Commit Graph

14287 Commits

Author SHA1 Message Date
Ben Hutchings
4329640c2c Prepare to release linux (5.3.9-2). 2019-11-12 15:44:08 +00:00
Ben Hutchings
17424b8a1d Merge branch 'sid-embargoed' into sid 2019-11-12 15:43:53 +00:00
Salvatore Bonaccorso
56f3f9116f Add ABI reference for 5.3.0-2 2019-11-11 15:47:24 +01:00
Ben Hutchings
fb14949a97 [x86] drm/i915/cmdparser: Fix jump whitelist clearing
Fix a flaw I found in the mitigation for CVE-2019-0155.
2019-11-10 22:45:58 +00:00
Ben Hutchings
49c95b56da [x86] i915: Add mitigations for two hardware security flaws 2019-11-10 03:02:32 +00:00
Ben Hutchings
b9ba9fabba Merge branch 'sid' into sid-embargoed
debian/changelog: Move unreleased changes to a new entry
2019-11-09 18:54:23 +00:00
Ben Hutchings
b202260a28 Prepare to release linux (5.3.9-1). 2019-11-09 15:42:49 +00:00
Ben Hutchings
bc181d00ed Fix context in "KEYS: Make use of platform keyring for module signature verify"
This patch had no space at the beginning of the context lines.
quilt/patch accepts "\t" at the beginning as equivalent to " \t", but
dpkg-source does not.
2019-11-09 15:42:05 +00:00
Ben Hutchings
c323c453b2 random: try to actively add entropy rather than passively wait for it 2019-11-09 15:02:11 +00:00
Ben Hutchings
ed24849d8d [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L dependency
For some reason this debug option uses V4L to expose informaton.  We
don't want to include V4L in the installer, so disable it.  Use the
top-level config for this driver instead.

Discussed in merge request kernel-team/linux!176
2019-11-09 15:01:41 +00:00
Ben Hutchings
ff3782677e Merge branch 'xaiki/linux-debian/master' into sid
add a refreshed version of fedoras make-use-of-platform-keyring patch
(closes #935945)

See merge request kernel-team/linux!177
2019-11-09 14:45:17 +00:00
Ben Hutchings
40548dd4f6 Fix patch header and changelog line for "KEYS: Make use of platform keyring …" 2019-11-09 14:43:28 +00:00
Ben Hutchings
27cf2dd882 Merge branch 'alpernebbi-guest/linux-udeb-atmel-mxt-ts' into sid
This is used in multiple chromebooks for both touchpad and
touchscreen. It's also available on both amd64 and arm64 ones. On my
machine it doesn't work without i2c-rk3x, but works somewhat good with
it. Touchscreen works, touchpad buttons can click but it can not move
the mouse.

See merge request kernel-team/linux!176
2019-11-09 14:23:58 +00:00
Salvatore Bonaccorso
5ad0040dcf Add CVE id reference for CVE-2019-17133 2019-11-09 00:05:07 +01:00
Ben Hutchings
5934b689b1 Merge branch 'sid' into sid-embargoed
* Drop "KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
  active" which is included in 5.3.9
* Resolve textual conflicts in debian/changelog and debian/patches/series
2019-11-08 22:49:23 +00:00
Salvatore Bonaccorso
a9b4ed488e Fix typos in commit messages change comments 2019-11-08 23:44:37 +01:00
Ben Hutchings
ca17b8136a Update to 5.3.9
* Drop/refresh patches as appropriate
* Bump ABI to 2; drop ABI reference
2019-11-08 22:41:08 +00:00
Salvatore Bonaccorso
7c5c2237f8 Rename ATOM_TREMONT_D back to back to Rename ATOM_TREMONT_X
The stable series do not contain 5ebb34edbe ("x86/intel: Aggregate
microserver naming") uniforms the name for big and small microservers.
2019-11-08 23:40:56 +01:00
Ben Hutchings
730c21e9b5 crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705) 2019-11-08 21:38:41 +00:00
Ben Hutchings
8a69674af8 crypto: Explicitly enable ASYMMETRIC_KEY_TYPE, ASYMMETRIC_PUBLIC_KEY_SUBTYPE
These are selected by SYSTEM_DATA_VERIFICATION, which is in turn
selected by MODULE_SIG and CFG80211_REQUIRE_SIGNED_REGDB.  So far as I
can see, one or both of MODULE_SIG and CFG80211_REQUIRE_SIGNED_REGDB
are enabled in all configs except m68k.

It would be nice if we could avoid this on armel/marvell, but I don't
think that's going to be practical.
2019-11-08 21:37:01 +00:00
Ben Hutchings
60a0bfca93 debian/changelog: Add closure of #942881
The root cause of this bug seems to be a problem with the Yubikey
or its supporting software, but since we've only seen it once so far
it seems likely that it will affect the next package version.
2019-11-08 20:58:15 +00:00
Salvatore Bonaccorso
7f85fb3067 Merge branch 'sid' into sid-embargoed 2019-11-08 07:12:58 +01:00
Salvatore Bonaccorso
929ee70528 x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs 2019-11-08 00:05:37 +01:00
Salvatore Bonaccorso
5c057b494c Add ABI reference for 5.3.0-1 2019-11-07 15:54:34 +01:00
Ben Hutchings
29d3643317 [x86] KVM: Add mitigation for Machine Check Error on Page Size Change
(aka iTLB multi-hit, CVE-2018-12207)
2019-11-07 02:05:06 +00:00
Ben Hutchings
6f534c8a6a [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135) 2019-11-07 02:04:34 +00:00
Ben Hutchings
d06731909d [arm64] linux-headers: Disable check for a 32-bit compiler
Closes: #943953

Cherry-pick these from upstream:

* arm64: vdso32: Fix broken compat vDSO build warnings
* arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option

Then update our build config:

* debian/bin/gencontrol.py: Optionally define CROSS_COMPILE_COMPAT make
  variable
* Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting
  CROSS_COMPILE_COMPAT_VDSO
2019-11-01 16:58:37 +00:00
Ben Hutchings
cea4f80f43 debian/patches/series: Fix up patch group comments 2019-10-29 12:12:06 +01:00
Ben Hutchings
a366fb919c Merge branch 'sid+ena5.4' into 'sid'
drivers/net/ethernet/amazon: Backport ENA driver from Linux v5.4rc5

See merge request kernel-team/linux!181
2019-10-29 11:09:52 +00:00
Noah Meyerhans
5654de1427 drivers/net/ethernet/amazon: Backport ENA driver from Linux v5.4rc5 2019-10-28 14:27:29 -07:00
Ben Hutchings
ca780733f8 Merge branch 'mr-salsa-175' into sid
[arm64,armhf] udeb: Add rockchip-io-domain to kernel-image

Without this module d-i cannot recognize, partition or install to my
SD cards due to a tuning error. But it looks like the module is
related to regulators (and is necessary for some other devices) so I
think it should go into kernel-image.

See merge request kernel-team/linux!175
2019-10-27 16:57:25 +01:00
Ben Hutchings
059fa5d8de Merge branch 'mr-salsa-174' into sid
[arm64] udeb: Add i2c-rk3x to i2c-modules

On my gru-kevin chromebook; touchpad, touchscreen, digitizer inputs, some sound codecs and TPM depend on I2C, which isn't available without this module.

See merge request kernel-team/linux!174
2019-10-27 16:55:15 +01:00
Ben Hutchings
c9cb5f7346 debian/config: Move all drivers/platform/x86 symbols to kernelarch-x86
These Kconfig symbols depend on X86 so it doesn't make sense to set
them in the top-level config.
2019-10-27 15:09:46 +00:00
Ben Hutchings
3123feab1f debian/config: Clean up with the help of kconfigeditor2
Drop USB_RIO500, which was removed in 5.3.7 as broken and obsolete.
2019-10-27 15:08:41 +00:00
Ben Hutchings
d1013116f1 Merge branch 'mr-salsa-170' into sid
[x86] enable missing modules and setting

See merge request kernel-team/linux!170
2019-10-27 15:04:17 +00:00
Ben Hutchings
706336f543 debian/tests/control: Mark python test as superficial
Running a static checker and unit tests on our scripts is not a
substitute for proper integration tests, which are still TBD.
2019-10-27 14:37:38 +00:00
Ben Hutchings
349112b1ab debian/README.source: Document code signing and how to test it 2019-10-26 14:59:34 +01:00
Ben Hutchings
51d8693766 debian/bin/gencontrol_signed.py: Use the correct templates for meta-packages
Commit c5e1ff85eb "gencontrol: Generalise substitution of debhelper
config template" used "image" as the base name for debhelper
configuration templates for all linux-image packages generated from
linux-signed-*.  We need to use "image.meta" for the meta-packages.
2019-10-26 14:47:44 +01:00
Bastian Blank
e5a5bb931a [amd64/cloud-amd64] Re-enable RTC drivers 2019-10-25 23:25:50 +02:00
Ben Hutchings
6c2992841a debian/templates: Fix permissions of *.maintscript.in
These should not be executable, as that will cause debhelper to
try to execute them at build time.
2019-10-23 21:59:29 +01:00
Ben Hutchings
c3e0098c4d debian/templates/headers.postinst.in: Set executable for consistency
All the other maintainer script templates are executable.
2019-10-23 21:47:25 +01:00
Ben Hutchings
eb2f83b972 Copy template file permissions to output files
Some debhelper config files should be executable, because either:

1. debhelper should execute them (with dh-exec) instead of reading them
   directly.  Currently we change the permissions after substitution.
2. They are included in signed-template binary packages, and lintian
   will complain about them being non-executable scripts.  Currently
   we override these warnings.

Replace the special case code by copying the file permissions bits
from the template to the output file in substitute_debhelper_config().
2019-10-23 21:47:25 +01:00
Ben Hutchings
f056dd541c debian/lib/python/debian_linux/utils.py: Store file mode for templates 2019-10-23 21:47:25 +01:00
Ben Hutchings
c8e5a878e8 debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles 2019-10-23 21:47:25 +01:00
Ben Hutchings
307b011acf Add maint scripts to meta-packages to convert doc directories to symlinks
dpkg keeps all directories of the old package version (and renames
the old files) until an upgrade is complete.  This prevents simply
replacing a directory with a symlink.  We have to use
dpkg-maintscript-helper to work around this limitation.

Closes: #942861
2019-10-23 21:47:25 +01:00
Ben Hutchings
c5e1ff85eb gencontrol: Generalise substitution of debhelper config template
Currently we have two copies of the _substitute_file() method, and
lots of somewhat similar invocations of it since different binary
packages need different sets of debhelper configs.

We already name the templates in a fairly consistent way, so we can
replace this with a loop that tries to expand all possible templates
for a package and ignores those that are missing.  Add a method for
this to the Gencontrol base class and use it in both subclasses
where we prevously used _substitute_file().
2019-10-23 21:47:25 +01:00
Ben Hutchings
90d4cf3fc7 debian/.gitignore, debian/rules: Generalise patterns for generated files
Change the patterns to be based on extensions, so we don't need to
think about which specific binary packages have which files.
2019-10-23 21:46:17 +01:00
Ben Hutchings
7d227b2b82 debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars
It's somewhat clearer what we're substituting into a format string
if we name the variables inline, similarly to template files.

In some places we format a mixture of template and other variables.
Leave those unchanged for now.
2019-10-23 19:30:03 +01:00
Ben Hutchings
27c36450bc debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars
self.vars only holds the template variables that don't depend on
architecture/featureset/flavour.  We should consistently use the
vars parameter for substitutions, where available.
2019-10-23 19:29:19 +01:00
Ben Hutchings
a5f3bebd0b debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't build it 2019-10-23 19:02:06 +01:00