Commit Graph

12428 Commits

Author SHA1 Message Date
Ben Hutchings dd4cdb459d Ignore ABI changes in rds and ufshcd, not useful to OOT modules 2017-03-12 21:46:24 +00:00
Ben Hutchings 70bad880ac [rt] Refresh one patch that had a textual conflict with 4.9.14 2017-03-12 18:37:37 +00:00
Ben Hutchings f96b366d00 Update to 4.9.14
Drop a patch applied upstream.

Ignore ABI changes as they shouldn't affect OOT modules.
2017-03-12 18:35:37 +00:00
Ben Hutchings 11d69f4069 tty: n_hdlc: get rid of racy n_hdlc.tbuf (CVE-2017-2636) 2017-03-08 03:07:36 +00:00
Ben Hutchings cd00ebfdee [rt] Update to 4.9.13-rt12 2017-03-08 03:01:24 +00:00
Ben Hutchings 7513bdfe2b Kbuild.include: addtree: Remove quotes before matching path (regression in 4.8)
loses: #856474
2017-03-04 02:19:07 +00:00
Ben Hutchings 79e486b59b [media] dvb-usb: don't use stack for firmware load or reset (Closes: #853894) 2017-03-01 15:43:37 +00:00
Ben Hutchings 55ed209c93 Add ABI reference for 4.9.0-2
This should have been done after building 4.9.10-1, and then we
would have spotted that 4.9.13-1 broke the ABI.  As it is, we're
going to have to stick with 4.9.13-1 as being definitive for this
ABI version (4.9.10-1 never reached testing).
2017-02-28 14:52:59 +00:00
Ben Hutchings f1c761e452 Prepare to release linux (4.9.13-1). 2017-02-27 15:58:07 +00:00
Ben Hutchings ab97125626 [rt] Update to 4.9.13-rt10 2017-02-27 15:57:02 +00:00
Ben Hutchings 49569a3b8c sctp: deny peeloff operation on asocs with threads sleeping on it (CVE-2017-6353) 2017-02-27 15:49:27 +00:00
Salvatore Bonaccorso 28bcf3a477 Add CVE-2017-6348 CVE identifier 2017-02-27 06:52:48 +01:00
Salvatore Bonaccorso 3333d73728 Add CVE-2017-6347 CVE identifier 2017-02-27 06:48:34 +01:00
Salvatore Bonaccorso ba31bbd36f Add CVE-2017-6346 identifier 2017-02-27 06:42:54 +01:00
Salvatore Bonaccorso 62bab38998 Add CVE-2017-6345 identifier 2017-02-27 06:38:46 +01:00
Ben Hutchings 49c2b92937 time: Disable TIMER_STATS (CVE-2017-5967)
The upstream "fix" for this is to remove the feature, as it is
redundant with tracing.  I'd be quite happy to do that, but it
introduces several conflicts with the PREEMPT_RT patch series.

Unless and until those are resolved in 4.9-stable and 4.9-rt, disable
it in our kconfig and add a dependency on BROKEN to ensure it's
disabled in custom kernels too.
2017-02-26 21:05:05 +00:00
Ben Hutchings f32a03523e ipc/shm: Fix shmat mmap nil-page protection (CVE-2017-5669) 2017-02-26 20:51:00 +00:00
Ben Hutchings 003300166a [x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596) 2017-02-26 20:29:29 +00:00
Ben Hutchings 93819d25f0 Update to 4.9.13 2017-02-26 20:10:47 +00:00
Ben Hutchings 5d326c4855 udeb: Add more USB host and dual-role drivers to usb-modules (Closes: #856111)
This mostly affects armhf, but it should be safe to list all the
directories in the common usb-modules.  The module list should now
match initramfs-tools.

Remove the redundant list of specific modules for armhf-armmp.
2017-02-25 21:40:03 +00:00
Ben Hutchings a5fbe7bcef Update to 4.9.12 2017-02-25 21:36:31 +00:00
Salvatore Bonaccorso fe42826053 Wrap two long changelog entries 2017-02-23 19:18:07 +01:00
Salvatore Bonaccorso 4746877ba5 Add CVE id for CVE-2017-6214 2017-02-23 19:17:24 +01:00
Ben Hutchings 1bdf4070d4 Prepare to release linux (4.10-1~exp1). 2017-02-22 20:58:19 +00:00
Ben Hutchings 1fcade696a Update to 4.10 2017-02-22 20:58:16 +00:00
Ben Hutchings 8c94f719fa Release linux (4.9.10-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlinNOsACgkQ57/I7JWG
 EQntWg//RuNSbOQeyML971UnFUtZjY3yAUYqhPJdpJimjY3WHjmZlJQrLlSz9IYQ
 48Pkt/64P0+iAr9zJ+3uJv1fOagKePd5RaS/iChJdvq0fCGZstFlti5NwXEQtGSv
 Yzp0LStZr+pEPZo+8Bo+TVSP25FNXdZBvhUXE2sbxaV8+W9Vx+qFkfrWEiW7hpFv
 nCQJic7kmzllS4Aol9e/jj2MqcdWIhviufAImNnfrbpK61Ud6Gznw9gTODw9+OIT
 ny6F/k7O6MFPuHp3aAxVC5TCowh16PcC+VqJF9MTnnvHQmD3jYqdeA8zKLnW/tJk
 Dl9A6whZ3n4fFRlGjgxjmTP/CgAIeQVqgTgYCApuQQTVG3svIkznoXJLraj5UE90
 rzeB30x3ikUWcVggN7xfSkW3e6/v+XSbRfu73sFA81mWyWoddT/NYhw+Y18ym4UJ
 Vk8iuAakpjdVj73FSyYOcNGRzOEp2SAV72EsJEMw1/IlIkmRkMmJkkg4T/HYj11P
 jK/TjZtSsVbje4zx9/U6g8Rj4Wi40EHZu6kuh2jUhCk91zsAr+7EC45gZC+uohxL
 jxKxv2R5p9AR7uN6JzQR4OuOL1bTCrt02MrWdsiPlUi0RBKlJ7O5sGMMsHrVMinn
 4zFNeYq2U3Fyaejb32x3DOKtgCjoMRQ5iHyrjgljhzxJcf3fWKk=
 =rRkU
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.10-1'

Drop changes to aufs.
2017-02-22 20:57:36 +00:00
Salvatore Bonaccorso e88bad2d33 Add CVE-2017-5897 CVE id to changelog entry 2017-02-20 15:10:28 +01:00
Salvatore Bonaccorso 8db6ed9e89 dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074) 2017-02-19 10:46:20 +01:00
Ben Hutchings 4fe7cfed42 Update to 4.9.11
Ignore/avoid a few ABI changes in net.
2017-02-18 21:54:07 +00:00
Ben Hutchings 7b50304bda Update to 4.9.11 2017-02-18 20:53:41 +00:00
Ben Hutchings 5e5afa386a [armhf] Enable DRM_OMAP_PANEL_TPO_TD028TTEC1, PWM_OMAP_DMTIMER as modules (Closes: #855472) 2017-02-18 20:29:32 +00:00
Ben Hutchings 5d590456c4 [armel] dts: kirkwood: Fix SATA pinmux-ing for TS419 (Closes: #855017) 2017-02-18 00:38:36 +00:00
Ben Hutchings ad25780220 Prepare to release linux (4.9.10-1). 2017-02-17 13:18:17 +00:00
Ben Hutchings 7472d245e8 Fix patch format for "ARM: dts: orion5x-lschl: More consistent naming on linkstation series"
patch and quilt can apply git-style rename patches, but dpkg-source cannot.
Thus this patch had no effect at all when unpacking a source package.
2017-02-17 13:16:38 +00:00
Ben Hutchings 92d269eac2 media: dvb-usb-dibusb-mc-common: Add MODULE_LICENSE (Closes: #853110) 2017-02-17 02:56:32 +00:00
Ben Hutchings 4e1df53c24 [x86] xen: Fix APIC id mismatch warning on Intel (Closes: #853193) 2017-02-17 02:42:17 +00:00
Ben Hutchings 31532f0851 [x86] platform: acer-wmi: setup accelerometer when machine has appropriate notify event (Closes: #853067) 2017-02-17 02:37:50 +00:00
Ben Hutchings fdd44fecba udeb: Add bcache to md-modules (Closes: #718548) 2017-02-17 02:26:47 +00:00
Ben Hutchings d7a4c15c51 [m68k] Change MAC8390, MAC_SCSI from built-in to modules (Closes: #826614)
udeb: Add mac8390 to nic-shared-modules
2017-02-17 02:21:21 +00:00
Ben Hutchings df90250caf [armel/marvell] hwmon: Enable SENSORS_G762 as module (Closes: #854662) 2017-02-17 02:14:35 +00:00
Ben Hutchings daef7b18db [arm64] drm: Enable DRM_AST as module (Closes: #820168)
udeb: Add ast to fb-modules
2017-02-17 02:05:03 +00:00
Ben Hutchings 0269fc8b24 Clean up kconfig using kconfigeditor2 2017-02-17 02:03:47 +00:00
Ben Hutchings c69737eaf8 Note that 4.9.9 closes #853073, #855055 2017-02-17 01:58:58 +00:00
Ben Hutchings e035177b13 net: ipv6: check route protocol when deleting routes (Closes: #855153) 2017-02-17 00:58:21 +00:00
Ben Hutchings 8cf3230524 dccp: Disable auto-loading as mitigation against local exploits 2017-02-16 19:11:26 +00:00
Ben Hutchings 10f2dad569 Update to 4.9.10 2017-02-16 19:06:43 +00:00
Salvatore Bonaccorso 452d9f1e7d Add CVE-2017-6001 CVE id to changelog for 4.9.9-1 2017-02-16 05:14:56 +01:00
Salvatore Bonaccorso 58fbff3df5 sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986) 2017-02-15 11:54:59 +01:00
Salvatore Bonaccorso 9e381d5c13 ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970) 2017-02-15 11:50:22 +01:00
Salvatore Bonaccorso 4e5e705c5f selinux: fix off-by-one in setprocattr (CVE-2017-2618) 2017-02-15 11:44:55 +01:00