Commit Graph

1465 Commits

Author SHA1 Message Date
Ben Hutchings 1549b29ea0 Add follow-up fixes relatd to CVE-2017-13080 2017-11-16 17:35:46 +00:00
Ben Hutchings f4e45ee455 Update to 4.13.13 2017-11-16 17:32:44 +00:00
Salvatore Bonaccorso 6ff07bd9a5 sctp: do not peel off an assoc from one netns to another one (CVE-2017-15115) 2017-11-16 15:22:47 +01:00
Salvatore Bonaccorso 5d9e74ced8 mac80211: accept key reinstall without changing anything (CVE-2017-13080) 2017-11-16 15:18:54 +01:00
Salvatore Bonaccorso 95757c39a8 Update to 4.13.12 2017-11-11 09:29:31 +01:00
Salvatore Bonaccorso e7fd57b49f netfilter: nft_set_hash: disable fast_ops for 2-len keys
Closes: #880145
2017-11-04 15:43:57 +01:00
Salvatore Bonaccorso 4b0df3bed7 cifs: check MaxPathNameComponentLength != 0 before using it
Thanks: Andrew Chadwick

Closes: #880504
2017-11-04 09:55:14 +01:00
Ben Hutchings 48bb38a3f7 Update to 4.13.9
Drop many patches which are now upstream.

Avoid/ignore ABI changes as appropriate.
2017-10-26 22:41:11 +02:00
Ben Hutchings 4206eefe13 Update to 4.14-rc5 2017-10-17 23:34:01 +01:00
Ben Hutchings 146583d59c Release linux (4.13.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlnjY8RfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89E05EP/2gI2pOyeOjGAzSiu/SRd5mHcLfRJkqE
 osob+C8dJsWQdgWLtO1SQkRYybBuBoujSVAo9X6pezI6OBmcKbJc8eAejWYVPtL8
 pSI7OomkTyx6AP7EKfe89kpgf4Qe8QOYrXukW050RcE78fCm3icznACeubY9ET9T
 s7+DAGWWkJpHO3rIErNxgJFMEibpKsIIcrUOIZrSsZwpQTlh7KV8tozIBiE8l135
 ocZKaGGqBQcTIWX7gVjcdpBNacxcFghRHodFCwrrv9wFvAg/s+0TN1YQXSucitQH
 Cp9iO4McDeQxDvcSQyBhQmlCxcL/+JxnfosJmabBvwn7L45dGm+pbsGviIG86tyM
 O7fNs82xdMxCFc9CIXKrE3hAk+mjXuMiUc7mha3/1+cS/Di444N5djXmvj8D84pu
 i/pp6D8zWNe/imid9sFH/txst3sgsSvlf77W3HXxZqJ5GOLzluApSX2eptpDRI1Q
 E/RU2R2T/NPTChroHsZr5QZ6iV/YS2F9E0YYAQcDuWNXS9Ey7nK+gjKqa7/5B6n1
 STtT0HMD0fcAfvWN1rk9mudm6ZNYgLpjYKtFsaFf/K4I5f4fIhvnCbnnFgKMA3Qx
 rcLh201dG1fGwQ2EpiD5S0pqn7iYEP2d9vHzo363l20FyfQ8jgGt7dNfceEuiCSs
 O+EKuTohhEJH
 =juOG
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.4-2'

Release linux (4.13.4-2).
2017-10-16 00:09:19 +01:00
Salvatore Bonaccorso 52c8b81bca ALSA: seq: Fix use-after-free at creating a port (CVE-2017-15265) 2017-10-13 06:52:33 +02:00
Salvatore Bonaccorso 35125947a2 waitid(): Add missing access_ok() checks (CVE-2017-5123) 2017-10-12 21:16:37 +02:00
Salvatore Bonaccorso 6f55d3e571 KEYS: prevent KEYCTL_READ on negative key (CVE-2017-12192) 2017-10-12 07:55:47 +02:00
Salvatore Bonaccorso 7c8172804e mac80211: fix deadlock in driver-managed RX BA session start
Thanks: Eric Côté
Closes: #878092
2017-10-11 21:23:02 +02:00
Salvatore Bonaccorso fba37066c7 [powerpc*] Fix illegal TM state in signal handler 2017-10-11 07:57:06 +02:00
Salvatore Bonaccorso 6c3a386d04 [powerpc*] Use emergency stack for kernel TM Bad Thing program (CVE-2017-1000255) 2017-10-11 07:55:16 +02:00
Salvatore Bonaccorso c68c0840bc brcmfmac: add length check in brcmf_cfg80211_escan_handler() (CVE-2017-0786) 2017-10-09 21:45:15 +02:00
Ben Hutchings 4d6306b792 i40e: Build for 64-bit targets only (fixes FTBFS on hppa) 2017-10-04 03:50:08 +01:00
Ben Hutchings 335613b4d6 Update to 4.14-rc3 2017-10-01 23:23:22 +01:00
Ben Hutchings 6c9c816966 Update to 4.14-rc2
aufs: Update support patchset to aufs4.x-rcN-20171002
2017-10-01 20:26:01 +01:00
Ben Hutchings 884aedc0b4 liblockdep: Define pr_cont() 2017-10-01 15:44:25 +01:00
Salvatore Bonaccorso 2678c31e68 fix infoleak in waitid(2) (CVE-2017-14954) 2017-10-01 12:02:28 +02:00
Ben Hutchings f3152ccaad Update to 4.13.4 2017-09-29 16:29:45 +02:00
Ben Hutchings b80b24d3e0 Release linux (4.12.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlnBUMkACgkQ57/I7JWG
 EQkU2hAAo/L20PPbaPfnnCTppx1+UD9UHNfoGhY7eoy+GYt36YjNTeqcbDUcnmGS
 oqILWJq8Qwb4r2zBgnrLL+Ek3spErVtmcIi7HoCKK9pRdqDCIQUkkHQQjQob1o5f
 fMAr+qTcGAm9/yEIclCrAJmrYPtS1e4ryBmwu4ZGzeeGS0PG/WFsGOLq9Tiq2cIh
 pmszRX59ZqpMcTHuBs2Fi6xz7YWXqGUXxJiax5fqwF6j/9CpbReFhv2ZFH2HcPA5
 4sTtGLsGTwz7lzXLljp0IN7aFkW830FGE4WuTRe2fOkFKgXlj+8wtor7D2vFB7Ou
 FHhyVrMc6y32+K9LG955ECXgwN2wGioKEMyEi67ci9qxvCGf/EA9vtEj3ytzm8+j
 fiJ1gRjk0Ec2D5Aewl2L0i2bYYf4RqTriRHmEQa14kk70U8oK4AmOilyU+d1t3WC
 xwo6ZdThvBGJGlHzrkjWxutWz3aQiL7AC2Ora51BhrR83chmxWeRa4mvo6yH6yfs
 kmSHfqIgHklwLBVpF1/9tam8E5W6KkHgW3tTX9Duz6dM+mrVxKTJz1iKbnt1213t
 xco667k4txs5k+K2JkJfUUEMlH+lCicAqEHB2EZIV0R7FCf+n4dENJ/FwXUF7XE+
 41h3BqWbxZDYcuBxBYmmoF7B3QgeFylSbbYb1W4E6Erd6j7AHj0=
 =Thw/
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.12.13-1'

Release linux (4.12.13-1).

Drop ABI reference files.
2017-09-19 18:34:53 +01:00
Ben Hutchings a18f05bb5b Add various security fixes 2017-09-19 00:49:12 +01:00
Ben Hutchings cb5ce6ce3b Update to 4.12.13 2017-09-19 00:33:58 +01:00
Salvatore Bonaccorso bab2ab0e8d Fix field name in patch for Bug-Debian
Gbp-Dch: Ignore
2017-09-15 17:10:03 +02:00
Salvatore Bonaccorso 2afb7462ca Add bug field to patch
Gbp-Dch: Ignore
2017-09-15 16:58:36 +02:00
Salvatore Bonaccorso acfbd0bece Bluetooth: Properly check L2CAP config option output buffer length (CVE-2017-1000251) 2017-09-14 06:51:56 +02:00
Salvatore Bonaccorso 8f075a9a83 xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present (CVE-2017-14340) 2017-09-14 06:51:56 +02:00
Salvatore Bonaccorso bcc9a01d8e scsi: qla2xxx: Fix an integer overflow in sysfs code (CVE-2017-14051) 2017-09-14 06:51:56 +02:00
Salvatore Bonaccorso 2ed545523f sctp: Avoid out-of-bounds reads from address storage (CVE-2017-7558) 2017-09-14 06:51:56 +02:00
Ben Hutchings 5897597d01 Update to 4.13.1 2017-09-11 01:16:41 +01:00
Salvatore Bonaccorso 41ff7a03ca Update to 4.12.12 2017-09-10 12:07:09 +02:00
Salvatore Bonaccorso 68b6e32819 Update to 4.12.11 2017-09-09 15:06:49 +02:00
Ben Hutchings b066a269e0 Update to 4.13 2017-09-04 01:19:41 +01:00
Ben Hutchings 9ba3914638 Update to 4.13-rc7 2017-08-30 20:34:25 +01:00
Uwe Kleine-König 4a53c826d6 mtd: nandsim: remove debugfs entries in error path 2017-08-29 22:31:30 +02:00
Uwe Kleine-König a2dde14ec6 Update to 4.12.9 2017-08-29 22:20:12 +02:00
Uwe Kleine-König df8a5bf53a Update to 4.13-rc7 2017-08-29 22:07:26 +02:00
Salvatore Bonaccorso 8e44fd873c Update to 4.12.7 2017-08-25 21:47:57 +02:00
Ben Hutchings a129c1c207 Update to 4.13-rc6 2017-08-21 03:09:19 +01:00
Ben Hutchings 918dc43e46 Update metadata for "kbuild: Do not use hyphen in exported variable name"
I updated the commit message and re-submitted it after further
investigation.
2017-08-19 22:37:17 +01:00
Ben Hutchings 31202be148 Update to 4.13-rc5 2017-08-14 23:18:47 +01:00
Ben Hutchings d545b4e4d0 Update to 4.13-rc4
Drop and refresh patchs as appropriate.
2017-08-13 14:45:14 +01:00
Ben Hutchings 0134b5c8b9 [amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base (Closes: #869090) 2017-08-12 23:08:23 +01:00
Ben Hutchings aa404ad63b bfq: Enable auto-loading when built as a module 2017-08-12 22:36:27 +01:00
Ben Hutchings 831ae89c56 rtlwifi: Fix firmware loading bugs (Closes: #869084) 2017-08-12 21:54:36 +01:00
Ben Hutchings 3b32a0551f xfrm: policy: check policy direction value (CVE-2017-11600) 2017-08-12 21:36:28 +01:00
Salvatore Bonaccorso e58e3e6be9 Update to 4.12.6 2017-08-12 16:54:34 +02:00
Salvatore Bonaccorso 0442142ae4 udp: consistently apply ufo or fragmentation (CVE-2017-1000112) 2017-08-11 09:12:58 +02:00
Salvatore Bonaccorso 3b6247dba4 packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111) 2017-08-11 09:09:51 +02:00
Salvatore Bonaccorso f302f4dbad Drop upstream applied patch
Gbp-Dch: Ignore
2017-08-08 10:20:30 +02:00
Salvatore Bonaccorso 693284da5b media: saa7164: fix double fetch PCIe access condition (CVE-2017-8831) 2017-08-03 20:36:47 +02:00
Salvatore Bonaccorso 9f89bea8ab ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542) 2017-08-03 20:32:16 +02:00
Salvatore Bonaccorso b5081c50bc dentry name snapshots (CVE-2017-7533) 2017-08-03 20:27:55 +02:00
Ben Hutchings db815c4a3b Update to 4.12.3 2017-07-22 18:26:23 +01:00
Ben Hutchings 50381a0ca2 Update to 4.12.2
Refresh aufs4 patches by hand, as there is no release for 4.12 yet.

Refresh lockdown patches with genpatch.py and then by hand, as the
branch is a little out of date and many patches went upstream.

[rt] Disable until it is updated for 4.12 or later
2017-07-18 01:06:31 +01:00
Ben Hutchings 09f1166971 binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370, CVE-2017-1000371) 2017-07-16 21:24:08 +01:00
Salvatore Bonaccorso e70c79cce5 Update to 4.11.9 2017-07-09 12:54:43 +02:00
Salvatore Bonaccorso 2125fc6614 Update to 4.11.8 2017-06-29 21:21:01 +02:00
Salvatore Bonaccorso 3aaf7fba55 rxrpc: Fix several cases where a padded len isn't checked in ticket decode (CVE-2017-7482) 2017-06-29 08:24:46 +02:00
Salvatore Bonaccorso 4bffab0d23 Update to 4.11.7
Drop upstream applied patch.

Refresh features/all/rt/sched-mmdrop-delayed.patch.

Ignore changes for module: drivers/iio/imu/inv_mpu6050/*.
2017-06-26 22:01:21 +02:00
Ben Hutchings 0f89be27d3 mm: larger stack guard gap, between vmas (CVE-2017-1000364) 2017-06-20 00:19:55 +01:00
Ben Hutchings 76ed7c5f09 Update to 4.11.6 2017-06-18 18:12:42 +01:00
Ben Hutchings 21159c097a Release linux (4.9.30-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlk+1/UACgkQ57/I7JWG
 EQnBDBAAyXVWuRSGT/qEyF/ML8KM8R9lQJDDm5eN/NRl5Tk1QEU+8vo0DnSC0SCb
 hMvML/HFsyTXdgKALU3ygKfI+5MloLYTNVkWGmWFuMBUcBWHNcHJEinlvRmS3jfh
 QJCsPYgaTi7qk+fLg7lidlDQZ0vXzQlXU7QXQJgtKx2YxQhwdUNx2qtNwjWxJSgU
 hT5VRpU0CiaRdTxO8KQYCipDko7ohznjCCXzemgYBKCOqSWE7EwD5d2WqtcTinR0
 Mpess7GR9LjEoUwoQ5cUksOPUSWP2BFsre8QpuGeoC7VoawhmKYJj91CvcheV7rs
 jStLk5DjntoMKitAUSpETjHIefk+4HEVbv5av8clmYkVCXiSAUZGiywql5Gl0T6B
 V6C9dwpUbSdevKvsEhmKi2Ei12kQ3kt/sL2WrPPHmqWUfT7KwPbUOR6MkrtyQoz+
 6McaJlSIu+Ln3/naZEHh73yAwBc/D/Q+9bxpSYMngyFGZNL6JqJc2I6N9x+zg3xV
 MSLTASQcdsGJENuoKE2+eqW7xqtQcdxBF416Pc9CC5Czifz+V7dELmShjvjX3lJm
 YBBgZtfS7IOBg8kW6EIKhn8Xv8xRvMA1fyeonV1fjv48e8fPb7it24chy0GK7t0z
 QNNVf06kHLPuDWHiCgWRm0ZDYWuyQLZdq90xKKoiGEIm2zeZnGU=
 =7TPb
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.30-2' into sid
2017-06-12 19:09:18 +01:00
Ben Hutchings 29fbd594e5 NFSv4.x/callback: Create the callback service through svc_create_pooled (Closes: #862357) 2017-06-12 16:20:51 +01:00
Ben Hutchings 6fdb07003d Revert "uapi: fix linux/if.h userspace compilation errors"
This patch fixes a bug but it broke compilation of radvd (see
by reverting it for stretch.
2017-06-09 15:27:04 +01:00
Ben Hutchings cb766cd661 Add follow-up fixes for CVE-2017-9074 2017-06-08 15:39:03 +01:00
Ben Hutchings 9bf3ee218c Add follow-up fixes for CVE-2017-9074 2017-06-08 15:37:04 +01:00
Ben Hutchings 304a2920e5 Update to 4.11.4 2017-06-07 23:41:28 +01:00
Ben Hutchings 2da7c17a3d ipv6: Check ip6_find_1stfragopt() return value properly.
Follow-up to the fix for CVE-2017-9074.
2017-06-07 23:34:55 +01:00
Ben Hutchings 5174845342 Release linux (4.9.30-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlkz7vwACgkQ57/I7JWG
 EQmWdQ//ctWbgUQezu+yi96QR/algQVpsRH/x1oUVnPIYi96FYOabS9pKaK0aAz1
 gvTzEBz+ej2lj+ju51UWGsWHXG9CuBO9i+lRqxf74YdpmDPVco+sDWULBJzEnXqC
 rYJsvnwLneDdUOeLd+r9nS/a38PezOqXd0eQApzwzvj4GStrj23aSQeLH7pXqXrr
 KI/dORIXEujHoNeWzSzW3XXzOYlg9yAJuLyFmS8FGg7fBaEpnlRA+z2gXtmX7Bdn
 SBJxYNttrVbucpHsIwFQysaVU+G0EXnbwgsB/AQBycCrDDIYmhmWLdqlIG+q6lsm
 AGLmmX47xxrDpBPhr8iHWJkcmTBBNsSADghLvTru5PSWWTd70P/f2XWGYrfJ5bvU
 OrQaV4BFG+zw6RC7Jlzx+byaXyWq15aorRAJSXKaFdebHBZXFzsbKTq4HNTRKV06
 3DpoH47C0Jr4YXSbcNvgZiDZnF7OmYw/vsbJk+X4IC+igpriz3dV93QTnL2vf4iO
 LaS2KT1MkGInS329DRpjCy14+q1LZM2nti6/mPji2Uqwl6ACvGYgL5y0FJLfEThH
 XN+a2So6+u8MvWxrUoNrHIj8aYok96oONpDDbPIueS/PT7TwHBbq2ui1zlE8Uahg
 zR3+U/V5VoBEct5n/nm0c8SRhkqsfOk8l42Dj5ibkQAuDzzt39g=
 =MA6Q
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.30-1'

Drop ABI reference files and ABI maintenance patch.
2017-06-05 14:12:31 +01:00
Ben Hutchings 7b53b52f6f Update to 4.11.3 2017-06-05 14:04:06 +01:00
Ben Hutchings b9ea5ea2a4 uapi: fix linux/if.h userspace compilation errors (see #822393, #824442) 2017-06-01 17:50:12 +01:00
Ben Hutchings a843bf5bb3 Merge remote-tracking branch 'alioth/sid' into sid 2017-06-01 14:10:48 +01:00
Salvatore Bonaccorso 2502943c58 ipv6: fix out of bound writes in __ip6_append_data() (CVE-2017-9242) 2017-06-01 08:38:02 +02:00
Salvatore Bonaccorso cd87fb7a86 crypto: skcipher - Add missing API setkey checks (CVE-2017-9211) 2017-06-01 08:34:46 +02:00
Salvatore Bonaccorso 261dbebcde ipv6/dccp: do not inherit ipv6_mc_list from parent (CVE-2017-9076 CVE-2017-9077) 2017-06-01 08:13:06 +02:00
Salvatore Bonaccorso 3253209d02 sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (CVE-2017-9075) 2017-06-01 08:08:49 +02:00
Salvatore Bonaccorso 35c1e8ae8d ipv6: Prevent overrun when parsing v6 header options (CVE-2017-9074) 2017-06-01 08:05:24 +02:00
Salvatore Bonaccorso a68b36a505 dccp/tcp: do not inherit mc_list from parent (CVE-2017-8890) 2017-06-01 07:43:55 +02:00
Salvatore Bonaccorso 20b3d9876a tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() (CVE-2017-0605) 2017-06-01 07:36:02 +02:00
Ben Hutchings ad62774819 Add various security fixes 2017-06-01 00:30:04 +01:00
Ben Hutchings e9619f03d3 Update to 4.9.30
* Drop/refresh patches as necessary
* Ignore ABI changes in ccp and hid-sensors
* [mips*el/loongson-3] Revert "MIPS: Loongson-3: Select
  MIPS_L1_CACHE_SHIFT_6" to avoid ABI change
2017-05-31 21:02:34 +01:00
Salvatore Bonaccorso dd1408c66d Update to 4.9.28 2017-05-27 17:12:34 +02:00
Salvatore Bonaccorso 3d18d55b64 Update to 4.9.26
Ignore changes to module:sound/firewire/snd-firewire-lib

Ignore changes to module:net/l2tp/l2tp_core
2017-05-13 16:07:07 +02:00
Ben Hutchings 2d982936e8 usbip: Fix potential format overflow in userspace tools
This fixes FTBFS on 64-bit architectures with gcc-7, which in
experimental means at least amd64, ppc64, sparc64.
2017-05-04 02:48:18 +01:00
Ben Hutchings 85b468262e Remove unused liblockdep packaging 2017-05-03 21:02:49 +01:00
Ben Hutchings a4e087d3b1 Release linux (4.9.25-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlkI0/kACgkQ57/I7JWG
 EQkutQ/9EsYdnQXf4HaC1YTqQW0Nu5+swZzyosOcdtMfJrj+PWXQMgmY4WWav8I/
 DipRGhfXXMnqlBg1vOR5cEdqPznRm/cwcuPqZpw7H0fA7LvyCibg/7yERJYv7i1U
 BIy8s29NCpVVRhDhY9Nl5t0WLGQT4Rg9JW6iKNRDq2y91etahSxzOBxB2B3k04Ys
 9vFPpuKq5QAskCBGEucinYYKTy7/ciIXsaSij2m/G7/ly/Qaqt0pIgjqi4QhuJs3
 yWidIm1aBvE4MHXH8WQkg1aF20vfdGXz3CZNT6BWFn/6hNesS+tEQpF/nYLBqnfS
 2GghqeWO1+xzxlXWNZU/SD0JhkB6gAeZ+4MP7eYz8BAtpUz7H/zZfZNsOBWb6YJY
 Pc8AjqG6mBd/1B2O8yXUda/j/xazEtg0c7uxQjyOEqh2nPeHn9FVLuJsSP74wxdx
 zjGmOjJzKUmhBGxLdJZAFL5N7YbLR+qNQfV2UGz4+zVIJge9R7HwWwR9+Um8AHq0
 qrnjRf6iAla1phYlgHnPx4r6A9kactDuFsNMfUN8nsUrV+KX15k+dt02CpFSWw0B
 lXGPf2MNXTEp+CsuAVBAWFP55JCOwD6yYoLfEfErXvchc7qqIKHgmIrLSyexro7O
 F1+HBfu6t1M4tRz0xNu8sGL4uzsjockMW8RL1HFgboUluMgTFPQ=
 =k/sj
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.25-1'

Drop the added patches, which are already in 4.11.

CONFIG_NFP_NETVF is replaced by CONFIG_NFP in 4.11.
2017-05-02 19:57:00 +01:00
Salvatore Bonaccorso 7ba1afb386 nfsd: stricter decoding of write-like NFSv2/v3 ops (CVE-2017-7895) 2017-04-29 22:02:50 +02:00
Salvatore Bonaccorso 7961205000 nfsd4: minor NFSv2/v3 write decoding cleanup 2017-04-29 21:59:48 +02:00
Salvatore Bonaccorso 0e77dea5fc nfsd: check for oversized NFSv2/v3 arguments (CVE-2017-7645) 2017-04-29 21:52:43 +02:00
Salvatore Bonaccorso 4c666bd4da Update to 4.9.25 2017-04-27 20:19:04 +02:00
Salvatore Bonaccorso 6771be1138 macsec: dynamically allocate space for sglist 2017-04-27 07:42:13 +02:00
Salvatore Bonaccorso 7b2acecada macsec: avoid heap overflow in skb_to_sgvec (CVE-2017-7477) 2017-04-27 06:43:38 +02:00
Ben Hutchings 7bf90ad750 KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (CVE-2017-7472) 2017-04-22 02:26:48 +01:00
Ben Hutchings 89402402c8 KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (CVE-2016-9604) 2017-04-22 02:25:04 +01:00
Ben Hutchings 9c5f88b1f6 Update to 4.9.24
Drop most of our bug fix patches, which were included in it.

Adjust context in a couple of rt patches that have textual conflicts.
2017-04-22 00:59:32 +01:00
Ben Hutchings 85c3a1be4d Note Lukas Wunner's forward-porting work in patches 2017-04-20 00:48:59 +01:00
Ben Hutchings 40f397ca1a Drop another patch redundant with upstream changes 2017-04-20 00:16:12 +01:00
Lukas Wunner f26f2a520d Update to 4.11-rc6
Remove merged patches and rebase remaining patches.

A portion of the secureboot patches have been upstreamed, but were
changed substantially during review, primarily to avoid code
duplication among arches.  I've stripped the patches of the merged
bits and rebased the remainder.

Signed-off-by: Lukas Wunner <lukas@wunner.de>
[bwh: Undo some incorrect context changes in
 bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch]
2017-04-20 00:15:17 +01:00
Ben Hutchings aa2adea45f Update Origin and description for various patches now applied/merged upstream 2017-04-18 04:18:56 +01:00
Ben Hutchings 790885d6d8 Add Forwarded header and update description for several patches 2017-04-18 04:15:47 +01:00
Ben Hutchings 8701ef58ba Replace "[media] dvb-usb: Don't use stack for reset either" with upstream fix 2017-04-18 01:16:50 +01:00
Ben Hutchings 3f62574711 crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618) 2017-04-16 23:25:12 +01:00
Ben Hutchings 31945f628c Update to 4.9.22
Drop patches applied upstream.
2017-04-16 21:47:05 +01:00
Salvatore Bonaccorso 1d5fde10d8 mm/mempolicy.c: fix error handling in set_mempolicy and mbind (CVE-2017-7616) 2017-04-16 07:59:50 +02:00
Salvatore Bonaccorso 5547db97a6 fscrypt: remove broken support for detecting keyring key revocation (CVE-2017-7374) 2017-04-08 09:36:53 +02:00
Salvatore Bonaccorso 43f7156d3a ping: implement proper locking (CVE-2017-2671) 2017-04-08 09:18:35 +02:00
Ben Hutchings 20a0659e24 drm/nouveau/disp/mcp7x: disable dptmds workaround (Closes: #850219) 2017-04-07 20:42:59 +01:00
Ben Hutchings 459f0a48e4 Release linux (4.9.18-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAljcf5EACgkQ57/I7JWG
 EQmFcQ/8DoBxenUbNW5cY+YbwBKsjuBb8Q6gnqQLOX/JtOJ8MtpQ1t2QQPvMYdXJ
 PTcNZAKm8mrsWJxos9WsUHjkdrfuLAsMTisC5FvDkE6myBt++GH3gRtKCT0A2nep
 ZU17YeHYfcqv6UK90Jg0p+xAKQEEqKZrryP7fvb8oX5wOORwlLMxBScErftbB/vV
 hBvwybq7gfA/4KxDTnWgadpidg16/67ZgKd0EoSsbCpFAJble/hRroMwzKUSzFW+
 2yFxrmUNFoIXddoDtORNNdK0nM6b2MKeWKjmndknz4QehlayZWCg1+mEjp7A7Wqp
 9naONqhQWMibARGkDl5Y7SZ9/XJXjPmDFXi3EIbhrWMN2TUkzUN14A1YHw+M9p5Q
 9UbnpI6eDxjvlezcPjqucIM0ywFwljBrDsQXfGsR6ogQbYvA7nJ0dK63/EXzvl1U
 UGUBwHtDhLHxtv85/JsUqq9/UVGbZjcHvyEfmE1mvbMcNxkSLSewt+jd78h7xIyL
 tOZP24ARPKqcQ1detou47o8cMmwTqVl6xu08w83xin2Xux+UlYFTtI/LVws3oYNb
 F3uEzIgtJbu7ENxCkY5RmIJG9qRJZJ2f6dnpLLld6D52paD5OYNrk1NShtf/Dp+r
 zjJoiIRTcO9fPatjl07Y2eDeFeo2SKoD+Xd/5nGDoytE6JiDEXg=
 =ONVb
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.18-1'

Drop ABI reference files.

Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
Ben Hutchings 8a7210aeea net/packet: Fix integer overflow in various range checks (CVE-2017-7308) 2017-03-29 22:50:53 +01:00
Ben Hutchings 2dd2d226ca scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187) 2017-03-29 22:31:24 +01:00
Ben Hutchings 3e739d51e3 xfrm_user: Apply fixes for CVE-2017-7184 2017-03-29 22:28:20 +01:00
Ben Hutchings b303c03f3b Update to 4.9.16
Drop one patch included in it
2017-03-20 00:12:10 +00:00
Salvatore Bonaccorso f271c6453d Update to 4.9.15
Drop one patch included in 4.9.15

Ignore ABI changes for

  module:drivers/nvdimm/libnvdimm
  module:drivers/target/**
  debugfs_create_automount
2017-03-19 21:41:18 +01:00
Ben Hutchings 8851d0b7ac ucount: Remove the atomicity from ucount->count (CVE-2017-6874)
...and avoid an ABI change.
2017-03-14 21:39:16 +00:00
Salvatore Bonaccorso 11c1294899 ACPI / EC: Use busy polling mode when GPE is not enabled
Thanks: Jakobus Schurz <jakobus.schurz@gmail.com>
Closes: #846792
2017-03-13 07:34:43 +01:00
Ben Hutchings f96b366d00 Update to 4.9.14
Drop a patch applied upstream.

Ignore ABI changes as they shouldn't affect OOT modules.
2017-03-12 18:35:37 +00:00
Ben Hutchings 11d69f4069 tty: n_hdlc: get rid of racy n_hdlc.tbuf (CVE-2017-2636) 2017-03-08 03:07:36 +00:00
Ben Hutchings 7513bdfe2b Kbuild.include: addtree: Remove quotes before matching path (regression in 4.8)
loses: #856474
2017-03-04 02:19:07 +00:00
Ben Hutchings 79e486b59b [media] dvb-usb: don't use stack for firmware load or reset (Closes: #853894) 2017-03-01 15:43:37 +00:00
Ben Hutchings 49569a3b8c sctp: deny peeloff operation on asocs with threads sleeping on it (CVE-2017-6353) 2017-02-27 15:49:27 +00:00
Ben Hutchings f32a03523e ipc/shm: Fix shmat mmap nil-page protection (CVE-2017-5669) 2017-02-26 20:51:00 +00:00
Ben Hutchings 93819d25f0 Update to 4.9.13 2017-02-26 20:10:47 +00:00
Ben Hutchings 1fcade696a Update to 4.10 2017-02-22 20:58:16 +00:00
Ben Hutchings 8c94f719fa Release linux (4.9.10-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlinNOsACgkQ57/I7JWG
 EQntWg//RuNSbOQeyML971UnFUtZjY3yAUYqhPJdpJimjY3WHjmZlJQrLlSz9IYQ
 48Pkt/64P0+iAr9zJ+3uJv1fOagKePd5RaS/iChJdvq0fCGZstFlti5NwXEQtGSv
 Yzp0LStZr+pEPZo+8Bo+TVSP25FNXdZBvhUXE2sbxaV8+W9Vx+qFkfrWEiW7hpFv
 nCQJic7kmzllS4Aol9e/jj2MqcdWIhviufAImNnfrbpK61Ud6Gznw9gTODw9+OIT
 ny6F/k7O6MFPuHp3aAxVC5TCowh16PcC+VqJF9MTnnvHQmD3jYqdeA8zKLnW/tJk
 Dl9A6whZ3n4fFRlGjgxjmTP/CgAIeQVqgTgYCApuQQTVG3svIkznoXJLraj5UE90
 rzeB30x3ikUWcVggN7xfSkW3e6/v+XSbRfu73sFA81mWyWoddT/NYhw+Y18ym4UJ
 Vk8iuAakpjdVj73FSyYOcNGRzOEp2SAV72EsJEMw1/IlIkmRkMmJkkg4T/HYj11P
 jK/TjZtSsVbje4zx9/U6g8Rj4Wi40EHZu6kuh2jUhCk91zsAr+7EC45gZC+uohxL
 jxKxv2R5p9AR7uN6JzQR4OuOL1bTCrt02MrWdsiPlUi0RBKlJ7O5sGMMsHrVMinn
 4zFNeYq2U3Fyaejb32x3DOKtgCjoMRQ5iHyrjgljhzxJcf3fWKk=
 =rRkU
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.10-1'

Drop changes to aufs.
2017-02-22 20:57:36 +00:00
Salvatore Bonaccorso 8db6ed9e89 dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074) 2017-02-19 10:46:20 +01:00
Ben Hutchings 7b50304bda Update to 4.9.11 2017-02-18 20:53:41 +00:00
Ben Hutchings 92d269eac2 media: dvb-usb-dibusb-mc-common: Add MODULE_LICENSE (Closes: #853110) 2017-02-17 02:56:32 +00:00
Ben Hutchings e035177b13 net: ipv6: check route protocol when deleting routes (Closes: #855153) 2017-02-17 00:58:21 +00:00
Ben Hutchings 10f2dad569 Update to 4.9.10 2017-02-16 19:06:43 +00:00
Salvatore Bonaccorso 58fbff3df5 sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986) 2017-02-15 11:54:59 +01:00
Salvatore Bonaccorso 9e381d5c13 ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970) 2017-02-15 11:50:22 +01:00
Salvatore Bonaccorso 4e5e705c5f selinux: fix off-by-one in setprocattr (CVE-2017-2618) 2017-02-15 11:44:55 +01:00
Salvatore Bonaccorso 4a1042f1a0 IB/rxe: Fix mem_check_range integer overflow (CVE-2016-8636) 2017-02-15 11:41:25 +01:00
Ben Hutchings fb27baab98 pegasus: Use heap buffers for all register access (Closes: #852556) 2017-02-07 01:44:24 +00:00
Ben Hutchings abd788f1da cpumask: use nr_cpumask_bits for parsing functions (Closes: #848682) 2017-02-07 01:40:13 +00:00
Ben Hutchings 7eec246dc0 Update to 4.9.7
Drop patches applied upstream.
2017-02-03 13:51:44 +00:00
Ben Hutchings 6b038a62ac Update to 4.10-rc6 2017-01-30 16:28:55 +00:00
Ben Hutchings 6adadc8ec6 Release linux (4.9.6-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAliL3k0ACgkQ57/I7JWG
 EQlmog/8D/DowVsxEjNdiHAewH7HUyqdADkCRkeqsmKgCtZEmvEaYE0RijZzGDhm
 Ge4PxOzhLE/DRxJF2gN8y0hIVOnigje9qYN5OBdgB/FNNKThL6ARwiu2LD6DYcwU
 +Lu6g8iHqsKHZ+NllHEiiwJ4rR39qf3Tkzz5cgm4jEi+5IjnoefOhaFhyPzBkz8i
 p6fWklEhev8+lQ1sW9gF94p3t0dOp/31TWACagRQronrTtT2xAzdrR5ESPTo6FFg
 gtcfqoB7AYA4LTuzoKIQRgGLsgKk73iLPF874ZuK9g/+4Z2lF9NBbwve3O0qYKCy
 NERddjjx9QEf4cjToqAii10AzAfuBFDG/b77ZscREwysUwMhkz47ADefu5v1P2kJ
 XdL/sJ/nXyhItV/VK8ym9lg4jAA8K5UOjn+8RtWBTE8091N7y7kyNHTQ4SppySIZ
 Ow+NsWkMd+WYxkdGPSYc7nHthhVRvfC9C4cxamn9en+MNmakMgJcOZTxS4/gcTvx
 DMCWGmEJrD5Bu3m9GrJzwfaXteWxMYihsq9ofjXeaeYqxgXZ62GuxMeRq3kBOhSw
 H9MUITkqfsjcg7eAz8elFhRvrurlVUWFsSCGr4Fd1Tv9zrFw8OXNRrApy4UQOQ4x
 Uw5AcA/3ZA3QCPsOuU8ENES57vJb+D3E/LZZJdTktVLUcoxA0tA=
 =C8FJ
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.9.6-2'
2017-01-28 01:19:31 +00:00
Ben Hutchings 810b36a1d3 fbdev: color map copying bounds checking (CVE-2016-8405) 2017-01-26 21:15:56 +00:00
Ben Hutchings a873a1d79d Update to 4.9.6
Drop patches which are included in it.
2017-01-26 19:24:36 +00:00
Ben Hutchings 601b9e92a1 Update to 4.10-rc5
Drop/refresh patches as appropriate.

[rt] Disable until it is updated for 4.10 or later
2017-01-24 19:26:38 +00:00
Roger Shimizu 7a613e23af nbd: fix 64-bit division 2017-01-24 21:35:14 +09:00
Salvatore Bonaccorso 3c00650618 ieee802154: atusb: do not use the stack for buffers to make them DMA able (CVE-2017-5548) 2017-01-23 20:59:51 +01:00
Salvatore Bonaccorso c74f7d65fe HID: corsair: fix DMA buffers on stack (CVE-2017-5547) 2017-01-23 20:57:07 +01:00
Salvatore Bonaccorso 4686b122fc Update to 4.9.5 2017-01-21 15:52:44 +01:00
Ben Hutchings c6b1f1b2b1 ath9k: fix NULL pointer dereference (Closes: #851621) 2017-01-17 03:51:38 +00:00
Salvatore Bonaccorso d264d7d524 tmpfs: clear S_ISGID when setting posix ACLs 2017-01-16 09:31:01 +01:00
Salvatore Bonaccorso a126d0bd27 sysctl: Drop reference added by grab_header in proc_sys_readdir (CVE-2016-9191) 2017-01-16 09:26:36 +01:00
Ben Hutchings a7f877c1f1 nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533) 2017-01-16 02:36:18 +00:00
Ben Hutchings 2ebf1235ed Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
It causes USB_COMMON to be built-in for no good reason.
2017-01-11 04:40:28 +00:00
Ben Hutchings 13c410d6c1 Update to 4.9.2 2017-01-09 21:06:30 +00:00
Ben Hutchings 0814db65a8 Update to 4.9.1
Drop two obsolete patches.

"ptrace: being capable wrt a process requires mapped uids/gids"
appears to be obsoleted by upstream commit bfedb589252c "mm: Add
a user_ns owner to mm_struct and fix ptrace permission checks".
2017-01-07 03:27:13 +00:00
Ben Hutchings 97ab9059a9 Release linux (4.8.15-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlhtitEACgkQ57/I7JWG
 EQlPqQ//V6+eUGkATmlFFyxsM91OsMgZyxtt0Pzf7XvFg4gBr+hJIaJwxasVRZGi
 w/r4uYHmiX7fLrXnanT+RekT1zCGQBOLUvm2Rlwi845PAl9fMCSb+9Jiz60THeN7
 cHg7JEvNhTEEDpLK1FJlU3fiMqb5LRdUTkz+RkhKRfITm4/bT3h0Ow72/Xy6JsrI
 nAf/AyncvBCQvrIUXYyfyHUPhkYMk8L7bC6G4o803kFdPYTb1WR2gRbpsI6jSVs8
 YFbrfMpH1foPHiTVWP+inDN9LA2TO8QGMvAuCAQzQuLzKztrU0i/1shjDfaN61qx
 xQhXE08TwNnkDZQCtIFZrLkRPSFlLqFqVWyL9eyPAYNAnZeugxB6F3HOWk5cKWqj
 NPpZ10zAnKliPnL7z+eFlxLq34UgVqqe1FeRB5iBEC2dQYEs3LuB1RF2zFOuZ74T
 cvXKJJhuR4iMNcAOax6Uab+3iyC/PGm5VSiCL+IPbD7H9IaXLcICE8l1r0zRs5Sa
 Um4YQKTy8kFK/CRsEOB8CofXMuBXLzEw2xeNn6187d/ZeA7uiUsyd2nVkXnO0FNt
 B2JkV6kwO99WAnNwTZSwF7QJJe8ir7X4X1qdk00sqNYiDff/CBHjRT1gLRzNyOuJ
 r9QFKRt4UGF3XGpE89czRRoHfP9WkdrmdmP1i/DnkSVO6L8/y6Y=
 =AxAX
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.15-2'
2017-01-05 00:01:00 +00:00
Salvatore Bonaccorso 5efdda62b4 kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (CVE-2016-9588) 2017-01-01 09:15:13 +01:00
Salvatore Bonaccorso e7ccf65ec6 sg_write()/bsg_write() is not fit to be called under KERNEL_DS (CVE-2016-10088) 2016-12-31 20:21:43 +01:00
Ben Hutchings 344453b7f7 Release linux (4.8.15-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhYKrFfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89E6xQP/1MRca+ekUynYy2IFUipst1zlvO94p59
 79Pe26mFBb05MuDdU1DaA/fJvlpG14rDCnXCid8AAGF9LtuCzrxo6K2RdHpCi8h8
 JuJCRSMrh3p3SvkeTDm3osLuRgaARvD7ruBOpWYki3D3TORpJk9IELK+HLw4CfBb
 I50sJQSfTQm1/TKEwbHIHc0L1/FH5yVqMYA8v5KvJsz94ICXe4J5FJyIReexqVIL
 LGO45r23eOHJ9rmO/XP1gtp9sRtPev2ZAbL4VwOqbku/KVQGQUMsikv0TUHBZT1C
 jCz2ffFaJtTWWFhoKTUqCmKyqhuIklGMS4MOPHMxjXBdgA6Nb2iGOWc53ilQ35v+
 umh4BJWNgqtJfkibJTDD/gA/f/U2f7O+a2ZTOXZjJPbK8bVNiyqnImHP4XWDS4OC
 5IW7swgvvBVDIk7eDzDd3lKK8O1ZcWjS5U9PbaXu9C0XDeTSOKQUhfpRkfvUaqzQ
 BshFmULrdvFKQzS/FJdcW/DkjGdcyYLjYtB+jPaHTG/ZytGDBqZIu4Yb4/hFAdUd
 rk1MgyI4GfeBFT7RlItBJK+12WtdyTbfaiCDS4O+av0yM0drBIpm6wpl2OHZrP0R
 70nZKVTcdSu+4TN3uoy2ZHHaw/ZsrsAE3EePQtdNtDAFYj7oIWjDDCVHJH4zdFHl
 ekMUyxf7Hzun
 =i7IG
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.15-1'

Drop ABI reference files.
2016-12-20 03:58:23 +00:00
Salvatore Bonaccorso 09027445ba Fix another mistake in original commit, set Origin propriately
Gbp-Dch: Ignore
2016-12-19 09:16:12 +01:00
Salvatore Bonaccorso 46f0821f70 Fix Signed-off-by line for docs-sphinx-extensions-make-rstFlatTable-work-with-d.patch
Gbp-Dch: Ignore
2016-12-19 09:14:36 +01:00
Salvatore Bonaccorso 36b7372766 docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
Thanks: Dmitry Shachnev <mitya57@debian.org>
Closes: #848349
2016-12-19 08:30:20 +01:00
Uwe Kleine-Koenig a9f6833ed4 Update to 4.9 2016-12-18 18:00:28 +01:00
Salvatore Bonaccorso 966cf13de0 netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755) 2016-12-14 17:12:59 +01:00
Salvatore Bonaccorso 14a852ee64 Update to 4.8.14 2016-12-12 20:28:07 +01:00
Salvatore Bonaccorso 93304bd632 net: handle no dst on skb in icmp6_send (CVE-2016-9919) 2016-12-10 07:42:41 +01:00
Salvatore Bonaccorso d2f4158d99 Don't feed anything but regular iovec's to blk_rq_map_user_iov (CVE-2016-9576) 2016-12-10 07:35:50 +01:00
Salvatore Bonaccorso 56659f5080 net: ping: check minimum size on ICMP header length (CVE-2016-8399) 2016-12-10 07:29:51 +01:00
Salvatore Bonaccorso be8be2cb5f net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793) 2016-12-08 19:28:56 +01:00
Salvatore Bonaccorso 3b66b4fcef packet: fix race condition in packet_set_ring (CVE-2016-8655) 2016-12-07 10:34:33 +01:00
Salvatore Bonaccorso 27fc4207c6 tipc: check minimum bearer MTU (CVE-2016-8632) 2016-12-07 10:31:56 +01:00
Salvatore Bonaccorso 59ebe22f2f Update to 4.8.12 2016-12-06 21:19:22 +01:00
Ben Hutchings b3906798a8 Revert "default exported asm symbols to zero" 2016-12-05 01:07:36 +00:00
Ben Hutchings 1c1ab88dbe Update to 4.9-rc8 2016-12-05 01:02:03 +00:00
Ben Hutchings 7e80c27706 radeon: Update package name in error message for missing firmware 2016-12-03 03:30:15 +00:00
Ben Hutchings 34594185e1 Drop "default exported asm symbols to zero"
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
Ben Hutchings 2431e89ed3 Update fixes for exported symbol versions
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching.  Apply his match but then revert the weakening.

Also add a proposed fix for missing version CRCs, which gives them a
default value of zero.  Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
Ben Hutchings 54d0756a33 Fix exported symbol versions
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"

This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
Salvatore Bonaccorso ceb75c4337 mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213) 2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso b67bd212fa vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084) 2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Ben Hutchings fa9e148da4 Update to 4.9-rc6 2016-11-21 23:52:49 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings abd19bbc53 Release linux (4.8.7-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJYKMjFAAoJEOe/yOyVhhEJOtIP/RIo9vUk0PusThnw4bYQTA8T
 x8UTEpGJ+tqWBRL+yv7Ff3A8qP2TRAvJW2xzqu1+4UwNYgCSTa8A20bJ6crGzN8X
 Y6J7nqWFuzWsB2SHsPvYI1m0Q9luNrQ+1vkohpH53u8FfJxuceHwP/tFj6ShMl8i
 bNUiftui2Sc82JUjUdiG2EpXlIJH+N3aO8+R5ER3qUqoiHxChrslSbh3Lg8T8Tcp
 ItwwLi6K9s3CjYCiDiZ54+BYYQRy+rmTRFpEmgac4v2+HqXrMKAR4D6EomqMl3r1
 wHQ/F/Tt1GMvYvJniKWJIJVeCzuZSBmaQrL+D7xkKVGrzMo7QGGW1xr3DzyV1alc
 Ugx4k2nDbPDGinrbkhJbuds02VDIl8vfrnUM1NCYZ2GrReD5jJPj6OcZvlXRbjZw
 gUL1j+3w1dCa71E2rufZK7DZnGw4MjR9Q0cAefbgWNzEFDNh3nXQEKpxleEMmT/C
 xXVR2cfUpOAr1J4vR++I7kAn9re9tw7UlX3JYqH8+ty6Lm+DxrzoGMxEd1bmxYm9
 yzIn4O8x6LK2B7NdHfRs1SJC4rWWy/3+2z+5SnFroGMem8ugDhB95Q3QFvQGe9Ga
 zw1T6+GlYF9oglzY87XcKY2oUQveL8A45pM2TF3HsgGbx7wziR2yymjWAk03w32Y
 uYbKvmpQsH/wNrOA8E8I
 =uDst
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.7-1'

Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings b15e0cf459 Update to 4.9-rc5 2016-11-13 20:35:21 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Ben Hutchings 82c55764b5 kbuild: Update -fno-PIE patches to match upstream 2016-11-10 20:26:29 +00:00
Ben Hutchings 7aecddec04 [amd64] kbuild: Add -fno-PIE to scripts/gcc-x86_64-has-stack-protector.sh 2016-11-03 16:51:48 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 586b6ef20b kbuild: add -fno-PIE (Closes: #841368) 2016-11-03 13:32:07 -06:00
Ben Hutchings c6318ee2ee Update to 4.9-rc3 2016-11-03 13:04:20 -06:00