP54748PnQNSQ46BypnUSekm2NEXEm73Hu4q8vHiTcFb1kl1VzvM6z/CzG4
 vdwLjNHEm5+xPUF2sCw+rWVkAgTfI3sb9cNAmoRsUqtN/e4/Ysyr5ld8cuauT/Dv
 0gm6cIGmBsMhIVod4Inl3ujfxg+LYDFU48up/g1qtF5HWgmwIwbXlK8xNd/tZslO
 i4oSvrDG0TIfyVvXPumlLAtjDSvB/VX8K/GemzWzqWfF3I2zhvJLzPnFqjwEsIIu
 dZIMSPLAGVSNXzah1ER9AsBlYZeEKFr6HU+58L8wus+Dpouf9BwQI6T4euFQBmML
 UuSr9vrVLNdUAHDVySQLnRkSEZviIro9qa2YJ36/exhPjKCHJl59s1AxNuwPHvuP
 odYatq+U3tULl4EmbBJNeKgudvVAzWZGK4Ezj70Tid3vXgCKQE3095HDOmIwGVF2
 6A74edXu4AOs
 =itOd
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.11-1'

Ignore ABI bump.

Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
Salvatore Bonaccorso 489dc40883 Prepare to release linux (4.8.11-1). 2016-12-02 06:35:22 +01:00
Ben Hutchings ab01013e14 [powerpc*] Fix more exported symbol versions 2016-12-02 02:49:08 +00:00
Ben Hutchings 2661eeaf78 debian/bin/buildcheck.py: Add check for symbols with version CRC of 0 2016-12-02 02:49:08 +00:00
Ben Hutchings 54d0756a33 Fix exported symbol versions
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"

This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
Ben Hutchings 67d96bc121 Update to 4.9-rc7
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
Ben Hutchings eeb496a241 linux-headers-common: Make these packages architecture-independent
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
Salvatore Bonaccorso ceb75c4337 mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213) 2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso b67bd212fa vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084) 2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Martin Michlmayr 1a0657ea1a [arm64] Enable ARCH_MVEBU and related options
Enable ARCH_MVEBU for 64-bit ARM.  While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
Martin Michlmayr 04624dfa7e [arm64] Enable more QCOM options
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
Salvatore Bonaccorso f82ecfdc9e Update to 4.8.11 2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso b69731a96b Add CVE reference for CVE-2016-9555 2016-11-23 06:21:23 +01:00
Ben Hutchings fa9e148da4 Update to 4.9-rc6 2016-11-21 23:52:49 +00:00
Uwe Kleine-König 0971da3b71 [armhf,armel] fix CRC generation for modules 2016-11-19 17:06:08 +01:00
Ben Hutchings 85deb5386a [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) 2016-11-16 21:35:16 +00:00
Ben Hutchings 2d21aaf508 [arm64] Enable more drivers for X-Gene (Really closes: #840061) 2016-11-16 21:22:18 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso b7d167eabc Fix changelog entry for removal of ABI reference
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso 17805e05b4 Bump ABI to 2 and remove ABI reference for 4.8.0-2 2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings 6c0c9bcf78 Prepare to release linux (4.9~rc5-1~exp1). 2016-11-14 05:19:31 +00:00
Ben Hutchings 4764f3dc4e w1: Disable W1_MASTER_MATROX 2016-11-13 23:27:39 +00:00
Ben Hutchings abd19bbc53 Release linux (4.8.7-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJYKMjFAAoJEOe/yOyVhhEJOtIP/RIo9vUk0PusThnw4bYQTA8T
 x8UTEpGJ+tqWBRL+yv7Ff3A8qP2TRAvJW2xzqu1+4UwNYgCSTa8A20bJ6crGzN8X
 Y6J7nqWFuzWsB2SHsPvYI1m0Q9luNrQ+1vkohpH53u8FfJxuceHwP/tFj6ShMl8i
 bNUiftui2Sc82JUjUdiG2EpXlIJH+N3aO8+R5ER3qUqoiHxChrslSbh3Lg8T8Tcp
 ItwwLi6K9s3CjYCiDiZ54+BYYQRy+rmTRFpEmgac4v2+HqXrMKAR4D6EomqMl3r1
 wHQ/F/Tt1GMvYvJniKWJIJVeCzuZSBmaQrL+D7xkKVGrzMo7QGGW1xr3DzyV1alc
 Ugx4k2nDbPDGinrbkhJbuds02VDIl8vfrnUM1NCYZ2GrReD5jJPj6OcZvlXRbjZw
 gUL1j+3w1dCa71E2rufZK7DZnGw4MjR9Q0cAefbgWNzEFDNh3nXQEKpxleEMmT/C
 xXVR2cfUpOAr1J4vR++I7kAn9re9tw7UlX3JYqH8+ty6Lm+DxrzoGMxEd1bmxYm9
 yzIn4O8x6LK2B7NdHfRs1SJC4rWWy/3+2z+5SnFroGMem8ugDhB95Q3QFvQGe9Ga
 zw1T6+GlYF9oglzY87XcKY2oUQveL8A45pM2TF3HsgGbx7wziR2yymjWAk03w32Y
 uYbKvmpQsH/wNrOA8E8I
 =uDst
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.7-1'

Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings 9ab8cb710b [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y 2016-11-13 21:00:47 +00:00
Ben Hutchings b15e0cf459 Update to 4.9-rc5 2016-11-13 20:35:21 +00:00
Ben Hutchings 343333fea3 Prepare to release linux (4.8.7-1). 2016-11-13 04:38:09 +00:00
Ben Hutchings 772d6648d5 debian/control: Build-Depend on a recent debhelper instead of dh-systemd 2016-11-13 04:38:06 +00:00
Ben Hutchings 15da3c4884 [arm64] Enable more drivers for X-Gene (Closes: #840061) 2016-11-13 04:28:46 +00:00
Ben Hutchings f8420f98bc Delete some garbage from the upstream shortlog for 4.8.7 2016-11-13 04:01:19 +00:00
Ben Hutchings e1b8f7e7ad libcpupower-dev: Depend on libcpupower1 (Closes: #840852) 2016-11-13 04:00:45 +00:00