Ben Hutchings
561dac67f3
Update to 4.18.20
...
* Drop patches applied upstream
* Refresh "arm64: add kernel config option to lock down when in Secure
Boot mode"
2018-11-21 20:41:44 +00:00
Salvatore Bonaccorso
7fb2e63e99
cdrom: fix improper type cast, which can leat to information leak (CVE-2018-18710)
2018-10-29 22:04:01 +01:00
Salvatore Bonaccorso
5f66f9439a
mremap: properly flush TLB before releasing the page (CVE-2018-18281)
2018-10-29 22:01:56 +01:00
Romain Perier
540db7a99c
Update to 4.18.14
...
This updates the debian changelog for listing changes of this stable
update, including removal of cherry picked commits applied on upstream.
2018-10-21 21:04:32 +02:00
Romain Perier
63b0a73429
Update to 4.18.13
2018-10-21 09:31:01 +02:00
Salvatore Bonaccorso
3448bce542
bpf: 32-bit RSH verification must truncate input before the ALU op (CVE-2018-18445)
2018-10-20 22:45:49 +02:00
Salvatore Bonaccorso
b2e84defa2
[x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
...
Closes : #908924
2018-10-20 21:27:48 +02:00
Vagrant Cascadian
07cd30904b
[arm64] Update pinebook/teres-i device-tree patches to 4.19.x:
...
- Enables the lid to wakeup from suspend.
2018-10-18 19:59:22 -07:00
Romain Perier
2c351aeb14
Update to 4.18.12
...
This updates to 4.18.12, including removal of applied upstream patches.
This also disables rt until 4.18.12-rt7 is integrated to this package
2018-10-15 20:14:39 +02:00
Romain Perier
eba87a92ee
Update to 4.18.11
2018-10-15 19:23:03 +02:00
Ben Hutchings
a2764e86a2
Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name"
...
Closes : #909813
2018-10-07 21:56:58 +01:00
Ben Hutchings
272a938bb7
xen-netback: fix input validation in xenvif_set_hash_mapping() (CVE-2018-15471)
2018-10-07 21:29:25 +01:00
Salvatore Bonaccorso
2db297e8f5
[arm64] KVM: Sanitize PSTATE.M when being set from userspace (CVE-2018-18021)
2018-10-07 08:37:42 +02:00
Salvatore Bonaccorso
20bad055e2
[arm64] KVM: Tighten guest core register access from userspace (CVE-2018-18021)
2018-10-07 08:30:32 +02:00
Romain Perier
14d9845760
Update to 4.18.10
...
This updates the debian changelog for listing changes of this stable
update. It also removes patches applied upstream and refreshes a patch
that is part of 4.18.7-rt5.
2018-09-30 16:01:44 +02:00
Salvatore Bonaccorso
7b1a277680
scsi: target: iscsi: Use bin2hex instead of a re-implementation
2018-09-27 21:20:47 +02:00
Salvatore Bonaccorso
7ceb71a555
scsi: target: iscsi: Use hex2bin instead of a re-implementation (CVE-2018-14633)
2018-09-27 21:19:15 +02:00
Ben Hutchings
f81ec680a5
Bump ABI to 2
...
- Drop ABI reference files and ABI maintenance patch
- Delete claim that ignoring ABI changes is a build fix
2018-09-25 22:22:56 +01:00
Ben Hutchings
5a77952e41
[i386/686] Enable MGEODE_LX instead of M686 (regression in 4.16)
...
- x86-32: Disable 3D-Now in generic config
2018-09-25 21:55:43 +01:00
Romain Perier
5ea1715db4
Update to 4.18.9
...
This updates the debian changelog for listing changes of this stable
update. It also removes patches applied upstream and refreshes a patch
that is part of 4.18.7-rt5.
2018-09-23 20:00:57 +02:00
Salvatore Bonaccorso
d112adae70
f2fs: fix to do sanity check with secs_per_zone (CVE-2018-13100)
2018-09-22 17:31:48 +02:00
Salvatore Bonaccorso
310f694a6b
f2fs: fix to do sanity check with reserved blkaddr of inline inode (CVE-2018-13099)
2018-09-22 17:28:29 +02:00
Salvatore Bonaccorso
f46ed6ff17
floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (CVE-2018-7755)
2018-09-22 17:11:42 +02:00
Geoff Levand
bf27abcb1c
Add fixup for HPE m400 APEI firmware problems
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
[bwh: Add Forwarded field and note the patch in debian/changelog]
2018-09-21 18:34:18 +01:00
Ben Hutchings
ee7d2e20ff
Update to 4.18.8
...
- Drop security fixes included in it
- mm: Avoid ABI change in 4.18.7
2018-09-17 01:13:52 +01:00
Ben Hutchings
d7423140dd
Revert "i40e: Add kconfig dependency to ensure cmpxchg64() is available"
...
The bug that prompted this was fixed upstream in 4.17 by commit
8f769dd14a43 "i40e: re-number feature flags to remove gaps".
2018-09-16 16:13:00 +01:00
Romain Perier
2943a959c9
[x86] crypto: ccp: add timeout support in the SEV command ( Closes : #908248 )
2018-09-16 01:58:12 +01:00
Romain Perier
21f4f386c3
Update to 4.18.7
...
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-09-15 20:27:11 +01:00
Salvatore Bonaccorso
f21b10d326
hfsplus: fix NULL dereference in hfsplus_lookup() (CVE-2018-14617)
2018-09-15 11:27:16 +02:00
Salvatore Bonaccorso
f84af2d0a0
btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (CVE-2018-14609)
2018-09-15 11:19:09 +02:00
Ben Hutchings
07b57afec5
Move all patch generation scripts to debian/bin
...
Rename them to genpatch-{aufs,lockdown,rt}
Fixes lintian warning patch-file-present-but-not-mentioned-in-series.
Also preparation for using dgit, which will remove everything except
the main patch series under debian/patches.
2018-09-13 01:52:36 +01:00
Salvatore Bonaccorso
e3cee898ab
mac80211: don't update the PM state of a peer upon a multicast frame
...
Closes : #887045
Closes : #886292
2018-09-12 22:31:37 +02:00
Romain Perier
428a3d136e
Update to 4.18.6
2018-09-06 08:07:27 +02:00
Ben Hutchings
d6c050378d
Release linux (4.17.17-1).
...
-----BEGIN PGP SIGNATURE-----
iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlt4FyhfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EitQQAJ4S3n+2azIKz50gfxon0dgS9ybXRxeb
2Hk/FzBXqFduVhWe9vVuZdE4ko5QsQ8ht2HR726kcEkud8pFOh0pt/7Q67IQHbQN
t/hD3C2C6M8pKhwBEwuSZtRqsruqv3qll95xbwIqW7AWP+/AODQltzgB0AplpC6a
8ED1nCxutDI0WrzN76UcfYxa1slRJ9sRfh+KRWQSEsU+jCSP0aD0rArYVeppXGaR
cAy5Xku7237hFdeIzlt6goHuvfDuSlbAxpuaF944TVFtmPYwe7W+S3rRSy0OtjQY
WzdSsIKXlXVMkMJD4t3ybFUMOyHP/jT79Tem0kp8EBn8NcPjtnLJYLiODVR0PH3A
5XOEzR3NLGspDxkEJWdq/7IsLL4a7wVLAYn5VbkRVzo2Jxp6IpSqPrFjYwdf/KMF
PizvbJtHTQxGFk6jPdCG+DV9hBrMOzXedcqH24qZ4yr6xUOj5WICR3+9E57DYLwH
oJzXef8BKhx4MdkDduduyWcyWJvlH2nBae2T+q+4mwfI/I+8PeyUDnSc7Hmzx1Cc
feeeccvQPrhnu8HAE0RmfF1YhfyXXq3GQEt4MaV5Z2h6aAS1zxm1EhBueJMeaEhh
i6oldiPDd2qHX9rZXYLvUx109qLyTiqxbzCgJCAF3s8Bk7P/Aj/0mDADo7d5V0TY
KsXydFzhoiTZ
=Qmdt
-----END PGP SIGNATURE-----
Merge tag 'debian/4.17.17-1'
Release linux (4.17.17-1).
- Drop "gpu: host1x: Fix compiler errors by converting to dma_addr_t"
which is already in 4.18
- Drop ABI reference files and ABI number change
2018-08-27 14:15:27 +01:00
Salvatore Bonaccorso
66fce4cbfe
Update to 4.17.16
...
Drop x86-l1tf-fix-build-error-seen-if-config_kvm_intel-is-disabled.patch
Drop x86-i8259-add-missing-include-file.patch
Drop bluetooth-hidp-buffer-overflow-in-hidp_process_report.patch
Cleanup debian/changelog file
2018-08-18 12:22:37 +02:00
Salvatore Bonaccorso
cfd1f69cfe
Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
2018-08-16 21:28:17 +02:00
Salvatore Bonaccorso
f7fa757621
[x86] i8259: Add missing include file
2018-08-16 21:18:18 +02:00
Salvatore Bonaccorso
757e7a9cb1
l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
2018-08-16 07:26:32 +02:00
Ben Hutchings
e090a7f60d
Revert "net: increase fragment memory usage limits" (CVE-2018-5391)
2018-08-14 22:23:59 +01:00
Bastian Blank
2fcc01b384
Bump ABI to 2
2018-08-13 14:02:22 +02:00
Romain Perier
f813b6ebf5
Update to 4.17.14
...
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-13 14:01:38 +02:00
Ben Hutchings
e588a3afcd
Move disabling of broken features from d/p/series-orig to d/p/series
...
Also fix fuzz on one of the patches (our private patch system allows
one line of fuzz).
2018-08-11 13:26:27 +01:00
Romain Perier
281dea527f
Update to 4.17.12
...
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-09 12:33:21 +02:00
Ben Hutchings
27f02c775b
scripts/kernel-doc: Escape all literal braces in regexes ( Closes : #905116 )
2018-08-06 00:25:05 +08:00
Salvatore Bonaccorso
522d548dd5
Partially revert "block: fail op_is_write() requests to read-only partitions"
...
Closes : #900442
2018-08-05 17:14:54 +02:00
Ben Hutchings
8131366d14
block: really disable runtime-pm for blk-mq ( Closes : #904441 )
2018-08-05 23:12:11 +08:00
Ben Hutchings
8fd88bdd2a
mtd: powernv_flash: set of_node in mtd's dev ( Closes : #904380 )
2018-08-05 21:12:59 +08:00
Ben Hutchings
9572404d42
[armhf] gpu: host1x: Drop my build fix in favour of upstream fix
...
- Revert "Revert "gpu: host1x: Add IOMMU support""
- gpu: host1x: Fix compiler errors by converting to dma_addr_t
2018-08-05 19:43:37 +08:00
Ben Hutchings
cb5e4246bf
Update to 4.18-rc7
2018-07-31 23:28:25 +08:00
Ben Hutchings
99f612471f
Update to 4.18-rc6
2018-07-26 19:52:20 +08:00