Change log for linux-grsec package in Debian

linux-grsec (4.9.65-2+grsecunoff1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.9.65-1.
  * Update grsec-unofficial patch to v4.9.65-unofficial_grsec.
  * grsec/gen-patch: fix sed command to correctly update patch name.
  * Disable patches with grsec conflicts:
    - bugfix/all/mm-mmap.c-do-not-blow-on-prot_none-map_fixed-holes-i,
      bugfix/all/mm-mmap.c-expand_downwards-don-t-require-the-gap-if-,
      bugfix/x86/mmap-remember-the-map_fixed-flag-as-vm_fixed and
      bugfix/x86/mmap-add-an-exception-to-the-stack-gap-for-hotspot-jvm.
    - debian/s390-mm-avoid-abi-change-in-4.9.52.

 -- Yves-Alexis Perez <email address hidden>  Sat, 09 Dec 2017 16:15:02 +0100

linux-grsec (4.9.51-1+grsecunoff2) unstable; urgency=medium

  [ Ben Hutchings ]
  * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
    error triggered by a ReSTified copy of the GFDL

 -- Yves-Alexis Perez <email address hidden>  Tue, 03 Oct 2017 13:13:01 +0200

linux-grsec (4.9.18-1+grsec201703261106+1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.9.18-1.
  * Update grsecurity patch to 3.1-4.9.18-201703261106.

 -- Yves-Alexis Perez <email address hidden>  Thu, 30 Mar 2017 17:15:47 +0200

linux-grsec (4.9.16-1+grsec201703180820+1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.9.16-1.
  * Update grsecurity patch to 3.1-4.9.16-201703180820.
  * debian/patches:
    - disable debian/amd64-don-t-warn-about-expected-w+x-pages-on-xen,
    bugfix/all/media-dvb-usb-don-t-use-stack-for-firmware-load and
    bugfix/all/media-dvb-usb-don-t-use-stack-for-reset-either (conflict with
    grsecurity)

 -- Yves-Alexis Perez <email address hidden>  Thu, 23 Mar 2017 09:51:40 +0100

linux-grsec (4.9.13-1+grsec201703052141+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.9.13-201703052141.

 -- Yves-Alexis Perez <email address hidden>  Wed, 08 Mar 2017 16:17:40 +0100

linux-grsec (4.9.13-1+grsec201702270729+1) unstable; urgency=medium

  * Pull src:linux changes up to 4.9.13-1.
  * Update grsecurity to 3.1-4.9.13-201702270729.

 -- Yves-Alexis Perez <email address hidden>  Mon, 27 Feb 2017 23:11:57 +0100

linux-grsec (4.9.10-1+grsec201702162016+1) unstable; urgency=medium

  * Pull src:linux changes up to 4.9.10-1.
  * Update grsecurity patch to 3.1-4.9.10-201702162016.
  * debian/patches/series:
    - bugfix/sparc/revert-sparc-move-exports-to-definitions.patch and
    bugfix/all/module-disable-matching-missing-version-crc.patch disabled,
    they conflict with grsecurity.
  * debian/config/featureset-grsec/config:
    - sync config with latest grsecurity
    - enable RAP for all arches
  * debian/config/featureset-grsec/defines: update gcc plugin dependency for
    gcc-6.                                                      closes: #835949

 -- Yves-Alexis Perez <email address hidden>  Sat, 18 Feb 2017 13:56:16 +0100

linux-grsec (4.8.15-2+grsec201701031913+1) unstable; urgency=medium

  * Pull change from src:linux up to 4.8.15-2.
  * Update grsecurity patch to 3.1-4.8.15-201701031913.

 -- Yves-Alexis Perez <email address hidden>  Fri, 06 Jan 2017 22:16:13 +0100

linux-grsec (4.8.15-1+grsec201612151923+1) unstable; urgency=medium

  * Merge changes from src:linux up to 4.8.15-1.
    - include the flex change, fixing FTBFS.                    closes: #848803
  * Update grsecurity to 3.1-4.8.15-201612151923.
  * debian/patches:
    - bugfix/all/net-handle-no-dst-on-skb-in-icmp6_send.patch disabled,
      already included in grsecurity.
  * set CONFIG_LEGACY_VSYSCALL_NONE following src:linux.

 -- Yves-Alexis Perez <email address hidden>  Tue, 20 Dec 2016 16:13:41 +0100

linux-grsec (4.8.11-1+grsec201612062306+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.8.12-201612062306, includes patch for
    CVE-2016-855 (although unprivileged userns are not enabled by default).

 -- Yves-Alexis Perez <email address hidden>  Wed, 07 Dec 2016 13:16:31 +0100

linux-grsec (4.8.11-1+grsec201611271225+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.8.11-201611271225.
  * Disable patches with conflicts:
    - bugfix/all/mpi-Fix-NULL-ptr-dereference-in-mpi_powm-ver-3 is already
    included
    - bugfix/all/mnt-Add-a-per-mount-namespace-limit-on-the-number-of is too
    invasive and unpriviledged user namespaces are disabled by default (the
    patch might be included in grsecurity at a later point).

 -- Yves-Alexis Perez <email address hidden>  Sat, 03 Dec 2016 14:43:20 +0100

linux-grsec (4.8.7-1+grsec201611102210+1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.8.7-1.
  * Update grsecurity patch to 3.1-4.8.7-201611102210.
  * debian/patches:
    - features/all/security-perf-allow-further-restriction-of-perf_event_open
      disabled since it's taken from grsecurity.

 -- Yves-Alexis Perez <email address hidden>  Mon, 14 Nov 2016 13:16:26 +0100

linux-grsec (4.7.8-1+grsec201610161720+1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.7.8-1.
  * Update grsecurity patch to 3.1-4.7.8-201610161720
  * debian/patches: disable patch already included in grsecurity:
    - bugfix/all/scsi-arcmsr-buffer-overflow-in-arcmsr_iop_message_xf.patch
  * debian/patches: disable patch with grsecurity conflict:
    - features/x86/x86-kaslr-x86-power-remove-x86-hibernation-restricti.patch

 -- Yves-Alexis Perez <email address hidden>  Wed, 19 Oct 2016 22:53:02 +0200

linux-grsec (4.7.5-1+grsec201609261522+1) unstable; urgency=medium

  * Pull changes from src:linux up to 4.7.5-1.
  * Grsecurity patch updated to 3.1-4.7.5-201609261522.

 -- Yves-Alexis Perez <email address hidden>  Tue, 27 Sep 2016 21:40:06 +0200

linux-grsec (4.7.4-1+grsec201609152234+1) unstable; urgency=medium

  * debian/templates/image.bug/control:
    - update source package name in reportbug template.
  * Update grsecurity patch to 3.1-4.7.4-201609152234.

 -- Yves-Alexis Perez <email address hidden>  Mon, 19 Sep 2016 21:02:57 +0200

linux-grsec (4.7.2-1+grsec201608211829+2) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.7.2-201608312326.

 -- Yves-Alexis Perez <email address hidden>  Fri, 02 Sep 2016 21:55:18 +0200

linux-grsec (4.7.2-1+grsec201608211829+1) unstable; urgency=medium

  * Pull src:linux changes up to 4.7.2-1.
  * Update grsecurity patch to 3.1-4.7.2-201608211829.
  * config:
    - RANDOMISE_BASE is already enabled in the Debian builds, drop it.

 -- Yves-Alexis Perez <email address hidden>  Tue, 30 Aug 2016 23:03:25 +0200

linux-grsec (4.6.4-1+grsec201607242014+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.6.4-201607242014.

 -- Yves-Alexis Perez <email address hidden>  Tue, 26 Jul 2016 20:47:17 +0200

linux-grsec (4.6.4-1+grsec201607192040+1) unstable; urgency=medium

  * Pull src:linux changes up to 4.6.4-1.
  * Update grsecurity patch to 3.1-4.6.4-201607192040.
  * debian/patches:
    - disable bugfix/all/apparmor-fix-oops-validate-buffer-size-in-apparmor_s,
      already included in grsecurity.

 -- Yves-Alexis Perez <email address hidden>  Sun, 24 Jul 2016 09:33:25 +0200

linux-grsec (4.6.3-1+grsec201607062159+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.6.3-201607062159.

 -- Yves-Alexis Perez <email address hidden>  Thu, 07 Jul 2016 10:04:14 +0200

linux-grsec (4.5.7-1+grsec201606292300+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.5.7-201606292300.
  * debian/patches/series:
    - disable bugfix/all/kbuild-use-nostdinc-in-compile-tests because of
      conflict with grsecurity patch.
  * Disable GRSEC_PROC_USER and use GRSEC_PROC_USERGROUP instead.

 -- Yves-Alexis Perez <email address hidden>  Thu, 30 Jun 2016 13:55:43 +0200

linux-grsec (4.5.7-1+grsec201606222150+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.5.7-201606222150.

 -- Yves-Alexis Perez <email address hidden>  Thu, 23 Jun 2016 21:05:18 +0200

linux-grsec (4.5.7-1+grsec201606142010+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.5.7-201606142010.

 -- Yves-Alexis Perez <email address hidden>  Fri, 17 Jun 2016 21:20:13 +0200

linux-grsec (4.5.7-1+grsec201606110914+1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.6
    - perf/x86/intel/pt: Generate PMI in the STOP region as well
    - perf/core: Fix perf_event_open() vs. execve() race
    - arm64: Fix typo in the pmdp_huge_get_and_clear() definition
    - arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
    - arm64: Implement ptep_set_access_flags() for hardware AF/DBM
    - arm64: Implement pmdp_set_access_flags() for hardware AF/DBM
    - arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
    - arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
    - kvm: arm64: Fix EC field in inject_abt64
    - remove directory incorrectly tries to set delete on close on non-empty directories
    - fs/cifs: correctly to anonymous authentication via NTLMSSP
    - fs/cifs: correctly to anonymous authentication for the LANMAN authentication
    - fs/cifs: correctly to anonymous authentication for the NTLM(v1) authentication
    - fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication
    - asix: Fix offset calculation in asix_rx_fixup() causing slow transmissions
    - ring-buffer: Use long for nr_pages to avoid overflow failures
    - ring-buffer: Prevent overflow of size in ring_buffer_resize()
    - crypto: caam - fix caam_jr_alloc() ret code
    - crypto: talitos - fix ahash algorithms registration
    - crypto: sun4i-ss - Replace spinlock_bh by spin_lock_irq{save|restore}
    - clk: qcom: msm8916: Fix crypto clock flags
    - sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded systems
    - mfd: omap-usb-tll: Fix scheduling while atomic BUG
    - Input: pwm-beeper - fix - scheduling while atomic
    - irqchip/gic: Ensure ordering between read of INTACK and shared data
    - irqchip/gic-v3: Configure all interrupts as non-secure Group-1
    - nfc: st21nfca: Fix static checker warning
    - can: fix handling of unmodifiable configuration options
    - mmc: mmc: Fix partition switch timeout for some eMMCs
    - ACPI / PM: Export acpi_device_fix_up_power()
    - mmc: sdhci-acpi: Ensure connected devices are powered when probing
    - mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal strings
    - dell-rbtn: Ignore ACPI notifications if device is suspended
    - mmc: longer timeout for long read time quirk
    - mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - Bluetooth: vhci: fix open_timeout vs. hdev race
    - Bluetooth: vhci: purge unhandled skbs
    - Bluetooth: vhci: Fix race at creating hci device
    - mei: fix NULL dereferencing during FW initiated disconnection
    - mei: amthif: discard not read messages
    - mei: bus: call mei_cl_read_start under device lock
    - USB: serial: mxuport: fix use-after-free in probe error path
    - USB: serial: keyspan: fix use-after-free in probe error path
    - USB: serial: quatech2: fix use-after-free in probe error path
    - USB: serial: io_edgeport: fix memory leaks in attach error path
    - USB: serial: io_edgeport: fix memory leaks in probe error path
    - USB: serial: option: add support for Cinterion PH8 and AHxx
    - USB: serial: option: add more ZTE device ids
    - USB: serial: option: add even more ZTE device ids
    - usb: gadget: f_fs: Fix EFAULT generation for async read operations
    - usb: f_mass_storage: test whether thread is running before starting another
    - usb: misc: usbtest: fix pattern tests for scatterlists.
    - USB: leave LPM alone if possible when binding/unbinding interface drivers
    - usb: gadget: udc: core: Fix argument of dev_err() in usb_gadget_map_request()
    - staging: comedi: das1800: fix possible NULL dereference
    - KVM: MTRR: remove MSR 0x2f8
    - KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
    - MIPS: KVM: Fix timer IRQ race when freezing timer
    - MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
    - KVM: x86: mask CPUID(0xD,0x1).EAX against host value
    - xen/x86: actually allocate legacy interrupts on PV guests
    - tty: vt, return error when con_startup fails
    - TTY: n_gsm, fix false positive WARN_ON
    - tty/serial: atmel: fix hardware handshake selection
    - Fix OpenSSH pty regression on close
    - serial: 8250_pci: fix divide error bug if baud rate is 0
    - serial: 8250_mid: use proper bar for DNV platform
    - serial: 8250_mid: recognize interrupt source in handler
    - serial: samsung: Reorder the sequence of clock control when call s3c24xx_serial_set_termios()
    - locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
    - clk: bcm2835: add locking to pll*_on/off methods
    - watchdog: sp5100_tco: properly check for new register layouts
    - mcb: Fixed bar number assignment for the gdd
    - ALSA: hda/realtek - New codecs support for ALC234/ALC274/ALC294
    - ALSA: hda - Fix headphone noise on Dell XPS 13 9360
    - ALSA: hda/realtek - Add support for ALC295/ALC3254
    - ALSA: hda - Fix headset mic detection problem for one Dell machine
    - IB/srp: Fix a debug kernel crash
    - thunderbolt: Fix double free of drom buffer
    - SIGNAL: Move generic copy_siginfo() to signal.h
    - UBI: Fix static volume checks when Fastmap is used
    - hpfs: fix remount failure when there are no options changed
    - hpfs: implement the show_options method
    - scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
    - Revert "scsi: fix soft lockup in scsi_remove_target() on module removal"
    - kbuild: move -Wunused-const-variable to W=1 warning level
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.7
    - MIPS64: R6: R2 emulation bugfix
    - MIPS: math-emu: Fix jalr emulation when rd == $0
    - MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
    - MIPS: Don't unwind to user mode with EVA
    - MIPS: Avoid using unwind_stack() with usermode
    - MIPS: Fix siginfo.h to use strict posix types
    - MIPS: Fix uapi include in exported asm/siginfo.h
    - MIPS: Fix watchpoint restoration
    - MIPS: Flush highmem pages in __flush_dcache_page
    - MIPS: Handle highmem pages in __update_cache
    - MIPS: Sync icache & dcache in set_pte_at
    - MIPS: Loongson-3: Fix build error after ld-version.sh modification
    - MIPS: ath79: make bootconsole wait for both THRE and TEMT
    - MIPS: Reserve nosave data for hibernation
    - MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
    - MIPS: Use copy_s.fmt rather than copy_u.fmt
    - MIPS: Fix MSA ld_*/st_* asm macros to use PTR_ADDU
    - MIPS: Prevent "restoration" of MSA context in non-MSA kernels
    - MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
    - MIPS: ptrace: Fix FP context restoration FCSR regression
    - MIPS: ptrace: Prevent writes to read-only FCSR bits
    - MIPS: Fix sigreturn via VDSO on microMIPS kernel
    - MIPS: Build microMIPS VDSO for microMIPS kernels
    - MIPS: lib: Mark intrinsics notrace
    - MIPS: VDSO: Build with `-fno-strict-aliasing'
    - affs: fix remount failure when there are no options changed
    - ASoC: ak4642: Enable cache usage to fix crashes on resume
    - Input: uinput - handle compat ioctl for UI_SET_PHYS
    - Input: xpad - move pending clear to the correct location
    - Input: xpad - prevent spurious input from wired Xbox 360 controllers
    - ARM: sun4i: dt: Enable dram gate 5 (tve0 clock) for simplefb TV output
    - ARM: sun7i: dt: Enable dram gate 5 (tve0 clock) for simplefb TV output
    - ARM: mvebu: fix GPIO config on the Linksys boards
    - ARM: dts: at91: fix typo in sama5d2 PIN_PD24 description
    - ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on exynos4210-trats
    - ARM: dts: imx35: restore existing used clock enumeration
    - ath9k: Add a module parameter to invert LED polarity.
    - ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
    - ath10k: fix debugfs pktlog_filter write
    - ath10k: fix firmware assert in monitor mode
    - ath10k: fix rx_channel during hw reconfigure
    - ath10k: fix kernel panic, move arvifs list head init before htt init
    - ath5k: Change led pin configuration for compaq c700 laptop
    - hwrng: exynos - Fix unbalanced PM runtime put on timeout error path
    - rtlwifi: rtl8723be: Add antenna select module parameter
    - rtlwifi: btcoexist: Implement antenna selection
    - rtlwifi: Fix logic error in enter/exit power-save mode
    - rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in rtl_pci_reset_trx_ring
    - Revert "lpfc: Delete unnecessary checks before the function call mempool_destroy"
    - aacraid: Relinquish CPU during timeout wait
    - aacraid: Fix for aac_command_thread hang
    - aacraid: Fix for KDUMP driver hang
    - hwmon: (ads7828) Enable internal reference
    - mfd: intel-lpss: Save register context on suspend
    - mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup table correctly
    - PM / Runtime: Fix error path in pm_runtime_force_resume()
    - cpuidle: Indicate when a device has been unregistered
    - cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
    - clk: bcm2835: Fix PLL poweron
    - clk: at91: fix check of clk_register() returned value
    - clk: bcm2835: pll_off should only update CM_PLL_ANARST
    - clk: bcm2835: divider value has to be 1 or more
    - clk: bcm2835: correctly enable fractional clock support
    - pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
    - PCI: Disable all BAR sizing for devices with non-compliant BARs
    - media: v4l2-compat-ioctl32: fix missing reserved field copy in put_v4l2_create32
    - mm: use phys_addr_t for reserve_bootmem_region() arguments
    - wait/ptrace: assume __WALL if the child is traced
    - QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
    - powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
    - powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
    - Revert "powerpc/eeh: Fix crash in eeh_add_device_early() on Cell"
    - powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
    - xen/events: Don't move disabled irqs
    - xen: use same main loop for counting and remapping pages
    - sunrpc: fix stripping of padded MIC tokens
    - drm/gma500: Fix possible out of bounds read
    - drm/vmwgfx: Enable SVGA_3D_CMD_DX_SET_PREDICATION
    - drm/vmwgfx: use vmw_cmd_dx_cid_check for query commands.
    - drm/vmwgfx: Fix order of operation
    - drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
    - drm/amdgpu: Fix hdmi deep color support.
    - drm/i915/fbdev: Fix num_connector references in intel_fb_initial_config()
    - drm/fb_helper: Fix references to dev->mode_config.num_connector
    - drm/atomic: Verify connector->funcs != NULL when clearing states
    - Bluetooth: 6lowpan: Fix memory corruption of ipv6 destination address
    - drm/i915/psr: Try to program link training times correctly
    - drm/i915: Don't leave old junk in ilk active watermarks on readout
    - drm/i915: Fix watermarks for VLV/CHV
    - drm/imx: Match imx-ipuv3-crtc components using device node in platform data
    - ext4: fix hang when processing corrupted orphaned inode list
    - ext4: clean up error handling when orphan list is corrupted
    - ext4: fix check of dqget() return value in ext4_ioctl_setproject()
    - ext4: fix oops on corrupted filesystem
    - ext4: address UBSAN warning in mb_find_order_for_block()
    - ext4: silence UBSAN in ext4_mb_init()
    - nfs: avoid race that crashes nfs_init_commit
    - PM / sleep: Handle failures in device_suspend_late() consistently
    - dma-debug: avoid spinlock recursion when disabling dma-debug
    - scripts/package/Makefile: rpmbuild add support of RPMOPTS
    - mm: thp: avoid false positive VM_BUG_ON_PAGE in page_move_anon_rmap()
    - gcov: disable tree-loop-im to reduce stack usage
    - xfs: disallow rw remount on fs with unknown ro-compat features
    - xfs: Don't wrap growfs AGFL indexes
    - xfs: xfs_iflush_cluster fails to abort on error
    - xfs: fix inode validity check in xfs_iflush_cluster
    - xfs: skip stale inodes in xfs_iflush_cluster
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in btrfs_ioctl
    - Btrfs: do not create empty block group if we have allocated data
    - btrfs: allow balancing to dup with multi-device
    - btrfs: fix mixed block count of available space
    - btrfs: avoid overflowing f_bfree
    - btrfs: fix lock dep warning, move scratch dev out of device_list_mutex and uuid_mutex
    - btrfs: add read-only check to sysfs handler of features
    - btrfs: add check to sysfs handler of label
    - Btrfs: fix divide error upon chunk's stripe_len
    - Btrfs: remove BUG_ON()'s in btrfs_map_block
    - btrfs: fix lock dep warning move scratch super outside of chunk_mutex
    - btrfs: add write protection to SET_FEATURES ioctl
    - btrfs: fix int32 overflow in shrink_delalloc().
    - Btrfs: fix fspath error deallocation
    - btrfs: fix memory leak during RAID 5/6 device replacement
    - btrfs: pass the right error code to the btrfs_std_error
    - Btrfs: fix for incorrect directory entries after fsync log replay
    - Btrfs: fix empty symlink after creating symlink and fsync parent dir
    - Btrfs: fix unexpected return value of fiemap
    - btrfs: scrub: Set bbio to NULL before calling btrfs_map_block
    - btrfs: make state preallocation more speculative in __set_extent_bit
  * Update grsecurity patch to 3.1-4.5.7-201606110914.
  * debian/patches:
    - disable bugfix/x86/revert-sp5100_tco-fix-the-device-check-for-SB800-and,
      the bug should be fixed by e0a343f02
    - disable bugfix/all/KVM-MTRR-remove-MSR-0x2f8 and
      bugfix/mips/MIPS-Disable-preemption-during-prctl-PR_SET_FP_MODE,
      included upstream. 
    - debian/kernelvariables refreshed for new upstream version.

 -- Yves-Alexis Perez <email address hidden>  Sun, 12 Jun 2016 12:57:45 +0200

linux-grsec (4.5.5-1+grsec201605291201+1) unstable; urgency=medium

  * Import src:linux changes up to 4.5.5-1.
  * Update grsecurity patch to 3.1-4.5.5-201605291201.
  * debian/patches:
    - disable bugfix/all/usb-usbfs-fix-potential-infoleak-in-devio, already
      included in grsecurity.

 -- Yves-Alexis Perez <email address hidden>  Mon, 30 May 2016 17:11:56 +0200

linux-grsec (4.5.4-1+grsec201605131918+1) unstable; urgency=medium

  * Import changes from src:linux 4.5.4-1.
  * Update grsecurity patch to 3.1-4.5.4-201605131918.
  * debian/patches, disable patches with grsecurity conflicts:
    - bugfix/all/KEYS-Fix-ASN.1-indefinite-length-object-parsing.patch
    - bugfix/all/nf_conntrack-avoid-kernel-pointer-value-leak-in-slab.patch

 -- Yves-Alexis Perez <email address hidden>  Thu, 19 May 2016 17:01:11 +0200

linux-grsec (4.5.3-2+grsec201605080858+1) unstable; urgency=medium

  * Import changes from src:linux 4.5.3-2.
  * Update grsecurity patch to 3.1-4.5.3-201605080858.
  * debian/patches: disable patches already included in grsecurity
    - bugfix/all/bpf-fix-double-fdput-in-replace_map_fd_with_map_ptr.patch
    - bugfix/all/bpf-fix-refcnt-overflow.patch
    - bugfix/all/bpf-fix-check_map_func_compatibility-logic.patch
  * debian/config/amd64/grsec/config:
    - re-enable PARAVIRT now that RAP doesn't conflict with it anymore.

 -- Yves-Alexis Perez <email address hidden>  Mon, 09 May 2016 14:27:06 +0200

linux-grsec (4.5.2-2+grsec201604290633+2) unstable; urgency=medium

  * debian/config/defines:
    - don't build tools, they're provided by src:linux.         closes: #823595

 -- Yves-Alexis Perez <email address hidden>  Fri, 06 May 2016 15:27:51 +0200

linux-grsec (4.5.2-2+grsec201604290633+1) unstable; urgency=medium

  * Import all changes from src:linux until 4.5.2-1.
  * Update grsecurity patch to 3.1-4.5.2-201604290633.
  * debian/patches: disable patches conflicting with grsecurity:
    - features/all/aufs4/aufs4-standalone
    - features/all/securelevel/x86-lock-down-io-port-access-when-securelevel-is-ena
    - features/all/securelevel/acpi-limit-access-to-custom_method-if-securelevel-is
    - features/all/securelevel/x86-restrict-msr-access-when-securelevel-is-set
    - features/all/securelevel/asus-wmi-restrict-debugfs-interface-when-securelevel

  * debian/patches: disable patches already included in grsecurity:
    - bugfix/all/ptrace-being-capable-wrt-a-process-requires-mapped-uids-gids
    - bugfix/all/netfilter-x_tables-check-for-size-overflow
    - bugfix/all/netfilter-x_tables-validate-e-target_offset-early
    - bugfix/all/netfilter-x_tables-make-sure-e-next_offset-covers-re
    - bugfix/x86/x86-mm-32-enable-full-randomization-on-i386-and-x86_
    - bugfix/all/USB-usbip-fix-potential-out-of-bounds-write
  * Disable module signing for now until the proper architecture is setup.
  * debian/config/amd64/grsec/config:
    - enable PAX_RAP (prevents code reuse attacks)
    - disable PARAVIRT (incompatible with RAP)

 -- Yves-Alexis Perez <email address hidden>  Wed, 04 May 2016 15:57:49 +0200

linux-grsec (4.4.8-1+grsec201604252206+1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.8
    - hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
    - PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
    - parisc: Avoid function pointers for kernel exception routines
    - parisc: Fix kernel crash with reversed copy_from_user()
    - parisc: Unbreak handling exceptions from kernel modules
    - ALSA: timer: Use mod_timer() for rearming the system timer
    - ALSA: hda - Asus N750JV external subwoofer fixup
    - ALSA: hda - Fix white noise on Asus N750JV headphone
    - ALSA: hda - Apply fix for white noise on Asus N550JV, too
    - mm: fix invalid node in alloc_migrate_target()
    - powerpc/mm: Fixup preempt underflow with huge pages
    - libnvdimm: fix smart data retrieval
    - libnvdimm, pfn: fix uuid validation
    - compiler-gcc: disable -ftracer for __noclone functions
    - arm64: opcodes.h: Add arm big-endian config options before including arm header
    - drm/dp: move hw_mutex up the call stack
    - drm/udl: Use unlocked gem unreferencing
    - drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
    - drm/radeon: add another R7 370 quirk
    - drm/radeon: add a dpm quirk for all R7 370 parts
    - drm/amdgpu/gmc: move vram type fetching into sw_init
    - drm/amdgpu/gmc: use proper register for vram type on Fiji
    - xen/events: Mask a moving irq
    - tcp: convert cached rtt from usec to jiffies when feeding initial rto
    - tunnel: Clear IPCB(skb)->opt before dst_link_failure called
    - ipv4: only create late gso-skb if skb is already set up with CHECKSUM_PARTIAL
    - net: jme: fix suspend/resume on JMC260
    - net: vrf: Remove direct access to skb->data
    - net: qca_spi: Don't clear IFF_BROADCAST
    - net: qca_spi: clear IFF_TX_SKB_SHARING
    - net: fix bridge multicast packet checksum validation
    - sctp: lack the check for ports in sctp_v6_cmp_addr
    - mld, igmp: Fix reserved tailroom calculation
    - tipc: Revert "tipc: use existing sk_write_queue for outgoing packet chain"
    - qmi_wwan: add Sierra Wireless EM74xx device ID
    - ipv6: re-enable fragment header matching in ipv6_find_hdr
    - vxlan: fix missing options_len update on RX with collect metadata
    - cdc_ncm: toggle altsetting to force reset before setup
    - usbnet: cleanup after bind() in probe()
    - udp6: fix UDP/IPv6 encap resubmit path
    - tcp: fix tcpi_segs_in after connection establishment
    - ppp: release rtnl mutex when interface creation fails
    - net: validate variable length ll headers
    - ax25: add link layer header validation function
    - packet: validate variable length ll headers
    - bpf: avoid copying junk bytes in bpf_get_current_comm()
    - sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
    - sh_eth: advance 'rxdesc' later in sh_eth_ring_format()
    - qlcnic: Remove unnecessary usage of atomic_t
    - qlcnic: Fix mailbox completion handling during spurious interrupt
    - macvtap: always pass ethernet header in linear
    - mlxsw: spectrum: Check requested ageing time is valid
    - rocker: set FDB cleanup timer according to lowest ageing time
    - bridge: allow zero ageing time
    - ipv4: Don't do expensive useless work during inetdev destroy.
    - net: Fix use after free in the recvmmsg exit path
    - mlx4: add missing braces in verify_qp_parameters
    - farsync: fix off-by-one bug in fst_add_one
    - ath9k: fix buffer overrun for ar9287
    - ppp: ensure file->private_data can't be overridden
    - tcp/dccp: remove obsolete WARN_ON() in icmp handlers
    - qlge: Fix receive packets drop.
    - net: bcmgenet: fix dma api length mismatch
    - bonding: fix bond_get_stats()
    - ipv4: fix broadcast packets reception
    - ipv4: initialize flowi4_flags before calling fib_lookup()
    - ppp: take reference on channels netns
    - xfrm: Fix crash observed during device unregistration and decryption
    - qmi_wwan: add "D-Link DWM-221 B1" device id
    - ipv6: udp: fix UDP_MIB_IGNOREDMULTI updates
    - bridge: Allow set bridge ageing time when switchdev disabled
    - rtnl: fix msg size calculation in if_nlmsg_size()
    - tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter
    - tuntap: restore default qdisc
    - ipv4: l2tp: fix a potential issue in l2tp_ip_recv
    - ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
    - ip6_tunnel: set rtnl_link_ops before calling register_netdevice
    - ipv6: Count in extension headers in skb->network_header
    - mpls: find_outdev: check for err ptr in addition to NULL check
    - USB: uas: Limit qdepth at the scsi-host level
    - USB: uas: Add a new NO_REPORT_LUNS quirk
    - cdc-acm: fix NULL pointer reference
    - KVM: x86: Inject pending interrupt even if pending nmi exist
    - KVM: x86: reduce default value of halt_poll_ns parameter
    - MIPS: Fix MSA ld unaligned failure cases
    - pinctrl: pistachio: fix mfio84-89 function description and pinmux.
    - pinctrl: sh-pfc: only use dummy states for non-DT platforms
    - pinctrl: sunxi: Fix A33 external interrupts not working
    - pinctrl: nomadik: fix pull debug print inversion
    - pinctrl: freescale: imx: fix bogus check of of_iomap() return value
    - au0828: fix au0828_v4l2_close() dev_state race condition
    - au0828: Fix dev_state handling
    - coda: fix error path in case of missing pdata on non-DT platform
    - v4l: vsp1: Set the SRU CTRL0 register when starting the stream
    - pcmcia: db1xxx_ss: fix last irq_to_gpio user
    - rbd: use GFP_NOIO consistently for request allocations
    - virtio: virtio 1.0 cs04 spec compliance for reset
    - mac80211: properly deal with station hashtable insert errors
    - mac80211: avoid excessive stack usage in sta_info
    - mac80211: fix ibss scan parameters
    - mac80211: fix unnecessary frame drops in mesh fwding
    - mac80211: fix txq queue related crashes
    - usb: renesas_usbhs: avoid NULL pointer derefernce in usbhsf_pkt_handler()
    - usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
    - usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done()
    - iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
    - iio: accel: bmc150: fix endianness when reading axes
    - iio: gyro: bmg160: fix buffer read values
    - iio: gyro: bmg160: fix endianness when reading axes
    - sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes
    - fs: add file_dentry()
    - nfs: use file_dentry()
    - btrfs: fix crash/invalid memory access on fsync when using overlayfs
    - ext4: add lockdep annotations for i_data_sem
    - ext4: ignore quota mount options if the quota feature is enabled
    - iommu: Don't overwrite domain pointer when there is no default_domain
    - Btrfs: fix file/data loss caused by fsync after rename and new inode
    - arm64: replace read_lock to rcu lock in call_step_hook
    - perf: Do not double free
    - perf: Cure event->pending_disable race
    - mmc: sdhci-pci: Add support and PCI IDs for more Broxton host controllers
    - ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225
    - ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
    - ALSA: hda - fix front mic problem for a HP desktop
    - ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s
    - ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
    - ALSA: usb-audio: Add a quirk for Plantronics BT300
    - ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
    - HID: wacom: fix Bamboo ONE oops
    - HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
    - Revert "x86/PCI: Don't alloc pcibios-irq when MSI is enabled"
    - Revert "PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"
    - Revert "PCI, x86: Implement pcibios_alloc_irq() and pcibios_free_irq()"
    - staging: android: ion: Set the length of the DMA sg entries in buffer
    - usbvision: fix crash on detecting device with invalid configuration
    - Revert "usb: hub: do not clear BOS field during reset device"
  * debian/patches:
    - bugfix/all/usbvision-fix-overflow-of-interfaces-array and
    bugfix/all/media-usbvision-fix-crash-on-detecting-device-with-i disabled,
    included in 4.4.8.
  * Update grsecurity patch to 3.1-4.4.8-201604252206.

 -- Yves-Alexis Perez <email address hidden>  Thu, 28 Apr 2016 21:19:10 +0200

linux-grsec (4.4.7-1+grsec201604152208+1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.7
    - s390/cpumf: Fix lpp detection
    - regulator: core: avoid unused variable warning
    - regulator: core: Fix nested locking of supplies
    - ASoC: samsung: pass DMA channels as pointers
    - mmc: sh_mmcif: rework dma channel handling
    - mmc: sh_mmcif: Correct TX DMA channel allocation
    - x86/microcode/intel: Make early loader look for builtin microcode too
    - x86/microcode: Untangle from BLK_DEV_INITRD
    - x86/entry/compat: Keep TS_COMPAT set during signal delivery
    - perf/x86/intel: Add definition for PT PMI bit
    - x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant BARs
    - KVM: x86: fix missed hardware breakpoints
    - KVM: i8254: change PIT discard tick policy
    - KVM: fix spin_lock_init order on x86
    - KVM: VMX: avoid guest hang on invalid invept instruction
    - KVM: VMX: avoid guest hang on invalid invvpid instruction
    - KVM: VMX: fix nested vpid for old KVM guests
    - perf/core: Fix perf_sched_count derailment
    - perf tools: Dont stop PMU parsing on alias parse error
    - perf tools: Fix checking asprintf return value
    - perf tools: Fix python extension build
    - Thermal: Ignore invalid trip points
    - sched/cputime: Fix steal_account_process_tick() to always return jiffies
    - sched/preempt, sh: kmap_coherent relies on disabled preemption
    - EDAC/sb_edac: Fix computation of channel address
    - EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
    - s390: fix floating pointer register corruption (again)
    - s390/cpumf: add missing lpp magic initialization
    - s390/pci: enforce fmb page boundary rule
    - pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
    - PCI: Disable IO/MEM decoding for devices with non-compliant BARs
    - PCI: ACPI: IA64: fix IO port generic range check
    - x86/irq: Cure live lock in fixup_irqs()
    - x86/apic: Fix suspicious RCU usage in smp_trace_call_function_interrupt()
    - x86/iopl/64: Properly context-switch IOPL on Xen PV
    - x86/iopl: Fix iopl capability check on Xen PV
    - x86/mm: TLB_REMOTE_SEND_IPI should count pages
    - sg: fix dxferp in from_to case
    - aacraid: Fix RRQ overload
    - aacraid: Fix memory leak in aac_fib_map_free
    - aacraid: Set correct msix count for EEH recovery
    - sd: Fix discard granularity when LBPRZ=1
    - scsi: storvsc: fix SRB_STATUS_ABORTED handling
    - be2iscsi: set the boot_kset pointer to NULL in case of failure
    - aic7xxx: Fix queue depth handling
    - libnvdimm: Fix security issue with DSM IOCTL.
    - dm snapshot: disallow the COW and origin devices from being identical
    - dm: fix excessive dm-mq context switching
    - dm thin metadata: don't issue prefetches if a transaction abort has failed
    - dm cache: make sure every metadata function checks fail_io
    - dm: fix rq_end_stats() NULL pointer in dm_requeue_original_request()
    - usb: retry reset if a device times out
    - usb: hub: fix a typo in hub_port_init() leading to wrong logic
    - USB: uas: Reduce can_queue to MAX_CMNDS
    - USB: cdc-acm: more sanity checking
    - USB: iowarrior: fix oops with malicious USB descriptors
    - USB: usb_driver_claim_interface: add sanity checking
    - USB: mct_u232: add sanity checking in probe
    - USB: digi_acceleport: do sanity checking for the number of ports
    - USB: cypress_m8: add endpoint sanity check
    - USB: serial: cp210x: Adding GE Healthcare Device ID
    - USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
    - USB: option: add "D-Link DWM-221 B1" device id
    - pwc: Add USB id for Philips Spc880nc webcam
    - Input: powermate - fix oops with malicious USB descriptors
    - ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
    - ALSA: usb-audio: Add sanity checks for endpoint accesses
    - ALSA: usb-audio: add Microsoft HD-5001 to quirks
    - ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
    - ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call
    - Bluetooth: btusb: Add new AR3012 ID 13d3:3395
    - Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
    - Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
    - crypto: ccp - Add hash state import and export support
    - crypto: ccp - Limit the amount of information exported
    - crypto: ccp - Don't assume export/import areas are aligned
    - crypto: ccp - memset request context to zero during import
    - crypto: keywrap - memzero the correct memory
    - crypto: atmel - fix checks of error code returned by devm_ioremap_resource()
    - crypto: ux500 - fix checks of error code returned by devm_ioremap_resource()
    - crypto: marvell/cesa - forward devm_ioremap_resource() error code
    - X.509: Fix leap year handling again
    - mei: bus: check if the device is enabled before data transfer
    - tpm: fix the rollback in tpm_chip_register()
    - tpm_crb: tpm2_shutdown() must be called before tpm_chip_unregister()
    - tpm_eventlog.c: fix binary_bios_measurements
    - tpm: fix the cleanup of struct tpm_chip
    - HID: logitech: fix Dual Action gamepad support
    - HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
    - HID: multitouch: force retrieving of Win8 signature blob
    - HID: fix hid_ignore_special_drivers module parameter
    - staging: comedi: ni_tiocmd: change mistaken use of start_src for start_arg
    - staging: android: ion_test: fix check of platform_device_register_simple() error code
    - staging: comedi: ni_mio_common: fix the ni_write[blw]() functions
    - tty: Fix GPF in flush_to_ldisc(), part 2
    - net: irda: Fix use-after-free in irtty_open()
    - 8250: use callbacks to access UART_DLL/UART_DLM
    - saa7134: Fix bytesperline not being set correctly for planar formats
    - adv7511: TX_EDID_PRESENT is still 1 after a disconnect
    - bttv: Width must be a multiple of 16 when capturing planar formats
    - coda: fix first encoded frame payload
    - media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32
    - mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild
    - mtip32xx: Fix broken service thread handling
    - mtip32xx: Remove unwanted code from taskfile error handler
    - mtip32xx: Print exact time when an internal command is interrupted
    - mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
    - mtip32xx: Handle safe removal during IO
    - mtip32xx: Handle FTL rebuild failure state during device initialization
    - mtip32xx: Implement timeout handler
    - mtip32xx: Cleanup queued requests after surprise removal
    - ALSA: hda - Apply reboot D3 fix for CX20724 codec, too
    - ALSA: pcm: Avoid "BUG:" string for warnings again
    - ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
    - ALSA: hda - Don't handle ELD notify from invalid port
    - ALSA: hda - fix the mic mute button and led problem for a Lenovo AIO
    - ALSA: hda - Fix unconditional GPIO toggle via automute
    - tools/hv: Use include/uapi with __EXPORTED_HEADERS__
    - jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount path
    - brd: Fix discard request processing
    - IB/srpt: Simplify srpt_handle_tsk_mgmt()
    - bcache: cleaned up error handling around register_cache()
    - bcache: fix race of writeback thread starting before complete initialization
    - bcache: fix cache_set_flush() NULL pointer dereference on OOM
    - mm: memcontrol: reclaim when shrinking memory.high below usage
    - mm: memcontrol: reclaim and OOM kill when shrinking memory.max below usage
    - ia64: define ioremap_uc()
    - watchdog: don't run proc_watchdog_update if new value is same as old
    - watchdog: rc32434_wdt: fix ioctl error handling
    - Bluetooth: Add new AR3012 ID 0489:e095
    - Bluetooth: Fix potential buffer overflow with Add Advertising
    - cgroup: ignore css_sets associated with dead cgroups during migration
    - net: mvneta: enable change MAC address when interface is up
    - of: alloc anywhere from memblock if range not specified
    - vfs: show_vfsstat: do not ignore errors from show_devname method
    - splice: handle zero nr_pages in splice_to_pipe()
    - xtensa: ISS: don't hang if stdin EOF is reached
    - xtensa: fix preemption in {clear,copy}_user_highpage
    - xtensa: clear all DBREAKC registers on start
    - ARC: [BE] readl()/writel() to work in Big Endian CPU configuration
    - ARC: bitops: Remove non relevant comments
    - quota: Fix possible GPF due to uninitialised pointers
    - xfs: fix two memory leaks in xfs_attr_list.c error paths
    - raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang
    - md/raid5: Compare apples to apples (or sectors to sectors)
    - RAID5: check_reshape() shouldn't call mddev_suspend
    - RAID5: revert e9e4c377e2f563 to fix a livelock
    - raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang
    - md/raid5: preserve STRIPE_PREREAD_ACTIVE in break_stripe_batch_list
    - md: multipath: don't hardcopy bio in .make_request path
    - fuse: do not use iocb after it may have been freed
    - fuse: Add reference counting for fuse_io_priv
    - fs/coredump: prevent fsuid=0 dumps into user-controlled directories
    - rapidio/rionet: fix deadlock on SMP
    - ipr: Fix out-of-bounds null overwrite
    - ipr: Fix regression when loading firmware
    - iwlwifi: mvm: Fix paging memory leak
    - drm/radeon: disable runtime pm on PX laptops without dGPU power control
    - drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
    - drm/amdgpu: disable runtime pm on PX laptops without dGPU power control
    - drm/amdgpu: include the right version of gmc header files for iceland
    - IB/ipoib: fix for rare multicast join race condition
    - tracing: Have preempt(irqs)off trace preempt disabled functions
    - tracing: Fix crash from reading trace_pipe with sendfile
    - tracing: Fix trace_printk() to print when not using bprintk()
    - bitops: Do not default to __clear_bit() for __clear_bit_unlock()
    - scripts/coccinelle: modernize &
    - scripts/kconfig: allow building with make 3.80 again
    - kbuild/mkspec: fix grub2 installkernel issue
    - MAINTAINERS: Update mailing list and web page for hwmon subsystem
    - ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list
    - mmc: block: fix ABI regression of mmc_blk_ioctl
    - mmc: mmc_spi: Add Card Detect comments and fix CD GPIO case
    - mmc: sdhci: fix data timeout (part 1)
    - mmc: sdhci: fix data timeout (part 2)
    - mmc: sdhci: Fix override of timeout clk wrt max_busy_timeout
    - clk: rockchip: rk3368: fix cpuclk mux bit of big cpu-cluster
    - clk: rockchip: rk3368: fix cpuclk core dividers
    - clk: rockchip: rk3368: fix parents of video encoder/decoder
    - clk: rockchip: rk3368: fix hdmi_cec gate-register
    - clk: rockchip: add hclk_cpubus to the list of rk3188 critical clocks
    - clk: bcm2835: Fix setting of PLL divider clock rates
    - target: Fix target_release_cmd_kref shutdown comp leak
    - iser-target: Fix identification of login rx descriptor type
    - iser-target: Add new state ISER_CONN_BOUND to isert_conn
    - iser-target: Separate flows for np listeners and connections cma events
    - iser-target: Rework connection termination
    - nfsd4: fix bad bounds checking
    - nfsd: fix deadlock secinfo+readdir compound
    - ARM: dts: at91: sama5d3 Xplained: don't disable hsmci regulator
    - ARM: dts: at91: sama5d4 Xplained: don't disable hsmci regulator
    - ACPI / PM: Runtime resume devices when waking from hibernate
    - writeback, cgroup: fix premature wb_put() in locked_inode_to_wb_and_lock_list()
    - writeback, cgroup: fix use of the wrong bdi_writeback which mismatches the inode
    - Input: synaptics - handle spurious release of trackstick buttons, again
    - Input: ims-pcu - sanity check against missing interfaces
    - Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
    - ocfs2/dlm: fix race between convert and recovery
    - ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
    - mm/page_alloc: prevent merging between isolated and other pageblocks
    - mtd: onenand: fix deadlock in onenand_block_markbad
    - intel_idle: prevent SKL-H boot failure when C8+C9+C10 enabled
    - PM / sleep: Clear pm_suspend_global_flags upon hibernate
    - scsi_common: do not clobber fixed sense information
    - sched/cputime: Fix steal time accounting vs. CPU hotplug
    - perf/x86/pebs: Add workaround for broken OVFL status on HSW+
    - perf/x86/intel: Fix PEBS warning by only restoring active PMU in pmi
    - perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2
    - perf/x86/intel: Fix PEBS data source interpretation on Nehalem/Westmere
  * Update grsecurity patch to 3.1-4.4.7-201604152208.
  * debian/patches:
    - bugfix/all/firmware-remove-redundant-log-messages-from-drivers rebased
      against 4.4.7
    - bugfix/all/uas-fix-high-order-alloc disabled, included in 4.4.7.

 -- Yves-Alexis Perez <email address hidden>  Sun, 17 Apr 2016 11:52:27 +0200

linux-grsec (4.4.6-1+grsec201604100830+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.4.6-201604100830.

 -- Yves-Alexis Perez <email address hidden>  Fri, 15 Apr 2016 19:40:52 +0200

linux-grsec (4.4.6-1+grsec201604021734+1) unstable; urgency=medium

  * Update grsecurity patch to 3.1-4.4.6-201604021734.

 -- Yves-Alexis Perez <email address hidden>  Tue, 05 Apr 2016 13:22:51 +0200

linux-grsec (4.4.6-1+grsec201603171922+1) unstable; urgency=medium

  * Import src:linux until 4.4.6-1.
  * Update grsecurity patch to 3.1-4.4.6-201603171922.
  * debian/patches:
    - stop disabling
    bugfix/x86/x86-mm-pat-ensure-cpa-pfn-only-contains-page-frame-n, it now
    applies fine
    - disable debian/module-fix-abi-change-in-4.4.5, we don't warranty ABI
      stability and it conflicts against current grsecurity patch.

 -- Yves-Alexis Perez <email address hidden>  Sat, 19 Mar 2016 18:34:05 +0100