9b4f84faec
Ignore ABI changes in KVM
2016-12-09 23:05:09 +01:00
33f253b15d
[amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE
...
There are still binaries in stable that use vsyscall (via dietlibc).
Since dietlibc is statically linked and some of the packages are also
backported from unstable, we can't use versioned Breaks to force
upgrades.
2016-12-09 13:29:34 +00:00
37912077cd
Add previous change to debian/changelog
2016-12-09 12:12:16 +00:00
a462c39f5d
Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on incompatible mozjs
...
mozjs assumed VAs would never be wider than 47 bits. Add versioned
Breaks to force upgrades of those packages.
(luajit has the same problem but only the experimental version
supports arm64. I assume this will be fixed before it goes into
unstable, so we don't need it in Breaks.)
2016-12-09 12:07:18 +00:00
3a2602da33
Add ABI reference for 4.8.0-2
2016-12-09 06:22:56 +01:00
9287597ec2
debian/patches/features/all/rt/genpatch.py: Catch more specific exception class
...
Now that we use Python 3, we can simply catch FileNotFoundError
instead of checking the IOError error code.
2016-12-08 19:26:46 +00:00
465cba954c
debian/patches/features/all/rt/genpatch.py: Fix support for git repositories
...
- Wrap UTF-8 decoder around pipe from git, since pipes produce bytes in
Python 3
- Correct condition on number of arguments
2016-12-08 19:23:50 +00:00
be8be2cb5f
net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
2016-12-08 19:28:56 +01:00
3b66b4fcef
packet: fix race condition in packet_set_ring (CVE-2016-8655)
2016-12-07 10:34:33 +01:00
27fc4207c6
tipc: check minimum bearer MTU (CVE-2016-8632)
2016-12-07 10:31:56 +01:00
59ebe22f2f
Update to 4.8.12
2016-12-06 21:19:22 +01:00
8f06e2bdc6
[armel] dts: marvell: fix number of sata port for linkstation ls-gl
...
Closes : #845611
2016-12-06 08:38:19 +09:00
24fc851133
Prepare to release linux (4.9~rc8-1~exp1).
2016-12-05 05:02:30 +00:00
41004b49b6
[sparc64] Don't re-add exports of string functions that are now only defined as macros
...
Together with fixes to DMA address types in 4.9-rc8, this should fix
the previous FTBFS.
2016-12-05 01:45:33 +00:00
251382a142
[arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS)
2016-12-05 01:45:33 +00:00
b3906798a8
Revert "default exported asm symbols to zero"
2016-12-05 01:07:36 +00:00
1c1ab88dbe
Update to 4.9-rc8
2016-12-05 01:02:03 +00:00
cb8d2ff783
debian/control: Fix build-dependency on flex to work with new versions that have M-A: allowed
2016-12-05 00:59:45 +00:00
086dccbdfe
[armhf] dts: armada-385: add support for Turris Omnia
2016-12-04 21:18:15 +01:00
aa27137298
[amd64] Remove xen-linux-system-<version> package
...
Since there are no amd64 kernel configurations without Xen dom0
support, these meta-packages don't provide much value any more.
2016-12-04 16:21:18 +00:00
7e80c27706
radeon: Update package name in error message for missing firmware
2016-12-03 03:30:15 +00:00
8b6cd20174
Prepare to release linux (4.9~rc7-1~exp1).
2016-12-03 01:46:12 +00:00
34594185e1
Drop "default exported asm symbols to zero"
...
This caused *all* symbol version CRCs to be zero in modules on amd64.
2016-12-03 01:45:17 +00:00
2431e89ed3
Update fixes for exported symbol versions
...
Linus has re-enable CONFIG_MODVERSIONS, but also weakened the version
matching. Apply his match but then revert the weakening.
Also add a proposed fix for missing version CRCs, which gives them a
default value of zero. Since buildcheck.py now checks for this, we
should detect all unversioned symbols at build time.
2016-12-02 23:13:17 +00:00
8789780466
Release linux (4.8.11-1).
...
-----BEGIN PGP SIGNATURE-----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=itOd
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.11-1'
Ignore ABI bump.
Drop the new patches, all upstream already.
2016-12-02 20:44:26 +00:00
489dc40883
Prepare to release linux (4.8.11-1).
2016-12-02 06:35:22 +01:00
ab01013e14
[powerpc*] Fix more exported symbol versions
2016-12-02 02:49:08 +00:00
2661eeaf78
debian/bin/buildcheck.py: Add check for symbols with version CRC of 0
2016-12-02 02:49:08 +00:00
aca57cd0d7
Fix patch header for "x86/kbuild: enable modversions for symbols exported from asm"
2016-12-02 02:49:08 +00:00
aa461be2cb
Add patch reverting s390 asm symbol export changes, missed from previous commit
2016-12-02 02:49:08 +00:00
54d0756a33
Fix exported symbol versions
...
- Revert upstream changes moving exports to assembly sources
- [x86] kbuild: enable modversions for symbols exported from assembly
- Revert "Fix subtle CONFIG_MODVERSIONS problems"
This leaves powerpc and x86 as the only kernel architectures that
export symbols from assembly, and <asm/asm-prototypes.h> for those
two appear to define prototypes for all the functions that are used.
2016-12-02 00:19:09 +00:00
67d96bc121
Update to 4.9-rc7
...
This has a different fix for the missing modversions on ARM.
2016-12-01 20:08:58 +00:00
eeb496a241
linux-headers-common: Make these packages architecture-independent
...
Include headers for all architectures that we build a kernel for.
This allows co-installation of per-flavour header packages for
multiple Debian architectures, and fixes the problem of arm64 headers
depending on arm headers that we did not include.
2016-12-01 20:08:30 +00:00
48f370b3c2
debian_linux.gencontrol: Add support for arch-indep per-featureset packages
2016-12-01 19:49:59 +00:00
ceb75c4337
mnt: Add a per mount namespace limit on the number of mounts (CVE-2016-6213)
2016-11-30 16:15:29 +01:00
b67bd212fa
vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083 CVE-2016-9084)
2016-11-30 09:15:19 +01:00
609f818472
mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
2016-11-30 09:04:11 +01:00
1a0657ea1a
[arm64] Enable ARCH_MVEBU and related options
...
Enable ARCH_MVEBU for 64-bit ARM. While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
04624dfa7e
[arm64] Enable more QCOM options
...
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
f82ecfdc9e
Update to 4.8.11
2016-11-29 20:30:13 +01:00
3536d5d7a6
Update to 4.8.10
2016-11-28 21:10:27 +01:00
a559c41683
Update to 4.8.9
2016-11-26 17:37:18 +01:00
b69731a96b
Add CVE reference for CVE-2016-9555
2016-11-23 06:21:23 +01:00
fa9e148da4
Update to 4.9-rc6
2016-11-21 23:52:49 +00:00
0971da3b71
[armhf,armel] fix CRC generation for modules
2016-11-19 17:06:08 +01:00
85deb5386a
[x86] video: Disable X86_SYSFB, FB_SIMPLE ( Closes : #822575 )
2016-11-16 21:35:16 +00:00
2d21aaf508
[arm64] Enable more drivers for X-Gene (Really closes : #840061 )
2016-11-16 21:22:18 +00:00
96f3d8b5c3
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" ( Closes : #844491 )
2016-11-16 21:18:15 +00:00
b7117071e0
fs: Avoid premature clearing of capabilities (CVE-2015-1350)
...
Closes : #770492
2016-11-16 19:23:06 +01:00
b048cc5a7c
fs: Give dentry to inode_change_ok() instead of inode
2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso
Ben Hutchings
Roger Shimizu
Uwe Kleine-König
Martin Michlmayr