5cd2c3b57c
[arm64] Enable configuration options used in Firefly-RK3399:
...
DRM_ROCKCHIP, ROCKCHIP_ANALOGIX_DP, ROCKCHIP_DW_HDMI,
ROCKCHIP_DW_MIPI_DSI, ROCKCHIP_SARADC, ROCKCHIP_IOMMU, ROCKCHIP_EFUSE,
PHY_ROCKCHIP_TYPEC, ROCKCHIP_THERMAL (Closes : #901159 ).
Thanks to Heinrich Schuchardt.
2018-06-17 14:11:11 -07:00
c2d82aa53d
[arm64] correct voltage selector for Firefly-RK3399 ( Closes : #900799 )
2018-06-15 18:49:25 +02:00
87e3b20439
hv_netvsc: Fix a network regression after ifdown/ifup
2018-06-13 13:49:24 +02:00
ce045ef43e
cloud-amd64: Enable MEMORY_HOTPLUG
2018-06-13 13:27:44 +02:00
4ae4ab6f46
Update to 4.17.1
2018-06-13 10:38:22 +02:00
64f4d67d9e
ext4: Fix duplicate softdep fields in module info
...
We no longer need to add the crypto-aes or crypto-ecb dependencies
because ext4 uses the common encryption code in fscrypto (and has a
regular symbol dependency on it).
Since upstream added a softdep on "crc32c", we don't actually need to
change ext4 at all now. But let's replace it with "crypto-crc32c",
since that's the module alias the crypto subsystem will actually
request and is consistent with the softdep we add to other
filesystems.
2018-06-07 16:21:25 +01:00
c1ecc67a90
Merge branch 'corsac/linux-hardening-options' into sid
2018-06-06 20:57:40 +01:00
5cb5873ba8
cloud-amd64: Enable VIRTUALIZATION
2018-06-06 14:51:32 +02:00
59e5cb05eb
Update to 4.17
2018-06-06 14:35:13 +02:00
7e35837639
Cleanup debian/changelog file
...
Remove maintainer stanza for the now upstreamed CVE-2018-11506 (included
in 4.16.13) and remove maintainer trailer for the new upstream stable
update import.
2018-06-05 17:09:22 +02:00
657307624b
Update to 4.16.13
...
This updates the debian changelog for listing changes of this stable
update. It also removes the patches that have been merged upstream.
2018-06-05 14:31:46 +02:00
5b261c2b95
[hppa] Disable debug info due to required disk size.
2018-06-03 22:20:39 +02:00
31812a0dcb
[armhf] Enable MFD_AC100 and RTC_DRV_AC100, used in allwinner A80/A83t
...
systems.
2018-06-02 22:11:02 -07:00
50a8903a67
[armhf] Enable MFD_AC100 and RTC_DRV_AC100, used in allwinner A80/A83t
...
systems.
2018-06-02 22:08:36 -07:00
bc42fd66b1
sr: pass down correctly sized SCSI sense buffer (CVE-2018-11506)
2018-05-30 08:41:40 +02:00
4cccacc785
Prepare to release linux (4.17~rc7-1~exp1).
2018-05-29 09:54:12 +01:00
c514e73827
Release linux (4.16.12-1).
...
-----BEGIN PGP SIGNATURE-----
iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlsKn2ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89E/cYP/R31VzcQpyLuMJtYL3SqgMwZJFgFDhIw
nTpM4xiZFPm0Ci0hcy5u9oGbrD6bSINfK3SH50d36yBJMNDWMnk4y29IAQ92VJLp
yKobfV3TTFDeHocpMjY1CmYPu6mWckwqPDSfP+lBBvLw9iDtiVptn1oY91+utyGG
9gJOQbLe0Ck0+aOt+AhNKSt/acYrmaIewiJhBpOzy8w/piEuOLXGhe6HYCGxT6hp
gKBz9tBON/1e0x6I88BjD/wvPCWgBOon9c2ZrS3GEYZ3GmITPGR8tbtObucRC2iF
g1dpu2iSTt9ZjyBQpTJlZMGrLUBu5UvQy4xvI39Qu+wWzS3sD9D1e+dzb2UT298k
8i8zMLh8qNnd8rQpak5+LdUw/5RdFqGdh/Y95b0giaAohJtRum8SiBRSerlTVLCy
nHI55yXP8Hnj7G0+BqCanuHrbDulPX9nYUe9bSPcATBtI4Tzbj+ToywMV2BkTYAi
QrjSjuugSkUPjhinVZrex8ZS7qbDXTcl4PaYMms9PfMsE5hyLCtuclSLEZvGsB1g
MuAZEHXliSdK37LoStuSljXk2ZA/d6dilLCyLoL6GbyJyeFJ5guSNKBVdIQDs5us
Mnw9j0QHQh1bMGRNRwwcFUnLNsIT9ONUIXKOlhLtRBoLn8hreB2l4s7nMglHu8aW
sO9HQqb5TXyc
=Q2Gx
-----END PGP SIGNATURE-----
Merge tag 'debian/4.16.12-1'
Release linux (4.16.12-1).
2018-05-28 16:56:46 +02:00
257bf132e3
Update to 4.17-rc7
2018-05-28 16:53:44 +02:00
771e5be22a
Prepare to release linux (4.16.12-1).
2018-05-27 14:05:03 +02:00
ea4e2c3ad4
Merge branch 'master' into 'master'
...
Update to 4.17-rc6
See merge request kernel-team/linux!29
2018-05-26 18:07:11 +00:00
2357158140
Update to 4.16.12
...
Cleanup debian/changelog file
2018-05-25 21:28:49 +02:00
8eda5a77f8
cloud-amd64: Disable some filesystems
2018-05-25 14:12:05 +02:00
3230e66a9c
Update to 4.17-rc6
2018-05-24 18:39:42 +02:00
cb55017d9c
[x86] KVM: VMX: Expose SSBD properly to guests.
2018-05-23 00:45:33 +02:00
0e0b695e53
Update to 4.16.11
...
Revert "[x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)"
Cleanup debian/changelog file
2018-05-22 21:03:43 +02:00
975e4433ed
[x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)
...
Apply all the SSB-related patches pending for 4.16-stable.
2018-05-22 12:26:02 +02:00
baa5254a6f
[rt] Update to 4.16.8-rt3
2018-05-22 00:55:31 +02:00
b1a9e2470a
Update to 4.16.10
2018-05-22 00:49:31 +02:00
1bdb99105c
tune changelog to fit latest commit
2018-05-21 16:32:58 +02:00
c5271ac5c2
Note to close #898629
2018-05-20 21:35:15 +09:00
8cd0f39aad
Note how to revert config option for battery
2018-05-20 21:27:27 +09:00
ab436fc35b
hardening: enable REFCOUNT_FULL and FORTIFY_SOURCE, disabled HARDENED_USERCOPY_FALLBACK
2018-05-19 11:26:45 +02:00
66f8fb08ec
[armhf] Update mtd-modules: Replace pxa3xx_nand with marvell_nand.
2018-05-18 14:45:57 -07:00
1c53205545
Merge branch 'patch-1' into 'master'
...
[mips*r6*]Enable MIPS_CPS for Boston
See merge request kernel-team/linux!23
2018-05-18 10:33:14 +00:00
c2dbc30362
proc: do not access cmdline nor environ from file-backed areas (CVE-2018-1120)
2018-05-17 23:15:48 +02:00
5e03b26fab
[mips*r6*]Enable MIPS_CPS for Boston
2018-05-17 14:32:19 +08:00
45c6ddad0b
Update to 4.17-rc5
2018-05-16 22:31:42 +01:00
b968d18584
[mips{,64}r6{,el}] use boston as the target
...
Add a patch to disable uImage generation to avoid depend on u-boot-tools
Fix typo the EL's flavor names in installer: not same within defines
Malta is never used for r6. (Closes : #898523 )
Boston also requires relocation table size >= 0x00121000
2018-05-14 16:26:26 +08:00
ecefd63ffc
loongson-3: enable NUMA, CPU_PM, CPU_IDLE, RS780_HPET, REGULATOR
2018-05-14 15:59:09 +08:00
9deec69be4
Bump ABI to 2
2018-05-13 01:14:24 +01:00
9febee02d1
mm, oom: fix concurrent munlock and oom reaper unmap (CVE-2018-1000200)
2018-05-12 16:49:55 +02:00
5903405411
[rt] certs: Reference certificate for test key used in Debian signing service
2018-05-12 10:20:40 +02:00
5f1b90fa69
Update to 4.16.7-rt1 and reenable
2018-05-12 10:14:20 +02:00
569ca4dfa0
Merge branch 'master' into 'master'
...
[ia64] add compress-modules (fixes FTBFS)
See merge request kernel-team/linux!16
2018-05-11 19:23:34 +00:00
19d39cc961
Correct changelog entry
2018-05-11 14:29:08 +00:00
8102eefaf5
Add missing Copyright line to debian/copyright
...
Another harmless but annoying Lintian source warning:
missing-field-in-dep5-copyright copyright
2018-05-10 22:22:57 +01:00
9e50382779
Remove redundant "Dual License" from debian/copyright
...
In machine-readable format, "or" already mean dual licensed.
Fixes harmless but annoying Lintian warning:
space-in-std-shortname-in-dep5-copyright x11 dual license
2018-05-10 22:22:19 +01:00
1173c652e9
Update to 4.16.8
...
Cleanup debian/changelog file
2018-05-10 16:46:46 +02:00
24b281238c
Update to 4.16.7
...
Refresh bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
Drop patches applied upstream related to CVE-2018-1093
Cleanup debian/changelog entries
2018-05-10 15:01:21 +02:00
3f624e1bcf
Update to 4.16.6
...
Cleanup debian/changelog file
Add CVE identifier for CVE-2018-10940
Add TODO item (ABI changes or ABI bump)
2018-05-10 08:59:32 +02:00
e2a9c8d8a2
dm: Enable DM_MQ_DEFAULT. This can be reverted using the kernel parameter: dm_mod.use_blk_mq=n
2018-05-10 01:46:15 +01:00
049487d882
SCSI: Enable SCSI_MQ_DEFAULT. This can be reverted using the kernel parameter: scsi_mod.use_blk_mq=n
2018-05-10 01:45:30 +01:00
f65f618689
rtl8192se: Fix warning introduced by "firmware: Remove redundant log messages from drivers"
...
The firmware file name is a local variable in both functions that
use it, and rtl92se_fw_cb() only uses it for the logging that we
remove.
2018-05-09 22:53:01 +01:00
a5394cbc13
[hppa/parisc64-smp] IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS
2018-05-09 22:48:55 +01:00
f4a882f016
Update to 4.17-rc4
2018-05-09 19:10:50 +01:00
29cddc8de8
[ia64] add compress-modules (fixes FTBFS)
2018-05-09 09:56:09 -04:00
b3be450737
Add build profile and config/defines for disabling linux-source
...
Add a new "pkg.linux.nosource" to let users disable building the
linux-source-* package, and allow to set "source: false" to modify
the default behaviour when no rofile is used.
When doing development builds this can save up to 15 minutes of build
time, especially on IO-strapped build workers.
2018-05-08 19:17:15 +01:00
923552dcc8
Reclassify lockdep packages as unversioned tools
...
The liblockdep<version> package is obviously versioned, but the others
aren't and it's not very useful to build just that one.
2018-05-08 17:01:41 +01:00
29c80ea278
Fix building only versioned tools packages
...
Modifying makeflags in do_main_makefile() only affects the
build-indep/binary-indep rules!
2018-05-08 16:59:02 +01:00
d8596b9773
[m68k] Enable CONFIG_PATA_GAYLE as module
2018-05-07 13:36:30 +02:00
c171f70365
[armhf] MFD: Enable MFD_TPS65217 ( Closes : #897590 )
...
This enables MFD TPS65217 that is the PMIC found on the BeagleBone
Black. So the board can be powered off safely.
2018-05-04 22:14:33 +02:00
00e2f5f30e
kbuild: use -fmacro-prefix-map to make __FILE__ a relative path
2018-05-02 23:47:40 +01:00
7e07ef0202
nodoc: don't build linux-doc and don't install tools documentation
...
Fully disable building and installing any documentation when the nodoc
build-profile is used.
Among other things this will help reducing build times when doing
development builds, especially on IO-limited build workers.
2018-05-02 12:59:55 +01:00
8a269b84e6
Add changelog entry for [armhf] DRM: Enable DW_HDMI_AHB_AUDIO and
...
DW_HDMI_CEC (Closes : #897204 ) by Romain Perier.
2018-04-30 11:24:39 -07:00
6856488bca
Prepare to release linux (4.17~rc3-1~exp1).
2018-04-30 00:13:06 +01:00
bb6c7da6fe
Update to 4.17-rc3
2018-04-30 00:12:50 +01:00
114088708f
Fix linux-doc, linux-manual, linux-source, linux-support package names
...
We don't want to include "-4.9" in them twice. Add a "source_basename"
template variable that excludes any version suffix in the source package
name.
(cherry picked from commit f3c51efdd6e9d0ce32ee5a0f998fdcda930a715c)
For master, nothing is immediately broken without this. Also we have
no longer build a linux-manual package. Change the changelog text
accordingly.
2018-04-29 21:19:11 +01:00
7b34ddf467
Add support for building only versioned tools packages
...
We already had support for disabling the tools build, used by
src:linux-grsec. However in this case, where we're using a different
based version to src:linux, we do still need to build the versioned
tools packages (linux-kbuild-4.9 and linux-perf-4.9). Split the
control template, config setting and rules accordingly.
(cherry picked from commit cb62c945f27ddee476631fa85c6aa67e50ed3bee)
2018-04-29 21:16:01 +01:00
634a2fc7db
Release linux (4.16.5-1).
...
-----BEGIN PGP SIGNATURE-----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=hQGL
-----END PGP SIGNATURE-----
Merge tag 'debian/4.16.5-1'
Release linux (4.16.5-1).
2018-04-29 21:09:11 +01:00
65b6c45811
Update to 4.17-rc2
2018-04-29 21:08:28 +01:00
f36c7f9bd9
Prepare to release linux (4.16.5-1).
2018-04-29 17:09:15 +01:00
f78b896b8b
debian/lib/python/debian_linux/gencontrol.py: Allow uploads to *-security with a simple revision
2018-04-28 21:42:12 +01:00
498cb2c129
Update to 4.16.5
2018-04-27 18:25:27 +01:00
5b54699034
ext4: fix bitmap position validation
...
Un-revert "ext4: add validity checks for bitmap block numbers" and
apply this new fix on top of it.
2018-04-27 18:08:44 +01:00
c3c6a03a9c
udeb: Add algif_skcipher to crypto-modules ( Closes : #896968 )
2018-04-27 00:05:25 +01:00
d2d240fc1b
Build-Dep on libelf-dev even for nopython/notools builds
...
libelf-dev is needed to build objtool when CONFIG_STACK_VALIDATION
and CONFIG_UNWINDER_ORC are enabled, which is currently the case.
Do not mark it as !nopython !pkg.linux.notools otherwise the build
will fail in a minimal chroot (pbuilder/etc).
2018-04-26 22:19:01 +01:00
019c1fa6f3
xfs: set format back to extents if xfs_bmap_extents_to_btree (CVE-2018-10323)
2018-04-25 21:23:07 +01:00
f78c3b3434
xfs: enhance dinode verifier (CVE-2018-10322)
2018-04-25 21:22:21 +01:00
9f2182e09a
Revert "ext4: add validity checks for bitmap block numbers", which caused a regression
2018-04-25 21:15:48 +01:00
98017b2bd7
Update to 4.16.4
2018-04-25 21:14:23 +01:00
f4dbf1aa82
debian/lib/python/debian_linux/debian.py: Fix binNMU revision parsing
...
In VersionLinux, any binNMU version will currently match the
revision_other group in the regexp and therefore never be recognised
as an experimental, security, or backport version. This is probably
harmless in practice because:
- binNMUs don't happen in those suites
- Only debian/bin/gencontrol.py cares about the linux_revision_other
attribute, and it won't be run for a binNMU version
But let's fix it by matching the binNMU suffix separately.
2018-04-24 20:40:27 +01:00
90f09743ec
debian/lib/python/debian_linux/debian.py: Fix binNMU changelog parsing
...
I incorrectly added a requirement of a newline after urgency in the
changelog entry top line as part of
"debian/lib/python/debian_linux/debian.py: Parse bottom lines of
changelog entries". For a binNMU, there will be ", binary-only=yes"
after the urgency. Since we don't currently care about any fields
after urgency, allow either a comma or newline.
2018-04-24 20:20:47 +01:00
5d952f897c
linux-kbuild: Update genksyms makefile to run flex and bison
...
The C code generated by these tools used to be included in the source
tree but has now been removed.
2018-04-20 03:38:54 +01:00
81d6f91e25
Clean up kconfig for 4.17
...
- Various ancient SCSI drivers were removed
- BT_HCIBTUART and INFINIBAND_CXGB3_DEBUG were removed
- OMAP_DM_TIMER is now an automatic symbol
- Marvell NAND driver was rewritten, so we enable MTD_NAND_MARVELL
instead of MTD_NAND_PXA3xx
- Various netfilter symbols are now boolean instead of tristate
2018-04-20 01:39:47 +01:00
1c1d5f2d95
Documentation: Update references to drivers/base/firmware_class.c
2018-04-20 00:57:50 +01:00
d04e628f00
Documentation: typec.rst: Use literal-block element with ascii art
...
This fixes a fatal error in the doc build process.
2018-04-20 00:50:39 +01:00
a5cb9ae406
debian/rules.real: Stop enabling verbose output for listnewconfig target
2018-04-19 23:46:11 +01:00
8457aba35f
Update to 4.17-rc1
...
- Drop patches included upstream
- Drop "Don't WARN about expected W+X pages on Xen"; the problem appears
to have been fixed by upstream commits 2cc42bac1c ("x86-64/Xen: eliminate
W+X mappings") and 672c0ae09b33 ("x86/mm: Consider effective protection
attributes in W+X check")
- Drop "Kbuild: kconfig: Verbose version of --listnewconfig"; it seems
redundant with upstream commit 17baab68d337 ("kconfig: extend output of
'listnewconfig'")
- Drop lockdown patch to drivers/scsi/eata.c; the driver was removed
upstream
- Refresh various other patches
2018-04-19 23:44:22 +01:00
84cc9cc225
Really apply the pending version change from sid branch
2018-04-19 23:35:36 +01:00
cb7c0036b0
Update to 4.16.3
2018-04-19 15:04:56 +01:00
ac5eca03c1
[x86,arm64] Disable code signing for upload to unstable
2018-04-19 14:51:22 +01:00
71f21e927e
For unstable, set ABI to 1 and remove ~exp1 suffix from version
2018-04-19 14:51:02 +01:00
fcb558d168
Merge branch 'sid'
...
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
0b520de976
Prepare to release linux (4.15.17-1).
2018-04-19 11:13:03 +01:00
4220b94e90
udeb: Add zstd_decompress to compress-modules and make squashfs-modules depend on it
...
zstd_decompress is now used by both btrfs and squashfs, so it needs
to be in a common dependency of their udebs.
2018-04-19 11:12:40 +01:00
cdd19a1d2d
udeb: Rename lzo-modules to compress-modules
2018-04-19 11:12:13 +01:00
8bf0fade16
[amd64] net: Enable AQTION as module
...
I'm enabling it in the top-level config, but currently it has
'depends on X86_64' so it will only be built for amd64.
References: https://lists.debian.org/CAMVG2svxkO42pr7VgjFxv1o5hiw9-1cAgBuhyEem1foTH2M6zw@mail.gmail.com
2018-04-19 00:23:00 +01:00
5014bbfd99
[arm64] PCI: Enable PCI_TEGRA ( Closes : #888817 )
2018-04-19 00:19:47 +01:00
ae9bb017a0
[arm64] Enable ARCH_SYNQUACER and related driver modules ( Closes : #891787 )
2018-04-19 00:15:08 +01:00
a529c97bc1
block: Enable BLK_SED_OPAL (except on armel)
2018-04-19 00:11:59 +01:00
Vagrant Cascadian
Romain Perier
Bastian Blank
Ben Hutchings
Salvatore Bonaccorso
Helge Deller
Yves-Alexis Perez
Hideki Yamane
YunQiang Su
Jason Duerstock
Luca Boccassi
John Paul Adrian Glaubitz