Commit Graph

7907 Commits

Author SHA1 Message Date
Vagrant Cascadian f68523c82b [arm64] Add patch enabling simplefb LCD on A64. 2018-04-13 20:34:07 -07:00
Vagrant Cascadian 846bba8048 [arm64] Enable features to support Pinebook and other A64 systems:
CONFIG_USB_MUSB_HDRC, CONFIG_USB_MUSB_SUNXI, CONFIG_SUN8I_DE2_CCU,
CONFIG_DMA_SUN6I
2018-04-13 20:20:55 -07:00
Ben Hutchings d948b7a44d wireless: Add Debian wireless-regdb certificates (see #892229) 2018-04-13 20:22:12 +01:00
Vagrant Cascadian 10b9c6345e [armhf] Add patch to fix loading of imx6q-cpufreq module. 2018-04-12 01:12:40 -07:00
James Clarke 12dee9d0f8 [ia64] Drop nic-modules Depends overrides (fixes FTBFS)
The overridden Depends is missing i2c-modules, and includes the no longer
present core-modules, so just use the standard Depends instead which does not
have these issues.
2018-04-11 11:47:17 +01:00
Vagrant Cascadian 4ece70b07d [arm64] Add patches to support SATA on Tegra210/Jetson-TX1. 2018-04-10 13:14:24 -07:00
Ben Hutchings 39213877ab aufs: Update support patchset to aufs4.16-20180409 (no functional change) 2018-04-08 20:06:10 +02:00
Ben Hutchings 51c5591ed2 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
(cherry picked from commit 809a0521f8)

I already did this on the sid branch but for some reason it didn't get
merged to master.
2018-04-08 20:04:22 +02:00
Ben Hutchings 672b1476ef Prepare to release linux (4.16-1~exp1). 2018-04-08 14:44:18 +02:00
Ben Hutchings 82596c5122 integrity: Disable IMA until it works properly with lockdown
Enabing CONFIG_IMA, CONFIG_MODULE_SIG and lockdown currently breaks module
loading with finit_module().
2018-04-08 14:43:46 +02:00
Ben Hutchings ef9c7e11c5 certs: Add certificate for test key used in Debian signing service 2018-04-08 14:39:52 +02:00
Ben Hutchings 7628c027f4 [x86,arm64] Enable code signing again 2018-04-08 10:31:20 +02:00
Ben Hutchings e85bd66dc5 debian/bin/gencontrol_signed.py: Copy maintainer and date into template's changelog 2018-04-08 10:31:20 +02:00
Ben Hutchings a7e85cb155 debian/lib/python/debian_linux/debian.py: Parse bottom lines of changelog entries
Changelog doesn't currently provide access to the maintainer
name/address and date.  We need this when updating the signed template
changelog.

While we're at it, make sure we don't ignore any important lines.
Anything beginning with exactly zero or one spaces is a top or bottom
line, respectively; anything else is internal text we can ignore.
2018-04-08 10:31:20 +02:00
Ben Hutchings 3b3e6ad4cb Use a dummy build profile for udebs that we test-build before signing
debhelper no longer fully trusts the package list specified with -p,
but only processes packages that are listed in debian/control and
enabled in the current build profile.  This breaks the test build of
udebs that we build for real after code signing.

Work around this by adding the udebs to the control file, conditional
on a new build profile (pkg.linux.udeb-unsigned-test-build).  Override
the build profile during the test build.
2018-04-08 10:31:20 +02:00
Ben Hutchings be394a26da Add template source package to support code signing 2018-04-08 10:31:20 +02:00
Ben Hutchings f980187986 debian/rules.d/tools/lib/lockdep/Makefile: Fix repeated 'make install'
Currently the 'ln -s' command fails when run a second time.  Add the
-f option to fix this.
2018-04-08 10:31:19 +02:00
Ben Hutchings 354e9c4806 debian/lib/python/debian_linux/debian.py: Allow parsing any file as changelog 2018-04-08 10:31:19 +02:00
Ben Hutchings 09697cfec7 debian/lib/python/debian_linux/debian.py: Close changelog after parsing 2018-04-08 10:31:19 +02:00
Ben Hutchings e120f06587 debian/lib/python/debian_linux/gencontrol.py: Allow overriding output filenames 2018-04-08 10:31:19 +02:00
Ben Hutchings a25eb38372 debian/config: Rename [build]signed-modules setting to signed-code
This setting controls code signing in general, not just modules.
2018-04-08 10:30:49 +02:00
Jeremy Stanley 215951c4a8 [x86] Enable CONFIG_PWM_LPSS_PLATFORM as a module
Provides support for the low-level power subsystem handling
backlight control on GPD Pocket UMPC systems. Also enable its
dependency CONFIG_PWM=y (Closes: #895164).
2018-04-08 01:42:12 +00:00
Jeremy Stanley 3ef59ddc39 [x86] Enable CONFIG_INTEL_INT0002_VGPIO as a module
Provides support for the Bay Trail/Cherry Trail virtual GPIO
controller to handle power events on GPD Pocket UMPC systems.
2018-04-08 01:42:12 +00:00
Jeremy Stanley e70195604f [x86] Enable CONFIG_REGULATOR
This is needed to build the already enabled CONFIG_INTEL_CHT_INT33FE
module which provides support for the ACPI interface on GPD Pocket
UMPC systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9d053a8255 [x86] Enable CONFIG_TYPEC_FUSB302 as a module
Provides support for the USB type-C interface on GPD Pocket UMPC
systems. Also enable its dependencies CONFIG_TYPEC=m and
CONFIG_TYPEC_TCPM=m.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 7ef6ea60ce [x86] Enable CONFIG_BATTERY_MAX17042 as a module
Provides support for the battery level monitor on GPD Pocket UMPC
systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9e5d5923e3 [x86] Enable CONFIG_CHARGER_BQ24190 as a module
Provides support for the battery charger on GPD Pocket UMPC systems.
Also enable its dependencies CONFIG_EXTCON=m,
CONFIG_EXTCON_INTEL_CHT_WC=m, CONFIG_I2C_CHT_WC=m and
CONFIG_INTEL_SOC_PMIC_CHTWC=y.
2018-04-08 01:42:11 +00:00
Ben Hutchings 765677fc1f Update to 4.16 2018-04-07 20:29:53 +02:00
Roger Shimizu d192eb7555 [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.

(cherry picked from commit a4fdfa09ce)
2018-04-07 21:51:24 +09:00
Roger Shimizu a4fdfa09ce [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.
2018-04-07 19:53:33 +09:00
Sjoerd Simons db401171be Enable CONFIG_DRM_DP_AUX_CHARDEV (Closes: #890235)
Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
2018-04-06 16:34:32 +02:00
Riku Voipio db95598aa8 [armhf] update changelog with dove cubox support
Accidentally missed from the previous patch
2018-04-06 12:29:01 +03:00
Ben Hutchings 6b8b6f7948 wireless: Disable regulatory.db direct loading (see #892229) 2018-04-05 21:34:14 +02:00
Roger Shimizu ab4260743a Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"

(cherry picked from commit b0a94d07b4)
2018-03-23 21:17:45 +09:00
Roger Shimizu b0a94d07b4 Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"
2018-03-23 21:11:08 +09:00
Ben Hutchings 957b707ff1 Prepare to release linux (4.16~rc6-1~exp1). 2018-03-20 13:52:03 +00:00
Ben Hutchings 630c3f806d Release linux (4.15.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqwxttfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EA+AP/3w06dM1NGmIwjmKWtFDpYrrPLz/vtGG
 g/QHFtFGpGQdbzC2O6OULe3z/M63AlNJ6d1VG9OnDcbgsr2eXxHy+021LvtucWK2
 wtKtNJVz6VQ7XtfccsYqcAhqQq22tS5lEqPxMmRAz9SUPuG823B0LH0LXQwvRCiA
 4PeVjDa+bHzNfGyp+ecF70ZsDdfQmYHTNxnAgRiiUUGvLnd2Aq9uQWMILSgiZAiu
 D9lqn3VLI49bT65QGaK+G35MgfkmwnaSa4P1Kvsr8OKkKJMoWObdTnO3UL2hYQj4
 4P7EM4VzRa45eKpBEGpcrEMNtIv6ioNh80r2Dxj/3TlusruG7qXSUgLJMneX5ZVf
 bT1mVkDrr61f3d/ubypXaJNgR7g6zu522o/wLOaCwU+tjBlxuEELCxyGcB5vlQeR
 EbJy/jjW3+NX23w9bheYoDqaz4bITgqAma2Y2VC7jC34CP42oowavLy6OQdWUbCh
 wPvwxYnNEqZWPlMYyTCj/cmLAZb6JN1mNmq0rlbGjlnICtBKYDKah57noCGq34BW
 pAm7aDLQGFGaj0pW2rzCgMd20klg39sLxCMZmYbqRubQXGJaq7FuzjWSmAmd6tSV
 8dcM1QLOz3XmcaLRGXTr/hWllj9AltSFp5EVaCN27Fdlvjec6RnVdNNjOs5bd4rK
 7ik0RWgWDIoU
 =PehK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.15.11-1'

Release linux (4.15.11-1).

Refresh patches.
2018-03-20 13:50:27 +00:00
Ben Hutchings 96a9a0c51f Update to 4.16-rc6 2018-03-20 13:45:54 +00:00
Salvatore Bonaccorso 8c71b9a7b6 Prepare to release linux (4.15.11-1). 2018-03-20 09:31:08 +01:00
Vagrant Cascadian 6b6dc95db7 [armhf] Add device-tree patches from linux-next to support USB and
Ethernet on meson8b.
2018-03-19 19:27:39 -07:00
Vagrant Cascadian 75177c7c40 [armhf] Enable ARCH_MESON and related drivers. 2018-03-19 19:18:48 -07:00
Salvatore Bonaccorso 1d363986d0 mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (CVE-2018-8087) 2018-03-19 22:31:39 +01:00
Salvatore Bonaccorso 6a020907c6 Update to 4.15.11
Drop bugfix/all/crypto-ecc-fix-null-pointer-deref.-on-no-default_rng.patch

Cleanup debian/changelog file
2018-03-19 13:05:40 +01:00
Jeremy Stanley 15a4ccac46 [x86] Enable CONFIG_GPD_POCKET_FAN as a module
Provides fan control on GPD Pocket UMPC systems (Closes: #893451)
2018-03-19 01:05:09 +00:00
Ben Hutchings dcdf9a112f udeb: Update patterns for PHY modules included in usb-modules
Closes: #893154
2018-03-16 23:47:15 +00:00
Salvatore Bonaccorso 677fae7f88 Update to 4.15.10
Add CVE ids for two issues fixed in 4.15.10

Drop bugfix/all/scsi-core-Avoid-that-ATA-error-handling-can-trigger-.patch

Drop bugfix/all/nospec-kill-array_index_nospec_mask_check.patch

Cleanup debian/changelog file
2018-03-16 11:53:04 +01:00
Ben Hutchings 87ddc553bb udeb: Add i2c-modules
mouse-modules and nic-modules both contain modules depending on
i2c-core, so we need to package it properly.
2018-03-16 01:52:47 +00:00
Ben Hutchings e5827e60d6 [ia64] udeb: Combine core-modules/kernel-image and scsi{,-common,-extra}-modules
This was done for other architectures in 2016 after ia64 was removed.
2018-03-15 20:29:23 +00:00
Ben Hutchings 6a61176cdf [ia64] linux-image: Improve flavour descriptions 2018-03-15 20:24:09 +00:00
Ben Hutchings f5c2d3912f [ia64] Compile with gcc-7 2018-03-15 20:23:49 +00:00
Ben Hutchings 2de75f07c3 [ia64] linux-image: Don't suggest fdutils 2018-03-15 20:23:29 +00:00
Ben Hutchings 2e74ef517f [ia64] Disable IRDA, consistent with other architectures 2018-03-15 20:23:04 +00:00
Ben Hutchings 0eab78b1fd [ia64] Revert "Remove all support for ia64"
This reverts commit ace247de5b.
Refresh the "Hardcode arch script output" patch.

Closes: #886693
2018-03-15 20:22:30 +00:00
Ben Hutchings 90520391a2 i40e: Add kconfig dependency to ensure cmpxchg64() is available
This should fix FTBFS on architectures where it isn't.
2018-03-15 19:08:05 +00:00
Ben Hutchings ee1a4b08d6 udeb: Add dependency from nic-modules to zlib-modules
This should fix FTBFS on architectures where zlib_deflate is not built-in.
2018-03-15 19:08:01 +00:00
Salvatore Bonaccorso 8039021914 scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
Closes: #891467
2018-03-15 08:53:49 +01:00
Ben Hutchings 90b8cc7a38 [amd64] udeb: Add vmd to scsi-modules, required for NVMe on some systems
Closes: #891482
2018-03-15 03:01:04 +00:00
Ben Hutchings 341e78aee9 Really bump ABI to 2 2018-03-15 03:00:56 +00:00
Ben Hutchings 45f26f2f70 Bump ABI to 2
Commit 1df9e416e647 "Kbuild: always define endianess in kconfig.h"
fixed several cases where some types (and inline functions) might not
be correctly defined according to the host byte order.  It might be
possible to avoid an ABI bump, but it would require a lot of work.
Also, the problem may affect OOT modules that therefore should be
rebuilt with the fix.
2018-03-15 02:24:26 +00:00
Ben Hutchings 35e5ff18f3 amdgpu: Abort probing if firmware is not installed, as we do in radeon 2018-03-15 02:19:45 +00:00
Ben Hutchings 1cf35d5b4d Avoid/fix/ignore most ABI changes in 4.15.5-4.15.9 inclusive
There are still a few to resolve.
2018-03-14 02:38:34 +00:00
Ben Hutchings 33277fbe2b nospec: Kill array_index_nospec_mask_check() 2018-03-13 22:22:31 +00:00
Ben Hutchings 17703a438b Update to 4.15.9
This has some ABI changes, which still need to be resolved.
2018-03-13 22:20:14 +00:00
Ben Hutchings a1c4060b68 Merge branch 'master' of salsa.debian.org:kernel-team/linux
Move extra changelog entries under 4.16~rc5-1~exp1 to the next version.
2018-03-13 16:14:14 +00:00
Uwe Kleine-König a6229f947f [arm64] enable various drivers as module for teres-i OSHW laptop 2018-03-13 14:53:23 +01:00
Ben Hutchings 0385df06cd Prepare to release linux (4.16~rc5-1~exp1). 2018-03-13 02:06:57 +00:00
Ben Hutchings 8ca20af96f debian/rules.d/tools/kconfig/Makefile: Use bison and flex to build kconfig 2018-03-13 02:06:49 +00:00
Ben Hutchings d68283849b debian/control: Update profile qualification for build-deps on bison and flex
They are now used to build kconfig, so the only qualification is !stage1.
2018-03-13 02:00:12 +00:00
Helge Deller 887cec2797 [hppa] Re-enable 32-bit SMP kernel build. Qemu now supports it. 2018-03-12 08:35:01 +01:00
Ben Hutchings 3c7088b5cd Update to 4.16-rc5 2018-03-12 02:40:37 +00:00
Ben Hutchings 7b3adb7e57 Merge branch 'master' into sid 2018-03-12 02:02:24 +00:00
Ben Hutchings 575d4450ca Merge branch 'master' into sid 2018-03-12 02:00:57 +00:00
Vagrant Cascadian b6d7061ed6 [arm64] Apply patch from linux-next to fix eMMC corruption on
Odroid-C2 (Closes: #879072).
2018-03-11 18:46:05 -07:00
Ben Hutchings 1cf87c07e9 firmware_class: Refer to Debian wiki page when logging missing firmware
Closes: #888405
2018-03-12 01:21:33 +00:00
Ben Hutchings bc264fd9ed [x86] sound/soc/intel: Update configuration for 4.15
Enable SND_SOC_INTEL_SST_TOPLEVEL, SND_SOC_INTEL_HASWELL,
SND_SOC_INTEL_BAYTRAIL, SND_SST_ATOM_HIFI2_PLATFORM,
SND_SOC_INTEL_SKYLAKE as modules.  This re-enables the board
drivers that now depend on them (Closes: #892629).

Remove config for SND_SOC_INTEL_BYT_MAX98090_MACH and
SND_SOC_INTEL_BYT_RT5640_MACH, which depend on SND_SST_IPC_ACPI = n
and therefore can't be enabled together with the other drivers.
2018-03-12 00:09:39 +00:00
Ben Hutchings bdc8a76aa0 debian/control: Point Vcs URLs to Salsa 2018-03-11 18:04:45 +00:00
Ben Hutchings 22f6a669a8 aufs: Update support patchset to aufs4.15-20180219 (no functional change) 2018-03-11 18:04:45 +00:00
Ben Hutchings 809a0521f8 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier 2018-03-11 18:04:45 +00:00
Salvatore Bonaccorso 07f055d4a5 sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803) 2018-03-09 20:34:10 +01:00
Vagrant Cascadian 4bcb651396 [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
work on rk3399 A72 cores.
2018-03-09 10:55:19 -08:00
Vagrant Cascadian 143ff9e565 [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset. 2018-03-09 10:53:46 -08:00
Salvatore Bonaccorso 5bd62d6357 ALSA: seq: Fix racy pool initializations (CVE-2018-7566) 2018-03-09 11:54:59 +01:00
Bastian Blank ab6c5fc99e Drop note about Xen from long descriptions
Xen support is enabled in all but one x86 kernel since several Debian
releases.
2018-02-23 17:06:03 +01:00
Uwe Kleine-König 7d901c1267 [powerpc,ppc64el,ppc64] Enable CRASH_DUMP 2018-02-23 14:10:51 +01:00
Uwe Kleine-König 830286e344 netfilter: enable NFT_FIB_NETDEV as module 2018-02-23 13:11:02 +01:00
Salvatore Bonaccorso 728a489c77 Add ABI reference for 4.15.0-1 2018-02-20 21:52:11 +01:00
Salvatore Bonaccorso a8a0de4aba Prepare to release linux (4.15.4-1). 2018-02-18 09:36:50 +01:00
Salvatore Bonaccorso c59d949283 Prepare to upload to unstable
Drop the ~exp1 from the version.

Set ABI to 1.
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 5f628725c4 (Temporarily) disable armel kernel image build
The armel/marvell kernel size is growing to large and the compressed
image is over the limit.

Given the armel architecture will most likely not be part of Buster,
disable the image build.

Cf. https://lists.debian.org/debian-kernel/2018/01/msg00278.html
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 0bb3db4916 Add CVE id for CVE-2018-5750
Gbp-Dch: Ignore
2018-02-17 15:14:21 +01:00
Salvatore Bonaccorso fc2cf56edb Update to 4.15.4
Drop media-dvb-usb-v2-lmedm04-Improve-logic-checking-of-w.patch

Drop media-dvb-usb-v2-lmedm04-move-ts2020-attach-to-dm04_.patch

Drop media-hdpvr-fix-an-error-handling-path-in-hdpvr_prob.patch

Cleanup Debian changelog for 4.15.4
2018-02-16 22:46:54 +01:00
Salvatore Bonaccorso 4cb4e4a1d6 Update to 4.15.3 2018-02-16 12:52:22 +01:00
Salvatore Bonaccorso 3813d82c3e Update 4.15.1 and 4.15.2 Debian changelog entries
Drop/Remove enties included in the 4.14.17-1 upload and add architecture
tags.
2018-02-16 10:33:37 +01:00
Salvatore Bonaccorso 0ec05d8c81 Release linux (4.14.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqFl5pfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EQDoP/iuiGnJomZlwYf+UtxmTxZM0B1jutQ2V
 vg2/JLaocNP/QLJTRKKQnUnEbawuUvGF/vtq5kDV0XcaY3QZSbeQKkpyEpZoI5K3
 dJ8WG+EXDd/a2KVoJ/layX2JqtSVsgBOtJJkSSrhWk2tfZkhB1+9BJ54UXoTCT0A
 pWor5ycO0PUw6crlMsNz62lBwvdwoHgIhKkjpfnXOCTZQi6n6RVFvaT2uLyijZod
 0KTuWFnyMLgh1gpKKR/tqGs25ByOQH43TmtrVAYfjqua5P5CvzJaKp3UMHsDPIbN
 Uw3HB0QQ3iEg8pQJhCkrNk1LT/1Je9xb3rdoKSQ+OitTfyQnhs/eVXs3KzD3DPOc
 IJZjG/kno8d7bNWW8+ce12MPVVkAop1ZMGushyz1c3149HCtinQcymcWahD4Gyzg
 YA9w3V7ir+bvJWunKy12845XoXpxhaBVV7CbnXI02exGwbN1gBPfI6nxzf84lVcG
 Bnwy523jmAjB8h8a9HjmtwqecbnJRf+NkgQAJItniGR06B7XVSLaOnnD0dXLdOMj
 VADirfbRRU60gqBrjrMxUwMO1ArKowNzQM91pTR+jAa2mS4KzEpMmwmWMAPSTL2n
 9ODByDGf6oi9vQxxoMd1gic7cZwyzO3n/SnHSpA5IYDSeurWE1ZF3xWqPBlxIpUp
 EXiBvAThcuDs
 =jSDv
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.17-1'

Release linux (4.14.17-1).
2018-02-16 00:20:10 +01:00
Ben Hutchings 7708ade843 [x86] Rewrite "Make x32 syscall support conditional ..." to use a static key
Now that the old slow path is always used, this is an important
optimisation.
2018-02-14 18:28:42 +00:00
Salvatore Bonaccorso adad338012 Prepare to release linux (4.14.17-1). 2018-02-14 06:56:06 +01:00
Salvatore Bonaccorso bd35350217 Add bug closer for #883069 in 4.15.2-1~exp1 2018-02-13 19:23:37 +01:00
Riku Voipio ba309293de [arm64] enable COMMON_CLK_HI655X so wifi and bluetooth work on Hikey 2018-02-13 15:46:15 +02:00
Salvatore Bonaccorso 502a9ccf85 Add CVE id for CVE-2018-6927 2018-02-12 22:14:15 +01:00
Bastian Blank 2ac5e9851a Update to 4.15.2 2018-02-11 09:52:17 +01:00
Bastian Blank 0ce4bbe790 Fix building of liblockdep 2018-02-11 09:51:44 +01:00
Bastian Blank 1f0b5f04ef Update to 4.15.1 2018-02-08 14:20:22 +01:00
Ben Hutchings ca87f72cdd [x86] linux-headers: Depend on updated linux-compiler-gcc-7-x86 2018-02-06 20:28:40 +00:00
Ben Hutchings 35f213d491 linux-compiler-gcc-7-{arm,s390,x86}: Remove specific (and wrong) compiler version from description
Closes: #883363
2018-02-06 20:26:27 +00:00
Ben Hutchings 96c72b3c6c [x86] linux-compiler-gcc-7-x86: Add versioned dependency on gcc-7 for retpoline support 2018-02-06 20:22:23 +00:00
Ben Hutchings 3a638db7ea [x86] Add versioned build-dependency on gcc-7 for retpoline support 2018-02-06 20:20:13 +00:00
Ben Hutchings 1e4250336a Drop reverted vermagic change from changelog 2018-02-06 20:01:35 +00:00
Ben Hutchings 5a230f42f6 Word-wrap changelog 2018-02-06 20:01:00 +00:00
Salvatore Bonaccorso d8b78ad16e rxrpc: Avoid ABI change in 4.14.17 2018-02-05 20:56:02 +01:00
Salvatore Bonaccorso 31c2771b75 mac80211: Avoid ABI change in 4.14.17 2018-02-04 15:31:41 +01:00
Salvatore Bonaccorso 0a69e0b046 Update to 4.14.17
Refresh cpupower-fix-checks-for-cpu-existence.patch patch
2018-02-04 15:14:12 +01:00
Salvatore Bonaccorso a870b2741a crypto: ecc - Fix NULL pointer deref. on no default_rng
Closes: #886556
2018-02-02 20:43:54 +01:00
Salvatore Bonaccorso edfb7d0f0e Update to 4.14.16 2018-02-02 14:39:34 +01:00
Ben Hutchings e49ee939aa Note that 4.14.14 closes #888954 2018-02-01 21:36:08 +00:00
Salvatore Bonaccorso d3d73f5119 [rt] Update to 4.14.15-rt13 2018-01-31 21:00:05 +01:00
Ben Hutchings aacdec9702 Update to 4.15 2018-01-29 23:46:40 +00:00
Ben Hutchings 623cfd4d39 Merge branch 'sid'
- Drop ABI maintenance patches
- Apply usbip config change in debian/config/config
2018-01-28 19:02:08 +00:00
Ben Hutchings f01c4e1f91 usbip: Reduce USBIP_VHCI_HC_PORTS to 15, the maximum allowed for SuperSpeed hubs
Closes: #878866

The limits in Kconfig are simply wrong.
2018-01-28 18:53:45 +00:00
Salvatore Bonaccorso 4fae92a1d5 nfsd: auth: Fix gid sorting when rootsquash enabled (CVE-2018-1000028) 2018-01-28 19:38:02 +01:00
Salvatore Bonaccorso e53a4aa3b8 [rt] Update to 4.14.15-rt11 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso e5ce9cb87e Revert "module: Add retpoline tag to VERMAGIC" 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso 3a81855475 Update to 4.14.15 2018-01-28 15:50:32 +01:00
Riku Voipio 893c189290 [arm64] embed reset drivers to kernel
Reset drivers are tiny and are needed often early in boot. Kconfig
selects the drivers automatically with arch specific defaults:

config COMMON_RESET_HI6220
        default ARCH_HISI

So remove explicit driver selections from arm 64 config and let
kconfig dependencies handle it for us.
2018-01-26 11:02:53 +02:00
Bastian Blank dd6dc914d3 cloud: Mention support for Google Compute Engine 2018-01-23 21:38:05 +01:00
Bastian Blank 3fa67126b5 Switch to SLUB as kernel allocator 2018-01-23 19:25:23 +01:00
Ben Hutchings cf300a600b usb: Enable USBIP_CORE etc. on all architectures (Closes: #888042) 2018-01-23 17:26:24 +00:00
Ben Hutchings e6885f415f Enable CGROUP_BPF (except for armel) (Closes: #872560) 2018-01-23 17:15:28 +00:00
Uwe Kleine-König 5ff0bf31f4 Add bug closer for I2C_PXA on espressobin 2018-01-21 22:34:07 +01:00
Uwe Kleine-König 14c0e8f36f [arm64] enable I2C_PXA for espressobin 2018-01-21 22:11:36 +01:00
Bastian Blank 503143acab Enable NVME_MULTIPATH, NVME_FC, NVME_TARGET_FC
This enables NVME support in various SCSI host adapters, so move the
nvme module into the scsi-modules installer udeb.
2018-01-18 20:20:14 +01:00
Bastian Blank a26c8f0854 x86: Enable HYPERV_VSOCKETS 2018-01-18 20:19:26 +01:00
Bastian Blank aaaaf627d3 x86: Enable SCHED_MC_PRIO 2018-01-18 20:19:26 +01:00
Bastian Blank 02deddcfba Enable CRYPTO_RSA, CRYPTO_DH, CRYPTO_ECDH 2018-01-18 20:19:26 +01:00
Bastian Blank 54918bc9f0 Enable VIRTIO_MMIO 2018-01-18 20:19:25 +01:00
Bastian Blank 4c06af37cc Enable IPVTAP 2018-01-18 20:19:03 +01:00
Bastian Blank 7bd33d45fd Enable NET_ACT_SAMPLE 2018-01-18 20:13:56 +01:00
Bastian Blank 82296390f5 Enable IP_SET_HASH_IPMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3aa1af59a8 Enable NF_LOG_NETDEV 2018-01-18 20:13:56 +01:00
Bastian Blank cdc2183e8b Enable IPV6_SEG6_LWTUNNEL, IPV6_SEG6_HMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3a62f848cf Enable INET_ESP_OFFLOAD, INET6_ESP_OFFLOAD 2018-01-18 20:13:56 +01:00
Bastian Blank 63e3ef13a0 Enable NUMA_BALANCING_DEFAULT_ENABLED 2018-01-18 20:13:56 +01:00
Salvatore Bonaccorso e30f878e1d ALSA: seq: Make ioctls race-free (CVE-2018-1000004) 2018-01-18 14:30:46 +01:00
Bastian Blank 12fc8ef895 cloud-amd64: Support Amazon EC2 2018-01-18 12:57:14 +01:00
Bastian Blank 5f83961cb5 Add cloud-amd64 kernel flavour
As discussed on d-kernel, this flavour is added as experiment on request
of Microsoft.  For now it is only tested on Microsoft Azure.

It will be expanded to cover the other public cloud platforms at well.
This platforms will need additional drivers.
2018-01-18 09:19:36 +01:00
Ben Hutchings 6f43038466 Update to 4.14.14
Mostly done by Salvatore Bonaccorso.
2018-01-18 06:10:01 +00:00
Salvatore Bonaccorso 0bb5e7cccb loop: fix concurrent lo_open/lo_release (CVE-2018-5344) 2018-01-16 20:57:59 +01:00
Salvatore Bonaccorso 6c0d6a6239 RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333) 2018-01-16 20:53:46 +01:00
Salvatore Bonaccorso 24cdd62c17 RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332) 2018-01-16 20:50:50 +01:00
Ben Hutchings 4762c889ee Prepare to release linux (4.15~rc8-1~exp1). 2018-01-15 04:43:14 +00:00
Ben Hutchings 9d3430166e Note CVEs fixed upstream 2018-01-15 04:43:12 +00:00
Ben Hutchings 6e7610453d Release linux (4.14.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlpb7AUACgkQ57/I7JWG
 EQmfjhAArIzynB9B8lG9U8OlC7bp+HTjk9BgOKo5VZ6ABlIePxveUgkc44kYK1ET
 YGiqpi1BbMPoDiu32QyuCzYwxNjUl6dXCOKnUgsTR0jyKSXoc19idWLb/U5akXxF
 Q1LWUaBWB/SbR52inAE8nX2s1tdgFjKDHgebAOdbPApt8eTnI4pSL1YvehDQtqG1
 olz3L1PjlRhT2XCdtWIPrLioIxUiOacYGV7sMZHL2jsJS+mmf20BiUMsfusafL2r
 Q8LSVGCQRgWutbTZW2YmFtx0FybxYc8wRj/9d7nYMaOv+UeFbx6ffYrkZUqXlK4j
 TkVsFULVoEfgnu9GkWnd+kdJP8PwbDkrjk1JsXg55A0LCrfFcorbMQc8GCJ6ICpu
 mFqw5NQaxQZszP6W0dYWHWJTLENOVxjYyoMjmLuQIMudzHP4bGTXjJ/PCBebT5fR
 6XOPdqcWoOT5f8NloMFqzPQQeFQMY+DycYiz2tdYxH4AnvGsgdOLFiHHYxxIsOa1
 Bzxb4bWxF2m3hKiyY5am/5U6MAxLrBwsvLZVklyfxYSRlvnPldKVHohzHTZafPSo
 M7KU4R1e6wywwjg9Qtk4YJBX5w0jT3b9vbVQVNT47WzvLwXA/TY+Il6BIAVuzL57
 MJAosU9SDAf28XUVzcaXbsHm9l2gcnUS6kCVVWTEvmehkW1rR3o=
 =M11J
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.13-1'

Release linux (4.14.13-1).

- Drop ABI reference
- Drop/refresh patches as necessary
- linux-headers: Drop versioned dependency on linux-kbuild, as there has not
  been any version of linux-kbuild-4.15 without objtool
2018-01-15 04:35:41 +00:00
Ben Hutchings 13eb990095 Update to 4.15-rc8 2018-01-15 04:31:31 +00:00
Ben Hutchings 2ae3c9e4a7 Prepare to release linux (4.14.13-1). 2018-01-14 19:45:05 +00:00
Ben Hutchings d9fe539b06 Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for out-of-tree modules"
This removes the bogus check for libelf-dev.
2018-01-14 19:44:14 +00:00
Ben Hutchings 236bb1a25d linux-headers: Add versioned dependency on linux-kbuild 2018-01-14 19:41:44 +00:00
Salvatore Bonaccorso da2cd8b85c drm/nouveau/disp/gf119: add missing drive vfunc ptr
Closes: #880660
2018-01-13 11:54:57 +01:00
Ben Hutchings 30fe681bff abiupdate.py: Add support for security mirrors 2018-01-12 02:36:06 +00:00
Riku Voipio a8911b9351 [arm64] disable omap_rng temporarily
The drivers hangs machine with IRQ storm on MacchiatoBin with EFI
as firmware. Re-enable the module once the issue is fixed.
2018-01-11 11:46:38 +02:00
Salvatore Bonaccorso aac0e5380a Properly name patch according to subject
Gbp-Dch: Ignore
2018-01-10 22:46:07 +01:00
Salvatore Bonaccorso d42878a1e5 Disable asynchronous aborts for SATA devices 2018-01-10 13:23:46 +01:00
Salvatore Bonaccorso 9a41499923 Update to 4.14.13 2018-01-10 10:49:59 +01:00
Salvatore Bonaccorso 8996784cdc Release linux (4.14.12-2).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlpQhNxfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EKmgP/3D1CAm0F0v9d2AfQAPv8wVQIFpWqZGM
 D1jjtinIyCGJVM0jjXKne1nwQZotVTN/SDHeGTmJVvluLsF7MBCiGTBYMThqYD/I
 DCaOwGS9go8J771dR261c1D0nnnsqTvAJIMQDcVmRoVT/KRA/ZqdwJHygX8cZ2hb
 MmSWH5szCt4n55SkJDQi4nJ0dWkj5ZiKf4i6+o5+NrY2PJRTYlIthnCvHDuTsY+r
 Nade3ITAX82xRjFUmeM6JUc1xScLoXxvQhfuIRyIk2atQBCZEvTXvwC8cuyJWBo+
 TUdWqRdxEslqCTJ7/boH9nsWO4Hm+UiVHFwUbFR+xpPqgdDvkHAZII5tk9pzNSxU
 CWAWtKhRJxl8Ne452bCWtRi8TlvXNi4F7wbM9/AygT6dJoTidKYkAi+WcRco800G
 Yx5uuLfj88tBm4VFZJot9W1FKOtml0w+25I4uuua2lSwIS6/25+OZ1qMOkEXbE+v
 nIZHX2UTZYda8PNzZlMClfwiHYKKd+2LnGpdc0oEexwRxLtm/YFKHkavV396E7o1
 FzlogUJqsofgJOEYczBcjiuEW9EKXbeRCx/TPm/MVHz2Qn0hCWGWSnR5h/8T7KZ9
 GuOTk8+5c0puYK35+NC5M9/0XboP+hOEccuaJS4abu4tHok8jU72SX3KF+8j4dl8
 OxVql0ToPmdI
 =wQ4Q
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.12-2'

Release linux (4.14.12-2).
2018-01-06 14:30:49 +01:00
Salvatore Bonaccorso d41931f615 Prepare to release linux (4.14.12-2). 2018-01-06 09:08:42 +01:00
Salvatore Bonaccorso b2de3f8c6a linux-headers: Add symlink to linux-kbuild tools directory for objtool in architecture-specific headers package
Thanks: Luca Boccassi

Closes: #886366
2018-01-06 08:06:27 +01:00
Ben Hutchings f5177a853e linux-headers: Add symlink to linux-kbuild tools directory for objtool 2018-01-06 07:41:12 +01:00
Ben Hutchings 3c9fb40bbb linux-kbuild: Add objtool 2018-01-06 07:38:02 +01:00
Salvatore Bonaccorso 1c59cc6aec Prepare to release linux (4.14.12-1). 2018-01-05 21:20:26 +01:00
Salvatore Bonaccorso 9a96b9c27a x86/tlb: Drop the _GPL from the cpu_tlbstate export 2018-01-05 21:17:13 +01:00
Salvatore Bonaccorso 52909cebb8 Update to 4.14.12 2018-01-05 16:07:19 +01:00
Salvatore Bonaccorso b64a1989ae Revert "scsi: libsas: allow async aborts"
Fixes "Oops: NULL pointer dereference - RIP:
isci_task_abort_task+0x30/0x3e0 [isci]"

Closes: #882414
2018-01-05 14:23:11 +01:00
Salvatore Bonaccorso 96dad8ed7e Update to 4.14.11 2018-01-05 14:22:34 +01:00
Salvatore Bonaccorso 304afa4414 Update to 4.14.10 2018-01-05 14:21:05 +01:00
Salvatore Bonaccorso 572b685574 Bump ABI to 3 2018-01-05 14:21:01 +01:00
Salvatore Bonaccorso a7b364e44f Update to 4.14.9 2018-01-05 14:19:40 +01:00
Salvatore Bonaccorso f587f7242e [rt] Update to 4.14.8-rt9 2018-01-05 10:59:15 +01:00
Salvatore Bonaccorso f5474829b9 Update to 4.14.8 2018-01-05 10:59:15 +01:00
Vagrant Cascadian f65d850bba Backport patch from linux-next (next-20180103) to support SMP on
tegra210 systems.
2018-01-04 10:50:15 -08:00
Ben Hutchings 6c445bffa2 Clean up configuration using kconfigeditor2
Enable one replacement symbol and drop those that are really gone.
2017-12-30 16:20:49 +00:00
Ben Hutchings cb21ae6740 efi: Enable LOCK_DOWN_IN_EFI_SECURE_BOOT, replacing EFI_SECURE_BOOT_LOCK_DOWN 2017-12-30 16:20:25 +00:00
Ben Hutchings 20aa9b586e [arm64] Update "add kernel config option to lock down when in Secure Boot mode" for 4.15 2017-12-30 16:00:46 +00:00
Ben Hutchings 6a221d27b1 e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
Closes: #885348
2017-12-28 01:24:56 +00:00
Ben Hutchings 5635aaadec Prepare to release linux (4.15~rc5-1~exp1). 2017-12-27 02:48:15 +00:00
Ben Hutchings 55fce3fb69 Merge remote-tracking branch 'alioth/master' 2017-12-27 01:40:30 +00:00
Ben Hutchings 4932bdacf1 linux-kbuild: Add objtool 2017-12-27 01:38:04 +00:00
Ben Hutchings 7f35685e4b [rt] Disable until it is updated for 4.15 or later 2017-12-27 01:38:03 +00:00
Ben Hutchings e01624c730 cpupower: Move library to multiarch directory
Upstream moved it from /usr/lib to /usr/lib64 in 4.15, but neither of
these is correct.
2017-12-27 01:38:00 +00:00
Ben Hutchings 7bcd3c4d13 lockdown: Update calls to kernel_is_locked_down() in "mtd: Disable slram and phram when locked down"
We need to pass a string to be logged the first time the check fires.
2017-12-27 01:37:24 +00:00
Ben Hutchings 7dd9b58675 Update to 4.15-rc5
Also update the aufs and lockdown patchsets.
2017-12-26 18:54:17 +00:00
Ben Hutchings ab5d03cb3b Prepare to release linux (4.14.7-1). 2017-12-22 14:12:23 +00:00
Ben Hutchings 8423f81c55 Merge remote-tracking branch 'alioth/sid' into sid 2017-12-22 14:10:04 +00:00
Salvatore Bonaccorso 196596c560 crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) 2017-12-22 09:13:19 +01:00
Salvatore Bonaccorso 4f056ca2c6 crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) 2017-12-22 09:00:33 +01:00
Ben Hutchings adef82ee3a Bump ABI to 2 2017-12-22 03:54:44 +00:00
Ben Hutchings cf1f6e2019 bpf/verifier: Fix multiple security issues (Closes: #883558) 2017-12-22 03:54:44 +00:00
Salvatore Bonaccorso a983b69920 Add one more known CVE id
Gbp-Dch: Ignore
2017-12-21 06:07:46 +01:00
Salvatore Bonaccorso 2bc058f58c Add opening parenthesis
Gbp-Dch: Ignore
2017-12-20 20:41:06 +01:00
Ben Hutchings fc7f6fafd8 Add security fixes 2017-12-20 19:27:18 +00:00
Ben Hutchings 285e1090f2 [rt] Update to 4.14.6-rt7 2017-12-20 18:53:59 +00:00
Ben Hutchings 9e0441b20a Update to 4.14.7
Drop patches applied upstream, and fix a few conflicts.
2017-12-20 18:40:37 +00:00
Riku Voipio 67968436a4 [arm64] udeb: add mvebu comphy for armada 8K 2017-12-12 11:01:35 +02:00