Commit Graph

13795 Commits

Author SHA1 Message Date
Ben Hutchings 7064a34f6e [x86,alpha,m68k] binfmt: Disable BINFMT_AOUT, IA32_AOUT, OSF4_COMPAT
a.out support is now untested and occasionally results in security
bugs, and will be deprecated upstream (depends on BROKEN) for x86 in
5.1.  Disable it completely.

See:
https://lore.kernel.org/lkml/CAG48ez1RVd5mQ_Pb6eygQESaZhpQz765OAZYSoPE0kPqfZEXQg@mail.gmail.com/
https://lore.kernel.org/lkml/20190305145717.GD8256@zn.tnic/
2019-03-13 18:31:13 +00:00
Ben Hutchings 4895e487e1 Prepare to release linux (4.19.28-1). 2019-03-12 05:06:28 +00:00
Ben Hutchings 1dc1f9d062 debian/bin/gencontrol_signed.py: Use merge_packages instead of open-coding it
We already used it for udebs but not for the regular signed image
package.
2019-03-11 01:20:40 +00:00
Ben Hutchings dcd90f6ce7 debian/control: Assert that linux-{image,headers} templates describe 1 package
We only process the first package found in these templates so fail
if there are more.
2019-03-11 00:43:51 +00:00
Ben Hutchings 14ab885d53 debian/bin/gencontrol.py: Remove unused code for extra package templates 2019-03-11 00:43:41 +00:00
Ben Hutchings fb875ddeb6 Bump ABI to 4 2019-03-10 23:34:30 +00:00
Ben Hutchings 8af1902135 debian/config: Clean up using kconfigeditor2 2019-03-10 23:17:30 +00:00
Ben Hutchings 4454021eb3 debian/bin/gencontrol_signed.py: Put all files.json fields under "packages"
Follow the schema change made in
3a07a08a82
2019-03-10 22:46:07 +00:00
Ben Hutchings f9acfb6f08 debian/config: Note the need to set SYSTEM_TRUSTED_KEYS in featureset config 2019-03-10 22:28:08 +00:00
Ben Hutchings 16e5e055ca certs: Replace test signing certificate with production signing certificate 2019-03-10 22:28:08 +00:00
Vagrant Cascadian 8a42d3ccb9 debian/changelog: Note upstream change closing bugs #913119, #913138. 2019-03-10 15:21:11 -07:00
Ben Hutchings 515c2c91cf Add Origin fields and update headers for patches that are applied upstream 2019-03-10 22:08:58 +00:00
Ben Hutchings d96f9fae1b Refresh and fix header of "MIPS: Loongson: Introduce and use loongson_llsc_mb()" 2019-03-10 22:01:18 +00:00
Ben Hutchings 3f14005d42 Merge branch 'sid' into 'sid'
MIPS related backports to 4.19

See merge request kernel-team/linux!131
2019-03-10 21:57:55 +00:00
Ben Hutchings 224fd4bf26 debian/changelog: Note upstream change closing bug #921542 2019-03-10 21:49:26 +00:00
Romain Perier 340ed90d8e Update to 4.19.28 2019-03-10 16:57:21 +01:00
Salvatore Bonaccorso 22610f2634 exec: Fix mem leak in kernel_read_file (CVE-2019-8980) 2019-03-10 09:00:43 +01:00
Ben Hutchings 531357e266 debian/changelog: Only close #922182 once 2019-03-07 21:47:35 +00:00
Ben Hutchings 3ebd4206bf debian/changelog: Clean up 4.19.27 changes
* "svm" is AMD's virtualisation interface for x86 only
* We don't support the MIPS BCM63xx platform
2019-03-07 21:43:35 +00:00
Romain Perier e702b1ae75 debian/changelog: Added accidentaly removed entries and Closes #922182 2019-03-06 18:56:59 +01:00
Salvatore Bonaccorso a53ae83b62 Add CVE id reference for CVE-2019-9213
Gbp-Dch: Ignore
2019-03-06 17:33:45 +01:00
Romain Perier 8864787e64 Update to 4.19.27 2019-03-06 16:38:16 +01:00
YunQiang Su 2357044444 [mipsel/mips64el] Backport loongson workarounds
MIPS: Loongson: Introduce and use loongson_llsc_mb()
2019-03-06 21:15:23 +08:00
YunQiang Su 40b0b77497 Enable some boston drivers
IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC, PCIE_XILINX,
RTC_DRV_M41T80, SPI_TOPCLIFF_PCH
2019-03-06 21:15:22 +08:00
YunQiang Su 5ba611e17d [mips r6] CPU and ASE related modify
Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS.
Set NR_CPUS to 16.
2019-03-06 21:15:22 +08:00
YunQiang Su b710f665ba [mips r6] enable SERIAL_OF_PLATFORM
If serial of platform is not enabled, userland shows nothing on console.
2019-03-06 21:15:22 +08:00
YunQiang Su cf0de8585e [mips r6]disable JUMP_LABLE: cause Reservered Instruction 2019-03-06 21:15:22 +08:00
Ben Hutchings 1b7fcaadae [armel/rpi] tracking: Don't override tracing options
I don't see any reason to enable these per-flavour.
2019-03-05 20:57:04 +00:00
Ben Hutchings df5732713c Merge branch 'sid-cleanup-arm64-di' into 'sid'
Sid cleanup arm64 di

See merge request kernel-team/linux!130
2019-03-05 20:43:58 +00:00
Ben Hutchings c2a762a435 Merge branch 'rperier-guest/linux-armel_rpi' into sid
[armel/rpi] Add flavour for Raspberry Pi and Raspberry Pi Zero

See merge request kernel-team/linux!117
2019-03-05 20:39:14 +00:00
Ben Hutchings 12c2125853 debian/changelog: Add missing architecture qualifications 2019-03-05 20:31:24 +00:00
Ben Hutchings e1259b5b3a debian/changelog: Delete some stable changes that don't affect us
These drivers/features don't seem to be enabled in any configuration.
2019-03-05 20:30:51 +00:00
Marcin Juszkiewicz e8890b92b6 [arm64] udeb: Remove redundant lines from nic-modules
All drivers listed were Ethernet ones and such are added by global
config already.
2019-03-05 21:23:02 +01:00
Marcin Juszkiewicz 3afa55a954 [arm64] udeb: Use generic ata-modules
arm64 does not have any special ata drivers so instead of listing
'libata' we can just reuse global ones.
2019-03-05 21:23:01 +01:00
Romain Perier 6b175bc9fd Enable STRICT_MODULE_RWX
With this option set, module text and rodata memory areas will be made
read-only. Moreover, non-text memory will be made non-executable. This
provides protection against certain security exploits. Currently, this
option is implicitly enabled in Kconfig for most configurations where it
is possible to enable it. This commit enables the option by default
explictly for all supported targets (except marvell to keep it small)
2019-03-05 21:10:12 +01:00
Romain Perier 693bbd783d [armel, armhf] Enable CRASH_DUMP
When set, this generates crash dump after being started by kexec. Useful
for debugging purpose on ARM. As this is already enabled for other arch,
enable it for ARM, as well (except marvell to keep it small).
2019-03-05 21:00:28 +01:00
Ben Hutchings 1ef9b5a41e debian/changelog: List changes in 4.19.25-rt16 2019-03-05 19:56:21 +00:00
Romain Perier f24c6b7b60 [armel/rpi] Add flavour for Raspberry Pi and Raspberry Pi Zero
Nowadays, Raspberry Pi 2 and Rasberry Pi 3 works perfectly fine with
Debian (including the official kernel package or the userland). RPi 1
and RPi Zero have an SoC that contains an armv6-based CPU, this means
that it cannot work with an hardfloat ABI, that is armv7 based. So we
have to use the Debian armel userland for this reason. Both boards are
supported in the mainline linux kernel and not being supported in the
debian-kernel package is the only blocking point that prevent RPI 1 and
RPI Zero from being well supported in an official Debian distribution.
This commit add a new kernel flavour for enabling support for the both
platforms.
2019-03-05 20:55:45 +01:00
Ben Hutchings ad9f27e1eb Merge branch 'sid-4.19.21-wip' into 'sid'
4.19.26

See merge request kernel-team/linux!126
2019-03-05 19:49:02 +00:00
Ben Hutchings 96e3ed26a7 debian/bin/gencontrol.py: Add rules to build debian/build/config.*
It is no longer possible to run the "setup" rules without a compiler,
because Kconfig symbols can depend on compiler properties.  Add a way
to invoke just the first step of setup, which merges the kconfig files
and overrides together.
2019-03-05 19:11:48 +00:00
Ben Hutchings 09f2b8df70 gencontrol: Introduce and use arch/featureset/flavour iterator functions 2019-03-05 19:11:48 +00:00
Romain Perier 2ef57b8ec9 [rt] Update to 4.19.25-rt16 2019-03-05 14:29:38 +01:00
Marcin Juszkiewicz 8e3ab60ac6 update to 4.19.26 2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz 1b33d3e00b update to 4.19.25 2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz 37e6c11924 update to 4.19.24 2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz 493801a88a update to 4.19.23 2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz ee5b6f81c6 update to 4.19.22 2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz e60f3ee90a perf: disable libfd-liberty libbfd-liberty-z
Due to "perf build: Don't unconditionally link the libbfd feature test
to -liberty and -lz" commit in 4.19 stable tree.

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.19.y&id=303d29d8f0cfccfc283322648a617033cd69a70f
2019-03-05 14:28:55 +01:00
Marcin Juszkiewicz 4a0b4cb79e update to 4.19.21 2019-03-05 14:28:55 +01:00
Vagrant Cascadian 5cb904c8a9 [arm64] Add patch from v4.20 to enable device-tree for Pine64-LTS. 2019-03-04 07:56:07 -08:00