8d9993070b
buildcheck.py: Add check for uncompressed Image size
...
Currently only armel/marvell flavour need this check
2017-09-02 00:30:02 +09:00
18564a11d7
Update to 4.12.10
2017-08-31 08:45:23 +02:00
a10934bfec
debian/changelog: Clean up list of stable changes
...
- Delete irrelevant/trivial changes
- Add architecture/flavour qualifications
- Wrap long lines
2017-08-30 23:41:06 +01:00
ab768c9a0b
debian/changelog: Add my name to the open entry
2017-08-30 23:34:05 +01:00
3c3aa2c3a3
Prepare to release linux (4.13~rc7-1~exp1).
2017-08-30 20:39:57 +01:00
5775a8c918
aufs: Update support patchset to aufs4.x-rcN-20170828
2017-08-30 20:39:32 +01:00
cc07e04d02
Add CVE id fixing CVE-2017-12134
2017-08-29 22:37:09 +02:00
4a53c826d6
mtd: nandsim: remove debugfs entries in error path
2017-08-29 22:31:30 +02:00
a2dde14ec6
Update to 4.12.9
2017-08-29 22:20:12 +02:00
df8a5bf53a
Update to 4.13-rc7
2017-08-29 22:07:26 +02:00
b31bdbd377
Add bug closure of #870185
2017-08-28 21:29:05 +09:00
7ab99769cd
Add bug closure of #870185
2017-08-28 01:18:14 +09:00
68e022e33c
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-28 00:43:57 +09:00
c55043a43e
[armel] Change MTD and RTC related to modules (fixes FTBFS)
...
Change MTD_OF_PARTS, MTD_BLOCK, and MTD_PHYSMAP_OF from built-in
to modules.
And, also change all RTC related except RTC_DRV_MV, which includes
RTC_DRV_DS1307, RTC_DRV_RS5C372, RTC_DRV_PCF8563, RTC_DRV_M41T80,
and RTC_DRV_S35390A, to modules. Because most marvell boards use
RTC_DRV_MV.
2017-08-26 11:55:48 +09:00
8e44fd873c
Update to 4.12.7
2017-08-25 21:47:57 +02:00
d0704122dd
[armel] Disable CONFIG_STRICT_KERNEL_RWX
...
This will save about 3MB on linux Image (before compression).
u-boot loader on some armel devices has limitation that:
- kernel image size <= 2MB (already described in
debian/config/armel/defines)
- kernel size after decompression <= 7MB
2017-08-22 01:01:21 +09:00
a129c1c207
Update to 4.13-rc6
2017-08-21 03:09:19 +01:00
0697a35c1d
[sh4] Do not use hyphen in exported variable names (fixes FTBFS)
2017-08-19 22:37:50 +01:00
4895a85e76
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
...
Closes : #872414
(cherry picked from commit 58cec05a0e
2017-08-17 15:29:32 +01:00
d1e6bb1301
Prepare to release linux (4.13~rc5-1~exp1).
2017-08-14 23:20:50 +01:00
31202be148
Update to 4.13-rc5
2017-08-14 23:18:47 +01:00
3e6866374d
[alpha] udeb: Add i2c-modules (fixes FTBFS)
2017-08-14 19:48:41 +01:00
8c896b2cbc
liblockdep: Re-enable liblockdep packages following upstream fixes
...
This reverts commit 85b468262e87d08943da
2017-08-13 17:42:32 +01:00
c8e760ebac
Remove support for upstream DocBook-based documentation
...
It has finally been removed after all docs were converted to ReST format.
As there is no longer a way to build manpages, remove the linux-manual
package.
2017-08-13 17:26:07 +01:00
58cec05a0e
cpupower: Add/update definition of MSRHEADER macro for turbostat and x86_energy_perf_policy
2017-08-13 16:22:35 +01:00
d545b4e4d0
Update to 4.13-rc4
...
Drop and refresh patchs as appropriate.
2017-08-13 14:45:14 +01:00
9f225007dc
Prepare to release linux (4.12.6-1).
2017-08-12 23:09:26 +01:00
66d8e083d5
Merge remote-tracking branch 'alioth/rosh/strip_armel'
...
Note Roger's changes in changelog.
2017-08-12 23:08:53 +01:00
0134b5c8b9
[amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base ( Closes : #869090 )
2017-08-12 23:08:23 +01:00
3322494cdd
netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules ( Closes : #868803 )
2017-08-12 22:40:40 +01:00
aa404ad63b
bfq: Enable auto-loading when built as a module
2017-08-12 22:36:27 +01:00
bea6941301
blk-mq: Enable IOSCHED_BFQ as module ( Closes : #869028 ); enable BFQ_GROUP_IOSCHED
2017-08-12 22:35:11 +01:00
e16a8acf8a
blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
...
Also explicitly set MQ_IOSCHED_DEADLINE to built-in per default.
2017-08-12 22:34:03 +01:00
eb7e4fa1ec
[x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module ( Closes : #869372 )
2017-08-12 22:13:33 +01:00
5df992ba4d
integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS ( Closes : #869565 )
2017-08-12 22:13:33 +01:00
1087d11fd6
[arm64] video: Enable FRAMEBUFFER_CONSOLE ( Closes : #870071 )
2017-08-12 22:13:33 +01:00
831ae89c56
rtlwifi: Fix firmware loading bugs ( Closes : #869084 )
2017-08-12 21:54:36 +01:00
3b32a0551f
xfrm: policy: check policy direction value (CVE-2017-11600)
2017-08-12 21:36:28 +01:00
878e72cc4c
Only list CVEs fixed by 4.12.4-4.12.6
...
As this will already be a major version update for unstable there's little
point in listing the additional changes in stable updates.
2017-08-12 20:34:29 +01:00
851fa7516e
Set ABI to 1
2017-08-12 17:16:42 +02:00
e5fcecb6a6
Drop experimental suffix from next version
...
Gbp-Dch: Ignore
2017-08-12 17:15:04 +02:00
e58e3e6be9
Update to 4.12.6
2017-08-12 16:54:34 +02:00
5bc71d3ff6
Wrap long changelog lines
...
Gbp-Dch: Ignore
2017-08-12 11:42:30 +02:00
0442142ae4
udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
2017-08-11 09:12:58 +02:00
3b6247dba4
packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
2017-08-11 09:09:51 +02:00
dcdb404db7
Add CVE ID for CVE-2017-10663 (f2fs: sanity check checkpoint segno and blkoff)
2017-08-10 08:09:14 +02:00
d977cbc209
[arm64] Add sdhci device for Espressobin
...
This completes the fix for #871049
2017-08-09 09:26:46 +02:00
0f54fcdf56
[arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin
2017-08-08 21:44:03 +00:00
df3ad3271d
readd CVS reference that was dropped by mistake
2017-08-08 10:17:23 +02:00
bc29a1558a
Update to 4.12.5
2017-08-08 09:54:35 +02:00
693284da5b
media: saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
2017-08-03 20:36:47 +02:00
9f89bea8ab
ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
2017-08-03 20:32:16 +02:00
b5081c50bc
dentry name snapshots (CVE-2017-7533)
2017-08-03 20:27:55 +02:00
3341a33e22
Add changelog entry for CVE-2017-7541
...
Gbp-Dch: Ignore
2017-07-24 07:06:09 +02:00
662ee32fad
debian/control: Fix version in dependencies on linux-headers-*-common*
...
linux-headers-*-common* packages are arch-independent since version
4.9~rc7-1~exp1, so to allow for binNMUs we need to specify
${source:Version} in versioned dependencies on them.
Closes : #869511
2017-07-23 22:46:31 +01:00
db815c4a3b
Update to 4.12.3
2017-07-22 18:26:23 +01:00
192ee88a05
[i386] perf tools: Fix unwind build (fixes FTBFS)
2017-07-22 17:41:53 +01:00
b26c964684
[armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
2017-07-22 12:40:05 +01:00
4e4f504451
[armhf] Revert "gpu: host1x: Add IOMMU support" (fixes FTBFS)
2017-07-22 11:26:42 +01:00
e6acb1f3d5
[mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
2017-07-22 00:38:10 +01:00
45a06e2c0f
Clean up symbol version fixes for symbols exported from asm
...
We can't keep reverting these changes, so instead move forward. Most
architectures now have <asm/asm-protoypes.h> and only 3 were left:
- alpha: Added <asm/asm-protoypes.h> and submitted patch upstream
- m68k: Did same, but realised it's only needed for Coldfire configs
so we don't need any patches
- sparc: Cherry-picked changes from upstream
2017-07-19 19:36:04 +01:00
aaafbb9091
[sparc64] Update "Revert "sparc: move exports to definitions"" again
...
This should really fix the FTBFS - at least, the build got as far as
building linux-image packages.
genksyms doesn't recognise __int128 as a type name, so fails to parse
the prototype for __multi3(). I could fix genksyms but would have to
regenerate the parser tables which would be a horrible patch to
maintan. So use a struct type instead for now. gcc doesn't seem to
care about this because it isn't a normal C function.
Also update the patch properly for 4.12 - I removed exports for some
symbols that were not really removed but renamed.
2017-07-18 22:50:53 +01:00
33fb750f9d
media: Enable USB_RAINSHADOW_CEC as module (see #868511 )
2017-07-18 13:27:48 +01:00
4cbd8fdf4b
Prepare to release linux (4.12.2-1~exp1).
2017-07-18 12:19:38 +01:00
094004fb35
Set ABI name to trunk
2017-07-18 12:19:35 +01:00
0e64929fc5
scripts/mod: Update modpost wrapper for 4.12
...
Commit cf0c3e68aa81 "kbuild: fix asm-offset generation to work with clang"
changed the macros used by devicetable-offsets.c. Copy the new sed code
from upstream scripts/Makefile.lib.
2017-07-18 04:45:51 +01:00
50381a0ca2
Update to 4.12.2
...
Refresh aufs4 patches by hand, as there is no release for 4.12 yet.
Refresh lockdown patches with genpatch.py and then by hand, as the
branch is a little out of date and many patches went upstream.
[rt] Disable until it is updated for 4.12 or later
2017-07-18 01:06:31 +01:00
81c11b5921
Add script to regenerate lockdown patch series from git
2017-07-18 00:06:46 +01:00
5886a28670
Prepare to release linux (4.11.11-1).
2017-07-17 03:01:21 +01:00
e9698def40
firmware: dmi: Add DMI_PRODUCT_FAMILY identification string
...
Dependency of "pinctrl: cherryview: Extend the Chromebook DMI quirk to
Intel_Strago systems".
2017-07-17 03:00:56 +01:00
4e322430ec
[armhf] Add ARM Mali Midgard device tree bindings and gpu node for rk3288
...
Thanks: Guillaume Tucker
Closes : #865646
2017-07-17 01:09:51 +01:00
1a49ee814f
udeb: Ship usb3503 module in usb-modules ( Closes : #865645 )
...
This module is needed for e.g. Arndale development boards, thanks to Wei
Liu.
2017-07-17 00:48:46 +01:00
0de513746f
[x86] pinctrl: cherryview: Extend the Chromebook DMI quirk to Intel_Strago systems
...
Closes : #862723
2017-07-17 00:38:29 +01:00
769a37d5bd
[x86] ideapad-laptop: Add various IdeaPad models to no_hw_rfkill list
...
Closes : #866706
2017-07-17 00:04:31 +01:00
bd04387e13
aufs: Update support patchset to aufs4.11.7+-20170703 ( Closes : #867257 )
2017-07-16 23:39:47 +01:00
abb94a6a73
[arm64] sound: Enable SND_HDA_INTEL as module ( Closes : #867611 )
2017-07-16 22:29:47 +01:00
3c66f8f592
udeb: Add dm-raid to md-modules ( Closes : #868251 )
2017-07-16 22:10:36 +01:00
81c2ab92a3
crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules ( Closes : #868291 )
2017-07-16 22:09:02 +01:00
1f47c2fad3
[armhf] udeb: Add sunxi_wdt to kernel-image ( Closes : #866130 )
2017-07-16 21:52:04 +01:00
4f2e547171
media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
...
Closes : #868511
2017-07-16 21:37:15 +01:00
823d15feb8
[rt] Update to 4.11.9-rt7
2017-07-16 21:28:09 +01:00
09f1166971
binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370, CVE-2017-1000371)
2017-07-16 21:24:08 +01:00
292c881344
Update to 4.11.11
2017-07-16 21:22:27 +01:00
5cea93cf9c
[rt] Update to 4.11.8-rt5
2017-07-09 13:45:42 +02:00
5b8fb021cd
Bump ABI to 2
2017-07-09 12:57:02 +02:00
e70c79cce5
Update to 4.11.9
2017-07-09 12:54:43 +02:00
49173dac27
Add CVE id for xen-blkback issue, XSA-216
2017-07-05 06:37:00 +02:00
2125fc6614
Update to 4.11.8
2017-06-29 21:21:01 +02:00
3aaf7fba55
rxrpc: Fix several cases where a padded len isn't checked in ticket decode (CVE-2017-7482)
2017-06-29 08:24:46 +02:00
fe29debbce
[arm64] Enable support for Rockchip systems ( Closes : #860976 ).
2017-06-28 16:43:40 -07:00
6bd12386aa
[arm64] enable FB_SIMPLE
2017-06-28 20:02:24 +00:00
4bffab0d23
Update to 4.11.7
...
Drop upstream applied patch.
Refresh features/all/rt/sched-mmdrop-delayed.patch.
Ignore changes for module: drivers/iio/imu/inv_mpu6050/*.
2017-06-26 22:01:21 +02:00
3f7061bec4
Add ABI reference for 4.11.0-1
2017-06-26 21:25:30 +02:00
ac812885ce
Fix typo in changlog (thanks KiBi)
2017-06-24 18:32:59 +01:00
c63d4533ab
[sparc64] Update "Revert "sparc: move exports to definitions"" for the addition of __multi3 (fixes FTBFS)
2017-06-20 20:08:40 +01:00
63a7595d75
[md68k] udeb: Use only the common module list for nic-shared-modules (fixes FTBFS)
...
Delete all the additional lines:
- 7990, 82596 and 8390p are now included in nic-modules, resulting in the
"some modules are in more than one package" error
- 8390 and libphy are already listed in the common module list
- There's no particular reason to think m68k needs the dummy driver
2017-06-20 19:31:50 +01:00
0d6a5d8794
Prepare to release linux (4.11.6-1).
2017-06-20 00:25:45 +01:00
496cb584dc
Note CVEs fixed in 4.11.5
2017-06-20 00:25:35 +01:00
0f89be27d3
mm: larger stack guard gap, between vmas (CVE-2017-1000364)
2017-06-20 00:19:55 +01:00
a4d082d16d
[armhf] PCI: Enable PCI_HOST_GENERIC ( Closes : #864726 )
2017-06-18 21:08:04 +01:00
52978aae0c
USB: serial: option: add two Longcheer device ids ( Closes : #864604 )
2017-06-18 21:05:59 +01:00
0119f2ad46
fs: Reenable HPFS_FS as module ( Closes : #864878 )
2017-06-18 21:01:55 +01:00
b39658b2cf
[rt] Update to 4.11.5-rt1 and reenable
2017-06-18 18:14:57 +01:00
76ed7c5f09
Update to 4.11.6
2017-06-18 18:12:42 +01:00
21159c097a
Release linux (4.9.30-2).
...
-----BEGIN PGP SIGNATURE-----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=7TPb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.30-2' into sid
2017-06-12 19:09:18 +01:00
8f781e82fb
Prepare to release linux (4.9.30-2).
2017-06-12 16:35:12 +01:00
e43fbf8183
Add summary of what the ipv6 fixes are for
2017-06-12 16:24:03 +01:00
29fbd594e5
NFSv4.x/callback: Create the callback service through svc_create_pooled ( Closes : #862357 )
2017-06-12 16:20:51 +01:00
8fe8c336a3
[armhf] udeb: Add axp20x_usb_power to kernel-image; add i2c-modules package
...
... including i2c-mv64xxx and i2c-rk3x
Thanks to Karsten Merker.
Closes : #856111
2017-06-12 15:49:01 +01:00
f30fbaf597
Merge branch 'stretch-security' into stretch
2017-06-12 15:43:37 +01:00
ab537b5c46
debian/rules.real: Include rules.defs before using architecture variables
...
Closes : #862842
2017-06-10 21:53:27 +01:00
6fdb07003d
Revert "uapi: fix linux/if.h userspace compilation errors"
...
This patch fixes a bug but it broke compilation of radvd (see
by reverting it for stretch.
2017-06-09 15:27:04 +01:00
cb766cd661
Add follow-up fixes for CVE-2017-9074
2017-06-08 15:39:03 +01:00
9bf3ee218c
Add follow-up fixes for CVE-2017-9074
2017-06-08 15:37:04 +01:00
304a2920e5
Update to 4.11.4
2017-06-07 23:41:28 +01:00
2da7c17a3d
ipv6: Check ip6_find_1stfragopt() return value properly.
...
Follow-up to the fix for CVE-2017-9074.
2017-06-07 23:34:55 +01:00
cb232e3cbd
Set ABI to 1
2017-06-07 21:24:14 +01:00
2e4ca2c625
Drop experimental suffix from next version
2017-06-07 21:23:33 +01:00
7618511643
[x86] Enable SERIAL_8250_MID as built-in ( Closes : #864368 )
2017-06-07 21:21:21 +01:00
9da11541bd
[x86] Enable SERIAL_8250_MID as built-in ( Closes : #864368 )
2017-06-07 21:16:14 +01:00
1d233f0650
Merge branch 'm68k' of https://github.com/glaubitz/linux-debian
...
Move the added changelog lines into a new entry, as 4.11.3-1~exp1 has
already been uploaded.
2017-06-06 20:43:50 +01:00
18a83ebe4c
[m68k] udeb: Add atari_scsi, mac_esp, mac_scsi to scsi-modules
2017-06-06 00:27:44 +02:00
dbe60feb5b
[m68k] udeb: Add buddha, falconide, gayle, macide, q40ide to pata-modules
2017-06-06 00:25:47 +02:00
8af4425509
[m68k] udeb: Move non-shared modules from nic-shared-modules to nic-modules
2017-06-06 00:24:40 +02:00
2ae0e6b97a
[m68k] udeb: Build scsi-core-modules package
2017-06-06 00:22:45 +02:00
0f75b878c9
[m68k] udeb: Build pata-modules package
2017-06-06 00:21:33 +02:00
8a4fb2b833
[m68k] udeb: Build nic-modules package
2017-06-06 00:19:15 +02:00
3a28456c15
[m68k] udeb: Build hfs-modules package
2017-06-06 00:17:56 +02:00
a744ec62e0
[m68k] udeb: Build affs-modules package
2017-06-06 00:16:56 +02:00
aca58f8953
Prepare to release linux (4.11.3-1~exp1).
2017-06-05 14:13:41 +01:00
5174845342
Release linux (4.9.30-1).
...
-----BEGIN PGP SIGNATURE-----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=MA6Q
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.30-1'
Drop ABI reference files and ABI maintenance patch.
2017-06-05 14:12:31 +01:00
7b53b52f6f
Update to 4.11.3
2017-06-05 14:04:06 +01:00
65c1808993
[m68k] Update 'Revert "m68k: move exports to definitions"' for 4.11 (fixes FTBFS)
...
Closes : #862393
2017-06-05 13:51:12 +01:00
6b3812c4f1
Prepare to release linux (4.9.30-1).
2017-06-04 03:03:01 +01:00
894e593fa3
[rt] Update to 4.9.30-rt20
2017-06-04 03:00:42 +01:00
9c84459829
[rt] Add new GPG subkeys for Sebastian Andrzej Siewior
2017-06-04 02:51:04 +01:00
4078eac467
[arm64] serial: pl011: add console matching function ( Closes : #861898 )
2017-06-04 02:40:54 +01:00
0aead2461f
[x86] pinctrl: cherryview: Add a quirk to make Acer Chromebook keyboard work again
...
Closes : #862723
2017-06-04 02:30:55 +01:00
3222b6559c
[m68k] udeb: Build loop-modules package
...
Signed-off-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
[bwh: Add changelog entry]
2017-06-04 02:08:50 +01:00
4ff30925bb
udeb: Add efivarfs to efi-modules.
...
This might be needed to retrieve firmware or configuration bits from
d-i.
[bwh: Add closes : #862555 ]
2017-06-04 01:40:22 +01:00
ae4eed4ced
btrfs: warn about RAID5/6 being experimental at mount time ( Closes : #863290 )
2017-06-04 01:20:23 +01:00
e6c8b0bdf6
Add Debian package version to "hung task" log messages
...
I noticed a couple of bug reports with these messages and unknown
packge version.
2017-06-04 00:02:06 +01:00
9479b65c42
debian/control: Fix compiler build-dependencies for cross-building
...
gcc cross-compilers *do* now have Multi-Arch: foreign, so we have
to take the :native qualfiication off again.
(cherry picked from commit 84e53d21c3Closes : #863907
2017-06-03 22:10:01 +01:00
f66ac78498
Note that "NFSv4: Fix callback server shutdown" closes #862357
2017-06-03 20:43:08 +01:00
b9ea5ea2a4
uapi: fix linux/if.h userspace compilation errors (see #822393 , #824442 )
2017-06-01 17:50:12 +01:00
a843bf5bb3
Merge remote-tracking branch 'alioth/sid' into sid
2017-06-01 14:10:48 +01:00
2502943c58
ipv6: fix out of bound writes in __ip6_append_data() (CVE-2017-9242)
2017-06-01 08:38:02 +02:00
cd87fb7a86
crypto: skcipher - Add missing API setkey checks (CVE-2017-9211)
2017-06-01 08:34:46 +02:00
261dbebcde
ipv6/dccp: do not inherit ipv6_mc_list from parent (CVE-2017-9076 CVE-2017-9077)
2017-06-01 08:13:06 +02:00
3253209d02
sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (CVE-2017-9075)
2017-06-01 08:08:49 +02:00
35c1e8ae8d
ipv6: Prevent overrun when parsing v6 header options (CVE-2017-9074)
2017-06-01 08:05:24 +02:00
a68b36a505
dccp/tcp: do not inherit mc_list from parent (CVE-2017-8890)
2017-06-01 07:43:55 +02:00
20b3d9876a
tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() (CVE-2017-0605)
2017-06-01 07:36:02 +02:00
ad62774819
Add various security fixes
2017-06-01 00:30:04 +01:00
c2d60c744a
Merge branch 'sid' of git+ssh://git.debian.org/git/kernel/linux into sid
2017-05-31 22:10:43 +01:00
39fa3fc3aa
Ignore ABI changes in chipidea driver
2017-05-31 22:26:40 +02:00
7c8c8ef49a
[arm64] Enable DRM modules
2017-05-31 22:25:13 +02:00
e9619f03d3
Update to 4.9.30
...
* Drop/refresh patches as necessary
* Ignore ABI changes in ccp and hid-sensors
* [mips*el/loongson-3] Revert "MIPS: Loongson-3: Select
MIPS_L1_CACHE_SHIFT_6" to avoid ABI change
2017-05-31 21:02:34 +01:00
dd1408c66d
Update to 4.9.28
2017-05-27 17:12:34 +02:00
75d5d0e57f
Update to 4.9.27
2017-05-13 18:52:03 +02:00
3d18d55b64
Update to 4.9.26
...
Ignore changes to module:sound/firewire/snd-firewire-lib
Ignore changes to module:net/l2tp/l2tp_core
2017-05-13 16:07:07 +02:00
f5fd64d72e
[mips*/*-malta] Enable POWER_RESET and POWER_RESET_SYSCON.
2017-05-08 21:12:41 +02:00
0a348a06ca
[armel] udeb: Add af_packet. firmware_class, nls_base to kernel-image (fixes FTBFS)
2017-05-06 03:54:06 +01:00
3b2f2e5859
Prepare to release linux (4.11-1~exp2).
2017-05-05 04:35:12 +01:00
8356e87ef9
[mips*/octeon] Increase RELOCATION_TABLE_SIZE to 0x00110000 (fixes FTBFS)
2017-05-05 04:05:51 +01:00
2d982936e8
usbip: Fix potential format overflow in userspace tools
...
This fixes FTBFS on 64-bit architectures with gcc-7, which in
experimental means at least amd64, ppc64, sparc64.
2017-05-04 02:48:18 +01:00
3c6e75c193
[armel/marvell] Make more things modular (fixes FTBFS)
...
This still gets us to:
Image size 2086338/2097080, using 99.49%. Under 1% space in experimental. Continuing.
which is uncomfortably close.
2017-05-03 22:46:38 +01:00
c6d012b61d
Prepare to release linux (4.11-1~exp1).
2017-05-02 20:57:50 +01:00
44b570caef
block: Enable BLK_WBT, BLK_WBT_MQ ( Closes : #859570 )
2017-05-02 20:06:26 +01:00
a4e087d3b1
Release linux (4.9.25-1).
...
-----BEGIN PGP SIGNATURE-----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=k/sj
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.25-1'
Drop the added patches, which are already in 4.11.
CONFIG_NFP_NETVF is replaced by CONFIG_NFP in 4.11.
2017-05-02 19:57:00 +01:00
fb9c5429ac
Prepare to release linux (4.9.25-1).
2017-05-02 16:21:44 +01:00
38ea360ed4
crypto: Change CRYPTO_SHA256 from module to built-in, as required by IMA
2017-05-02 16:21:36 +01:00
472b038c1a
udeb: Move mfd-core to kernel-image, as both input-modules and mmc-modules need it
2017-05-02 14:11:10 +01:00
c4f7fb8fd3
selinux: Set SECURITY_SELINUX_CHECKREQPROT_VALUE=0, per default
2017-05-02 05:22:00 +01:00
97c9515edc
leds: Enable LEDS_GPIO as module for all configurations with GPIOs ( Closes : #860569 )
2017-05-02 05:19:00 +01:00
29ba603942
udeb: Add tifm_7xx1 to mmc-modules ( Closes : #861195 )
2017-05-02 05:12:01 +01:00
96174d4f99
[arm64] Enable ARMV8_DEPRECATED, SWP_EMULATION, CP15_BARRIER_EMULATION, SETEND_EMULATION ( Closes : #861384 )
2017-05-02 04:57:37 +01:00
c18a3bc8d8
Note that 4.9.25 closes #856843
2017-05-02 04:55:07 +01:00
62f19b9260
crypto: Enable CRYPTO_DEV_CHELSIO as module
2017-05-02 04:53:13 +01:00
1cf36ebc7c
[x86] crypto: Enable CRYPTO_DEV_QAT_C3XXX, CRYPTO_DEV_QAT_C62X, CRYPTO_DEV_QAT_C3XXXVF, CRYPTO_DEV_QAT_C62XVF as modules
2017-05-02 04:53:13 +01:00
52e8d9f36f
[rt] tracing: Enable HWLAT_TRACER
...
This is in mainline but not that useful without PREEMPT_RT.
HWLAT_DETECTOR no longer exists but I didn't notice because
kconfigeditor2 only looks at the mainline Kconfig files.
2017-05-02 04:53:13 +01:00
a315c25499
[x86] hwtracing: Enable INTEL_TH, INTEL_TH_PCI, INTEL_TH_GTH, INTEL_TH_MSU, INTEL_TH_PTI as modules
2017-05-02 04:53:13 +01:00
0f9f62ce3e
[x86] platform: Enable INTEL_HID_EVENT as module
2017-05-02 04:26:32 +01:00
cf48795305
[x86] comedi: Enable COMEDI_ADV_PCI1720, COMEDI_ADV_PCI1760 as modules
2017-05-02 04:26:32 +01:00
f5c277c282
[amd64] EDAC: Enable EDAC_SKX as module
2017-05-02 04:26:32 +01:00
9728988386
IB: Enable INFINIBAND_HFI1, INFINIBAND_I40IW, INFINIBAND_QEDR, RDMA_RXE as modules
2017-05-02 04:26:32 +01:00
fd24af5949
leds: Enable LEDS_TRIGGER_DISK, LEDS_TRIGGER_MTD, LEDS_TRIGGER_PANIC
2017-05-02 04:26:32 +01:00
f965312c8e
USB/misc: Enable UCSI as module
2017-05-02 04:26:32 +01:00
3f68b53e2c
usbip: Enable USBIP_VUDC as module
2017-05-02 04:26:32 +01:00
6dafde3362
leds,USB: Enable USB_LEDS_TRIGGER_USBPORT as module
2017-05-02 04:26:32 +01:00
f98a6c1701
HID: Enable HID_SENSOR_CUSTOM_SENSOR as module
2017-05-02 04:26:32 +01:00
bb3cdfe4f6
hda: Set SND_HDA_PREALLOC_SIZE=2048 as recommended for PulseAudio
2017-05-02 04:26:32 +01:00
6b9daaf87e
[x86] amdgpu,sound/soc: Enable DRM_AMD_ACP; enable SND_SOC_AMD_ACP as module
2017-05-02 04:26:32 +01:00
5ed69967a2
media: Enable VIDEO_TW5864, VIDEO_TW686X as modules
2017-05-02 04:26:32 +01:00
2d277e1fa2
Update to 4.11
...
All patches still apply!
2017-05-01 17:56:56 +01:00
7ba1afb386
nfsd: stricter decoding of write-like NFSv2/v3 ops (CVE-2017-7895)
2017-04-29 22:02:50 +02:00
7961205000
nfsd4: minor NFSv2/v3 write decoding cleanup
2017-04-29 21:59:48 +02:00
0e77dea5fc
nfsd: check for oversized NFSv2/v3 arguments (CVE-2017-7645)
2017-04-29 21:52:43 +02:00
4c666bd4da
Update to 4.9.25
2017-04-27 20:19:04 +02:00
d2be118d62
[m68k] udeb: Enable suffix for kernel-image ( Closes : #859366 )
2017-04-27 18:37:09 +01:00
f3c3de0f60
integrity: Enable IMA and related kconfig symbols (except on armel/marvell)
...
Closes : #788290
Based on advice from Matthew Garrett.
2017-04-27 18:37:09 +01:00
6771be1138
macsec: dynamically allocate space for sglist
2017-04-27 07:42:13 +02:00
7b2acecada
macsec: avoid heap overflow in skb_to_sgvec (CVE-2017-7477)
2017-04-27 06:43:38 +02:00
e7b761c5fd
[arm64] Add bug closure for raising NR_CPUS
2017-04-25 23:40:09 +01:00
4e57833523
watchdog: Enable WATCHDOG_SYSFS
2017-04-25 23:16:40 +01:00
a1a96efe46
[x86] thermal: Enable INT3406_THERMAL as module
2017-04-25 23:13:32 +01:00
8ab44aa518
[x86] gpio: Enable GPIO_AMDPT as module
2017-04-25 22:57:34 +01:00
fd23df3a24
serial/8250: Enable SERIAL_8250_MOXA as module
2017-04-25 22:50:51 +01:00
25cf1aa652
[x86] input/touchscreen: Enable TOUCHSCREEN_SURFACE3_SPI as module
2017-04-25 22:49:04 +01:00
79226c42bf
input: Enable TABLET_USB_PEGASUS as module
2017-04-25 22:48:26 +01:00
e4f8eedb77
net/phy: Enable MICROSEMI_PHY as module
2017-04-25 22:42:23 +01:00
9ee3fb1151
ethernet: Enable NFP_NETVF as module
2017-04-25 22:41:37 +01:00
94b8328125
net/sched: Enable NET_ACT_SKBMOD as module
2017-04-25 22:23:51 +01:00
45a93062df
6lowpan: Enable Generic Header Compression modules
2017-04-25 22:22:50 +01:00
f6ab826219
PCI: Enable PCIE_PTM (except on armel/marvell)
2017-04-25 22:20:09 +01:00
fe7d4b95a0
Add changelog entry for CVE-2017-8061
...
Gbp-Dch: Ignore
2017-04-23 12:15:25 +02:00
1beb630d78
Add changelog entry to record CVE-2017-8063
...
Gbp-Dch: Ignore
2017-04-23 12:09:00 +02:00
dff836d7ec
Add CVE-2017-8064 reference
...
Gbp-Dch: Ignore
2017-04-23 12:02:37 +02:00
1ad0a79c0a
Add changelog entry for CVE-2017-8067
...
Gbp-Dch: Ignore
2017-04-23 11:46:28 +02:00
7bf90ad750
KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (CVE-2017-7472)
2017-04-22 02:26:48 +01:00
89402402c8
KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (CVE-2016-9604)
2017-04-22 02:25:04 +01:00
9c5f88b1f6
Update to 4.9.24
...
Drop most of our bug fix patches, which were included in it.
Adjust context in a couple of rt patches that have textual conflicts.
2017-04-22 00:59:32 +01:00
d518bcf5f3
[mips*el/loongson-3] Disable PAGE_EXTENSION and PAGE_POISONING.
...
This workaround a kernel crash, until the real issue is found. It is
currently being investigated.
2017-04-22 01:16:49 +02:00
f2b1e81469
[mips*/octeon] Drop obsolete patch adding support for the UBNT E200 board.
2017-04-21 11:31:33 +02:00
3cd2ed795d
[arm64] Enable REGULATOR_GPIO as module ( Closes : #860222 )
2017-04-21 01:33:01 +01:00
1e2342437a
[arm64] Enable ARC_SUNXI, RTC_DRV_SUN6I as built-in, MMC_SUNXI and PHY_SUN4I_USB as modules
...
Closes : #860855
2017-04-21 01:00:12 +01:00
259372e240
[x86] Make hyperv-modules depends on nic-shared-modules
...
hv_utils (not hv_netvsc!) now implements a PTP clock.
2017-04-20 19:24:09 +01:00
0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
be339ddfdd
aufs: Update support patchset to aufs4.x-rcN-20170410
2017-04-20 01:48:49 +01:00
327c328b54
Update to 4.11-rc7 (and credit Lukas for his previous work)
2017-04-20 01:11:22 +01:00
f26f2a520d
Update to 4.11-rc6
...
Remove merged patches and rebase remaining patches.
A portion of the secureboot patches have been upstreamed, but were
changed substantially during review, primarily to avoid code
duplication among arches. I've stripped the patches of the merged
bits and rebased the remainder.
Signed-off-by: Lukas Wunner <lukas@wunner.de>
[bwh: Undo some incorrect context changes in
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch]
2017-04-20 00:15:17 +01:00
8701ef58ba
Replace "[media] dvb-usb: Don't use stack for reset either" with upstream fix
2017-04-18 01:16:50 +01:00
3f62574711
crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618)
2017-04-16 23:25:12 +01:00
4d042ae0ff
[rt] Update to 4.9.20-rt16
2017-04-16 21:52:57 +01:00
31945f628c
Update to 4.9.22
...
Drop patches applied upstream.
2017-04-16 21:47:05 +01:00
326a2052e2
linux-image: Disable signing until it's supported in dak
...
Only code signing through dak is going to be acceptable for a stable
release, so disable the current arrangement.
2017-04-16 18:53:52 +01:00
b4b1be4c52
Move debug symbols back to the main archive
...
dak currently allows a binary upload to include debug symbol packages
that don't appear in the overrides file or the Binary field of the
changes file, so long as they have the appropriate
'Auto-Built-Package' field and their name matches another binary
package in the upload plus the '-dbgsym' suffix.
For architectures with code signing enabled, our binary uploads never
match this condition as the corresponding binary package has the
'-unsigned' suffix and the debug symbols package does not. Since we
do list the debug symbol packages in the Binary field, they do get
added to the overrides file when accepted through the NEW queue, but
they are automatically pruned from there some time later. Later
uploads then have to go through NEW even though they are not
introducing new binary packages. This would be a big problem for
stable security updates.
For now, move debug symbols back to the main archive with the old
'-dbg' suffix. Keep them enabled for all architectures.
2017-04-16 18:53:35 +01:00
6ef03e0be7
Merge remote-tracking branch 'alioth/sid' into sid
2017-04-16 17:22:54 +01:00
b80acec65e
[arm64] Set NR_CPUS=256 to allow for multi-SoC systems
...
ThunderX1 has 48 cores and supports 2-way systems for 96 CPUs.
ThunderX2 has 54 cores and also supports 2-way systems for 108 CPUs.
X-Gene 3 "Skylark" is supposed to support 8-way systems with 32
cores each for 256 CPUs (I'm not sure if they're cache-coherent
beyond 2-way though.
2017-04-16 17:19:45 +01:00
01f0df794d
[mips*/octeon] Set NR_CPUS=64 to allow for Cavium CN7890
...
The CN7890 has 48 Octeon III cores.
I don't know whether current configuration will run on a CN7890, but this
should avoid an ABI break if we add support later.
2017-04-16 17:19:00 +01:00
c22c7deb17
[mips*el/loongson-3] Set NR_CPUS=16 to allow for Loongson 3B2000
...
The Loongson 3B2000 has 4 cores and can apparently be used in a 4-way
configuration, for 16 CPUs.
I don't think the current configuration will run on a 3B2000, but this
should avoid an ABI break if we address that.
2017-04-16 17:18:59 +01:00
ba74e6e6c8
[powerpc*/*64*] Enable CPUMASK_OFFSTACK to reduce stack usage
2017-04-16 17:18:44 +01:00
23fadf4f82
Update debian/changelog file
...
Gbp-Dch: Ignore
2017-04-16 08:00:01 +02:00
1d5fde10d8
mm/mempolicy.c: fix error handling in set_mempolicy and mbind (CVE-2017-7616)
2017-04-16 07:59:50 +02:00
b1b8586924
[powerpc/powerpc64,ppc64] Set NR_CPUS=2048, matching ppc64el
2017-04-15 02:41:22 +01:00
9cb1bd16f9
udeb: Include all AHCI drivers in sata-modules ( Closes : #860335 )
2017-04-14 20:35:35 +01:00
263f51b136
cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores ( Closes : #859978 )
2017-04-11 02:57:43 +01:00
5547db97a6
fscrypt: remove broken support for detecting keyring key revocation (CVE-2017-7374)
2017-04-08 09:36:53 +02:00
43f7156d3a
ping: implement proper locking (CVE-2017-2671)
2017-04-08 09:18:35 +02:00
ca91ae2eb7
[powerpc/powerpc64,ppc64*] target: Enable SCSI_IBMVSCSIS as module
...
This driver was removed in 3.18, but has been updated to use the new
target framework and was added again in 4.8.
As it lives under drivers/scsi and not drivers/target, exclude it from
the scsi-modules udeb.
2017-04-08 01:43:00 +01:00
Roger Shimizu
Salvatore Bonaccorso
Ben Hutchings
Uwe Kleine-König
Cyril Brulebois
Vagrant Cascadian
John Paul Adrian Glaubitz
Aurelien Jarno
Lukas Wunner