086dccbdfe
[armhf] dts: armada-385: add support for Turris Omnia
2016-12-04 21:18:15 +01:00
aa27137298
[amd64] Remove xen-linux-system-<version> package
...
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
7e80c27706
radeon: Update package name in error message for missing firmware
2016-12-03 03:30:15 +00:00
8b6cd20174
Prepare to release linux (4.9~rc7-1~exp1).
2016-12-03 01:46:12 +00:00
34594185e1
Drop "default exported asm symbols to zero"
...
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
2431e89ed3
Update fixes for exported symbol versions
...
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching. Apply his match but then revert the weakening.
Also add a proposed fix for missing version CRCs, which gives them a
default value of zero. Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
8789780466
Release linux (4.8.11-1).
...
-----BEGIN PGP SIGNATURE-----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=itOd
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.11-1'
Ignore ABI bump.
Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
489dc40883
Prepare to release linux (4.8.11-1).
2016-12-02 06:35:22 +01:00
ab01013e14
[powerpc*] Fix more exported symbol versions
2016-12-02 02:49:08 +00:00
2661eeaf78
debian/bin/buildcheck.py: Add check for symbols with version CRC of 0
2016-12-02 02:49:08 +00:00
54d0756a33
Fix exported symbol versions
...
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"
This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
67d96bc121
Update to 4.9-rc7
...
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
eeb496a241
linux-headers-common: Make these packages architecture-independent
...
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
ceb75c4337
mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213)
2016-11-30 16:15:29 +01:00
b67bd212fa
vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084)
2016-11-30 09:15:19 +01:00
609f818472
mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
2016-11-30 09:04:11 +01:00
1a0657ea1a
[arm64] Enable ARCH_MVEBU and related options
...
Enable ARCH_MVEBU for 64-bit ARM. While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
04624dfa7e
[arm64] Enable more QCOM options
...
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
f82ecfdc9e
Update to 4.8.11
2016-11-29 20:30:13 +01:00
3536d5d7a6
Update to 4.8.10
2016-11-28 21:10:27 +01:00
a559c41683
Update to 4.8.9
2016-11-26 17:37:18 +01:00
b69731a96b
Add CVE reference for CVE-2016-9555
2016-11-23 06:21:23 +01:00
fa9e148da4
Update to 4.9-rc6
2016-11-21 23:52:49 +00:00
0971da3b71
[armhf,armel] fix CRC generation for modules
2016-11-19 17:06:08 +01:00
85deb5386a
[x86] video: Disable X86_SYSFB, FB_SIMPLE ( Closes : #822575 )
2016-11-16 21:35:16 +00:00
2d21aaf508
[arm64] Enable more drivers for X-Gene (Really closes : #840061 )
2016-11-16 21:22:18 +00:00
96f3d8b5c3
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" ( Closes : #844491 )
2016-11-16 21:18:15 +00:00
b7117071e0
fs: Avoid premature clearing of capabilities (CVE-2015-1350)
...
Closes : #770492
2016-11-16 19:23:06 +01:00
b048cc5a7c
fs: Give dentry to inode_change_ok() instead of inode
2016-11-16 19:20:21 +01:00
2e74b80287
fuse: Propagate dentry down to inode_change_ok()
2016-11-16 19:18:11 +01:00
055cd5a2d1
ceph: Propagate dentry down to inode_change_ok()
2016-11-16 19:14:26 +01:00
2683f37d06
xfs: Propagate dentry down to inode_change_ok()
2016-11-16 19:11:36 +01:00
b7d167eabc
Fix changelog entry for removal of ABI reference
...
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
17805e05b4
Bump ABI to 2 and remove ABI reference for 4.8.0-2
2016-11-16 18:51:15 +01:00
26676cdca0
Update to 4.8.8
2016-11-15 22:32:40 +01:00
6c0c9bcf78
Prepare to release linux (4.9~rc5-1~exp1).
2016-11-14 05:19:31 +00:00
4764f3dc4e
w1: Disable W1_MASTER_MATROX
2016-11-13 23:27:39 +00:00
abd19bbc53
Release linux (4.8.7-1).
...
-----BEGIN PGP SIGNATURE-----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=uDst
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.7-1'
Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
9ab8cb710b
[x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y
2016-11-13 21:00:47 +00:00
b15e0cf459
Update to 4.9-rc5
2016-11-13 20:35:21 +00:00
343333fea3
Prepare to release linux (4.8.7-1).
2016-11-13 04:38:09 +00:00
772d6648d5
debian/control: Build-Depend on a recent debhelper instead of dh-systemd
2016-11-13 04:38:06 +00:00
15da3c4884
[arm64] Enable more drivers for X-Gene ( Closes : #840061 )
2016-11-13 04:28:46 +00:00
f8420f98bc
Delete some garbage from the upstream shortlog for 4.8.7
2016-11-13 04:01:19 +00:00
e1b8f7e7ad
libcpupower-dev: Depend on libcpupower1 (Closes: #840852 )
2016-11-13 04:00:45 +00:00
943a798a07
IB: Enable INFINIBAND_RDMAVT as module
...
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes : #843792 )
2016-11-13 04:00:45 +00:00
d442f1a220
Note some bug closures for 4.8.6 and 4.8.7
2016-11-13 04:00:45 +00:00
ab58b8b5ed
[x86] ethernet: Enable ENA_ETHERNET as module
2016-11-13 03:34:00 +00:00
0fc64e32b2
[armel] Drop versatile flavour, which has been broken since version 4.5~rc4-1~exp1
2016-11-13 03:30:03 +00:00
eeb90d2453
tcp: Enable TCP_CONG_BBR as module
2016-11-13 03:26:49 +00:00
88d5cdd0e7
Update kconfig for 4.9
...
- Various ancient SCSI drivers were removed; delete config for them
- r8723au was replaced by rtl8xxxu; enable the latter instead and for
all architectures
- netfilter config symbols were renamed; enable the new ones
- Various other config symbols are obsolete; delete them
- Various other config symbols moved to different Kconfig files
2016-11-13 03:23:23 +00:00
e8880932f8
Update to 4.8.7
2016-11-11 20:00:01 +01:00
82c55764b5
kbuild: Update -fno-PIE patches to match upstream
2016-11-10 20:26:29 +00:00
aecf13fddd
linux-perf: Exclude perf-read-vdso* from shared library dependency check
...
Fixes FTBFS on sparc64:
dpkg-shlibdeps: error: no dependency information found for /usr/lib32/libc.so.6 (used by debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32)
Hint: check if the library actually comes from a package.
dh_shlibdeps: dpkg-shlibdeps -Tdebian/linux-perf-4.9.substvars debian/linux-perf-4.9/usr/bin/perf_4.9 debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_xen.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_hrtimer.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_jbd2.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_function.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_mac80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_sched_switch.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kvm.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_cfg80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_scsi.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kmem.so debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32 returned exit code 2
2016-11-07 23:42:33 +00:00
11740f3768
[hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS)
2016-11-07 23:37:37 +00:00
d99e060fe3
[x86] kvm: Check memopp before dereference (CVE-2016-8630)
2016-11-06 17:54:35 +01:00
83309d3e08
[arm64] Enable VIRTUALIZATION and KVM.
2016-11-05 23:24:14 +01:00
0f6628f57c
Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230, IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40.
2016-11-05 23:18:39 +01:00
790f2d1ab5
perf: Disable use of libcrypto ( Closes : #843199 )
2016-11-04 15:41:12 -06:00
0384bbbffa
Prepare to release linux (4.9~rc3-1~exp1).
2016-11-03 16:51:55 -06:00
25e532ff97
debian/control: Fix build-dependency on openssl to work with new versions...
...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native. Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes : #839145 )
(cherry picked from commit 8e552ff10c
2016-11-03 16:14:59 -06:00
d882885835
cpupower: Fix checks for CPU existence ( Closes : #843071 )
2016-11-03 16:11:35 -06:00
18036575a7
HID: Enable HID_ALPS, HID_ASUS ( Closes : #843085 ), HID_CMEDIA as modules
2016-11-03 15:03:01 -06:00
6159bcf693
Revert "Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6""
...
This reverts commit 6f85def7ca
2016-11-03 13:33:44 -06:00
586b6ef20b
kbuild: add -fno-PIE ( Closes : #841368 )
2016-11-03 13:32:07 -06:00
c6318ee2ee
Update to 4.9-rc3
2016-11-03 13:04:20 -06:00
4975a766e7
[rt] Update to 4.8.6-rt5
2016-11-03 12:16:32 -06:00
0acd08301d
Update to 4.8.6
2016-11-03 12:08:20 -06:00
8e552ff10c
debian/control: Fix build-dependency on openssl to work with new versions...
...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native. Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes : #839145 )
2016-11-02 12:21:30 -06:00
4ac6860c3b
Update to 4.9-rc2
...
Drop/refresh patches as appropriate.
2016-11-01 09:39:31 -06:00
4c9bb889ce
Prepare to release linux (4.8.5-1).
2016-10-28 20:34:09 +01:00
64e2286fbd
Update to 4.8.5
...
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
a5f9f74d46
Set ABI to 1 and version to 4.8.4-1
2016-10-28 20:20:49 +01:00
e34c6c01c6
[x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled ( Closes : #835160 )
2016-10-28 20:18:08 +01:00
4456cb3bc3
[x86] Input: i8042 - skip selftest on ASUS laptops
2016-10-28 20:16:42 +01:00
d9f03c486b
netfilter: xt_NFLOG: fix unexpected truncated packet ( Closes : #841261 )
2016-10-28 20:16:09 +01:00
f86bc88075
[x86] boot/smp: Don't try to poke disabled/non-existent APIC
...
Closes : #841850
2016-10-26 09:17:48 +02:00
8d9687d592
kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig ( Closes : #841357 )
2016-10-24 02:34:51 +01:00
20ade9991b
[armhf] dts: imx53: add support for USB armory board ( Closes : #840137 )
2016-10-24 02:31:45 +01:00
0fc6a741fc
cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular
2016-10-24 02:28:32 +01:00
261ee0b56f
Prepare to release linux (4.8.4-1~exp1).
2016-10-23 17:21:13 +01:00
004996eaf0
[rt] Update to 4.8.2-rt2
2016-10-23 04:47:23 +01:00
68bef0cc04
Release linux (4.7.8-1).
...
-----BEGIN PGP SIGNATURE-----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=6RXa
-----END PGP SIGNATURE-----
Merge tag 'debian/4.7.8-1'
2016-10-23 04:43:12 +01:00
bc7a3c1c03
Update to 4.8.4
...
[rt] Drop fixes included in 4.8.4
2016-10-23 04:38:17 +01:00
6f85def7ca
Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6"
...
This reverts commits d7eadea7025dbd80758c
2016-10-23 04:35:42 +01:00
9586076613
Prepare to release linux (4.7.8-1).
2016-10-19 17:58:10 +02:00
c5c7172244
mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (CVE-2016-5195)
2016-10-19 17:56:02 +02:00
bcfd608039
Update to 4.7.8
2016-10-17 21:26:34 +02:00
e7a457a218
[arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3.
2016-10-14 07:23:06 +02:00
82d68fe753
KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042)
2016-10-13 22:50:12 +02:00
ae695bc66b
scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425)
2016-10-13 00:24:49 +01:00
efccbd4eb2
posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097)
2016-10-13 00:23:11 +01:00
c27b72f255
net: add recursion limit to GRO (CVE-2016-7039)
2016-10-13 00:17:03 +01:00
2456c48897
Update to 4.7.7
...
Ignore ABI change in CAN.
2016-10-11 23:18:44 +01:00
49bfd9c5b2
aufs: Update support patchest to aufs4.8-20161010 (no functional change)
2016-10-11 20:02:43 +01:00
387dbb7803
[rt] Update to 4.8-rt1 and re-enable
2016-10-11 19:58:48 +01:00
b2080e6bd9
[mips*] Enable RELOCATABLE, required to enabled RANDOMIZE_BASE.
2016-10-10 20:53:23 +02:00
d288d4c41c
Update to 4.8.1
2016-10-07 21:04:31 +01:00
6429254d8f
Release linux (4.7.6-1).
...
-----BEGIN PGP SIGNATURE-----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=fl9b
-----END PGP SIGNATURE-----
Merge tag 'debian/4.7.6-1'
2016-10-07 21:04:15 +01:00
8645d4069f
bug script: Optionally use sudo to read a restricted kernel log
...
If kernel.dmesg_restrict is enabled (which it now will be by default)
and sudo is installed, ask whether to use sudo. If this is denied or
fails then fall back to writing a placeholder in the bug report.
2016-10-07 03:11:08 +01:00
f3b836ba7c
security,printk: Enable SECURITY_DMESG_RESTRICT
...
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
d7eadea702
Compile with gcc-6 on all architectures
2016-10-07 02:33:25 +01:00
b597bdebea
[powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
...
Closes : #838604 , #838605
2016-10-07 02:30:49 +01:00
4c6ac698fb
Prepare to release linux (4.7.6-1).
2016-10-07 02:11:51 +01:00
ec2dc97fc9
mm: memcontrol: use special workqueue for creating per-memcg caches
2016-10-07 00:59:09 +01:00
34bf1f9c3f
[amd64] Enable RANDOMIZE_MEMORY
2016-10-05 22:38:43 +01:00
6573a2a7c7
security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
...
This hasn't been *accepted* upstream, but maybe some day? It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
357c2335a5
[arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
...
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
5ef50c5719
Enable SLAB_FREELIST_RANDOM
2016-10-05 22:01:38 +01:00
0118390eaa
[mips*] Enable RANDOMIZE_BASE
2016-10-05 21:13:04 +01:00
a6562544cc
Update to 4.8
2016-10-05 21:06:42 +01:00
224b1e126d
[armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module
2016-10-02 16:34:25 +01:00
78f97bb258
Add of_mdio fixes to make device tree fixed-link definitions work properly
2016-10-02 16:26:16 +01:00
5e04e30299
Add bug number for KiBi's installer fix
2016-10-02 02:50:12 +01:00
0fadb11944
Update to 4.7.6
2016-10-02 02:46:17 +01:00
ac65dbd50d
udeb: Move nls_utf8 from fat-modules to kernel-image
...
Many other filesystems need it but vfat no longer does. It calls
built-in UTF-8 functions directly, while nominally using nls_ascii
as its I/O charset.
2016-10-02 02:19:16 +01:00
b324a81a22
udeb: Fold core-modules into kernel-image
...
So many module packages depend on core-modules already that almost
every installer image includes it.
The only obvious exceptions are the sh4 installer builds, as there
was no core-modules package on sh4. For consistency, include the
default set of modules in its kernel-image package now.
2016-10-02 02:16:10 +01:00
b4bacd23c4
Add nls_ascii to the fat-modules udeb.
...
See commit 0e156c15e3
2016-10-02 01:09:25 +01:00
f925c51d8a
linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS on hppa)
2016-10-02 00:46:13 +01:00
ef7e196951
[arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
...
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed
Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
8e160e8d48
[arm*] Enable STRICT_DEVMEM
...
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
2aced7818a
[amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
...
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
be7e4761f8
debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under dpkg-buildpackage
...
By default dpkg-architecture lets the current environment override the
architecture specified by the -a option. We mustn't let that happen
here as we are considering all architectures. Use the -f option to
force use of our specified architecture.
2016-09-26 22:31:21 +01:00
1c213f98f9
Prepare to release linux (4.8~rc8-1~exp1).
2016-09-26 04:27:06 +01:00
978f935022
Update to 4.8-rc8
2016-09-26 04:27:02 +01:00
b2480a3dfe
Release linux (4.7.5-1).
...
-----BEGIN PGP SIGNATURE-----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=PYYu
-----END PGP SIGNATURE-----
Merge tag 'debian/4.7.5-1'
Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00
f7d84f7a69
Prepare to release linux (4.7.5-1).
2016-09-26 01:48:21 +01:00
7a0f81fe53
ext4: Fix checksum validation for inodes with small i_extra_isize
...
Closes : #838544 , regression in 4.7.4
2016-09-25 22:00:56 +01:00
bdec0fe8f0
Update to 4.7.5
2016-09-25 03:05:35 +01:00
c0b958cd5f
[powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
...
Currently on powerpc, powerpcspe and ppc64 we get an automatic dbgsym
package with symbols for the bootwrapper tools (addnote, hack-coff,
mktree). We should either put them in linux-image-*-dbgsym or
nowhere. For now, opt for nowhere.
Move the dh_strip invocation from the install-base rule to the
install-image_... rule. None of the other packages using install-base
should contain any executables.
2016-09-23 03:21:18 +01:00
24358fda8e
[hppa] tracing: Re-enable FTRACE
2016-09-23 00:53:08 +01:00
9067a5df84
[hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux (really closes : #837588 )
2016-09-23 00:51:50 +01:00
656e46ab02
Update to 4.8-rc7
2016-09-22 03:25:31 +01:00
04355bf580
[armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
...
Originally done in 4.7.4-1 then reverted due to ABI breakage.
2016-09-22 01:19:37 +01:00
b37c595561
Release linux (4.7.4-2).
...
-----BEGIN PGP SIGNATURE-----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=s0s4
-----END PGP SIGNATURE-----
Merge tag 'debian/4.7.4-2'
- Drop ABI references and ABI maintenance patches
- Fix Kconfig symbols for omapdss sub-drivers, which were renamed for 4.8
2016-09-22 01:17:51 +01:00
95d8991d55
Prepare to release linux (4.7.4-2).
2016-09-19 22:09:42 +01:00
7c621c6961
[hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS)
2016-09-19 19:56:18 +01:00
04accecc7b
[armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI change (fixes FTBFS)
2016-09-19 18:28:33 +01:00
5a8adae35b
[arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO" (fixes FTBFS)
2016-09-19 18:10:01 +01:00
aaa85335e1
Prepare to release linux (4.7.4-1).
2016-09-18 14:56:02 +01:00
35221d0e23
bug script: Stop describing TAINT_UNSIGNED_MODULE as expected
2016-09-18 14:46:25 +01:00
b8c6a37dd9
Wrap a long line in changelog
2016-09-17 00:24:47 +01:00
25ac8ad209
[armhf] Enable drivers and options for OpenPandora console
...
POWER_AVS_OMAP as built-in; DISPLAY_CONNECTOR_ANALOG_TV,
DISPLAY_PANEL_TPO_TD043MTEA1, SENSORS_TWL4030_MADC, VIDEO_OMAP3,
BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA, HDQ_MASTER_OMAP as modules;
OMAP2_DSS_DSI
Closes : #835893 , thanks to Vagrant Cascadian
2016-09-17 00:22:55 +01:00
ec2a255f35
[armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1)
...
B53, B53_MDIO_DRIVER as modules
Closes : #836231 , thanks to Vagrant Cascadian
2016-09-17 00:12:49 +01:00
96e33a9436
[armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy)
...
MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules
Closes : #836251 , thanks to Vagrant Cascadian
2016-09-17 00:06:43 +01:00
550ac5c6dc
linux-image: postrm: Make failure of rmdir on purge non-fatal ( Closes : #836282 )
2016-09-16 23:49:36 +01:00
fca831a4d1
[armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in nic-modules
...
Closes : #837110 , thanks to Vagrant Cascadian
2016-09-16 23:29:04 +01:00
45fbf5a22f
[armhf] Enable drivers for Novena
...
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules
Closes : #837627 , thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
2d327101d1
[arm64] mm: Limit TASK_SIZE_64 for compatibility
2016-09-16 16:40:35 +01:00
888d6ec092
linux-doc: Exclude Sphinx support code and Makefiles
2016-09-16 16:40:35 +01:00
51f0aa4b84
linux-headers: Stop including unused arch/*/kernel/asm-offsets.s files
2016-09-16 16:40:35 +01:00
725eaac2b5
Set -fdebug-prefix-map=... in compiler options for kernel and userland
...
For userland we already got this through dpkg-buildflags, but it uses
the current directory rather than the source package's top directory
as the default 'old' path. Set DEB_BUILD_PATH to fix this.
2016-09-16 16:40:35 +01:00
ab1ec6c094
linux-source: Exclude Python bytecode generated when running Sphinx
2016-09-16 16:40:32 +01:00
ec5c662dbf
Add Héctor's recent changes to the changelog
2016-09-16 16:40:07 +01:00
5e2573002f
Update to 4.7.4
2016-09-15 20:27:23 +01:00
900cf04cac
xen-linux-system: Relax dependency on linux-image to allow for version suffix added by linux-signed
...
I don't know what the suffix is going to be next time we need to add
it, but it will sort lower than the '+deb' suffix added for stable
security updates.
2016-09-15 17:06:43 +01:00
22a9e16882
liblockdep-dev: Add dependency on liblockdep<version> ( Closes : #837710 )
2016-09-13 20:33:06 +01:00
ab1157972f
[powerpcspe] xmon: Don't use ld on 32-bit ( Closes : #836741 )
2016-09-12 20:38:54 +01:00
1dda9dd218
[hppa] Disable FTRACE due to huge size cost ( Closes : #837588 )
2016-09-12 20:28:04 +01:00
09db94d1de
[arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs
2016-09-10 01:20:05 +01:00
63e9d321c9
mm, oom: prevent premature OOM killer invocation for high order request
...
Fixes a regression in 4.7 and someone already asked for this.
2016-09-09 20:49:48 +01:00
5f7e2d6a98
i8042: Revert ABI break in 4.7.3
2016-09-09 02:26:58 +01:00
db336de154
[amd64] Enable SIGNED_PE_FILE_VERIFICATION, KEXEC_FILE, KEXEC_VERIFY_SIG, KEXEC_BZIMAGE_VERIFY_SIG
2016-09-07 22:09:23 +01:00
7dd9d01ac5
Update to 4.7.3
2016-09-07 22:07:27 +01:00
1ee2ca9d30
Prepare to release linux (4.8~rc5-1~exp1).
2016-09-07 21:52:47 +01:00
0e5f2ca52a
Enable BH1780 as module instead of SENSORS_BH1780
2016-09-07 21:33:23 +01:00
bb9f2e4f50
Fix list item markers in changelog
2016-09-07 21:32:50 +01:00
95a7eda177
Update to 4.8-rc5
2016-09-07 21:27:44 +01:00
7a4881e4d1
linux-doc: Build and install HTML pages from reStructuredText sources
...
- Add python-sphinx and python-sphinx-rtd-theme to Build-Depends-Indep
- Install files from both HTML output directories into the package
- Exclude RST sources from the package
2016-09-04 15:39:34 +01:00
87d08943da
liblockdep: Stop trying to build packages, as it failed to build again
2016-09-04 03:46:54 +01:00
a0fdc8e585
[arm64] Add cpu_to_fdt32() when setting Secure Boot flag in FDT
2016-09-03 18:35:05 +01:00
8dccb841ee
Update to 4.8-rc4
2016-09-03 13:00:10 +01:00
267130493a
[arm64] Enable Hisilicon Ethernet devices
2016-08-29 21:25:22 -07:00
ec43be6f74
[arm64] Enable TI WLAN (WLAN_VENDOR_TI)
2016-08-29 21:22:16 -07:00
96bde36948
[arm64] Enable more HISI options
2016-08-29 21:20:48 -07:00
5532e797b2
[arm64] Enable USB_DWC2 and USB_DWC3
2016-08-28 14:43:45 -07:00
9f32d6a1dd
[arm64] Enable support for BCM2837 (Raspberry Pi 3)
2016-08-28 14:43:40 -07:00
cce3a89e12
Update config for 4.8
2016-08-28 21:51:18 +01:00
65105d535d
[arm64] Enable more QCOM options
...
Enable MSM_GCC_8996, MSM_MMCC_8996, QCOM_HIDMA, QCOM_HIDMA_MGMT,
PCIE_QCOM, PINCTRL_MSM8996, QCOM_Q6V5_PIL.
2016-08-28 12:30:40 -07:00
43a9c9242b
[arm64] Enable more Tegra options: TEGRA_ACONNECT
2016-08-28 12:28:17 -07:00
1222968771
Update to 4.8-rc3
2016-08-28 19:52:50 +01:00
75b51a8352
Prepare to release linux (4.7.2-1).
2016-08-28 15:56:10 +01:00
d66fc07342
debian/rules.real: Avoid error message when usbip's config.h doesn't exist
...
usbip has its own version number which we combine with the source
package version, which is assigned to VERSION for the install-usbip
target (only). We find the version number by processing the config.h
file created by autoconf. The file always exists before the
install-usbip rule is invoked, but the target-specific definition of
VERSION is still evaluated whenever debian/rules.real is used,
resulting in confusing (though harmless) error messages about a
missing file.
We could change VERSION to be a recursively-expanded variable, but
then it would still be evaulated multiple times. Instead, move the
definition of VERSION into the target's commands.
2016-08-28 15:42:31 +01:00
47ba702e2c
liblockdep: Move dummy definition of prandom_u32() to fix missing declaration
2016-08-28 15:03:02 +01:00
68902cad17
Change RXKAD and SERIAL_8250_FINTEK from =m to =y
...
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
2c76695c24
aacraid: Check size values after double-fetch from user (CVE-2016-6480)
2016-08-27 23:17:17 +01:00
0db6147b7d
tcp: fix use after free in tcp_xmit_retransmit_queue() (CVE-2016-6828)
2016-08-27 23:14:24 +01:00
0a8dfe2ccc
[arm64] Add support for securelevel and Secure Boot
...
Closes : #831827 , thanks to Linn Crosetto
2016-08-27 22:17:30 +01:00
0e156c15e3
fat: Mitigate the lack of UTF-8 case folding
...
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names). And it has to do case
folding in multiple encodings. Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238 .
The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding. Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.
Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
6ab7944873
kbuild: Do not export variable name with hyphen ( Closes : #833561 )
2016-08-26 01:43:33 +01:00
c464b2eb4b
[powerpc*] ipmi: Enable IPMI_POWERNV as module ( Closes : #833861 )
2016-08-26 00:16:54 +01:00
5c0b3b2b37
aufs: Update support patches to aufs4.7-20160822 ( Closes : #834764 )
2016-08-26 00:06:54 +01:00
fe9ef5846d
Add bug closure for last commit
2016-08-25 23:52:35 +01:00
7663bbdd65
[amd64] Suggest grub-efi-amd64 instead of grub-efi dummy transitionnal package
...
[benh: Update changelog]
2016-08-25 23:51:35 +01:00
68c8135d73
Add hppa/parisc bug fixesfrom Helge Deller
2016-08-25 18:30:06 +01:00
dd5413ffc1
[arm*] Enable SECCOMP ( Closes : #833183 )
2016-08-25 18:25:02 +01:00
a45b0ae0a3
Note that the previous changes to exclude unreproducible files close #830268
2016-08-25 01:30:01 +01:00
28eab7aa6b
linux-headers: Exclude all .cmd files
...
These are not needed for building OOT modules and their contents may
vary depending on whether /bin/sh is bash.
2016-08-25 01:30:01 +01:00
7231d9e75a
usbip: Put all autotools-generated files in the build directory
...
Currently the linux-source-<version> package may or may not include
these files, depending on the order things are built in.
As autotools always modifies the source directory, copy (rsync) the
source to the build directory and build in-place there.
2016-08-25 01:29:57 +01:00
2fddcf7c7f
usbip: Use the locally-installed <linux/usbip.h>
...
Some years back I patched the #include of <linux/usbip.h> to include
the current, uninstalled version through a relative path because the
system-installed version will normally be outdated. We're about to
start copying the source to avoid writing autotools crap into the
source directory, which breaks this relative path.
Since we now install the UAPI headers under debian/build at the start
of the tools build, drop the patch and add that directory to the
include path.
2016-08-25 01:28:48 +01:00
Uwe Kleine-König
Ben Hutchings
Salvatore Bonaccorso
Martin Michlmayr
Aurelien Jarno
Cyril Brulebois
Nicolas LE CAM