Commit Graph

2330 Commits

Author SHA1 Message Date
Romain Perier 2943a959c9 [x86] crypto: ccp: add timeout support in the SEV command (Closes: #908248) 2018-09-16 01:58:12 +01:00
Romain Perier 21f4f386c3 Update to 4.18.7
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-09-15 20:27:11 +01:00
Salvatore Bonaccorso f21b10d326 hfsplus: fix NULL dereference in hfsplus_lookup() (CVE-2018-14617) 2018-09-15 11:27:16 +02:00
Salvatore Bonaccorso f84af2d0a0 btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (CVE-2018-14609) 2018-09-15 11:19:09 +02:00
Salvatore Bonaccorso e3cee898ab mac80211: don't update the PM state of a peer upon a multicast frame
Closes: #887045
Closes: #886292
2018-09-12 22:31:37 +02:00
Ben Hutchings 824debfd2e tools: turbostat: Add checks for failure of fgets() and fscanf() 2018-09-11 04:17:46 +01:00
Ben Hutchings 605745f58f tools: x86_energy_perf_policy: Fix "uninitialized variable" warnings at -O2 2018-09-11 04:17:45 +01:00
Romain Perier 428a3d136e Update to 4.18.6 2018-09-06 08:07:27 +02:00
Ben Hutchings c74e5d6fe7 [x86] boot: Fix EFI stub alignment 2018-09-05 17:55:25 +01:00
Ben Hutchings 295116a6db [powerpc*] boot: Fix missing crc32poly.h when building with KERNEL_XZ (fixes FTBFS) 2018-09-05 02:48:16 +01:00
Ben Hutchings c3b8d670c3 Update to 4.19-rc2 2018-09-03 21:34:30 +01:00
Ben Hutchings 5ad4d97be9 [x86] Allow generating user-space headers without a compiler 2018-08-30 16:06:25 +01:00
Ben Hutchings d87efc40a0 Update descriptions and add Forwarded fields for liblockdep build fixes 2018-08-29 00:39:50 +01:00
Ben Hutchings d34b1c8943 locking/lockdep: Delete unnecesary #include (fixes liblockdep build) 2018-08-28 22:07:54 +01:00
Ben Hutchings 54cc69a744 Update to 4.19-rc1
- Drop/refresh patches as appropriate
- Disable aufs patches until they are updated upstream
2018-08-27 15:21:43 +01:00
Ben Hutchings d6c050378d Release linux (4.17.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlt4FyhfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EitQQAJ4S3n+2azIKz50gfxon0dgS9ybXRxeb
 2Hk/FzBXqFduVhWe9vVuZdE4ko5QsQ8ht2HR726kcEkud8pFOh0pt/7Q67IQHbQN
 t/hD3C2C6M8pKhwBEwuSZtRqsruqv3qll95xbwIqW7AWP+/AODQltzgB0AplpC6a
 8ED1nCxutDI0WrzN76UcfYxa1slRJ9sRfh+KRWQSEsU+jCSP0aD0rArYVeppXGaR
 cAy5Xku7237hFdeIzlt6goHuvfDuSlbAxpuaF944TVFtmPYwe7W+S3rRSy0OtjQY
 WzdSsIKXlXVMkMJD4t3ybFUMOyHP/jT79Tem0kp8EBn8NcPjtnLJYLiODVR0PH3A
 5XOEzR3NLGspDxkEJWdq/7IsLL4a7wVLAYn5VbkRVzo2Jxp6IpSqPrFjYwdf/KMF
 PizvbJtHTQxGFk6jPdCG+DV9hBrMOzXedcqH24qZ4yr6xUOj5WICR3+9E57DYLwH
 oJzXef8BKhx4MdkDduduyWcyWJvlH2nBae2T+q+4mwfI/I+8PeyUDnSc7Hmzx1Cc
 feeeccvQPrhnu8HAE0RmfF1YhfyXXq3GQEt4MaV5Z2h6aAS1zxm1EhBueJMeaEhh
 i6oldiPDd2qHX9rZXYLvUx109qLyTiqxbzCgJCAF3s8Bk7P/Aj/0mDADo7d5V0TY
 KsXydFzhoiTZ
 =Qmdt
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.17-1'

Release linux (4.17.17-1).

- Drop "gpu: host1x: Fix compiler errors by converting to dma_addr_t"
  which is already in 4.18
- Drop ABI reference files and ABI number change
2018-08-27 14:15:27 +01:00
Salvatore Bonaccorso 66fce4cbfe Update to 4.17.16
Drop x86-l1tf-fix-build-error-seen-if-config_kvm_intel-is-disabled.patch

Drop x86-i8259-add-missing-include-file.patch

Drop bluetooth-hidp-buffer-overflow-in-hidp_process_report.patch

Cleanup debian/changelog file
2018-08-18 12:22:37 +02:00
Salvatore Bonaccorso cfd1f69cfe Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363) 2018-08-16 21:28:17 +02:00
Salvatore Bonaccorso f7fa757621 [x86] i8259: Add missing include file 2018-08-16 21:18:18 +02:00
Salvatore Bonaccorso 757e7a9cb1 l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled 2018-08-16 07:26:32 +02:00
Ben Hutchings e090a7f60d Revert "net: increase fragment memory usage limits" (CVE-2018-5391) 2018-08-14 22:23:59 +01:00
Romain Perier f813b6ebf5 Update to 4.17.14
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-13 14:01:38 +02:00
Romain Perier 281dea527f Update to 4.17.12
This updates the debian changelog for listing changes of this stable
update. It also removes patches that have been applied upstream.
2018-08-09 12:33:21 +02:00
Ben Hutchings 27f02c775b scripts/kernel-doc: Escape all literal braces in regexes (Closes: #905116) 2018-08-06 00:25:05 +08:00
Salvatore Bonaccorso 522d548dd5 Partially revert "block: fail op_is_write() requests to read-only partitions"
Closes: #900442
2018-08-05 17:14:54 +02:00
Ben Hutchings 8131366d14 block: really disable runtime-pm for blk-mq (Closes: #904441) 2018-08-05 23:12:11 +08:00
Ben Hutchings 9572404d42 [armhf] gpu: host1x: Drop my build fix in favour of upstream fix
- Revert "Revert "gpu: host1x: Add IOMMU support""
- gpu: host1x: Fix compiler errors by converting to dma_addr_t
2018-08-05 19:43:37 +08:00
Ben Hutchings cb5e4246bf Update to 4.18-rc7 2018-07-31 23:28:25 +08:00
Ben Hutchings 99f612471f Update to 4.18-rc6 2018-07-26 19:52:20 +08:00
Ben Hutchings 97fb73c92a Add Forwarded fields to gcc 8 build fixes 2018-07-21 03:15:40 +01:00
Ben Hutchings e5beaefd01 Release linux (4.17.8-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAltSYytfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EGAMP/0Ui8xfqRCRFnKAnz1+7iYh8QR+sXB4X
 qblWW74zsQqAn/xQXUpa4J+SXNc4qcqsi5EcmSJu5uS2Iv8eRK4W+FL4AgfEMPuU
 zj//d7QTrlvoRTOofPdv1Otj70oIwMMLipYSApZUbq79WYO24EIqZHruogXlbGpS
 fpGXJ9TYi9ARmV1tAKwJZeFDLqxeR3cRuB0z+lB2ENDwqEWueUtCVxFRaq99H844
 5PZOW6Ke/M5mBkClo/7yGBUUrBFTmZ8O58sKhQ9FU/nopobcigyLCPI7ZiZCvnwB
 I34MxXfjrldkgPoqmJNI9Xxk5I03flg5Z/vwdrrJIXOXrvNnlfbU0NAq6xykFtWL
 K0J1a80DKJtd2yyazHjrGKTFLoZlUdOWmOJAQMZpRZE1PraNgXuqmHeMOl7LcNnL
 ljUBRE2yhVZX2PSgs6Y64qmBjC/AgTOyPH5B/kjvWpHBJtZlQ/2pYu0c8eonY0Cl
 TGk5EgQWHib3BapEWVhMWaWVlCoW63s7kpgp1/CWPFmNua+IhrbBZIfQpWlW4Mk6
 cFbcUp5JEcFZC5uKp8InAcW/7pLteTNQvEXGTOilTpqAOtrWobqLXdpTorYwbY5g
 uyZVhWX58aoJNtTBW84oe+p3En6AcgulSLmq9fODtS3VvM1HHUBd6tFqjbZPRAeh
 e7XP4dnRdNwJ
 =bju1
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.8-1'

Release linux (4.17.8-1).
2018-07-21 03:02:42 +01:00
Ben Hutchings b9984b38e6 Fix remaining build failures with gcc 8 (Closes: #897802)
- tools/lib/api/fs/fs.c: Fix misuse of strncpy()
- usbip: Fix misuse of strncpy()
2018-07-20 02:01:35 +01:00
Salvatore Bonaccorso edbc7c3c16 Update to 4.17.7
Refresh features/all/aufs4/aufs4-base.patch

Drop bugfix/all/fix-up-non-directory-creation-in-sgid-directories.patch

Cleanup debian/changelog file
2018-07-18 18:04:46 +02:00
Ben Hutchings a89fe586a1 ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Closes: #903838) 2018-07-17 17:54:37 +01:00
Ben Hutchings 05d36f23b0 Update to 4.18-rc5 2018-07-16 01:41:49 +01:00
Ben Hutchings 3c07bfca57 [powerpcspe] powerpc/Makefile: Assemble with -me500 when building for E500
This fixes a new FTBFS in 4.18.  Thanks again to James Clarke.
2018-07-12 23:26:15 +01:00
Ben Hutchings 9832544260 bugfix/powerpc/powerpc-lib-makefile-don-t-pull-in-quad.o-for-32-bit.patch: Unfuzz 2018-07-12 05:12:47 +01:00
Ben Hutchings 3885cfb63f Release linux (4.17.6-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAltG0zUACgkQ57/I7JWG
 EQlb3Q//auZ2SJEu0MV/X+Mu7vjoUNZhi5VlPC2GBZaClEjrRG6iW0n2bO7fC1jd
 H8HSfVXy9F3vPiTUcMXyKq6vosLh/9Ie7jH1fGOCBoT7YbLcuoVmAPpAePOv6qTX
 gPdtWUvCT8lTviBX8LSFOG8zBewfcocU8MvNjIGKfu2b0CNykq5Z+yg9P7OAHaTt
 cfUU44v91YYwn8eo1Asi909kK73IO0V3SpIPUvgv5K2shCS44xKI19F2FIOuWRuD
 2COH0pSTV1oEjRGtkOJOzQqpEmO3sHZZfAUQTrKzxpTv43NzK80c148sd7/u6Hp1
 c+CszjeI3RJSX/YDie5noyL4BfYxXb+NGcLa41YOr2l1MM01fDOxKk1L/2imr1kV
 Ic73KR5h1fOD3JZmVTRwFpBgrxI9tNBQ7LP2fP666DqvMolRwr8vL5UvTqIF67l9
 uf/765rIgOhg6gwW9GghbuN08gMUfB8DTlsJerNbh1LKLZ8uN+7HzXoYjn44IINn
 Gbp09tQEx3lBl55zLH80MRUlo+mWlpxL2krDGrBTc/QxxDofl4ag+aRYTNmUut2+
 b54PEEpe2H1h6poMVOIjQlwvhKlWEez+8Syh8XKab0ZnMHipf316pX9UMAJIBtyb
 3iTjqMCgNQuraSzKT8/PfrMSV6HGfDN2FQo1vSf3kCQuigFsrA8=
 =VAyl
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.6-1'

Release linux (4.17.6-1).

- Drop patches for ABI maintenance or that are already upstream
- Drop ABI reference files
2018-07-12 05:07:12 +01:00
Ben Hutchings 8b5c36b9d4 Update to 4.17.6
Drop patches applied upstream.

Add patches to avoid ABI changes.
2018-07-12 01:11:34 +01:00
Ben Hutchings 34a7d9011f [armhf] mm: Export __sync_icache_dcache() for xen-privcmd (fixes FTBFS) 2018-07-12 00:21:54 +01:00
Ben Hutchings bedf220e50 fs: Fix up non-directory creation in SGID directories (CVE-2018-13405) 2018-07-10 00:47:18 +01:00
Romain Perier 99de07e63b Update to 4.18~rc4
This updates the debian changelog and removes the patches that have been
merged upstream.

Signed-off-by: Romain Perier <romain.perier@gmail.com>
2018-07-09 19:09:54 +02:00
Ben Hutchings af34178104 autofs: rename 'autofs' module back to 'autofs4' (Closes: #902946) 2018-07-07 00:55:56 +01:00
Ben Hutchings e442796757 linux-perf: Really fix man page generation with asciidoctor
The real problem was not that there were two rules, but that the first
rule didn't work for out-of-tree builds.

After I disabled the second rule, "make man" still succeeded because
of another rule (with no commands) that made all man pages depend on
asciidoc.conf.
2018-07-07 00:14:59 +01:00
Ben Hutchings afa20e4a35 linux-perf: Build docs using asciidoctor instead of asciidoc
This removes another Python 2 dependency.
2018-07-06 21:35:30 +01:00
Ben Hutchings f434dd0d83 Merge branch 'rperier-guest/linux-sid' into sid
Update to 4.17.4

See merge request kernel-team/linux!42
2018-07-06 19:28:54 +01:00
Romain Perier 16fe15c366 Update to 4.17.4
This updates the debian changelog for listing changes of this stable
update. It also removes the patches that have been merged upstream.

Signed-off-by: Romain Perier <romain.perier@gmail.com>
2018-07-06 15:00:25 +02:00
Ben Hutchings 4f5d99cab4 [powerpcspe] Fix build failures (thanks to James Clarke) 2018-07-06 05:11:04 +01:00
Ben Hutchings 353c1b13ce lockdep: Stub task_struct::state 2018-07-03 15:12:33 +01:00
Ben Hutchings 7f113f9112 Release linux (4.17.3-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAls6toYACgkQ57/I7JWG
 EQnUyQ/9GCNcKyhvUX+JW534f1vCai0GujvXCgEBWyDuj0AXcgthJT27cs7kXUYH
 tCfL9xTikeUIgNR+JTWFnZSHIUKaQ8RJPdR4l1KyqdDxqrEx9BqdXRW0dzS4OtTQ
 jgnVLkEfCtllgXkEh6L+ZKZ3NRFKc6OcYFrWa+Q+ovk1mY23P5y5YyPuaV4j+cKI
 8M1pMYCxTGpy9+SncKEnWHD9hq1AsySe19Q/yd5WzhDMu6kLg61S+n/iiVZJA8lK
 qHmMEhtEbiQN+/79C3dgH8nDV5yceqPZxon2GmPrUXrLTM0cX2J3VZpNFOH4SCr8
 AZa1nzzD8UXNDHVVb91QpwMGQrmjAwuLQtJPOCrOnuS71ba+q2w5ylYgjbbs7AMn
 SJpakcYBKBYoMI7fk+qKRVneBIhPDEBWe6yf//XL7N+Nfsf02bkb5k81NPTF65dE
 RESMNI/wXjhFkCWjqxZQiJqvG2mvyTGFs4iEk7NWjFfyqRz4bFNP+SbMHfGwVI1u
 xnlK2e31h25kWuFuQjq6eVXg+jyWjagM1/aa4lI1H4j2Rk9iXVU/52wVZGatmUj0
 1zbqYL2noJpD46/Q4jtbatZu9TI+ynjr+mbmZYys8BfFMNKPjL2TavW7RNWARk/p
 VmgvS7qS5JmJz22LBGRU1S5aKbDhXmyt8IcJS9LCUwEU0yL+u4U=
 =n9qI
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.3-1'

Release linux (4.17.3-1).
2018-07-03 00:45:29 +01:00
Ben Hutchings 1f88ab63d4 jfs: Fix inconsistency between memory allocation and ea_buf->max_size (CVE-2018-12233) 2018-07-02 21:43:33 +01:00
Ben Hutchings 2e3f7d9495 Add fixes for ext4 security issues relating to corrupted disk images 2018-07-02 21:34:14 +01:00
Ben Hutchings 24e6de2add netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text 2018-07-02 17:30:21 +01:00
Ben Hutchings d7f4f21608 tracing: Check for no filter when processing event filters (CVE-2018-12714) 2018-06-30 03:27:55 +01:00
Ben Hutchings 6143dfd1bd Update to 4.18-rc2
Drop/refresh patches as appropriate.

Disable the aufs support patchset since aufs hasn't yet been updated.
2018-06-26 03:08:29 +01:00
Ben Hutchings 2202083eb0 Update to 4.17.3
Drop patches applied upstream.
2018-06-26 02:49:57 +01:00
Ben Hutchings 4eabac8481 [x86] virt: vbox: Only copy_from_user the request-header once (CVE-2018-12633) 2018-06-26 00:26:41 +01:00
Ben Hutchings d6b55c2dde socket: close race condition between sock_close() and sockfs_setattr() (CVE-2018-12232) 2018-06-26 00:26:41 +01:00
Ben Hutchings 8d25e929ea ext4: do not allow external inodes for inline data (CVE-2018-11412)
Plus the related fix "ext4: bubble errors from
ext4_find_inline_data_nolock() up to ext4_iget()".
2018-06-26 00:26:41 +01:00
Ben Hutchings 5e4f042d2f ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (CVE-2018-10840) 2018-06-26 00:26:41 +01:00
Ben Hutchings 43505297af vhost: fix info leak due to uninitialized memory (CVE-2018-1118) 2018-06-26 00:26:36 +01:00
Bastian Blank 793d0ba52e Release linux (4.16.16-1)
-----BEGIN PGP SIGNATURE-----
 
 iQFFBAABCgAvFiEER3HMN63jdS1rqjxLbZOIhYpp/lEFAlspVJURHHdhbGRpQGRl
 Ymlhbi5vcmcACgkQbZOIhYpp/lFk8ggAvgwAw3CSdFCGSLvd8cBjZa2mqpxqOILN
 BbuXT0qRTibN19qtjeHvk0SQUQuBBIoP9DVGu0j1UIBfpQcVsEg+tM2FTqrPI5DT
 1LPdMcOEyNpD9FlmEljd7lkjetyils/0T87+hHXxhBP2d2DkuUjcaY1t09+6kKW0
 A2XXeEGeJmDbLEuY7R/WxGHsT20nvvLD0on5691mF8yW7wLDavekwGk9JJlFjOID
 XkwxAj2nFVDCWB6hmi1ETGYahmnFXgK1kX2X0lTAi6FM1mql4oha6LNxQSYc8hAd
 03nWnzwh+BmsAJjapp1PkkGEj7SHw9AHl8EUS+cqaAzigB4LjSPffw==
 =4gVf
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.16.16-1'

Release linux (4.16.16-1)
2018-06-19 21:50:55 +02:00
Romain Perier c2d82aa53d [arm64] correct voltage selector for Firefly-RK3399 (Closes: #900799) 2018-06-15 18:49:25 +02:00
Bastian Blank 87e3b20439 hv_netvsc: Fix a network regression after ifdown/ifup 2018-06-13 13:49:24 +02:00
Ben Hutchings 64f4d67d9e ext4: Fix duplicate softdep fields in module info
We no longer need to add the crypto-aes or crypto-ecb dependencies
because ext4 uses the common encryption code in fscrypto (and has a
regular symbol dependency on it).

Since upstream added a softdep on "crc32c", we don't actually need to
change ext4 at all now.  But let's replace it with "crypto-crc32c",
since that's the module alias the crypto subsystem will actually
request and is consistent with the softdep we add to other
filesystems.
2018-06-07 16:21:25 +01:00
Romain Perier 657307624b Update to 4.16.13
This updates the debian changelog for listing changes of this stable
update. It also removes the patches that have been merged upstream.
2018-06-05 14:31:46 +02:00
Salvatore Bonaccorso bc42fd66b1 sr: pass down correctly sized SCSI sense buffer (CVE-2018-11506) 2018-05-30 08:41:40 +02:00
Ben Hutchings cb55017d9c [x86] KVM: VMX: Expose SSBD properly to guests. 2018-05-23 00:45:33 +02:00
Salvatore Bonaccorso 0e0b695e53 Update to 4.16.11
Revert "[x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)"

Cleanup debian/changelog file
2018-05-22 21:03:43 +02:00
Ben Hutchings 975e4433ed [x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)
Apply all the SSB-related patches pending for 4.16-stable.
2018-05-22 12:26:02 +02:00
Ben Hutchings b1a9e2470a Update to 4.16.10 2018-05-22 00:49:31 +02:00
Salvatore Bonaccorso c2dbc30362 proc: do not access cmdline nor environ from file-backed areas (CVE-2018-1120) 2018-05-17 23:15:48 +02:00
Salvatore Bonaccorso 9febee02d1 mm, oom: fix concurrent munlock and oom reaper unmap (CVE-2018-1000200) 2018-05-12 16:49:55 +02:00
Salvatore Bonaccorso 24b281238c Update to 4.16.7
Refresh bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch

Drop patches applied upstream related to CVE-2018-1093

Cleanup debian/changelog entries
2018-05-10 15:01:21 +02:00
Ben Hutchings f65f618689 rtl8192se: Fix warning introduced by "firmware: Remove redundant log messages from drivers"
The firmware file name is a local variable in both functions that
use it, and rtl92se_fw_cb() only uses it for the logging that we
remove.
2018-05-09 22:53:01 +01:00
Ben Hutchings a5394cbc13 [hppa/parisc64-smp] IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS 2018-05-09 22:48:55 +01:00
Ben Hutchings f4a882f016 Update to 4.17-rc4 2018-05-09 19:10:50 +01:00
Ben Hutchings bb6c7da6fe Update to 4.17-rc3 2018-04-30 00:12:50 +01:00
Ben Hutchings 634a2fc7db Release linux (4.16.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlrmIuQACgkQ57/I7JWG
 EQl34hAAiQMv+LrOJsingSeIxmPM2q+FktFykdjTNsjcyEZ5pSfhj8T4fc4hZHZp
 uXOMV4+lfNSCQF9agPsYcTvm6Md7VqMCMjFOmM6GdUrIc7kDnZEheA1ZTFuZzOVv
 Heh88tDu6Zl2vqPbt+81Ah3N/lSyCVA5jVF0K4RYUe1Gs7YFTqaJdPZi8wP7I9Os
 GwvY41auQFNdTQfIpdB1dISQVtfAZT8cg+c/fGUNPhJWqFnjMeYhBoQWRKPATp4/
 NNJNAEOU7K0zpooCCAH5zK03T6bpt64GOJx/gDMyaqdlAd3LbLiCQP09tS3OVqQS
 qAm7I0STnM3oD0D1uk+OPo8Cxeu3V/4kHwYH59G/EwyYa7rJxrThQSvTZCxEdKuK
 REr2aPe6doW7x45yhL+R3ZKJDLsdVJkkutpCXhdqnwAUnXITUR4PprNd4l6tc5nC
 IzZM5Il7nAx3LWB2Xtz4iGykQVAyXdpDKXjCJgarTI4kG49iitCq1eRJHi5jFVJw
 7iuIgZmjFBWx6bzifhNBg0oUG3R7hEitzaqJ0G1jX+FRVfOOr+an+txZEVyJuqsw
 3FDI8kJClXVB6kNAPgEQWPh3Cdh63s69qVLZZTGujgLHMXv833MbBHIV3KR+7YNS
 uKfzJNSglCIKf3LVKRUSHJyfYJTV+iS4ioHVjn8B7fc0YCdXQpg=
 =hQGL
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.16.5-1'

Release linux (4.16.5-1).
2018-04-29 21:09:11 +01:00
Ben Hutchings 5b54699034 ext4: fix bitmap position validation
Un-revert "ext4: add validity checks for bitmap block numbers" and
apply this new fix on top of it.
2018-04-27 18:08:44 +01:00
Ben Hutchings 019c1fa6f3 xfs: set format back to extents if xfs_bmap_extents_to_btree (CVE-2018-10323) 2018-04-25 21:23:07 +01:00
Ben Hutchings f78c3b3434 xfs: enhance dinode verifier (CVE-2018-10322) 2018-04-25 21:22:21 +01:00
Ben Hutchings 9f2182e09a Revert "ext4: add validity checks for bitmap block numbers", which caused a regression 2018-04-25 21:15:48 +01:00
Ben Hutchings 98017b2bd7 Update to 4.16.4 2018-04-25 21:14:23 +01:00
Ben Hutchings 1c1d5f2d95 Documentation: Update references to drivers/base/firmware_class.c 2018-04-20 00:57:50 +01:00
Ben Hutchings d04e628f00 Documentation: typec.rst: Use literal-block element with ascii art
This fixes a fatal error in the doc build process.
2018-04-20 00:50:39 +01:00
Ben Hutchings 8457aba35f Update to 4.17-rc1
- Drop patches included upstream
- Drop "Don't WARN about expected W+X pages on Xen"; the problem appears
  to have been fixed by upstream commits 2cc42bac1c ("x86-64/Xen: eliminate
  W+X mappings") and 672c0ae09b33 ("x86/mm: Consider effective protection
  attributes in W+X check")
- Drop "Kbuild: kconfig: Verbose version of --listnewconfig"; it seems
  redundant with upstream commit 17baab68d337 ("kconfig: extend output of
  'listnewconfig'")
- Drop lockdown patch to drivers/scsi/eata.c; the driver was removed
  upstream
- Refresh various other patches
2018-04-19 23:44:22 +01:00
Ben Hutchings fcb558d168 Merge branch 'sid'
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
  applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
  selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
  options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
Ben Hutchings fc0c66ddb9 ath9k_htc: Fix regression in 4.15, thanks to Ben Caradoc-Davies (Closes: #891060)
- mac80211: add ieee80211_hw flag for QoS NDP support
- ath9k_htc: use non-QoS NDP for AP probing
2018-04-19 00:01:09 +01:00
Ben Hutchings 9f5a30bb07 Add various security fixes 2018-04-18 00:11:35 +01:00
Ben Hutchings 66b63716aa Update to 4.15.17 2018-04-17 23:43:11 +01:00
Salvatore Bonaccorso a325681bab [arm64] net: hns: Fix ethtool private flags (CVE-2017-18222) 2018-04-15 20:58:48 +02:00
Salvatore Bonaccorso f5b6a35cad media: usbtv: prevent double free in error case (CVE-2017-17975) 2018-04-15 20:52:17 +02:00
Salvatore Bonaccorso 8e41f67460 drm/nouveau/mmu: ALIGN_DOWN correct variable
Closes: #895750
2018-04-15 20:33:52 +02:00
Vagrant Cascadian 10b9c6345e [armhf] Add patch to fix loading of imx6q-cpufreq module. 2018-04-12 01:12:40 -07:00
Ben Hutchings 630c3f806d Release linux (4.15.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqwxttfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EA+AP/3w06dM1NGmIwjmKWtFDpYrrPLz/vtGG
 g/QHFtFGpGQdbzC2O6OULe3z/M63AlNJ6d1VG9OnDcbgsr2eXxHy+021LvtucWK2
 wtKtNJVz6VQ7XtfccsYqcAhqQq22tS5lEqPxMmRAz9SUPuG823B0LH0LXQwvRCiA
 4PeVjDa+bHzNfGyp+ecF70ZsDdfQmYHTNxnAgRiiUUGvLnd2Aq9uQWMILSgiZAiu
 D9lqn3VLI49bT65QGaK+G35MgfkmwnaSa4P1Kvsr8OKkKJMoWObdTnO3UL2hYQj4
 4P7EM4VzRa45eKpBEGpcrEMNtIv6ioNh80r2Dxj/3TlusruG7qXSUgLJMneX5ZVf
 bT1mVkDrr61f3d/ubypXaJNgR7g6zu522o/wLOaCwU+tjBlxuEELCxyGcB5vlQeR
 EbJy/jjW3+NX23w9bheYoDqaz4bITgqAma2Y2VC7jC34CP42oowavLy6OQdWUbCh
 wPvwxYnNEqZWPlMYyTCj/cmLAZb6JN1mNmq0rlbGjlnICtBKYDKah57noCGq34BW
 pAm7aDLQGFGaj0pW2rzCgMd20klg39sLxCMZmYbqRubQXGJaq7FuzjWSmAmd6tSV
 8dcM1QLOz3XmcaLRGXTr/hWllj9AltSFp5EVaCN27Fdlvjec6RnVdNNjOs5bd4rK
 7ik0RWgWDIoU
 =PehK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.15.11-1'

Release linux (4.15.11-1).

Refresh patches.
2018-03-20 13:50:27 +00:00
Salvatore Bonaccorso 1d363986d0 mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (CVE-2018-8087) 2018-03-19 22:31:39 +01:00
Salvatore Bonaccorso 6a020907c6 Update to 4.15.11
Drop bugfix/all/crypto-ecc-fix-null-pointer-deref.-on-no-default_rng.patch

Cleanup debian/changelog file
2018-03-19 13:05:40 +01:00
Salvatore Bonaccorso 677fae7f88 Update to 4.15.10
Add CVE ids for two issues fixed in 4.15.10

Drop bugfix/all/scsi-core-Avoid-that-ATA-error-handling-can-trigger-.patch

Drop bugfix/all/nospec-kill-array_index_nospec_mask_check.patch

Cleanup debian/changelog file
2018-03-16 11:53:04 +01:00
Ben Hutchings 90520391a2 i40e: Add kconfig dependency to ensure cmpxchg64() is available
This should fix FTBFS on architectures where it isn't.
2018-03-15 19:08:05 +00:00
Salvatore Bonaccorso 8039021914 scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
Closes: #891467
2018-03-15 08:53:49 +01:00
Ben Hutchings 35e5ff18f3 amdgpu: Abort probing if firmware is not installed, as we do in radeon 2018-03-15 02:19:45 +00:00
Ben Hutchings ae02ddd98a Make "radeon: Firmware is required for DRM and KMS ..." less Debian-specific 2018-03-15 02:19:44 +00:00
Ben Hutchings 33277fbe2b nospec: Kill array_index_nospec_mask_check() 2018-03-13 22:22:31 +00:00
Ben Hutchings 17703a438b Update to 4.15.9
This has some ABI changes, which still need to be resolved.
2018-03-13 22:20:14 +00:00
Ben Hutchings 3c7088b5cd Update to 4.16-rc5 2018-03-12 02:40:37 +00:00
Ben Hutchings 7b3adb7e57 Merge branch 'master' into sid 2018-03-12 02:02:24 +00:00
Vagrant Cascadian b6d7061ed6 [arm64] Apply patch from linux-next to fix eMMC corruption on
Odroid-C2 (Closes: #879072).
2018-03-11 18:46:05 -07:00
Salvatore Bonaccorso 07f055d4a5 sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803) 2018-03-09 20:34:10 +01:00
Salvatore Bonaccorso 999a1d81ab Correct commit id reference, actually take from linus tree
Gbp-Dch: Ignore
2018-03-09 11:58:43 +01:00
Salvatore Bonaccorso 5bd62d6357 ALSA: seq: Fix racy pool initializations (CVE-2018-7566) 2018-03-09 11:54:59 +01:00
Salvatore Bonaccorso fc2cf56edb Update to 4.15.4
Drop media-dvb-usb-v2-lmedm04-Improve-logic-checking-of-w.patch

Drop media-dvb-usb-v2-lmedm04-move-ts2020-attach-to-dm04_.patch

Drop media-hdpvr-fix-an-error-handling-path-in-hdpvr_prob.patch

Cleanup Debian changelog for 4.15.4
2018-02-16 22:46:54 +01:00
Salvatore Bonaccorso 0ec05d8c81 Release linux (4.14.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqFl5pfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EQDoP/iuiGnJomZlwYf+UtxmTxZM0B1jutQ2V
 vg2/JLaocNP/QLJTRKKQnUnEbawuUvGF/vtq5kDV0XcaY3QZSbeQKkpyEpZoI5K3
 dJ8WG+EXDd/a2KVoJ/layX2JqtSVsgBOtJJkSSrhWk2tfZkhB1+9BJ54UXoTCT0A
 pWor5ycO0PUw6crlMsNz62lBwvdwoHgIhKkjpfnXOCTZQi6n6RVFvaT2uLyijZod
 0KTuWFnyMLgh1gpKKR/tqGs25ByOQH43TmtrVAYfjqua5P5CvzJaKp3UMHsDPIbN
 Uw3HB0QQ3iEg8pQJhCkrNk1LT/1Je9xb3rdoKSQ+OitTfyQnhs/eVXs3KzD3DPOc
 IJZjG/kno8d7bNWW8+ce12MPVVkAop1ZMGushyz1c3149HCtinQcymcWahD4Gyzg
 YA9w3V7ir+bvJWunKy12845XoXpxhaBVV7CbnXI02exGwbN1gBPfI6nxzf84lVcG
 Bnwy523jmAjB8h8a9HjmtwqecbnJRf+NkgQAJItniGR06B7XVSLaOnnD0dXLdOMj
 VADirfbRRU60gqBrjrMxUwMO1ArKowNzQM91pTR+jAa2mS4KzEpMmwmWMAPSTL2n
 9ODByDGf6oi9vQxxoMd1gic7cZwyzO3n/SnHSpA5IYDSeurWE1ZF3xWqPBlxIpUp
 EXiBvAThcuDs
 =jSDv
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.17-1'

Release linux (4.14.17-1).
2018-02-16 00:20:10 +01:00
Bastian Blank 0ce4bbe790 Fix building of liblockdep 2018-02-11 09:51:44 +01:00
Salvatore Bonaccorso 0a69e0b046 Update to 4.14.17
Refresh cpupower-fix-checks-for-cpu-existence.patch patch
2018-02-04 15:14:12 +01:00
Salvatore Bonaccorso a870b2741a crypto: ecc - Fix NULL pointer deref. on no default_rng
Closes: #886556
2018-02-02 20:43:54 +01:00
Salvatore Bonaccorso edfb7d0f0e Update to 4.14.16 2018-02-02 14:39:34 +01:00
Ben Hutchings aacdec9702 Update to 4.15 2018-01-29 23:46:40 +00:00
Ben Hutchings 623cfd4d39 Merge branch 'sid'
- Drop ABI maintenance patches
- Apply usbip config change in debian/config/config
2018-01-28 19:02:08 +00:00
Salvatore Bonaccorso 4fae92a1d5 nfsd: auth: Fix gid sorting when rootsquash enabled (CVE-2018-1000028) 2018-01-28 19:38:02 +01:00
Salvatore Bonaccorso 3a81855475 Update to 4.14.15 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso e30f878e1d ALSA: seq: Make ioctls race-free (CVE-2018-1000004) 2018-01-18 14:30:46 +01:00
Ben Hutchings 6f43038466 Update to 4.14.14
Mostly done by Salvatore Bonaccorso.
2018-01-18 06:10:01 +00:00
Salvatore Bonaccorso 0bb5e7cccb loop: fix concurrent lo_open/lo_release (CVE-2018-5344) 2018-01-16 20:57:59 +01:00
Salvatore Bonaccorso 6c0d6a6239 RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333) 2018-01-16 20:53:46 +01:00
Salvatore Bonaccorso 24cdd62c17 RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332) 2018-01-16 20:50:50 +01:00
Ben Hutchings 6e7610453d Release linux (4.14.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlpb7AUACgkQ57/I7JWG
 EQmfjhAArIzynB9B8lG9U8OlC7bp+HTjk9BgOKo5VZ6ABlIePxveUgkc44kYK1ET
 YGiqpi1BbMPoDiu32QyuCzYwxNjUl6dXCOKnUgsTR0jyKSXoc19idWLb/U5akXxF
 Q1LWUaBWB/SbR52inAE8nX2s1tdgFjKDHgebAOdbPApt8eTnI4pSL1YvehDQtqG1
 olz3L1PjlRhT2XCdtWIPrLioIxUiOacYGV7sMZHL2jsJS+mmf20BiUMsfusafL2r
 Q8LSVGCQRgWutbTZW2YmFtx0FybxYc8wRj/9d7nYMaOv+UeFbx6ffYrkZUqXlK4j
 TkVsFULVoEfgnu9GkWnd+kdJP8PwbDkrjk1JsXg55A0LCrfFcorbMQc8GCJ6ICpu
 mFqw5NQaxQZszP6W0dYWHWJTLENOVxjYyoMjmLuQIMudzHP4bGTXjJ/PCBebT5fR
 6XOPdqcWoOT5f8NloMFqzPQQeFQMY+DycYiz2tdYxH4AnvGsgdOLFiHHYxxIsOa1
 Bzxb4bWxF2m3hKiyY5am/5U6MAxLrBwsvLZVklyfxYSRlvnPldKVHohzHTZafPSo
 M7KU4R1e6wywwjg9Qtk4YJBX5w0jT3b9vbVQVNT47WzvLwXA/TY+Il6BIAVuzL57
 MJAosU9SDAf28XUVzcaXbsHm9l2gcnUS6kCVVWTEvmehkW1rR3o=
 =M11J
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.13-1'

Release linux (4.14.13-1).

- Drop ABI reference
- Drop/refresh patches as necessary
- linux-headers: Drop versioned dependency on linux-kbuild, as there has not
  been any version of linux-kbuild-4.15 without objtool
2018-01-15 04:35:41 +00:00
Ben Hutchings 13eb990095 Update to 4.15-rc8 2018-01-15 04:31:31 +00:00
Salvatore Bonaccorso da2cd8b85c drm/nouveau/disp/gf119: add missing drive vfunc ptr
Closes: #880660
2018-01-13 11:54:57 +01:00
Salvatore Bonaccorso aac0e5380a Properly name patch according to subject
Gbp-Dch: Ignore
2018-01-10 22:46:07 +01:00
Salvatore Bonaccorso d42878a1e5 Disable asynchronous aborts for SATA devices 2018-01-10 13:23:46 +01:00
Salvatore Bonaccorso 9a41499923 Update to 4.14.13 2018-01-10 10:49:59 +01:00
Salvatore Bonaccorso 8996784cdc Release linux (4.14.12-2).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlpQhNxfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EKmgP/3D1CAm0F0v9d2AfQAPv8wVQIFpWqZGM
 D1jjtinIyCGJVM0jjXKne1nwQZotVTN/SDHeGTmJVvluLsF7MBCiGTBYMThqYD/I
 DCaOwGS9go8J771dR261c1D0nnnsqTvAJIMQDcVmRoVT/KRA/ZqdwJHygX8cZ2hb
 MmSWH5szCt4n55SkJDQi4nJ0dWkj5ZiKf4i6+o5+NrY2PJRTYlIthnCvHDuTsY+r
 Nade3ITAX82xRjFUmeM6JUc1xScLoXxvQhfuIRyIk2atQBCZEvTXvwC8cuyJWBo+
 TUdWqRdxEslqCTJ7/boH9nsWO4Hm+UiVHFwUbFR+xpPqgdDvkHAZII5tk9pzNSxU
 CWAWtKhRJxl8Ne452bCWtRi8TlvXNi4F7wbM9/AygT6dJoTidKYkAi+WcRco800G
 Yx5uuLfj88tBm4VFZJot9W1FKOtml0w+25I4uuua2lSwIS6/25+OZ1qMOkEXbE+v
 nIZHX2UTZYda8PNzZlMClfwiHYKKd+2LnGpdc0oEexwRxLtm/YFKHkavV396E7o1
 FzlogUJqsofgJOEYczBcjiuEW9EKXbeRCx/TPm/MVHz2Qn0hCWGWSnR5h/8T7KZ9
 GuOTk8+5c0puYK35+NC5M9/0XboP+hOEccuaJS4abu4tHok8jU72SX3KF+8j4dl8
 OxVql0ToPmdI
 =wQ4Q
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.12-2'

Release linux (4.14.12-2).
2018-01-06 14:30:49 +01:00
Salvatore Bonaccorso 9a96b9c27a x86/tlb: Drop the _GPL from the cpu_tlbstate export 2018-01-05 21:17:13 +01:00
Salvatore Bonaccorso 3452777429 Fix refresh of bugfix/all/bpf-fix-integer-overflows.patch patch
Gbp-Dch: Ignore
2018-01-05 20:22:43 +01:00
Salvatore Bonaccorso 96dad8ed7e Update to 4.14.11 2018-01-05 14:22:34 +01:00
Salvatore Bonaccorso a7b364e44f Update to 4.14.9 2018-01-05 14:19:40 +01:00
Salvatore Bonaccorso f5474829b9 Update to 4.14.8 2018-01-05 10:59:15 +01:00
Ben Hutchings 6a221d27b1 e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
Closes: #885348
2017-12-28 01:24:56 +00:00
Ben Hutchings 7dd9b58675 Update to 4.15-rc5
Also update the aufs and lockdown patchsets.
2017-12-26 18:54:17 +00:00
Ben Hutchings 8423f81c55 Merge remote-tracking branch 'alioth/sid' into sid 2017-12-22 14:10:04 +00:00
Salvatore Bonaccorso 196596c560 crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) 2017-12-22 09:13:19 +01:00
Salvatore Bonaccorso 4f056ca2c6 crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) 2017-12-22 09:00:33 +01:00
Ben Hutchings cf1f6e2019 bpf/verifier: Fix multiple security issues (Closes: #883558) 2017-12-22 03:54:44 +00:00
Ben Hutchings fc7f6fafd8 Add security fixes 2017-12-20 19:27:18 +00:00
Ben Hutchings 9e0441b20a Update to 4.14.7
Drop patches applied upstream, and fix a few conflicts.
2017-12-20 18:40:37 +00:00
Salvatore Bonaccorso 2f634be5d8 xen/time: do not decrease steal time after live migration on xen
Closes: #871608
2017-12-03 10:53:37 +01:00
Ben Hutchings 3f937de450 [x86] mmap: Add an exception to the stack gap for Hotspot JVM compatibility
Closes: #865303
2017-11-30 12:07:11 +00:00
Salvatore Bonaccorso 71832be11b mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (CVE-2017-1000405) 2017-11-30 08:16:06 +01:00
Ben Hutchings a633085eb6 apparmor: fix oops in audit_signal_cb hook (regression in 4.14) 2017-11-24 13:25:03 +00:00