Commit Graph

8059 Commits

Author SHA1 Message Date
Romain Perier 3230e66a9c Update to 4.17-rc6 2018-05-24 18:39:42 +02:00
Ben Hutchings cb55017d9c [x86] KVM: VMX: Expose SSBD properly to guests. 2018-05-23 00:45:33 +02:00
Salvatore Bonaccorso 0e0b695e53 Update to 4.16.11
Revert "[x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)"

Cleanup debian/changelog file
2018-05-22 21:03:43 +02:00
Ben Hutchings 975e4433ed [x86] Add support for disabling Speculative Store Bypass (CVE-2018-3639)
Apply all the SSB-related patches pending for 4.16-stable.
2018-05-22 12:26:02 +02:00
Ben Hutchings baa5254a6f [rt] Update to 4.16.8-rt3 2018-05-22 00:55:31 +02:00
Ben Hutchings b1a9e2470a Update to 4.16.10 2018-05-22 00:49:31 +02:00
Yves-Alexis Perez 1bdb99105c tune changelog to fit latest commit 2018-05-21 16:32:58 +02:00
Hideki Yamane c5271ac5c2 Note to close #898629 2018-05-20 21:35:15 +09:00
Hideki Yamane 8cd0f39aad Note how to revert config option for battery 2018-05-20 21:27:27 +09:00
Yves-Alexis Perez ab436fc35b hardening: enable REFCOUNT_FULL and FORTIFY_SOURCE, disabled HARDENED_USERCOPY_FALLBACK 2018-05-19 11:26:45 +02:00
Vagrant Cascadian 66f8fb08ec [armhf] Update mtd-modules: Replace pxa3xx_nand with marvell_nand. 2018-05-18 14:45:57 -07:00
Ben Hutchings 1c53205545 Merge branch 'patch-1' into 'master'
[mips*r6*]Enable MIPS_CPS for Boston

See merge request kernel-team/linux!23
2018-05-18 10:33:14 +00:00
Salvatore Bonaccorso c2dbc30362 proc: do not access cmdline nor environ from file-backed areas (CVE-2018-1120) 2018-05-17 23:15:48 +02:00
YunQiang Su 5e03b26fab [mips*r6*]Enable MIPS_CPS for Boston 2018-05-17 14:32:19 +08:00
Ben Hutchings 45c6ddad0b Update to 4.17-rc5 2018-05-16 22:31:42 +01:00
YunQiang Su b968d18584 [mips{,64}r6{,el}] use boston as the target
Add a patch to disable uImage generation to avoid depend on u-boot-tools
Fix typo the EL's flavor names in installer: not same within defines
Malta is never used for r6. (Closes: #898523)
Boston also requires relocation table size >= 0x00121000
2018-05-14 16:26:26 +08:00
YunQiang Su ecefd63ffc loongson-3: enable NUMA, CPU_PM, CPU_IDLE, RS780_HPET, REGULATOR 2018-05-14 15:59:09 +08:00
Ben Hutchings 9deec69be4 Bump ABI to 2 2018-05-13 01:14:24 +01:00
Salvatore Bonaccorso 9febee02d1 mm, oom: fix concurrent munlock and oom reaper unmap (CVE-2018-1000200) 2018-05-12 16:49:55 +02:00
Salvatore Bonaccorso 5903405411 [rt] certs: Reference certificate for test key used in Debian signing service 2018-05-12 10:20:40 +02:00
Salvatore Bonaccorso 5f1b90fa69 Update to 4.16.7-rt1 and reenable 2018-05-12 10:14:20 +02:00
Ben Hutchings 569ca4dfa0 Merge branch 'master' into 'master'
[ia64] add compress-modules (fixes FTBFS)

See merge request kernel-team/linux!16
2018-05-11 19:23:34 +00:00
Jason Duerstock 19d39cc961 Correct changelog entry 2018-05-11 14:29:08 +00:00
Luca Boccassi 8102eefaf5 Add missing Copyright line to debian/copyright
Another harmless but annoying Lintian source warning:
 missing-field-in-dep5-copyright copyright
2018-05-10 22:22:57 +01:00
Luca Boccassi 9e50382779 Remove redundant "Dual License" from debian/copyright
In machine-readable format, "or" already mean dual licensed.
Fixes harmless but annoying Lintian warning:
 space-in-std-shortname-in-dep5-copyright x11 dual license
2018-05-10 22:22:19 +01:00
Salvatore Bonaccorso 1173c652e9 Update to 4.16.8
Cleanup debian/changelog file
2018-05-10 16:46:46 +02:00
Salvatore Bonaccorso 24b281238c Update to 4.16.7
Refresh bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch

Drop patches applied upstream related to CVE-2018-1093

Cleanup debian/changelog entries
2018-05-10 15:01:21 +02:00
Salvatore Bonaccorso 3f624e1bcf Update to 4.16.6
Cleanup debian/changelog file

Add CVE identifier for CVE-2018-10940

Add TODO item (ABI changes or ABI bump)
2018-05-10 08:59:32 +02:00
Ben Hutchings e2a9c8d8a2 dm: Enable DM_MQ_DEFAULT. This can be reverted using the kernel parameter: dm_mod.use_blk_mq=n 2018-05-10 01:46:15 +01:00
Ben Hutchings 049487d882 SCSI: Enable SCSI_MQ_DEFAULT. This can be reverted using the kernel parameter: scsi_mod.use_blk_mq=n 2018-05-10 01:45:30 +01:00
Ben Hutchings f65f618689 rtl8192se: Fix warning introduced by "firmware: Remove redundant log messages from drivers"
The firmware file name is a local variable in both functions that
use it, and rtl92se_fw_cb() only uses it for the logging that we
remove.
2018-05-09 22:53:01 +01:00
Ben Hutchings a5394cbc13 [hppa/parisc64-smp] IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS 2018-05-09 22:48:55 +01:00
Ben Hutchings f4a882f016 Update to 4.17-rc4 2018-05-09 19:10:50 +01:00
Jason Duerstock 29cddc8de8 [ia64] add compress-modules (fixes FTBFS) 2018-05-09 09:56:09 -04:00
Luca Boccassi b3be450737 Add build profile and config/defines for disabling linux-source
Add a new "pkg.linux.nosource" to let users disable building the
linux-source-* package, and allow to set "source: false" to modify
the default behaviour when no rofile is used.
When doing development builds this can save up to 15 minutes of build
time, especially on IO-strapped build workers.
2018-05-08 19:17:15 +01:00
Ben Hutchings 923552dcc8 Reclassify lockdep packages as unversioned tools
The liblockdep<version> package is obviously versioned, but the others
aren't and it's not very useful to build just that one.
2018-05-08 17:01:41 +01:00
Ben Hutchings 29c80ea278 Fix building only versioned tools packages
Modifying makeflags in do_main_makefile() only affects the
build-indep/binary-indep rules!
2018-05-08 16:59:02 +01:00
John Paul Adrian Glaubitz d8596b9773 [m68k] Enable CONFIG_PATA_GAYLE as module 2018-05-07 13:36:30 +02:00
Romain Perier c171f70365 [armhf] MFD: Enable MFD_TPS65217 (Closes: #897590)
This enables MFD TPS65217 that is the PMIC found on the BeagleBone
Black. So the board can be powered off safely.
2018-05-04 22:14:33 +02:00
Ben Hutchings 00e2f5f30e kbuild: use -fmacro-prefix-map to make __FILE__ a relative path 2018-05-02 23:47:40 +01:00
Luca Boccassi 7e07ef0202 nodoc: don't build linux-doc and don't install tools documentation
Fully disable building and installing any documentation when the nodoc
build-profile is used.
Among other things this will help reducing build times when doing
development builds, especially on IO-limited build workers.
2018-05-02 12:59:55 +01:00
Vagrant Cascadian 8a269b84e6 Add changelog entry for [armhf] DRM: Enable DW_HDMI_AHB_AUDIO and
DW_HDMI_CEC (Closes: #897204) by Romain Perier.
2018-04-30 11:24:39 -07:00
Ben Hutchings 6856488bca Prepare to release linux (4.17~rc3-1~exp1). 2018-04-30 00:13:06 +01:00
Ben Hutchings bb6c7da6fe Update to 4.17-rc3 2018-04-30 00:12:50 +01:00
Ben Hutchings 114088708f Fix linux-doc, linux-manual, linux-source, linux-support package names
We don't want to include "-4.9" in them twice.  Add a "source_basename"
template variable that excludes any version suffix in the source package
name.

(cherry picked from commit f3c51efdd6e9d0ce32ee5a0f998fdcda930a715c)

For master, nothing is immediately broken without this.  Also we have
no longer build a linux-manual package.  Change the changelog text
accordingly.
2018-04-29 21:19:11 +01:00
Ben Hutchings 7b34ddf467 Add support for building only versioned tools packages
We already had support for disabling the tools build, used by
src:linux-grsec.  However in this case, where we're using a different
based version to src:linux, we do still need to build the versioned
tools packages (linux-kbuild-4.9 and linux-perf-4.9).  Split the
control template, config setting and rules accordingly.

(cherry picked from commit cb62c945f27ddee476631fa85c6aa67e50ed3bee)
2018-04-29 21:16:01 +01:00
Ben Hutchings 634a2fc7db Release linux (4.16.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlrmIuQACgkQ57/I7JWG
 EQl34hAAiQMv+LrOJsingSeIxmPM2q+FktFykdjTNsjcyEZ5pSfhj8T4fc4hZHZp
 uXOMV4+lfNSCQF9agPsYcTvm6Md7VqMCMjFOmM6GdUrIc7kDnZEheA1ZTFuZzOVv
 Heh88tDu6Zl2vqPbt+81Ah3N/lSyCVA5jVF0K4RYUe1Gs7YFTqaJdPZi8wP7I9Os
 GwvY41auQFNdTQfIpdB1dISQVtfAZT8cg+c/fGUNPhJWqFnjMeYhBoQWRKPATp4/
 NNJNAEOU7K0zpooCCAH5zK03T6bpt64GOJx/gDMyaqdlAd3LbLiCQP09tS3OVqQS
 qAm7I0STnM3oD0D1uk+OPo8Cxeu3V/4kHwYH59G/EwyYa7rJxrThQSvTZCxEdKuK
 REr2aPe6doW7x45yhL+R3ZKJDLsdVJkkutpCXhdqnwAUnXITUR4PprNd4l6tc5nC
 IzZM5Il7nAx3LWB2Xtz4iGykQVAyXdpDKXjCJgarTI4kG49iitCq1eRJHi5jFVJw
 7iuIgZmjFBWx6bzifhNBg0oUG3R7hEitzaqJ0G1jX+FRVfOOr+an+txZEVyJuqsw
 3FDI8kJClXVB6kNAPgEQWPh3Cdh63s69qVLZZTGujgLHMXv833MbBHIV3KR+7YNS
 uKfzJNSglCIKf3LVKRUSHJyfYJTV+iS4ioHVjn8B7fc0YCdXQpg=
 =hQGL
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.16.5-1'

Release linux (4.16.5-1).
2018-04-29 21:09:11 +01:00
Ben Hutchings 65b6c45811 Update to 4.17-rc2 2018-04-29 21:08:28 +01:00
Ben Hutchings f36c7f9bd9 Prepare to release linux (4.16.5-1). 2018-04-29 17:09:15 +01:00
Ben Hutchings f78b896b8b debian/lib/python/debian_linux/gencontrol.py: Allow uploads to *-security with a simple revision 2018-04-28 21:42:12 +01:00
Ben Hutchings 498cb2c129 Update to 4.16.5 2018-04-27 18:25:27 +01:00
Ben Hutchings 5b54699034 ext4: fix bitmap position validation
Un-revert "ext4: add validity checks for bitmap block numbers" and
apply this new fix on top of it.
2018-04-27 18:08:44 +01:00
Ben Hutchings c3c6a03a9c udeb: Add algif_skcipher to crypto-modules (Closes: #896968) 2018-04-27 00:05:25 +01:00
Luca Boccassi d2d240fc1b Build-Dep on libelf-dev even for nopython/notools builds
libelf-dev is needed to build objtool when CONFIG_STACK_VALIDATION
and CONFIG_UNWINDER_ORC are enabled, which is currently the case.
Do not mark it as !nopython !pkg.linux.notools otherwise the build
will fail in a minimal chroot (pbuilder/etc).
2018-04-26 22:19:01 +01:00
Ben Hutchings 019c1fa6f3 xfs: set format back to extents if xfs_bmap_extents_to_btree (CVE-2018-10323) 2018-04-25 21:23:07 +01:00
Ben Hutchings f78c3b3434 xfs: enhance dinode verifier (CVE-2018-10322) 2018-04-25 21:22:21 +01:00
Ben Hutchings 9f2182e09a Revert "ext4: add validity checks for bitmap block numbers", which caused a regression 2018-04-25 21:15:48 +01:00
Ben Hutchings 98017b2bd7 Update to 4.16.4 2018-04-25 21:14:23 +01:00
Ben Hutchings f4dbf1aa82 debian/lib/python/debian_linux/debian.py: Fix binNMU revision parsing
In VersionLinux, any binNMU version will currently match the
revision_other group in the regexp and therefore never be recognised
as an experimental, security, or backport version.  This is probably
harmless in practice because:

- binNMUs don't happen in those suites
- Only debian/bin/gencontrol.py cares about the linux_revision_other
  attribute, and it won't be run for a binNMU version

But let's fix it by matching the binNMU suffix separately.
2018-04-24 20:40:27 +01:00
Ben Hutchings 90f09743ec debian/lib/python/debian_linux/debian.py: Fix binNMU changelog parsing
I incorrectly added a requirement of a newline after urgency in the
changelog entry top line as part of
"debian/lib/python/debian_linux/debian.py: Parse bottom lines of
changelog entries".  For a binNMU, there will be ", binary-only=yes"
after the urgency.  Since we don't currently care about any fields
after urgency, allow either a comma or newline.
2018-04-24 20:20:47 +01:00
Ben Hutchings 5d952f897c linux-kbuild: Update genksyms makefile to run flex and bison
The C code generated by these tools used to be included in the source
tree but has now been removed.
2018-04-20 03:38:54 +01:00
Ben Hutchings 81d6f91e25 Clean up kconfig for 4.17
- Various ancient SCSI drivers were removed
- BT_HCIBTUART and INFINIBAND_CXGB3_DEBUG were removed
- OMAP_DM_TIMER is now an automatic symbol
- Marvell NAND driver was rewritten, so we enable MTD_NAND_MARVELL
  instead of MTD_NAND_PXA3xx
- Various netfilter symbols are now boolean instead of tristate
2018-04-20 01:39:47 +01:00
Ben Hutchings 1c1d5f2d95 Documentation: Update references to drivers/base/firmware_class.c 2018-04-20 00:57:50 +01:00
Ben Hutchings d04e628f00 Documentation: typec.rst: Use literal-block element with ascii art
This fixes a fatal error in the doc build process.
2018-04-20 00:50:39 +01:00
Ben Hutchings a5cb9ae406 debian/rules.real: Stop enabling verbose output for listnewconfig target 2018-04-19 23:46:11 +01:00
Ben Hutchings 8457aba35f Update to 4.17-rc1
- Drop patches included upstream
- Drop "Don't WARN about expected W+X pages on Xen"; the problem appears
  to have been fixed by upstream commits 2cc42bac1c ("x86-64/Xen: eliminate
  W+X mappings") and 672c0ae09b33 ("x86/mm: Consider effective protection
  attributes in W+X check")
- Drop "Kbuild: kconfig: Verbose version of --listnewconfig"; it seems
  redundant with upstream commit 17baab68d337 ("kconfig: extend output of
  'listnewconfig'")
- Drop lockdown patch to drivers/scsi/eata.c; the driver was removed
  upstream
- Refresh various other patches
2018-04-19 23:44:22 +01:00
Ben Hutchings 84cc9cc225 Really apply the pending version change from sid branch 2018-04-19 23:35:36 +01:00
Ben Hutchings cb7c0036b0 Update to 4.16.3 2018-04-19 15:04:56 +01:00
Ben Hutchings ac5eca03c1 [x86,arm64] Disable code signing for upload to unstable 2018-04-19 14:51:22 +01:00
Ben Hutchings 71f21e927e For unstable, set ABI to 1 and remove ~exp1 suffix from version 2018-04-19 14:51:02 +01:00
Ben Hutchings fcb558d168 Merge branch 'sid'
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
  applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
  selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
  options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
Ben Hutchings 0b520de976 Prepare to release linux (4.15.17-1). 2018-04-19 11:13:03 +01:00
Ben Hutchings 4220b94e90 udeb: Add zstd_decompress to compress-modules and make squashfs-modules depend on it
zstd_decompress is now used by both btrfs and squashfs, so it needs
to be in a common dependency of their udebs.
2018-04-19 11:12:40 +01:00
Ben Hutchings cdd19a1d2d udeb: Rename lzo-modules to compress-modules 2018-04-19 11:12:13 +01:00
Ben Hutchings 8bf0fade16 [amd64] net: Enable AQTION as module
I'm enabling it in the top-level config, but currently it has
'depends on X86_64' so it will only be built for amd64.

References: https://lists.debian.org/CAMVG2svxkO42pr7VgjFxv1o5hiw9-1cAgBuhyEem1foTH2M6zw@mail.gmail.com
2018-04-19 00:23:00 +01:00
Ben Hutchings 5014bbfd99 [arm64] PCI: Enable PCI_TEGRA (Closes: #888817) 2018-04-19 00:19:47 +01:00
Ben Hutchings ae9bb017a0 [arm64] Enable ARCH_SYNQUACER and related driver modules (Closes: #891787) 2018-04-19 00:15:08 +01:00
Ben Hutchings a529c97bc1 block: Enable BLK_SED_OPAL (except on armel) 2018-04-19 00:11:59 +01:00
Ben Hutchings b776a2b257 squashfs: Enable SQUASHFS_ZSTD (Closes: #883410) 2018-04-19 00:03:22 +01:00
Ben Hutchings fc0c66ddb9 ath9k_htc: Fix regression in 4.15, thanks to Ben Caradoc-Davies (Closes: #891060)
- mac80211: add ieee80211_hw flag for QoS NDP support
- ath9k_htc: use non-QoS NDP for AP probing
2018-04-19 00:01:09 +01:00
Ben Hutchings 4bb4183118 [x86] platform: Enable DELL_SMBIOS_SMM, DELL_SMBIOS_WMI as modules (closes: #893976) 2018-04-18 23:52:47 +01:00
Ben Hutchings f3cb525153 [x86] net: Enable THUNDERBOLT_NET as module (Closes: #894310) 2018-04-18 23:50:16 +01:00
Ben Hutchings 91b60c01c7 [arm64] net/phy: Enable MDIO_BUS_MUX_MMIOREG as module (Closes: #894336) 2018-04-18 23:47:39 +01:00
Ben Hutchings 9926a8790e w1: Enable all "slave" device drivers (Closes: #895340) 2018-04-18 23:39:48 +01:00
Ben Hutchings 95cf0f2687 [x86] Enable MFD_AXP20X_I2C, AXP288_FUEL_GAUGE as modules (Closes: #895129) 2018-04-18 23:31:26 +01:00
Ben Hutchings 0fefb6932b SCSI: Enable SCSI_SYM53C8XX_2 as module on all architectures (Closes: #895532) 2018-04-18 23:27:21 +01:00
Ben Hutchings 31ed54f425 udeb: Move arc4 and ecb from nic-wireless-modules to crypto-modules (Closes: #895362) 2018-04-18 23:24:08 +01:00
Ben Hutchings e663157b88 [arm*] iio: Enable DHT11 as module (Closes: #873176) 2018-04-18 22:33:41 +01:00
Ben Hutchings 7c4275d142 [armhf] udeb: Add i2c-exynos5 to i2c-modules (Closes: #895976) 2018-04-18 22:28:53 +01:00
Ben Hutchings ba793f6361 [armel/marvell] linux-image: Replace supported model list with wiki link 2018-04-18 22:12:35 +01:00
Uwe Kleine-König a8c6014b43 [amd64] enable AMD 10GbE Ethernet driver (CONFIG_AMD_XGBE=m) 2018-04-18 17:16:16 +02:00
Helge Deller f147fe68c4 [hppa] Switch to self-decompressing kernel 2018-04-18 08:34:17 +02:00
Ben Hutchings 9f5a30bb07 Add various security fixes 2018-04-18 00:11:35 +01:00
Ben Hutchings bf94bb5914 Bump ABI to 3 2018-04-17 23:58:30 +01:00
Ben Hutchings 66b63716aa Update to 4.15.17 2018-04-17 23:43:11 +01:00
Ben Hutchings 2082e2d5af linux-headers: Change linux-kbuild dependency to be versioned
In case we ever have another bug fix where we want to force rebuilding
out-of-tree modules (like for the addition of retpoline), we should
ensure that they are built using an updated linux-kbuild.

Since linux-kbuild packages are built from src:linux, we can simply
require at least the same source version.  (linux-headers and
linux-kbuild can come from different architectures so we must not use
binary:Version here.)
2018-04-16 23:23:06 +01:00
Ben Hutchings 083ddaa564 Add support for compilers installed outside the default PATH
The obvious way to do this is to edit the PATH in .kernelvariables.
But this obvious way doesn't work due to a bug in make (#895835).

(cherry picked from commit 4c6213fbbbff44710dda2091a7b26e0f0ea0a610)
2018-04-16 23:15:33 +01:00
Salvatore Bonaccorso a325681bab [arm64] net: hns: Fix ethtool private flags (CVE-2017-18222) 2018-04-15 20:58:48 +02:00
Salvatore Bonaccorso f5b6a35cad media: usbtv: prevent double free in error case (CVE-2017-17975) 2018-04-15 20:52:17 +02:00
Salvatore Bonaccorso 8e41f67460 drm/nouveau/mmu: ALIGN_DOWN correct variable
Closes: #895750
2018-04-15 20:33:52 +02:00
Roger Shimizu 926704f2b9 [armel] Add dependency of udeb to fix FTBFS
* [armel] Add dependency of udeb modules (fixes FTBFS):
  - Add lzo_decompress to lzo-modules.
  - Add cmdlinepart to mtd-modules.
* [armel] Add dependency of udeb packages (fixes FTBFS):
  - Add package dependency of mtd-modules to jffs2-modules.
  - Add package dependency of lzo-modules to squashfs-modules.

(cherry picked from commit 175171d42d)
2018-04-16 00:16:47 +09:00
Roger Shimizu 175171d42d [armel] Add dependency of udeb to fix FTBFS
* [armel] Add dependency of udeb modules (fixes FTBFS):
  - Add lzo_decompress to lzo-modules.
  - Add cmdlinepart to mtd-modules.
* [armel] Add dependency of udeb packages (fixes FTBFS):
  - Add package dependency of mtd-modules to jffs2-modules.
  - Add package dependency of lzo-modules to squashfs-modules.
2018-04-14 22:38:57 +09:00
Vagrant Cascadian f68523c82b [arm64] Add patch enabling simplefb LCD on A64. 2018-04-13 20:34:07 -07:00
Vagrant Cascadian 846bba8048 [arm64] Enable features to support Pinebook and other A64 systems:
CONFIG_USB_MUSB_HDRC, CONFIG_USB_MUSB_SUNXI, CONFIG_SUN8I_DE2_CCU,
CONFIG_DMA_SUN6I
2018-04-13 20:20:55 -07:00
Ben Hutchings d948b7a44d wireless: Add Debian wireless-regdb certificates (see #892229) 2018-04-13 20:22:12 +01:00
Vagrant Cascadian 10b9c6345e [armhf] Add patch to fix loading of imx6q-cpufreq module. 2018-04-12 01:12:40 -07:00
James Clarke 12dee9d0f8 [ia64] Drop nic-modules Depends overrides (fixes FTBFS)
The overridden Depends is missing i2c-modules, and includes the no longer
present core-modules, so just use the standard Depends instead which does not
have these issues.
2018-04-11 11:47:17 +01:00
Vagrant Cascadian 4ece70b07d [arm64] Add patches to support SATA on Tegra210/Jetson-TX1. 2018-04-10 13:14:24 -07:00
Ben Hutchings 39213877ab aufs: Update support patchset to aufs4.16-20180409 (no functional change) 2018-04-08 20:06:10 +02:00
Ben Hutchings 51c5591ed2 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
(cherry picked from commit 809a0521f8)

I already did this on the sid branch but for some reason it didn't get
merged to master.
2018-04-08 20:04:22 +02:00
Ben Hutchings 672b1476ef Prepare to release linux (4.16-1~exp1). 2018-04-08 14:44:18 +02:00
Ben Hutchings 82596c5122 integrity: Disable IMA until it works properly with lockdown
Enabing CONFIG_IMA, CONFIG_MODULE_SIG and lockdown currently breaks module
loading with finit_module().
2018-04-08 14:43:46 +02:00
Ben Hutchings ef9c7e11c5 certs: Add certificate for test key used in Debian signing service 2018-04-08 14:39:52 +02:00
Ben Hutchings 7628c027f4 [x86,arm64] Enable code signing again 2018-04-08 10:31:20 +02:00
Ben Hutchings e85bd66dc5 debian/bin/gencontrol_signed.py: Copy maintainer and date into template's changelog 2018-04-08 10:31:20 +02:00
Ben Hutchings a7e85cb155 debian/lib/python/debian_linux/debian.py: Parse bottom lines of changelog entries
Changelog doesn't currently provide access to the maintainer
name/address and date.  We need this when updating the signed template
changelog.

While we're at it, make sure we don't ignore any important lines.
Anything beginning with exactly zero or one spaces is a top or bottom
line, respectively; anything else is internal text we can ignore.
2018-04-08 10:31:20 +02:00
Ben Hutchings 3b3e6ad4cb Use a dummy build profile for udebs that we test-build before signing
debhelper no longer fully trusts the package list specified with -p,
but only processes packages that are listed in debian/control and
enabled in the current build profile.  This breaks the test build of
udebs that we build for real after code signing.

Work around this by adding the udebs to the control file, conditional
on a new build profile (pkg.linux.udeb-unsigned-test-build).  Override
the build profile during the test build.
2018-04-08 10:31:20 +02:00
Ben Hutchings be394a26da Add template source package to support code signing 2018-04-08 10:31:20 +02:00
Ben Hutchings f980187986 debian/rules.d/tools/lib/lockdep/Makefile: Fix repeated 'make install'
Currently the 'ln -s' command fails when run a second time.  Add the
-f option to fix this.
2018-04-08 10:31:19 +02:00
Ben Hutchings 354e9c4806 debian/lib/python/debian_linux/debian.py: Allow parsing any file as changelog 2018-04-08 10:31:19 +02:00
Ben Hutchings 09697cfec7 debian/lib/python/debian_linux/debian.py: Close changelog after parsing 2018-04-08 10:31:19 +02:00
Ben Hutchings e120f06587 debian/lib/python/debian_linux/gencontrol.py: Allow overriding output filenames 2018-04-08 10:31:19 +02:00
Ben Hutchings a25eb38372 debian/config: Rename [build]signed-modules setting to signed-code
This setting controls code signing in general, not just modules.
2018-04-08 10:30:49 +02:00
Jeremy Stanley 215951c4a8 [x86] Enable CONFIG_PWM_LPSS_PLATFORM as a module
Provides support for the low-level power subsystem handling
backlight control on GPD Pocket UMPC systems. Also enable its
dependency CONFIG_PWM=y (Closes: #895164).
2018-04-08 01:42:12 +00:00
Jeremy Stanley 3ef59ddc39 [x86] Enable CONFIG_INTEL_INT0002_VGPIO as a module
Provides support for the Bay Trail/Cherry Trail virtual GPIO
controller to handle power events on GPD Pocket UMPC systems.
2018-04-08 01:42:12 +00:00
Jeremy Stanley e70195604f [x86] Enable CONFIG_REGULATOR
This is needed to build the already enabled CONFIG_INTEL_CHT_INT33FE
module which provides support for the ACPI interface on GPD Pocket
UMPC systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9d053a8255 [x86] Enable CONFIG_TYPEC_FUSB302 as a module
Provides support for the USB type-C interface on GPD Pocket UMPC
systems. Also enable its dependencies CONFIG_TYPEC=m and
CONFIG_TYPEC_TCPM=m.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 7ef6ea60ce [x86] Enable CONFIG_BATTERY_MAX17042 as a module
Provides support for the battery level monitor on GPD Pocket UMPC
systems.
2018-04-08 01:42:11 +00:00
Jeremy Stanley 9e5d5923e3 [x86] Enable CONFIG_CHARGER_BQ24190 as a module
Provides support for the battery charger on GPD Pocket UMPC systems.
Also enable its dependencies CONFIG_EXTCON=m,
CONFIG_EXTCON_INTEL_CHT_WC=m, CONFIG_I2C_CHT_WC=m and
CONFIG_INTEL_SOC_PMIC_CHTWC=y.
2018-04-08 01:42:11 +00:00
Ben Hutchings 765677fc1f Update to 4.16 2018-04-07 20:29:53 +02:00
Roger Shimizu d192eb7555 [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.

(cherry picked from commit a4fdfa09ce)
2018-04-07 21:51:24 +09:00
Roger Shimizu a4fdfa09ce [armel] Change size limit of armel kernel image back to 2097080
Reduce armel image size by:
- Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
- Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
  built-in to module.
- Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.

So qnap support is back.

Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.
2018-04-07 19:53:33 +09:00
Sjoerd Simons db401171be Enable CONFIG_DRM_DP_AUX_CHARDEV (Closes: #890235)
Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
2018-04-06 16:34:32 +02:00
Riku Voipio db95598aa8 [armhf] update changelog with dove cubox support
Accidentally missed from the previous patch
2018-04-06 12:29:01 +03:00
Ben Hutchings 6b8b6f7948 wireless: Disable regulatory.db direct loading (see #892229) 2018-04-05 21:34:14 +02:00
Roger Shimizu ab4260743a Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"

(cherry picked from commit b0a94d07b4)
2018-03-23 21:17:45 +09:00
Roger Shimizu b0a94d07b4 Bring back armel build by extending the size limit for kernel image
Extend the size limit for kernel image, from 2097080 to 2729712.
This will break a few qnap devices, but keep other armel devices
running.

Also revert two commits that disabled armel previously:
- [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
- [5f62872] "(Temporarily) disable armel kernel image build"
2018-03-23 21:11:08 +09:00
Ben Hutchings 957b707ff1 Prepare to release linux (4.16~rc6-1~exp1). 2018-03-20 13:52:03 +00:00
Ben Hutchings 630c3f806d Release linux (4.15.11-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqwxttfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EA+AP/3w06dM1NGmIwjmKWtFDpYrrPLz/vtGG
 g/QHFtFGpGQdbzC2O6OULe3z/M63AlNJ6d1VG9OnDcbgsr2eXxHy+021LvtucWK2
 wtKtNJVz6VQ7XtfccsYqcAhqQq22tS5lEqPxMmRAz9SUPuG823B0LH0LXQwvRCiA
 4PeVjDa+bHzNfGyp+ecF70ZsDdfQmYHTNxnAgRiiUUGvLnd2Aq9uQWMILSgiZAiu
 D9lqn3VLI49bT65QGaK+G35MgfkmwnaSa4P1Kvsr8OKkKJMoWObdTnO3UL2hYQj4
 4P7EM4VzRa45eKpBEGpcrEMNtIv6ioNh80r2Dxj/3TlusruG7qXSUgLJMneX5ZVf
 bT1mVkDrr61f3d/ubypXaJNgR7g6zu522o/wLOaCwU+tjBlxuEELCxyGcB5vlQeR
 EbJy/jjW3+NX23w9bheYoDqaz4bITgqAma2Y2VC7jC34CP42oowavLy6OQdWUbCh
 wPvwxYnNEqZWPlMYyTCj/cmLAZb6JN1mNmq0rlbGjlnICtBKYDKah57noCGq34BW
 pAm7aDLQGFGaj0pW2rzCgMd20klg39sLxCMZmYbqRubQXGJaq7FuzjWSmAmd6tSV
 8dcM1QLOz3XmcaLRGXTr/hWllj9AltSFp5EVaCN27Fdlvjec6RnVdNNjOs5bd4rK
 7ik0RWgWDIoU
 =PehK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.15.11-1'

Release linux (4.15.11-1).

Refresh patches.
2018-03-20 13:50:27 +00:00
Ben Hutchings 96a9a0c51f Update to 4.16-rc6 2018-03-20 13:45:54 +00:00
Salvatore Bonaccorso 8c71b9a7b6 Prepare to release linux (4.15.11-1). 2018-03-20 09:31:08 +01:00
Vagrant Cascadian 6b6dc95db7 [armhf] Add device-tree patches from linux-next to support USB and
Ethernet on meson8b.
2018-03-19 19:27:39 -07:00
Vagrant Cascadian 75177c7c40 [armhf] Enable ARCH_MESON and related drivers. 2018-03-19 19:18:48 -07:00
Salvatore Bonaccorso 1d363986d0 mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (CVE-2018-8087) 2018-03-19 22:31:39 +01:00
Salvatore Bonaccorso 6a020907c6 Update to 4.15.11
Drop bugfix/all/crypto-ecc-fix-null-pointer-deref.-on-no-default_rng.patch

Cleanup debian/changelog file
2018-03-19 13:05:40 +01:00
Jeremy Stanley 15a4ccac46 [x86] Enable CONFIG_GPD_POCKET_FAN as a module
Provides fan control on GPD Pocket UMPC systems (Closes: #893451)
2018-03-19 01:05:09 +00:00
Ben Hutchings dcdf9a112f udeb: Update patterns for PHY modules included in usb-modules
Closes: #893154
2018-03-16 23:47:15 +00:00
Salvatore Bonaccorso 677fae7f88 Update to 4.15.10
Add CVE ids for two issues fixed in 4.15.10

Drop bugfix/all/scsi-core-Avoid-that-ATA-error-handling-can-trigger-.patch

Drop bugfix/all/nospec-kill-array_index_nospec_mask_check.patch

Cleanup debian/changelog file
2018-03-16 11:53:04 +01:00
Ben Hutchings 87ddc553bb udeb: Add i2c-modules
mouse-modules and nic-modules both contain modules depending on
i2c-core, so we need to package it properly.
2018-03-16 01:52:47 +00:00
Ben Hutchings e5827e60d6 [ia64] udeb: Combine core-modules/kernel-image and scsi{,-common,-extra}-modules
This was done for other architectures in 2016 after ia64 was removed.
2018-03-15 20:29:23 +00:00
Ben Hutchings 6a61176cdf [ia64] linux-image: Improve flavour descriptions 2018-03-15 20:24:09 +00:00
Ben Hutchings f5c2d3912f [ia64] Compile with gcc-7 2018-03-15 20:23:49 +00:00
Ben Hutchings 2de75f07c3 [ia64] linux-image: Don't suggest fdutils 2018-03-15 20:23:29 +00:00
Ben Hutchings 2e74ef517f [ia64] Disable IRDA, consistent with other architectures 2018-03-15 20:23:04 +00:00
Ben Hutchings 0eab78b1fd [ia64] Revert "Remove all support for ia64"
This reverts commit ace247de5b.
Refresh the "Hardcode arch script output" patch.

Closes: #886693
2018-03-15 20:22:30 +00:00
Ben Hutchings 90520391a2 i40e: Add kconfig dependency to ensure cmpxchg64() is available
This should fix FTBFS on architectures where it isn't.
2018-03-15 19:08:05 +00:00
Ben Hutchings ee1a4b08d6 udeb: Add dependency from nic-modules to zlib-modules
This should fix FTBFS on architectures where zlib_deflate is not built-in.
2018-03-15 19:08:01 +00:00
Salvatore Bonaccorso 8039021914 scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
Closes: #891467
2018-03-15 08:53:49 +01:00
Ben Hutchings 90b8cc7a38 [amd64] udeb: Add vmd to scsi-modules, required for NVMe on some systems
Closes: #891482
2018-03-15 03:01:04 +00:00
Ben Hutchings 341e78aee9 Really bump ABI to 2 2018-03-15 03:00:56 +00:00
Ben Hutchings 45f26f2f70 Bump ABI to 2
Commit 1df9e416e647 "Kbuild: always define endianess in kconfig.h"
fixed several cases where some types (and inline functions) might not
be correctly defined according to the host byte order.  It might be
possible to avoid an ABI bump, but it would require a lot of work.
Also, the problem may affect OOT modules that therefore should be
rebuilt with the fix.
2018-03-15 02:24:26 +00:00
Ben Hutchings 35e5ff18f3 amdgpu: Abort probing if firmware is not installed, as we do in radeon 2018-03-15 02:19:45 +00:00
Ben Hutchings 1cf35d5b4d Avoid/fix/ignore most ABI changes in 4.15.5-4.15.9 inclusive
There are still a few to resolve.
2018-03-14 02:38:34 +00:00
Ben Hutchings 33277fbe2b nospec: Kill array_index_nospec_mask_check() 2018-03-13 22:22:31 +00:00
Ben Hutchings 17703a438b Update to 4.15.9
This has some ABI changes, which still need to be resolved.
2018-03-13 22:20:14 +00:00
Ben Hutchings a1c4060b68 Merge branch 'master' of salsa.debian.org:kernel-team/linux
Move extra changelog entries under 4.16~rc5-1~exp1 to the next version.
2018-03-13 16:14:14 +00:00
Uwe Kleine-König a6229f947f [arm64] enable various drivers as module for teres-i OSHW laptop 2018-03-13 14:53:23 +01:00
Ben Hutchings 0385df06cd Prepare to release linux (4.16~rc5-1~exp1). 2018-03-13 02:06:57 +00:00
Ben Hutchings 8ca20af96f debian/rules.d/tools/kconfig/Makefile: Use bison and flex to build kconfig 2018-03-13 02:06:49 +00:00
Ben Hutchings d68283849b debian/control: Update profile qualification for build-deps on bison and flex
They are now used to build kconfig, so the only qualification is !stage1.
2018-03-13 02:00:12 +00:00
Helge Deller 887cec2797 [hppa] Re-enable 32-bit SMP kernel build. Qemu now supports it. 2018-03-12 08:35:01 +01:00
Ben Hutchings 3c7088b5cd Update to 4.16-rc5 2018-03-12 02:40:37 +00:00
Ben Hutchings 7b3adb7e57 Merge branch 'master' into sid 2018-03-12 02:02:24 +00:00
Ben Hutchings 575d4450ca Merge branch 'master' into sid 2018-03-12 02:00:57 +00:00
Vagrant Cascadian b6d7061ed6 [arm64] Apply patch from linux-next to fix eMMC corruption on
Odroid-C2 (Closes: #879072).
2018-03-11 18:46:05 -07:00
Ben Hutchings 1cf87c07e9 firmware_class: Refer to Debian wiki page when logging missing firmware
Closes: #888405
2018-03-12 01:21:33 +00:00
Ben Hutchings bc264fd9ed [x86] sound/soc/intel: Update configuration for 4.15
Enable SND_SOC_INTEL_SST_TOPLEVEL, SND_SOC_INTEL_HASWELL,
SND_SOC_INTEL_BAYTRAIL, SND_SST_ATOM_HIFI2_PLATFORM,
SND_SOC_INTEL_SKYLAKE as modules.  This re-enables the board
drivers that now depend on them (Closes: #892629).

Remove config for SND_SOC_INTEL_BYT_MAX98090_MACH and
SND_SOC_INTEL_BYT_RT5640_MACH, which depend on SND_SST_IPC_ACPI = n
and therefore can't be enabled together with the other drivers.
2018-03-12 00:09:39 +00:00
Ben Hutchings bdc8a76aa0 debian/control: Point Vcs URLs to Salsa 2018-03-11 18:04:45 +00:00
Ben Hutchings 22f6a669a8 aufs: Update support patchset to aufs4.15-20180219 (no functional change) 2018-03-11 18:04:45 +00:00
Ben Hutchings 809a0521f8 aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier 2018-03-11 18:04:45 +00:00
Salvatore Bonaccorso 07f055d4a5 sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803) 2018-03-09 20:34:10 +01:00
Vagrant Cascadian 4bcb651396 [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
work on rk3399 A72 cores.
2018-03-09 10:55:19 -08:00
Vagrant Cascadian 143ff9e565 [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset. 2018-03-09 10:53:46 -08:00
Salvatore Bonaccorso 5bd62d6357 ALSA: seq: Fix racy pool initializations (CVE-2018-7566) 2018-03-09 11:54:59 +01:00
Bastian Blank ab6c5fc99e Drop note about Xen from long descriptions
Xen support is enabled in all but one x86 kernel since several Debian
releases.
2018-02-23 17:06:03 +01:00
Uwe Kleine-König 7d901c1267 [powerpc,ppc64el,ppc64] Enable CRASH_DUMP 2018-02-23 14:10:51 +01:00
Uwe Kleine-König 830286e344 netfilter: enable NFT_FIB_NETDEV as module 2018-02-23 13:11:02 +01:00
Salvatore Bonaccorso 728a489c77 Add ABI reference for 4.15.0-1 2018-02-20 21:52:11 +01:00
Salvatore Bonaccorso a8a0de4aba Prepare to release linux (4.15.4-1). 2018-02-18 09:36:50 +01:00
Salvatore Bonaccorso c59d949283 Prepare to upload to unstable
Drop the ~exp1 from the version.

Set ABI to 1.
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 5f628725c4 (Temporarily) disable armel kernel image build
The armel/marvell kernel size is growing to large and the compressed
image is over the limit.

Given the armel architecture will most likely not be part of Buster,
disable the image build.

Cf. https://lists.debian.org/debian-kernel/2018/01/msg00278.html
2018-02-17 23:15:58 +01:00
Salvatore Bonaccorso 0bb3db4916 Add CVE id for CVE-2018-5750
Gbp-Dch: Ignore
2018-02-17 15:14:21 +01:00
Salvatore Bonaccorso fc2cf56edb Update to 4.15.4
Drop media-dvb-usb-v2-lmedm04-Improve-logic-checking-of-w.patch

Drop media-dvb-usb-v2-lmedm04-move-ts2020-attach-to-dm04_.patch

Drop media-hdpvr-fix-an-error-handling-path-in-hdpvr_prob.patch

Cleanup Debian changelog for 4.15.4
2018-02-16 22:46:54 +01:00
Salvatore Bonaccorso 4cb4e4a1d6 Update to 4.15.3 2018-02-16 12:52:22 +01:00
Salvatore Bonaccorso 3813d82c3e Update 4.15.1 and 4.15.2 Debian changelog entries
Drop/Remove enties included in the 4.14.17-1 upload and add architecture
tags.
2018-02-16 10:33:37 +01:00
Salvatore Bonaccorso 0ec05d8c81 Release linux (4.14.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqFl5pfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EQDoP/iuiGnJomZlwYf+UtxmTxZM0B1jutQ2V
 vg2/JLaocNP/QLJTRKKQnUnEbawuUvGF/vtq5kDV0XcaY3QZSbeQKkpyEpZoI5K3
 dJ8WG+EXDd/a2KVoJ/layX2JqtSVsgBOtJJkSSrhWk2tfZkhB1+9BJ54UXoTCT0A
 pWor5ycO0PUw6crlMsNz62lBwvdwoHgIhKkjpfnXOCTZQi6n6RVFvaT2uLyijZod
 0KTuWFnyMLgh1gpKKR/tqGs25ByOQH43TmtrVAYfjqua5P5CvzJaKp3UMHsDPIbN
 Uw3HB0QQ3iEg8pQJhCkrNk1LT/1Je9xb3rdoKSQ+OitTfyQnhs/eVXs3KzD3DPOc
 IJZjG/kno8d7bNWW8+ce12MPVVkAop1ZMGushyz1c3149HCtinQcymcWahD4Gyzg
 YA9w3V7ir+bvJWunKy12845XoXpxhaBVV7CbnXI02exGwbN1gBPfI6nxzf84lVcG
 Bnwy523jmAjB8h8a9HjmtwqecbnJRf+NkgQAJItniGR06B7XVSLaOnnD0dXLdOMj
 VADirfbRRU60gqBrjrMxUwMO1ArKowNzQM91pTR+jAa2mS4KzEpMmwmWMAPSTL2n
 9ODByDGf6oi9vQxxoMd1gic7cZwyzO3n/SnHSpA5IYDSeurWE1ZF3xWqPBlxIpUp
 EXiBvAThcuDs
 =jSDv
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.14.17-1'

Release linux (4.14.17-1).
2018-02-16 00:20:10 +01:00
Ben Hutchings 7708ade843 [x86] Rewrite "Make x32 syscall support conditional ..." to use a static key
Now that the old slow path is always used, this is an important
optimisation.
2018-02-14 18:28:42 +00:00
Salvatore Bonaccorso adad338012 Prepare to release linux (4.14.17-1). 2018-02-14 06:56:06 +01:00
Salvatore Bonaccorso bd35350217 Add bug closer for #883069 in 4.15.2-1~exp1 2018-02-13 19:23:37 +01:00
Riku Voipio ba309293de [arm64] enable COMMON_CLK_HI655X so wifi and bluetooth work on Hikey 2018-02-13 15:46:15 +02:00
Salvatore Bonaccorso 502a9ccf85 Add CVE id for CVE-2018-6927 2018-02-12 22:14:15 +01:00
Bastian Blank 2ac5e9851a Update to 4.15.2 2018-02-11 09:52:17 +01:00
Bastian Blank 0ce4bbe790 Fix building of liblockdep 2018-02-11 09:51:44 +01:00
Bastian Blank 1f0b5f04ef Update to 4.15.1 2018-02-08 14:20:22 +01:00
Ben Hutchings ca87f72cdd [x86] linux-headers: Depend on updated linux-compiler-gcc-7-x86 2018-02-06 20:28:40 +00:00
Ben Hutchings 35f213d491 linux-compiler-gcc-7-{arm,s390,x86}: Remove specific (and wrong) compiler version from description
Closes: #883363
2018-02-06 20:26:27 +00:00
Ben Hutchings 96c72b3c6c [x86] linux-compiler-gcc-7-x86: Add versioned dependency on gcc-7 for retpoline support 2018-02-06 20:22:23 +00:00
Ben Hutchings 3a638db7ea [x86] Add versioned build-dependency on gcc-7 for retpoline support 2018-02-06 20:20:13 +00:00
Ben Hutchings 1e4250336a Drop reverted vermagic change from changelog 2018-02-06 20:01:35 +00:00
Ben Hutchings 5a230f42f6 Word-wrap changelog 2018-02-06 20:01:00 +00:00
Salvatore Bonaccorso d8b78ad16e rxrpc: Avoid ABI change in 4.14.17 2018-02-05 20:56:02 +01:00
Salvatore Bonaccorso 31c2771b75 mac80211: Avoid ABI change in 4.14.17 2018-02-04 15:31:41 +01:00
Salvatore Bonaccorso 0a69e0b046 Update to 4.14.17
Refresh cpupower-fix-checks-for-cpu-existence.patch patch
2018-02-04 15:14:12 +01:00
Salvatore Bonaccorso a870b2741a crypto: ecc - Fix NULL pointer deref. on no default_rng
Closes: #886556
2018-02-02 20:43:54 +01:00
Salvatore Bonaccorso edfb7d0f0e Update to 4.14.16 2018-02-02 14:39:34 +01:00
Ben Hutchings e49ee939aa Note that 4.14.14 closes #888954 2018-02-01 21:36:08 +00:00
Salvatore Bonaccorso d3d73f5119 [rt] Update to 4.14.15-rt13 2018-01-31 21:00:05 +01:00
Ben Hutchings aacdec9702 Update to 4.15 2018-01-29 23:46:40 +00:00
Ben Hutchings 623cfd4d39 Merge branch 'sid'
- Drop ABI maintenance patches
- Apply usbip config change in debian/config/config
2018-01-28 19:02:08 +00:00
Ben Hutchings f01c4e1f91 usbip: Reduce USBIP_VHCI_HC_PORTS to 15, the maximum allowed for SuperSpeed hubs
Closes: #878866

The limits in Kconfig are simply wrong.
2018-01-28 18:53:45 +00:00
Salvatore Bonaccorso 4fae92a1d5 nfsd: auth: Fix gid sorting when rootsquash enabled (CVE-2018-1000028) 2018-01-28 19:38:02 +01:00
Salvatore Bonaccorso e53a4aa3b8 [rt] Update to 4.14.15-rt11 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso e5ce9cb87e Revert "module: Add retpoline tag to VERMAGIC" 2018-01-28 15:50:32 +01:00
Salvatore Bonaccorso 3a81855475 Update to 4.14.15 2018-01-28 15:50:32 +01:00
Riku Voipio 893c189290 [arm64] embed reset drivers to kernel
Reset drivers are tiny and are needed often early in boot. Kconfig
selects the drivers automatically with arch specific defaults:

config COMMON_RESET_HI6220
        default ARCH_HISI

So remove explicit driver selections from arm 64 config and let
kconfig dependencies handle it for us.
2018-01-26 11:02:53 +02:00
Bastian Blank dd6dc914d3 cloud: Mention support for Google Compute Engine 2018-01-23 21:38:05 +01:00
Bastian Blank 3fa67126b5 Switch to SLUB as kernel allocator 2018-01-23 19:25:23 +01:00
Ben Hutchings cf300a600b usb: Enable USBIP_CORE etc. on all architectures (Closes: #888042) 2018-01-23 17:26:24 +00:00
Ben Hutchings e6885f415f Enable CGROUP_BPF (except for armel) (Closes: #872560) 2018-01-23 17:15:28 +00:00
Uwe Kleine-König 5ff0bf31f4 Add bug closer for I2C_PXA on espressobin 2018-01-21 22:34:07 +01:00
Uwe Kleine-König 14c0e8f36f [arm64] enable I2C_PXA for espressobin 2018-01-21 22:11:36 +01:00
Bastian Blank 503143acab Enable NVME_MULTIPATH, NVME_FC, NVME_TARGET_FC
This enables NVME support in various SCSI host adapters, so move the
nvme module into the scsi-modules installer udeb.
2018-01-18 20:20:14 +01:00
Bastian Blank a26c8f0854 x86: Enable HYPERV_VSOCKETS 2018-01-18 20:19:26 +01:00
Bastian Blank aaaaf627d3 x86: Enable SCHED_MC_PRIO 2018-01-18 20:19:26 +01:00
Bastian Blank 02deddcfba Enable CRYPTO_RSA, CRYPTO_DH, CRYPTO_ECDH 2018-01-18 20:19:26 +01:00
Bastian Blank 54918bc9f0 Enable VIRTIO_MMIO 2018-01-18 20:19:25 +01:00
Bastian Blank 4c06af37cc Enable IPVTAP 2018-01-18 20:19:03 +01:00
Bastian Blank 7bd33d45fd Enable NET_ACT_SAMPLE 2018-01-18 20:13:56 +01:00
Bastian Blank 82296390f5 Enable IP_SET_HASH_IPMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3aa1af59a8 Enable NF_LOG_NETDEV 2018-01-18 20:13:56 +01:00
Bastian Blank cdc2183e8b Enable IPV6_SEG6_LWTUNNEL, IPV6_SEG6_HMAC 2018-01-18 20:13:56 +01:00
Bastian Blank 3a62f848cf Enable INET_ESP_OFFLOAD, INET6_ESP_OFFLOAD 2018-01-18 20:13:56 +01:00
Bastian Blank 63e3ef13a0 Enable NUMA_BALANCING_DEFAULT_ENABLED 2018-01-18 20:13:56 +01:00
Salvatore Bonaccorso e30f878e1d ALSA: seq: Make ioctls race-free (CVE-2018-1000004) 2018-01-18 14:30:46 +01:00
Bastian Blank 12fc8ef895 cloud-amd64: Support Amazon EC2 2018-01-18 12:57:14 +01:00
Bastian Blank 5f83961cb5 Add cloud-amd64 kernel flavour
As discussed on d-kernel, this flavour is added as experiment on request
of Microsoft.  For now it is only tested on Microsoft Azure.

It will be expanded to cover the other public cloud platforms at well.
This platforms will need additional drivers.
2018-01-18 09:19:36 +01:00
Ben Hutchings 6f43038466 Update to 4.14.14
Mostly done by Salvatore Bonaccorso.
2018-01-18 06:10:01 +00:00
Salvatore Bonaccorso 0bb5e7cccb loop: fix concurrent lo_open/lo_release (CVE-2018-5344) 2018-01-16 20:57:59 +01:00
Salvatore Bonaccorso 6c0d6a6239 RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333) 2018-01-16 20:53:46 +01:00
Salvatore Bonaccorso 24cdd62c17 RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332) 2018-01-16 20:50:50 +01:00