Commit Graph

11578 Commits

Author SHA1 Message Date
Salvatore Bonaccorso
c42ea367e3 Add CVE identifier for nfsd issue 2016-06-25 07:22:30 +02:00
Ben Hutchings
0bb71866b7 Ignore ABI change in x_tables 2016-06-25 02:05:12 +02:00
Ben Hutchings
12183bf924 nfsd: check permissions when setting ACLs (CVE-2016-XXXX) 2016-06-25 00:56:15 +02:00
Ben Hutchings
9fd7bbdf1a netfilter: x_tables: Add fixes for CVE-2016-4997, CVE-2016-4998
...and probably other issues never assigned an ID.
2016-06-25 00:19:29 +02:00
Ben Hutchings
f5f99415a2 percpu: Fix synchronization with chunk destruction (CVE-2016-4794) 2016-06-25 00:19:08 +02:00
Ben Hutchings
b782c52536 KEYS: potential uninitialized variable (CVE-2016-4470) 2016-06-25 00:18:47 +02:00
Ben Hutchings
b9ef626a40 [rt] Update to 4.6.2-rt5 2016-06-19 22:11:38 +01:00
Ben Hutchings
9edbacb8a5 MIPS: libgcc: Fix ABI change in 4.6.2 2016-06-17 01:50:50 +01:00
Ben Hutchings
966488336f [mips*] Fix ABI change in 4.6.2 2016-06-16 12:37:35 +01:00
Salvatore Bonaccorso
86e7845331 Prepare to release linux (4.6.2-1). 2016-06-15 21:45:02 +02:00
Ben Hutchings
ece80cbbec liblockdep: Add all the patches submitted upstream; drop one that's obsolete
(cherry picked from commit 9d20ab14dd77ffa306f6eb70c447c73f69077773)
2016-06-14 23:27:41 +01:00
Salvatore Bonaccorso
95cba203d5 rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244) 2016-06-11 07:26:02 +02:00
Salvatore Bonaccorso
f1921659a4 Add missing changelog entry for CVE-2016-5243 2016-06-11 07:24:34 +02:00
Salvatore Bonaccorso
01be9139c0 tipc: fix an infoleak in tipc_nl_compat_link_dump (CVE-2016-5243) 2016-06-11 07:18:28 +02:00
Salvatore Bonaccorso
91d6f22ed8 Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
proc: prevent stacking filesystems on top

ecryptfs: forbid opening files without mmap handler

sched: panic on corrupted stack end
2016-06-11 07:11:08 +02:00
Ben Hutchings
2622600fec [armel,armhf,sh4] linux-image: Do not suggest fdutils
BLK_DEV_FD has *never* been enabled on any of these architectures!
The old arm/footbridge configuration did enable it and this suggestion
seems to be have been thoughtlessly copied over to these other
architectures.
2016-06-09 17:44:47 +01:00
Ben Hutchings
1537ff1314 Update to 4.6.2 2016-06-09 17:44:47 +01:00
Ben Hutchings
0111b51fe6 Add ABI reference for 4.6.0-1 2016-06-09 03:07:58 +01:00
Ben Hutchings
fb04cb5ff1 Prepare to release linux (4.6.1-1). 2016-06-06 18:13:57 +01:00
Ben Hutchings
16ef878aea Set ABI to 1 and version to 4.6.1-1 2016-06-06 18:13:54 +01:00
Ben Hutchings
cab1f743c8 Disable MODULE_SIG for architectures not supported by linux-signed 2016-06-06 18:12:47 +01:00
Ben Hutchings
3df161c94f linux-image: Use linux-check-removal command in prerm; remove debconf templates
This removes most of the remaining complexity from the script.
2016-06-06 17:21:34 +01:00
Ben Hutchings
c739973adc debian/control: Update policy version to 3.9.8; no changes required 2016-06-05 23:32:11 +01:00
Ben Hutchings
7d4efba38e linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
linux-kernel-headers was removed from unstable in 2007, so presumably
was last released in etch.

libkxl0-dev still depends on it, so don't remove the Provides yet.
2016-06-05 23:21:01 +01:00
Ben Hutchings
f12b93bb75 debian/control: Drop obsolete versioned Depends and Breaks
The versions in stable are new enough to satisfy these.
2016-06-05 23:17:23 +01:00
Ben Hutchings
cb9d6a9756 [rt] Update to 4.6.1-rt3 2016-06-05 19:23:39 +01:00
Ben Hutchings
27d73ecf49 debian/patches/features/all/rt/genpatch.py: Use stable URLs in patch Origin headers
Previously each tarball would be uploaded to .../rt/<upstream-version>/
and then later moved to .../rt/<upstream-version>/older/.  Now they are
appearing in .../older/ immediately so we can construct stable URLs
under there.
2016-06-05 18:33:18 +01:00
Ben Hutchings
964980804a debian/patches/features/all/rt/genpatch.py: Use upstream tarball directly 2016-06-05 18:33:11 +01:00
Ben Hutchings
07db14c867 debian/patches/features/all/rt/genpatch.py: Fix mapping of -rt version to upstream version
Specifically, allow for a -rcN suffix on the upstream version.
2016-06-05 18:31:38 +01:00
Ben Hutchings
0724abc432 debian/patches/features/all/rt/genpatch.py: Use Python 3 2016-06-05 17:41:39 +01:00
Ben Hutchings
4e2a281abe Update to 4.6.1 2016-06-05 14:30:35 +01:00
Ben Hutchings
7569482f9b Merge branch 'sid' 2016-06-05 14:16:31 +01:00
Ben Hutchings
8ed7991db8 linux-image: Make a newly installed kernel the default if the package was previously removed
Currently the postinst script distinguishes installation vs upgrade by
checking whether its second argument is empty.  However, it will only
be empty if the package was *never* installed before, or was purged.
If the package has been installed, then removed, and is now being
installed again, it's seen as an upgrade.

Unfortunately dpkg only tells the preinst script whether or not this
is an upgrade.  So create a flag file there, consume it in postinst
and remove it in postrm.
2016-06-05 02:11:45 +01:00
Ben Hutchings
586edb84cd linux-image: postrm: Update default symlinks before running hook scripts
Currently the default symlinks may be broken when we run hook scripts,
causing removal to fail if a hook (e.g. lilo) relies on them.
2016-06-05 02:11:44 +01:00
Ben Hutchings
e4657e0ec4 linux-image: Rewrite maintainer scripts in shell
Use the new linux-update-symlinks command for symlink updates.
Drop support for minimal_swap, no_symlinks, use_hard_links and *_hook
parameters in /etc/kernel-img.conf.

Thanks to Aurelien Jarno and Santiago Vila for pointing out the
ischroot command and that it's in an essential package (i.e. doesn't
add a dependency).
2016-06-05 02:11:44 +01:00
Ben Hutchings
c631f1f543 [mips*r6*] Disable these architectures until dak recognises them as valid in the control file 2016-06-04 18:33:37 +01:00
Ben Hutchings
a8fb2b9fbe mtd: Disable slram and phram when securelevel is enabled 2016-06-03 01:15:37 +01:00
Ben Hutchings
a2480e25d8 Prepare to release linux (4.6-1~exp2). 2016-05-30 04:44:45 +01:00
Ben Hutchings
6976b08b12 Merge tag 'debian/4.5.5-1' 2016-05-29 22:33:26 +01:00
Ben Hutchings
f122b3358b Prepare to release linux (4.5.5-1). 2016-05-29 22:21:11 +01:00
Ben Hutchings
1edaa5dd82 Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
This was reverted upstream in 4.5.5 due to a regression but we have a fix for
the regression (probably).
2016-05-29 22:20:52 +01:00
Ben Hutchings
46e3b9492a dwc3-exynos: Fix deferred probing storm
Closes: #823552; thanks to Steinar H. Gunderson
2016-05-29 22:05:54 +01:00
Ben Hutchings
676db12dca Put architecture names in brackets in Roger's list of changes 2016-05-29 21:29:11 +01:00
Ben Hutchings
08942bb065 Add upstream fixes for various information leaks 2016-05-29 21:25:44 +01:00
Ben Hutchings
2d3c4236d2 linux-image: postrm: Remove unnecessary initialisation of debconf
We don't use debconf here any more.
2016-05-29 19:48:43 +01:00
Ben Hutchings
e55913c12b linux-image: Remove various unused variables in maintainer scripts 2016-05-29 19:46:39 +01:00
Ben Hutchings
97c01265fe [s390] udeb: Drop all packages, since s390 no longer has its own kernel 2016-05-29 14:50:24 +01:00
Ben Hutchings
5478b6afe5 [mipsn32{,r6}{,el}] Note that we build tools packages for these architectures 2016-05-29 14:46:02 +01:00
Ben Hutchings
84cecd403e [mips*r6*] Disable module signing for these new architectures
linux-signed only works for architectures in the main archive
2016-05-29 14:45:56 +01:00
Roger Shimizu
59fd45aa71 Change MFD_MAX77686 and RTC_DRV_MAX77686 from module to built-in
So far all RTC drivers enabled are built-in
2016-05-29 17:48:01 +09:00