]>
Commit | Line | Data |
---|---|---|
59f017d5 SF |
1 | linux (4.13.0-10.11) UNRELEASED; urgency=low |
2 | ||
3 | CHANGELOG: Do not edit directly. Autogenerated at release. | |
4 | CHANGELOG: Use the printchanges target to see the curent changes. | |
5 | CHANGELOG: Use the insertchanges target to create the final log. | |
6 | ||
7 | -- Seth Forshee <seth.forshee@canonical.com> Sun, 10 Sep 2017 16:59:00 -0500 | |
8 | ||
e84bd010 | 9 | linux (4.13.0-9.10) artful; urgency=low |
02a6b594 | 10 | |
e84bd010 SF |
11 | * linux: 4.13.0-9.10 -proposed tracker (LP: #1715145) |
12 | ||
13 | * EDAC sbridge: Failed to register device with error -22. (LP: #1714112) | |
14 | - [Config] CONFIG_EDAC_GHES=n | |
15 | ||
16 | * Miscellaneous Ubuntu changes | |
17 | - ubuntu: vbox -- update to 5.1.26-dfsg-2 | |
02a6b594 | 18 | |
02391f60 SF |
19 | [ Upstream Kernel Changes ] |
20 | ||
21 | * Rebase to v4.13 | |
22 | ||
e84bd010 | 23 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 05 Sep 2017 07:51:19 -0500 |
02a6b594 | 24 | |
d497f5f6 | 25 | linux (4.13.0-8.9) artful; urgency=low |
e4542c7b | 26 | |
d497f5f6 SF |
27 | * snapd 2.27.3+17.10 ADT test failure with linux 4.13.0-6.7 (LP: #1713103) |
28 | - SAUCE: apparmor: fix apparmorfs DAC access, permissions | |
e4542c7b | 29 | |
d497f5f6 SF |
30 | * enable ARCH_SUNXI (and friends) in arm64 kernel .config (LP: #1701137) |
31 | - [Config] Enable CONFIG_ARCH_SUNXI and related options for arm64 | |
32 | ||
33 | * [Bug] Harrisonville: pnd2_edac always fail to load on B1 stepping | |
34 | Harrisonville SDP (LP: #1709257) | |
35 | - EDAC, pnd2: Build in a minimal sideband driver for Apollo Lake | |
36 | - EDAC, pnd2: Mask off the lower four bits of a BAR | |
37 | - EDAC, pnd2: Conditionally unhide/hide the P2SB PCI device to read BAR | |
38 | - EDAC, pnd2: Properly toggle hidden state for P2SB PCI device | |
39 | - SAUCE: i2c: i801: Restore the presence state of P2SB PCI device after | |
40 | reading BAR | |
41 | ||
42 | * Miscellaneous Ubuntu changes | |
43 | - Revert "UBUNTU: SAUCE: Import aufs driver" | |
44 | - SAUCE: Import aufs driver | |
45 | - SAUCE: selftests/powerpc: Disable some ptrace selftests | |
46 | - [Config] CONFIG_CRYPTO_DEV_NITROX_CNN55XX=n for s390x | |
47 | - [Config] CONFIG_I2C_SLAVE=n for amd64, i386, ppc64el | |
48 | - [Config] Disable CONFIG_MDIO_* options for s390x | |
49 | - [Config] CONFIG_SCSI_MQ_DEFAULT=n for s390x | |
50 | - [Config] Update annotations for 4.13 | |
51 | ||
52 | -- Seth Forshee <seth.forshee@canonical.com> Thu, 31 Aug 2017 14:27:09 -0500 | |
e4542c7b | 53 | |
bf00b6c2 | 54 | linux (4.13.0-7.8) artful; urgency=low |
7a1e59ca | 55 | |
bf00b6c2 SF |
56 | * linux 4.12.0-11.12 ADT test failure with linux 4.12.0-11.12 (LP: #1710904) |
57 | - SAUCE: selftests/powerpc: Use snprintf to construct DSCR sysfs interface | |
58 | paths | |
59 | ||
60 | * Miscellaneous Ubuntu changes | |
61 | - Revert "UBUNTU: SAUCE: seccomp: log actions even when audit is disabled" | |
62 | ||
63 | * Miscellaneous upstream changes | |
64 | - seccomp: Provide matching filter for introspection | |
65 | - seccomp: Sysctl to display available actions | |
66 | - seccomp: Operation for checking if an action is available | |
67 | - seccomp: Sysctl to configure actions that are allowed to be logged | |
68 | - seccomp: Selftest for detection of filter flag support | |
69 | - seccomp: Filter flag to log all actions except SECCOMP_RET_ALLOW | |
70 | - seccomp: Action to log before allowing | |
7a1e59ca | 71 | |
07a6fbe1 SF |
72 | [ Upstream Kernel Changes ] |
73 | ||
74 | * Rebase to v4.13-rc7 | |
75 | ||
bf00b6c2 | 76 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 28 Aug 2017 08:12:24 -0500 |
7a1e59ca | 77 | |
a395a1aa | 78 | linux (4.13.0-6.7) artful; urgency=low |
53a1293e | 79 | |
a395a1aa SF |
80 | * HID: multitouch: Support ALPS PTP Stick and Touchpad devices (LP: #1712481) |
81 | - SAUCE: HID: multitouch: Support ALPS PTP stick with pid 0x120A | |
82 | ||
83 | * sort ABI files with C.UTF-8 locale (LP: #1712345) | |
84 | - [Packaging] sort ABI files with C.UTF-8 locale | |
85 | ||
86 | * igb: Support using Broadcom 54616 as PHY (LP: #1712024) | |
87 | - SAUCE: igb: add support for using Broadcom 54616 as PHY | |
88 | ||
89 | * RPT related fixes missing in Ubuntu 16.04.3 (LP: #1709220) | |
90 | - powerpc/mm/radix: Improve _tlbiel_pid to be usable for PWC flushes | |
91 | - powerpc/mm/radix: Improve TLB/PWC flushes | |
92 | - powerpc/mm/radix: Avoid flushing the PWC on every flush_tlb_range | |
93 | ||
94 | * Linux 4.12 refuses to load self-signed modules under Secure Boot with | |
95 | properly enrolled keys (LP: #1712168) | |
96 | - SAUCE: (efi-lockdown) MODSIGN: Fix module signature verification | |
97 | ||
98 | * [17.10 FEAT] Enable NVMe driver - kernel (LP: #1708432) | |
99 | - [Config] CONFIG_BLK_DEV_NVME=m for s390 | |
100 | ||
101 | * Artful: 4.12.0-11.12: Boot panic in vlv2_plat_configure_clock+0x3b/0xa0 | |
102 | (LP: #1711298) | |
103 | - [Config] CONFIG_INTEL_ATOMISP=n | |
104 | ||
105 | * Miscellaneous Ubuntu changes | |
106 | - SAUCE: apparmor: af_unix mediation | |
107 | ||
108 | * Miscellaneous upstream changes | |
109 | - apparmor: Fix shadowed local variable in unpack_trans_table() | |
110 | - apparmor: Fix logical error in verify_header() | |
111 | - apparmor: Fix an error code in aafs_create() | |
112 | - apparmor: Redundant condition: prev_ns. in [label.c:1498] | |
113 | - apparmor: add the ability to mediate signals | |
114 | - apparmor: add mount mediation | |
115 | - apparmor: cleanup conditional check for label in label_print | |
116 | - apparmor: add support for absolute root view based labels | |
117 | - apparmor: make policy_unpack able to audit different info messages | |
118 | - apparmor: add more debug asserts to apparmorfs | |
119 | - apparmor: add base infastructure for socket mediation | |
120 | - apparmor: move new_null_profile to after profile lookup fns() | |
121 | - apparmor: fix race condition in null profile creation | |
122 | - apparmor: ensure unconfined profiles have dfas initialized | |
123 | - apparmor: fix incorrect type assignment when freeing proxies | |
53a1293e | 124 | |
d471af9a SF |
125 | [ Upstream Kernel Changes ] |
126 | ||
127 | * Rebase to v4.13-rc6 | |
128 | ||
a395a1aa | 129 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 23 Aug 2017 08:10:38 -0500 |
53a1293e | 130 | |
936ee93c | 131 | linux (4.13.0-5.6) artful; urgency=low |
a36bcd96 | 132 | |
936ee93c SF |
133 | * Ubuntu17.10 - perf: Update Power9 PMU event JSON files (LP: #1708630) |
134 | - perf pmu-events: Support additional POWER8+ PVR in mapfile | |
135 | - perf vendor events: Add POWER9 PMU events | |
136 | - perf vendor events: Add POWER9 PVRs to mapfile | |
137 | - SAUCE: perf vendor events powerpc: remove suffix in mapfile | |
138 | - SAUCE: perf vendor events powerpc: Update POWER9 events | |
139 | ||
140 | * Disable CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE (LP: #1709171) | |
141 | - [Config] CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=n for ppc64el | |
142 | ||
143 | * Please only recommend or suggest initramfs-tools | linux-initramfs-tool for | |
144 | kernels able to boot without initramfs (LP: #1700972) | |
145 | - [Debian] Don't depend on initramfs-tools | |
146 | ||
147 | * Miscellaneous Ubuntu changes | |
148 | - SAUCE: Import aufs driver | |
149 | - SAUCE: aufs -- Add missing argument to loop_switch() call | |
150 | - [Config] Enable aufs | |
151 | - SAUCE: (noup) Update spl to 0.6.5.11-ubuntu1, zfs to 0.6.5.11-1ubuntu3 | |
152 | - Enable zfs build | |
153 | - SAUCE: powerpc: Always initialize input array when calling epapr_hypercall() | |
154 | - [Packaging] switch up to debhelper 9 | |
a36bcd96 | 155 | |
545f3791 SF |
156 | [ Upstream Kernel Changes ] |
157 | ||
158 | * Rebase to v4.13-rc5 | |
159 | ||
936ee93c | 160 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 15 Aug 2017 09:24:16 -0500 |
a36bcd96 | 161 | |
cb044a55 | 162 | linux (4.13.0-4.5) artful; urgency=low |
5f9f1d1e | 163 | |
cb044a55 SF |
164 | * Lenovo Yoga 910 Sensors (LP: #1708120) |
165 | - SAUCE: (no-up) HID: Add quirk for Lenovo Yoga 910 with ITE Chips | |
166 | ||
167 | * Unable to install Ubuntu on the NVMe disk under VMD PCI domain | |
168 | (LP: #1703339) | |
169 | - [Config] Add vmd driver to generic inclusion list | |
170 | ||
171 | * Set CONFIG_SATA_HIGHBANK=y on armhf (LP: #1703430) | |
172 | - [Config] CONFIG_SATA_HIGHBANK=y | |
173 | ||
174 | * Miscellaneous Ubuntu changes | |
175 | - ubuntu: vbox -- update to 5.1.26-dfsg-1 | |
176 | - SAUCE: hio: Build fixes for 4.13 | |
177 | - Enable hio build | |
178 | - SAUCE: (noup) Update spl to 0.6.5.11-1, zfs to 0.6.5.11-1ubuntu1 | |
179 | - [debian] use all rather than amd64 dkms debs for sync | |
5f9f1d1e | 180 | |
a59efebc SF |
181 | [ Upstream Kernel Changes ] |
182 | ||
183 | * Rebase to v4.13-rc4 | |
184 | ||
cb044a55 | 185 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 08 Aug 2017 11:31:48 -0500 |
5f9f1d1e | 186 | |
17f46b19 | 187 | linux (4.13.0-3.4) artful; urgency=low |
0d88ae24 | 188 | |
17f46b19 SF |
189 | * Adt tests of src:linux time out often on armhf lxc containers (LP: #1705495) |
190 | - [Packaging] tests -- reduce rebuild test to one flavour | |
191 | - [Packaging] tests -- reduce rebuild test to one flavour -- use filter | |
192 | ||
193 | * snapd 2.26.8+17.10 ADT test failure with linux 4.12.0-6.7 (LP: #1704158) | |
194 | - SAUCE: virtio_net: Revert mergeable buffer handling rework | |
0d88ae24 | 195 | |
29e66935 SF |
196 | [ Upstream Kernel Changes ] |
197 | ||
198 | * Rebase to v4.13-rc3 | |
199 | ||
17f46b19 | 200 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 31 Jul 2017 10:08:16 -0500 |
0d88ae24 | 201 | |
1313bc19 | 202 | linux (4.13.0-2.3) artful; urgency=low |
8cc80cf4 | 203 | |
1313bc19 SF |
204 | * Change CONFIG_IBMVETH to module (LP: #1704479) |
205 | - [Config] CONFIG_IBMVETH=m | |
8cc80cf4 | 206 | |
ec21a42b SF |
207 | [ Upstream Kernel Changes ] |
208 | ||
209 | * Rebase to v4.13-rc2 | |
210 | ||
1313bc19 | 211 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 24 Jul 2017 13:58:08 -0500 |
8cc80cf4 | 212 | |
de46943a | 213 | linux (4.13.0-1.2) artful; urgency=low |
d9969bce | 214 | |
de46943a SF |
215 | * Miscellaneous Ubuntu changes |
216 | - [Debian] Support sphinx-based kernel documentation | |
d9969bce | 217 | |
de46943a | 218 | -- Seth Forshee <seth.forshee@canonical.com> Thu, 20 Jul 2017 09:18:33 -0500 |
d9969bce | 219 | |
b92dc169 | 220 | linux (4.13.0-0.1) artful; urgency=low |
de1604e6 | 221 | |
b92dc169 SF |
222 | * Miscellaneous Ubuntu changes |
223 | - Disable hio | |
224 | - Disable zfs build | |
225 | - ubuntu: vbox -- update to 5.1.24-dfsg-1 | |
de1604e6 | 226 | |
f2dfe78b SF |
227 | [ Upstream Kernel Changes ] |
228 | ||
229 | * Rebase to v4.13-rc1 | |
230 | ||
b92dc169 | 231 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 19 Jul 2017 15:09:31 -0500 |
de1604e6 | 232 | |
d067a903 TG |
233 | linux (4.12.0-7.8) artful; urgency=low |
234 | ||
235 | * ThunderX: soft lockup on 4.8+ kernels when running qemu-efi with vhost=on | |
236 | (LP: #1673564) | |
237 | - arm64: Add a facility to turn an ESR syndrome into a sysreg encoding | |
238 | - KVM: arm/arm64: vgic-v3: Add accessors for the ICH_APxRn_EL2 registers | |
239 | - KVM: arm64: Make kvm_condition_valid32() accessible from EL2 | |
240 | - KVM: arm64: vgic-v3: Add hook to handle guest GICv3 sysreg accesses at EL2 | |
241 | - KVM: arm64: vgic-v3: Add ICV_BPR1_EL1 handler | |
242 | - KVM: arm64: vgic-v3: Add ICV_IGRPEN1_EL1 handler | |
243 | - KVM: arm64: vgic-v3: Add ICV_IAR1_EL1 handler | |
244 | - KVM: arm64: vgic-v3: Add ICV_EOIR1_EL1 handler | |
245 | - KVM: arm64: vgic-v3: Add ICV_AP1Rn_EL1 handler | |
246 | - KVM: arm64: vgic-v3: Add ICV_HPPIR1_EL1 handler | |
247 | - KVM: arm64: vgic-v3: Enable trapping of Group-1 system registers | |
248 | - KVM: arm64: Enable GICv3 Group-1 sysreg trapping via command-line | |
249 | - KVM: arm64: vgic-v3: Add ICV_BPR0_EL1 handler | |
250 | - KVM: arm64: vgic-v3: Add ICV_IGNREN0_EL1 handler | |
251 | - KVM: arm64: vgic-v3: Add misc Group-0 handlers | |
252 | - KVM: arm64: vgic-v3: Enable trapping of Group-0 system registers | |
253 | - KVM: arm64: Enable GICv3 Group-0 sysreg trapping via command-line | |
254 | - arm64: Add MIDR values for Cavium cn83XX SoCs | |
255 | - arm64: Add workaround for Cavium Thunder erratum 30115 | |
256 | - KVM: arm64: vgic-v3: Add ICV_DIR_EL1 handler | |
257 | - KVM: arm64: vgic-v3: Add ICV_RPR_EL1 handler | |
258 | - KVM: arm64: vgic-v3: Add ICV_CTLR_EL1 handler | |
259 | - KVM: arm64: vgic-v3: Add ICV_PMR_EL1 handler | |
260 | - KVM: arm64: Enable GICv3 common sysreg trapping via command-line | |
261 | - KVM: arm64: vgic-v3: Log which GICv3 system registers are trapped | |
262 | - KVM: arm64: Log an error if trapping a read-from-write-only GICv3 access | |
263 | - KVM: arm64: Log an error if trapping a write-to-read-only GICv3 access | |
264 | ||
265 | * hns: under heavy load, NIC may fail and require reboot (LP: #1704146) | |
266 | - net: hns: Bugfix for Tx timeout handling in hns driver | |
267 | ||
268 | * New ACPI identifiers for ThunderX SMMU (LP: #1703437) | |
269 | - iommu/arm-smmu: Plumb in new ACPI identifiers | |
270 | ||
271 | * Transparent hugepages should default to enabled=madvise (LP: #1703742) | |
272 | - SAUCE: use CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y as default | |
273 | ||
274 | * Artful update to v4.12.1 stable release (LP: #1703858) | |
275 | - driver core: platform: fix race condition with driver_override | |
276 | - RDMA/uverbs: Check port number supplied by user verbs cmds | |
277 | - usb: dwc3: replace %p with %pK | |
278 | - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick | |
279 | - usb: usbip: set buffer pointers to NULL after free | |
280 | - Add USB quirk for HVR-950q to avoid intermittent device resets | |
281 | - usb: Fix typo in the definition of Endpoint[out]Request | |
282 | - USB: core: fix device node leak | |
283 | - USB: serial: option: add two Longcheer device ids | |
284 | - USB: serial: qcserial: new Sierra Wireless EM7305 device ID | |
285 | - xhci: Limit USB2 port wake support for AMD Promontory hosts | |
286 | - gfs2: Fix glock rhashtable rcu bug | |
287 | - Add "shutdown" to "struct class". | |
288 | - tpm: Issue a TPM2_Shutdown for TPM2 devices. | |
289 | - tpm: fix a kernel memory leak in tpm-sysfs.c | |
290 | - powerpc/powernv: Fix CPU_HOTPLUG=n idle.c compile error | |
291 | - x86/uaccess: Optimize copy_user_enhanced_fast_string() for short strings | |
292 | - sched/fair, cpumask: Export for_each_cpu_wrap() | |
293 | - sched/core: Implement new approach to scale select_idle_cpu() | |
294 | - sched/numa: Use down_read_trylock() for the mmap_sem | |
295 | - sched/numa: Override part of migrate_degrades_locality() when idle balancing | |
296 | - sched/fair: Simplify wake_affine() for the single socket case | |
297 | - sched/numa: Implement NUMA node level wake_affine() | |
298 | - sched/fair: Remove effective_load() | |
299 | - sched/numa: Hide numa_wake_affine() from UP build | |
300 | - xen: avoid deadlock in xenbus driver | |
301 | - crypto: drbg - Fixes panic in wait_for_completion call | |
302 | - Linux 4.12.1 | |
303 | ||
304 | * cxlflash update request in the Xenial SRU stream (LP: #1702521) | |
305 | - scsi: cxlflash: Combine the send queue locks | |
306 | - scsi: cxlflash: Update cxlflash_afu_sync() to return errno | |
307 | - scsi: cxlflash: Reset hardware queue context via specified register | |
308 | - scsi: cxlflash: Schedule asynchronous reset of the host | |
309 | - scsi: cxlflash: Handle AFU sync failures | |
310 | - scsi: cxlflash: Track pending scsi commands in each hardware queue | |
311 | - scsi: cxlflash: Flush pending commands in cleanup path | |
312 | - scsi: cxlflash: Add scsi command abort handler | |
313 | - scsi: cxlflash: Create character device to provide host management interface | |
314 | - scsi: cxlflash: Separate AFU internal command handling from AFU sync | |
315 | specifics | |
316 | - scsi: cxlflash: Introduce host ioctl support | |
317 | - scsi: cxlflash: Refactor AFU capability checking | |
318 | - scsi: cxlflash: Support LUN provisioning | |
319 | - scsi: cxlflash: Support AFU debug | |
320 | - scsi: cxlflash: Support WS16 unmap | |
321 | - scsi: cxlflash: Remove zeroing of private command data | |
322 | - scsi: cxlflash: Update TMF command processing | |
323 | - scsi: cxlflash: Avoid double free of character device | |
324 | - scsi: cxlflash: Update send_tmf() parameters | |
325 | - scsi: cxlflash: Update debug prints in reset handlers | |
326 | ||
327 | * make snap-pkg support (LP: #1700747) | |
328 | - make snap-pkg support | |
329 | ||
330 | * Quirk for non-compliant PCI bridge on HiSilicon D05 board (LP: #1698706) | |
331 | - SAUCE: PCI: Support hibmc VGA cards behind a misbehaving HiSilicon bridge | |
332 | ||
333 | * arm64: fix crash reading /proc/kcore (LP: #1702749) | |
334 | - fs/proc: kcore: use kcore_list type to check for vmalloc/module address | |
335 | - arm64: mm: select CONFIG_ARCH_PROC_KCORE_TEXT | |
336 | ||
337 | * Opal and POWER9 DD2 (LP: #1702159) | |
338 | - SAUCE: powerpc/powernv: Tell OPAL about our MMU mode on POWER9 | |
339 | ||
340 | * Data corruption with hio driver (LP: #1701316) | |
341 | - SAUCE: hio: Fix incorrect use of enum req_opf values | |
342 | ||
343 | * Miscellaneous Ubuntu changes | |
344 | - SAUCE: (noup) Update spl to 0.6.5.10-1, zfs to 0.6.5.10-1ubuntu2 | |
345 | - snapcraft.yaml: Sync with xenial | |
346 | - [Config] CONFIG_CAVIUM_ERRATUM_30115=y | |
347 | ||
348 | * Miscellaneous upstream changes | |
349 | - Revert "UBUNTU: SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and | |
350 | MokSBState" | |
351 | ||
352 | -- Seth Forshee <seth.forshee@canonical.com> Fri, 14 Jul 2017 15:25:41 -0500 | |
353 | ||
354 | linux (4.12.0-6.7) artful; urgency=low | |
355 | ||
356 | * update ENA driver to 1.2.0k from net-next (LP: #1701575) | |
357 | - net: ena: change return value for unsupported features unsupported return | |
358 | value | |
359 | - net: ena: add hardware hints capability to the driver | |
360 | - net: ena: change sizeof() argument to be the type pointer | |
361 | - net: ena: add reset reason for each device FLR | |
362 | - net: ena: add support for out of order rx buffers refill | |
363 | - net: ena: allow the driver to work with small number of msix vectors | |
364 | - net: ena: use napi_schedule_irqoff when possible | |
365 | - net: ena: separate skb allocation to dedicated function | |
366 | - net: ena: use lower_32_bits()/upper_32_bits() to split dma address | |
367 | - net: ena: update driver's rx drop statistics | |
368 | - net: ena: update ena driver to version 1.2.0 | |
369 | ||
370 | * APST gets enabled against explicit kernel option (LP: #1699004) | |
371 | - nvme: explicitly disable APST on quirked devices | |
372 | ||
373 | * Miscellaneous Ubuntu changes | |
374 | - SAUCE: hio: Update to Huawei ES3000_V2 (2.1.0.40) | |
375 | - SAUCE: hio updates for 4.12 | |
376 | - SAUCE: Enable hio build | |
377 | ||
378 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 05 Jul 2017 14:23:20 -0500 | |
379 | ||
380 | linux (4.12.0-5.6) artful; urgency=low | |
381 | ||
382 | * ERAT invalidate on context switch removal (LP: #1700819) | |
383 | - powerpc: Only do ERAT invalidate on radix context switch on P9 DD1 | |
384 | ||
385 | * powerpc: Invalidate ERAT on powersave wakeup for POWER9 (LP: #1700521) | |
386 | - SAUCE: powerpc: Invalidate ERAT on powersave wakeup for POWER9 | |
387 | ||
388 | * Miscellaneous Ubuntu changes | |
389 | - d-i: Move qcom-emac from arm64 to shared nic-modules | |
390 | ||
391 | [ Upstream Kernel Changes ] | |
392 | ||
393 | * Rebase to v4.12 | |
394 | ||
395 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 03 Jul 2017 07:52:02 -0500 | |
396 | ||
397 | linux (4.12.0-4.5) artful; urgency=low | |
398 | ||
399 | * aacraid driver may return uninitialized stack data to userspace | |
400 | (LP: #1700077) | |
401 | - SAUCE: scsi: aacraid: Don't copy uninitialized stack memory to userspace | |
402 | ||
403 | * KILLER1435-S[0489:e0a2] BT cannot search BT 4.0 device (LP: #1699651) | |
404 | - Bluetooth: btusb: Add support for 0489:e0a2 QCA_ROME device | |
405 | ||
406 | * AACRAID for power9 platform (LP: #1689980) | |
407 | - scsi: aacraid: Remove __GFP_DMA for raw srb memory | |
408 | - scsi: aacraid: Fix DMAR issues with iommu=pt | |
409 | - scsi: aacraid: Added 32 and 64 queue depth for arc natives | |
410 | - scsi: aacraid: Set correct Queue Depth for HBA1000 RAW disks | |
411 | - scsi: aacraid: Remove reset support from check_health | |
412 | - scsi: aacraid: Change wait time for fib completion | |
413 | - scsi: aacraid: Log count info of scsi cmds before reset | |
414 | - scsi: aacraid: Print ctrl status before eh reset | |
415 | - scsi: aacraid: Using single reset mask for IOP reset | |
416 | - scsi: aacraid: Rework IOP reset | |
417 | - scsi: aacraid: Add periodic checks to see IOP reset status | |
418 | - scsi: aacraid: Rework SOFT reset code | |
419 | - scsi: aacraid: Rework aac_src_restart | |
420 | - scsi: aacraid: Use correct function to get ctrl health | |
421 | - scsi: aacraid: Make sure ioctl returns on controller reset | |
422 | - scsi: aacraid: Enable ctrl reset for both hba and arc | |
423 | - scsi: aacraid: Add reset debugging statements | |
424 | - scsi: aacraid: Remove reference to Series-9 | |
425 | - scsi: aacraid: Update driver version to 50834 | |
426 | ||
427 | * hibmc driver does not include "pci:" prefix in bus ID (LP: #1698700) | |
428 | - SAUCE: drm: hibmc: Use set_busid function from drm core | |
429 | ||
430 | * HiSilicon D05: installer doesn't appear on VGA (LP: #1698954) | |
431 | - d-i: Add hibmc-drm to kernel-image udeb | |
432 | ||
433 | * Fix /proc/cpuinfo revision for POWER9 DD2 (LP: #1698844) | |
434 | - SAUCE: powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 | |
435 | ||
436 | * Miscellaneous Ubuntu changes | |
437 | - [Config] CONFIG_SATA_MV=n and CONFIG_GENERIC_PHY=n for s390x | |
438 | - [Config] CONFIG_ATA=n for s390x | |
439 | - [Config] Update annotations for 4.12 | |
440 | ||
441 | [ Upstream Kernel Changes ] | |
442 | ||
443 | * Rebase to v4.12-rc7 | |
444 | ||
445 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 26 Jun 2017 11:27:29 -0500 | |
446 | ||
447 | linux (4.12.0-3.4) artful; urgency=low | |
448 | ||
449 | * Miscellaneous upstream changes | |
450 | - ufs: fix the logics for tail relocation | |
451 | ||
452 | [ Upstream Kernel Changes ] | |
453 | ||
454 | * Rebase to v4.12-rc6 | |
455 | ||
456 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 19 Jun 2017 14:50:39 -0500 | |
457 | ||
458 | linux (4.12.0-2.3) artful; urgency=low | |
459 | ||
460 | * CVE-2014-9900 | |
461 | - SAUCE: (no-up) net: Zeroing the structure ethtool_wolinfo in | |
462 | ethtool_get_wol() | |
463 | ||
464 | * System doesn't boot properly on Gigabyte AM4 motherboards (AMD Ryzen) | |
465 | (LP: #1671360) | |
466 | - pinctrl/amd: Use regular interrupt instead of chained | |
467 | ||
468 | * extend-diff-ignore should use exact matches (LP: #1693504) | |
469 | - [Packaging] exact extend-diff-ignore matches | |
470 | ||
471 | * Miscellaneous Ubuntu changes | |
472 | - SAUCE: efi: Don't print secure boot state from the efi stub | |
473 | - ubuntu: vbox -- Update to 5.1.22-dfsg-1 | |
474 | - SAUCE: vbox fixes for 4.12 | |
475 | - Re-enable virtualbox build | |
476 | - [Config] CONFIG_ORANGEFS_FS=m | |
477 | - SAUCE: (noup) Update spl to 0.6.5.9-1ubuntu2, zfs to 0.6.5.9-5ubuntu7 | |
478 | - Enable zfs build | |
479 | ||
480 | [ Upstream Kernel Changes ] | |
481 | ||
482 | * Rebase to v4.12-rc4 | |
483 | * Rebase to v4.12-rc5 | |
484 | ||
485 | -- Seth Forshee <seth.forshee@canonical.com> Sun, 11 Jun 2017 22:25:13 -0500 | |
486 | ||
487 | linux (4.12.0-1.2) artful; urgency=low | |
488 | ||
489 | * Enable Matrox driver for Ubuntu 16.04.3 (LP: #1693337) | |
490 | - [Config] Enable CONFIG_DRM_MGAG200 as module | |
491 | ||
492 | * Support low-pin-count devices on Hisilicon SoCs (LP: #1677319) | |
493 | - [Config] CONFIG_LIBIO=y on arm64 only | |
494 | - SAUCE: LIBIO: Introduce a generic PIO mapping method | |
495 | - SAUCE: OF: Add missing I/O range exception for indirect-IO devices | |
496 | - [Config] CONFIG_HISILICON_LPC=y | |
497 | - SAUCE: LPC: Support the device-tree LPC host on Hip06/Hip07 | |
498 | - SAUCE: LIBIO: Support the dynamically logical PIO registration of ACPI host | |
499 | I/O | |
500 | - SAUCE: LPC: Add the ACPI LPC support | |
501 | - SAUCE: PCI: Apply the new generic I/O management on PCI IO hosts | |
502 | - SAUCE: PCI: Restore codepath for !CONFIG_LIBIO | |
503 | ||
504 | * POWER9: Additional patches for TTY and CPU_IDLE (LP: #1674325) | |
505 | - SAUCE: tty: Fix ldisc crash on reopened tty | |
506 | ||
507 | * Miscellaneous Ubuntu changes | |
508 | - [Debian] Add build-dep on libnuma-dev to enable 'perf bench numa' | |
509 | - Rebase to v4.12-rc3 | |
510 | ||
511 | [ Upstream Kernel Changes ] | |
512 | ||
513 | * Rebase to v4.12-rc3 | |
514 | ||
515 | -- Seth Forshee <seth.forshee@canonical.com> Mon, 29 May 2017 20:56:29 -0500 | |
516 | ||
517 | linux (4.12.0-0.1) artful; urgency=low | |
518 | ||
519 | * please enable CONFIG_ARM64_LSE_ATOMICS (LP: #1691614) | |
520 | - [Config] CONFIG_ARM64_LSE_ATOMICS=y | |
521 | ||
522 | * [Regression] NUMA_BALANCING disabled on arm64 (LP: #1690914) | |
523 | - [Config] CONFIG_NUMA_BALANCING{,_DEFAULT_ENABLED}=y on arm64 | |
524 | ||
525 | * exec'ing a setuid binary from a threaded program sometimes fails to setuid | |
526 | (LP: #1672819) | |
527 | - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct | |
528 | ||
529 | * Miscellaneous Ubuntu changes | |
530 | - Update find-missing-sauce.sh to compare to artful | |
531 | - Update dropped.txt | |
532 | - SAUCE: (efi-lockdown) efi: Add EFI_SECURE_BOOT bit | |
533 | - SAUCE: (efi-lockdown) Add the ability to lock down access to the running | |
534 | kernel image | |
535 | - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot | |
536 | mode | |
537 | - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down | |
538 | - SAUCE: (efi-lockdown) Restrict /dev/mem and /dev/kmem when the kernel is | |
539 | locked down | |
540 | - SAUCE: (efi-lockdown) Add a sysrq option to exit secure boot mode | |
541 | - SAUCE: (efi-lockdown) kexec: Disable at runtime if the kernel is locked down | |
542 | - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec | |
543 | reboot | |
544 | - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if securelevel has been | |
545 | set | |
546 | - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down | |
547 | - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down | |
548 | - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked | |
549 | down | |
550 | - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is | |
551 | locked down | |
552 | - SAUCE: (efi-lockdown) x86: Restrict MSR access when the kernel is locked | |
553 | down | |
554 | - SAUCE: (efi-lockdown) asus-wmi: Restrict debugfs interface when the kernel | |
555 | is locked down | |
556 | - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is | |
557 | locked down | |
558 | - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel | |
559 | has been locked down | |
560 | - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is | |
561 | locked down | |
562 | - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is | |
563 | locked down | |
564 | - SAUCE: (efi-lockdown) Enable cold boot attack mitigation | |
565 | - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the | |
566 | kernel is locked down | |
567 | - SAUCE: (efi-lockdown) scsi: Lock down the eata driver | |
568 | - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked | |
569 | down | |
570 | - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL | |
571 | - SAUCE: (efi-lockdown) KEYS: Allow unrestricted boot-time addition of keys to | |
572 | secondary keyring | |
573 | - SAUCE: (efi-lockdown) efi: Add EFI signature data types | |
574 | - SAUCE: (efi-lockdown) efi: Add an EFI signature blob parser | |
575 | - SAUCE: (efi-lockdown) MODSIGN: Import certificates from UEFI Secure Boot | |
576 | - SAUCE: (efi-lockdown) MODSIGN: Allow the "db" UEFI variable to be suppressed | |
577 | - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub | |
578 | - SAUCE: (efi-lockdown) efi: Add secure_boot state and status bit for | |
579 | MokSBState | |
580 | - SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and MokSBState | |
581 | - [Config] Set values for UEFI secure boot lockdown options | |
582 | - Disable virtualbox build | |
583 | - Disable hio build | |
584 | - SAUCE: securityfs: Replace CURRENT_TIME with current_time() | |
585 | - Disable zfs build | |
586 | - [Debian] Work out upstream tag for use with gen-auto-reconstruct | |
587 | - SAUCE: Import aufs driver | |
588 | - SAUCE: aufs -- Include linux/mm.h in fs/aufs/file.h | |
589 | - [Config] Enable aufs | |
590 | - SAUCE: perf callchain: Include errno.h on x86 unconditinally | |
591 | ||
592 | [ Upstream Kernel Changes ] | |
593 | ||
594 | * Rebase to v4.12-rc2 | |
595 | ||
596 | -- Seth Forshee <seth.forshee@canonical.com> Sun, 21 May 2017 23:44:44 -0500 | |
597 | ||
598 | linux (4.11.0-3.8) artful; urgency=low | |
599 | ||
600 | [ Seth Forshee ] | |
601 | ||
602 | * Release Tracking Bug | |
603 | - LP: #1690999 | |
604 | ||
605 | * apparmor_parser hangs indefinitely when called by multiple threads | |
606 | (LP: #1645037) | |
607 | - SAUCE: apparmor: fix lock ordering for mkdir | |
608 | ||
609 | * apparmor leaking securityfs pin count (LP: #1660846) | |
610 | - SAUCE: apparmor: fix leak on securityfs pin count | |
611 | ||
612 | * apparmor reference count leak when securityfs_setup_d_inode\ () fails | |
613 | (LP: #1660845) | |
614 | - SAUCE: apparmor: fix reference count leak when securityfs_setup_d_inode() | |
615 | fails | |
616 | ||
617 | * apparmor not checking error if security_pin_fs() fails (LP: #1660842) | |
618 | - SAUCE: apparmor: fix not handling error case when securityfs_pin_fs() fails | |
619 | ||
620 | * libvirt profile is blocking global setrlimit despite having no rlimit rule | |
621 | (LP: #1679704) | |
622 | - SAUCE: apparmor: fix complain mode failure for rlimit mediation | |
623 | - apparmor: update auditing of rlimit check to provide capability information | |
624 | ||
625 | * apparmor: does not provide a way to detect policy updataes (LP: #1678032) | |
626 | - SAUCE: apparmor: add policy revision file interface | |
627 | ||
628 | * apparmor does not make support of query data visible (LP: #1678023) | |
629 | - SAUCE: apparmor: add label data availability to the feature set | |
630 | ||
631 | * apparmor query interface does not make supported query info available | |
632 | (LP: #1678030) | |
633 | - SAUCE: apparmor: add information about the query inteface to the feature set | |
634 | ||
635 | * change_profile incorrect when using namespaces with a compound stack | |
636 | (LP: #1677959) | |
637 | - SAUCE: apparmor: fix label parse for stacked labels | |
638 | ||
639 | * Regression in 4.4.0-65-generic causes very frequent system crashes | |
640 | (LP: #1669611) | |
641 | - apparmor: sync of apparmor 3.6+ (17.04) | |
642 | ||
643 | * Artful update to 4.11.1 stable release (LP: #1690814) | |
644 | - dm ioctl: prevent stack leak in dm ioctl call | |
645 | - drm/sti: fix GDP size to support up to UHD resolution | |
646 | - power: supply: lp8788: prevent out of bounds array access | |
647 | - brcmfmac: Ensure pointer correctly set if skb data location changes | |
648 | - brcmfmac: Make skb header writable before use | |
649 | - sparc64: fix fault handling in NGbzero.S and GENbzero.S | |
650 | - refcount: change EXPORT_SYMBOL markings | |
651 | - net: macb: fix phy interrupt parsing | |
652 | - tcp: fix access to sk->sk_state in tcp_poll() | |
653 | - geneve: fix incorrect setting of UDP checksum flag | |
654 | - bpf: enhance verifier to understand stack pointer arithmetic | |
655 | - bpf, arm64: fix jit branch offset related to ldimm64 | |
656 | - tcp: fix wraparound issue in tcp_lp | |
657 | - net: ipv6: Do not duplicate DAD on link up | |
658 | - net: usb: qmi_wwan: add Telit ME910 support | |
659 | - tcp: do not inherit fastopen_req from parent | |
660 | - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header | |
661 | - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string | |
662 | - ipv6: initialize route null entry in addrconf_init() | |
663 | - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf | |
664 | - tcp: randomize timestamps on syncookies | |
665 | - bnxt_en: allocate enough space for ->ntp_fltr_bmap | |
666 | - bpf: don't let ldimm64 leak map addresses on unprivileged | |
667 | - net: mdio-mux: bcm-iproc: call mdiobus_free() in error path | |
668 | - f2fs: sanity check segment count | |
669 | - xen/arm,arm64: fix xen_dma_ops after 815dd18 "Consolidate get_dma_ops..." | |
670 | - xen: Revert commits da72ff5bfcb0 and 72a9b186292d | |
671 | - block: get rid of blk_integrity_revalidate() | |
672 | - Linux 4.11.1 | |
673 | ||
674 | * Module signing exclusion for staging drivers does not work properly | |
675 | (LP: #1690908) | |
676 | - SAUCE: Fix module signing exclusion in package builds | |
677 | ||
678 | * perf: qcom: Add L3 cache PMU driver (LP: #1689856) | |
679 | - [Config] CONFIG_QCOM_L3_PMU=y | |
680 | - perf: qcom: Add L3 cache PMU driver | |
681 | ||
682 | * No PMU support for ACPI-based arm64 systems (LP: #1689661) | |
683 | - drivers/perf: arm_pmu: rework per-cpu allocation | |
684 | - drivers/perf: arm_pmu: manage interrupts per-cpu | |
685 | - drivers/perf: arm_pmu: split irq request from enable | |
686 | - drivers/perf: arm_pmu: remove pointless PMU disabling | |
687 | - drivers/perf: arm_pmu: define armpmu_init_fn | |
688 | - drivers/perf: arm_pmu: fold init into alloc | |
689 | - drivers/perf: arm_pmu: factor out pmu registration | |
690 | - drivers/perf: arm_pmu: simplify cpu_pmu_request_irqs() | |
691 | - drivers/perf: arm_pmu: handle no platform_device | |
692 | - drivers/perf: arm_pmu: rename irq request/free functions | |
693 | - drivers/perf: arm_pmu: split cpu-local irq request/free | |
694 | - drivers/perf: arm_pmu: move irq request/free into probe | |
695 | - drivers/perf: arm_pmu: split out platform device probe logic | |
696 | - arm64: add function to get a cpu's MADT GICC table | |
697 | - [Config] CONFIG_ARM_PMU_ACPI=y | |
698 | - drivers/perf: arm_pmu: add ACPI framework | |
699 | - arm64: pmuv3: handle !PMUv3 when probing | |
700 | - arm64: pmuv3: use arm_pmu ACPI framework | |
701 | ||
702 | * Fix NVLINK2 TCE route (LP: #1690155) | |
703 | - powerpc/powernv: Fix TCE kill on NVLink2 | |
704 | ||
705 | * CVE-2017-0605 | |
706 | - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() | |
707 | ||
708 | * Miscellaneous Ubuntu changes | |
709 | - [Config] Restore powerpc arch to annotations file | |
710 | - [Config] Disable runtime testing modules | |
711 | - [Config] Disable drivers not needed on s390x | |
712 | - [Config] Update annotations for 4.11 | |
713 | - [Config] updateconfigs after apparmor updates | |
714 | ||
715 | * Miscellaneous upstream changes | |
716 | - apparmor: use SHASH_DESC_ON_STACK | |
717 | - apparmor: fix invalid reference to index variable of iterator line 836 | |
718 | - apparmor: fix parameters so that the permission test is bypassed at boot | |
719 | - apparmor: Make path_max parameter readonly | |
720 | - apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show() | |
721 | - apparmorfs: Use seq_putc() in two functions | |
722 | - apparmor: provide information about path buffer size at boot | |
723 | - apparmor: add/use fns to print hash string hex value | |
724 | ||
725 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 16 May 2017 00:39:13 -0500 | |
726 | ||
727 | linux (4.11.0-2.7) artful; urgency=low | |
728 | ||
729 | * kernel-wedge fails in artful due to leftover squashfs-modules d-i files | |
730 | (LP: #1688259) | |
731 | - Remove squashfs-modules files from d-i | |
732 | - [Config] as squashfs-modules is builtin kernel-image must Provides: it | |
733 | ||
734 | * [Zesty] d-i: replace msm_emac with qcom_emac (LP: #1677297) | |
735 | - Revert "UBUNTU: d-i: initrd needs msm_emac on amberwing platform." | |
736 | - d-i: initrd needs qcom_emac on amberwing platform. | |
737 | ||
738 | * update for V3 kernel bits and improved multiple fan slice support | |
739 | (LP: #1470091) | |
740 | - SAUCE: fan: tunnel multiple mapping mode (v3) | |
741 | ||
742 | * Miscellaneous Ubuntu changes | |
743 | - SAUCE: (noup) Update spl to 0.6.5.9-1ubuntu1, zfs to 0.6.5.9-5ubuntu5 | |
744 | - Enable zfs | |
745 | - SAUCE: fan: add VXLAN implementation | |
746 | - SAUCE: (efi-lockdown) efi: Add EFI_SECURE_BOOT bit | |
747 | - SAUCE: (efi-lockdown) Add the ability to lock down access to the running | |
748 | kernel image | |
749 | - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot | |
750 | mode | |
751 | - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down | |
752 | - SAUCE: (efi-lockdown) Restrict /dev/mem and /dev/kmem when the kernel is | |
753 | locked down | |
754 | - SAUCE: (efi-lockdown) Add a sysrq option to exit secure boot mode | |
755 | - SAUCE: (efi-lockdown) kexec: Disable at runtime if the kernel is locked down | |
756 | - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec | |
757 | reboot | |
758 | - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if securelevel has been | |
759 | set | |
760 | - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down | |
761 | - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down | |
762 | - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked | |
763 | down | |
764 | - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is | |
765 | locked down | |
766 | - SAUCE: (efi-lockdown) x86: Restrict MSR access when the kernel is locked | |
767 | down | |
768 | - SAUCE: (efi-lockdown) asus-wmi: Restrict debugfs interface when the kernel | |
769 | is locked down | |
770 | - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is | |
771 | locked down | |
772 | - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel | |
773 | has been locked down | |
774 | - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is | |
775 | locked down | |
776 | - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is | |
777 | locked down | |
778 | - SAUCE: (efi-lockdown) Enable cold boot attack mitigation | |
779 | - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the | |
780 | kernel is locked down | |
781 | - SAUCE: (efi-lockdown) scsi: Lock down the eata driver | |
782 | - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked | |
783 | down | |
784 | - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL | |
785 | - SAUCE: (efi-lockdown) Add EFI signature data types | |
786 | - SAUCE: (efi-lockdown) Add an EFI signature blob parser and key loader. | |
787 | - SAUCE: (efi-lockdown) KEYS: Add a system blacklist keyring | |
788 | - SAUCE: (efi-lockdown) MODSIGN: Import certificates from UEFI Secure Boot | |
789 | - SAUCE: (efi-lockdown) MODSIGN: Support not importing certs from db | |
790 | - SAUCE: (efi-lockdown) MODSIGN: Don't try secure boot if EFI runtime is | |
791 | disabled | |
792 | - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub | |
793 | - SAUCE: (efi-lockdown) efi: Add secure_boot state and status bit for | |
794 | MokSBState | |
795 | - SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and MokSBState | |
796 | - [Config] Set values for UEFI secure boot lockdown options | |
797 | - Update dropped.txt | |
798 | ||
799 | [ Upstream Kernel Changes ] | |
800 | ||
801 | * rebase to v4.11 | |
802 | ||
803 | -- Seth Forshee <seth.forshee@canonical.com> Fri, 05 May 2017 07:43:14 -0500 | |
804 | ||
805 | linux (4.11.0-1.6) artful; urgency=low | |
806 | ||
807 | * Miscellaneous Ubuntu changes | |
808 | - [Debian] Use default compression for all packages | |
809 | - SAUCE: (namespace) block_dev: Support checking inode permissions in | |
810 | lookup_bdev() | |
811 | - SAUCE: (namespace) block_dev: Check permissions towards block device inode | |
812 | when mounting | |
813 | - SAUCE: (namespace) mtd: Check permissions towards mtd block device inode | |
814 | when mounting | |
815 | - SAUCE: (namespace) fs: Allow superblock owner to change ownership of inodes | |
816 | - SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root | |
817 | - SAUCE: (namespace) fs: Allow superblock owner to access do_remount_sb() | |
818 | - SAUCE: (namespace) capabilities: Allow privileged user in s_user_ns to set | |
819 | security.* xattrs | |
820 | - SAUCE: (namespace) fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw | |
821 | filesystems | |
822 | - SAUCE: (namespace) fuse: Add support for pid namespaces | |
823 | - SAUCE: (namespace) fuse: Support fuse filesystems outside of init_user_ns | |
824 | - SAUCE: (namespace) fuse: Restrict allow_other to the superblock's namespace | |
825 | or a descendant | |
826 | - SAUCE: (namespace) fuse: Allow user namespace mounts | |
827 | - SAUCE: (namespace) ext4: Add support for unprivileged mounts from user | |
828 | namespaces | |
829 | - SAUCE: (namespace) evm: Don't update hmacs in user ns mounts | |
830 | - SAUCE: (namespace) ext4: Add module parameter to enable user namespace | |
831 | mounts | |
832 | - SAUCE: (namespace) block_dev: Forbid unprivileged mounting when device is | |
833 | opened for writing | |
834 | ||
835 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 26 Apr 2017 10:08:29 -0500 | |
836 | ||
837 | linux (4.11.0-0.5) artful; urgency=low | |
838 | ||
839 | * [Hyper-V][SAUCE] pci-hyperv: Use only 16 bit integer for PCI domain | |
840 | (LP: #1684971) | |
841 | - SAUCE: pci-hyperv: Use only 16 bit integer for PCI domain | |
842 | ||
843 | * [Hyper-V] Ubuntu 14.04.2 LTS Generation 2 SCSI Errors on VSS Based Backups | |
844 | (LP: #1470250) | |
845 | - SAUCE: Tools: hv: vss: Thaw the filesystem and continue after freeze fails | |
846 | ||
847 | * Enable virtual scsi server driver for Power (LP: #1615665) | |
848 | - SAUCE: Return TCMU-generated sense data to fabric module | |
849 | ||
850 | * include/linux/security.h header syntax error with !CONFIG_SECURITYFS | |
851 | (LP: #1630990) | |
852 | - SAUCE: (no-up) include/linux/security.h -- fix syntax error with | |
853 | CONFIG_SECURITYFS=n | |
854 | ||
855 | * Miscellaneous Ubuntu changes | |
856 | - SAUCE: Import aufs driver | |
857 | - [Config] Enable aufs | |
858 | - [Debian] Add script to update virtualbox | |
859 | - ubuntu: vbox -- Update to 5.1.20-dfsg-2 | |
860 | - Enable vbox | |
861 | - SAUCE: aufs -- Include linux/mm.h in fs/aufs/file.h | |
862 | ||
863 | [ Upstream Kernel Changes ] | |
864 | ||
865 | * rebase to v4.11-rc8 | |
866 | ||
867 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 25 Apr 2017 13:42:54 -0500 | |
868 | ||
869 | linux (4.11.0-0.4) zesty; urgency=low | |
870 | ||
871 | * POWER9: Improve performance on memory management (LP: #1681429) | |
872 | - SAUCE: powerpc/mm/radix: Don't do page walk cache flush when doing full mm | |
873 | flush | |
874 | - SAUCE: powerpc/mm/radix: Remove unnecessary ptesync | |
875 | ||
876 | * Miscellaneous Ubuntu changes | |
877 | - find-missing-sauce.sh | |
878 | ||
879 | [ Upstream Kernel Changes ] | |
880 | ||
881 | * rebase to v4.11-rc7 | |
882 | ||
883 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 18 Apr 2017 08:19:43 -0500 | |
884 | ||
885 | linux (4.11.0-0.3) zesty; urgency=low | |
886 | ||
887 | * Disable CONFIG_HVC_UDBG on ppc64el (LP: #1680888) | |
888 | - [Config] Disable CONFIG_HVC_UDBG on ppc64el | |
889 | ||
890 | * smartpqi driver needed in initram disk and installer (LP: #1680156) | |
891 | - [Config] Add smartpqi to d-i | |
892 | ||
893 | * Disable CONFIG_SECURITY_SELINUX_DISABLE (LP: #1680315) | |
894 | - [Config] CONFIG_SECURITY_SELINUX_DISABLE=n | |
895 | ||
896 | * Miscellaneous Ubuntu changes | |
897 | - [Config] flash-kernel should be a Breaks | |
898 | - [Config] drop the info directory | |
899 | - [Config] drop NOTES as obsolete | |
900 | - [Config] drop changelog.historical as obsolete | |
901 | - rebase to v4.11-rc6 | |
902 | ||
903 | [ Upstream Kernel Changes ] | |
904 | ||
905 | * rebase to v4.11-rc6 | |
906 | ||
907 | -- Tim Gardner <tim.gardner@canonical.com> Tue, 11 Apr 2017 07:16:52 -0600 | |
908 | ||
909 | linux (4.11.0-0.2) zesty; urgency=low | |
910 | ||
911 | [ Upstream Kernel Changes ] | |
912 | ||
913 | * rebase to v4.11-rc5 | |
914 | ||
915 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 03 Apr 2017 08:26:07 +0100 | |
916 | ||
917 | linux (4.11.0-0.1) zesty; urgency=low | |
918 | ||
919 | [ Upstream Kernel Changes ] | |
920 | ||
921 | * rebase to v4.11-rc4 | |
922 | - LP: #1591053 | |
923 | ||
924 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600 | |
925 | ||
926 | linux (4.11.0-0.0) zesty; urgency=low | |
927 | ||
928 | * dummy entry | |
929 | ||
930 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600 |