Commit Graph

11916 Commits

Author SHA1 Message Date
Ben Hutchings 24fc851133 Prepare to release linux (4.9~rc8-1~exp1). 2016-12-05 05:02:30 +00:00
Ben Hutchings 41004b49b6 [sparc64] Don't re-add exports of string functions that are now only defined as macros
Together with fixes to DMA address types in 4.9-rc8, this should fix
the previous FTBFS.
2016-12-05 01:45:33 +00:00
Ben Hutchings 251382a142 [arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS) 2016-12-05 01:45:33 +00:00
Ben Hutchings b3906798a8 Revert "default exported asm symbols to zero" 2016-12-05 01:07:36 +00:00
Ben Hutchings 1c1ab88dbe Update to 4.9-rc8 2016-12-05 01:02:03 +00:00
Ben Hutchings cb8d2ff783 debian/control: Fix build-dependency on flex to work with new versions that have M-A: allowed 2016-12-05 00:59:45 +00:00
Uwe Kleine-König 086dccbdfe [armhf] dts: armada-385: add support for Turris Omnia 2016-12-04 21:18:15 +01:00
Ben Hutchings aa27137298 [amd64] Remove xen-linux-system-<version> package
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
Ben Hutchings 7e80c27706 radeon: Update package name in error message for missing firmware 2016-12-03 03:30:15 +00:00
Ben Hutchings 8b6cd20174 Prepare to release linux (4.9~rc7-1~exp1). 2016-12-03 01:46:12 +00:00
Ben Hutchings 34594185e1 Drop "default exported asm symbols to zero"
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
Ben Hutchings 2431e89ed3 Update fixes for exported symbol versions
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching.  Apply his match but then revert the weakening.

Also add a proposed fix for missing version CRCs, which gives them a
default value of zero.  Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
Ben Hutchings 8789780466 Release linux (4.8.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhBGM5fFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ei1oQAKBvUPEti/KYiLL+WpxR134LO8Pw2gGz
 XYFeF0lIkf++2ipAPU0hNrvnZZoi6sWJce+28R4/v1TgxhKYIU0Bx5Nutbcn8Bq0
 9d206ef/NR6K73zsBuf9gp3NdPWUdJ2068YUPfEHIiyKvuaf3i1H7fl8p0h9TSuD
 fHgpoCw0Qpbug0zxaFRB81mOa+rZdcY9vjAfm91lME/DRqX+9iUwgfOh21TAzHWm
 Y7hcYfP54748PnQNSQ46BypnUSekm2NEXEm73Hu4q8vHiTcFb1kl1VzvM6z/CzG4
 vdwLjNHEm5+xPUF2sCw+rWVkAgTfI3sb9cNAmoRsUqtN/e4/Ysyr5ld8cuauT/Dv
 0gm6cIGmBsMhIVod4Inl3ujfxg+LYDFU48up/g1qtF5HWgmwIwbXlK8xNd/tZslO
 i4oSvrDG0TIfyVvXPumlLAtjDSvB/VX8K/GemzWzqWfF3I2zhvJLzPnFqjwEsIIu
 dZIMSPLAGVSNXzah1ER9AsBlYZeEKFr6HU+58L8wus+Dpouf9BwQI6T4euFQBmML
 UuSr9vrVLNdUAHDVySQLnRkSEZviIro9qa2YJ36/exhPjKCHJl59s1AxNuwPHvuP
 odYatq+U3tULl4EmbBJNeKgudvVAzWZGK4Ezj70Tid3vXgCKQE3095HDOmIwGVF2
 6A74edXu4AOs
 =itOd
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.11-1'

Ignore ABI bump.

Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
Salvatore Bonaccorso 489dc40883 Prepare to release linux (4.8.11-1). 2016-12-02 06:35:22 +01:00
Ben Hutchings ab01013e14 [powerpc*] Fix more exported symbol versions 2016-12-02 02:49:08 +00:00
Ben Hutchings 2661eeaf78 debian/bin/buildcheck.py: Add check for symbols with version CRC of 0 2016-12-02 02:49:08 +00:00
Ben Hutchings aca57cd0d7 Fix patch header for "x86/kbuild: enable modversions for symbols exported from asm" 2016-12-02 02:49:08 +00:00
Ben Hutchings aa461be2cb Add patch reverting s390 asm symbol export changes, missed from previous commit 2016-12-02 02:49:08 +00:00
Ben Hutchings 54d0756a33 Fix exported symbol versions
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"

This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
Ben Hutchings 67d96bc121 Update to 4.9-rc7
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
Ben Hutchings eeb496a241 linux-headers-common: Make these packages architecture-independent
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
Ben Hutchings 48f370b3c2 debian_linux.gencontrol: Add support for arch-indep per-featureset packages 2016-12-01 19:49:59 +00:00
Salvatore Bonaccorso ceb75c4337 mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213) 2016-11-30 16:15:29 +01:00
Salvatore Bonaccorso b67bd212fa vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084) 2016-11-30 09:15:19 +01:00
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Martin Michlmayr 1a0657ea1a [arm64] Enable ARCH_MVEBU and related options
Enable ARCH_MVEBU for 64-bit ARM.  While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
Martin Michlmayr 04624dfa7e [arm64] Enable more QCOM options
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
Salvatore Bonaccorso f82ecfdc9e Update to 4.8.11 2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso b69731a96b Add CVE reference for CVE-2016-9555 2016-11-23 06:21:23 +01:00
Ben Hutchings fa9e148da4 Update to 4.9-rc6 2016-11-21 23:52:49 +00:00
Uwe Kleine-König 0971da3b71 [armhf,armel] fix CRC generation for modules 2016-11-19 17:06:08 +01:00
Ben Hutchings 85deb5386a [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) 2016-11-16 21:35:16 +00:00
Ben Hutchings 2d21aaf508 [arm64] Enable more drivers for X-Gene (Really closes: #840061) 2016-11-16 21:22:18 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso b7d167eabc Fix changelog entry for removal of ABI reference
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso 17805e05b4 Bump ABI to 2 and remove ABI reference for 4.8.0-2 2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings 6c0c9bcf78 Prepare to release linux (4.9~rc5-1~exp1). 2016-11-14 05:19:31 +00:00
Ben Hutchings 4764f3dc4e w1: Disable W1_MASTER_MATROX 2016-11-13 23:27:39 +00:00
Ben Hutchings abd19bbc53 Release linux (4.8.7-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJYKMjFAAoJEOe/yOyVhhEJOtIP/RIo9vUk0PusThnw4bYQTA8T
 x8UTEpGJ+tqWBRL+yv7Ff3A8qP2TRAvJW2xzqu1+4UwNYgCSTa8A20bJ6crGzN8X
 Y6J7nqWFuzWsB2SHsPvYI1m0Q9luNrQ+1vkohpH53u8FfJxuceHwP/tFj6ShMl8i
 bNUiftui2Sc82JUjUdiG2EpXlIJH+N3aO8+R5ER3qUqoiHxChrslSbh3Lg8T8Tcp
 ItwwLi6K9s3CjYCiDiZ54+BYYQRy+rmTRFpEmgac4v2+HqXrMKAR4D6EomqMl3r1
 wHQ/F/Tt1GMvYvJniKWJIJVeCzuZSBmaQrL+D7xkKVGrzMo7QGGW1xr3DzyV1alc
 Ugx4k2nDbPDGinrbkhJbuds02VDIl8vfrnUM1NCYZ2GrReD5jJPj6OcZvlXRbjZw
 gUL1j+3w1dCa71E2rufZK7DZnGw4MjR9Q0cAefbgWNzEFDNh3nXQEKpxleEMmT/C
 xXVR2cfUpOAr1J4vR++I7kAn9re9tw7UlX3JYqH8+ty6Lm+DxrzoGMxEd1bmxYm9
 yzIn4O8x6LK2B7NdHfRs1SJC4rWWy/3+2z+5SnFroGMem8ugDhB95Q3QFvQGe9Ga
 zw1T6+GlYF9oglzY87XcKY2oUQveL8A45pM2TF3HsgGbx7wziR2yymjWAk03w32Y
 uYbKvmpQsH/wNrOA8E8I
 =uDst
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.7-1'

Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings 9ab8cb710b [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y 2016-11-13 21:00:47 +00:00
Ben Hutchings b15e0cf459 Update to 4.9-rc5 2016-11-13 20:35:21 +00:00
Ben Hutchings 993ab494e5 [amd64] Explicitly enable VMAP_STACK 2016-11-13 20:04:32 +00:00
Ben Hutchings 343333fea3 Prepare to release linux (4.8.7-1). 2016-11-13 04:38:09 +00:00
Ben Hutchings 772d6648d5 debian/control: Build-Depend on a recent debhelper instead of dh-systemd 2016-11-13 04:38:06 +00:00
Ben Hutchings 15da3c4884 [arm64] Enable more drivers for X-Gene (Closes: #840061) 2016-11-13 04:28:46 +00:00
Ben Hutchings f8420f98bc Delete some garbage from the upstream shortlog for 4.8.7 2016-11-13 04:01:19 +00:00
Ben Hutchings d54fa44e4e liblockdep-dev: Depend on same version of liblockdep
I don't know if we'll ever build it again, but in case we do let's get
this right.
2016-11-13 04:00:45 +00:00
Ben Hutchings e1b8f7e7ad libcpupower-dev: Depend on libcpupower1 (Closes: #840852) 2016-11-13 04:00:45 +00:00
Ben Hutchings 943a798a07 IB: Enable INFINIBAND_RDMAVT as module
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes: #843792)
2016-11-13 04:00:45 +00:00
Ben Hutchings d442f1a220 Note some bug closures for 4.8.6 and 4.8.7 2016-11-13 04:00:45 +00:00
Ben Hutchings ab58b8b5ed [x86] ethernet: Enable ENA_ETHERNET as module 2016-11-13 03:34:00 +00:00
Ben Hutchings 0fc64e32b2 [armel] Drop versatile flavour, which has been broken since version 4.5~rc4-1~exp1 2016-11-13 03:30:03 +00:00
Ben Hutchings eeb90d2453 tcp: Enable TCP_CONG_BBR as module 2016-11-13 03:26:49 +00:00
Ben Hutchings 88d5cdd0e7 Update kconfig for 4.9
- Various ancient SCSI drivers were removed; delete config for them
- r8723au was replaced by rtl8xxxu; enable the latter instead and for
  all architectures
- netfilter config symbols were renamed; enable the new ones
- Various other config symbols are obsolete; delete them
- Various other config symbols moved to different Kconfig files
2016-11-13 03:23:23 +00:00
Ben Hutchings 50b2cacda1 Ignore ABI changes in Atheros wireless modules 2016-11-12 16:09:21 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Ben Hutchings 82c55764b5 kbuild: Update -fno-PIE patches to match upstream 2016-11-10 20:26:29 +00:00
Ben Hutchings aecf13fddd linux-perf: Exclude perf-read-vdso* from shared library dependency check
Fixes FTBFS on sparc64:

    dpkg-shlibdeps: error: no dependency information found for /usr/lib32/libc.so.6 (used by debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32)
    Hint: check if the library actually comes from a package.
    dh_shlibdeps: dpkg-shlibdeps -Tdebian/linux-perf-4.9.substvars debian/linux-perf-4.9/usr/bin/perf_4.9 debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_xen.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_hrtimer.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_jbd2.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_function.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_mac80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_sched_switch.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kvm.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_cfg80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_scsi.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kmem.so debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32 returned exit code 2
2016-11-07 23:42:33 +00:00
Ben Hutchings 11740f3768 [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS) 2016-11-07 23:37:37 +00:00
Salvatore Bonaccorso d99e060fe3 [x86] kvm: Check memopp before dereference (CVE-2016-8630) 2016-11-06 17:54:35 +01:00
Aurelien Jarno 83309d3e08 [arm64] Enable VIRTUALIZATION and KVM. 2016-11-05 23:24:14 +01:00
Aurelien Jarno 0f6628f57c Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230, IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40. 2016-11-05 23:18:39 +01:00
Ben Hutchings 790f2d1ab5 perf: Disable use of libcrypto (Closes: #843199) 2016-11-04 15:41:12 -06:00
Ben Hutchings 0384bbbffa Prepare to release linux (4.9~rc3-1~exp1). 2016-11-03 16:51:55 -06:00
Ben Hutchings 7aecddec04 [amd64] kbuild: Add -fno-PIE to scripts/gcc-x86_64-has-stack-protector.sh 2016-11-03 16:51:48 -06:00
Ben Hutchings 25e532ff97 debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)

(cherry picked from commit 8e552ff10c)
2016-11-03 16:14:59 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 18036575a7 HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules 2016-11-03 15:03:01 -06:00
Ben Hutchings e904868241 Clean up kconfig using kconfigeditor2 2016-11-03 15:02:01 -06:00
Ben Hutchings 6159bcf693 Revert "Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6""
This reverts commit 6f85def7ca.  It
should be OK to use gcc-6 now that we pass the -fno-PIE option where
necessary.
2016-11-03 13:33:44 -06:00
Ben Hutchings 586b6ef20b kbuild: add -fno-PIE (Closes: #841368) 2016-11-03 13:32:07 -06:00
Ben Hutchings c6318ee2ee Update to 4.9-rc3 2016-11-03 13:04:20 -06:00
Ben Hutchings 4975a766e7 [rt] Update to 4.8.6-rt5 2016-11-03 12:16:32 -06:00
Ben Hutchings 0acd08301d Update to 4.8.6 2016-11-03 12:08:20 -06:00
Ben Hutchings fc1f701c56 Add ABI reference for 4.8.0-1 2016-11-03 12:08:06 -06:00
Ben Hutchings 8e552ff10c debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)
2016-11-02 12:21:30 -06:00
Ben Hutchings c391b26e8f debian/rules.real: Update install-doc rule for change to Sphinx HTML output
I can't see when or why this changed, but the HTML (and related) files
are now being generated in Documentation/output and not an html
subdirectory of that.
2016-11-01 09:39:36 -06:00
Ben Hutchings 4ac6860c3b Update to 4.9-rc2
Drop/refresh patches as appropriate.
2016-11-01 09:39:31 -06:00
Ben Hutchings 4c9bb889ce Prepare to release linux (4.8.5-1). 2016-10-28 20:34:09 +01:00
Ben Hutchings 64e2286fbd Update to 4.8.5
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
Ben Hutchings a5f9f74d46 Set ABI to 1 and version to 4.8.4-1 2016-10-28 20:20:49 +01:00
Ben Hutchings e34c6c01c6 [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled (Closes: #835160) 2016-10-28 20:18:08 +01:00
Ben Hutchings 4456cb3bc3 [x86] Input: i8042 - skip selftest on ASUS laptops 2016-10-28 20:16:42 +01:00
Ben Hutchings d9f03c486b netfilter: xt_NFLOG: fix unexpected truncated packet (Closes: #841261) 2016-10-28 20:16:09 +01:00
Salvatore Bonaccorso f86bc88075 [x86] boot/smp: Don't try to poke disabled/non-existent APIC
Closes: #841850
2016-10-26 09:17:48 +02:00
Ben Hutchings 8d9687d592 kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig (Closes: #841357) 2016-10-24 02:34:51 +01:00
Ben Hutchings 20ade9991b [armhf] dts: imx53: add support for USB armory board (Closes: #840137) 2016-10-24 02:31:45 +01:00
Ben Hutchings 0fc6a741fc cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular 2016-10-24 02:28:32 +01:00
Ben Hutchings fdd49c2465 cpufreq: Delete redundant kconfig settings 2016-10-24 02:28:20 +01:00
Ben Hutchings 261ee0b56f Prepare to release linux (4.8.4-1~exp1). 2016-10-23 17:21:13 +01:00
Ben Hutchings a84c9d1a67 [rt] Drop fixes included in 4.8.4, again 2016-10-23 17:20:52 +01:00
Ben Hutchings 004996eaf0 [rt] Update to 4.8.2-rt2 2016-10-23 04:47:23 +01:00
Ben Hutchings 68bef0cc04 Release linux (4.7.8-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKPBAABCgB5BQJYB7RuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
 NTRDQjhGMzEzNDNDRjQ0EhxjYXJuaWxAZGViaWFuLm9yZwAKCRAFTLjzE0PPRKbv
 EACPw/ltBkYlQohcTxO+Jwg6Pj9J2UAcuQeDBsRLxOONLEcfChUtB6YbWnjpP4n7
 PBjFl1oXFlRL2AIp8yJJDNyLRApNHaIJ5Rw15OU0XBZi61iFkMhvZHtFUJI0VifU
 40otIo4/IAgWfYjcIl445m13bS21XzaYkT5hDmKihp1975gBP51LyVXtMPvYC2HO
 2grpj37HbDEhKfXSxPDG++ID20VrHOyKVNnfyzg9lOe0oNRT36j5i1QJtqQPekh1
 gWx98W/QqVpmeyRV1xvFjit2AzjwrIyp8H22wlN5IOG0HXitOrEA0AiQi1pjcMM0
 3O6wRmWTiOoiMiCQEQ+O+92U+uALTG0ssq/9rubAW70CieiQLKmQBZiSoY3JVDfl
 AojNP89QIx273w2aGQpZUY/RJnFWFy3fdh+c8wuLbTGkV3cCwXTd1VpNvi1EVKKK
 SjFytKI3AGLAihXiThbICSiynqsRKdh7ypWzoCF5OxdURk9/HXSOYpk0Ieuqze+R
 niLpETsVpfZCSHjjlG/7oaPAdGEqTm1BZ8a36HmzuByGftARwZ0XqaSUMsbOJC+n
 nZrljSt1migRNKcONPuAvVucOjtI6Bj52Azdq2KutQiKZt1Kie9jLSA32/VNT6u5
 xCRtMNQnatFCUqdJm5pI0pnUgdpL9nykbggY/g0uPBJfEg==
 =6RXa
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.8-1'
2016-10-23 04:43:12 +01:00
Ben Hutchings bc7a3c1c03 Update to 4.8.4
[rt] Drop fixes included in 4.8.4
2016-10-23 04:38:17 +01:00
Ben Hutchings 6f85def7ca Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6"
This reverts commits d7eadea702 and
5dbd80758c.  gcc-6 currently can't
compile the kernel on amd64 due to conflicts the way it enables PIE by
default.
2016-10-23 04:35:42 +01:00
Salvatore Bonaccorso 9586076613 Prepare to release linux (4.7.8-1). 2016-10-19 17:58:10 +02:00
Salvatore Bonaccorso c5c7172244 mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (CVE-2016-5195) 2016-10-19 17:56:02 +02:00
Salvatore Bonaccorso bcfd608039 Update to 4.7.8 2016-10-17 21:26:34 +02:00
Aurelien Jarno e7a457a218 [arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3. 2016-10-14 07:23:06 +02:00
Salvatore Bonaccorso 82d68fe753 KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042) 2016-10-13 22:50:12 +02:00
Ben Hutchings ae695bc66b scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425) 2016-10-13 00:24:49 +01:00
Ben Hutchings efccbd4eb2 posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097) 2016-10-13 00:23:11 +01:00
Ben Hutchings c27b72f255 net: add recursion limit to GRO (CVE-2016-7039) 2016-10-13 00:17:03 +01:00
Ben Hutchings 2456c48897 Update to 4.7.7
Ignore ABI change in CAN.
2016-10-11 23:18:44 +01:00
Ben Hutchings 49bfd9c5b2 aufs: Update support patchest to aufs4.8-20161010 (no functional change) 2016-10-11 20:02:43 +01:00
Ben Hutchings 387dbb7803 [rt] Update to 4.8-rt1 and re-enable 2016-10-11 19:58:48 +01:00
Aurelien Jarno b2080e6bd9 [mips*] Enable RELOCATABLE, required to enabled RANDOMIZE_BASE. 2016-10-10 20:53:23 +02:00
Ben Hutchings 5dbd80758c Properly update to gcc-6 2016-10-07 21:08:05 +01:00
Ben Hutchings d288d4c41c Update to 4.8.1 2016-10-07 21:04:31 +01:00
Ben Hutchings 6429254d8f Release linux (4.7.6-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX9/r9AAoJEOe/yOyVhhEJaFIQANHw/AYqMiP/0fnT8TRl1ISq
 1jK7KhHKs4h7O+f4r/D31FLUAC+YVhpAqw4aHCiTwg9fjVULLcxaX91AAtpdliGm
 NhWPT7/p8S6SiLTZtVxEb8MAzNqTnN4UdoBMdetWvHYSD/zq5U/BSWCTmm5pOu+X
 E6mzwHdkgzUF/Wnt3bmmSmU415BG4nW6xIroYfH3DDSoj1pkxSW9BUhIv2L5mY25
 emjFyXMqYRKJ93CBbCewNy0sLiL1V94P0r8HIdo2JDQg1QecYnYtV0AC/2kZODhm
 9l3OyB6Dp20y5ib+t6/+4WqvmXl6XrvvjZMtHXsyv44gC1j7e0ChrXbsYk//4Lpo
 FgQ8IYaNLskPEXyjzNHhwt61i0BIfZmKSJ17ldkgofAmt+Wa1926jFih5twFu5fj
 pMkkxlJUZU7QKxEtuhC7bSOzRzoXjb+xx21Zgenhc89GamagRAKncFbRlJ6K+4pS
 SMVlnXuLC0MHlUnAxZQ/N7hdhS235UxSFBp3qyOrYDWmjxyXkItyRfd7SKeSk3Vx
 ZikpGlvsvExvyzrjTdyLwBmlyj2I+XZxGxOT2pe4EYb1xxLXUTBAqU1Ycsd8XjC3
 lUqTn3r29PYeXRYC9eUsJryLJjejdkTIssM5Y9hhoi9KjMnLptRS7tJAeCO+C8QF
 Qyhb3De7DCWrkcl8YSJI
 =fl9b
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.6-1'
2016-10-07 21:04:15 +01:00
Ben Hutchings 8645d4069f bug script: Optionally use sudo to read a restricted kernel log
If kernel.dmesg_restrict is enabled (which it now will be by default)
and sudo is installed, ask whether to use sudo.  If this is denied or
fails then fall back to writing a placeholder in the bug report.
2016-10-07 03:11:08 +01:00
Ben Hutchings f3b836ba7c security,printk: Enable SECURITY_DMESG_RESTRICT
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
Ben Hutchings 298af9afcc Remove obsolete kconfig symbol GRKERNSEC=y 2016-10-07 02:57:38 +01:00
Ben Hutchings d7eadea702 Compile with gcc-6 on all architectures 2016-10-07 02:33:25 +01:00
Ben Hutchings b597bdebea [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
Closes: #838604, #838605
2016-10-07 02:30:49 +01:00
Ben Hutchings 4c6ac698fb Prepare to release linux (4.7.6-1). 2016-10-07 02:11:51 +01:00
Ben Hutchings ec2dc97fc9 mm: memcontrol: use special workqueue for creating per-memcg caches 2016-10-07 00:59:09 +01:00
Ben Hutchings 34bf1f9c3f [amd64] Enable RANDOMIZE_MEMORY 2016-10-05 22:38:43 +01:00
Ben Hutchings a16ba74627 grsecurity: Delete empty stub Kconfig and Makefile
Whatever features we get from Grsecurity in future are almost certain
to come via KSPP, so these aren't going to be useful.
2016-10-05 22:26:02 +01:00
Ben Hutchings 6573a2a7c7 security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
This hasn't been *accepted* upstream, but maybe some day?  It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings 0118390eaa [mips*] Enable RANDOMIZE_BASE 2016-10-05 21:13:04 +01:00
Ben Hutchings d77be8b789 Clean up kconfig using kconfigeditor2 2016-10-05 21:12:49 +01:00
Ben Hutchings a6562544cc Update to 4.8 2016-10-05 21:06:42 +01:00
Ben Hutchings 224b1e126d [armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module 2016-10-02 16:34:25 +01:00
Ben Hutchings 78f97bb258 Add of_mdio fixes to make device tree fixed-link definitions work properly 2016-10-02 16:26:16 +01:00
Ben Hutchings c418b49b09 Ignore ABI changes to private functions in 4.7.6 2016-10-02 16:23:50 +01:00
Ben Hutchings 5e04e30299 Add bug number for KiBi's installer fix 2016-10-02 02:50:12 +01:00
Ben Hutchings 0fadb11944 Update to 4.7.6 2016-10-02 02:46:17 +01:00
Ben Hutchings ac65dbd50d udeb: Move nls_utf8 from fat-modules to kernel-image
Many other filesystems need it but vfat no longer does.  It calls
built-in UTF-8 functions directly, while nominally using nls_ascii
as its I/O charset.
2016-10-02 02:19:16 +01:00
Ben Hutchings b324a81a22 udeb: Fold core-modules into kernel-image
So many module packages depend on core-modules already that almost
every installer image includes it.

The only obvious exceptions are the sh4 installer builds, as there
was no core-modules package on sh4.  For consistency, include the
default set of modules in its kernel-image package now.
2016-10-02 02:16:10 +01:00
Ben Hutchings 04774ae4fa udeb: Remove dependencies on nonexistent nls-core-modules packages
These dependencies are deleted by kernel-wedge automatically, but let's
not leave such misleading references around.
2016-10-02 01:51:06 +01:00
Cyril Brulebois b4bacd23c4 Add nls_ascii to the fat-modules udeb.
See commit 0e156c15e3 for the details
about utf8 vs. ascii iocharset for FAT. This fixes a regression with
EFI-related mounts within the Debian Installer.

Signed-off-by: Cyril Brulebois <kibi@debian.org>
2016-10-02 01:09:25 +01:00
Ben Hutchings f925c51d8a linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS on hppa) 2016-10-02 00:46:13 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 2aced7818a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
Ben Hutchings be7e4761f8 debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under dpkg-buildpackage
By default dpkg-architecture lets the current environment override the
architecture specified by the -a option.  We mustn't let that happen
here as we are considering all architectures.  Use the -f option to
force use of our specified architecture.
2016-09-26 22:31:21 +01:00
Ben Hutchings 1c213f98f9 Prepare to release linux (4.8~rc8-1~exp1). 2016-09-26 04:27:06 +01:00
Ben Hutchings 978f935022 Update to 4.8-rc8 2016-09-26 04:27:02 +01:00
Ben Hutchings b2480a3dfe Release linux (4.7.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX6HXOAAoJEOe/yOyVhhEJA68QAJSLxpMHBbl9474Q/SPonncf
 S7NXiYZQuo7STq0uHUVxtOTpVKRc/7y793tdtpI3Ec6nZqilS+4uKq1QNAh7kj6n
 JwilTLkfbjRS4+VqEEHJtVfK/bjijEep943W+uv3foMXPzbJulgRNrf54nUOFA2n
 WY1ZfL6Dp+tvys49UrK+3lsuY/ZCLzpck3m0rScGYgalfnZo00ttPto29YZjVXrp
 7RZset950hvEvL7cD7GXi2pqoEcvV3AISOABgKU0U6VitS1E8wJHW1pDZvHgZDKO
 55lAdyyEsAE96J1RzKwPjyHTKDmr1v6AiqNxwviLndwoLflYHUbsZBx0H9pRE0Gi
 45IDQELGFToJ/4dDNijk3oyOsQaV06f0gYv+FqGnN33IWxrlz9oQ3PSWB6qA9dr5
 vBGG1tzoYFdManBwZvH5smD25Ckc3TK2UzMqJA1BIjRpCoajxfmZWcgfPH8Z9gwJ
 5giCQkEKCbbwAXmRwVCYDFp5t0DlnyiY0/IizunHUxFapl9B6SNRFPhJVbUCNV07
 /yzsRU+TcNnV1oGQE9+uWTIelUQmc5cvMiaIlW7fifrqPAKCCnk2imYI1Tx1jsVl
 VqLo1Jalt+iZGKsEt6I3ST6LX1k/QFkz7BmJ4Yz+NdwwN6/Jq5rufFxLWGdIYPdI
 N4PnNBVMK0ooLqbaatRO
 =PYYu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.5-1'

Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00