Commit Graph

6674 Commits

Author SHA1 Message Date
Uwe Kleine-König c4c4bb74e0 merge my two groups of log entries
I wonder why dch didn't do the right thing from the start
2016-08-11 22:19:53 +02:00
Uwe Kleine-König a9d7770fa3 [rt] fix conflicts between v4.6.6 and v4.6.5-rt10 2016-08-11 22:13:58 +02:00
Uwe Kleine-König aad68942e4 [rt] Update to 4.6.5-rt10 2016-08-11 21:43:53 +02:00
Salvatore Bonaccorso 3ff8b0fe18 Add CVE reference for CVE-2016-5400 2016-08-11 16:39:01 +02:00
Salvatore Bonaccorso 457d8bb6bd Update to 4.6.6 2016-08-11 16:29:28 +02:00
Martin Michlmayr 610bb612cf Enable more Qualcomm options
Enable more Qualcomm options required by the DragonBoard 410c.

PINCTRL_QCOM_SPMI_PMIC was changed to built-in in line with
other similar options.
2016-08-05 17:43:42 -07:00
Ben Hutchings d5ac562bf2 Drop my name from the upstream stable update 2016-08-05 19:51:19 +01:00
Ben Hutchings 3a410c0e4d Bump ABI to 2 2016-08-05 19:49:46 +01:00
Ben Hutchings df9be3c95e linux-kbuild: Include headers_install.sh and unifdef (Closes: #832359) 2016-08-05 19:15:54 +01:00
Salvatore Bonaccorso c0e269c0cd libata: LITE-ON CX1-JB256-HP needs lower max_sectors
Closes: #830971
2016-08-05 15:40:08 +02:00
Martin Michlmayr ce0127a26b [arm64] Enable more Tegra related options
Enable options for Tegra-baseddevices Jetson TX1 and Google Pixel C.

This is based on upstream commit 10a7b37b5b969d9998912e50946f7a03111037eb
2016-08-02 17:39:40 -07:00
Martin Michlmayr 1b4a6ac3f2 [arm64] Build in SERIAL_TEGRA
For consistency with other SERIAL_ options.
2016-08-02 16:50:12 -07:00
Martin Michlmayr a546b9192c [arm64] Enable ARM64_ERRATUM_834220 2016-08-02 16:36:28 -07:00
Martin Michlmayr 3da99236e3 [arm64] Enable REGULATOR_FIXED_VOLTAGE
Enable REGULATOR_FIXED_VOLTAGE which is used at least by the NVIDIA
Jetson TX1.
2016-08-02 15:55:13 -07:00
Martin Michlmayr 02b2135a4b Add USB support for NVIDIA Jetson TX1 Developer Kit
Add patches from 4.8-rc1 required for USB support on the NVIDIA Jetson
TX1 Developer Kit.
2016-08-02 15:54:01 -07:00
Salvatore Bonaccorso c2a8f662b5 vfs: ioctl: prevent double-fetch in dedupe ioctl (CVE-2016-6516) 2016-08-02 06:47:28 +02:00
Martin Michlmayr 75ed810e36 [armhf] Enable HW_RANDOM_BCM2835
This was built already implicitly but let's add it explicitly.
2016-07-31 15:28:39 -07:00
Martin Michlmayr 49a2579f52 [armhf] Enable MMC_SDHCI_IPROC 2016-07-31 15:23:38 -07:00
Uwe Kleine-König f8edc4357a Fix perf to be able to find debug info based on build-id. 2016-07-31 22:35:09 +02:00
Ben Hutchings e8c1b8e306 Update to 4.6.5
Drop patches applied upstream.

There are some ABI changes still to be resolved.
2016-07-31 01:50:59 +01:00
Ben Hutchings 0ddaf6aed3 cgroups: Enable memory controller by default 2016-07-29 12:23:32 +01:00
Ben Hutchings 7aa0b02a27 Clean up kconfig with the aid of kconfigeditor2
Re-enable various options disabled by name changes in 4.7.

Delete options completely removed in 4.7.
2016-07-20 04:13:49 +01:00
Ben Hutchings 50f9dba92e sched: Enable SCHEDSTATS (Closes: #796674) 2016-07-20 03:55:56 +01:00
Salvatore Bonaccorso 9da8616b57 Prepare to release linux (4.6.4-1). 2016-07-18 21:58:05 +02:00
Ben Hutchings 2b5e0aac58 Prepare to release linux (4.7~rc7-1~exp1). 2016-07-14 13:35:22 +01:00
Ben Hutchings 55947fe980 Revert "debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed"
This reverts commit f513bc42ae.  Bug
2016-07-14 13:34:20 +01:00
Ben Hutchings 6d39ffde84 Change names and descriptions of debug symbol packages to match debhelper 2016-07-14 11:42:15 +01:00
Ben Hutchings 619cd907a8 debian/lib/python/debian_linux/debian.py: Handle packages with only short descriptions 2016-07-14 11:41:47 +01:00
Ben Hutchings 775cc1229e Define Auto-Built-Package field when running dpkg-gencontrol
dpkg-source doesn't like to see it in debian/control.
2016-07-14 11:25:16 +01:00
Ben Hutchings 4e86887dda Update to 4.7-rc7 2016-07-14 10:50:31 +01:00
Ben Hutchings b19064d381 [rt] Update to 4.6.4-rt6 (no functional change) 2016-07-14 00:40:00 +01:00
Ben Hutchings bd2f2b2ea4 bridge: Fix ABI change in 4.6.4 2016-07-14 00:33:32 +01:00
Salvatore Bonaccorso f000506362 apparmor: fix oops, validate buffer size in apparmor_setprocattr() (CVE-2016-6187) 2016-07-13 20:30:05 +02:00
Salvatore Bonaccorso 1a1a829223 Update to 4.6.4 2016-07-13 17:57:14 +02:00
Ben Hutchings 38ec618a21 fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS (Closes: #690737)
Various free and proprietary AV products use this feature and users
apparently want it.  But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that.  So warn and taint the kernel if this feature is
actually used.
2016-07-13 01:53:59 +01:00
Uwe Kleine-König 0818af71cc Cherry pick patches for rtc-s35390a from next
This fixes shutting down some QNAP NAS devices after being waked up by
the rtc.
2016-07-12 21:44:39 +02:00
Bastian Blank 5e52b9de5c Build debug symbols for all images 2016-07-07 19:43:59 +02:00
Bastian Blank cf16dd6fec Move debug symbols into the debug archive
Currently the extra setting Auto-Built-Package: debug-symbols is needed
to actually move it in addition to the debug section.
2016-07-07 19:43:59 +02:00
Ben Hutchings 227bd93ded Release linux (4.6.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAV3yLEue/yOyVhhEJAQrB2hAAg7HB6NkS0qupN5a/pjupxrtDzbWAoCKH
 uv3lbVe+y13lp5tMDB4ZeALxQf7/YHKqKF6ZUUvPx5oYyRtlE3qvqEVuwtd4CLmg
 81SIIJYLZKxom9snqoJz7kjf48B4iBiJv/LXJbDx1ulE9jS1C44crwR6gIa0Bv3x
 88OjmpSFrHafetM7TF+ZR27NapBnxlwvGpBay3fjjLl+WAUKawZd7dfZ/V5f964M
 2SmKkjBzUg2ULdRzwv83X2kf2PDuv7FrEeVexbeWvbnfea2yu0s/Y77EcQFFuAUY
 ffsIrEtO7yvPKLF2np070UG9maKyOa4T450CxrFsR1bL4EvJUjRClJias1XqePn4
 mAUVfzMKB3FPAYtn78wxo7QD2c4ymYL0MQU2IGVn1WQYf0zaCszvbMmAJjJY6PND
 mQlD0rtYYKHVde3fjuxb2gbji93L88b2kj9m74PpwIo44sGuzXiX4PJLYcJpcTnq
 WzckVD5j/Kmw5lH/q/zDhWt1QlA7+YfE9kYDT/LFc4Vo24eGLcFhJWuXy+ICMK2j
 4n5i5cnWOvpyYAJW7epu0VCKL8qj7DH70Eff8dNi6gfXwZCRTvJMpjpt4P99Q8k3
 coCvQR5KyiWVPKc/xBnTYadr2blWRgm+GcN27x2PykONlYNhjsxHh7Ea7faGBFEt
 kwdBl15bzSE=
 =uSZq
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.3-1'

Drop patches included upstream.

Drop ABI maintenance changes.
2016-07-06 22:08:50 +02:00
Ben Hutchings c78d9ff512 Update to 4.7-rc6 2016-07-06 22:06:27 +02:00
Ben Hutchings 2064fe3730 Prepare to release linux (4.6.3-1). 2016-07-04 20:10:24 +02:00
Ben Hutchings ade54804a1 [powerpc*] tm: Always reclaim in start_thread() for exec() class syscalls (CVE-2016-5828) 2016-07-03 16:33:29 +02:00
Ben Hutchings aab434acde [x86] Fix incompatiblity between kaslr and hibernation
* [amd64] power: Fix crash whan the hibernation code passes control to the
  image kernel
* [x86] KASLR, power: Remove x86 hibernation restrictions
2016-07-02 19:29:28 +02:00
Ben Hutchings f513bc42ae debian/control: Relax cross-compiler build-dependencies, now that #827136 is fixed 2016-07-02 09:44:37 +02:00
Salvatore Bonaccorso 3c35987b05 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (CVE-2016-5829) 2016-06-30 14:53:31 +02:00
Ben Hutchings 419d6356df Update to 4.6.3 2016-06-27 00:58:54 +02:00
Ben Hutchings 15c473a9c7 Prepare to release linux (4.6.2-2). 2016-06-25 11:22:27 +02:00
Salvatore Bonaccorso c42ea367e3 Add CVE identifier for nfsd issue 2016-06-25 07:22:30 +02:00
Ben Hutchings 0bb71866b7 Ignore ABI change in x_tables 2016-06-25 02:05:12 +02:00
Ben Hutchings 12183bf924 nfsd: check permissions when setting ACLs (CVE-2016-XXXX) 2016-06-25 00:56:15 +02:00
Ben Hutchings 9fd7bbdf1a netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings f5f99415a2 percpu: Fix synchronization with chunk destruction (CVE-2016-4794) 2016-06-25 00:19:08 +02:00
Ben Hutchings b782c52536 KEYS: potential uninitialized variable (CVE-2016-4470) 2016-06-25 00:18:47 +02:00
Martin Michlmayr fcf753ae77 [armhf, arm64] Enable DRM_TEGRA_STAGING
DRM_TEGRA_STAGING must currently be enabled in the kernel and libdrm
must be built with --enable-tegra-experimental-api.  Our libdrm package
already does the latter (at least on armhf), so enable the former as
well.
2016-06-23 18:13:27 -07:00
Ben Hutchings e25a0f09c3 Merge remote-tracking branch 'alioth/master'
Conflicts:
	debian/changelog
2016-06-21 20:44:48 +01:00
Aurelien Jarno 9e45452683 [mipsel] Remove loongson-2e and loongson-2f flavours (Closes: #827790). 2016-06-21 21:11:23 +02:00
Ben Hutchings e4b00d29cc Prepare to release linux (4.7~rc4-1~exp1). 2016-06-21 00:41:23 +01:00
Ben Hutchings eb1373a157 Update to 4.7-rc4 2016-06-20 13:40:09 +01:00
Ben Hutchings b9ef626a40 [rt] Update to 4.6.2-rt5 2016-06-19 22:11:38 +01:00
Ben Hutchings e65d07eb2b [armel] Disable module signing for all flavours (fixes FTBFS)
We only build udebs for modules that will not be signed, but we don't
currently have a way to selectively build udebs for only some
flavours.
2016-06-19 19:36:05 +01:00
Ben Hutchings 4981b73c71 Prepare to release linux (4.7~rc3-1~exp1). 2016-06-18 23:50:39 +01:00
Ben Hutchings 5e48a143f6 debian/control: Add workaround for libdpkg-perl bugs #827628, #827633
Dpkg::Deps has a couple of bugs that were resulting in the
libssl-dev:native build-dependency being discarded by dpkg-source.
2016-06-18 23:49:47 +01:00
Ben Hutchings 60b1e00fa0 Note closure of bug #827618 2016-06-18 21:30:55 +01:00
Ben Hutchings a808d3112b Release linux (4.6.2-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABCgAGBQJXYbBEAAoJEAVMuPMTQ89EM8wP/3llI8Jr6Q+2ktVOqYQ7U0JT
 +UEzEuKlVS+3/SjFZv8dAqpM018OJDIiccgzjvuny6MSYHiH//yWG4lC8O2WikBA
 RhfbUsNWFImEkwhY8wD1cjuF0QIXNtR7qOKdCPX5wQUiG469WF4F4l3lgWoo01ub
 hYXNsGebIjZTQE6KWGm97pvSRNFPT18DulANGpe9m804y2Xs+dQn6dVHKaSYT0BF
 labA6C+hCmbMos3gEYNzjbmU9fxYpS98pXq7uc04ryBj3UjGoBlmxeip9yrIiC0I
 oZr8kAxz5PCRSqPnhZqE51WO6eLaWIrEGGTnb6sOtbHYsTrNu8iHpWXVCkB8/2GL
 LYhOJn3AyqJE4yb69EKSWL7cbVEqyVJHkGntGhTm+tKJP0QmnKlhQY47aViPt4Fc
 IXQvUOeG94GROooRTNLp9/3N2di4p4YPNv2QgM5lUJjySWUMCNzw/MjpYfvuIHrp
 bowSN5EYDpO6WqcZZVHogM9hJ2Aq+zWYkfK4f38r4T4+g0T8IQ8qMCY/o/LV7uod
 KUbQ7SIHK7uAMT9BpJuslCwvwhKdf/9y/bcuOkB2alfR52uApdDkL04uD5jIbjaL
 fElOyQPmJPNe0zxP6yZp4G3/JbMhWdX+qc77+GWkj27mBqnBEZKBHjCmU/6Vfv2Y
 VolsoZ6sfxJ1pxlUcWPt
 =li3O
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.6.2-1'
2016-06-18 12:59:57 +01:00
Ben Hutchings 7f701b08f9 Update to 4.7-rc3 2016-06-18 12:53:02 +01:00
Ben Hutchings 9edbacb8a5 MIPS: libgcc: Fix ABI change in 4.6.2 2016-06-17 01:50:50 +01:00
Ben Hutchings 966488336f [mips*] Fix ABI change in 4.6.2 2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso 86e7845331 Prepare to release linux (4.6.2-1). 2016-06-15 21:45:02 +02:00
Ben Hutchings ece80cbbec liblockdep: Add all the patches submitted upstream; drop one that's obsolete
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Aurelien Jarno 70251fbb57 [ppc64*] Enable SPAPR_TCE_IOMMU, VFIO and VFIO_PCI (Closes: #826367). 2016-06-13 22:51:06 +02:00
Ben Hutchings 8bef69e784 Merge branch 'master' of git+ssh://git.debian.org/git/kernel/linux 2016-06-13 02:08:57 +01:00
Ben Hutchings 0ad327058f Fix build rules for userland tools to support cross-building
Pass $(CROSS_COMPILE) or host GNU type through to upstream build rules.

debian/rules.real: Filter tools packages by host arch, not build arch

debian/rules.d/Makefile: Build the tools needed for headers_install in
a separate subdirectory
2016-06-13 02:06:19 +01:00
Ben Hutchings a7ebaf2684 Add support for the nopython build profile, disabling the linux-perf package
Currently we build-depend on the native python (via asciidoc), and on
the host python (via python-dev).  As these are not coinstallable it
is impossible to perform a complete cross-build.  Until that's resolved,
this will allow cross-building of most of the package with the
combination of the 'cross' and 'nopython' profiles.

(This also sidesteps the issue of perf wanting a multilib compiler.)
2016-06-13 02:04:39 +01:00
Ben Hutchings 0aceb8739a debian/control: Fix build-dependencies for cross-building
The current cross-compiler packages don't set the Multi-Arch field, so
specify that the cross-compiler package must be native, rather than any
architecture.

flex doesn't support multi-arch, and this would require splitting it
(#611230, #761449).  Force use of the native package for now.

openssl doesn't support multi-arch but probably easily could (#827028).
Force use of the native package for now.

We need the native libssl-dev while building the kernel itself and the
host libssl-dev while building tools for linux-kbuild.

Document the state of cross-building in README.source.
2016-06-13 02:02:54 +01:00
Ben Hutchings cc2ac0be61 debian/README.source: Document the supported build profiles 2016-06-13 00:38:28 +01:00
Ben Hutchings 1ed7b4bdf1 linux-cpupower: Define PACKAGE_BUGREPORT to refer to reportbug, not upstream 2016-06-13 00:23:09 +01:00
Ben Hutchings 7d8366f375 debian/rules.d/Makefile: Override architecture detection when building userland headers
Martin Michlmayr found that userland builds fail if 'uname -m' reports
the native kernel architecture, and that's because we don't explicitly
set ARCH for the headers_install target.  That's fine for most cases
of a 32-bit chroot on a 64-bit kernel because a single source
architecture covers both, but arm/arm64 is an exception.

This doesn't make actual cross-builds of userland tools work.
2016-06-12 20:47:56 +01:00
Martin Michlmayr 66c93587c9 [armhf] Enable SPI_TEGRA114 2016-06-12 11:58:47 -07:00
Martin Michlmayr 2f9a7600a6 [arm64] Enable MAX77620 and PCA9539 which are required by Jetson TX1
Enable some options used by the Jetson TX1 board.  MAX77620 is used
as system PMIC and PCA9539 as I2C GPIO bus expander.

Set I2C=y since this is required by MFD_MAX77620.

CONFIG_GPIO_MAX77620 and CONFIG_GPIO_MAX77620 are not upstream yet
but will be.  I'm adding the options now to make the commit cover
everything needed.

This is patched on a patch submitted upstream by Laxman Dewangan.
2016-06-11 22:27:41 -07:00
Martin Michlmayr 14a65240ad [arm64] Enable more QCOM options 2016-06-11 00:32:32 -07:00
Martin Michlmayr 8d2b25e989 [armhf] Enable TEGRA_SOCTHERM 2016-06-11 00:29:15 -07:00
Martin Michlmayr 6902e92ec8 [arm64] Enable THERMAL
We had some thermal options in the config file but they weren't enabled
because CONFIG_THERMAL wasn't enabled.
2016-06-11 00:25:35 -07:00
Martin Michlmayr cb248f2010 [arm64] Enable TEGRA210_ADMA 2016-06-11 00:21:15 -07:00
Martin Michlmayr 25e663afc5 [armhf, arm64] Enable PHY_TEGRA_XUSB and USB_XHCI_TEGRA 2016-06-11 00:20:18 -07:00
Salvatore Bonaccorso 95cba203d5 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244) 2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso f1921659a4 Add missing changelog entry for CVE-2016-5243 2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso 91d6f22ed8 Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
proc: prevent stacking filesystems on top

ecryptfs: forbid opening files without mmap handler

sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings ff5804f208 cpupower: Bump soname version and rename library package accordingly 2016-06-10 14:47:48 +01:00
Ben Hutchings 906f7b1351 Update to 4.7-rc2
[rt] Disable until it is updated for 4.7 or later
2016-06-10 14:47:48 +01:00
Ben Hutchings 72f58e83ea linux-image: Add '-unsigned' suffix to packages with modules that will later be signed 2016-06-10 14:47:47 +01:00
Ben Hutchings 5a1dc12690 udeb: Drop packages for modules that will later be signed
These packages will be taken over by src:linux-signed.  Still do
everything but building the packages so we find configuration
errors before building linux-signed.
2016-06-10 02:54:44 +01:00
Ben Hutchings 2622600fec [armel,armhf,sh4] linux-image: Do not suggest fdutils
BLK_DEV_FD has *never* been enabled on any of these architectures!
The old arm/footbridge configuration did enable it and this suggestion
seems to be have been thoughtlessly copied over to these other
architectures.
2016-06-09 17:44:47 +01:00
Ben Hutchings 1537ff1314 Update to 4.6.2 2016-06-09 17:44:47 +01:00
Ben Hutchings fb5d796272 Move merge_packages function from debian/bin/gencontrol.py to gencontrol module
linux-signed will use this function in future.
2016-06-08 23:24:07 +01:00
Ben Hutchings 5cdbf6167d bug script: Put binary package name and version in the info file so linux-signed can easily replace them 2016-06-07 19:40:17 +01:00
Ben Hutchings fb04cb5ff1 Prepare to release linux (4.6.1-1). 2016-06-06 18:13:57 +01:00
Ben Hutchings 16ef878aea Set ABI to 1 and version to 4.6.1-1 2016-06-06 18:13:54 +01:00
Ben Hutchings cab1f743c8 Disable MODULE_SIG for architectures not supported by linux-signed 2016-06-06 18:12:47 +01:00
Ben Hutchings 3df161c94f linux-image: Use linux-check-removal command in prerm; remove debconf templates
This removes most of the remaining complexity from the script.
2016-06-06 17:21:34 +01:00
Ben Hutchings c739973adc debian/control: Update policy version to 3.9.8; no changes required 2016-06-05 23:32:11 +01:00