6b6dd902ca
debian/rules: Use dpkg-parsechangelog -S option to select fields
2016-12-18 02:26:21 +00:00
e0ceefaa07
Ignore ABI changes in libnvdimm
2016-12-16 11:25:36 +01:00
8e3469b562
Update to 4.8.15
2016-12-16 11:02:32 +01:00
9768234db4
debian/control: Fix build-dependency on flex to work with new versions that have M-A: foreign
2016-12-15 20:27:38 +00:00
9bf892f446
debian/rules.real: Exclude *.pyc from featureset diffs
...
Since jessie's diff returns 2 when it finds a binary (#737180 ) we need
to do this to avoid FTBFS in jessie-backports. Besides which, those
aren't part of the source.
(cherry picked from commit 62cce57936757e7492b082b2845e04be00cda5d2)
2016-12-14 23:05:22 +00:00
966cf13de0
netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755)
2016-12-14 17:12:59 +01:00
7a3d9312d0
[rt] Update to 4.8.14-rt9
2016-12-12 20:55:55 +01:00
14a852ee64
Update to 4.8.14
2016-12-12 20:28:07 +01:00
9382fc4d92
[armel] Update uri of "Origin:" in one patch, which is in v4.9 now
2016-12-12 07:57:20 +09:00
e1625e4a92
[rt] Update to 4.8.11-rt7
2016-12-10 13:13:52 +01:00
03b836246e
Update to 4.8.13
2016-12-10 13:10:07 +01:00
93304bd632
net: handle no dst on skb in icmp6_send (CVE-2016-9919)
2016-12-10 07:42:41 +01:00
d2f4158d99
Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576)
2016-12-10 07:35:50 +01:00
56659f5080
net: ping: check minimum size on ICMP header length (CVE-2016-8399)
2016-12-10 07:29:51 +01:00
9b4f84faec
Ignore ABI changes in KVM
2016-12-09 23:05:09 +01:00
33f253b15d
[amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
...
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
3a2602da33
Add ABI reference for 4.8.0-2
2016-12-09 06:22:56 +01:00
be8be2cb5f
net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
2016-12-08 19:28:56 +01:00
3b66b4fcef
packet: fix race condition in packet_set_ring (CVE-2016-8655)
2016-12-07 10:34:33 +01:00
27fc4207c6
tipc: check minimum bearer MTU (CVE-2016-8632)
2016-12-07 10:31:56 +01:00
59ebe22f2f
Update to 4.8.12
2016-12-06 21:19:22 +01:00
8f06e2bdc6
[armel] dts: marvell: fix number of sata port for linkstation ls-gl
...
Closes : #845611
2016-12-06 08:38:19 +09:00
086dccbdfe
[armhf] dts: armada-385: add support for Turris Omnia
2016-12-04 21:18:15 +01:00
489dc40883
Prepare to release linux (4.8.11-1).
2016-12-02 06:35:22 +01:00
ceb75c4337
mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213)
2016-11-30 16:15:29 +01:00
b67bd212fa
vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084)
2016-11-30 09:15:19 +01:00
609f818472
mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
2016-11-30 09:04:11 +01:00
f82ecfdc9e
Update to 4.8.11
2016-11-29 20:30:13 +01:00
3536d5d7a6
Update to 4.8.10
2016-11-28 21:10:27 +01:00
a559c41683
Update to 4.8.9
2016-11-26 17:37:18 +01:00
b69731a96b
Add CVE reference for CVE-2016-9555
2016-11-23 06:21:23 +01:00
85deb5386a
[x86] video: Disable X86_SYSFB, FB_SIMPLE ( Closes : #822575 )
2016-11-16 21:35:16 +00:00
2d21aaf508
[arm64] Enable more drivers for X-Gene (Really closes : #840061 )
2016-11-16 21:22:18 +00:00
96f3d8b5c3
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" ( Closes : #844491 )
2016-11-16 21:18:15 +00:00
b7117071e0
fs: Avoid premature clearing of capabilities (CVE-2015-1350)
...
Closes : #770492
2016-11-16 19:23:06 +01:00
b048cc5a7c
fs: Give dentry to inode_change_ok() instead of inode
2016-11-16 19:20:21 +01:00
2e74b80287
fuse: Propagate dentry down to inode_change_ok()
2016-11-16 19:18:11 +01:00
055cd5a2d1
ceph: Propagate dentry down to inode_change_ok()
2016-11-16 19:14:26 +01:00
2683f37d06
xfs: Propagate dentry down to inode_change_ok()
2016-11-16 19:11:36 +01:00
b7d167eabc
Fix changelog entry for removal of ABI reference
...
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
17805e05b4
Bump ABI to 2 and remove ABI reference for 4.8.0-2
2016-11-16 18:51:15 +01:00
26676cdca0
Update to 4.8.8
2016-11-15 22:32:40 +01:00
343333fea3
Prepare to release linux (4.8.7-1).
2016-11-13 04:38:09 +00:00
772d6648d5
debian/control: Build-Depend on a recent debhelper instead of dh-systemd
2016-11-13 04:38:06 +00:00
15da3c4884
[arm64] Enable more drivers for X-Gene ( Closes : #840061 )
2016-11-13 04:28:46 +00:00
f8420f98bc
Delete some garbage from the upstream shortlog for 4.8.7
2016-11-13 04:01:19 +00:00
d54fa44e4e
liblockdep-dev: Depend on same version of liblockdep
...
I don't know if we'll ever build it again, but in case we do let's get
this right.
2016-11-13 04:00:45 +00:00
e1b8f7e7ad
libcpupower-dev: Depend on libcpupower1 (Closes: #840852 )
2016-11-13 04:00:45 +00:00
943a798a07
IB: Enable INFINIBAND_RDMAVT as module
...
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes : #843792 )
2016-11-13 04:00:45 +00:00
d442f1a220
Note some bug closures for 4.8.6 and 4.8.7
2016-11-13 04:00:45 +00:00
Ben Hutchings
Salvatore Bonaccorso
Roger Shimizu
Uwe Kleine-König