Commit Graph

8184 Commits

Author SHA1 Message Date
Salvatore Bonaccorso 1173c652e9 Update to 4.16.8
Cleanup debian/changelog file
2018-05-10 16:46:46 +02:00
Salvatore Bonaccorso 24b281238c Update to 4.16.7
Refresh bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch

Drop patches applied upstream related to CVE-2018-1093

Cleanup debian/changelog entries
2018-05-10 15:01:21 +02:00
Salvatore Bonaccorso 3f624e1bcf Update to 4.16.6
Cleanup debian/changelog file

Add CVE identifier for CVE-2018-10940

Add TODO item (ABI changes or ABI bump)
2018-05-10 08:59:32 +02:00
Ben Hutchings e2a9c8d8a2 dm: Enable DM_MQ_DEFAULT. This can be reverted using the kernel parameter: dm_mod.use_blk_mq=n 2018-05-10 01:46:15 +01:00
Ben Hutchings 049487d882 SCSI: Enable SCSI_MQ_DEFAULT. This can be reverted using the kernel parameter: scsi_mod.use_blk_mq=n 2018-05-10 01:45:30 +01:00
Ben Hutchings f65f618689 rtl8192se: Fix warning introduced by "firmware: Remove redundant log messages from drivers"
The firmware file name is a local variable in both functions that
use it, and rtl92se_fw_cb() only uses it for the logging that we
remove.
2018-05-09 22:53:01 +01:00
Ben Hutchings a5394cbc13 [hppa/parisc64-smp] IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS 2018-05-09 22:48:55 +01:00
Ben Hutchings f4a882f016 Update to 4.17-rc4 2018-05-09 19:10:50 +01:00
Jason Duerstock 29cddc8de8 [ia64] add compress-modules (fixes FTBFS) 2018-05-09 09:56:09 -04:00
Luca Boccassi b3be450737 Add build profile and config/defines for disabling linux-source
Add a new "pkg.linux.nosource" to let users disable building the
linux-source-* package, and allow to set "source: false" to modify
the default behaviour when no rofile is used.
When doing development builds this can save up to 15 minutes of build
time, especially on IO-strapped build workers.
2018-05-08 19:17:15 +01:00
Ben Hutchings 923552dcc8 Reclassify lockdep packages as unversioned tools
The liblockdep<version> package is obviously versioned, but the others
aren't and it's not very useful to build just that one.
2018-05-08 17:01:41 +01:00
Ben Hutchings 29c80ea278 Fix building only versioned tools packages
Modifying makeflags in do_main_makefile() only affects the
build-indep/binary-indep rules!
2018-05-08 16:59:02 +01:00
John Paul Adrian Glaubitz d8596b9773 [m68k] Enable CONFIG_PATA_GAYLE as module 2018-05-07 13:36:30 +02:00
Romain Perier c171f70365 [armhf] MFD: Enable MFD_TPS65217 (Closes: #897590)
This enables MFD TPS65217 that is the PMIC found on the BeagleBone
Black. So the board can be powered off safely.
2018-05-04 22:14:33 +02:00
Ben Hutchings 00e2f5f30e kbuild: use -fmacro-prefix-map to make __FILE__ a relative path 2018-05-02 23:47:40 +01:00
Luca Boccassi 7e07ef0202 nodoc: don't build linux-doc and don't install tools documentation
Fully disable building and installing any documentation when the nodoc
build-profile is used.
Among other things this will help reducing build times when doing
development builds, especially on IO-limited build workers.
2018-05-02 12:59:55 +01:00
Vagrant Cascadian 8a269b84e6 Add changelog entry for [armhf] DRM: Enable DW_HDMI_AHB_AUDIO and
DW_HDMI_CEC (Closes: #897204) by Romain Perier.
2018-04-30 11:24:39 -07:00
Ben Hutchings 6856488bca Prepare to release linux (4.17~rc3-1~exp1). 2018-04-30 00:13:06 +01:00
Ben Hutchings bb6c7da6fe Update to 4.17-rc3 2018-04-30 00:12:50 +01:00
Ben Hutchings 114088708f Fix linux-doc, linux-manual, linux-source, linux-support package names
We don't want to include "-4.9" in them twice.  Add a "source_basename"
template variable that excludes any version suffix in the source package
name.

(cherry picked from commit f3c51efdd6e9d0ce32ee5a0f998fdcda930a715c)

For master, nothing is immediately broken without this.  Also we have
no longer build a linux-manual package.  Change the changelog text
accordingly.
2018-04-29 21:19:11 +01:00
Ben Hutchings 7b34ddf467 Add support for building only versioned tools packages
We already had support for disabling the tools build, used by
src:linux-grsec.  However in this case, where we're using a different
based version to src:linux, we do still need to build the versioned
tools packages (linux-kbuild-4.9 and linux-perf-4.9).  Split the
control template, config setting and rules accordingly.

(cherry picked from commit cb62c945f27ddee476631fa85c6aa67e50ed3bee)
2018-04-29 21:16:01 +01:00
Ben Hutchings 634a2fc7db Release linux (4.16.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlrmIuQACgkQ57/I7JWG
 EQl34hAAiQMv+LrOJsingSeIxmPM2q+FktFykdjTNsjcyEZ5pSfhj8T4fc4hZHZp
 uXOMV4+lfNSCQF9agPsYcTvm6Md7VqMCMjFOmM6GdUrIc7kDnZEheA1ZTFuZzOVv
 Heh88tDu6Zl2vqPbt+81Ah3N/lSyCVA5jVF0K4RYUe1Gs7YFTqaJdPZi8wP7I9Os
 GwvY41auQFNdTQfIpdB1dISQVtfAZT8cg+c/fGUNPhJWqFnjMeYhBoQWRKPATp4/
 NNJNAEOU7K0zpooCCAH5zK03T6bpt64GOJx/gDMyaqdlAd3LbLiCQP09tS3OVqQS
 qAm7I0STnM3oD0D1uk+OPo8Cxeu3V/4kHwYH59G/EwyYa7rJxrThQSvTZCxEdKuK
 REr2aPe6doW7x45yhL+R3ZKJDLsdVJkkutpCXhdqnwAUnXITUR4PprNd4l6tc5nC
 IzZM5Il7nAx3LWB2Xtz4iGykQVAyXdpDKXjCJgarTI4kG49iitCq1eRJHi5jFVJw
 7iuIgZmjFBWx6bzifhNBg0oUG3R7hEitzaqJ0G1jX+FRVfOOr+an+txZEVyJuqsw
 3FDI8kJClXVB6kNAPgEQWPh3Cdh63s69qVLZZTGujgLHMXv833MbBHIV3KR+7YNS
 uKfzJNSglCIKf3LVKRUSHJyfYJTV+iS4ioHVjn8B7fc0YCdXQpg=
 =hQGL
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.16.5-1'

Release linux (4.16.5-1).
2018-04-29 21:09:11 +01:00
Ben Hutchings 65b6c45811 Update to 4.17-rc2 2018-04-29 21:08:28 +01:00
Ben Hutchings f36c7f9bd9 Prepare to release linux (4.16.5-1). 2018-04-29 17:09:15 +01:00
Ben Hutchings f78b896b8b debian/lib/python/debian_linux/gencontrol.py: Allow uploads to *-security with a simple revision 2018-04-28 21:42:12 +01:00
Ben Hutchings 498cb2c129 Update to 4.16.5 2018-04-27 18:25:27 +01:00
Ben Hutchings 5b54699034 ext4: fix bitmap position validation
Un-revert "ext4: add validity checks for bitmap block numbers" and
apply this new fix on top of it.
2018-04-27 18:08:44 +01:00
Ben Hutchings c3c6a03a9c udeb: Add algif_skcipher to crypto-modules (Closes: #896968) 2018-04-27 00:05:25 +01:00
Luca Boccassi d2d240fc1b Build-Dep on libelf-dev even for nopython/notools builds
libelf-dev is needed to build objtool when CONFIG_STACK_VALIDATION
and CONFIG_UNWINDER_ORC are enabled, which is currently the case.
Do not mark it as !nopython !pkg.linux.notools otherwise the build
will fail in a minimal chroot (pbuilder/etc).
2018-04-26 22:19:01 +01:00
Ben Hutchings 019c1fa6f3 xfs: set format back to extents if xfs_bmap_extents_to_btree (CVE-2018-10323) 2018-04-25 21:23:07 +01:00
Ben Hutchings f78c3b3434 xfs: enhance dinode verifier (CVE-2018-10322) 2018-04-25 21:22:21 +01:00
Ben Hutchings 9f2182e09a Revert "ext4: add validity checks for bitmap block numbers", which caused a regression 2018-04-25 21:15:48 +01:00
Ben Hutchings 98017b2bd7 Update to 4.16.4 2018-04-25 21:14:23 +01:00
Ben Hutchings f4dbf1aa82 debian/lib/python/debian_linux/debian.py: Fix binNMU revision parsing
In VersionLinux, any binNMU version will currently match the
revision_other group in the regexp and therefore never be recognised
as an experimental, security, or backport version.  This is probably
harmless in practice because:

- binNMUs don't happen in those suites
- Only debian/bin/gencontrol.py cares about the linux_revision_other
  attribute, and it won't be run for a binNMU version

But let's fix it by matching the binNMU suffix separately.
2018-04-24 20:40:27 +01:00
Ben Hutchings 90f09743ec debian/lib/python/debian_linux/debian.py: Fix binNMU changelog parsing
I incorrectly added a requirement of a newline after urgency in the
changelog entry top line as part of
"debian/lib/python/debian_linux/debian.py: Parse bottom lines of
changelog entries".  For a binNMU, there will be ", binary-only=yes"
after the urgency.  Since we don't currently care about any fields
after urgency, allow either a comma or newline.
2018-04-24 20:20:47 +01:00
Ben Hutchings 5d952f897c linux-kbuild: Update genksyms makefile to run flex and bison
The C code generated by these tools used to be included in the source
tree but has now been removed.
2018-04-20 03:38:54 +01:00
Ben Hutchings 81d6f91e25 Clean up kconfig for 4.17
- Various ancient SCSI drivers were removed
- BT_HCIBTUART and INFINIBAND_CXGB3_DEBUG were removed
- OMAP_DM_TIMER is now an automatic symbol
- Marvell NAND driver was rewritten, so we enable MTD_NAND_MARVELL
  instead of MTD_NAND_PXA3xx
- Various netfilter symbols are now boolean instead of tristate
2018-04-20 01:39:47 +01:00
Ben Hutchings 1c1d5f2d95 Documentation: Update references to drivers/base/firmware_class.c 2018-04-20 00:57:50 +01:00
Ben Hutchings d04e628f00 Documentation: typec.rst: Use literal-block element with ascii art
This fixes a fatal error in the doc build process.
2018-04-20 00:50:39 +01:00
Ben Hutchings a5cb9ae406 debian/rules.real: Stop enabling verbose output for listnewconfig target 2018-04-19 23:46:11 +01:00
Ben Hutchings 8457aba35f Update to 4.17-rc1
- Drop patches included upstream
- Drop "Don't WARN about expected W+X pages on Xen"; the problem appears
  to have been fixed by upstream commits 2cc42bac1c ("x86-64/Xen: eliminate
  W+X mappings") and 672c0ae09b33 ("x86/mm: Consider effective protection
  attributes in W+X check")
- Drop "Kbuild: kconfig: Verbose version of --listnewconfig"; it seems
  redundant with upstream commit 17baab68d337 ("kconfig: extend output of
  'listnewconfig'")
- Drop lockdown patch to drivers/scsi/eata.c; the driver was removed
  upstream
- Refresh various other patches
2018-04-19 23:44:22 +01:00
Ben Hutchings 84cc9cc225 Really apply the pending version change from sid branch 2018-04-19 23:35:36 +01:00
Ben Hutchings cb7c0036b0 Update to 4.16.3 2018-04-19 15:04:56 +01:00
Ben Hutchings ac5eca03c1 [x86,arm64] Disable code signing for upload to unstable 2018-04-19 14:51:22 +01:00
Ben Hutchings 71f21e927e For unstable, set ABI to 1 and remove ~exp1 suffix from version 2018-04-19 14:51:02 +01:00
Ben Hutchings fcb558d168 Merge branch 'sid'
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
  applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
  selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
  options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
Ben Hutchings 0b520de976 Prepare to release linux (4.15.17-1). 2018-04-19 11:13:03 +01:00
Ben Hutchings 4220b94e90 udeb: Add zstd_decompress to compress-modules and make squashfs-modules depend on it
zstd_decompress is now used by both btrfs and squashfs, so it needs
to be in a common dependency of their udebs.
2018-04-19 11:12:40 +01:00
Ben Hutchings cdd19a1d2d udeb: Rename lzo-modules to compress-modules 2018-04-19 11:12:13 +01:00
Ben Hutchings 8bf0fade16 [amd64] net: Enable AQTION as module
I'm enabling it in the top-level config, but currently it has
'depends on X86_64' so it will only be built for amd64.

References: https://lists.debian.org/CAMVG2svxkO42pr7VgjFxv1o5hiw9-1cAgBuhyEem1foTH2M6zw@mail.gmail.com
2018-04-19 00:23:00 +01:00
Ben Hutchings 5014bbfd99 [arm64] PCI: Enable PCI_TEGRA (Closes: #888817) 2018-04-19 00:19:47 +01:00
Ben Hutchings ae9bb017a0 [arm64] Enable ARCH_SYNQUACER and related driver modules (Closes: #891787) 2018-04-19 00:15:08 +01:00
Ben Hutchings a529c97bc1 block: Enable BLK_SED_OPAL (except on armel) 2018-04-19 00:11:59 +01:00
Ben Hutchings b776a2b257 squashfs: Enable SQUASHFS_ZSTD (Closes: #883410) 2018-04-19 00:03:22 +01:00
Ben Hutchings fc0c66ddb9 ath9k_htc: Fix regression in 4.15, thanks to Ben Caradoc-Davies (Closes: #891060)
- mac80211: add ieee80211_hw flag for QoS NDP support
- ath9k_htc: use non-QoS NDP for AP probing
2018-04-19 00:01:09 +01:00
Ben Hutchings 4bb4183118 [x86] platform: Enable DELL_SMBIOS_SMM, DELL_SMBIOS_WMI as modules (closes: #893976) 2018-04-18 23:52:47 +01:00
Ben Hutchings f3cb525153 [x86] net: Enable THUNDERBOLT_NET as module (Closes: #894310) 2018-04-18 23:50:16 +01:00
Ben Hutchings 91b60c01c7 [arm64] net/phy: Enable MDIO_BUS_MUX_MMIOREG as module (Closes: #894336) 2018-04-18 23:47:39 +01:00
Ben Hutchings 9926a8790e w1: Enable all "slave" device drivers (Closes: #895340) 2018-04-18 23:39:48 +01:00
Ben Hutchings 95cf0f2687 [x86] Enable MFD_AXP20X_I2C, AXP288_FUEL_GAUGE as modules (Closes: #895129) 2018-04-18 23:31:26 +01:00
Ben Hutchings 0fefb6932b SCSI: Enable SCSI_SYM53C8XX_2 as module on all architectures (Closes: #895532) 2018-04-18 23:27:21 +01:00
Ben Hutchings 31ed54f425 udeb: Move arc4 and ecb from nic-wireless-modules to crypto-modules (Closes: #895362) 2018-04-18 23:24:08 +01:00
Ben Hutchings e663157b88 [arm*] iio: Enable DHT11 as module (Closes: #873176) 2018-04-18 22:33:41 +01:00
Ben Hutchings 7c4275d142 [armhf] udeb: Add i2c-exynos5 to i2c-modules (Closes: #895976) 2018-04-18 22:28:53 +01:00
Ben Hutchings ba793f6361 [armel/marvell] linux-image: Replace supported model list with wiki link 2018-04-18 22:12:35 +01:00
Uwe Kleine-König a8c6014b43 [amd64] enable AMD 10GbE Ethernet driver (CONFIG_AMD_XGBE=m) 2018-04-18 17:16:16 +02:00
Helge Deller f147fe68c4 [hppa] Switch to self-decompressing kernel 2018-04-18 08:34:17 +02:00
Ben Hutchings 9f5a30bb07 Add various security fixes 2018-04-18 00:11:35 +01:00
Ben Hutchings bf94bb5914 Bump ABI to 3 2018-04-17 23:58:30 +01:00
Ben Hutchings 66b63716aa Update to 4.15.17 2018-04-17 23:43:11 +01:00
Ben Hutchings 2082e2d5af linux-headers: Change linux-kbuild dependency to be versioned
In case we ever have another bug fix where we want to force rebuilding
out-of-tree modules (like for the addition of retpoline), we should
ensure that they are built using an updated linux-kbuild.

Since linux-kbuild packages are built from src:linux, we can simply
require at least the same source version.  (linux-headers and
linux-kbuild can come from different architectures so we must not use
binary:Version here.)
2018-04-16 23:23:06 +01:00
Ben Hutchings 083ddaa564 Add support for compilers installed outside the default PATH
The obvious way to do this is to edit the PATH in .kernelvariables.
But this obvious way doesn't work due to a bug in make (#895835).

(cherry picked from commit 4c6213fbbbff44710dda2091a7b26e0f0ea0a610)
2018-04-16 23:15:33 +01:00
Salvatore Bonaccorso a325681bab [arm64] net: hns: Fix ethtool private flags (CVE-2017-18222) 2018-04-15 20:58:48 +02:00
Salvatore Bonaccorso f5b6a35cad media: usbtv: prevent double free in error case (CVE-2017-17975) 2018-04-15 20:52:17 +02:00
Salvatore Bonaccorso 8e41f67460 drm/nouveau/mmu: ALIGN_DOWN correct variable
Closes: #895750
2018-04-15 20:33:52 +02:00
Roger Shimizu 926704f2b9 [armel] Add dependency of udeb to fix FTBFS
* [armel] Add dependency of udeb modules (fixes FTBFS):
  - Add lzo_decompress to lzo-modules.
  - Add cmdlinepart to mtd-modules.
* [armel] Add dependency of udeb packages (fixes FTBFS):
  - Add package dependency of mtd-modules to jffs2-modules.
  - Add package dependency of lzo-modules to squashfs-modules.

(cherry picked from commit 175171d42d)
2018-04-16 00:16:47 +09:00
Roger Shimizu 175171d42d [armel] Add dependency of udeb to fix FTBFS
* [armel] Add dependency of udeb modules (fixes FTBFS):
  - Add lzo_decompress to lzo-modules.
  - Add cmdlinepart to mtd-modules.
* [armel] Add dependency of udeb packages (fixes FTBFS):
  - Add package dependency of mtd-modules to jffs2-modules.
  - Add package dependency of lzo-modules to squashfs-modules.
2018-04-14 22:38:57 +09:00
Vagrant Cascadian f68523c82b [arm64] Add patch enabling simplefb LCD on A64. 2018-04-13 20:34:07 -07:00
Vagrant Cascadian 846bba8048 [arm64] Enable features to support Pinebook and other A64 systems:
CONFIG_USB_MUSB_HDRC, CONFIG_USB_MUSB_SUNXI, CONFIG_SUN8I_DE2_CCU,
CONFIG_DMA_SUN6I
2018-04-13 20:20:55 -07:00
Ben Hutchings d948b7a44d wireless: Add Debian wireless-regdb certificates (see #892229) 2018-04-13 20:22:12 +01:00
Vagrant Cascadian 10b9c6345e [armhf] Add patch to fix loading of imx6q-cpufreq module. 2018-04-12 01:12:40 -07:00
James Clarke 12dee9d0f8 [ia64] Drop nic-modules Depends overrides (fixes FTBFS)
The overridden Depends is missing i2c-modules, and includes the no longer
present core-modules, so just use the standard Depends instead which does not
have these issues.
2018-04-11 11:47:17 +01:00
Vagrant Cascadian 4ece70b07d [arm64] Add patches to support SATA on Tegra210/Jetson-TX1. 2018-04-10 13:14:24 -07:00
Ben Hutchings 39213877ab aufs: Update support patchset to aufs4.16-20180409 (no functional change) 2018-04-08 20:06:10 +02:00
Ben Hutchings 51c5591ed2 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
(cherry picked from commit 809a0521f8)

I already did this on the sid branch but for some reason it didn't get
merged to master.
2018-04-08 20:04:22 +02:00
Ben Hutchings 672b1476ef Prepare to release linux (4.16-1~exp1). 2018-04-08 14:44:18 +02:00
Ben Hutchings 82596c5122 integrity: Disable IMA until it works properly with lockdown
Enabing CONFIG_IMA, CONFIG_MODULE_SIG and lockdown currently breaks module
loading with finit_module().
2018-04-08 14:43:46 +02:00
Ben Hutchings ef9c7e11c5 certs: Add certificate for test key used in Debian signing service 2018-04-08 14:39:52 +02:00
Ben Hutchings 7628c027f4 [x86,arm64] Enable code signing again 2018-04-08 10:31:20 +02:00
Ben Hutchings e85bd66dc5 debian/bin/gencontrol_signed.py: Copy maintainer and date into template's changelog 2018-04-08 10:31:20 +02:00
Ben Hutchings a7e85cb155 debian/lib/python/debian_linux/debian.py: Parse bottom lines of changelog entries
Changelog doesn't currently provide access to the maintainer
name/address and date.  We need this when updating the signed template
changelog.

While we're at it, make sure we don't ignore any important lines.
Anything beginning with exactly zero or one spaces is a top or bottom
line, respectively; anything else is internal text we can ignore.
2018-04-08 10:31:20 +02:00
Ben Hutchings 3b3e6ad4cb Use a dummy build profile for udebs that we test-build before signing
debhelper no longer fully trusts the package list specified with -p,
but only processes packages that are listed in debian/control and
enabled in the current build profile.  This breaks the test build of
udebs that we build for real after code signing.

Work around this by adding the udebs to the control file, conditional
on a new build profile (pkg.linux.udeb-unsigned-test-build).  Override
the build profile during the test build.
2018-04-08 10:31:20 +02:00
Ben Hutchings be394a26da Add template source package to support code signing 2018-04-08 10:31:20 +02:00
Ben Hutchings f980187986 debian/rules.d/tools/lib/lockdep/Makefile: Fix repeated 'make install'
Currently the 'ln -s' command fails when run a second time.  Add the
-f option to fix this.
2018-04-08 10:31:19 +02:00
Ben Hutchings 354e9c4806 debian/lib/python/debian_linux/debian.py: Allow parsing any file as changelog 2018-04-08 10:31:19 +02:00
Ben Hutchings 09697cfec7 debian/lib/python/debian_linux/debian.py: Close changelog after parsing 2018-04-08 10:31:19 +02:00
Ben Hutchings e120f06587 debian/lib/python/debian_linux/gencontrol.py: Allow overriding output filenames 2018-04-08 10:31:19 +02:00
Ben Hutchings a25eb38372 debian/config: Rename [build]signed-modules setting to signed-code
This setting controls code signing in general, not just modules.
2018-04-08 10:30:49 +02:00
Jeremy Stanley 215951c4a8 [x86] Enable CONFIG_PWM_LPSS_PLATFORM as a module
Provides support for the low-level power subsystem handling
backlight control on GPD Pocket UMPC systems. Also enable its
dependency CONFIG_PWM=y (Closes: #895164).
2018-04-08 01:42:12 +00:00
Jeremy Stanley 3ef59ddc39 [x86] Enable CONFIG_INTEL_INT0002_VGPIO as a module
Provides support for the Bay Trail/Cherry Trail virtual GPIO
controller to handle power events on GPD Pocket UMPC systems.
2018-04-08 01:42:12 +00:00
Jeremy Stanley e70195604f [x86] Enable CONFIG_REGULATOR
This is needed to build the already enabled CONFIG_INTEL_CHT_INT33FE
module which provides support for the ACPI interface on GPD Pocket
UMPC systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9d053a8255 [x86] Enable CONFIG_TYPEC_FUSB302 as a module
Provides support for the USB type-C interface on GPD Pocket UMPC
systems. Also enable its dependencies CONFIG_TYPEC=m and
CONFIG_TYPEC_TCPM=m.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 7ef6ea60ce [x86] Enable CONFIG_BATTERY_MAX17042 as a module
Provides support for the battery level monitor on GPD Pocket UMPC
systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9e5d5923e3 [x86] Enable CONFIG_CHARGER_BQ24190 as a module
Provides support for the battery charger on GPD Pocket UMPC systems.
Also enable its dependencies CONFIG_EXTCON=m,
CONFIG_EXTCON_INTEL_CHT_WC=m, CONFIG_I2C_CHT_WC=m and
CONFIG_INTEL_SOC_PMIC_CHTWC=y.
2018-04-08 01:42:11 +00:00
Ben Hutchings 765677fc1f Update to 4.16 2018-04-07 20:29:53 +02:00
Roger Shimizu d192eb7555 [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.

(cherry picked from commit a4fdfa09ce)
2018-04-07 21:51:24 +09:00
Roger Shimizu a4fdfa09ce [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.
2018-04-07 19:53:33 +09:00
Sjoerd Simons db401171be Enable CONFIG_DRM_DP_AUX_CHARDEV (Closes: #890235)
Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
2018-04-06 16:34:32 +02:00
Riku Voipio db95598aa8 [armhf] update changelog with dove cubox support
Accidentally missed from the previous patch
2018-04-06 12:29:01 +03:00
Ben Hutchings 6b8b6f7948 wireless: Disable regulatory.db direct loading (see #892229) 2018-04-05 21:34:14 +02:00
Roger Shimizu ab4260743a Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"

(cherry picked from commit b0a94d07b4)
2018-03-23 21:17:45 +09:00
Roger Shimizu b0a94d07b4 Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"
2018-03-23 21:11:08 +09:00
Ben Hutchings 957b707ff1 Prepare to release linux (4.16~rc6-1~exp1). 2018-03-20 13:52:03 +00:00
Ben Hutchings 630c3f806d Release linux (4.15.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqwxttfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EA+AP/3w06dM1NGmIwjmKWtFDpYrrPLz/vtGG
 g/QHFtFGpGQdbzC2O6OULe3z/M63AlNJ6d1VG9OnDcbgsr2eXxHy+021LvtucWK2
 wtKtNJVz6VQ7XtfccsYqcAhqQq22tS5lEqPxMmRAz9SUPuG823B0LH0LXQwvRCiA
 4PeVjDa+bHzNfGyp+ecF70ZsDdfQmYHTNxnAgRiiUUGvLnd2Aq9uQWMILSgiZAiu
 D9lqn3VLI49bT65QGaK+G35MgfkmwnaSa4P1Kvsr8OKkKJMoWObdTnO3UL2hYQj4
 4P7EM4VzRa45eKpBEGpcrEMNtIv6ioNh80r2Dxj/3TlusruG7qXSUgLJMneX5ZVf
 bT1mVkDrr61f3d/ubypXaJNgR7g6zu522o/wLOaCwU+tjBlxuEELCxyGcB5vlQeR
 EbJy/jjW3+NX23w9bheYoDqaz4bITgqAma2Y2VC7jC34CP42oowavLy6OQdWUbCh
 wPvwxYnNEqZWPlMYyTCj/cmLAZb6JN1mNmq0rlbGjlnICtBKYDKah57noCGq34BW
 pAm7aDLQGFGaj0pW2rzCgMd20klg39sLxCMZmYbqRubQXGJaq7FuzjWSmAmd6tSV
 8dcM1QLOz3XmcaLRGXTr/hWllj9AltSFp5EVaCN27Fdlvjec6RnVdNNjOs5bd4rK
 7ik0RWgWDIoU
 =PehK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.15.11-1'

Release linux (4.15.11-1).

Refresh patches.
2018-03-20 13:50:27 +00:00
Ben Hutchings 96a9a0c51f Update to 4.16-rc6 2018-03-20 13:45:54 +00:00
Salvatore Bonaccorso 8c71b9a7b6 Prepare to release linux (4.15.11-1). 2018-03-20 09:31:08 +01:00
Vagrant Cascadian 6b6dc95db7 [armhf] Add device-tree patches from linux-next to support USB and
Ethernet on meson8b.
2018-03-19 19:27:39 -07:00
Vagrant Cascadian 75177c7c40 [armhf] Enable ARCH_MESON and related drivers. 2018-03-19 19:18:48 -07:00
Salvatore Bonaccorso 1d363986d0 mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (CVE-2018-8087) 2018-03-19 22:31:39 +01:00
Salvatore Bonaccorso 6a020907c6 Update to 4.15.11
Drop bugfix/all/crypto-ecc-fix-null-pointer-deref.-on-no-default_rng.patch

Cleanup debian/changelog file
2018-03-19 13:05:40 +01:00
Jeremy Stanley 15a4ccac46 [x86] Enable CONFIG_GPD_POCKET_FAN as a module
Provides fan control on GPD Pocket UMPC systems (Closes: #893451)
2018-03-19 01:05:09 +00:00
Ben Hutchings dcdf9a112f udeb: Update patterns for PHY modules included in usb-modules
Closes: #893154
2018-03-16 23:47:15 +00:00
Salvatore Bonaccorso 677fae7f88 Update to 4.15.10
Add CVE ids for two issues fixed in 4.15.10

Drop bugfix/all/scsi-core-Avoid-that-ATA-error-handling-can-trigger-.patch

Drop bugfix/all/nospec-kill-array_index_nospec_mask_check.patch

Cleanup debian/changelog file
2018-03-16 11:53:04 +01:00
Ben Hutchings 87ddc553bb udeb: Add i2c-modules
mouse-modules and nic-modules both contain modules depending on
i2c-core, so we need to package it properly.
2018-03-16 01:52:47 +00:00
Ben Hutchings e5827e60d6 [ia64] udeb: Combine core-modules/kernel-image and scsi{,-common,-extra}-modules
This was done for other architectures in 2016 after ia64 was removed.
2018-03-15 20:29:23 +00:00
Ben Hutchings 6a61176cdf [ia64] linux-image: Improve flavour descriptions 2018-03-15 20:24:09 +00:00
Ben Hutchings f5c2d3912f [ia64] Compile with gcc-7 2018-03-15 20:23:49 +00:00
Ben Hutchings 2de75f07c3 [ia64] linux-image: Don't suggest fdutils 2018-03-15 20:23:29 +00:00
Ben Hutchings 2e74ef517f [ia64] Disable IRDA, consistent with other architectures 2018-03-15 20:23:04 +00:00
Ben Hutchings 0eab78b1fd [ia64] Revert "Remove all support for ia64"
This reverts commit ace247de5b.
Refresh the "Hardcode arch script output" patch.

Closes: #886693
2018-03-15 20:22:30 +00:00
Ben Hutchings 90520391a2 i40e: Add kconfig dependency to ensure cmpxchg64() is available
This should fix FTBFS on architectures where it isn't.
2018-03-15 19:08:05 +00:00
Ben Hutchings ee1a4b08d6 udeb: Add dependency from nic-modules to zlib-modules
This should fix FTBFS on architectures where zlib_deflate is not built-in.
2018-03-15 19:08:01 +00:00
Salvatore Bonaccorso 8039021914 scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
Closes: #891467
2018-03-15 08:53:49 +01:00
Ben Hutchings 90b8cc7a38 [amd64] udeb: Add vmd to scsi-modules, required for NVMe on some systems
Closes: #891482
2018-03-15 03:01:04 +00:00
Ben Hutchings 341e78aee9 Really bump ABI to 2 2018-03-15 03:00:56 +00:00
Ben Hutchings 45f26f2f70 Bump ABI to 2
Commit 1df9e416e647 "Kbuild: always define endianess in kconfig.h"
fixed several cases where some types (and inline functions) might not
be correctly defined according to the host byte order.  It might be
possible to avoid an ABI bump, but it would require a lot of work.
Also, the problem may affect OOT modules that therefore should be
rebuilt with the fix.
2018-03-15 02:24:26 +00:00
Ben Hutchings 35e5ff18f3 amdgpu: Abort probing if firmware is not installed, as we do in radeon 2018-03-15 02:19:45 +00:00
Ben Hutchings 1cf35d5b4d Avoid/fix/ignore most ABI changes in 4.15.5-4.15.9 inclusive
There are still a few to resolve.
2018-03-14 02:38:34 +00:00
Ben Hutchings 33277fbe2b nospec: Kill array_index_nospec_mask_check() 2018-03-13 22:22:31 +00:00
Ben Hutchings 17703a438b Update to 4.15.9
This has some ABI changes, which still need to be resolved.
2018-03-13 22:20:14 +00:00
Ben Hutchings a1c4060b68 Merge branch 'master' of salsa.debian.org:kernel-team/linux
Move extra changelog entries under 4.16~rc5-1~exp1 to the next version.
2018-03-13 16:14:14 +00:00
Uwe Kleine-König a6229f947f [arm64] enable various drivers as module for teres-i OSHW laptop 2018-03-13 14:53:23 +01:00
Ben Hutchings 0385df06cd Prepare to release linux (4.16~rc5-1~exp1). 2018-03-13 02:06:57 +00:00
Ben Hutchings 8ca20af96f debian/rules.d/tools/kconfig/Makefile: Use bison and flex to build kconfig 2018-03-13 02:06:49 +00:00
Ben Hutchings d68283849b debian/control: Update profile qualification for build-deps on bison and flex
They are now used to build kconfig, so the only qualification is !stage1.
2018-03-13 02:00:12 +00:00
Helge Deller 887cec2797 [hppa] Re-enable 32-bit SMP kernel build. Qemu now supports it. 2018-03-12 08:35:01 +01:00
Ben Hutchings 3c7088b5cd Update to 4.16-rc5 2018-03-12 02:40:37 +00:00
Ben Hutchings 7b3adb7e57 Merge branch 'master' into sid 2018-03-12 02:02:24 +00:00
Ben Hutchings 575d4450ca Merge branch 'master' into sid 2018-03-12 02:00:57 +00:00
Vagrant Cascadian b6d7061ed6 [arm64] Apply patch from linux-next to fix eMMC corruption on
Odroid-C2 (Closes: #879072).
2018-03-11 18:46:05 -07:00
Ben Hutchings 1cf87c07e9 firmware_class: Refer to Debian wiki page when logging missing firmware
Closes: #888405
2018-03-12 01:21:33 +00:00
Ben Hutchings bc264fd9ed [x86] sound/soc/intel: Update configuration for 4.15
Enable SND_SOC_INTEL_SST_TOPLEVEL, SND_SOC_INTEL_HASWELL,
SND_SOC_INTEL_BAYTRAIL, SND_SST_ATOM_HIFI2_PLATFORM,
SND_SOC_INTEL_SKYLAKE as modules.  This re-enables the board
drivers that now depend on them (Closes: #892629).

Remove config for SND_SOC_INTEL_BYT_MAX98090_MACH and
SND_SOC_INTEL_BYT_RT5640_MACH, which depend on SND_SST_IPC_ACPI = n
and therefore can't be enabled together with the other drivers.
2018-03-12 00:09:39 +00:00
Ben Hutchings bdc8a76aa0 debian/control: Point Vcs URLs to Salsa 2018-03-11 18:04:45 +00:00
Ben Hutchings 22f6a669a8 aufs: Update support patchset to aufs4.15-20180219 (no functional change) 2018-03-11 18:04:45 +00:00
Ben Hutchings 809a0521f8 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier 2018-03-11 18:04:45 +00:00
Salvatore Bonaccorso 07f055d4a5 sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803) 2018-03-09 20:34:10 +01:00
Vagrant Cascadian 4bcb651396 [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
work on rk3399 A72 cores.
2018-03-09 10:55:19 -08:00
Vagrant Cascadian 143ff9e565 [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset. 2018-03-09 10:53:46 -08:00
Salvatore Bonaccorso 5bd62d6357 ALSA: seq: Fix racy pool initializations (CVE-2018-7566) 2018-03-09 11:54:59 +01:00
Bastian Blank ab6c5fc99e Drop note about Xen from long descriptions
Xen support is enabled in all but one x86 kernel since several Debian
releases.
2018-02-23 17:06:03 +01:00
Uwe Kleine-König 7d901c1267 [powerpc,ppc64el,ppc64] Enable CRASH_DUMP 2018-02-23 14:10:51 +01:00
Uwe Kleine-König 830286e344 netfilter: enable NFT_FIB_NETDEV as module 2018-02-23 13:11:02 +01:00
Salvatore Bonaccorso 728a489c77 Add ABI reference for 4.15.0-1 2018-02-20 21:52:11 +01:00
Salvatore Bonaccorso a8a0de4aba Prepare to release linux (4.15.4-1). 2018-02-18 09:36:50 +01:00
Salvatore Bonaccorso c59d949283 Prepare to upload to unstable
Drop the ~exp1 from the version.

Set ABI to 1.
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 5f628725c4 (Temporarily) disable armel kernel image build
The armel/marvell kernel size is growing to large and the compressed
image is over the limit.

Given the armel architecture will most likely not be part of Buster,
disable the image build.

Cf. https://lists.debian.org/debian-kernel/2018/01/msg00278.html
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 0bb3db4916 Add CVE id for CVE-2018-5750
Gbp-Dch: Ignore
2018-02-17 15:14:21 +01:00
Salvatore Bonaccorso fc2cf56edb Update to 4.15.4
Drop media-dvb-usb-v2-lmedm04-Improve-logic-checking-of-w.patch

Drop media-dvb-usb-v2-lmedm04-move-ts2020-attach-to-dm04_.patch

Drop media-hdpvr-fix-an-error-handling-path-in-hdpvr_prob.patch

Cleanup Debian changelog for 4.15.4
2018-02-16 22:46:54 +01:00
Salvatore Bonaccorso 4cb4e4a1d6 Update to 4.15.3 2018-02-16 12:52:22 +01:00
Salvatore Bonaccorso 3813d82c3e Update 4.15.1 and 4.15.2 Debian changelog entries
Drop/Remove enties included in the 4.14.17-1 upload and add architecture
tags.
2018-02-16 10:33:37 +01:00
Salvatore Bonaccorso 0ec05d8c81 Release linux (4.14.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqFl5pfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EQDoP/iuiGnJomZlwYf+UtxmTxZM0B1jutQ2V
 vg2/JLaocNP/QLJTRKKQnUnEbawuUvGF/vtq5kDV0XcaY3QZSbeQKkpyEpZoI5K3
 dJ8WG+EXDd/a2KVoJ/layX2JqtSVsgBOtJJkSSrhWk2tfZkhB1+9BJ54UXoTCT0A
 pWor5ycO0PUw6crlMsNz62lBwvdwoHgIhKkjpfnXOCTZQi6n6RVFvaT2uLyijZod
 0KTuWFnyMLgh1gpKKR/tqGs25ByOQH43TmtrVAYfjqua5P5CvzJaKp3UMHsDPIbN
 Uw3HB0QQ3iEg8pQJhCkrNk1LT/1Je9xb3rdoKSQ+OitTfyQnhs/eVXs3KzD3DPOc
 IJZjG/kno8d7bNWW8+ce12MPVVkAop1ZMGushyz1c3149HCtinQcymcWahD4Gyzg
 YA9w3V7ir+bvJWunKy12845XoXpxhaBVV7CbnXI02exGwbN1gBPfI6nxzf84lVcG
 Bnwy523jmAjB8h8a9HjmtwqecbnJRf+NkgQAJItniGR06B7XVSLaOnnD0dXLdOMj
 VADirfbRRU60gqBrjrMxUwMO1ArKowNzQM91pTR+jAa2mS4KzEpMmwmWMAPSTL2n
 9ODByDGf6oi9vQxxoMd1gic7cZwyzO3n/SnHSpA5IYDSeurWE1ZF3xWqPBlxIpUp
 EXiBvAThcuDs
 =jSDv
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.17-1'

Release linux (4.14.17-1).
2018-02-16 00:20:10 +01:00
Ben Hutchings 7708ade843 [x86] Rewrite "Make x32 syscall support conditional ..." to use a static key
Now that the old slow path is always used, this is an important
optimisation.
2018-02-14 18:28:42 +00:00
Salvatore Bonaccorso adad338012 Prepare to release linux (4.14.17-1). 2018-02-14 06:56:06 +01:00
Salvatore Bonaccorso bd35350217 Add bug closer for #883069 in 4.15.2-1~exp1 2018-02-13 19:23:37 +01:00
Riku Voipio ba309293de [arm64] enable COMMON_CLK_HI655X so wifi and bluetooth work on Hikey 2018-02-13 15:46:15 +02:00
Salvatore Bonaccorso 502a9ccf85 Add CVE id for CVE-2018-6927 2018-02-12 22:14:15 +01:00
Bastian Blank 2ac5e9851a Update to 4.15.2 2018-02-11 09:52:17 +01:00
Bastian Blank 0ce4bbe790 Fix building of liblockdep 2018-02-11 09:51:44 +01:00
Bastian Blank 1f0b5f04ef Update to 4.15.1 2018-02-08 14:20:22 +01:00
Ben Hutchings ca87f72cdd [x86] linux-headers: Depend on updated linux-compiler-gcc-7-x86 2018-02-06 20:28:40 +00:00
Ben Hutchings 35f213d491 linux-compiler-gcc-7-{arm,s390,x86}: Remove specific (and wrong) compiler version from description
Closes: #883363
2018-02-06 20:26:27 +00:00
Ben Hutchings 96c72b3c6c [x86] linux-compiler-gcc-7-x86: Add versioned dependency on gcc-7 for retpoline support 2018-02-06 20:22:23 +00:00
Ben Hutchings 3a638db7ea [x86] Add versioned build-dependency on gcc-7 for retpoline support 2018-02-06 20:20:13 +00:00
Ben Hutchings 1e4250336a Drop reverted vermagic change from changelog 2018-02-06 20:01:35 +00:00
Ben Hutchings 5a230f42f6 Word-wrap changelog 2018-02-06 20:01:00 +00:00
Salvatore Bonaccorso d8b78ad16e rxrpc: Avoid ABI change in 4.14.17 2018-02-05 20:56:02 +01:00
Salvatore Bonaccorso 31c2771b75 mac80211: Avoid ABI change in 4.14.17 2018-02-04 15:31:41 +01:00
Salvatore Bonaccorso 0a69e0b046 Update to 4.14.17
Refresh cpupower-fix-checks-for-cpu-existence.patch patch
2018-02-04 15:14:12 +01:00
Salvatore Bonaccorso a870b2741a crypto: ecc - Fix NULL pointer deref. on no default_rng
Closes: #886556
2018-02-02 20:43:54 +01:00
Salvatore Bonaccorso edfb7d0f0e Update to 4.14.16 2018-02-02 14:39:34 +01:00
Ben Hutchings e49ee939aa Note that 4.14.14 closes #888954 2018-02-01 21:36:08 +00:00
Salvatore Bonaccorso d3d73f5119 [rt] Update to 4.14.15-rt13 2018-01-31 21:00:05 +01:00
Ben Hutchings aacdec9702 Update to 4.15 2018-01-29 23:46:40 +00:00
Ben Hutchings 623cfd4d39 Merge branch 'sid'
- Drop ABI maintenance patches
- Apply usbip config change in debian/config/config
2018-01-28 19:02:08 +00:00
Ben Hutchings f01c4e1f91 usbip: Reduce USBIP_VHCI_HC_PORTS to 15, the maximum allowed for SuperSpeed hubs
Closes: #878866

The limits in Kconfig are simply wrong.
2018-01-28 18:53:45 +00:00
Salvatore Bonaccorso 4fae92a1d5 nfsd: auth: Fix gid sorting when rootsquash enabled (CVE-2018-1000028) 2018-01-28 19:38:02 +01:00
Salvatore Bonaccorso e53a4aa3b8 [rt] Update to 4.14.15-rt11 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso e5ce9cb87e Revert "module: Add retpoline tag to VERMAGIC" 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso 3a81855475 Update to 4.14.15 2018-01-28 15:50:32 +01:00
Riku Voipio 893c189290 [arm64] embed reset drivers to kernel
Reset drivers are tiny and are needed often early in boot. Kconfig
selects the drivers automatically with arch specific defaults:

config COMMON_RESET_HI6220
        default ARCH_HISI

So remove explicit driver selections from arm 64 config and let
kconfig dependencies handle it for us.
2018-01-26 11:02:53 +02:00
Bastian Blank dd6dc914d3 cloud: Mention support for Google Compute Engine 2018-01-23 21:38:05 +01:00
Bastian Blank 3fa67126b5 Switch to SLUB as kernel allocator 2018-01-23 19:25:23 +01:00
Ben Hutchings cf300a600b usb: Enable USBIP_CORE etc. on all architectures (Closes: #888042) 2018-01-23 17:26:24 +00:00
Ben Hutchings e6885f415f Enable CGROUP_BPF (except for armel) (Closes: #872560) 2018-01-23 17:15:28 +00:00
Uwe Kleine-König 5ff0bf31f4 Add bug closer for I2C_PXA on espressobin 2018-01-21 22:34:07 +01:00
Uwe Kleine-König 14c0e8f36f [arm64] enable I2C_PXA for espressobin 2018-01-21 22:11:36 +01:00
Bastian Blank 503143acab Enable NVME_MULTIPATH, NVME_FC, NVME_TARGET_FC
This enables NVME support in various SCSI host adapters, so move the
nvme module into the scsi-modules installer udeb.
2018-01-18 20:20:14 +01:00
Bastian Blank a26c8f0854 x86: Enable HYPERV_VSOCKETS 2018-01-18 20:19:26 +01:00
Bastian Blank aaaaf627d3 x86: Enable SCHED_MC_PRIO 2018-01-18 20:19:26 +01:00
Bastian Blank 02deddcfba Enable CRYPTO_RSA, CRYPTO_DH, CRYPTO_ECDH 2018-01-18 20:19:26 +01:00
Bastian Blank 54918bc9f0 Enable VIRTIO_MMIO 2018-01-18 20:19:25 +01:00
Bastian Blank 4c06af37cc Enable IPVTAP 2018-01-18 20:19:03 +01:00
Bastian Blank 7bd33d45fd Enable NET_ACT_SAMPLE 2018-01-18 20:13:56 +01:00
Bastian Blank 82296390f5 Enable IP_SET_HASH_IPMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3aa1af59a8 Enable NF_LOG_NETDEV 2018-01-18 20:13:56 +01:00
Bastian Blank cdc2183e8b Enable IPV6_SEG6_LWTUNNEL, IPV6_SEG6_HMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3a62f848cf Enable INET_ESP_OFFLOAD, INET6_ESP_OFFLOAD 2018-01-18 20:13:56 +01:00
Bastian Blank 63e3ef13a0 Enable NUMA_BALANCING_DEFAULT_ENABLED 2018-01-18 20:13:56 +01:00
Salvatore Bonaccorso e30f878e1d ALSA: seq: Make ioctls race-free (CVE-2018-1000004) 2018-01-18 14:30:46 +01:00
Bastian Blank 12fc8ef895 cloud-amd64: Support Amazon EC2 2018-01-18 12:57:14 +01:00
Bastian Blank 5f83961cb5 Add cloud-amd64 kernel flavour
As discussed on d-kernel, this flavour is added as experiment on request
of Microsoft.  For now it is only tested on Microsoft Azure.

It will be expanded to cover the other public cloud platforms at well.
This platforms will need additional drivers.
2018-01-18 09:19:36 +01:00
Ben Hutchings 6f43038466 Update to 4.14.14
Mostly done by Salvatore Bonaccorso.
2018-01-18 06:10:01 +00:00
Salvatore Bonaccorso 0bb5e7cccb loop: fix concurrent lo_open/lo_release (CVE-2018-5344) 2018-01-16 20:57:59 +01:00
Salvatore Bonaccorso 6c0d6a6239 RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333) 2018-01-16 20:53:46 +01:00
Salvatore Bonaccorso 24cdd62c17 RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332) 2018-01-16 20:50:50 +01:00
Ben Hutchings 4762c889ee Prepare to release linux (4.15~rc8-1~exp1). 2018-01-15 04:43:14 +00:00
Ben Hutchings 9d3430166e Note CVEs fixed upstream 2018-01-15 04:43:12 +00:00
Ben Hutchings 6e7610453d Release linux (4.14.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlpb7AUACgkQ57/I7JWG
 EQmfjhAArIzynB9B8lG9U8OlC7bp+HTjk9BgOKo5VZ6ABlIePxveUgkc44kYK1ET
 YGiqpi1BbMPoDiu32QyuCzYwxNjUl6dXCOKnUgsTR0jyKSXoc19idWLb/U5akXxF
 Q1LWUaBWB/SbR52inAE8nX2s1tdgFjKDHgebAOdbPApt8eTnI4pSL1YvehDQtqG1
 olz3L1PjlRhT2XCdtWIPrLioIxUiOacYGV7sMZHL2jsJS+mmf20BiUMsfusafL2r
 Q8LSVGCQRgWutbTZW2YmFtx0FybxYc8wRj/9d7nYMaOv+UeFbx6ffYrkZUqXlK4j
 TkVsFULVoEfgnu9GkWnd+kdJP8PwbDkrjk1JsXg55A0LCrfFcorbMQc8GCJ6ICpu
 mFqw5NQaxQZszP6W0dYWHWJTLENOVxjYyoMjmLuQIMudzHP4bGTXjJ/PCBebT5fR
 6XOPdqcWoOT5f8NloMFqzPQQeFQMY+DycYiz2tdYxH4AnvGsgdOLFiHHYxxIsOa1
 Bzxb4bWxF2m3hKiyY5am/5U6MAxLrBwsvLZVklyfxYSRlvnPldKVHohzHTZafPSo
 M7KU4R1e6wywwjg9Qtk4YJBX5w0jT3b9vbVQVNT47WzvLwXA/TY+Il6BIAVuzL57
 MJAosU9SDAf28XUVzcaXbsHm9l2gcnUS6kCVVWTEvmehkW1rR3o=
 =M11J
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.13-1'

Release linux (4.14.13-1).

- Drop ABI reference
- Drop/refresh patches as necessary
- linux-headers: Drop versioned dependency on linux-kbuild, as there has not
  been any version of linux-kbuild-4.15 without objtool
2018-01-15 04:35:41 +00:00
Ben Hutchings 13eb990095 Update to 4.15-rc8 2018-01-15 04:31:31 +00:00
Ben Hutchings 2ae3c9e4a7 Prepare to release linux (4.14.13-1). 2018-01-14 19:45:05 +00:00
Ben Hutchings d9fe539b06 Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for out-of-tree modules"
This removes the bogus check for libelf-dev.
2018-01-14 19:44:14 +00:00
Ben Hutchings 236bb1a25d linux-headers: Add versioned dependency on linux-kbuild 2018-01-14 19:41:44 +00:00
Salvatore Bonaccorso da2cd8b85c drm/nouveau/disp/gf119: add missing drive vfunc ptr
Closes: #880660
2018-01-13 11:54:57 +01:00
Ben Hutchings 30fe681bff abiupdate.py: Add support for security mirrors 2018-01-12 02:36:06 +00:00
Riku Voipio a8911b9351 [arm64] disable omap_rng temporarily
The drivers hangs machine with IRQ storm on MacchiatoBin with EFI
as firmware. Re-enable the module once the issue is fixed.
2018-01-11 11:46:38 +02:00
Salvatore Bonaccorso aac0e5380a Properly name patch according to subject
Gbp-Dch: Ignore
2018-01-10 22:46:07 +01:00
Salvatore Bonaccorso d42878a1e5 Disable asynchronous aborts for SATA devices 2018-01-10 13:23:46 +01:00
Salvatore Bonaccorso 9a41499923 Update to 4.14.13 2018-01-10 10:49:59 +01:00
Salvatore Bonaccorso 8996784cdc Release linux (4.14.12-2).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlpQhNxfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EKmgP/3D1CAm0F0v9d2AfQAPv8wVQIFpWqZGM
 D1jjtinIyCGJVM0jjXKne1nwQZotVTN/SDHeGTmJVvluLsF7MBCiGTBYMThqYD/I
 DCaOwGS9go8J771dR261c1D0nnnsqTvAJIMQDcVmRoVT/KRA/ZqdwJHygX8cZ2hb
 MmSWH5szCt4n55SkJDQi4nJ0dWkj5ZiKf4i6+o5+NrY2PJRTYlIthnCvHDuTsY+r
 Nade3ITAX82xRjFUmeM6JUc1xScLoXxvQhfuIRyIk2atQBCZEvTXvwC8cuyJWBo+
 TUdWqRdxEslqCTJ7/boH9nsWO4Hm+UiVHFwUbFR+xpPqgdDvkHAZII5tk9pzNSxU
 CWAWtKhRJxl8Ne452bCWtRi8TlvXNi4F7wbM9/AygT6dJoTidKYkAi+WcRco800G
 Yx5uuLfj88tBm4VFZJot9W1FKOtml0w+25I4uuua2lSwIS6/25+OZ1qMOkEXbE+v
 nIZHX2UTZYda8PNzZlMClfwiHYKKd+2LnGpdc0oEexwRxLtm/YFKHkavV396E7o1
 FzlogUJqsofgJOEYczBcjiuEW9EKXbeRCx/TPm/MVHz2Qn0hCWGWSnR5h/8T7KZ9
 GuOTk8+5c0puYK35+NC5M9/0XboP+hOEccuaJS4abu4tHok8jU72SX3KF+8j4dl8
 OxVql0ToPmdI
 =wQ4Q
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.12-2'

Release linux (4.14.12-2).
2018-01-06 14:30:49 +01:00
Salvatore Bonaccorso d41931f615 Prepare to release linux (4.14.12-2). 2018-01-06 09:08:42 +01:00
Salvatore Bonaccorso b2de3f8c6a linux-headers: Add symlink to linux-kbuild tools directory for objtool in architecture-specific headers package
Thanks: Luca Boccassi

Closes: #886366
2018-01-06 08:06:27 +01:00
Ben Hutchings f5177a853e linux-headers: Add symlink to linux-kbuild tools directory for objtool 2018-01-06 07:41:12 +01:00
Ben Hutchings 3c9fb40bbb linux-kbuild: Add objtool 2018-01-06 07:38:02 +01:00
Salvatore Bonaccorso 1c59cc6aec Prepare to release linux (4.14.12-1). 2018-01-05 21:20:26 +01:00
Salvatore Bonaccorso 9a96b9c27a x86/tlb: Drop the _GPL from the cpu_tlbstate export 2018-01-05 21:17:13 +01:00
Salvatore Bonaccorso 52909cebb8 Update to 4.14.12 2018-01-05 16:07:19 +01:00
Salvatore Bonaccorso b64a1989ae Revert "scsi: libsas: allow async aborts"
Fixes "Oops: NULL pointer dereference - RIP:
isci_task_abort_task+0x30/0x3e0 [isci]"

Closes: #882414
2018-01-05 14:23:11 +01:00
Salvatore Bonaccorso 96dad8ed7e Update to 4.14.11 2018-01-05 14:22:34 +01:00
Salvatore Bonaccorso 304afa4414 Update to 4.14.10 2018-01-05 14:21:05 +01:00
Salvatore Bonaccorso 572b685574 Bump ABI to 3 2018-01-05 14:21:01 +01:00
Salvatore Bonaccorso a7b364e44f Update to 4.14.9 2018-01-05 14:19:40 +01:00
Salvatore Bonaccorso f587f7242e [rt] Update to 4.14.8-rt9 2018-01-05 10:59:15 +01:00
Salvatore Bonaccorso f5474829b9 Update to 4.14.8 2018-01-05 10:59:15 +01:00
Vagrant Cascadian f65d850bba Backport patch from linux-next (next-20180103) to support SMP on
tegra210 systems.
2018-01-04 10:50:15 -08:00
Ben Hutchings 6c445bffa2 Clean up configuration using kconfigeditor2
Enable one replacement symbol and drop those that are really gone.
2017-12-30 16:20:49 +00:00
Ben Hutchings cb21ae6740 efi: Enable LOCK_DOWN_IN_EFI_SECURE_BOOT, replacing EFI_SECURE_BOOT_LOCK_DOWN 2017-12-30 16:20:25 +00:00
Ben Hutchings 20aa9b586e [arm64] Update "add kernel config option to lock down when in Secure Boot mode" for 4.15 2017-12-30 16:00:46 +00:00
Ben Hutchings 6a221d27b1 e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
Closes: #885348
2017-12-28 01:24:56 +00:00
Ben Hutchings 5635aaadec Prepare to release linux (4.15~rc5-1~exp1). 2017-12-27 02:48:15 +00:00
Ben Hutchings 55fce3fb69 Merge remote-tracking branch 'alioth/master' 2017-12-27 01:40:30 +00:00
Ben Hutchings 4932bdacf1 linux-kbuild: Add objtool 2017-12-27 01:38:04 +00:00
Ben Hutchings 7f35685e4b [rt] Disable until it is updated for 4.15 or later 2017-12-27 01:38:03 +00:00
Ben Hutchings e01624c730 cpupower: Move library to multiarch directory
Upstream moved it from /usr/lib to /usr/lib64 in 4.15, but neither of
these is correct.
2017-12-27 01:38:00 +00:00
Ben Hutchings 7bcd3c4d13 lockdown: Update calls to kernel_is_locked_down() in "mtd: Disable slram and phram when locked down"
We need to pass a string to be logged the first time the check fires.
2017-12-27 01:37:24 +00:00
Ben Hutchings 7dd9b58675 Update to 4.15-rc5
Also update the aufs and lockdown patchsets.
2017-12-26 18:54:17 +00:00
Ben Hutchings ab5d03cb3b Prepare to release linux (4.14.7-1). 2017-12-22 14:12:23 +00:00
Ben Hutchings 8423f81c55 Merge remote-tracking branch 'alioth/sid' into sid 2017-12-22 14:10:04 +00:00
Salvatore Bonaccorso 196596c560 crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) 2017-12-22 09:13:19 +01:00
Salvatore Bonaccorso 4f056ca2c6 crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) 2017-12-22 09:00:33 +01:00
Ben Hutchings adef82ee3a Bump ABI to 2 2017-12-22 03:54:44 +00:00
Ben Hutchings cf1f6e2019 bpf/verifier: Fix multiple security issues (Closes: #883558) 2017-12-22 03:54:44 +00:00
Salvatore Bonaccorso a983b69920 Add one more known CVE id
Gbp-Dch: Ignore
2017-12-21 06:07:46 +01:00
Salvatore Bonaccorso 2bc058f58c Add opening parenthesis
Gbp-Dch: Ignore
2017-12-20 20:41:06 +01:00
Ben Hutchings fc7f6fafd8 Add security fixes 2017-12-20 19:27:18 +00:00
Ben Hutchings 285e1090f2 [rt] Update to 4.14.6-rt7 2017-12-20 18:53:59 +00:00
Ben Hutchings 9e0441b20a Update to 4.14.7
Drop patches applied upstream, and fix a few conflicts.
2017-12-20 18:40:37 +00:00
Riku Voipio 67968436a4 [arm64] udeb: add mvebu comphy for armada 8K 2017-12-12 11:01:35 +02:00
Riku Voipio 11548f0aea [arm64] udeb: add multifunction devices 2017-12-12 11:00:38 +02:00
Vagrant Cascadian a865f2fdb7 [armhf, arm64] Backport patches from 4.15.x to support dwmac-sun8i. 2017-12-11 13:15:45 -08:00
Salvatore Bonaccorso 2f634be5d8 xen/time: do not decrease steal time after live migration on xen
Closes: #871608
2017-12-03 10:53:37 +01:00
Salvatore Bonaccorso 7e09c9fcc8 Add ABI reference for 4.14.0-1 2017-12-03 10:18:48 +01:00
Ben Hutchings 5b750f6268 Prepare to release linux (4.14.2-1). 2017-11-30 12:33:47 +00:00
Ben Hutchings 1bf82631fb Revert "SCSI: Enable SCSI_MQ_DEFAULT"
This reverts commit 16d7f29d46.  There
seem to be a lot of important fixes going into 4.15 for blk-mq, most
of which aren't tagged for stable, making it look a bit risky as a
default for 4.14.  I'll probably re-enable this for 4.15-rc.
2017-11-30 12:07:11 +00:00
Ben Hutchings 3f937de450 [x86] mmap: Add an exception to the stack gap for Hotspot JVM compatibility
Closes: #865303
2017-11-30 12:07:11 +00:00
Ben Hutchings a87b11684d Prepare to upload to unstable
Drop the ~exp1 from the version.

Set ABI to 1.
2017-11-30 12:06:47 +00:00
Salvatore Bonaccorso 71832be11b mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (CVE-2017-1000405) 2017-11-30 08:16:06 +01:00
Ben Hutchings fb72f17cab [rt] Update to 4.14.1-rt3 2017-11-29 23:05:39 +00:00
Ben Hutchings b0a4fbf1cd [rt] Add new signing subkey for Steven Rostedt 2017-11-29 22:11:04 +00:00
Ben Hutchings 16d7f29d46 SCSI: Enable SCSI_MQ_DEFAULT
Now that blk-mq has a similar default scheduler as the old block
layer, it should be safe to switch over.

Note how to revert this at run-time if necessary.
2017-11-29 22:11:04 +00:00
Salvatore Bonaccorso f6077f8f4f Add entry for CVE-2017-16994 2017-11-27 21:35:01 +01:00
Salvatore Bonaccorso f83f2a2082 Update to 4.14.2 2017-11-25 08:30:31 +01:00
Ben Hutchings 2ed7a163b9 leds: Enable LEDS_BRIGHTNESS_HW_CHANGED (Closes: #872862) 2017-11-24 17:20:44 +00:00
Ben Hutchings a633085eb6 apparmor: fix oops in audit_signal_cb hook (regression in 4.14) 2017-11-24 13:25:03 +00:00
Ben Hutchings b979dd72a4 [armel] Change configuration to reduce image size (fixes FTBFS)
- Change CONNECTOR from built-in to module, and disable PROC_EVENTS
- Disable INTEGRITY and dependent options
- video: Disable USB_APPLEDISPLAY, BACKLIGHT_CLASS_DEVICE

This still only gets us down to 99.26% of maximum size, so further
changes will be needed soon.
2017-11-23 01:00:43 +00:00
Ben Hutchings d769bf7e2b Update to 4.14.1 2017-11-22 03:13:35 +00:00
Ben Hutchings 5436f201dd aufs: Update support patchset to aufs4.14-20171120 2017-11-21 16:20:07 +00:00
Ben Hutchings bf3c5027e0 i40e: Build for 32-bit targets again
Apply the upstream patches that removed the use of cmpxchg64().
2017-11-21 16:14:37 +00:00
Ben Hutchings 1dffc3c5d6 [rt] Update to 4.14-rt1 and reenable (Closes: #882192) 2017-11-20 14:17:41 +00:00
Ben Hutchings 94964d2c86 Prepare to release linux (4.14-1~exp1). 2017-11-17 00:16:15 +00:00
Ben Hutchings 0876bb2edc Set ABI name to trunk 2017-11-17 00:16:12 +00:00
Ben Hutchings 1a1f0ef065 Release linux (4.13.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAloODhAACgkQ57/I7JWG
 EQkFAg//Zb5RqwypcEFRZs6Oyi4jF6EekQW+UVXjAE8gAw3ae8+1uvkg3TyMY7uT
 C//3H1DGY/A3imqHsxku9NG5T9KhJL9cKn2EDRz8c/+lU949wXjzSFCQk+p9mwcb
 RSyuqES+FwtrMJoN0iXpVIiTSjImuu4IIpTmc6IsZo1frn5oHKmeC4mvsKuflL/S
 usdauRUkQewtTvi/Z8wDA5fJIDN2ff0DcSN8Km/QPlB2zUoGaQRM36ApZVeHDX3X
 190bDAuBfJp9Pht3eFPUq6HwEht9hbiqSaSpMKB/jyPE8lWZ7AL8CM2qiOuZCXil
 ncELxkx+8Cqp4jAWc3wqGZ5mkeVHeHxZcmFv0b4hQaaifW5GtmlMo/XHhMeFIoCc
 tbcC55No2c3ZUhUH0kAQyf26zZ3f7hBAYT8EI5BNngPpZB4W7NJL8A2c09QYxAVB
 /uXNnCdd7LZ9Dnhgc0K1FjIEckd1XHVQgVZ6Seo4Pv2adMfLckla3Xvqj888515a
 akTL9LFAKySOqalakMl34G2FT1S0CR9+7I45KFcKjiGW5pF1RgDeLZy1W+nQq3Vd
 oH2KmWGovmouMEnrh8RgKJNwLkelVkLKl0AFhJ29PGeDrGAklz0Sy5egB8iqoxRh
 fiKph8IGdD8akqlI4d8mTWs01FmALkkSHUkLAxbME8HC3lpb7Ic=
 =TJmK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.13-1'

Release linux (4.13.13-1).
2017-11-16 22:18:14 +00:00
Ben Hutchings 8c84dc3d14 Prepare to release linux (4.13.13-1). 2017-11-16 21:04:10 +00:00
Ben Hutchings 617046eb45 netfilter: nat: Avoid ABI change in 4.13.13 2017-11-16 21:04:07 +00:00
Ben Hutchings 7cb3e39661 ALSA: timer: Avoid ABI change in 4.13.13 2017-11-16 20:52:13 +00:00
Ben Hutchings 4c3b3b1dec dvb_frontend: don't use-after-free the frontend struct (CVE-2017-16648)
Plus another fix it seems to depend on.
2017-11-16 20:04:01 +00:00
Ben Hutchings f03dc09259 [armhf] drm: Enable DRM_SUN4I etc. (Closes: #881570) 2017-11-16 19:59:53 +00:00
Riku Voipio 79e266334e [arm64] config fixup
drop CRYPTO_DEV_CAVIUM_ZIP due to crashes
add SERIAL_DEV_BUS, needed for HiKey bluetooth
2017-11-16 21:54:44 +02:00
Ben Hutchings 8aabb7ea89 amdgpu: Enable DRM_AMDGPU_SI, CONFIG_DRM_AMDGPU_CIK (Closes: #847570) 2017-11-16 19:17:33 +00:00
Ben Hutchings 26fe100dfe [x86] rmi4: Disable RMI4_SMB (Closes: #880471) 2017-11-16 19:12:16 +00:00
Ben Hutchings 3529916815 [arm64] nvmem: Enable NVMEM_SUNXI_SID as module (Closes: #881567) 2017-11-16 19:10:31 +00:00
Ben Hutchings a4d1de0350 [arm64,x86] net/wireless: Enable RTL8723BS as module (Closes: #881568) 2017-11-16 19:07:46 +00:00
Ben Hutchings e81177b8a9 amdgpu: Enable DRM_AMDGPU_USERPTR on all architectures
I missed this when enabling amdgpu on arm64.

Also move the explicit disabling of DRM_AMDGPU_CIK to the top level
config.
2017-11-16 18:44:33 +00:00
Ben Hutchings 2cc01f34ce [powerpc*/*64*] drm: Enable DRM_AMDGPU as module (Closes: #881593) 2017-11-16 18:42:09 +00:00
Ben Hutchings 9f5b9b8ff8 nftables: Enable NFT_RT, NFT_SET_BITMAP, NFT_OBJREF as modules (Closes: #881931) 2017-11-16 18:37:11 +00:00
Ben Hutchings 58e12683e1 net: qmi_wwan: fix divide by 0 on bad descriptors (CVE-2017-16650) 2017-11-16 18:13:46 +00:00
Ben Hutchings 91a7ba9320 net: cdc_ether: fix divide by 0 on bad descriptors (CVE-2017-16649) 2017-11-16 18:12:24 +00:00
Ben Hutchings 4ee0c56703 net: usb: asix: fill null-ptr-deref in asix_suspend (CVE-2017-16647) 2017-11-16 18:11:00 +00:00
Ben Hutchings ed4bdea861 media: dib0700: fix invalid dvb_detach argument (CVE-2017-16646) 2017-11-16 18:10:19 +00:00
Ben Hutchings c718be9d81 media: imon: Fix null-ptr-deref in imon_probe (CVE-2017-16537) 2017-11-16 18:04:43 +00:00
Ben Hutchings a06739ccd2 media: cx231xx-cards: fix NULL-deref on missing association descriptor (CVE-2017-16536) 2017-11-16 18:03:20 +00:00
Ben Hutchings c08c3b8b25 usb: usbtest: fix NULL pointer dereference (CVE-2017-16532) 2017-11-16 17:40:00 +00:00
Ben Hutchings 1549b29ea0 Add follow-up fixes relatd to CVE-2017-13080 2017-11-16 17:35:46 +00:00
Ben Hutchings f4e45ee455 Update to 4.13.13 2017-11-16 17:32:44 +00:00
Salvatore Bonaccorso 6ff07bd9a5 sctp: do not peel off an assoc from one netns to another one (CVE-2017-15115) 2017-11-16 15:22:47 +01:00
Salvatore Bonaccorso 5d9e74ced8 mac80211: accept key reinstall without changing anything (CVE-2017-13080) 2017-11-16 15:18:54 +01:00
Ben Hutchings d8d66235a8 Update to 4.14 2017-11-14 13:02:01 +00:00
Ben Hutchings a2708107ce swap: Avoid ABI change in 4.13.12 2017-11-12 01:09:18 +00:00
Ben Hutchings 86b8621ec9 [powerpc*] kvm: Ignore ABI change in 4.13.6 (fixes FTBFS) 2017-11-11 20:53:08 +00:00
Ben Hutchings fdf384b742 [powerpc*] Ignore kvm-related ABI changes (fixes FTBFS) 2017-11-11 20:50:42 +00:00
Salvatore Bonaccorso 95757c39a8 Update to 4.13.12 2017-11-11 09:29:31 +01:00
Riku Voipio ed497f3cb7 Add server and 96boards options
Generic server options NUMA, ACPI_NUMA, CRASH_DUMP, VFIO, *WATCHDOG

Servers specific options:

APM X-gene: NET_XGENE_V2
Cavium ThunderX: EDAC_THUNDERX, MMC_CAVIUM_THUNDER, CRYPTO_DEV_CAVIUM*
Cavium ThunderX 2: GPIO_XLP, I2C_XLP9XX, SPI_XLP
Hisilicon: DRM_HISI_HIBMC, SCSI_HISI_SAS_PCI
Marvell Armada 7k/8k/3700: CRYPTO_DEV_MARVELL_CESA, MARVELL_PHY,
        MARVELL_10G_PHY, PHY_MVEBU_CP110_COMPHY, RTC_DRV_MV,
        RTC_DRV_ARMADA38X, SPI_ARMADA_3700, ARMADA_THERMAL,
        NOP_USB_XCEIV, HW_RANDOM_OMAP, CRYPTO_DEV_SAFEXCE

96boards:

Hikey: PCIE_KIRIN, TEE, OPTEE, SND_I2S_HI6210_I2S, DRM_I2C_ADV7511_AUDIO
DragonBoard 410c: *QCOM*, CONFIG_CMA, USB changes

Signed-off-by: Riku Voipio <riku.voipio@linaro.org>
2017-11-09 15:44:47 +02:00
Salvatore Bonaccorso f13763371c Add CVE id reference for CVE-2017-16643
Gbp-Dch: Ignore
2017-11-08 10:45:20 +01:00
Salvatore Bonaccorso 4a745d05b1 Add CVE id for CVE-2017-15306
Gbp-Dch: Ignore
2017-11-06 13:04:31 +01:00
Bastian Blank 7522aac927 Enable CRYPTO_SHA3 2017-11-06 11:22:29 +01:00
Ben Hutchings bd1e10f8bd linux-image: Recommend apparmor (Closes: #880441)
The apparmor package is needed for loading profiles.  In theory,
enabling AppArmor without any profiles loaded should do nothing, so
this is not really a dependency of the kernel.  However, if a systemd
unit specifies a AppArmor profile and the kernel has AppArmor enabled
then failure to load the profile is fatal.

As the linux-image packages select AppArmor as the default LSM, they
should probably also be responsible for getting the necessary userland
support installed.  But since the default can be overridden, use
Recommends rather than Depends.
2017-11-05 01:54:12 +00:00
Salvatore Bonaccorso 43a5e411fd Add bug closer for #879768
Gbp-Dch: Ignore
2017-11-04 16:57:42 +01:00
Salvatore Bonaccorso e7fd57b49f netfilter: nft_set_hash: disable fast_ops for 2-len keys
Closes: #880145
2017-11-04 15:43:57 +01:00
Salvatore Bonaccorso 4b0df3bed7 cifs: check MaxPathNameComponentLength != 0 before using it
Thanks: Andrew Chadwick

Closes: #880504
2017-11-04 09:55:14 +01:00
Salvatore Bonaccorso 384fa91229 Update to 4.13.11 2017-11-04 09:06:37 +01:00
Ben Hutchings c8b3153d0d debian/control: Set Rules-Requires-Root to no
Tell dpkg and debhelper that we can install without (fake)root and
then dpkg-deb should then override all ownership to root:root.

Draft specification for this field:
https://lists.debian.org/debian-devel/2017/10/msg00520.html
2017-10-30 21:58:12 +00:00
Ben Hutchings 85565e1ae2 Prepare to release linux (4.14~rc7-1~exp1). 2017-10-30 18:31:38 +00:00
Ben Hutchings e59d862868 Release linux (4.13.10-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAln3apoACgkQ57/I7JWG
 EQllsQ//fyZFkoGOLpHjkS3sNtMxfh1J9+f+JJI33WF9vA/w7SnRfg/Rdbjx+rY8
 LRCnviTyh5tuxKSPKHerpUqjNbYi7Hcr0LXxxOPL1Rr+BTFKQuaSDYNzt10bT2mJ
 9B0ZYI+Q8n7rAq1/MeSKygV6zh+5MxywN8LZlqg0Au8/7/c7H0nR3MOEFz29imL0
 jBMOhy7a+Gby3Qs5ZdKGf0i4RZT9Y/9Ozu9sFpVGqrTyY+FlEd0y1KUvIipbdLTH
 S/oRFF1m4IeS7tF6AIprCPMIMPt8tcQrSLvB01REpbvSJvDg+laEgmHnb0PKlOpW
 RAeQn2r1NCEjjZcKll8dCMp+sTiLhx+us4L3Jumwb2Yno+219zuScFg2MR0zu5U/
 XCB5zG2U5XENH+fRdDnWROkXJ/o1Dtk+Ix1aPySa8I9IdlP45n+Q4LCLw3eg5h3I
 CdITwTJxWlnLJVI852wh1qorBuUs5lac9HZ8u0s5MDFXNQkWOVQKRPZN0sA3hwwp
 wjudMsGgq6kkoknnEcwTKV4JFWJdfJ0SieaWBv1LSQwAmVy3/QvOTvDBLzRxmtUX
 tygPktH53HLp4z6qPOcKD+hGLcdlD5oTWYb2O5MqVlSI8MjONOcjpRGAP2fhIf2t
 3INpM9sJPHILXqpEMH6co4VzxnQq1OElMjcA5nqD2A7HLOSDhZg=
 =x3uW
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.10-1'

Release linux (4.13.10-1).
2017-10-30 18:31:31 +00:00
Ben Hutchings 375e4b8147 Update to 4.14-rc7 2017-10-30 18:28:33 +00:00
Vagrant Cascadian 38106d0ef0 Enable SQUASHFS_LZ4 in default config. 2017-10-30 16:52:53 +01:00
Ben Hutchings ed0765f59c Prepare to release linux (4.13.10-1). 2017-10-30 15:32:11 +00:00
Ben Hutchings 9bf0fcf06e [armel,armhf] mbus: Ignore ABI change in 4.13.10 2017-10-30 15:32:03 +00:00
Ben Hutchings 1ea9c5efa8 snd-seq: Ignore ABI changes
Commit 8009d506a1dd "ALSA: seq: Enable 'use' locking in all
configurations" which was backported into 4.13.10 will result in an
ABI change for !SMP configurations.  Ignore this, as I don't expect
there to be any out-of-tree sequencer drivers.
2017-10-30 12:45:19 +00:00
Ben Hutchings 15c6a89208 Update to 4.13.10
Limit the ABI change in keys.
2017-10-29 12:13:18 +00:00
Ben Hutchings f1e87af382 [x86] rmi4: Enable RMI4_SMB as module (Closes: #875621) 2017-10-28 20:53:13 +01:00
Ben Hutchings ec3cd54d45 Avoid/ignore more ABI changes in 4.13.y 2017-10-28 20:50:11 +01:00
Salvatore Bonaccorso d2ca70712e Add CVE ids for some issues fixed with the 4.13.9 import 2017-10-27 16:26:15 +02:00
Ben Hutchings 43a809fe93 security: Enable DEFAULT_SECURITY_APPARMOR 2017-10-26 22:51:36 +02:00
Ben Hutchings 50f87144fd [armel] security: Enable SECURITY_APPARMOR and disable SECURITY_SELINUX 2017-10-26 22:50:16 +02:00
Ben Hutchings 48bb38a3f7 Update to 4.13.9
Drop many patches which are now upstream.

Avoid/ignore ABI changes as appropriate.
2017-10-26 22:41:11 +02:00
Uwe Kleine-König 28f20726e5 [arm64] add BRCMFMAC_SDIO for wifi on Raspberry Pi 3 2017-10-26 17:53:57 +02:00
Ben Hutchings ab40ca5985 [armel] udeb: Remove fbcon from fb-modules package
It can't be built as a module any more.
2017-10-20 17:29:46 +01:00
Ben Hutchings 548cef1805 [alpha] udeb: Remove empty fb-modules package (fixes FTBFS)
The module list for fb-modules included several optional modules that
seem to have never been built on alpha(!) and fbcon which is now
built-in.
2017-10-20 17:27:35 +01:00
Ben Hutchings 2629671100 debian/bin/gencontrol.py: Set encoding to UTF-8 globally
I just made this change for firmware-nonfree, for which I wrote:

    We open some, but not all, files with an explicit UTF-8 encoding.  One
    of the open calls that I missed has just caused gencontrol.py to fail
    instead a pbuilder environment.  Instead of continuing to set an
    explicit encoding for each open call, use locale.setlocale to set it
    globally.

I haven't hit such a problem here, but let's do it anyway.

Keep using explicit encodings in debian/lib for now, since we can't
assume all calling programs will set the locale.
2017-10-20 02:56:35 +01:00
Ben Hutchings 945bac5e39 [mips*] Increase RELOCATION_TABLE_SIZE to 0x00120000 (fixes FTBFS) 2017-10-20 00:21:19 +01:00
Ben Hutchings 0441e97048 Remove 'fixes FTBFS' for build dependency change
libbabeltrace-ctf-dev has been restored as a transitional package.
2017-10-19 23:31:08 +01:00
Ben Hutchings 92aff93068 linux-kbuild: Include scripts/ld-version.sh, needed for powerpc 64-bit modules 2017-10-19 23:08:34 +01:00
Ben Hutchings fcbe5c22b1 Update build dependencies on libbabeltrace[,-ctf}-dev (fixes FTBFS)
libbabeltrace-ctf-dev was merged into libbabeltrace-dev, so the
build dependencies are unsatisfiable in unstable.  For stretch-
backports we will still want both of them.  So add a suitably
versioned dependency on libbabeltrace-dev as a preferred
alternative to libbabeltrace-ctf-dev.
2017-10-19 11:35:53 +01:00
Ben Hutchings 242e06569c [arm64] brcmfmac: Enable BRCMFMAC_SDIO (Closes: #877911) 2017-10-18 20:03:37 +01:00
Ben Hutchings d2627c623c Prepare to release linux (4.14~rc5-1~exp1). 2017-10-17 23:37:52 +01:00
Ben Hutchings 5dfe04c507 Compile with gcc-7 on all architectures 2017-10-17 23:37:49 +01:00
Ben Hutchings 4206eefe13 Update to 4.14-rc5 2017-10-17 23:34:01 +01:00
Uwe Kleine-König 4925b9faa6 Add Closes tag for previous change 2017-10-17 11:33:49 +02:00
Uwe Kleine-König c89d220900 media: drop explicit setting of DVB_MAX_ADAPTERS to follow upstream default
Upstream bumped the default value from 8 to 16 for 4.10 in commit

	90866b3a8011 ("[media] Raise adapter number limit")

. Automatically follow the upstream default value by dropping the explicit
value of 8.
2017-10-17 10:12:29 +02:00
Ben Hutchings 0f7c85fca3 Merge https://github.com/glaubitz/linux-debian 2017-10-16 00:10:33 +01:00
Ben Hutchings 146583d59c Release linux (4.13.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlnjY8RfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89E05EP/2gI2pOyeOjGAzSiu/SRd5mHcLfRJkqE
 osob+C8dJsWQdgWLtO1SQkRYybBuBoujSVAo9X6pezI6OBmcKbJc8eAejWYVPtL8
 pSI7OomkTyx6AP7EKfe89kpgf4Qe8QOYrXukW050RcE78fCm3icznACeubY9ET9T
 s7+DAGWWkJpHO3rIErNxgJFMEibpKsIIcrUOIZrSsZwpQTlh7KV8tozIBiE8l135
 ocZKaGGqBQcTIWX7gVjcdpBNacxcFghRHodFCwrrv9wFvAg/s+0TN1YQXSucitQH
 Cp9iO4McDeQxDvcSQyBhQmlCxcL/+JxnfosJmabBvwn7L45dGm+pbsGviIG86tyM
 O7fNs82xdMxCFc9CIXKrE3hAk+mjXuMiUc7mha3/1+cS/Di444N5djXmvj8D84pu
 i/pp6D8zWNe/imid9sFH/txst3sgsSvlf77W3HXxZqJ5GOLzluApSX2eptpDRI1Q
 E/RU2R2T/NPTChroHsZr5QZ6iV/YS2F9E0YYAQcDuWNXS9Ey7nK+gjKqa7/5B6n1
 STtT0HMD0fcAfvWN1rk9mudm6ZNYgLpjYKtFsaFf/K4I5f4fIhvnCbnnFgKMA3Qx
 rcLh201dG1fGwQ2EpiD5S0pqn7iYEP2d9vHzo363l20FyfQ8jgGt7dNfceEuiCSs
 O+EKuTohhEJH
 =juOG
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.4-2'

Release linux (4.13.4-2).
2017-10-16 00:09:19 +01:00
Salvatore Bonaccorso 0c548c1642 Prepare to release linux (4.13.4-2). 2017-10-15 08:57:36 +02:00
Salvatore Bonaccorso ccefd718c8 [x86] KVM: MMU: always terminate page walks at level 1 (CVE-2017-12188) 2017-10-13 18:09:37 +02:00
Salvatore Bonaccorso 02033a7a17 [x86] KVM: nVMX: update last_nonleaf_level when initializing nested EPT (CVE-2017-12188) 2017-10-13 18:07:54 +02:00
Salvatore Bonaccorso 52c8b81bca ALSA: seq: Fix use-after-free at creating a port (CVE-2017-15265) 2017-10-13 06:52:33 +02:00
Ben Hutchings a5570462fc Update to 4.14-rc4 2017-10-13 01:44:29 +01:00
Salvatore Bonaccorso 35125947a2 waitid(): Add missing access_ok() checks (CVE-2017-5123) 2017-10-12 21:16:37 +02:00
Salvatore Bonaccorso 6f55d3e571 KEYS: prevent KEYCTL_READ on negative key (CVE-2017-12192) 2017-10-12 07:55:47 +02:00
Salvatore Bonaccorso 7c8172804e mac80211: fix deadlock in driver-managed RX BA session start
Thanks: Eric Côté
Closes: #878092
2017-10-11 21:23:02 +02:00
Salvatore Bonaccorso fba37066c7 [powerpc*] Fix illegal TM state in signal handler 2017-10-11 07:57:06 +02:00
Salvatore Bonaccorso 6c3a386d04 [powerpc*] Use emergency stack for kernel TM Bad Thing program (CVE-2017-1000255) 2017-10-11 07:55:16 +02:00
John Paul Adrian Glaubitz 9e3825c59d [m68k] Build uncompressed kernel image by default 2017-10-10 07:56:37 +02:00
Salvatore Bonaccorso c68c0840bc brcmfmac: add length check in brcmf_cfg80211_escan_handler() (CVE-2017-0786) 2017-10-09 21:45:15 +02:00
John Paul Adrian Glaubitz db9c353a75 [m68k] udeb: Add missing SCSI drivers to scsi-modules
a2091, a3000, a4000t, bvme6000_scsi, gvp11, mvme16x_scsi, zorro7xx
2017-10-08 11:51:05 +02:00
John Paul Adrian Glaubitz b518b0e170 [m68k] udeb: Move old IDE drivers from pata-modules to ide-modules
buddha, falconide, gayle, macide, q40ide
2017-10-08 11:51:01 +02:00
John Paul Adrian Glaubitz 772a2ae4ab [m68k] udeb: Build ide-modules package, include ide-gd_mod 2017-10-08 11:48:42 +02:00
John Paul Adrian Glaubitz 0907482fa5 [m68k] udeb: Build ide-core-modules package, include ide-core 2017-10-08 11:47:44 +02:00
John Paul Adrian Glaubitz 37091e1125 [m68k] udeb: Add ide-cd_mod to cdrom-core-modules 2017-10-08 11:47:06 +02:00
John Paul Adrian Glaubitz c8fd0bc828 [m68k] udeb: Build ata-modules package, include libata 2017-10-08 11:46:37 +02:00
Ben Hutchings 18b1b67002 [armhf,arm64] thermal: Enable BCM2835_THERMAL as module (Closes: #877699) 2017-10-04 23:16:23 +01:00
Ben Hutchings 4d6306b792 i40e: Build for 64-bit targets only (fixes FTBFS on hppa) 2017-10-04 03:50:08 +01:00
Ben Hutchings cc3ac57d1d [mips*] Increase RELOCATION_TABLE_SIZE to 0x00110000 for all flavours (fixes FTBFS)
The latest build failed on mips for the 4kc-malta flavour (which is the first):

  RELOCS vmlinux
Relocations overflow available space!
Please adjust CONFIG_RELOCATION_TABLE_SIZE to at least 0x0010f000

So do the same thing we did for the octeon flavour.
2017-10-04 02:35:11 +01:00
Ben Hutchings d12b3a11b2 net: Disable IRDA, which will soon be deleted upstream 2017-10-04 02:30:29 +01:00
Ben Hutchings 3ca820dff7 Update kconfig for 4.14
- [alpha] fbdev: Re-enable FRAMEBUFFER_CONSOLE as built-in
- [armel] fbdev: Explicitly disable FRAMEBUFFER_CONSOLE, as it can no longer
  be a module
- [arm64] Re-enable MMC_QCOM_DML
- Change RC_CORE back to being a module
- power/supply: Enable BATTERY_BQ27XXX and BATTERY_BQ27XXX_HDQ as modules,
  replacing W1_SLAVE_BQ27000

Clean up with kconfigeditor2 and delete obsolete symbols.
2017-10-04 02:02:35 +01:00
Ben Hutchings 96582850f8 Prepare to release linux (4.14~rc3-1~exp1). 2017-10-02 04:47:08 +01:00
Ben Hutchings 335613b4d6 Update to 4.14-rc3 2017-10-01 23:23:22 +01:00
Ben Hutchings 6c9c816966 Update to 4.14-rc2
aufs: Update support patchset to aufs4.x-rcN-20171002
2017-10-01 20:26:01 +01:00
Ben Hutchings 80832bbbef Prepare to release linux (4.13.4-1). 2017-10-01 15:52:19 +01:00
Ben Hutchings e92ee4b5df Set ABI to 1 2017-10-01 15:52:01 +01:00
Ben Hutchings 884aedc0b4 liblockdep: Define pr_cont() 2017-10-01 15:44:25 +01:00
Ben Hutchings 60879f2bae liblockdep: Make missing function declarations fatal errors
This should catch use of missing kernel APIs.  Which has happened yet
again.
2017-10-01 15:43:34 +01:00