Commit Graph

7240 Commits

Author SHA1 Message Date
Ben Hutchings ac48b8b17c ipv6: Enable IPV6_ILA as module 2017-01-04 19:39:21 +00:00
Ben Hutchings acc71539d4 tcp: Enable TCP_CONG_NV as module 2017-01-04 19:39:20 +00:00
Ben Hutchings c417304ac9 inet: Enable INET_DIAG_DESTROY 2017-01-04 19:39:18 +00:00
Ben Hutchings f887a754d8 [amd64] PCI: Enable PCI_HYPERV as module 2017-01-04 15:08:01 +00:00
Ben Hutchings 5bdfbe981b PCI: Enable PCIE_DPC (except for armel/versatile) 2017-01-04 15:08:00 +00:00
Ben Hutchings 0b0d06c41a [x86] perf: Change PERF_EVENTS_INTEL_{CSTATE,RAPL,UNCORE} from built-in to modules 2017-01-02 03:37:41 +00:00
Ben Hutchings 1379f4e7c4 [x86] perf: Enable PERF_EVENTS_AMD_POWER as module 2017-01-02 03:37:40 +00:00
Ben Hutchings 14f4f7359e [x86] ACPI: Enable DPTF_POWER as module 2017-01-02 03:37:40 +00:00
Ben Hutchings dc0857b075 cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module 2017-01-02 03:37:37 +00:00
Ben Hutchings bc0de8a222 [powerpc*] boot: Request no dynamic linker for boot wrapper
Closes: #848851, FTBFS on ppc6el
2017-01-02 03:09:22 +00:00
Salvatore Bonaccorso 5efdda62b4 kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (CVE-2016-9588) 2017-01-01 09:15:13 +01:00
Salvatore Bonaccorso e7ccf65ec6 sg_write()/bsg_write() is not fit to be called under KERNEL_DS (CVE-2016-10088) 2016-12-31 20:21:43 +01:00
Ben Hutchings 0aaf8482c2 [x86] Enable LEDS_DELL_NETBOOKS and DELL_SMBIOS as modules
This also re-enables DELL_LAPTOP and DELL_WMI as modules.

Closes: #849674
2016-12-29 20:03:59 +00:00
Ben Hutchings 571716aee9 debian/control: Change build-dependency on asciidoc to prefer the new asciidoc-base
asciidoc can use LaTeX stuff but previously only Recommended it.
Now asciidoc Depends on it while asciidoc-base can do everything
we need.
2016-12-27 10:26:41 +00:00
Ben Hutchings b825aa9932 [x86] Enable INTEL_VBTN as module (Closes: #848967) 2016-12-27 09:06:29 +00:00
Uwe Kleine-König 61b71464b3 [rt] Update to 4.9-rt1 and reenable 2016-12-23 21:25:24 +01:00
Uwe Kleine-König b9aaa1abc5 enable `perf data' support 2016-12-21 09:53:24 +01:00
Ben Hutchings 344453b7f7 Release linux (4.8.15-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhYKrFfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89E6xQP/1MRca+ekUynYy2IFUipst1zlvO94p59
 79Pe26mFBb05MuDdU1DaA/fJvlpG14rDCnXCid8AAGF9LtuCzrxo6K2RdHpCi8h8
 JuJCRSMrh3p3SvkeTDm3osLuRgaARvD7ruBOpWYki3D3TORpJk9IELK+HLw4CfBb
 I50sJQSfTQm1/TKEwbHIHc0L1/FH5yVqMYA8v5KvJsz94ICXe4J5FJyIReexqVIL
 LGO45r23eOHJ9rmO/XP1gtp9sRtPev2ZAbL4VwOqbku/KVQGQUMsikv0TUHBZT1C
 jCz2ffFaJtTWWFhoKTUqCmKyqhuIklGMS4MOPHMxjXBdgA6Nb2iGOWc53ilQ35v+
 umh4BJWNgqtJfkibJTDD/gA/f/U2f7O+a2ZTOXZjJPbK8bVNiyqnImHP4XWDS4OC
 5IW7swgvvBVDIk7eDzDd3lKK8O1ZcWjS5U9PbaXu9C0XDeTSOKQUhfpRkfvUaqzQ
 BshFmULrdvFKQzS/FJdcW/DkjGdcyYLjYtB+jPaHTG/ZytGDBqZIu4Yb4/hFAdUd
 rk1MgyI4GfeBFT7RlItBJK+12WtdyTbfaiCDS4O+av0yM0drBIpm6wpl2OHZrP0R
 70nZKVTcdSu+4TN3uoy2ZHHaw/ZsrsAE3EePQtdNtDAFYj7oIWjDDCVHJH4zdFHl
 ekMUyxf7Hzun
 =i7IG
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.15-1'

Drop ABI reference files.
2016-12-20 03:58:23 +00:00
Salvatore Bonaccorso 2abddc2aa9 Prepare to release linux (4.8.15-1). 2016-12-19 12:35:29 +01:00
Salvatore Bonaccorso 36b7372766 docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
Thanks: Dmitry Shachnev <mitya57@debian.org>
Closes: #848349
2016-12-19 08:30:20 +01:00
Ben Hutchings c77a0899a0 Add link to kernelnewbies summary of 4.9 2016-12-18 19:19:10 +00:00
Ben Hutchings 095cd6c9bc Correct version in open changelog entry 2016-12-18 19:18:07 +00:00
Ben Hutchings 5fe84e9440 Set ABI to trunk 2016-12-18 19:17:28 +00:00
Uwe Kleine-Koenig a9f6833ed4 Update to 4.9 2016-12-18 18:00:28 +01:00
Ben Hutchings be4cc8383e debian/changelog: Add bug closure for reverting vsyscall change 2016-12-18 02:58:42 +00:00
Ben Hutchings 62be722622 debian/rules: Tighten binNMU version matching, consistent with linux-latest 2016-12-18 02:49:52 +00:00
Ben Hutchings 6b6dd902ca debian/rules: Use dpkg-parsechangelog -S option to select fields 2016-12-18 02:26:21 +00:00
Salvatore Bonaccorso e0ceefaa07 Ignore ABI changes in libnvdimm 2016-12-16 11:25:36 +01:00
Salvatore Bonaccorso 8e3469b562 Update to 4.8.15 2016-12-16 11:02:32 +01:00
Ben Hutchings 9768234db4 debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign 2016-12-15 20:27:38 +00:00
Ben Hutchings 9bf892f446 debian/rules.real: Exclude *.pyc from featureset diffs
Since jessie's diff returns 2 when it finds a binary (#737180) we need
to do this to avoid FTBFS in jessie-backports.  Besides which, those
aren't part of the source.

(cherry picked from commit 62cce57936757e7492b082b2845e04be00cda5d2)
2016-12-14 23:05:22 +00:00
Salvatore Bonaccorso 966cf13de0 netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755) 2016-12-14 17:12:59 +01:00
Salvatore Bonaccorso 7a3d9312d0 [rt] Update to 4.8.14-rt9 2016-12-12 20:55:55 +01:00
Salvatore Bonaccorso 14a852ee64 Update to 4.8.14 2016-12-12 20:28:07 +01:00
Ben Hutchings c7f834c8dc Revert "Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs"
This reverts commit a462c39f5d.  mozjs24
got 'fixed' in an ABI-compatible way that had to be reverted, so it's
still broken.  Same for mozjs, though it hasn't been reverted yet.

Also, Breaks relations against source package names would not have
been very effective.
2016-12-11 02:15:44 +00:00
Salvatore Bonaccorso e1625e4a92 [rt] Update to 4.8.11-rt7 2016-12-10 13:13:52 +01:00
Salvatore Bonaccorso 03b836246e Update to 4.8.13 2016-12-10 13:10:07 +01:00
Salvatore Bonaccorso 93304bd632 net: handle no dst on skb in icmp6_send (CVE-2016-9919) 2016-12-10 07:42:41 +01:00
Salvatore Bonaccorso d2f4158d99 Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576) 2016-12-10 07:35:50 +01:00
Salvatore Bonaccorso 56659f5080 net: ping: check minimum size on ICMP header length (CVE-2016-8399) 2016-12-10 07:29:51 +01:00
Salvatore Bonaccorso 9b4f84faec Ignore ABI changes in KVM 2016-12-09 23:05:09 +01:00
Ben Hutchings 33f253b15d [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
Ben Hutchings 37912077cd Add previous change to debian/changelog 2016-12-09 12:12:16 +00:00
Salvatore Bonaccorso 3a2602da33 Add ABI reference for 4.8.0-2 2016-12-09 06:22:56 +01:00
Salvatore Bonaccorso be8be2cb5f net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793) 2016-12-08 19:28:56 +01:00
Salvatore Bonaccorso 3b66b4fcef packet: fix race condition in packet_set_ring (CVE-2016-8655) 2016-12-07 10:34:33 +01:00
Salvatore Bonaccorso 27fc4207c6 tipc: check minimum bearer MTU (CVE-2016-8632) 2016-12-07 10:31:56 +01:00
Salvatore Bonaccorso 59ebe22f2f Update to 4.8.12 2016-12-06 21:19:22 +01:00
Roger Shimizu 8f06e2bdc6 [armel] dts: marvell: fix number of sata port for linkstation ls-gl
Closes: #845611
2016-12-06 08:38:19 +09:00
Ben Hutchings 24fc851133 Prepare to release linux (4.9~rc8-1~exp1). 2016-12-05 05:02:30 +00:00
Ben Hutchings 41004b49b6 [sparc64] Don't re-add exports of string functions that are now only defined as macros
Together with fixes to DMA address types in 4.9-rc8, this should fix
the previous FTBFS.
2016-12-05 01:45:33 +00:00
Ben Hutchings 251382a142 [arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS) 2016-12-05 01:45:33 +00:00
Ben Hutchings b3906798a8 Revert "default exported asm symbols to zero" 2016-12-05 01:07:36 +00:00
Ben Hutchings 1c1ab88dbe Update to 4.9-rc8 2016-12-05 01:02:03 +00:00
Ben Hutchings cb8d2ff783 debian/control: Fix build-dependency on flex to work with new versions that have M-A: allowed 2016-12-05 00:59:45 +00:00
Uwe Kleine-König 086dccbdfe [armhf] dts: armada-385: add support for Turris Omnia 2016-12-04 21:18:15 +01:00
Ben Hutchings aa27137298 [amd64] Remove xen-linux-system-<version> package
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
Ben Hutchings 7e80c27706 radeon: Update package name in error message for missing firmware 2016-12-03 03:30:15 +00:00
Ben Hutchings 8b6cd20174 Prepare to release linux (4.9~rc7-1~exp1). 2016-12-03 01:46:12 +00:00
Ben Hutchings 34594185e1 Drop "default exported asm symbols to zero"
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
Ben Hutchings 2431e89ed3 Update fixes for exported symbol versions
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching.  Apply his match but then revert the weakening.

Also add a proposed fix for missing version CRCs, which gives them a
default value of zero.  Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
Ben Hutchings 8789780466 Release linux (4.8.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhBGM5fFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ei1oQAKBvUPEti/KYiLL+WpxR134LO8Pw2gGz
 XYFeF0lIkf++2ipAPU0hNrvnZZoi6sWJce+28R4/v1TgxhKYIU0Bx5Nutbcn8Bq0
 9d206ef/NR6K73zsBuf9gp3NdPWUdJ2068YUPfEHIiyKvuaf3i1H7fl8p0h9TSuD
 fHgpoCw0Qpbug0zxaFRB81mOa+rZdcY9vjAfm91lME/DRqX+9iUwgfOh21TAzHWm
 Y7hcYfP54748PnQNSQ46BypnUSekm2NEXEm73Hu4q8vHiTcFb1kl1VzvM6z/CzG4
 vdwLjNHEm5+xPUF2sCw+rWVkAgTfI3sb9cNAmoRsUqtN/e4/Ysyr5ld8cuauT/Dv
 0gm6cIGmBsMhIVod4Inl3ujfxg+LYDFU48up/g1qtF5HWgmwIwbXlK8xNd/tZslO
 i4oSvrDG0TIfyVvXPumlLAtjDSvB/VX8K/GemzWzqWfF3I2zhvJLzPnFqjwEsIIu
 dZIMSPLAGVSNXzah1ER9AsBlYZeEKFr6HU+58L8wus+Dpouf9BwQI6T4euFQBmML
 UuSr9vrVLNdUAHDVySQLnRkSEZviIro9qa2YJ36/exhPjKCHJl59s1AxNuwPHvuP
 odYatq+U3tULl4EmbBJNeKgudvVAzWZGK4Ezj70Tid3vXgCKQE3095HDOmIwGVF2
 6A74edXu4AOs
 =itOd
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.11-1'

Ignore ABI bump.

Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
Salvatore Bonaccorso 489dc40883 Prepare to release linux (4.8.11-1). 2016-12-02 06:35:22 +01:00
Ben Hutchings ab01013e14 [powerpc*] Fix more exported symbol versions 2016-12-02 02:49:08 +00:00
Ben Hutchings 2661eeaf78 debian/bin/buildcheck.py: Add check for symbols with version CRC of 0 2016-12-02 02:49:08 +00:00
Ben Hutchings 54d0756a33 Fix exported symbol versions
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"

This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
Ben Hutchings 67d96bc121 Update to 4.9-rc7
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
Ben Hutchings eeb496a241 linux-headers-common: Make these packages architecture-independent
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
Salvatore Bonaccorso ceb75c4337 mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213) 2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso b67bd212fa vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084) 2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Martin Michlmayr 1a0657ea1a [arm64] Enable ARCH_MVEBU and related options
Enable ARCH_MVEBU for 64-bit ARM.  While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
Martin Michlmayr 04624dfa7e [arm64] Enable more QCOM options
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
Salvatore Bonaccorso f82ecfdc9e Update to 4.8.11 2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso b69731a96b Add CVE reference for CVE-2016-9555 2016-11-23 06:21:23 +01:00
Ben Hutchings fa9e148da4 Update to 4.9-rc6 2016-11-21 23:52:49 +00:00
Uwe Kleine-König 0971da3b71 [armhf,armel] fix CRC generation for modules 2016-11-19 17:06:08 +01:00
Ben Hutchings 85deb5386a [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) 2016-11-16 21:35:16 +00:00
Ben Hutchings 2d21aaf508 [arm64] Enable more drivers for X-Gene (Really closes: #840061) 2016-11-16 21:22:18 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso b7d167eabc Fix changelog entry for removal of ABI reference
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso 17805e05b4 Bump ABI to 2 and remove ABI reference for 4.8.0-2 2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings 6c0c9bcf78 Prepare to release linux (4.9~rc5-1~exp1). 2016-11-14 05:19:31 +00:00
Ben Hutchings 4764f3dc4e w1: Disable W1_MASTER_MATROX 2016-11-13 23:27:39 +00:00
Ben Hutchings abd19bbc53 Release linux (4.8.7-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJYKMjFAAoJEOe/yOyVhhEJOtIP/RIo9vUk0PusThnw4bYQTA8T
 x8UTEpGJ+tqWBRL+yv7Ff3A8qP2TRAvJW2xzqu1+4UwNYgCSTa8A20bJ6crGzN8X
 Y6J7nqWFuzWsB2SHsPvYI1m0Q9luNrQ+1vkohpH53u8FfJxuceHwP/tFj6ShMl8i
 bNUiftui2Sc82JUjUdiG2EpXlIJH+N3aO8+R5ER3qUqoiHxChrslSbh3Lg8T8Tcp
 ItwwLi6K9s3CjYCiDiZ54+BYYQRy+rmTRFpEmgac4v2+HqXrMKAR4D6EomqMl3r1
 wHQ/F/Tt1GMvYvJniKWJIJVeCzuZSBmaQrL+D7xkKVGrzMo7QGGW1xr3DzyV1alc
 Ugx4k2nDbPDGinrbkhJbuds02VDIl8vfrnUM1NCYZ2GrReD5jJPj6OcZvlXRbjZw
 gUL1j+3w1dCa71E2rufZK7DZnGw4MjR9Q0cAefbgWNzEFDNh3nXQEKpxleEMmT/C
 xXVR2cfUpOAr1J4vR++I7kAn9re9tw7UlX3JYqH8+ty6Lm+DxrzoGMxEd1bmxYm9
 yzIn4O8x6LK2B7NdHfRs1SJC4rWWy/3+2z+5SnFroGMem8ugDhB95Q3QFvQGe9Ga
 zw1T6+GlYF9oglzY87XcKY2oUQveL8A45pM2TF3HsgGbx7wziR2yymjWAk03w32Y
 uYbKvmpQsH/wNrOA8E8I
 =uDst
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.7-1'

Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings 9ab8cb710b [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y 2016-11-13 21:00:47 +00:00
Ben Hutchings b15e0cf459 Update to 4.9-rc5 2016-11-13 20:35:21 +00:00
Ben Hutchings 343333fea3 Prepare to release linux (4.8.7-1). 2016-11-13 04:38:09 +00:00
Ben Hutchings 772d6648d5 debian/control: Build-Depend on a recent debhelper instead of dh-systemd 2016-11-13 04:38:06 +00:00
Ben Hutchings 15da3c4884 [arm64] Enable more drivers for X-Gene (Closes: #840061) 2016-11-13 04:28:46 +00:00
Ben Hutchings f8420f98bc Delete some garbage from the upstream shortlog for 4.8.7 2016-11-13 04:01:19 +00:00
Ben Hutchings e1b8f7e7ad libcpupower-dev: Depend on libcpupower1 (Closes: #840852) 2016-11-13 04:00:45 +00:00
Ben Hutchings 943a798a07 IB: Enable INFINIBAND_RDMAVT as module
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes: #843792)
2016-11-13 04:00:45 +00:00
Ben Hutchings d442f1a220 Note some bug closures for 4.8.6 and 4.8.7 2016-11-13 04:00:45 +00:00
Ben Hutchings ab58b8b5ed [x86] ethernet: Enable ENA_ETHERNET as module 2016-11-13 03:34:00 +00:00
Ben Hutchings 0fc64e32b2 [armel] Drop versatile flavour, which has been broken since version 4.5~rc4-1~exp1 2016-11-13 03:30:03 +00:00
Ben Hutchings eeb90d2453 tcp: Enable TCP_CONG_BBR as module 2016-11-13 03:26:49 +00:00
Ben Hutchings 88d5cdd0e7 Update kconfig for 4.9
- Various ancient SCSI drivers were removed; delete config for them
- r8723au was replaced by rtl8xxxu; enable the latter instead and for
  all architectures
- netfilter config symbols were renamed; enable the new ones
- Various other config symbols are obsolete; delete them
- Various other config symbols moved to different Kconfig files
2016-11-13 03:23:23 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Ben Hutchings 82c55764b5 kbuild: Update -fno-PIE patches to match upstream 2016-11-10 20:26:29 +00:00
Ben Hutchings aecf13fddd linux-perf: Exclude perf-read-vdso* from shared library dependency check
Fixes FTBFS on sparc64:

    dpkg-shlibdeps: error: no dependency information found for /usr/lib32/libc.so.6 (used by debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32)
    Hint: check if the library actually comes from a package.
    dh_shlibdeps: dpkg-shlibdeps -Tdebian/linux-perf-4.9.substvars debian/linux-perf-4.9/usr/bin/perf_4.9 debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_xen.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_hrtimer.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_jbd2.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_function.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_mac80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_sched_switch.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kvm.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_cfg80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_scsi.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kmem.so debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32 returned exit code 2
2016-11-07 23:42:33 +00:00
Ben Hutchings 11740f3768 [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS) 2016-11-07 23:37:37 +00:00
Salvatore Bonaccorso d99e060fe3 [x86] kvm: Check memopp before dereference (CVE-2016-8630) 2016-11-06 17:54:35 +01:00
Aurelien Jarno 83309d3e08 [arm64] Enable VIRTUALIZATION and KVM. 2016-11-05 23:24:14 +01:00
Aurelien Jarno 0f6628f57c Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230, IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40. 2016-11-05 23:18:39 +01:00
Ben Hutchings 790f2d1ab5 perf: Disable use of libcrypto (Closes: #843199) 2016-11-04 15:41:12 -06:00
Ben Hutchings 0384bbbffa Prepare to release linux (4.9~rc3-1~exp1). 2016-11-03 16:51:55 -06:00
Ben Hutchings 25e532ff97 debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)

(cherry picked from commit 8e552ff10c)
2016-11-03 16:14:59 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 18036575a7 HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules 2016-11-03 15:03:01 -06:00
Ben Hutchings 6159bcf693 Revert "Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6""
This reverts commit 6f85def7ca.  It
should be OK to use gcc-6 now that we pass the -fno-PIE option where
necessary.
2016-11-03 13:33:44 -06:00
Ben Hutchings 586b6ef20b kbuild: add -fno-PIE (Closes: #841368) 2016-11-03 13:32:07 -06:00
Ben Hutchings c6318ee2ee Update to 4.9-rc3 2016-11-03 13:04:20 -06:00
Ben Hutchings 4975a766e7 [rt] Update to 4.8.6-rt5 2016-11-03 12:16:32 -06:00
Ben Hutchings 0acd08301d Update to 4.8.6 2016-11-03 12:08:20 -06:00
Ben Hutchings 8e552ff10c debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)
2016-11-02 12:21:30 -06:00
Ben Hutchings 4ac6860c3b Update to 4.9-rc2
Drop/refresh patches as appropriate.
2016-11-01 09:39:31 -06:00
Ben Hutchings 4c9bb889ce Prepare to release linux (4.8.5-1). 2016-10-28 20:34:09 +01:00
Ben Hutchings 64e2286fbd Update to 4.8.5
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
Ben Hutchings a5f9f74d46 Set ABI to 1 and version to 4.8.4-1 2016-10-28 20:20:49 +01:00
Ben Hutchings e34c6c01c6 [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled (Closes: #835160) 2016-10-28 20:18:08 +01:00
Ben Hutchings 4456cb3bc3 [x86] Input: i8042 - skip selftest on ASUS laptops 2016-10-28 20:16:42 +01:00
Ben Hutchings d9f03c486b netfilter: xt_NFLOG: fix unexpected truncated packet (Closes: #841261) 2016-10-28 20:16:09 +01:00
Salvatore Bonaccorso f86bc88075 [x86] boot/smp: Don't try to poke disabled/non-existent APIC
Closes: #841850
2016-10-26 09:17:48 +02:00
Ben Hutchings 8d9687d592 kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig (Closes: #841357) 2016-10-24 02:34:51 +01:00
Ben Hutchings 20ade9991b [armhf] dts: imx53: add support for USB armory board (Closes: #840137) 2016-10-24 02:31:45 +01:00
Ben Hutchings 0fc6a741fc cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular 2016-10-24 02:28:32 +01:00
Ben Hutchings 261ee0b56f Prepare to release linux (4.8.4-1~exp1). 2016-10-23 17:21:13 +01:00
Ben Hutchings 004996eaf0 [rt] Update to 4.8.2-rt2 2016-10-23 04:47:23 +01:00
Ben Hutchings 68bef0cc04 Release linux (4.7.8-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKPBAABCgB5BQJYB7RuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
 NTRDQjhGMzEzNDNDRjQ0EhxjYXJuaWxAZGViaWFuLm9yZwAKCRAFTLjzE0PPRKbv
 EACPw/ltBkYlQohcTxO+Jwg6Pj9J2UAcuQeDBsRLxOONLEcfChUtB6YbWnjpP4n7
 PBjFl1oXFlRL2AIp8yJJDNyLRApNHaIJ5Rw15OU0XBZi61iFkMhvZHtFUJI0VifU
 40otIo4/IAgWfYjcIl445m13bS21XzaYkT5hDmKihp1975gBP51LyVXtMPvYC2HO
 2grpj37HbDEhKfXSxPDG++ID20VrHOyKVNnfyzg9lOe0oNRT36j5i1QJtqQPekh1
 gWx98W/QqVpmeyRV1xvFjit2AzjwrIyp8H22wlN5IOG0HXitOrEA0AiQi1pjcMM0
 3O6wRmWTiOoiMiCQEQ+O+92U+uALTG0ssq/9rubAW70CieiQLKmQBZiSoY3JVDfl
 AojNP89QIx273w2aGQpZUY/RJnFWFy3fdh+c8wuLbTGkV3cCwXTd1VpNvi1EVKKK
 SjFytKI3AGLAihXiThbICSiynqsRKdh7ypWzoCF5OxdURk9/HXSOYpk0Ieuqze+R
 niLpETsVpfZCSHjjlG/7oaPAdGEqTm1BZ8a36HmzuByGftARwZ0XqaSUMsbOJC+n
 nZrljSt1migRNKcONPuAvVucOjtI6Bj52Azdq2KutQiKZt1Kie9jLSA32/VNT6u5
 xCRtMNQnatFCUqdJm5pI0pnUgdpL9nykbggY/g0uPBJfEg==
 =6RXa
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.8-1'
2016-10-23 04:43:12 +01:00
Ben Hutchings bc7a3c1c03 Update to 4.8.4
[rt] Drop fixes included in 4.8.4
2016-10-23 04:38:17 +01:00
Ben Hutchings 6f85def7ca Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6"
This reverts commits d7eadea702 and
5dbd80758c.  gcc-6 currently can't
compile the kernel on amd64 due to conflicts the way it enables PIE by
default.
2016-10-23 04:35:42 +01:00
Salvatore Bonaccorso 9586076613 Prepare to release linux (4.7.8-1). 2016-10-19 17:58:10 +02:00
Salvatore Bonaccorso c5c7172244 mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (CVE-2016-5195) 2016-10-19 17:56:02 +02:00
Salvatore Bonaccorso bcfd608039 Update to 4.7.8 2016-10-17 21:26:34 +02:00
Aurelien Jarno e7a457a218 [arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3. 2016-10-14 07:23:06 +02:00
Salvatore Bonaccorso 82d68fe753 KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042) 2016-10-13 22:50:12 +02:00
Ben Hutchings ae695bc66b scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425) 2016-10-13 00:24:49 +01:00
Ben Hutchings efccbd4eb2 posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097) 2016-10-13 00:23:11 +01:00
Ben Hutchings c27b72f255 net: add recursion limit to GRO (CVE-2016-7039) 2016-10-13 00:17:03 +01:00
Ben Hutchings 2456c48897 Update to 4.7.7
Ignore ABI change in CAN.
2016-10-11 23:18:44 +01:00
Ben Hutchings 49bfd9c5b2 aufs: Update support patchest to aufs4.8-20161010 (no functional change) 2016-10-11 20:02:43 +01:00
Ben Hutchings 387dbb7803 [rt] Update to 4.8-rt1 and re-enable 2016-10-11 19:58:48 +01:00
Aurelien Jarno b2080e6bd9 [mips*] Enable RELOCATABLE, required to enabled RANDOMIZE_BASE. 2016-10-10 20:53:23 +02:00
Ben Hutchings d288d4c41c Update to 4.8.1 2016-10-07 21:04:31 +01:00
Ben Hutchings 6429254d8f Release linux (4.7.6-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX9/r9AAoJEOe/yOyVhhEJaFIQANHw/AYqMiP/0fnT8TRl1ISq
 1jK7KhHKs4h7O+f4r/D31FLUAC+YVhpAqw4aHCiTwg9fjVULLcxaX91AAtpdliGm
 NhWPT7/p8S6SiLTZtVxEb8MAzNqTnN4UdoBMdetWvHYSD/zq5U/BSWCTmm5pOu+X
 E6mzwHdkgzUF/Wnt3bmmSmU415BG4nW6xIroYfH3DDSoj1pkxSW9BUhIv2L5mY25
 emjFyXMqYRKJ93CBbCewNy0sLiL1V94P0r8HIdo2JDQg1QecYnYtV0AC/2kZODhm
 9l3OyB6Dp20y5ib+t6/+4WqvmXl6XrvvjZMtHXsyv44gC1j7e0ChrXbsYk//4Lpo
 FgQ8IYaNLskPEXyjzNHhwt61i0BIfZmKSJ17ldkgofAmt+Wa1926jFih5twFu5fj
 pMkkxlJUZU7QKxEtuhC7bSOzRzoXjb+xx21Zgenhc89GamagRAKncFbRlJ6K+4pS
 SMVlnXuLC0MHlUnAxZQ/N7hdhS235UxSFBp3qyOrYDWmjxyXkItyRfd7SKeSk3Vx
 ZikpGlvsvExvyzrjTdyLwBmlyj2I+XZxGxOT2pe4EYb1xxLXUTBAqU1Ycsd8XjC3
 lUqTn3r29PYeXRYC9eUsJryLJjejdkTIssM5Y9hhoi9KjMnLptRS7tJAeCO+C8QF
 Qyhb3De7DCWrkcl8YSJI
 =fl9b
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.6-1'
2016-10-07 21:04:15 +01:00
Ben Hutchings 8645d4069f bug script: Optionally use sudo to read a restricted kernel log
If kernel.dmesg_restrict is enabled (which it now will be by default)
and sudo is installed, ask whether to use sudo.  If this is denied or
fails then fall back to writing a placeholder in the bug report.
2016-10-07 03:11:08 +01:00
Ben Hutchings f3b836ba7c security,printk: Enable SECURITY_DMESG_RESTRICT
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
Ben Hutchings d7eadea702 Compile with gcc-6 on all architectures 2016-10-07 02:33:25 +01:00
Ben Hutchings b597bdebea [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
Closes: #838604, #838605
2016-10-07 02:30:49 +01:00
Ben Hutchings 4c6ac698fb Prepare to release linux (4.7.6-1). 2016-10-07 02:11:51 +01:00
Ben Hutchings ec2dc97fc9 mm: memcontrol: use special workqueue for creating per-memcg caches 2016-10-07 00:59:09 +01:00
Ben Hutchings 34bf1f9c3f [amd64] Enable RANDOMIZE_MEMORY 2016-10-05 22:38:43 +01:00
Ben Hutchings 6573a2a7c7 security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
This hasn't been *accepted* upstream, but maybe some day?  It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings 0118390eaa [mips*] Enable RANDOMIZE_BASE 2016-10-05 21:13:04 +01:00
Ben Hutchings a6562544cc Update to 4.8 2016-10-05 21:06:42 +01:00
Ben Hutchings 224b1e126d [armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module 2016-10-02 16:34:25 +01:00
Ben Hutchings 78f97bb258 Add of_mdio fixes to make device tree fixed-link definitions work properly 2016-10-02 16:26:16 +01:00
Ben Hutchings 5e04e30299 Add bug number for KiBi's installer fix 2016-10-02 02:50:12 +01:00
Ben Hutchings 0fadb11944 Update to 4.7.6 2016-10-02 02:46:17 +01:00
Ben Hutchings ac65dbd50d udeb: Move nls_utf8 from fat-modules to kernel-image
Many other filesystems need it but vfat no longer does.  It calls
built-in UTF-8 functions directly, while nominally using nls_ascii
as its I/O charset.
2016-10-02 02:19:16 +01:00
Ben Hutchings b324a81a22 udeb: Fold core-modules into kernel-image
So many module packages depend on core-modules already that almost
every installer image includes it.

The only obvious exceptions are the sh4 installer builds, as there
was no core-modules package on sh4.  For consistency, include the
default set of modules in its kernel-image package now.
2016-10-02 02:16:10 +01:00
Cyril Brulebois b4bacd23c4 Add nls_ascii to the fat-modules udeb.
See commit 0e156c15e3 for the details
about utf8 vs. ascii iocharset for FAT. This fixes a regression with
EFI-related mounts within the Debian Installer.

Signed-off-by: Cyril Brulebois <kibi@debian.org>
2016-10-02 01:09:25 +01:00
Ben Hutchings f925c51d8a linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS on hppa) 2016-10-02 00:46:13 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 2aced7818a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
Ben Hutchings be7e4761f8 debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under dpkg-buildpackage
By default dpkg-architecture lets the current environment override the
architecture specified by the -a option.  We mustn't let that happen
here as we are considering all architectures.  Use the -f option to
force use of our specified architecture.
2016-09-26 22:31:21 +01:00
Ben Hutchings 1c213f98f9 Prepare to release linux (4.8~rc8-1~exp1). 2016-09-26 04:27:06 +01:00
Ben Hutchings 978f935022 Update to 4.8-rc8 2016-09-26 04:27:02 +01:00
Ben Hutchings b2480a3dfe Release linux (4.7.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX6HXOAAoJEOe/yOyVhhEJA68QAJSLxpMHBbl9474Q/SPonncf
 S7NXiYZQuo7STq0uHUVxtOTpVKRc/7y793tdtpI3Ec6nZqilS+4uKq1QNAh7kj6n
 JwilTLkfbjRS4+VqEEHJtVfK/bjijEep943W+uv3foMXPzbJulgRNrf54nUOFA2n
 WY1ZfL6Dp+tvys49UrK+3lsuY/ZCLzpck3m0rScGYgalfnZo00ttPto29YZjVXrp
 7RZset950hvEvL7cD7GXi2pqoEcvV3AISOABgKU0U6VitS1E8wJHW1pDZvHgZDKO
 55lAdyyEsAE96J1RzKwPjyHTKDmr1v6AiqNxwviLndwoLflYHUbsZBx0H9pRE0Gi
 45IDQELGFToJ/4dDNijk3oyOsQaV06f0gYv+FqGnN33IWxrlz9oQ3PSWB6qA9dr5
 vBGG1tzoYFdManBwZvH5smD25Ckc3TK2UzMqJA1BIjRpCoajxfmZWcgfPH8Z9gwJ
 5giCQkEKCbbwAXmRwVCYDFp5t0DlnyiY0/IizunHUxFapl9B6SNRFPhJVbUCNV07
 /yzsRU+TcNnV1oGQE9+uWTIelUQmc5cvMiaIlW7fifrqPAKCCnk2imYI1Tx1jsVl
 VqLo1Jalt+iZGKsEt6I3ST6LX1k/QFkz7BmJ4Yz+NdwwN6/Jq5rufFxLWGdIYPdI
 N4PnNBVMK0ooLqbaatRO
 =PYYu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.5-1'

Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00
Ben Hutchings f7d84f7a69 Prepare to release linux (4.7.5-1). 2016-09-26 01:48:21 +01:00
Ben Hutchings 7a0f81fe53 ext4: Fix checksum validation for inodes with small i_extra_isize
Closes: #838544, regression in 4.7.4
2016-09-25 22:00:56 +01:00
Ben Hutchings bdec0fe8f0 Update to 4.7.5 2016-09-25 03:05:35 +01:00
Ben Hutchings c0b958cd5f [powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
Currently on powerpc, powerpcspe and ppc64 we get an automatic dbgsym
package with symbols for the bootwrapper tools (addnote, hack-coff,
mktree).  We should either put them in linux-image-*-dbgsym or
nowhere.  For now, opt for nowhere.

Move the dh_strip invocation from the install-base rule to the
install-image_... rule.  None of the other packages using install-base
should contain any executables.
2016-09-23 03:21:18 +01:00
Ben Hutchings 24358fda8e [hppa] tracing: Re-enable FTRACE 2016-09-23 00:53:08 +01:00
Ben Hutchings 9067a5df84 [hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux (really closes: #837588) 2016-09-23 00:51:50 +01:00
Ben Hutchings 656e46ab02 Update to 4.8-rc7 2016-09-22 03:25:31 +01:00
Ben Hutchings 04355bf580 [armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
Originally done in 4.7.4-1 then reverted due to ABI breakage.
2016-09-22 01:19:37 +01:00
Ben Hutchings b37c595561 Release linux (4.7.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX4HvgAAoJEOe/yOyVhhEJq9cP/j1XO1dNpOXxq0JZod66K1sl
 JIC4LPZ3i+kiAD0amMZiAexAuCpqCDjinjVr/pAhEoAa79983tFoY9yWjDCAW+9H
 0j7Torb5wQ76BlyXCjSoaztcQmzQ1YiCvjIzk4hCJCcvqdTuA1MMr7+AbXAgi3xE
 Es/G7ai+7SK5suEYgsbliM2ndFFMtIDqgpvDVDFNBDt61m2RXKxw7SQwyItIx+Hn
 n7Aq/P+LP7BjMSP6nW6EafF/RidbAwq4x+FKqzGyZhVQV7c3YFbh0EA7lVcTDhC7
 A1ZbdeUjiFhUKchRPa56qf+eAI8sBEeU3Ga1mhpkxL8RkFKwvWmmB2J0tBE7KHgw
 WCy+8nPxnLAq3eVIkOcB3MuvNdM9DvvtQ7X5NjXnBIfq06OX4y+C+udMpafmegTG
 5YB3FVppFQNGZcOxeF9hCQspHGvBsTGRYoK3hxzx4AY94E1cakl08oZte4dHYALz
 GvP/tjbLH5i/g9djVNGtfZCHKMZbDq2QhD60GNwFoN/ssX4Q/L3q4N+eyJD9KoQM
 Bu44v1ZY7M13F4t5JUomjU2e5mze3opxEB2C7vIoyJfaUvtAWX/mn8SysDGdT0OJ
 zd8ow6IntzcL+mqxrarOPMenSt2yqoQ6WdkYkpF5aCTj2GJyAkU7dUWfWdKWtLM7
 yjuIvqRAcVzMU9XuU8uf
 =s0s4
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.4-2'

- Drop ABI references and ABI maintenance patches
- Fix Kconfig symbols for omapdss sub-drivers, which were renamed for 4.8
2016-09-22 01:17:51 +01:00
Ben Hutchings 95d8991d55 Prepare to release linux (4.7.4-2). 2016-09-19 22:09:42 +01:00
Ben Hutchings 7c621c6961 [hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS) 2016-09-19 19:56:18 +01:00
Ben Hutchings 04accecc7b [armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI change (fixes FTBFS) 2016-09-19 18:28:33 +01:00
Ben Hutchings 5a8adae35b [arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO" (fixes FTBFS) 2016-09-19 18:10:01 +01:00
Ben Hutchings aaa85335e1 Prepare to release linux (4.7.4-1). 2016-09-18 14:56:02 +01:00
Ben Hutchings 35221d0e23 bug script: Stop describing TAINT_UNSIGNED_MODULE as expected 2016-09-18 14:46:25 +01:00
Ben Hutchings b8c6a37dd9 Wrap a long line in changelog 2016-09-17 00:24:47 +01:00
Ben Hutchings 25ac8ad209 [armhf] Enable drivers and options for OpenPandora console
POWER_AVS_OMAP as built-in; DISPLAY_CONNECTOR_ANALOG_TV,
DISPLAY_PANEL_TPO_TD043MTEA1, SENSORS_TWL4030_MADC, VIDEO_OMAP3,
BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA, HDQ_MASTER_OMAP as modules;
OMAP2_DSS_DSI

Closes: #835893, thanks to Vagrant Cascadian
2016-09-17 00:22:55 +01:00
Ben Hutchings ec2a255f35 [armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1)
B53, B53_MDIO_DRIVER as modules

Closes: #836231, thanks to Vagrant Cascadian
2016-09-17 00:12:49 +01:00
Ben Hutchings 96e33a9436 [armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy)
MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules

Closes: #836251, thanks to Vagrant Cascadian
2016-09-17 00:06:43 +01:00
Ben Hutchings 550ac5c6dc linux-image: postrm: Make failure of rmdir on purge non-fatal (Closes: #836282) 2016-09-16 23:49:36 +01:00
Ben Hutchings fca831a4d1 [armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in nic-modules
Closes: #837110, thanks to Vagrant Cascadian
2016-09-16 23:29:04 +01:00
Ben Hutchings 45fbf5a22f [armhf] Enable drivers for Novena
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules

Closes: #837627, thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
Ben Hutchings 2d327101d1 [arm64] mm: Limit TASK_SIZE_64 for compatibility 2016-09-16 16:40:35 +01:00
Ben Hutchings 888d6ec092 linux-doc: Exclude Sphinx support code and Makefiles 2016-09-16 16:40:35 +01:00
Ben Hutchings 51f0aa4b84 linux-headers: Stop including unused arch/*/kernel/asm-offsets.s files 2016-09-16 16:40:35 +01:00
Ben Hutchings 725eaac2b5 Set -fdebug-prefix-map=... in compiler options for kernel and userland
For userland we already got this through dpkg-buildflags, but it uses
the current directory rather than the source package's top directory
as the default 'old' path.  Set DEB_BUILD_PATH to fix this.
2016-09-16 16:40:35 +01:00
Ben Hutchings ab1ec6c094 linux-source: Exclude Python bytecode generated when running Sphinx 2016-09-16 16:40:32 +01:00
Ben Hutchings ec5c662dbf Add Héctor's recent changes to the changelog 2016-09-16 16:40:07 +01:00
Ben Hutchings 5e2573002f Update to 4.7.4 2016-09-15 20:27:23 +01:00
Ben Hutchings 900cf04cac xen-linux-system: Relax dependency on linux-image to allow for version suffix added by linux-signed
I don't know what the suffix is going to be next time we need to add
it, but it will sort lower than the '+deb' suffix added for stable
security updates.
2016-09-15 17:06:43 +01:00
Ben Hutchings 22a9e16882 liblockdep-dev: Add dependency on liblockdep<version> (Closes: #837710) 2016-09-13 20:33:06 +01:00
Ben Hutchings ab1157972f [powerpcspe] xmon: Don't use ld on 32-bit (Closes: #836741) 2016-09-12 20:38:54 +01:00
Ben Hutchings 1dda9dd218 [hppa] Disable FTRACE due to huge size cost (Closes: #837588) 2016-09-12 20:28:04 +01:00
Ben Hutchings 09db94d1de [arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs 2016-09-10 01:20:05 +01:00
Ben Hutchings 63e9d321c9 mm, oom: prevent premature OOM killer invocation for high order request
Fixes a regression in 4.7 and someone already asked for this.
2016-09-09 20:49:48 +01:00
Ben Hutchings 5f7e2d6a98 i8042: Revert ABI break in 4.7.3 2016-09-09 02:26:58 +01:00
Ben Hutchings db336de154 [amd64] Enable SIGNED_PE_FILE_VERIFICATION, KEXEC_FILE, KEXEC_VERIFY_SIG, KEXEC_BZIMAGE_VERIFY_SIG 2016-09-07 22:09:23 +01:00
Ben Hutchings 7dd9d01ac5 Update to 4.7.3 2016-09-07 22:07:27 +01:00
Ben Hutchings 1ee2ca9d30 Prepare to release linux (4.8~rc5-1~exp1). 2016-09-07 21:52:47 +01:00
Ben Hutchings 0e5f2ca52a Enable BH1780 as module instead of SENSORS_BH1780 2016-09-07 21:33:23 +01:00
Ben Hutchings bb9f2e4f50 Fix list item markers in changelog 2016-09-07 21:32:50 +01:00
Ben Hutchings 95a7eda177 Update to 4.8-rc5 2016-09-07 21:27:44 +01:00
Ben Hutchings 7a4881e4d1 linux-doc: Build and install HTML pages from reStructuredText sources
- Add python-sphinx and python-sphinx-rtd-theme to Build-Depends-Indep
- Install files from both HTML output directories into the package
- Exclude RST sources from the package
2016-09-04 15:39:34 +01:00
Ben Hutchings 87d08943da liblockdep: Stop trying to build packages, as it failed to build again 2016-09-04 03:46:54 +01:00
Ben Hutchings a0fdc8e585 [arm64] Add cpu_to_fdt32() when setting Secure Boot flag in FDT 2016-09-03 18:35:05 +01:00
Ben Hutchings 8dccb841ee Update to 4.8-rc4 2016-09-03 13:00:10 +01:00
Martin Michlmayr 267130493a [arm64] Enable Hisilicon Ethernet devices 2016-08-29 21:25:22 -07:00
Martin Michlmayr ec43be6f74 [arm64] Enable TI WLAN (WLAN_VENDOR_TI) 2016-08-29 21:22:16 -07:00
Martin Michlmayr 96bde36948 [arm64] Enable more HISI options 2016-08-29 21:20:48 -07:00
Martin Michlmayr 5532e797b2 [arm64] Enable USB_DWC2 and USB_DWC3 2016-08-28 14:43:45 -07:00
Martin Michlmayr 9f32d6a1dd [arm64] Enable support for BCM2837 (Raspberry Pi 3) 2016-08-28 14:43:40 -07:00
Ben Hutchings cce3a89e12 Update config for 4.8 2016-08-28 21:51:18 +01:00
Martin Michlmayr 65105d535d [arm64] Enable more QCOM options
Enable MSM_GCC_8996, MSM_MMCC_8996, QCOM_HIDMA, QCOM_HIDMA_MGMT,
PCIE_QCOM, PINCTRL_MSM8996, QCOM_Q6V5_PIL.
2016-08-28 12:30:40 -07:00
Martin Michlmayr 43a9c9242b [arm64] Enable more Tegra options: TEGRA_ACONNECT 2016-08-28 12:28:17 -07:00
Ben Hutchings 1222968771 Update to 4.8-rc3 2016-08-28 19:52:50 +01:00
Ben Hutchings 75b51a8352 Prepare to release linux (4.7.2-1). 2016-08-28 15:56:10 +01:00
Ben Hutchings d66fc07342 debian/rules.real: Avoid error message when usbip's config.h doesn't exist
usbip has its own version number which we combine with the source
package version, which is assigned to VERSION for the install-usbip
target (only).  We find the version number by processing the config.h
file created by autoconf.  The file always exists before the
install-usbip rule is invoked, but the target-specific definition of
VERSION is still evaluated whenever debian/rules.real is used,
resulting in confusing (though harmless) error messages about a
missing file.

We could change VERSION to be a recursively-expanded variable, but
then it would still be evaulated multiple times.  Instead, move the
definition of VERSION into the target's commands.
2016-08-28 15:42:31 +01:00
Ben Hutchings 47ba702e2c liblockdep: Move dummy definition of prandom_u32() to fix missing declaration 2016-08-28 15:03:02 +01:00
Ben Hutchings 68902cad17 Change RXKAD and SERIAL_8250_FINTEK from =m to =y
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
Ben Hutchings 2c76695c24 aacraid: Check size values after double-fetch from user (CVE-2016-6480) 2016-08-27 23:17:17 +01:00
Ben Hutchings 0db6147b7d tcp: fix use after free in tcp_xmit_retransmit_queue() (CVE-2016-6828) 2016-08-27 23:14:24 +01:00
Ben Hutchings 0a8dfe2ccc [arm64] Add support for securelevel and Secure Boot
Closes: #831827, thanks to Linn Crosetto
2016-08-27 22:17:30 +01:00
Ben Hutchings 0e156c15e3 fat: Mitigate the lack of UTF-8 case folding
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names).  And it has to do case
folding in multiple encodings.  Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238.

The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding.  Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.

Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
Ben Hutchings 6ab7944873 kbuild: Do not export variable name with hyphen (Closes: #833561) 2016-08-26 01:43:33 +01:00
Ben Hutchings c464b2eb4b [powerpc*] ipmi: Enable IPMI_POWERNV as module (Closes: #833861) 2016-08-26 00:16:54 +01:00
Ben Hutchings 5c0b3b2b37 aufs: Update support patches to aufs4.7-20160822 (Closes: #834764) 2016-08-26 00:06:54 +01:00
Ben Hutchings fe9ef5846d Add bug closure for last commit 2016-08-25 23:52:35 +01:00
Nicolas LE CAM 7663bbdd65 [amd64] Suggest grub-efi-amd64 instead of grub-efi dummy transitionnal package
[benh: Update changelog]
2016-08-25 23:51:35 +01:00
Ben Hutchings 68c8135d73 Add hppa/parisc bug fixesfrom Helge Deller 2016-08-25 18:30:06 +01:00
Ben Hutchings dd5413ffc1 [arm*] Enable SECCOMP (Closes: #833183) 2016-08-25 18:25:02 +01:00
Ben Hutchings a45b0ae0a3 Note that the previous changes to exclude unreproducible files close #830268 2016-08-25 01:30:01 +01:00
Ben Hutchings 28eab7aa6b linux-headers: Exclude all .cmd files
These are not needed for building OOT modules and their contents may
vary depending on whether /bin/sh is bash.
2016-08-25 01:30:01 +01:00
Ben Hutchings 7231d9e75a usbip: Put all autotools-generated files in the build directory
Currently the linux-source-<version> package may or may not include
these files, depending on the order things are built in.

As autotools always modifies the source directory, copy (rsync) the
source to the build directory and build in-place there.
2016-08-25 01:29:57 +01:00
Ben Hutchings 2fddcf7c7f usbip: Use the locally-installed <linux/usbip.h>
Some years back I patched the #include of <linux/usbip.h> to include
the current, uninstalled version through a relative path because the
system-installed version will normally be outdated.  We're about to
start copying the source to avoid writing autotools crap into the
source directory, which breaks this relative path.

Since we now install the UAPI headers under debian/build at the start
of the tools build, drop the patch and add that directory to the
include path.
2016-08-25 01:28:48 +01:00
Ben Hutchings 7a54b56ad5 Merge branch 'sid'
Drop rt patchset updates as they don't apply to 4.7.

Drop various other patches already in 4.7.

Fold the remaining Debian changes in the open changelog entry for 4.6.7-1
into the open changelog entry here.
2016-08-24 20:43:19 +01:00
Ben Hutchings f445dbb9d9 Update to 4.7.2
Note the CVE IDs and Debian bugs fixed.

Drop the patches that have gone upstream.
2016-08-24 20:40:14 +01:00
Ben Hutchings 1d2857f9c5 [armfh] udeb: Add efi-modules 2016-08-24 01:03:04 +01:00
Salvatore Bonaccorso acf840d3f5 Further cleanup debian/changelog entry for 4.6.7 2016-08-16 22:05:35 +02:00
Salvatore Bonaccorso a8f98e5162 [rt] Refresh 4.6.5-rt10 patchset for rebase to 4.6.7 2016-08-16 12:46:56 +02:00
Salvatore Bonaccorso a7280813ac Update to 4.6.7 2016-08-16 11:13:39 +02:00
Ben Hutchings d48b7fcde1 Clean up changelog for 4.6.6 stable update
Add architecture/flavour qualifications; delete changes to
architectures and drivers we don't build.
2016-08-12 16:40:02 +01:00
Ben Hutchings d42cdc5bfe audit: fix a double fetch in audit_log_single_execve_arg() (CVE-2016-6136) 2016-08-12 16:27:20 +01:00
Ben Hutchings 8bc5e687b1 [powerpc*] KVM: Book3S HV: Save/restore TM state in H_CEDE (CVE-2016-5412) 2016-08-12 16:25:34 +01:00
Ben Hutchings aebb6e776f udeb: Include cdc_ncm in nic-usb-modules (Closes: #833918) 2016-08-12 15:59:19 +01:00
Salvatore Bonaccorso 7184d7bfd9 tcp: make challenge acks less predictable (CVE-2016-5696) 2016-08-12 06:52:28 +02:00
Uwe Kleine-König c4c4bb74e0 merge my two groups of log entries
I wonder why dch didn't do the right thing from the start
2016-08-11 22:19:53 +02:00
Uwe Kleine-König a9d7770fa3 [rt] fix conflicts between v4.6.6 and v4.6.5-rt10 2016-08-11 22:13:58 +02:00
Uwe Kleine-König aad68942e4 [rt] Update to 4.6.5-rt10 2016-08-11 21:43:53 +02:00
Salvatore Bonaccorso 3ff8b0fe18 Add CVE reference for CVE-2016-5400 2016-08-11 16:39:01 +02:00
Salvatore Bonaccorso 457d8bb6bd Update to 4.6.6 2016-08-11 16:29:28 +02:00
Martin Michlmayr 610bb612cf Enable more Qualcomm options
Enable more Qualcomm options required by the DragonBoard 410c.

PINCTRL_QCOM_SPMI_PMIC was changed to built-in in line with
other similar options.
2016-08-05 17:43:42 -07:00
Ben Hutchings d5ac562bf2 Drop my name from the upstream stable update 2016-08-05 19:51:19 +01:00
Ben Hutchings 3a410c0e4d Bump ABI to 2 2016-08-05 19:49:46 +01:00
Ben Hutchings df9be3c95e linux-kbuild: Include headers_install.sh and unifdef (Closes: #832359) 2016-08-05 19:15:54 +01:00
Salvatore Bonaccorso c0e269c0cd libata: LITE-ON CX1-JB256-HP needs lower max_sectors
Closes: #830971
2016-08-05 15:40:08 +02:00
Martin Michlmayr ce0127a26b [arm64] Enable more Tegra related options
Enable options for Tegra-baseddevices Jetson TX1 and Google Pixel C.

This is based on upstream commit 10a7b37b5b969d9998912e50946f7a03111037eb
2016-08-02 17:39:40 -07:00
Martin Michlmayr 1b4a6ac3f2 [arm64] Build in SERIAL_TEGRA
For consistency with other SERIAL_ options.
2016-08-02 16:50:12 -07:00
Martin Michlmayr a546b9192c [arm64] Enable ARM64_ERRATUM_834220 2016-08-02 16:36:28 -07:00
Martin Michlmayr 3da99236e3 [arm64] Enable REGULATOR_FIXED_VOLTAGE
Enable REGULATOR_FIXED_VOLTAGE which is used at least by the NVIDIA
Jetson TX1.
2016-08-02 15:55:13 -07:00
Martin Michlmayr 02b2135a4b Add USB support for NVIDIA Jetson TX1 Developer Kit
Add patches from 4.8-rc1 required for USB support on the NVIDIA Jetson
TX1 Developer Kit.
2016-08-02 15:54:01 -07:00
Salvatore Bonaccorso c2a8f662b5 vfs: ioctl: prevent double-fetch in dedupe ioctl (CVE-2016-6516) 2016-08-02 06:47:28 +02:00
Martin Michlmayr 75ed810e36 [armhf] Enable HW_RANDOM_BCM2835
This was built already implicitly but let's add it explicitly.
2016-07-31 15:28:39 -07:00
Martin Michlmayr 49a2579f52 [armhf] Enable MMC_SDHCI_IPROC 2016-07-31 15:23:38 -07:00
Uwe Kleine-König f8edc4357a Fix perf to be able to find debug info based on build-id. 2016-07-31 22:35:09 +02:00
Ben Hutchings e8c1b8e306 Update to 4.6.5
Drop patches applied upstream.

There are some ABI changes still to be resolved.
2016-07-31 01:50:59 +01:00
Ben Hutchings 0ddaf6aed3 cgroups: Enable memory controller by default 2016-07-29 12:23:32 +01:00
Ben Hutchings 7aa0b02a27 Clean up kconfig with the aid of kconfigeditor2
Re-enable various options disabled by name changes in 4.7.

Delete options completely removed in 4.7.
2016-07-20 04:13:49 +01:00
Ben Hutchings 50f9dba92e sched: Enable SCHEDSTATS (Closes: #796674) 2016-07-20 03:55:56 +01:00
Salvatore Bonaccorso 9da8616b57 Prepare to release linux (4.6.4-1). 2016-07-18 21:58:05 +02:00
Ben Hutchings 2b5e0aac58 Prepare to release linux (4.7~rc7-1~exp1). 2016-07-14 13:35:22 +01:00
Ben Hutchings 55947fe980 Revert "debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed"
This reverts commit f513bc42ae.  Bug
2016-07-14 13:34:20 +01:00
Ben Hutchings 6d39ffde84 Change names and descriptions of debug symbol packages to match debhelper 2016-07-14 11:42:15 +01:00
Ben Hutchings 619cd907a8 debian/lib/python/debian_linux/debian.py: Handle packages with only short descriptions 2016-07-14 11:41:47 +01:00
Ben Hutchings 775cc1229e Define Auto-Built-Package field when running dpkg-gencontrol
dpkg-source doesn't like to see it in debian/control.
2016-07-14 11:25:16 +01:00
Ben Hutchings 4e86887dda Update to 4.7-rc7 2016-07-14 10:50:31 +01:00
Ben Hutchings b19064d381 [rt] Update to 4.6.4-rt6 (no functional change) 2016-07-14 00:40:00 +01:00
Ben Hutchings bd2f2b2ea4 bridge: Fix ABI change in 4.6.4 2016-07-14 00:33:32 +01:00
Salvatore Bonaccorso f000506362 apparmor: fix oops, validate buffer size in apparmor_setprocattr() (CVE-2016-6187) 2016-07-13 20:30:05 +02:00
Salvatore Bonaccorso 1a1a829223 Update to 4.6.4 2016-07-13 17:57:14 +02:00
Ben Hutchings 38ec618a21 fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS (Closes: #690737)
Various free and proprietary AV products use this feature and users
apparently want it.  But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that.  So warn and taint the kernel if this feature is
actually used.
2016-07-13 01:53:59 +01:00
Uwe Kleine-König 0818af71cc Cherry pick patches for rtc-s35390a from next
This fixes shutting down some QNAP NAS devices after being waked up by
the rtc.
2016-07-12 21:44:39 +02:00
Bastian Blank 5e52b9de5c Build debug symbols for all images 2016-07-07 19:43:59 +02:00
Bastian Blank cf16dd6fec Move debug symbols into the debug archive
Currently the extra setting Auto-Built-Package: debug-symbols is needed
to actually move it in addition to the debug section.
2016-07-07 19:43:59 +02:00
Ben Hutchings 227bd93ded Release linux (4.6.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV3yLEue/yOyVhhEJAQrB2hAAg7HB6NkS0qupN5a/pjupxrtDzbWAoCKH
 uv3lbVe+y13lp5tMDB4ZeALxQf7/YHKqKF6ZUUvPx5oYyRtlE3qvqEVuwtd4CLmg
 81SIIJYLZKxom9snqoJz7kjf48B4iBiJv/LXJbDx1ulE9jS1C44crwR6gIa0Bv3x
 88OjmpSFrHafetM7TF+ZR27NapBnxlwvGpBay3fjjLl+WAUKawZd7dfZ/V5f964M
 2SmKkjBzUg2ULdRzwv83X2kf2PDuv7FrEeVexbeWvbnfea2yu0s/Y77EcQFFuAUY
 ffsIrEtO7yvPKLF2np070UG9maKyOa4T450CxrFsR1bL4EvJUjRClJias1XqePn4
 mAUVfzMKB3FPAYtn78wxo7QD2c4ymYL0MQU2IGVn1WQYf0zaCszvbMmAJjJY6PND
 mQlD0rtYYKHVde3fjuxb2gbji93L88b2kj9m74PpwIo44sGuzXiX4PJLYcJpcTnq
 WzckVD5j/Kmw5lH/q/zDhWt1QlA7+YfE9kYDT/LFc4Vo24eGLcFhJWuXy+ICMK2j
 4n5i5cnWOvpyYAJW7epu0VCKL8qj7DH70Eff8dNi6gfXwZCRTvJMpjpt4P99Q8k3
 coCvQR5KyiWVPKc/xBnTYadr2blWRgm+GcN27x2PykONlYNhjsxHh7Ea7faGBFEt
 kwdBl15bzSE=
 =uSZq
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.3-1'

Drop patches included upstream.

Drop ABI maintenance changes.
2016-07-06 22:08:50 +02:00
Ben Hutchings c78d9ff512 Update to 4.7-rc6 2016-07-06 22:06:27 +02:00
Ben Hutchings 2064fe3730 Prepare to release linux (4.6.3-1). 2016-07-04 20:10:24 +02:00
Ben Hutchings ade54804a1 [powerpc*] tm: Always reclaim in start_thread() for exec() class syscalls (CVE-2016-5828) 2016-07-03 16:33:29 +02:00
Ben Hutchings aab434acde [x86] Fix incompatiblity between kaslr and hibernation
* [amd64] power: Fix crash whan the hibernation code passes control to the
  image kernel
* [x86] KASLR, power: Remove x86 hibernation restrictions
2016-07-02 19:29:28 +02:00
Ben Hutchings f513bc42ae debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed 2016-07-02 09:44:37 +02:00
Salvatore Bonaccorso 3c35987b05 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (CVE-2016-5829) 2016-06-30 14:53:31 +02:00
Ben Hutchings 419d6356df Update to 4.6.3 2016-06-27 00:58:54 +02:00
Ben Hutchings 15c473a9c7 Prepare to release linux (4.6.2-2). 2016-06-25 11:22:27 +02:00
Salvatore Bonaccorso c42ea367e3 Add CVE identifier for nfsd issue 2016-06-25 07:22:30 +02:00
Ben Hutchings 0bb71866b7 Ignore ABI change in x_tables 2016-06-25 02:05:12 +02:00
Ben Hutchings 12183bf924 nfsd: check permissions when setting ACLs (CVE-2016-XXXX) 2016-06-25 00:56:15 +02:00
Ben Hutchings 9fd7bbdf1a netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings f5f99415a2 percpu: Fix synchronization with chunk destruction (CVE-2016-4794) 2016-06-25 00:19:08 +02:00
Ben Hutchings b782c52536 KEYS: potential uninitialized variable (CVE-2016-4470) 2016-06-25 00:18:47 +02:00
Martin Michlmayr fcf753ae77 [armhf, arm64] Enable DRM_TEGRA_STAGING
DRM_TEGRA_STAGING must currently be enabled in the kernel and libdrm
must be built with --enable-tegra-experimental-api.  Our libdrm package
already does the latter (at least on armhf), so enable the former as
well.
2016-06-23 18:13:27 -07:00
Ben Hutchings e25a0f09c3 Merge remote-tracking branch 'alioth/master'
Conflicts:
	debian/changelog
2016-06-21 20:44:48 +01:00
Aurelien Jarno 9e45452683 [mipsel] Remove loongson-2e and loongson-2f flavours (Closes: #827790). 2016-06-21 21:11:23 +02:00
Ben Hutchings e4b00d29cc Prepare to release linux (4.7~rc4-1~exp1). 2016-06-21 00:41:23 +01:00
Ben Hutchings eb1373a157 Update to 4.7-rc4 2016-06-20 13:40:09 +01:00
Ben Hutchings b9ef626a40 [rt] Update to 4.6.2-rt5 2016-06-19 22:11:38 +01:00
Ben Hutchings e65d07eb2b [armel] Disable module signing for all flavours (fixes FTBFS)
We only build udebs for modules that will not be signed, but we don't
currently have a way to selectively build udebs for only some
flavours.
2016-06-19 19:36:05 +01:00
Ben Hutchings 4981b73c71 Prepare to release linux (4.7~rc3-1~exp1). 2016-06-18 23:50:39 +01:00
Ben Hutchings 5e48a143f6 debian/control: Add workaround for libdpkg-perl bugs #827628, #827633
Dpkg::Deps has a couple of bugs that were resulting in the
libssl-dev:native build-dependency being discarded by dpkg-source.
2016-06-18 23:49:47 +01:00
Ben Hutchings 60b1e00fa0 Note closure of bug #827618 2016-06-18 21:30:55 +01:00
Ben Hutchings a808d3112b Release linux (4.6.2-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABCgAGBQJXYbBEAAoJEAVMuPMTQ89EM8wP/3llI8Jr6Q+2ktVOqYQ7U0JT
 +UEzEuKlVS+3/SjFZv8dAqpM018OJDIiccgzjvuny6MSYHiH//yWG4lC8O2WikBA
 RhfbUsNWFImEkwhY8wD1cjuF0QIXNtR7qOKdCPX5wQUiG469WF4F4l3lgWoo01ub
 hYXNsGebIjZTQE6KWGm97pvSRNFPT18DulANGpe9m804y2Xs+dQn6dVHKaSYT0BF
 labA6C+hCmbMos3gEYNzjbmU9fxYpS98pXq7uc04ryBj3UjGoBlmxeip9yrIiC0I
 oZr8kAxz5PCRSqPnhZqE51WO6eLaWIrEGGTnb6sOtbHYsTrNu8iHpWXVCkB8/2GL
 LYhOJn3AyqJE4yb69EKSWL7cbVEqyVJHkGntGhTm+tKJP0QmnKlhQY47aViPt4Fc
 IXQvUOeG94GROooRTNLp9/3N2di4p4YPNv2QgM5lUJjySWUMCNzw/MjpYfvuIHrp
 bowSN5EYDpO6WqcZZVHogM9hJ2Aq+zWYkfK4f38r4T4+g0T8IQ8qMCY/o/LV7uod
 KUbQ7SIHK7uAMT9BpJuslCwvwhKdf/9y/bcuOkB2alfR52uApdDkL04uD5jIbjaL
 fElOyQPmJPNe0zxP6yZp4G3/JbMhWdX+qc77+GWkj27mBqnBEZKBHjCmU/6Vfv2Y
 VolsoZ6sfxJ1pxlUcWPt
 =li3O
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.2-1'
2016-06-18 12:59:57 +01:00
Ben Hutchings 7f701b08f9 Update to 4.7-rc3 2016-06-18 12:53:02 +01:00
Ben Hutchings 9edbacb8a5 MIPS: libgcc: Fix ABI change in 4.6.2 2016-06-17 01:50:50 +01:00
Ben Hutchings 966488336f [mips*] Fix ABI change in 4.6.2 2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso 86e7845331 Prepare to release linux (4.6.2-1). 2016-06-15 21:45:02 +02:00
Ben Hutchings ece80cbbec liblockdep: Add all the patches submitted upstream; drop one that's obsolete
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Aurelien Jarno 70251fbb57 [ppc64*] Enable SPAPR_TCE_IOMMU, VFIO and VFIO_PCI (Closes: #826367). 2016-06-13 22:51:06 +02:00
Ben Hutchings 8bef69e784 Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-06-13 02:08:57 +01:00
Ben Hutchings 0ad327058f Fix build rules for userland tools to support cross-building
Pass $(CROSS_COMPILE) or host GNU type through to upstream build rules.

debian/rules.real: Filter tools packages by host arch, not build arch

debian/rules.d/Makefile: Build the tools needed for headers_install in
a separate subdirectory
2016-06-13 02:06:19 +01:00
Ben Hutchings a7ebaf2684 Add support for the nopython build profile, disabling the linux-perf package
Currently we build-depend on the native python (via asciidoc), and on
the host python (via python-dev).  As these are not coinstallable it
is impossible to perform a complete cross-build.  Until that's resolved,
this will allow cross-building of most of the package with the
combination of the 'cross' and 'nopython' profiles.

(This also sidesteps the issue of perf wanting a multilib compiler.)
2016-06-13 02:04:39 +01:00
Ben Hutchings 0aceb8739a debian/control: Fix build-dependencies for cross-building
The current cross-compiler packages don't set the Multi-Arch field, so
specify that the cross-compiler package must be native, rather than any
architecture.

flex doesn't support multi-arch, and this would require splitting it
(#611230, #761449).  Force use of the native package for now.

openssl doesn't support multi-arch but probably easily could (#827028).
Force use of the native package for now.

We need the native libssl-dev while building the kernel itself and the
host libssl-dev while building tools for linux-kbuild.

Document the state of cross-building in README.source.
2016-06-13 02:02:54 +01:00
Ben Hutchings cc2ac0be61 debian/README.source: Document the supported build profiles 2016-06-13 00:38:28 +01:00
Ben Hutchings 1ed7b4bdf1 linux-cpupower: Define PACKAGE_BUGREPORT to refer to reportbug, not upstream 2016-06-13 00:23:09 +01:00
Ben Hutchings 7d8366f375 debian/rules.d/Makefile: Override architecture detection when building userland headers
Martin Michlmayr found that userland builds fail if 'uname -m' reports
the native kernel architecture, and that's because we don't explicitly
set ARCH for the headers_install target.  That's fine for most cases
of a 32-bit chroot on a 64-bit kernel because a single source
architecture covers both, but arm/arm64 is an exception.

This doesn't make actual cross-builds of userland tools work.
2016-06-12 20:47:56 +01:00
Martin Michlmayr 66c93587c9 [armhf] Enable SPI_TEGRA114 2016-06-12 11:58:47 -07:00
Martin Michlmayr 2f9a7600a6 [arm64] Enable MAX77620 and PCA9539 which are required by Jetson TX1
Enable some options used by the Jetson TX1 board.  MAX77620 is used
as system PMIC and PCA9539 as I2C GPIO bus expander.

Set I2C=y since this is required by MFD_MAX77620.

CONFIG_GPIO_MAX77620 and CONFIG_GPIO_MAX77620 are not upstream yet
but will be.  I'm adding the options now to make the commit cover
everything needed.

This is patched on a patch submitted upstream by Laxman Dewangan.
2016-06-11 22:27:41 -07:00
Martin Michlmayr 14a65240ad [arm64] Enable more QCOM options 2016-06-11 00:32:32 -07:00
Martin Michlmayr 8d2b25e989 [armhf] Enable TEGRA_SOCTHERM 2016-06-11 00:29:15 -07:00
Martin Michlmayr 6902e92ec8 [arm64] Enable THERMAL
We had some thermal options in the config file but they weren't enabled
because CONFIG_THERMAL wasn't enabled.
2016-06-11 00:25:35 -07:00
Martin Michlmayr cb248f2010 [arm64] Enable TEGRA210_ADMA 2016-06-11 00:21:15 -07:00
Martin Michlmayr 25e663afc5 [armhf, arm64] Enable PHY_TEGRA_XUSB and USB_XHCI_TEGRA 2016-06-11 00:20:18 -07:00
Salvatore Bonaccorso 95cba203d5 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244) 2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso f1921659a4 Add missing changelog entry for CVE-2016-5243 2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso 91d6f22ed8 Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
proc: prevent stacking filesystems on top

ecryptfs: forbid opening files without mmap handler

sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings ff5804f208 cpupower: Bump soname version and rename library package accordingly 2016-06-10 14:47:48 +01:00
Ben Hutchings 906f7b1351 Update to 4.7-rc2
[rt] Disable until it is updated for 4.7 or later
2016-06-10 14:47:48 +01:00
Ben Hutchings 72f58e83ea linux-image: Add '-unsigned' suffix to packages with modules that will later be signed 2016-06-10 14:47:47 +01:00
Ben Hutchings 5a1dc12690 udeb: Drop packages for modules that will later be signed
These packages will be taken over by src:linux-signed.  Still do
everything but building the packages so we find configuration
errors before building linux-signed.
2016-06-10 02:54:44 +01:00
Ben Hutchings 2622600fec [armel,armhf,sh4] linux-image: Do not suggest fdutils
BLK_DEV_FD has *never* been enabled on any of these architectures!
The old arm/footbridge configuration did enable it and this suggestion
seems to be have been thoughtlessly copied over to these other
architectures.
2016-06-09 17:44:47 +01:00
Ben Hutchings 1537ff1314 Update to 4.6.2 2016-06-09 17:44:47 +01:00
Ben Hutchings fb5d796272 Move merge_packages function from debian/bin/gencontrol.py to gencontrol module
linux-signed will use this function in future.
2016-06-08 23:24:07 +01:00
Ben Hutchings 5cdbf6167d bug script: Put binary package name and version in the info file so linux-signed can easily replace them 2016-06-07 19:40:17 +01:00
Ben Hutchings fb04cb5ff1 Prepare to release linux (4.6.1-1). 2016-06-06 18:13:57 +01:00
Ben Hutchings 16ef878aea Set ABI to 1 and version to 4.6.1-1 2016-06-06 18:13:54 +01:00
Ben Hutchings cab1f743c8 Disable MODULE_SIG for architectures not supported by linux-signed 2016-06-06 18:12:47 +01:00
Ben Hutchings 3df161c94f linux-image: Use linux-check-removal command in prerm; remove debconf templates
This removes most of the remaining complexity from the script.
2016-06-06 17:21:34 +01:00
Ben Hutchings c739973adc debian/control: Update policy version to 3.9.8; no changes required 2016-06-05 23:32:11 +01:00
Ben Hutchings 7d4efba38e linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
linux-kernel-headers was removed from unstable in 2007, so presumably
was last released in etch.

libkxl0-dev still depends on it, so don't remove the Provides yet.
2016-06-05 23:21:01 +01:00
Ben Hutchings f12b93bb75 debian/control: Drop obsolete versioned Depends and Breaks
The versions in stable are new enough to satisfy these.
2016-06-05 23:17:23 +01:00
Ben Hutchings cb9d6a9756 [rt] Update to 4.6.1-rt3 2016-06-05 19:23:39 +01:00
Ben Hutchings 27d73ecf49 debian/patches/features/all/rt/genpatch.py: Use stable URLs in patch Origin headers
Previously each tarball would be uploaded to .../rt/<upstream-version>/
and then later moved to .../rt/<upstream-version>/older/.  Now they are
appearing in .../older/ immediately so we can construct stable URLs
under there.
2016-06-05 18:33:18 +01:00
Ben Hutchings 964980804a debian/patches/features/all/rt/genpatch.py: Use upstream tarball directly 2016-06-05 18:33:11 +01:00
Ben Hutchings 07db14c867 debian/patches/features/all/rt/genpatch.py: Fix mapping of -rt version to upstream version
Specifically, allow for a -rcN suffix on the upstream version.
2016-06-05 18:31:38 +01:00
Ben Hutchings 0724abc432 debian/patches/features/all/rt/genpatch.py: Use Python 3 2016-06-05 17:41:39 +01:00
Ben Hutchings 4e2a281abe Update to 4.6.1 2016-06-05 14:30:35 +01:00
Ben Hutchings 7569482f9b Merge branch 'sid' 2016-06-05 14:16:31 +01:00
Ben Hutchings 8ed7991db8 linux-image: Make a newly installed kernel the default if the package was previously removed
Currently the postinst script distinguishes installation vs upgrade by
checking whether its second argument is empty.  However, it will only
be empty if the package was *never* installed before, or was purged.
If the package has been installed, then removed, and is now being
installed again, it's seen as an upgrade.

Unfortunately dpkg only tells the preinst script whether or not this
is an upgrade.  So create a flag file there, consume it in postinst
and remove it in postrm.
2016-06-05 02:11:45 +01:00
Ben Hutchings 586edb84cd linux-image: postrm: Update default symlinks before running hook scripts
Currently the default symlinks may be broken when we run hook scripts,
causing removal to fail if a hook (e.g. lilo) relies on them.
2016-06-05 02:11:44 +01:00
Ben Hutchings e4657e0ec4 linux-image: Rewrite maintainer scripts in shell
Use the new linux-update-symlinks command for symlink updates.
Drop support for minimal_swap, no_symlinks, use_hard_links and *_hook
parameters in /etc/kernel-img.conf.

Thanks to Aurelien Jarno and Santiago Vila for pointing out the
ischroot command and that it's in an essential package (i.e. doesn't
add a dependency).
2016-06-05 02:11:44 +01:00
Ben Hutchings c631f1f543 [mips*r6*] Disable these architectures until dak recognises them as valid in the control file 2016-06-04 18:33:37 +01:00
Ben Hutchings a8fb2b9fbe mtd: Disable slram and phram when securelevel is enabled 2016-06-03 01:15:37 +01:00
Ben Hutchings a2480e25d8 Prepare to release linux (4.6-1~exp2). 2016-05-30 04:44:45 +01:00
Ben Hutchings 6976b08b12 Release linux (4.5.5-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV0te3Oe/yOyVhhEJAQodqBAAjpkEuBm2kSlQD1y8qeb/+1+CxJPcqIH1
 DHTyMpFHQvX5VT+vCX83WhiWncMz85z7f0wcElpNaZ/3ExOQzbmrIwsucgXRXVUS
 txKxHaQQv8uU1m8dgxqjOWP80+IT71H9rBcitfrRqyzLiEhC1mPOfvxjtGTOJWw+
 Lohie5WPMMsfrahQGw4srPMcpVRwVKuX5N+azgk6rg8VA7rxyxQaMZRg3rr+N7Aw
 btwVC5vyL8K5Be0LnveR/PdOosaUU6XzyT7kNT0fLSO9H4bWenielHaduSDI5iU4
 WcPRhymrHv0dBDvbyw8vkJMDd+/1x9gWk4/DHFQNw1miaUx87N+vKyC4rZ7Lqc2d
 4n/hpq3HjPBZqC07Q0mddeTy7OoN4obYSXTipIu9rWBsTJtcxxwSUVg86+xo03Zg
 bb0VoEudp9JZGBMLS8PjBJ66d+/p7Q47YnKV7ZwNKyLwRq4AMo65L7PeUJflNHvj
 UmJrOG/6AJ6bi+eXrWDbwAA8mrwdPPKu+QzBSQ9c6hm4CFmgkgWTH/oA2iPsp7AX
 iqcPgKp6XA8YLXpiDeCqvMV5cSkGD67cpIcgTB0CrH7KILXD61cP8QEl7eaWiBMW
 MW9IPDeEBEmEN3ST2tg1H7udEzzpEZXHg4NZ5gOZ7lMZphbILrapJYuUf3PDdZKL
 Ccz9YH5eSuE=
 =gSlx
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.5.5-1'
2016-05-29 22:33:26 +01:00
Ben Hutchings f122b3358b Prepare to release linux (4.5.5-1). 2016-05-29 22:21:11 +01:00
Ben Hutchings 1edaa5dd82 Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
This was reverted upstream in 4.5.5 due to a regression but we have a fix for
the regression (probably).
2016-05-29 22:20:52 +01:00
Ben Hutchings 46e3b9492a dwc3-exynos: Fix deferred probing storm
Closes: #823552; thanks to Steinar H. Gunderson
2016-05-29 22:05:54 +01:00
Ben Hutchings 676db12dca Put architecture names in brackets in Roger's list of changes 2016-05-29 21:29:11 +01:00
Ben Hutchings 08942bb065 Add upstream fixes for various information leaks 2016-05-29 21:25:44 +01:00
Ben Hutchings 97c01265fe [s390] udeb: Drop all packages, since s390 no longer has its own kernel 2016-05-29 14:50:24 +01:00
Ben Hutchings 5478b6afe5 [mipsn32{,r6}{,el}] Note that we build tools packages for these architectures 2016-05-29 14:46:02 +01:00
Roger Shimizu 59fd45aa71 Change MFD_MAX77686 and RTC_DRV_MAX77686 from module to built-in
So far all RTC drivers enabled are built-in
2016-05-29 17:48:01 +09:00
Roger Shimizu 2cbff33b34 For Odroid-U3 support, add bug closure and re-order the module appended 2016-05-29 14:16:04 +09:00
Roger Shimizu 054bd88a7e armhf: Enable SENSORS_PWM_FAN / PWM_SAMSUNG as module
Recommended by Steinar H. Gunderson.
(Closes: #824941)
2016-05-29 13:40:29 +09:00
Ben Hutchings 0d36d6c16e Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-05-27 14:44:45 +01:00
Ben Hutchings 9f4d29bb04 linux-image: prerm: Ignore version of running kernel inside a container or chroot 2016-05-27 11:54:02 +01:00
Ben Hutchings 49b5fbab50 linux-image: prerm: Allow removal of running kernel if we can't ask debconf questions
Closes: #825423
2016-05-27 11:54:02 +01:00
Ben Hutchings b621344bd9 linux-image: Add workaround for bug #817083 in debconf 2016-05-27 11:54:02 +01:00
Ben Hutchings 30ae9b2024 linux-image: Stop setting $STEM in environment for maintainer script hooks
This seems to have been a transitional feature for the switch
from kernel-image to linux-image.  mkvmlinuz still uses it but
no hook scripts appear to depend on it.
2016-05-27 11:54:02 +01:00
Ben Hutchings ace08191f9 [rt] Override SYSTEM_TRUSTED_KEYS to work from the source_rt directory 2016-05-27 11:54:01 +01:00
Martin Michlmayr 435a974818 [armhf] Enable more NVIDIA Tegra options 2016-05-26 19:49:44 -07:00
Aurelien Jarno e3c5586a6b Also switch mips64 to R2 2016-05-24 19:09:53 +02:00