Salvatore Bonaccorso
c42ea367e3
Add CVE identifier for nfsd issue
2016-06-25 07:22:30 +02:00
Ben Hutchings
0bb71866b7
Ignore ABI change in x_tables
2016-06-25 02:05:12 +02:00
Ben Hutchings
12183bf924
nfsd: check permissions when setting ACLs (CVE-2016-XXXX)
2016-06-25 00:56:15 +02:00
Ben Hutchings
9fd7bbdf1a
netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings
f5f99415a2
percpu: Fix synchronization with chunk destruction (CVE-2016-4794)
2016-06-25 00:19:08 +02:00
Ben Hutchings
b782c52536
KEYS: potential uninitialized variable (CVE-2016-4470)
2016-06-25 00:18:47 +02:00
Ben Hutchings
b9ef626a40
[rt] Update to 4.6.2-rt5
2016-06-19 22:11:38 +01:00
Ben Hutchings
9edbacb8a5
MIPS: libgcc: Fix ABI change in 4.6.2
2016-06-17 01:50:50 +01:00
Ben Hutchings
966488336f
[mips*] Fix ABI change in 4.6.2
2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso
86e7845331
Prepare to release linux (4.6.2-1).
2016-06-15 21:45:02 +02:00
Ben Hutchings
ece80cbbec
liblockdep: Add all the patches submitted upstream; drop one that's obsolete
...
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Salvatore Bonaccorso
95cba203d5
rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244)
2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso
f1921659a4
Add missing changelog entry for CVE-2016-5243
2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso
01be9139c0
tipc: fix an infoleak in tipc_nl_compat_link_dump (CVE-2016-5243)
2016-06-11 07:18:28 +02:00
Salvatore Bonaccorso
91d6f22ed8
Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
...
proc: prevent stacking filesystems on top
ecryptfs: forbid opening files without mmap handler
sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings
2622600fec
[armel,armhf,sh4] linux-image: Do not suggest fdutils
...
BLK_DEV_FD has *never* been enabled on any of these architectures!
The old arm/footbridge configuration did enable it and this suggestion
seems to be have been thoughtlessly copied over to these other
architectures.
2016-06-09 17:44:47 +01:00
Ben Hutchings
1537ff1314
Update to 4.6.2
2016-06-09 17:44:47 +01:00
Ben Hutchings
0111b51fe6
Add ABI reference for 4.6.0-1
2016-06-09 03:07:58 +01:00
Ben Hutchings
fb04cb5ff1
Prepare to release linux (4.6.1-1).
2016-06-06 18:13:57 +01:00
Ben Hutchings
16ef878aea
Set ABI to 1 and version to 4.6.1-1
2016-06-06 18:13:54 +01:00
Ben Hutchings
cab1f743c8
Disable MODULE_SIG for architectures not supported by linux-signed
2016-06-06 18:12:47 +01:00
Ben Hutchings
3df161c94f
linux-image: Use linux-check-removal command in prerm; remove debconf templates
...
This removes most of the remaining complexity from the script.
2016-06-06 17:21:34 +01:00
Ben Hutchings
c739973adc
debian/control: Update policy version to 3.9.8; no changes required
2016-06-05 23:32:11 +01:00
Ben Hutchings
7d4efba38e
linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
...
linux-kernel-headers was removed from unstable in 2007, so presumably
was last released in etch.
libkxl0-dev still depends on it, so don't remove the Provides yet.
2016-06-05 23:21:01 +01:00
Ben Hutchings
f12b93bb75
debian/control: Drop obsolete versioned Depends and Breaks
...
The versions in stable are new enough to satisfy these.
2016-06-05 23:17:23 +01:00
Ben Hutchings
cb9d6a9756
[rt] Update to 4.6.1-rt3
2016-06-05 19:23:39 +01:00
Ben Hutchings
27d73ecf49
debian/patches/features/all/rt/genpatch.py: Use stable URLs in patch Origin headers
...
Previously each tarball would be uploaded to .../rt/<upstream-version>/
and then later moved to .../rt/<upstream-version>/older/. Now they are
appearing in .../older/ immediately so we can construct stable URLs
under there.
2016-06-05 18:33:18 +01:00
Ben Hutchings
964980804a
debian/patches/features/all/rt/genpatch.py: Use upstream tarball directly
2016-06-05 18:33:11 +01:00
Ben Hutchings
07db14c867
debian/patches/features/all/rt/genpatch.py: Fix mapping of -rt version to upstream version
...
Specifically, allow for a -rcN suffix on the upstream version.
2016-06-05 18:31:38 +01:00
Ben Hutchings
0724abc432
debian/patches/features/all/rt/genpatch.py: Use Python 3
2016-06-05 17:41:39 +01:00
Ben Hutchings
4e2a281abe
Update to 4.6.1
2016-06-05 14:30:35 +01:00
Ben Hutchings
7569482f9b
Merge branch 'sid'
2016-06-05 14:16:31 +01:00
Ben Hutchings
8ed7991db8
linux-image: Make a newly installed kernel the default if the package was previously removed
...
Currently the postinst script distinguishes installation vs upgrade by
checking whether its second argument is empty. However, it will only
be empty if the package was *never* installed before, or was purged.
If the package has been installed, then removed, and is now being
installed again, it's seen as an upgrade.
Unfortunately dpkg only tells the preinst script whether or not this
is an upgrade. So create a flag file there, consume it in postinst
and remove it in postrm.
2016-06-05 02:11:45 +01:00
Ben Hutchings
586edb84cd
linux-image: postrm: Update default symlinks before running hook scripts
...
Currently the default symlinks may be broken when we run hook scripts,
causing removal to fail if a hook (e.g. lilo) relies on them.
2016-06-05 02:11:44 +01:00
Ben Hutchings
e4657e0ec4
linux-image: Rewrite maintainer scripts in shell
...
Use the new linux-update-symlinks command for symlink updates.
Drop support for minimal_swap, no_symlinks, use_hard_links and *_hook
parameters in /etc/kernel-img.conf.
Thanks to Aurelien Jarno and Santiago Vila for pointing out the
ischroot command and that it's in an essential package (i.e. doesn't
add a dependency).
2016-06-05 02:11:44 +01:00
Ben Hutchings
c631f1f543
[mips*r6*] Disable these architectures until dak recognises them as valid in the control file
2016-06-04 18:33:37 +01:00
Ben Hutchings
a8fb2b9fbe
mtd: Disable slram and phram when securelevel is enabled
2016-06-03 01:15:37 +01:00
Ben Hutchings
a2480e25d8
Prepare to release linux (4.6-1~exp2).
2016-05-30 04:44:45 +01:00
Ben Hutchings
6976b08b12
Merge tag 'debian/4.5.5-1'
2016-05-29 22:33:26 +01:00
Ben Hutchings
f122b3358b
Prepare to release linux (4.5.5-1).
2016-05-29 22:21:11 +01:00
Ben Hutchings
1edaa5dd82
Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
...
This was reverted upstream in 4.5.5 due to a regression but we have a fix for
the regression (probably).
2016-05-29 22:20:52 +01:00
Ben Hutchings
46e3b9492a
dwc3-exynos: Fix deferred probing storm
...
Closes : #823552 ; thanks to Steinar H. Gunderson
2016-05-29 22:05:54 +01:00
Ben Hutchings
676db12dca
Put architecture names in brackets in Roger's list of changes
2016-05-29 21:29:11 +01:00
Ben Hutchings
08942bb065
Add upstream fixes for various information leaks
2016-05-29 21:25:44 +01:00
Ben Hutchings
2d3c4236d2
linux-image: postrm: Remove unnecessary initialisation of debconf
...
We don't use debconf here any more.
2016-05-29 19:48:43 +01:00
Ben Hutchings
e55913c12b
linux-image: Remove various unused variables in maintainer scripts
2016-05-29 19:46:39 +01:00
Ben Hutchings
97c01265fe
[s390] udeb: Drop all packages, since s390 no longer has its own kernel
2016-05-29 14:50:24 +01:00
Ben Hutchings
5478b6afe5
[mipsn32{,r6}{,el}] Note that we build tools packages for these architectures
2016-05-29 14:46:02 +01:00
Ben Hutchings
84cecd403e
[mips*r6*] Disable module signing for these new architectures
...
linux-signed only works for architectures in the main archive
2016-05-29 14:45:56 +01:00
Roger Shimizu
59fd45aa71
Change MFD_MAX77686 and RTC_DRV_MAX77686 from module to built-in
...
So far all RTC drivers enabled are built-in
2016-05-29 17:48:01 +09:00