Change logs for linux-signed-arm64 source package in Disco

  • linux-signed-arm64 (4.19.20+1) unstable; urgency=medium
    
      * Sign kernel from linux 4.19.20-1
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.17
        - tty/ldsem: Wake up readers after timed out down_write()
        - tty: Hold tty_ldisc_lock() during tty_reopen()
        - tty: Simplify tty->count math in tty_reopen()
        - tty: Don't hold ldisc lock in tty_reopen() if ldisc present
        - can: gw: ensure DLC boundaries after CAN frame modification
          (CVE-2019-3701)
        - netfilter: nf_conncount: don't skip eviction when age is negative
        - netfilter: nf_conncount: split gc in two phases
        - netfilter: nf_conncount: restart search when nodes have been erased
          (Closes: #921616)
        - netfilter: nf_conncount: merge lookup and add functions
        - netfilter: nf_conncount: move all list iterations under spinlock
        - netfilter: nf_conncount: speculative garbage collection on empty lists
        - netfilter: nf_conncount: fix argument order to find_next_bit
        - [arm64] mmc: sdhci-msm: Disable CDR function on TX
        - Revert "scsi: target: iscsi: cxgbit: fix csk leak"
        - scsi: target: iscsi: cxgbit: fix csk leak
        - scsi: target: iscsi: cxgbit: fix csk leak
        - [arm64] kvm: consistently handle host HCR_EL2 flags
        - [arm64] Don't trap host pointer auth use to EL2
        - ipv6: fix kernel-infoleak in ipv6_local_error()
        - net: bridge: fix a bug on using a neighbour cache entry without checking
          its state
        - packet: Do not leak dev refcounts on error exit
        - tcp: change txhash on SYN-data timeout
        - tun: publish tfile after it's fully initialized
        - r8169: don't try to read counters if chip is in a PCI power-save state
        - bonding: update nest level on unlink
        - ip: on queued skb use skb_header_pointer instead of pskb_may_pull
        - r8169: load Realtek PHY driver module before r8169
        - crypto: authencesn - Avoid twice completion call in decrypt path
        - crypto: authenc - fix parsing key with misaligned rta_len
        - [x86] xen: Fix x86 sched_clock() interface for xen
        - Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io"
        - btrfs: wait on ordered extents on abort cleanup
        - Yama: Check for pid death before checking ancestry
        - scsi: core: Synchronize request queue PM status only on successful resume
        - [x86] scsi: sd: Fix cache_type_store()
        - [mips*] fix n32 compat_ipc_parse_version
        - [mips*] BCM47XX: Setup struct device for the SoC
        - [mips*] lantiq: Fix IPI interrupt handling
        - of: properties: add missing of_node_put
        - RDMA/nldev: Don't expose unsafe global rkey to regular user
        - [arm64] kaslr: ensure randomized quantities are clean to the PoC
        - [arm64] dts: marvell: armada-ap806: reserve PSCI area
        - [mips*] Disable MSI also when pcie-octeon.pcie_disable on
        - fix int_sqrt64() for very large numbers
        - media: vivid: fix error handling of kthread_run
        - media: vivid: set min width/height to a value > 0
        - bpf: in __bpf_redirect_no_mac pull mac only if present
        - ipv6: make icmp6_send() robust against null skb->dev
        - LSM: Check for NULL cred-security on free
        - netfilter: ebtables: account ebt_table_info to kmemcg
        - block: use rcu_work instead of call_rcu to avoid sleep in softirq
        - selinux: fix GPF on invalid policy
        - blockdev: Fix livelocks on loop device
        - sctp: allocate sctp_sockaddr_entry with kzalloc
        - tipc: fix uninit-value in in tipc_conn_rcv_sub
        - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
        - tipc: fix uninit-value in tipc_nl_compat_bearer_enable
        - tipc: fix uninit-value in tipc_nl_compat_link_set
        - tipc: fix uninit-value in tipc_nl_compat_name_table_dump
        - tipc: fix uninit-value in tipc_nl_compat_doit
        - block/loop: Don't grab "struct file" for vfs_getattr() operation.
        - block/loop: Use global lock for ioctl() operation.
        - loop: Fold __loop_release into loop_release
        - loop: Get rid of loop_index_mutex
        - loop: Push lo_ctl_mutex down into individual ioctls
        - loop: Split setting of lo_state from loop_clr_fd
        - loop: Push loop_ctl_mutex down into loop_clr_fd()
        - loop: Push loop_ctl_mutex down to loop_get_status()
        - loop: Push loop_ctl_mutex down to loop_set_status()
        - loop: Push loop_ctl_mutex down to loop_set_fd()
        - loop: Push loop_ctl_mutex down to loop_change_fd()
        - loop: Move special partition reread handling in loop_clr_fd()
        - loop: Move loop_reread_partitions() out of loop_ctl_mutex
        - loop: Fix deadlock when calling blkdev_reread_part()
        - loop: Avoid circular locking dependency between loop_ctl_mutex and
          bd_mutex
        - loop: Get rid of 'nested' acquisition of loop_ctl_mutex
        - loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
        - loop: drop caches if offset or block_size are changed
        - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
        - nbd: Use set_blocksize() to set device blocksize
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.18
        - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped
          address
        - [armhf, arm64 net: dsa: mv88x6xxx: mv88e6390 errata
        - net, skbuff: do not prefer skb allocation fails early
        - qmi_wwan: add MTU default to qmap network interface
        - r8169: Add support for new Realtek Ethernet
        - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
        - net: clear skb->tstamp in bridge forwarding path
        - netfilter: ipset: Allow matching on destination MAC address for mac and
          ipmac sets
        - [arm64] gpio: pl061: Move irq_chip definition inside struct pl061
        - drm/amd/display: Guard against null stream_state in set_crc_source
        - [x86] drm/amdkfd: fix interrupt spin lock
        - ixgbe: allow IPsec Tx offload in VEPA mode
        - [x86] platform: asus-wmi: Tell the EC the OS will handle the display
          off hotkey
        - e1000e: allow non-monotonic SYSTIM readings
        - [x86] usb: typec: tcpm: Do not disconnect link for self powered devices
        - of: overlay: add missing of_node_put() after add new node to changeset
        - writeback: don't decrement wb->refcnt if !wb->bdi
        - serial: set suppress_bind_attrs flag only if builtin
        - bpf: Allow narrow loads with offset > 0
        - ALSA: oxfw: add support for APOGEE duet FireWire
        - [x86] mce: Fix -Wmissing-prototypes warnings
        - [mips] SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
        - [arm64] perf: set suppress_bind_attrs flag to true
        - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
        - [arm64] clk: meson: meson8b: fix incorrect divider mapping in
          cpu_scale_table
        - samples: bpf: fix: error handling regarding kprobe_events
        - usb: gadget: udc: renesas_usb3: add a safety connection way for
          forced_b_device
        - fpga: altera-cvp: fix probing for multiple FPGAs on the bus
        - selinux: always allow mounting submounts
        - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
        - scsi: qedi: Check for session online before getting iSCSI TLV data.
        - drm/amdgpu: Reorder uvd ring init before uvd resume
        - rxe: IB_WR_REG_MR does not capture MR's iova field
        - efi/libstub: Disable some warnings for x86{,_64}
        - jffs2: Fix use of uninitialized delayed_work, lockdep breakage
        - clk: imx: make mux parent strings const
        - pstore/ram: Do not treat empty buffers as valid
        - media: uvcvideo: Refactor teardown of uvc on USB disconnect
        - powerpc/xmon: Fix invocation inside lock region
        - powerpc/pseries/cpuidle: Fix preempt warning
        - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
        - ASoC: use dma_ops of parent device for acp_audio_dma
        - media: venus: core: Set dma maximum segment size
        - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io'
        - net: call sk_dst_reset when set SO_DONTROUTE
        - scsi: target: use consistent left-aligned ASCII INQUIRY data
        - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long
          enough
        - [arm64] kasan: Increase stack size for KASAN_EXTRA
        - clk: imx6q: reset exclusive gates on init
        - [arm64] Fix minor issues with the dcache_by_line_op macro
        - bpf: relax verifier restriction on BPF_MOV | BPF_ALU
        - mmc: atmel-mci: do not assume idle after atmci_request_end
        - btrfs: volumes: Make sure there is no overlap of dev extents at mount
          time
        - btrfs: alloc_chunk: fix more DUP stripe size handling
        - btrfs: fix use-after-free due to race between replace start and cancel
        - btrfs: improve error handling of btrfs_add_link
        - tty/serial: do not free trasnmit buffer page under port lock
        - perf intel-pt: Fix error with config term "pt=0"
        - perf tests ARM: Disable breakpoint tests 32-bit
        - perf svghelper: Fix unchecked usage of strncpy()
        - perf parse-events: Fix unchecked usage of strncpy()
        - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
        - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
        - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
        - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
        - [x86] topology: Use total_cpus for max logical packages calculation
        - dm crypt: use u64 instead of sector_t to store iv_offset
        - dm kcopyd: Fix bug causing workqueue stalls
        - perf stat: Avoid segfaults caused by negated options
        - tools lib subcmd: Don't add the kernel sources to the include path
        - dm snapshot: Fix excessive memory usage and workqueue stalls
        - perf cs-etm: Correct packets swapping in cs_etm__flush()
        - perf tools: Add missing sigqueue() prototype for systems lacking it
        - perf tools: Add missing open_memstream() prototype for systems lacking it
        - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
        - clocksource/drivers/integrator-ap: Add missing of_node_put()
        - dm: Check for device sector overflow if CONFIG_LBDAF is not set
        - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029
        - ALSA: bebob: fix model-id of unit for Apogee Ensemble
        - sysfs: Disable lockdep for driver bind/unbind files
        - IB/usnic: Fix potential deadlock
        - scsi: mpt3sas: fix memory ordering on 64bit writes
        - scsi: smartpqi: correct lun reset issues
        - ath10k: fix peer stats null pointer dereference
        - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
        - scsi: megaraid: fix out-of-bound array accesses
        - iomap: don't search past page end in iomap_is_partially_uptodate
        - ocfs2: fix panic due to unrecovered local alloc
        - mm/page-writeback.c: don't break integrity writeback on ->writepage()
          error
        - mm/swap: use nr_node_ids for avail_lists in swap_info_struct
        - userfaultfd: clear flag if remap event not enabled
        - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
        - iwlwifi: mvm: Send LQ command as async when necessary
        - Bluetooth: Fix unnecessary error message for HCI request completion
        - ipmi: fix use-after-free of user->release_barrier.rda
        - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
        - ipmi: Prevent use-after-free in deliver_response
        - ipmi:ssif: Fix handling of multi-part return messages
        - ipmi: Don't initialize anything in the core until something uses it
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.19
        - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
        - net: bridge: Fix ethernet header pointer before check skb forwardable
        - net: Fix usage of pskb_trim_rcsum
        - net: phy: marvell: Errata for mv88e6390 internal PHYs
        - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
          handling
        - net/sched: act_tunnel_key: fix memory leak in case of action replace
        - net_sched: refetch skb protocol for each filter
        - openvswitch: Avoid OOB read when parsing flow nlattrs
        - vhost: log dirty page correctly
        - net: ipv4: Fix memory leak in network namespace dismantle
        - net/sched: cls_flower: allocate mask dynamically in fl_change()
        - udp: with udp_segment release on error path
        - ip6_gre: fix tunnel list corruption for x-netns
        - erspan: build the header with the right proto according to erspan_ver
        - net: phy: marvell: Fix deadlock from wrong locking
        - ip6_gre: update version related info when changing link
        - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
        - mei: me: mark LBG devices as having dma support
        - mei: me: add denverton innovation engine device IDs
        - USB: leds: fix regression in usbport led trigger
        - USB: serial: simple: add Motorola Tetra TPG2200 device id
        - USB: serial: pl2303: add new PID to support PL2303TB
        - ceph: clear inode pointer when snap realm gets dropped by its inode
        - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
        - ASoC: rt5514-spi: Fix potential NULL pointer dereference
        - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
        - clk: socfpga: stratix10: fix rate calculation for pll clocks
        - clk: socfpga: stratix10: fix naming convention for the fixed-clocks
        - inotify: Fix fd refcount leak in inotify_add_watch().
        - ALSA: hda/realtek - Fix typo for ALC225 model
        - ALSA: hda - Add mute LED support for HP ProBook 470 G5
        - ARCv2: lib: memeset: fix doing prefetchw outside of buffer
        - ARC: adjust memblock_reserve of kernel memory
        - ARC: perf: map generic branches to correct hardware condition
        - s390/mm: always force a load of the primary ASCE on context switch
        - s390/early: improve machine detection
        - s390/smp: fix CPU hotplug deadlock with CPU rescan
        - misc: ibmvsm: Fix potential NULL pointer dereference
        - char/mwave: fix potential Spectre v1 vulnerability
        - [arm64] mmc: dw_mmc-bluefield: : Fix the license information
        - [arm64] mmc: meson-gx: Free irq in release() callback
        - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
        - tty: Handle problem if line discipline does not have receive_buf
        - uart: Fix crash in uart_write and uart_put_char
        - tty/n_hdlc: fix __might_sleep warning
        - hv_balloon: avoid touching uninitialized struct page during tail onlining
        - Drivers: hv: vmbus: Check for ring when getting debug info
        - vgacon: unconfuse vc_origin when using soft scrollback
        - CIFS: Fix possible hang during async MTU reads and writes
        - CIFS: Fix credits calculations for reads with errors
        - CIFS: Fix credit calculation for encrypted reads with errors
        - CIFS: Do not reconnect TCP session in add_credits()
        - smb3: add credits we receive from oplock/break PDUs
        - Input: xpad - add support for SteelSeries Stratus Duo
        - Input: input_event - provide override for sparc64
        - Input: uinput - fix undefined behavior in uinput_validate_absinfo()
        - acpi/nfit: Block function zero DSMs
        - acpi/nfit: Fix command-supported detection
        - scsi: ufs: Use explicit access size in ufshcd_dump_regs
        - dm thin: fix passdown_double_checking_shared_status()
        - dm crypt: fix parsing of extended IV arguments
        - [x86] drm/amdgpu: Add APTX quirk for Lenovo laptop
        - [x86] KVM: Fix single-step debugging
        - [x86] KVM: Fix PV IPIs for 32-bit KVM host
        - [x86] KVM: WARN_ONCE if sending a PV IPI returns a fatal error
        - [x86] kvm: vmx: Use kzalloc for cached_vmcs12
        - [x86] KVM/nVMX: Do not validate that posted_intr_desc_addr is page
          aligned
        - [x86] pkeys: Properly copy pkey state at fork()
        - [x86] selftests/pkeys: Fork() to check for state being preserved
        - [x86] kaslr: Fix incorrect i8254 outb() parameters
        - [x86] entry/64/compat: Fix stack switching for XEN PV
        - [arm64] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
        - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
          removing it
        - can: bcm: check timer values before ktime conversion
        - can: flexcan: fix NULL pointer exception during bringup
        - vt: make vt_console_print() compatible with the unicode screen buffer
        - vt: always call notifier with the console lock held
        - vt: invoke notifier on screen size change
        - [arm64] drm/meson: Fix atomic mode switching regression
        - bpf: improve verifier branch analysis
        - bpf: add per-insn complexity limit
        - bpf: move {prev_,}insn_idx into verifier env
        - bpf: move tmp variable into ax register in interpreter
        - bpf: enable access to ax register also from verifier rewrite
        - bpf: restrict map value pointer arithmetic for unprivileged
        - bpf: restrict stack pointer arithmetic for unprivileged
        - bpf: restrict unknown scalars of mixed signed bounds for unprivileged
        - bpf: fix check_map_access smin_value test when pointer contains offset
        - bpf: prevent out of bounds speculation on pointer arithmetic
          (CVE-2019-7308)
        - bpf: fix sanitation of alu op with pointer / scalar type from different
          paths (CVE-2019-7308)
        - bpf: fix inner map masking to prevent oob under speculation
        - [s390*] smp: Fix calling smp_call_ipl_cpu() from ipl CPU
        - nvmet-rdma: Add unlikely for response allocated check
        - nvmet-rdma: fix null dereference under heavy load
        - Revert "mm, memory_hotplug: initialize struct pages for the full memory
          section"
        - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
        - ide: fix a typo in the settings proc file name
        - Input: input_event - fix the CONFIG_SPARC64 mixup
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.20
        - Fix "net: ipv4: do not handle duplicate fragments as overlapping"
        - ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
        - ipvlan, l3mdev: fix broken l3s mode wrt local routes
        - l2tp: copy 4 more bytes to linear part if necessary
        - l2tp: fix reading optional fields of L2TPv3
        - net: ip_gre: always reports o_key to userspace
        - net: ip_gre: use erspan key field for tunnel lookup
        - net/mlx4_core: Add masking for a few queries on HCA caps
        - netrom: switch to sock timer API
        - net/rose: fix NULL ax25_cb kernel panic
        - net: set default network namespace in init_dummy_netdev()
        - sctp: improve the events for sctp stream reset
        - tun: move the call to tun_set_real_num_queues
        - vhost: fix OOB in get_rx_bufs()
          (CVE-2018-16880)
        - net: ip6_gre: always reports o_key to userspace
        - sctp: improve the events for sctp stream adding
        - net/mlx5e: Allow MAC invalidation while spoofchk is ON
        - ip6mr: Fix notifiers call on mroute_clean_tables()
        - sctp: set chunk transport correctly when it's a new asoc
        - sctp: set flow sport from saddr only when it's 0
        - virtio_net: Don't enable NAPI when interface is down
        - virtio_net: Don't call free_old_xmit_skbs for xdp_frames
        - virtio_net: Fix not restoring real_num_rx_queues
        - virtio_net: Fix out of bounds access of sq
        - virtio_net: Don't process redirected XDP frames when XDP is disabled
        - virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs
        - virtio_net: Differentiate sk_buff and xdp_frame on freeing
        - CIFS: Do not count -ENODATA as failure for query directory
        - CIFS: Fix trace command logging for SMB2 reads and writes
        - CIFS: Do not consider -ENODATA as stat failure for reads
        - fs/dcache: Fix incorrect nr_dentry_unused accounting in
          shrink_dcache_sb()
        - iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
        - NFS: Fix up return value on fatal errors in nfs_page_async_flush()
        - [arm64] kaslr: ensure randomized quantities are clean also when kaslr is
          off
        - [arm64] Do not issue IPIs for user executable ptes
        - [arm64] hyp-stub: Forbid kprobing of the hyp-stub
        - [arm64] hibernate: Clean the __hyp_text to PoC after resume
        - gpiolib: fix line event timestamps for nested irqs
        - gpio: pcf857x: Fix interrupts on multiple instances
        - gfs2: Revert "Fix loop in gfs2_rbm_find"
        - [arm*] mmc: bcm2835: Fix DMA channel leak on probe error
        - mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
        - ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
        - ALSA: hda/realtek - Fixed hp_pin no value
        - IB/hfi1: Remove overly conservative VM_EXEC flag check
        - [x86] platform: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
        - [x86] platform: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
        - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
        - Btrfs: fix deadlock when allocating tree block during leaf/node split
        - btrfs: On error always free subvol_name in btrfs_mount
        - kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
        - mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
        - oom, oom_reaper: do not enqueue same task twice
        - mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
        - mm, oom: fix use-after-free in oom_kill_process
        - mm: hwpoison: use do_send_sig_info() instead of force_sig()
        - mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
        - of: Convert to using %pOFn instead of device_node.name
        - of: overlay: add tests to validate kfrees from overlay removal
        - of: overlay: add missing of_node_get() in __of_attach_node_sysfs
        - of: overlay: use prop add changeset entry for property in new nodes
        - of: overlay: do not duplicate properties from overlay for new nodes
        - md/raid5: fix 'out of memory' during raid cache recovery
        - cifs: Always resolve hostname before reconnecting
    
      [ Luca Boccassi ]
      * Do not generate linux-source-$ver stanza in debian/control if
        source is set to disabled in debian/config/defines.
      * linux-perf: explicitly disable the jvmti feature and shared library.
      * Document pkg.linux.nosource in debian/README.source.
      * [amd64] enable UIO_HV_GENERIC for Azure's VMBus access.
      * [cloud-amd64] enable UIO for Azure's VMBus access, and VFIO for guests
        running on an hypervisor that exposes a vIOMMU.
    
      [ Ben Hutchings ]
      * debian/rules.d, debian/rules.real: Restore build of userland headers for
        tools
      * debian/rules.d: Delete now-unused recursive makefiles
      * debian/rules.d/tools/perf/Makefile: Delete redundant arch/profile checks
      * debian/control: Add !pkg.linux.nokernel to qualification for compiler
        build-deps
      * [i386] debian/control: Fix cross-compiler build-dependency
      * debian/README.source: Document how to run kconfigeditor2
      * [armhf,arm64] serial: 8250: Disable SERIAL_8250_DEPRECATED_OPTIONS
      * percpu: convert spin_lock_irq to spin_lock_irqsave (fixes boot failure with
        alpha-generic flavour)
      * debian/tests/python: Fix spurious failure due to misuse of stderr
      * Update "Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for ..."
        to not duplicate the conditional warning/error
      * Bump ABI to 3
      * drivers/firmware: Enable FW_CFG_SYSFS as module (Closes: #882208)
      * [arm64,armhf,ia64,riscv64,sparc64] udeb: Add usb-serial-modules
        (Closes: #903824)
      * [powerpc*,sparc64] udeb: Add nic-usb-modules
      * [armhf,riscv64,s390x] udeb: Add cdrom-core-modules
      * 9p: Enable NET_9P_XEN as module
      * ACPI: Enable ACPI_TAD as module
      * amd-xgbe: Enable AMD_XGBE_DCB
      * ath9k: Enable ATH9K_CHANNEL_CONTEXT
      * block: Enable BLK_DEV_ZONED (except armel/marvell)
      * bluetooth: Enable BT_HCIUART_RTL; BT_HCIUART_NOKIA, BT_MTKUART as modules
      * bnxt: Enable BNXT_DCB
      * ethernet: Enable HINIC, ICE, LAN743X, LIQUIDIO_VF as modules
      * can: Enable CAN_VXCAN, CAN_MCBA_USB, CAN_UCAN as modules
      * dm: Enable DM_UNSTRIPED, DM_WRITECACHE, DM_ZONED as modules
      * [arm64,armhf] drm: Enable DRM_PANEL_RASPBERRYPI_TOUCHSCREEN as module
      * dvb-usb-v2: Enable DVB_USB_ZD1301 as module
      * gnss: Enable GNSS, GNSS_SIRF_SERIAL, GNSS_UBX_SERIAL as modules
      * gpio: Enable GPIO_EXAR, GPIO_PCI_IDIO_16, GPIO_PCIE_IDIO_24 as modules
      * HID: Enable HID_ACCUTOUCH, HID_COUGAR, HID_ELAN, HID_ITE, HID_JABRA,
        HID_MAYFLASH, HID_REDRAGON, HID_RETRODE, HID_STEAM, HID_UDRAW_PS3 as
        modules
      * [x86] i2c: Enable I2C_DESIGNWARE_BAYTRAIL
      * IB: Enable CGROUP_RDMA (except armel/marvell)
      * ieee802154: Enable IEEE802154_HWSIM as module
      * inet: Enable INET_RAW_DIAG as module
      * input: Enable INPUT_AXP20X_PEK as module
      * IPMI: Enable IPMI_SSIF as module
      * joystick: Enable JOYSTICK_PXRC as module
      * media/rc: Enable IR_IMON_DECODER, IR_IMON_RAW as modules
      * [x86] mfd: Enable INTEL_SOC_PMIC_BXTWC, INTEL_SOC_PMIC_CHTDC_TI as modules
      * mlx5: Enable MLX5_FPGA, MLX5_CORE_IPOIB; MLXFW as module
      * net: Enable BPF_STREAM_PARSER, XDP_SOCKETS (except armel/marvell)
        (Closes: #908860); NET_FAILOVER, SMC, SMC_DIAG, VSOCKMON as modules
      * net/phy: Enable LED_TRIGGER_PHY; CORTINA_PHY, DP83822_PHY, DP83TC811_PHY,
        MARVELL_10G_PHY, MICROCHIP_T1_PHY, RENESAS_PHY, ROCKCHIP_PHY as modules
      * net/sched: Enable NET_SCH_CBS, NET_SCH_ETF, NET_SCH_SKBPRIO, NET_EMATCH_IPT
        as modules
      * PCMCIA: Enable SCR24X as module
      * [x86] pinctrl: Enable PINCTRL_CANNONLAKE, PINCTRL_CEDARFORK,
        PINCTRL_DENVERTON, PINCTRL_GEMINILAKE, PINCTRL_ICELAKE, PINCTRL_LEWISBURG
      * [x86] rmi4: Re-enable RMI4_CORE, RMI4_SMB as modules (Closes: #875621);
        RMI4_F03, RMI4_F11, RMI4_F12, RMI4_F30, RMI4_F34, RMI4_F55
      * xfrm: Enable XFRM_INTERFACE as module
      * PCI: Enable PCI_PF_STUB as module
      * ptp: Change PTP_1588_CLOCK_KVM from built-in to module
      * random: Enable RANDOM_TRUST_CPU. This can be reverted using the kernel
        parameter: random.trust_cpu=off
      * SCSI: Enable QEDF, QEDI as modules
      * serial: Enable SERIAL_8250_EXAR, USB_SERIAL_F8153X, USB_SERIAL_UPD78F0730
        as modules
      * sound: Enable SND_FIREWIRE_MOTU, SND_FIREFACE, SND_XEN_FRONTEND as modules
      * [x86] sound: Enable SND_SOC_AMD_CZ_DA7219MX98357_MACH,
        SND_SOC_AMD_CZ_RT5645_MACH, SND_SOC_INTEL_CHT_BSW_NAU8824_MACH,
        SND_SOC_INTEL_BYT_CHT_DA7213_MACH, SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH,
        SND_SOC_INTEL_KBL_RT5663_RT5514_MAX98927_MACH,
        SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH,
        SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH as modules
      * thermal: Enable DEVFREQ_THERMAL, THERMAL_STATISTICS
      * tpm: Enable TCG_TIS_SPI, TCG_VTPM_PROXY as modules
      * usbtouchscreen: Enable TOUCHSCREEN_USB_EASYTOUCH
      * watchdog: Enable WATCHDOG_PRETIMEOUT_GOV, WATCHDOG_PRETIMEOUT_GOV_NOOP,
        WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP; WATCHDOG_PRETIMEOUT_GOV_PANIC,
        WDAT_WDT as modules
      * [x86] watchdog: Enable INTEL_MEI_WDT, NI903X_WDT, NIC7018_WDT as modules
      * wireless: Enable MT76x0U, MT76x2E, MT76x2U, QTNFMAC_PEARL_PCIE as modules
        (Closes: #918331)
      * zram: Enable ZRAM_WRITEBACK, ZRAM_MEMORY_TRACKING
      * udeb: Add scsi-nic-modules containing Chelsio and Qlogic iSCSI/FC drivers
    
      [ Marcin Juszkiewicz ]
      * [arm64] enable ARM_CCI_PMU so ARM_CCI400_PMU and ARM_CCI5xx_PMU options
        get really enabled.
      * [arm64] enable PCI_PRI, PCI_PASID as PCI can be behind IOMMU in servers.
      * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
      * [arm64] Enable ARM64_ERRATUM_843419 (Closes: #920866)
    
      [ Salvatore Bonaccorso ]
      * [x86] kvmclock: set offset for kvm unstable clock (Closes: #918036)
      * kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
      * [x86] KVM: work around leak of uninitialized stack contents
        (CVE-2019-7222)
      * [x86] KVM: nVMX: unconditionally cancel preemption timer in free_nested
        (CVE-2019-7221)
      * HID: debug: fix the ring buffer implementation (CVE-2019-3819)
    
      [ Hideki Yamane ]
      * [x86] Enable Touchpad support on Gemini Lake via CONFIG_PINCTRL_GEMINILAKE
        (Closes: #917388)
      * [x86] Enable SND_SOC_ES8316 and Baytrail & Cherrytrail with ES8316 codec,
        too (Closes: #918589)
      * hwmon: Enable CONFIG_SENSORS_NCT7802,NCT7904,NPCM7XX,ASPEED and W83773G
        to use HWMON hardware (Closes: #912597)
      * net: can: Enable CONFIG_CAN_PEAK_PCIEFD for a PCI express CAN Bus adapter
        (Closes: #920809)
      * [armhf] Enable CONFIG_SENSORS_LM75 for armhf (Closes: #918114)
      * [armhf] Enable CONFIG_IMX_THERMAL for armhf (Closes: #883023)
      * [arm64] Enable CONFIG_ARM_ARMADA_37XX_CPUFREQ for arm64 (Closes: #917939)
    
      [ Vagrant Cascadian ]
      * [armhf] Enable CONFIG_MMC_SDHCI_OMAP=m, used on DRA7 and related SoCs.
    
      [ Uwe Kleine-König ]
      * [armel] add spi-orion to mtd.udeb to be able to access spi flash on e.g.
        qnap ts-21x. (Closes: #920607)
    
     -- Ben Hutchings <email address hidden>  Mon, 11 Feb 2019 16:55:59 +0000
  • linux-signed-arm64 (4.19.16+1) unstable; urgency=medium
    
      * Sign kernel from linux 4.19.16-1
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.14
        - ax25: fix a use-after-free in ax25_fillin_cb()
        - gro_cell: add napi_disable in gro_cells_destroy
        - ip6mr: Fix potential Spectre v1 vulnerability
        - ipv4: Fix potential Spectre v1 vulnerability
        - ipv6: explicitly initialize udp6_addr in udp_sock_create6()
        - ipv6: tunnels: fix two use-after-free
        - ip: validate header length on virtual device xmit
        - isdn: fix kernel-infoleak in capi_unlocked_ioctl
        - net/wan: fix a double free in x25_asy_open_tty()
        - packet: validate address length
        - packet: validate address length if non-zero
        - ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
        - sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
        - tipc: compare remote and local protocols in tipc_udp_enable()
        - tipc: fix a double free in tipc_enable_bearer()
        - tipc: fix a double kfree_skb()
        - ipv6: frags: Fix bogus skb->sk in reassembled packets
        - ipv6: route: Fix return value of ip6_neigh_lookup() on neigh_create()
          error
        - ALSA: rme9652: Fix potential Spectre v1 vulnerability
        - ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
        - ALSA: pcm: Fix potential Spectre v1 vulnerability
        - ALSA: emux: Fix potential Spectre v1 vulnerabilities
        - powerpc/fsl: Fix spectre_v2 mitigations reporting
        - usb: r8a66597: Fix a possible concurrency use-after-free bug in
          r8a66597_endpoint_disable()
        - [s390x] s390/pci: fix sleeping in atomic during hotplug
        - [x86] x86/speculation/l1tf: Drop the swap storage limit restriction when
          l1tf=off
        - [x86] x86/mm: Drop usage of __flush_tlb_all() in
          kernel_physical_mapping_init()
        - [x86] KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
        - [arm64] arm64: KVM: Make VHE Stage-2 TLB invalidation operations
          non-interruptible
        - perf pmu: Suppress potential format-truncation warning
        - perf env: Also consider env->arch == NULL as local operation
        - ext4: fix possible use after free in ext4_quota_enable
        - ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
        - ext4: include terminating u32 in size of xattr entries when expanding
          inodes
        - ext4: force inode writes when nfsd calls commit_metadata()
        - ext4: check for shutdown and r/o file system in ext4_write_inode()
        - [armhf,arm64] spi: bcm2835: Fix race on DMA termination
        - [armhf,arm64] spi: bcm2835: Fix book-keeping of DMA termination
        - [armhf,arm64] spi: bcm2835: Avoid finishing transfer prematurely in IRQ
          mode
        - btrfs: dev-replace: go back to suspended state if target device is missing
        - btrfs: dev-replace: go back to suspend state if another EXCL_OP is running
        - btrfs: skip file_extent generation check for free_space_inode in
          run_delalloc_nocow
        - Btrfs: fix fsync of files with multiple hard links in new directories
        - btrfs: run delayed items before dropping the snapshot
        - Btrfs: send, fix race with transaction commits that create snapshots
        - brcmfmac: Fix out of bounds memory access during fw load
        - dax: Don't access a freed inode
        - f2fs: read page index before freeing
        - f2fs: sanity check of xattr entry size
        - media: imx274: fix stack corruption in imx274_read_reg
        - media: v4l2-tpg: array index could become negative
        - tools lib traceevent: Fix processing of dereferenced args in bprintk
          events
        - [mips*] MIPS: math-emu: Write-protect delay slot emulation pages
        - [mips*] MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
        - [mips*] MIPS: Align kernel load address to 64KB
        - [mips*] MIPS: Expand MIPS32 ASIDs to 64 bits
        - CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock
          problem
        - smb3: fix large reads on encrypted connections
        - [arm*] KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
        - [arm*] KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring
          state
        - [arm*] KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.15
        - IB/core: Fix oops in netdev_next_upper_dev_rcu()
        - xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force
          clears the dst_entry.
        - ieee802154: hwsim: fix off-by-one in parse nested
        - netfilter: seqadj: re-load tcp header pointer after possible head
          reallocation
        - scsi: bnx2fc: Fix NULL dereference in error handling
        - [ppc64el] ibmvnic: Convert reset work item mutex to spin lock
        - [ppc64el] ibmvnic: Fix non-atomic memory allocation in IRQ context
        - [x86] x86/mm: Fix guard hole handling
        - i40e: fix mac filter delete when setting mac address
        - ixgbe: Fix race when the VF driver does a reset
        - netfilter: nat: can't use dst_hold on noref dst
        - bnx2x: Clear fip MAC when fcoe offload support is disabled
        - bnx2x: Remove configured vlans as part of unload sequence.
        - bnx2x: Send update-svid ramrod with retry/poll flags enabled
        - mt76: fix potential NULL pointer dereference in mt76_stop_tx_queues
        - [x86] x86, hyperv: remove PCI dependency
        - [arm64] net: hns: All ports can not work when insmod hns ko after rmmod.
        - [arm64] net: hns: Fixed bug that netdev was opened twice
        - [arm64] net: hns: Clean rx fbd when ae stopped.
        - [arm64] net: hns: Avoid net reset caused by pause frames storm
        - [arm64] net: hns: Add mac pcs config when enable|disable mac
        - [arm64] net: hns: Fix ping failed when use net bridge and send multicast
        - mac80211: fix a kernel panic when TXing after TXQ teardown
        - [arm64,riscv64] net: macb: fix random memory corruption on RX with
          64-bit DMA
        - [arm64.risvv64] net: macb: fix dropped RX frames due to a race
        - lan78xx: Resolve issue with changing MAC address
        - [s390x] scsi: zfcp: fix posting too many status read buffers leading to
          adapter shutdown
        - fork: record start_time late
        - zram: fix double free backing device
        - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
        - mm, devm_memremap_pages: kill mapping "System RAM" support
        - memcg, oom: notify on oom killer invocation from the charge path
        - mt76x0: init hw capabilities
        - [amd64] media: cx23885: only reset DMA on problematic CPUs
        - ALSA: cs46xx: Potential NULL dereference in probe
        - ALSA: usb-audio: Avoid access before bLength check in
          build_audio_procunit()
        - ALSA: usb-audio: Check mixer unit descriptors more strictly
        - ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
        - ALSA: usb-audio: Always check descriptor sizes in parser code
        - Fix failure path in alloc_pid()
        - block: deactivate blk_stat timer in wbt_disable_default()
        - gfs2: Get rid of potential double-freeing in gfs2_create_inode
        - gfs2: Fix loop in gfs2_rbm_find
        - b43: Fix error in cordic routine
        - nfsd4: zero-length WRITE should succeed
        - [ppc*] powerpc/tm: Set MSR[TS] just prior to recheckpoint
        - RDMA/srpt: Fix a use-after-free in the channel release code
        - sched/fair: Fix infinite loop in update_blocked_averages() by reverting
          a9e7f6544b9c
        - [s390x] genwqe: Fix size check
        - [x86] intel_th: msu: Fix an off-by-one in attribute store
        - [armhf,arm64] drm/rockchip: psr: do not dereference encoder before it is
          null checked.
        - bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.16
        - Btrfs: fix deadlock when using free space tree due to block group
          creation
        - staging: rtl8188eu: Fix module loading from tasklet for CCMP encryption
        - staging: rtl8188eu: Fix module loading from tasklet for WEP encryption
        - cpufreq: scmi: Fix frequency invariance in slow path
        - [x86] modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE
        - ALSA: hda/realtek - Support Dell headset mode for New AIO platform
        - ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
          for ALC225
        - ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
        - CIFS: Fix adjustment of credits for MTU requests
        - CIFS: Do not set credits to 1 if the server didn't grant anything
        - CIFS: Do not hide EINTR after sending network packets
        - CIFS: Fix credit computation for compounded requests
        - cifs: Fix potential OOB access of lock element array
        - usb: cdc-acm: send ZLP for Telit 3G Intel based modems
        - USB: storage: don't insert sane sense for SPC3+ when bad sense specified
        - USB: storage: add quirk for SMI SM3350
        - USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
        - slab: alien caches must not be initialized if the allocation of the alien
          cache failed
        - mm/usercopy.c: no check page span for stack objects
        - mm, memcg: fix reclaim deadlock with writeback
        - ACPI: power: Skip duplicate power resource references in _PRx
        - ACPI / PMIC: xpower: Fix TS-pin current-source handling
        - ACPI/IORT: Fix rc_dma_get_range()
        - i2c: dev: prevent adapter retries and timeout being set as minus value
        - vfio/type1: Fix unmap overflow off-by-one
        - drm/amdgpu: Add new VegaM pci id
        - PCI: dwc: Use interrupt masking instead of disabling
        - PCI: dwc: Take lock when ACKing an interrupt
        - PCI: dwc: Move interrupt acking into the proper callback
        - drm/amd/display: Fix MST dp_blank REG_WAIT timeout
        - drm/fb_helper: Allow leaking fbdev smem_start
        - drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
        - [x86] drm/i915: Unwind failure on pinning the gen7 ppgtt
        - drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
        - drm/amdgpu: Don't fail resume process if resuming atomic state fails
        - rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
        - ext4: make sure enough credits are reserved for dioread_nolock writes
        - ext4: fix a potential fiemap/page fault deadlock w/ inline_data
        - ext4: avoid kernel warning when writing the superblock to a dead device
        - ext4: use ext4_write_inode() when fsyncing w/o a journal
        - ext4: track writeback errors using the generic tracking infrastructure
        - ext4: fix special inode number checks in __ext4_iget()
        - mm: page_mapped: don't assume compound page is huge or THP
        - sunrpc: use-after-free in svc_process_common()
        - [armhf,arm64] KVM: Fix VMID alloc race by reverting to lock-less
        - [arm64] compat: Don't pull syscall number from regs in arm_compat_syscall
        - Btrfs: fix access to available allocation bits when starting balance
        - Btrfs: fix deadlock when enabling quotas due to concurrent snapshot
          creation
        - Btrfs: use nofs context when initializing security xattrs to avoid
          deadlock
    
      [ John Paul Adrian Glaubitz ]
      * [m68k] Add patch to build with -ffreestanding to fix FTBFS
    
      [ Ben Hutchings ]
      * [ia64,m68k] libbpf: Really don't build on architectures without perf events
      * Use dh_listpackages to determine which packages to build
      * Add pkg.linux.nokernel build profile that excludes kernel image and header
        packages
    
      [ Yves-Alexis Perez ]
      * Bump ABI to 2 because of changes in struct sock_common from 60f05dddf1eb
      * [rt] Update to 4.19.15-rt12
        - rtmutex/rwlock: preserve state like a sleeping lock
    
      [ Salvatore Bonaccorso ]
      * ipv6: Consider sk_bound_dev_if when binding a socket to an address
        (Closes: #918103)
      * posix-cpu-timers: Unbreak timer rearming (Closes: #919019, #919049)
    
      [ Michal Simek ]
      * [arm64] Enable Xilinx ZynqMP SoC and drivers
    
      [ YunQiang Su ]
      * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
        install ast and sm750fb to loongson-3's fb-modules
    
      [ Romain Perier ]
      * [rt] Update to 4.19.13-rt10
    
      [ Luigi Baldoni ]
      * [x86] Enable LEDS_APU to support leds on PC Engines
        APU SBC series
    
     -- Ben Hutchings <email address hidden>  Thu, 17 Jan 2019 18:56:17 +0000
  • linux-signed-arm64 (4.19.13+1) unstable; urgency=medium
    
      * Sign kernel from linux 4.19.13-1
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.13
        - Revert "vfs: Allow userns root to call mknod on owned filesystems."
        - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
          (CVE-2018-19985)
        - xhci: Don't prevent USB2 bus suspend in state check intended for USB3
          only
        - USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
        - USB: serial: option: add GosunCn ZTE WeLink ME3630
        - USB: serial: option: add HP lt4132
        - USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
        - USB: serial: option: add Fibocom NL668 series
        - USB: serial: option: add Telit LN940 series
        - ubifs: Handle re-linking of inodes correctly while recovery
        - scsi: t10-pi: Return correct ref tag when queue has no integrity profile
        - scsi: sd: use mempool for discard special page
        - mmc: core: Reset HPI enabled state during re-init and in case of errors
        - mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
        - mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
        - [armhf] mmc: omap_hsmmc: fix DMA API warning
        - gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
        - posix-timers: Fix division by zero bug
        - [x86] KVM: Fix NULL deref in vcpu_scan_ioapic
        - [x86] kvm: Add AMD's EX_CFG to the list of ignored MSRs
        - [x86] KVM: Fix UAF in nested posted interrupt processing
        - [x86] Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened
          channels
        - futex: Cure exit race
        - [x86] mtrr: Don't copy uninitialized gentry fields back to userspace
        - [x86] mm: Fix decoy address handling vs 32-bit builds (Closes: #917569)
        - [x86] vdso: Pass --eh-frame-hdr to the linker
        - panic: avoid deadlocks in re-entrant console drivers
        - mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
        - mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
        - mm: introduce mm_[p4d|pud|pmd]_folded
        - xfrm_user: fix freeing of xfrm states on acquire
        - rtlwifi: Fix leak of skb when processing C2H_BT_INFO
        - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
        - Revert "mwifiex: restructure rx_reorder_tbl_lock usage"
        - iwlwifi: add new cards for 9560, 9462, 9461 and killer series
        - mm, memory_hotplug: initialize struct pages for the full memory section
        - mm: thp: fix flags for pmd migration when split
        - mm, page_alloc: fix has_unmovable_pages for HugePages
        - mm: don't miss the last page because of round-off error
        - Input: elantech - disable elan-i2c for P52 and P72
        - proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
        - drm/ioctl: Fix Spectre v1 vulnerabilities
    
      [ Uwe Kleine-König ]
      * [armhf] enable some kconfig items for Allwinner SoCs (SUNXI_CCU=y,
        SUN8I_DE2_CCU=y, DRM_SUN8I_DW_HDMI=m, SND_SUN8I_CODEC=m,
        SND_SUN8I_CODEC_ANALOG=m). (Closes: #915899)
    
      [ Ben Hutchings ]
      * linux-image-*-unsigned: Remove Provides field (Closes: #916927)
      * [ia64,m68k] libbpf: Don't build on architectures without performance events
      * [riscv64] tools uapi: fix RISC-V 64-bit support
      * [powerpc,powerpcspe,ppc64] linux-config: Eliminate config.*_bootwrapper.gz
        files
      * [powerpcspe] Fix -mcpu= options for SPE-only compiler
      * debian/lib/python/debian_linux/debian.py: Fix deprecated import of
        MutableSet
      * Fix pycodestyle "line break after binary operator" warnings
      * Fix pycodestyle "inalid escape sequence" warnings
    
      [ Romain Perier ]
      * [rt] Update to 4.19.10-rt8
    
     -- Salvatore Bonaccorso <email address hidden>  Sun, 30 Dec 2018 10:04:03 +0100
  • linux-signed-arm64 (4.19.12+1) unstable; urgency=medium
    
      * Sign kernel from linux 4.19.12-1
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.10
        - ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
        - ipv6: Check available headroom in ip6_xmit() even without options
        - ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
        - [arm64, hppa, powerpc, x86, alpha, armhf, mips*] net: 8139cp: fix a BUG
          triggered by changing mtu with network traffic
        - net: phy: don't allow __set_phy_supported to add unsupported modes
        - net: Prevent invalid access to skb->prev in __qdisc_drop_all
        - net: use skb_list_del_init() to remove from RX sublists
        - Revert "net/ibm/emac: wrong bit is used for STA control"
        - rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
        - sctp: kfree_rcu asoc
        - tcp: Do not underestimate rwnd_limited
        - tcp: fix NULL ref in tail loss probe
        - tun: forbid iface creation with rtnl ops
        - virtio-net: keep vnet header zeroed after processing XDP
        - net: phy: sfp: correct store of detected link modes
        - sctp: update frag_point when stream_interleave is set
        - net: restore call to netdev_queue_numa_node_write when resetting XPS
        - net: fix XPS static_key accounting
        - [armhf] OMAP2+: prm44xx: Fix section annotation on
          omap44xx_prm_enable_io_wakeup
        - [arm64, x86] staging: rtl8723bs: Fix the return value in case of error in
          'rtw_wx_read32()'
        - [armhf] dts: am3517: Fix pinmuxing for CD on MMC1
        - [armhf] dts: LogicPD Torpedo: Fix mmc3_dat1 interrupt
        - [armhf] dts: logicpd-somlv: Fix interrupt on mmc3_dat1
        - [armhf] dts: am3517-som: Fix WL127x Wifi interrupt
        - tools: bpftool: prevent infinite loop in get_fdinfo()
        - [arm64] dts: sdm845-mtp: Reserve reserved gpios
        - sysv: return 'err' instead of 0 in __sysv_write_inode
        - netfilter: nf_tables: don't skip inactive chains during update
        - perf tools: Fix crash on synthesizing the unit
        - netfilter: xt_RATEEST: remove netns exit routine
        - netfilter: nf_tables: fix use-after-free when deleting compat expressions
        - [armhf] ASoC: rockchip: add missing slave_config setting for I2S
        - s390/cpum_cf: Reject request for sampling in event initialization
        - [arm64, armel, x86, armhf] ASoC: dapm: Recalculate audio map forcely when
          card instantiated
        - [armhf] spi: omap2-mcspi: Add missing suspend and resume calls
        - bpf: allocate local storage buffers using GFP_ATOMIC
        - aio: fix failure to put the file pointer
        - netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
        - hwmon: (w83795) temp4_type has writable permission
        - perf tools: Restore proper cwd on return from mnt namespace
        - [armhf] PCI: imx6: Fix link training status detection in link up check
        - objtool: Fix double-free in .cold detection error path
        - objtool: Fix segfault in .cold detection with -ffunction-sections
        - [arm64] phy: qcom-qusb2: Use HSTX_TRIM fused value as is
        - [arm64] phy: qcom-qusb2: Fix HSTX_TRIM tuning with fused value for SDM845
        - Btrfs: send, fix infinite loop due to directory rename dependencies
        - RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
        - RDMA/core: Add GIDs while changing MAC addr only for registered ndev
        - RDMA/rdmavt: Fix rvt_create_ah function signature
        - tools: bpftool: fix potential NULL pointer dereference in do_load
        - ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
        - [x86] thunderbolt: Prevent root port runtime suspend during NVM upgrade
        - [arm64] drm/meson: add support for 1080p25 mode
        - netfilter: ipv6: Preserve link scope traffic original oif
        - IB/mlx5: Fix page fault handling for MW
        - netfilter: add missing error handling code for register functions
        - [x86] KVM: VMX: Update shared MSRs to be saved/restored on MSR_EFER.LMA
          changes
        - [x86] kvm/vmx: fix old-style function declaration
        - [arm64] net: thunderx: fix NULL pointer dereference in nic_remove
        - netfilter: nf_tables: deactivate expressions in rule replecement routine
        - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
        - cachefiles: Fix an assertion failure when trying to update a failed object
        - fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
        - cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is
          active
        - igb: fix uninitialized variables
        - ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
        - [arm64] net: hisilicon: remove unexpected free_netdev
        - drm/amdgpu: Add delay after enable RLC ucode
        - [arm64, powerpc, x86] drm/ast: fixed reading monitor EDID not stable issue
        - Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
        - afs: Fix validation/callback interaction
        - fscache: fix race between enablement and dropping of object
        - cachefiles: Explicitly cast enumerated type in put_object
        - fscache, cachefiles: remove redundant variable 'cache'
        - nvme: warn when finding multi-port subsystems without multipathing enabled
        - ocfs2: fix deadlock caused by ocfs2_defrag_extent()
        - mm/page_alloc.c: fix calculation of pgdat->nr_zones
        - hfs: do not free node before using
        - hfsplus: do not free node before using
        - initramfs: clean old path before creating a hardlink
        - ocfs2: fix potential use after free
        - dax: Check page->mapping isn't NULL
        - ALSA: hda/realtek - Fixed headphone issue for ALC700
        - ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
        - ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
        - ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
        - ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon
        - IB/hfi1: Fix an out-of-bounds access in get_hw_stats
        - bpf: fix off-by-one error in adjust_subprog_starts
        - tcp: lack of available data can also cause TSO defer
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.11
        - sched/pelt: Fix warning and clean up IRQ PELT config
        - scsi: raid_attrs: fix unused variable warning
        - [i386] staging: olpc_dcon: add a missing dependency
        - [arm64] dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
        - [arm64] drm/msm: fix address space warning
        - aio: fix spectre gadget in lookup_ioctx
        - fs/iomap.c: get/put the page in iomap_page_create/release()
        - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
          registered
        - [arm64] dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
        - block/bio: Do not zero user pages
        - ovl: fix decode of dir file handle with multi lower layers
        - ovl: fix missing override creds in link of a metacopy upper
        - [armhf] MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
        - mmc: core: use mrq->sbc when sending CMD23 for RPMB
        - mmc: sdhci: fix the timeout check window for clock and reset
        - fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS
        - [arm] mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
        - [arm] dts: bcm2837: Fix polarity of wifi reset GPIOs (Closes: #911443)
        - dm thin: send event about thin-pool state change _after_ making it
        - dm cache metadata: verify cache has blocks in
          blocks_are_clean_separate_dirty()
        - dm: call blk_queue_split() to impose device limits on bios
        - tracing: Fix memory leak of instance function hash filters
        - [powerpc*] msi: Fix NULL pointer access in teardown code
        - drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
        - drm/nouveau/kms/nv50-: also flush fb writes when rewinding push buffer
        - Revert "drm/rockchip: Allow driver to be shutdown on reboot/kexec"
        - [x86] drm/i915/execlists: Apply a full mb before execution for Braswell
        - [amd64] drm/amdkfd: add new vega10 pci ids
        - drm/amdgpu: add some additional vega10 pci ids
        - drm/amdgpu: update smu firmware images for VI variants (v2)
        - drm/amdgpu: update SMC firmware image for polaris10 variants
        - [x86] build: Fix compiler support check for CONFIG_RETPOLINE
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.12
        - locking/qspinlock: Re-order code
        - [x86] locking/qspinlock, x86: Provide liveness guarantee
        - [amd64] IB/hfi1: Remove race conditions in user_sdma send path
        - mac80211_hwsim: fix module init error paths for netlink
        - [x86] Input: hyper-v - fix wakeup from suspend-to-idle
        - scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
        - [x86] scsi: vmw_pscsi: Rearrange code to avoid multiple calls to
          free_irq during unload
        - [x86] earlyprintk/efi: Fix infinite loop on some screen widths
        - [arm64] drm/msm: Fix task dump in gpu recovery
        - [arm64] drm/msm/gpu: Fix a couple memory leaks in debugfs
        - [arm64] drm/msm: fix handling of cmdstream offset
        - [arm64] drm/msm/dsi: configure VCO rate for 10nm PLL driver
        - [arm64] drm/msm: Grab a vblank reference when waiting for commit_done
        - drm/ttm: fix LRU handling in ttm_buffer_object_transfer
        - drm/amdgpu: wait for IB test on first device open
        - [arm64,armhf] net: stmmac: Move debugfs init/exit to
          ->probe()/->remove()
        - [amd64] net: aquantia: fix rx checksum offload bits
        - bonding: fix 802.3ad state sent to partner when unbinding slave
        - liquidio: read sc->iq_no before release sc
        - nfs: don't dirty kernel pages read by direct-io
        - SUNRPC: Fix a potential race in xprt_connect()
        - [sparc64] sbus: char: add of_node_put()
        - [sparc64] drivers/sbus/char: add of_node_put()
        - [sparc64] drivers/tty: add missing of_node_put()
        - [arm64] drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
        - [amr64] drm/msm: dpu: Don't set legacy plane->crtc pointer
        - [arm64] drm/msm: dpu: Fix "WARNING: invalid free of devm_ allocated
          data"
        - [arm64] drm/msm: Fix error return checking
        - [arm64] clk: mvebu: Off by one bugs in cp110_of_clk_get()
        - Input: synaptics - enable SMBus for HP 15-ay000
        - [armhf] Input: omap-keypad - fix keyboard debounce configuration
        - libata: whitelist all SAMSUNG MZ7KM* solid-state disks
        - macvlan: return correct error value
        - [arm64,armhf] mv88e6060: disable hardware level MAC learning
        - net/mlx4_en: Fix build break when CONFIG_INET is off
        - bpf: check pending signals while verifying programs
        - [arm*] 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
          handling
        - [arm*] 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
        - [arm*] 8816/1: dma-mapping: fix potential uninitialized return
        - [arm64,armhf] thermal: armada: fix legacy validity test sense
        - [arm64,armhf] net: mvpp2: fix detection of 10G SFP modules
        - [arm64,armhf] net: mvpp2: fix phylink handling of invalid PHY modes
        - drm/amdgpu/vcn: Update vcn.cur_state during suspend
        - [amd64,arm64] acpi/nfit: Fix user-initiated ARS to be "ARS-long" rather
          than "ARS-short"
        - drm/ast: Fix connector leak during driver unload
        - cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure
          cifs)
        - vhost/vsock: fix reset orphans race with close timeout
        - [x86] i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI
          device node
        - nvme: validate controller state before rescheduling keep alive
        - nvmet-rdma: fix response use after free
        - Btrfs: fix missing delayed iputs on unmount
    
      [ Uwe Kleine-König ]
      * [arm] Fix probing of 3rd gpio device on Armada 370.
    
      [ Ben Hutchings ]
      * linux-perf: Fix build-time check for unversioned files
      * linux-perf: Fix installation directories for BPF headers and examples
        (Closes: #916774)
    
      [ Noah Meyerhans ]
      * drivers/net/ethernet/amazon: Backport v2.0.2 from Linux 4.20
    
      [ Bastian Blank ]
      * Ignore various ABI changes.
    
      [ Salvatore Bonaccorso ]
      * iomap: Revert "fs/iomap.c: get/put the page in
        iomap_page_create/release()"
    
     -- Salvatore Bonaccorso <email address hidden>  Sat, 22 Dec 2018 09:06:45 +0100
  • linux-signed-arm64 (4.19.9+1) unstable; urgency=medium
    
      * Sign kernel from linux 4.19.9-1
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.6
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.7
        - [x86] KVM: LAPIC: Fix pv ipis use-before-initialization (CVE-2018-19406)
        - mm: cleancache: fix corruption on missed inode invalidation
          (CVE-2018-16862)
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.8
        - blk-mq: fix corruption with direct issue (Closes: #915666)
        - userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails
          (CVE-2018-18397)
        - userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
          (CVE-2018-18397)
        - userfaultfd: shmem: add i_size checks (CVE-2018-18397)
        - userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not
          set (CVE-2018-18397)
        - blk-mq: punt failed direct issue to dispatch list
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9
        - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in
          card.c (CVE-2018-19824)
        - vhost/vsock: fix use-after-free in network stack callers
          (CVE-2018-14625)
    
      [ Marcin Juszkiewicz ]
      * [arm64] Enable ACPI IMPI
      * [arm64] Enable IPMI watchdog and power off support
      * [arm64] Enable PCI Express hotplug
      * [arm64] Enable PMU for several server cpus
      * [arm64] Enable HiSilicon LPC for serial/ipmi access
    
      [ Romain Perier ]
      * [x86] Enable support for error detection and correction on the Intel
        Pondicherry2 Integrated Memory Controller (Closes: #914946)
      * [rt] Update to 4.19.8-rt6
    
      [ Uwe Kleine-König ]
      * Enable usb support for ATH10K (Closes: #915083)
    
      [ Luca Boccassi ]
      * debian/rules.real: Split the rules so that the [un]versioned_tools
        knobs can be used to avoid building them. Fixes FTBFS with unversioned
        tools disabled.
      * perf: do not ship python2-only call-graph-from-sql script.
      * Override Lintian warning dbg-package-missing-depends in source too.
    
      [ Ben Hutchings ]
      * debian/rules.real: Mark most targets as phony
      * debian/rules: Mark more targets as phony
      * libcpupower: Hide private function and drop it from .symbols file
      * integrity: Disable INTEGRITY_TRUSTED_KEYRING (Closes: #865277)
    
      [ Vagrant Cascadian ]
      * debian/config/config: Enable Z3FOLD as a module.
    
      [ Salvatore Bonaccorso ]
      * Set ABI to 1
    
      [ Nicolas Schier ]
      * ovl: permit overlayfs mounts in user namespaces (Closes: #913880)
    
      [ Hilko Bengen ]
      * Add patches to build libbpf.so with SONAME, link against libelf
      * Add versioned libbpf, libbpf-dev package (Closes: #914428)
    
      [ Hans van Kranenburg ]
      * [x86] Add patch to repair booting as Xen dom0 (Closes: #914951)
      * [x86] Add patches to support booting a Xen PVH guest via Grub2
    
      [ Christoph Anton Mitterer ]
      * crypto: Enable MORUS and AEGIS AEAD ciphers (Closes: #914136)
      * [amd64]: Enable AES-NI/SSE2/AVX2 optimised implementations of the MORUS
        and AEGIS AEAD ciphers
    
      [ Bastian Blank ]
      * Enable NFT_CONNLIMIT, NFT_TUNNEL, NFT_SOCKET, NFT_OSF, NFT_TPROXY,
        IP_VS_MH.
      * Enable netfilter flow table support.
      * [x86] Enable DRM_XEN_FRONTEND.
      * Enable EFI_BOOTLOADER_CONTROL, EFI_CAPSULE_LOADER.
    
     -- Bastian Blank <email address hidden>  Sun, 16 Dec 2018 19:45:54 +0100