Commit Graph

3058 Commits

Author SHA1 Message Date
Ben Hutchings 561dac67f3 Update to 4.18.20
* Drop patches applied upstream
* Refresh "arm64: add kernel config option to lock down when in Secure
  Boot mode"
2018-11-21 20:41:44 +00:00
Salvatore Bonaccorso 7fb2e63e99 cdrom: fix improper type cast, which can leat to information leak (CVE-2018-18710) 2018-10-29 22:04:01 +01:00
Salvatore Bonaccorso 5f66f9439a mremap: properly flush TLB before releasing the page (CVE-2018-18281) 2018-10-29 22:01:56 +01:00
Romain Perier 540db7a99c Update to 4.18.14
This updates the debian changelog for listing changes of this stable
update, including removal of cherry picked commits applied on upstream.
2018-10-21 21:04:32 +02:00
Romain Perier 63b0a73429 Update to 4.18.13 2018-10-21 09:31:01 +02:00
Salvatore Bonaccorso 3448bce542 bpf: 32-bit RSH verification must truncate input before the ALU op (CVE-2018-18445) 2018-10-20 22:45:49 +02:00
Salvatore Bonaccorso b2e84defa2 [x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
Closes: #908924
2018-10-20 21:27:48 +02:00
Vagrant Cascadian 07cd30904b [arm64] Update pinebook/teres-i device-tree patches to 4.19.x:
- Enables the lid to wakeup from suspend.
2018-10-18 19:59:22 -07:00
Romain Perier 2c351aeb14 Update to 4.18.12
This updates to 4.18.12, including removal of applied upstream patches.
This also disables rt until 4.18.12-rt7 is integrated to this package
2018-10-15 20:14:39 +02:00
Romain Perier eba87a92ee Update to 4.18.11 2018-10-15 19:23:03 +02:00
Ben Hutchings a2764e86a2 Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name"
Closes: #909813
2018-10-07 21:56:58 +01:00
Ben Hutchings 272a938bb7 xen-netback: fix input validation in xenvif_set_hash_mapping() (CVE-2018-15471) 2018-10-07 21:29:25 +01:00
Salvatore Bonaccorso 2db297e8f5 [arm64] KVM: Sanitize PSTATE.M when being set from userspace (CVE-2018-18021) 2018-10-07 08:37:42 +02:00
Salvatore Bonaccorso 20bad055e2 [arm64] KVM: Tighten guest core register access from userspace (CVE-2018-18021) 2018-10-07 08:30:32 +02:00
Romain Perier 14d9845760 Update to 4.18.10
This updates the debian changelog for listing changes of this stable
update. It also removes patches applied upstream and refreshes a patch
that is part of 4.18.7-rt5.
2018-09-30 16:01:44 +02:00
Salvatore Bonaccorso 7b1a277680 scsi: target: iscsi: Use bin2hex instead of a re-implementation 2018-09-27 21:20:47 +02:00
Salvatore Bonaccorso 7ceb71a555 scsi: target: iscsi: Use hex2bin instead of a re-implementation (CVE-2018-14633) 2018-09-27 21:19:15 +02:00
Ben Hutchings f81ec680a5 Bump ABI to 2
- Drop ABI reference files and ABI maintenance patch
- Delete claim that ignoring ABI changes is a build fix
2018-09-25 22:22:56 +01:00
Ben Hutchings 5a77952e41 [i386/686] Enable MGEODE_LX instead of M686 (regression in 4.16)
- x86-32: Disable 3D-Now in generic config
2018-09-25 21:55:43 +01:00
Romain Perier 5ea1715db4 Update to 4.18.9
This updates the debian changelog for listing changes of this stable
update. It also removes patches applied upstream and refreshes a patch
that is part of 4.18.7-rt5.
2018-09-23 20:00:57 +02:00
Salvatore Bonaccorso d112adae70 f2fs: fix to do sanity check with secs_per_zone (CVE-2018-13100) 2018-09-22 17:31:48 +02:00
Salvatore Bonaccorso 310f694a6b f2fs: fix to do sanity check with reserved blkaddr of inline inode (CVE-2018-13099) 2018-09-22 17:28:29 +02:00
Salvatore Bonaccorso f46ed6ff17 floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (CVE-2018-7755) 2018-09-22 17:11:42 +02:00
Geoff Levand bf27abcb1c Add fixup for HPE m400 APEI firmware problems
Signed-off-by: Geoff Levand <geoff@infradead.org>

[bwh: Add Forwarded field and note the patch in debian/changelog]
2018-09-21 18:34:18 +01:00
Ben Hutchings ee7d2e20ff Update to 4.18.8
- Drop security fixes included in it
- mm: Avoid ABI change in 4.18.7
2018-09-17 01:13:52 +01:00
Ben Hutchings d7423140dd Revert "i40e: Add kconfig dependency to ensure cmpxchg64() is available"
The bug that prompted this was fixed upstream in 4.17 by commit
8f769dd14a43 "i40e: re-number feature flags to remove gaps".
2018-09-16 16:13:00 +01:00
Romain Perier 2943a959c9 [x86] crypto: ccp: add timeout support in the SEV command (Closes: #908248) 2018-09-16 01:58:12 +01:00
Romain Perier 21f4f386c3 Update to 4.18.7
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-09-15 20:27:11 +01:00
Salvatore Bonaccorso f21b10d326 hfsplus: fix NULL dereference in hfsplus_lookup() (CVE-2018-14617) 2018-09-15 11:27:16 +02:00
Salvatore Bonaccorso f84af2d0a0 btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (CVE-2018-14609) 2018-09-15 11:19:09 +02:00
Ben Hutchings 07b57afec5 Move all patch generation scripts to debian/bin
Rename them to genpatch-{aufs,lockdown,rt}

Fixes lintian warning patch-file-present-but-not-mentioned-in-series.

Also preparation for using dgit, which will remove everything except
the main patch series under debian/patches.
2018-09-13 01:52:36 +01:00
Salvatore Bonaccorso e3cee898ab mac80211: don't update the PM state of a peer upon a multicast frame
Closes: #887045
Closes: #886292
2018-09-12 22:31:37 +02:00
Romain Perier 428a3d136e Update to 4.18.6 2018-09-06 08:07:27 +02:00
Ben Hutchings d6c050378d Release linux (4.17.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlt4FyhfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EitQQAJ4S3n+2azIKz50gfxon0dgS9ybXRxeb
 2Hk/FzBXqFduVhWe9vVuZdE4ko5QsQ8ht2HR726kcEkud8pFOh0pt/7Q67IQHbQN
 t/hD3C2C6M8pKhwBEwuSZtRqsruqv3qll95xbwIqW7AWP+/AODQltzgB0AplpC6a
 8ED1nCxutDI0WrzN76UcfYxa1slRJ9sRfh+KRWQSEsU+jCSP0aD0rArYVeppXGaR
 cAy5Xku7237hFdeIzlt6goHuvfDuSlbAxpuaF944TVFtmPYwe7W+S3rRSy0OtjQY
 WzdSsIKXlXVMkMJD4t3ybFUMOyHP/jT79Tem0kp8EBn8NcPjtnLJYLiODVR0PH3A
 5XOEzR3NLGspDxkEJWdq/7IsLL4a7wVLAYn5VbkRVzo2Jxp6IpSqPrFjYwdf/KMF
 PizvbJtHTQxGFk6jPdCG+DV9hBrMOzXedcqH24qZ4yr6xUOj5WICR3+9E57DYLwH
 oJzXef8BKhx4MdkDduduyWcyWJvlH2nBae2T+q+4mwfI/I+8PeyUDnSc7Hmzx1Cc
 feeeccvQPrhnu8HAE0RmfF1YhfyXXq3GQEt4MaV5Z2h6aAS1zxm1EhBueJMeaEhh
 i6oldiPDd2qHX9rZXYLvUx109qLyTiqxbzCgJCAF3s8Bk7P/Aj/0mDADo7d5V0TY
 KsXydFzhoiTZ
 =Qmdt
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.17-1'

Release linux (4.17.17-1).

- Drop "gpu: host1x: Fix compiler errors by converting to dma_addr_t"
  which is already in 4.18
- Drop ABI reference files and ABI number change
2018-08-27 14:15:27 +01:00
Salvatore Bonaccorso 66fce4cbfe Update to 4.17.16
Drop x86-l1tf-fix-build-error-seen-if-config_kvm_intel-is-disabled.patch

Drop x86-i8259-add-missing-include-file.patch

Drop bluetooth-hidp-buffer-overflow-in-hidp_process_report.patch

Cleanup debian/changelog file
2018-08-18 12:22:37 +02:00
Salvatore Bonaccorso cfd1f69cfe Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363) 2018-08-16 21:28:17 +02:00
Salvatore Bonaccorso f7fa757621 [x86] i8259: Add missing include file 2018-08-16 21:18:18 +02:00
Salvatore Bonaccorso 757e7a9cb1 l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled 2018-08-16 07:26:32 +02:00
Ben Hutchings e090a7f60d Revert "net: increase fragment memory usage limits" (CVE-2018-5391) 2018-08-14 22:23:59 +01:00
Bastian Blank 2fcc01b384 Bump ABI to 2 2018-08-13 14:02:22 +02:00
Romain Perier f813b6ebf5 Update to 4.17.14
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-13 14:01:38 +02:00
Ben Hutchings e588a3afcd Move disabling of broken features from d/p/series-orig to d/p/series
Also fix fuzz on one of the patches (our private patch system allows
one line of fuzz).
2018-08-11 13:26:27 +01:00
Romain Perier 281dea527f Update to 4.17.12
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-09 12:33:21 +02:00
Ben Hutchings 27f02c775b scripts/kernel-doc: Escape all literal braces in regexes (Closes: #905116) 2018-08-06 00:25:05 +08:00
Salvatore Bonaccorso 522d548dd5 Partially revert "block: fail op_is_write() requests to read-only partitions"
Closes: #900442
2018-08-05 17:14:54 +02:00
Ben Hutchings 8131366d14 block: really disable runtime-pm for blk-mq (Closes: #904441) 2018-08-05 23:12:11 +08:00
Ben Hutchings 8fd88bdd2a mtd: powernv_flash: set of_node in mtd's dev (Closes: #904380) 2018-08-05 21:12:59 +08:00
Ben Hutchings 9572404d42 [armhf] gpu: host1x: Drop my build fix in favour of upstream fix
- Revert "Revert "gpu: host1x: Add IOMMU support""
- gpu: host1x: Fix compiler errors by converting to dma_addr_t
2018-08-05 19:43:37 +08:00
Ben Hutchings cb5e4246bf Update to 4.18-rc7 2018-07-31 23:28:25 +08:00
Ben Hutchings 99f612471f Update to 4.18-rc6 2018-07-26 19:52:20 +08:00