]>
Commit | Line | Data |
---|---|---|
c43097c0 SF |
1 | linux-raspi2 (4.11.0-1000.1) UNRELEASED; urgency=low |
2 | ||
3 | CHANGELOG: Do not edit directly. Autogenerated at release. | |
4 | CHANGELOG: Use the printchanges target to see the curent changes. | |
5 | CHANGELOG: Use the insertchanges target to create the final log. | |
6 | ||
7 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 13 Jun 2017 14:03:54 -0500 | |
8 | ||
9 | linux-raspi2 (4.11.0-1000.0) artful; urgency=low | |
10 | ||
11 | * Dummy Entry | |
12 | ||
13 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 24 May 2017 11:51:37 -0500 | |
14 | ||
15 | linux (4.11.0-4.9) artful; urgency=low | |
16 | ||
17 | [ Seth Forshee ] | |
18 | ||
19 | * Release Tracking Bug | |
20 | - LP: #1693229 | |
21 | ||
22 | * arm64: mbigen updates (LP: #1692783) | |
23 | - Revert "UBUNTU: SAUCE: irqchip: mbigen: Add ACPI support" | |
24 | - irqchip/mbigen: Add ACPI support | |
25 | - irqchip/mbigen: Fix return value check in mbigen_device_probe() | |
26 | - irqchip/mbigen: Fix memory mapping code | |
27 | - irqchip/mbigen: Fix potential NULL dereferencing | |
28 | - irqchip/mbigen: Fix the clear register offset calculation | |
29 | ||
30 | * Ubuntu16.04.03: POWER9 XIVE: msgsnd/doorbell IPI support (backport) | |
31 | (LP: #1691973) | |
32 | - powerpc/64s: Add msgp facility unavailable log string | |
33 | - powerpc/64s: Add SCV FSCR bit for ISA v3.0 | |
34 | - powerpc/xive: Native exploitation of the XIVE interrupt controller | |
35 | - powerpc: Change the doorbell IPI calling convention | |
36 | - powerpc: Introduce msgsnd/doorbell barrier primitives | |
37 | - powerpc/64s: Avoid a branch for ppc_msgsnd | |
38 | - powerpc/powernv: POWER9 support for msgsnd/doorbell IPI | |
39 | - powerpc/powernv: Add XIVE related definitions to opal-api.h | |
40 | - powerpc: Add more PPC bit conversion macros | |
41 | - powerpc: Add optional smp_ops->prepare_cpu SMP callback | |
42 | - powerpc/smp: Remove migrate_irq() custom implementation | |
43 | - powerpc/powernv: Fix oops on P9 DD1 in cause_ipi() | |
44 | ||
45 | * Hardware transaction memory corruption (LP: #1691477) | |
46 | - powerpc/tm: Fix FP and VMX register corruption | |
47 | ||
48 | * Offlined CPUs of a core fail to come up online on POWER9 DD1 (Ubuntu 17.04) | |
49 | (LP: #1685792) | |
50 | - powerpc/powernv: Move CPU-Offline idle state invocation from smp.c to idle.c | |
51 | - powerpc/powernv/smp: Add busy-wait loop as fall back for CPU-Hotplug | |
52 | - powerpc/powernv/idle: Don't override default/deepest directly in kernel | |
53 | ||
54 | * Merlin SGMII fail on Ubuntu Xenial HWE kernel (LP: #1686305) | |
55 | - drivers: net: phy: xgene: Fix mdio write | |
56 | ||
57 | * powerpc/powernv: Introduce address translation services for Nvlink2 | |
58 | (LP: #1690412) | |
59 | - powerpc/powernv: Require MMU_NOTIFIER to fix NPU build | |
60 | - drivers/of/base.c: Add of_property_read_u64_index | |
61 | - powerpc/powernv: Add sanity checks to pnv_pci_get_{gpu|npu}_dev | |
62 | - powerpc/powernv: Introduce address translation services for Nvlink2 | |
63 | ||
64 | * arm64/ACPI support for SBSA watchdog (LP: #1688114) | |
65 | - clocksource: arm_arch_timer: clean up printk usage | |
66 | - clocksource: arm_arch_timer: rename type macros | |
67 | - clocksource: arm_arch_timer: rename the PPI enum | |
68 | - clocksource: arm_arch_timer: move enums and defines to header file | |
69 | - clocksource: arm_arch_timer: add a new enum for spi type | |
70 | - clocksource: arm_arch_timer: rework PPI selection | |
71 | - clocksource: arm_arch_timer: split dt-only rate handling | |
72 | - clocksource: arm_arch_timer: refactor arch_timer_needs_probing | |
73 | - clocksource: arm_arch_timer: move arch_timer_needs_of_probing into DT init | |
74 | call | |
75 | - clocksource: arm_arch_timer: add structs to describe MMIO timer | |
76 | - clocksource: arm_arch_timer: split MMIO timer probing. | |
77 | - [Config] CONFIG_ACPI_GTDT=y | |
78 | - acpi/arm64: Add GTDT table parse driver | |
79 | - clocksource: arm_arch_timer: simplify ACPI support code. | |
80 | - acpi/arm64: Add memory-mapped timer support in GTDT driver | |
81 | - clocksource: arm_arch_timer: add GTDT support for memory-mapped timer | |
82 | - acpi/arm64: Add SBSA Generic Watchdog support in GTDT driver | |
83 | ||
84 | * arm64: Add CNTFRQ_EL0 handler (LP: #1688164) | |
85 | - arm64: Add CNTFRQ_EL0 trap handler | |
86 | ||
87 | * Support IPMI system interface on Cavium ThunderX (LP: #1688132) | |
88 | - i2c: thunderx: Enable HWMON class probing | |
89 | ||
90 | * Support low-pin-count devices on Hisilicon SoCs (LP: #1677319) | |
91 | - [Config] CONFIG_LIBIO=y on arm64 only | |
92 | - SAUCE: LIBIO: Introduce a generic PIO mapping method | |
93 | - SAUCE: OF: Add missing I/O range exception for indirect-IO devices | |
94 | - [Config] CONFIG_HISILICON_LPC=y | |
95 | - SAUCE: LPC: Support the device-tree LPC host on Hip06/Hip07 | |
96 | - SAUCE: LIBIO: Support the dynamically logical PIO registration of ACPI host | |
97 | I/O | |
98 | - SAUCE: LPC: Add the ACPI LPC support | |
99 | - SAUCE: PCI: Apply the new generic I/O management on PCI IO hosts | |
100 | - SAUCE: PCI: Restore codepath for !CONFIG_LIBIO | |
101 | ||
102 | * POWER9: CAPI2 enablement (LP: #1686519) | |
103 | - cxl: Read vsec perst load image | |
104 | - cxl: Remove unused values in bare-metal environment. | |
105 | - cxl: Keep track of mm struct associated with a context | |
106 | - cxl: Update implementation service layer | |
107 | - cxl: Rename some psl8 specific functions | |
108 | - cxl: Isolate few psl8 specific calls | |
109 | - cxl: Add psl9 specific code | |
110 | ||
111 | * POWER9: Additional patches for TTY and CPU_IDLE (LP: #1674325) | |
112 | - SAUCE: tty: Fix ldisc crash on reopened tty | |
113 | ||
114 | * Artful update to 4.11.2 stable release (LP: #1692332) | |
115 | - xen: adjust early dom0 p2m handling to xen hypervisor behavior | |
116 | - target: Fix compare_and_write_callback handling for non GOOD status | |
117 | - target/fileio: Fix zero-length READ and WRITE handling | |
118 | - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement | |
119 | - usb: xhci: bInterval quirk for TI TUSB73x0 | |
120 | - usb: host: xhci: print correct command ring address | |
121 | - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit | |
122 | - USB: Proper handling of Race Condition when two USB class drivers try to | |
123 | call init_usb_class simultaneously | |
124 | - USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications" | |
125 | - staging: vt6656: use off stack for in buffer USB transfers. | |
126 | - staging: vt6656: use off stack for out buffer USB transfers. | |
127 | - staging: gdm724x: gdm_mux: fix use-after-free on module unload | |
128 | - staging: wilc1000: Fix problem with wrong vif index | |
129 | - staging: sir: fill in missing fields and fix probe | |
130 | - staging: comedi: jr3_pci: fix possible null pointer dereference | |
131 | - staging: comedi: jr3_pci: cope with jiffies wraparound | |
132 | - usb: misc: add missing continue in switch | |
133 | - usb: gadget: legacy gadgets are optional | |
134 | - usb: Make sure usb/phy/of gets built-in | |
135 | - usb: hub: Fix error loop seen after hub communication errors | |
136 | - usb: hub: Do not attempt to autosuspend disconnected devices | |
137 | - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup | |
138 | - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug | |
139 | - x86, pmem: Fix cache flushing for iovec write < 8 bytes | |
140 | - um: Fix PTRACE_POKEUSER on x86_64 | |
141 | - perf/x86: Fix Broadwell-EP DRAM RAPL events | |
142 | - KVM: x86: fix user triggerable warning in kvm_apic_accept_events() | |
143 | - Revert "KVM: Support vCPU-based gfn->hva cache" | |
144 | - KVM: arm/arm64: fix races in kvm_psci_vcpu_on | |
145 | - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses | |
146 | - block: fix blk_integrity_register to use template's interval_exp if not 0 | |
147 | - crypto: s5p-sss - Close possible race for completed requests | |
148 | - crypto: algif_aead - Require setkey before accept(2) | |
149 | - crypto: ccp - Use only the relevant interrupt bits | |
150 | - crypto: ccp - Disable interrupts early on unload | |
151 | - crypto: ccp - Change ISR handler method for a v3 CCP | |
152 | - crypto: ccp - Change ISR handler method for a v5 CCP | |
153 | - dm crypt: rewrite (wipe) key in crypto layer using random data | |
154 | - dm era: save spacemap metadata root after the pre-commit | |
155 | - dm rq: check blk_mq_register_dev() return value in | |
156 | dm_mq_init_request_queue() | |
157 | - dm thin: fix a memory leak when passing discard bio down | |
158 | - vfio/type1: Remove locked page accounting workqueue | |
159 | - iov_iter: don't revert iov buffer if csum error | |
160 | - IB/core: Fix sysfs registration error flow | |
161 | - IB/core: Fix kernel crash during fail to initialize device | |
162 | - IB/core: For multicast functions, verify that LIDs are multicast LIDs | |
163 | - IB/IPoIB: ibX: failed to create mcg debug file | |
164 | - IB/mlx4: Fix ib device initialization error flow | |
165 | - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level | |
166 | - IB/hfi1: Prevent kernel QP post send hard lockups | |
167 | - perf auxtrace: Fix no_size logic in addr_filter__resolve_kernel_syms() | |
168 | - perf annotate s390: Fix perf annotate error -95 (4.10 regression) | |
169 | - perf annotate s390: Implement jump types for perf annotate | |
170 | - jbd2: fix dbench4 performance regression for 'nobarrier' mounts | |
171 | - ext4: evict inline data when writing to memory map | |
172 | - orangefs: fix bounds check for listxattr | |
173 | - orangefs: clean up oversize xattr validation | |
174 | - orangefs: do not set getattr_time on orangefs_lookup | |
175 | - orangefs: do not check possibly stale size on truncate | |
176 | - fs/xattr.c: zero out memory copied to userspace in getxattr | |
177 | - ceph: fix memory leak in __ceph_setxattr() | |
178 | - fs: fix data invalidation in the cleancache during direct IO | |
179 | - fs/block_dev: always invalidate cleancache in invalidate_bdev() | |
180 | - mm: vmscan: fix IO/refault regression in cache workingset transition | |
181 | - mm: prevent potential recursive reclaim due to clearing PF_MEMALLOC | |
182 | - Fix match_prepath() | |
183 | - Do not return number of bytes written for ioctl CIFS_IOC_COPYCHUNK_FILE | |
184 | - Set unicode flag on cifs echo request to avoid Mac error | |
185 | - SMB3: Work around mount failure when using SMB3 dialect to Macs | |
186 | - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD | |
187 | - cifs: fix leak in FSCTL_ENUM_SNAPS response handling | |
188 | - cifs: fix CIFS_ENUMERATE_SNAPSHOTS oops | |
189 | - CIFS: fix oplock break deadlocks | |
190 | - cifs: fix CIFS_IOC_GET_MNT_INFO oops | |
191 | - CIFS: add misssing SFM mapping for doublequote | |
192 | - ovl: do not set overlay.opaque on non-dir create | |
193 | - padata: free correct variable | |
194 | - md/raid1: avoid reusing a resync bio after error handling. | |
195 | - device-dax: fix cdev leak | |
196 | - device-dax: fix sysfs attribute deadlock | |
197 | - dax: prevent invalidation of mapped DAX entries | |
198 | - mm: fix data corruption due to stale mmap reads | |
199 | - ext4: return to starting transaction in ext4_dax_huge_fault() | |
200 | - dax: fix PMD data corruption when fault races with write | |
201 | - f2fs: fix wrong max cost initialization | |
202 | - Revert "f2fs: put allocate_segment after refresh_sit_entry" | |
203 | - f2fs: fix fs corruption due to zero inode page | |
204 | - f2fs: fix multiple f2fs_add_link() having same name for inline dentry | |
205 | - f2fs: check entire encrypted bigname when finding a dentry | |
206 | - f2fs: Make flush bios explicitely sync | |
207 | - initramfs: Always do fput() and load modules after rootfs populate | |
208 | - initramfs: avoid "label at end of compound statement" error | |
209 | - fscrypt: fix context consistency check when key(s) unavailable | |
210 | - fscrypt: avoid collisions when presenting long encrypted filenames | |
211 | - serial: samsung: Use right device for DMA-mapping calls | |
212 | - serial: samsung: Add missing checks for dma_map_single failure | |
213 | - serial: omap: fix runtime-pm handling on unbind | |
214 | - serial: omap: suspend device on probe errors | |
215 | - tty: pty: Fix ldisc flush after userspace become aware of the data already | |
216 | - tty: pl011: use "qdf2400_e44" as the earlycon name for QDF2400 E44 | |
217 | - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel | |
218 | - Bluetooth: hci_bcm: add missing tty-device sanity check | |
219 | - Bluetooth: hci_intel: add missing tty-device sanity check | |
220 | - cgroup: fix spurious warnings on cgroup_is_dead() from cgroup_sk_alloc() | |
221 | - libata: reject passthrough WRITE SAME requests | |
222 | - ipmi: Fix kernel panic at ipmi_ssif_thread() | |
223 | - libnvdimm, region: fix flush hint detection crash | |
224 | - libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify | |
225 | - libnvdimm: fix nvdimm_bus_lock() vs device_lock() ordering | |
226 | - libnvdimm, pfn: fix 'npfns' vs section alignment | |
227 | - pstore: Fix flags to enable dumps on powerpc | |
228 | - pstore: Use dynamic spinlock initializer | |
229 | - pstore: Shut down worker when unregistering | |
230 | - Linux 4.11.2 | |
231 | ||
232 | * please enable CONFIG_ARM64_LSE_ATOMICS (LP: #1691614) | |
233 | - [Config] CONFIG_ARM64_LSE_ATOMICS=y | |
234 | ||
235 | * iptables regression causing snapd ADT failure (LP: #1691752) | |
236 | - SAUCE: Revert "iptables: use match, target and data copy_to_user helpers" | |
237 | ||
238 | * [Regression] NUMA_BALANCING disabled on arm64 (LP: #1690914) | |
239 | - [Config] CONFIG_NUMA_BALANCING{,_DEFAULT_ENABLED}=y on arm64 | |
240 | ||
241 | * exec'ing a setuid binary from a threaded program sometimes fails to setuid | |
242 | (LP: #1672819) | |
243 | - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct | |
244 | ||
245 | * CVE-2013-1060 (LP: #1206200) | |
246 | - [Debian] (no-squash) supply perf with appropriate prefix to ensure use of | |
247 | local config | |
248 | ||
249 | * Miscellaneous Ubuntu changes | |
250 | - [Debian] Work out upstream tag for use with gen-auto-reconstruct | |
251 | - [Debian] Add build-dep on libnuma-dev to enable 'perf bench numa' | |
252 | ||
253 | * Miscellaneous upstream changes | |
254 | - Revert "UBUNTU: [Debian] supply perf with appropriate prefix to ensure use | |
255 | of local config" | |
256 | ||
257 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 24 May 2017 08:57:22 -0500 | |
258 | ||
259 | linux (4.11.0-3.8) artful; urgency=low | |
260 | ||
261 | [ Seth Forshee ] | |
262 | ||
263 | * Release Tracking Bug | |
264 | - LP: #1690999 | |
265 | ||
266 | * apparmor_parser hangs indefinitely when called by multiple threads | |
267 | (LP: #1645037) | |
268 | - SAUCE: apparmor: fix lock ordering for mkdir | |
269 | ||
270 | * apparmor leaking securityfs pin count (LP: #1660846) | |
271 | - SAUCE: apparmor: fix leak on securityfs pin count | |
272 | ||
273 | * apparmor reference count leak when securityfs_setup_d_inode\ () fails | |
274 | (LP: #1660845) | |
275 | - SAUCE: apparmor: fix reference count leak when securityfs_setup_d_inode() | |
276 | fails | |
277 | ||
278 | * apparmor not checking error if security_pin_fs() fails (LP: #1660842) | |
279 | - SAUCE: apparmor: fix not handling error case when securityfs_pin_fs() fails | |
280 | ||
281 | * libvirt profile is blocking global setrlimit despite having no rlimit rule | |
282 | (LP: #1679704) | |
283 | - SAUCE: apparmor: fix complain mode failure for rlimit mediation | |
284 | - apparmor: update auditing of rlimit check to provide capability information | |
285 | ||
286 | * apparmor: does not provide a way to detect policy updataes (LP: #1678032) | |
287 | - SAUCE: apparmor: add policy revision file interface | |
288 | ||
289 | * apparmor does not make support of query data visible (LP: #1678023) | |
290 | - SAUCE: apparmor: add label data availability to the feature set | |
291 | ||
292 | * apparmor query interface does not make supported query info available | |
293 | (LP: #1678030) | |
294 | - SAUCE: apparmor: add information about the query inteface to the feature set | |
295 | ||
296 | * change_profile incorrect when using namespaces with a compound stack | |
297 | (LP: #1677959) | |
298 | - SAUCE: apparmor: fix label parse for stacked labels | |
299 | ||
300 | * Regression in 4.4.0-65-generic causes very frequent system crashes | |
301 | (LP: #1669611) | |
302 | - apparmor: sync of apparmor 3.6+ (17.04) | |
303 | ||
304 | * Artful update to 4.11.1 stable release (LP: #1690814) | |
305 | - dm ioctl: prevent stack leak in dm ioctl call | |
306 | - drm/sti: fix GDP size to support up to UHD resolution | |
307 | - power: supply: lp8788: prevent out of bounds array access | |
308 | - brcmfmac: Ensure pointer correctly set if skb data location changes | |
309 | - brcmfmac: Make skb header writable before use | |
310 | - sparc64: fix fault handling in NGbzero.S and GENbzero.S | |
311 | - refcount: change EXPORT_SYMBOL markings | |
312 | - net: macb: fix phy interrupt parsing | |
313 | - tcp: fix access to sk->sk_state in tcp_poll() | |
314 | - geneve: fix incorrect setting of UDP checksum flag | |
315 | - bpf: enhance verifier to understand stack pointer arithmetic | |
316 | - bpf, arm64: fix jit branch offset related to ldimm64 | |
317 | - tcp: fix wraparound issue in tcp_lp | |
318 | - net: ipv6: Do not duplicate DAD on link up | |
319 | - net: usb: qmi_wwan: add Telit ME910 support | |
320 | - tcp: do not inherit fastopen_req from parent | |
321 | - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header | |
322 | - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string | |
323 | - ipv6: initialize route null entry in addrconf_init() | |
324 | - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf | |
325 | - tcp: randomize timestamps on syncookies | |
326 | - bnxt_en: allocate enough space for ->ntp_fltr_bmap | |
327 | - bpf: don't let ldimm64 leak map addresses on unprivileged | |
328 | - net: mdio-mux: bcm-iproc: call mdiobus_free() in error path | |
329 | - f2fs: sanity check segment count | |
330 | - xen/arm,arm64: fix xen_dma_ops after 815dd18 "Consolidate get_dma_ops..." | |
331 | - xen: Revert commits da72ff5bfcb0 and 72a9b186292d | |
332 | - block: get rid of blk_integrity_revalidate() | |
333 | - Linux 4.11.1 | |
334 | ||
335 | * Module signing exclusion for staging drivers does not work properly | |
336 | (LP: #1690908) | |
337 | - SAUCE: Fix module signing exclusion in package builds | |
338 | ||
339 | * perf: qcom: Add L3 cache PMU driver (LP: #1689856) | |
340 | - [Config] CONFIG_QCOM_L3_PMU=y | |
341 | - perf: qcom: Add L3 cache PMU driver | |
342 | ||
343 | * No PMU support for ACPI-based arm64 systems (LP: #1689661) | |
344 | - drivers/perf: arm_pmu: rework per-cpu allocation | |
345 | - drivers/perf: arm_pmu: manage interrupts per-cpu | |
346 | - drivers/perf: arm_pmu: split irq request from enable | |
347 | - drivers/perf: arm_pmu: remove pointless PMU disabling | |
348 | - drivers/perf: arm_pmu: define armpmu_init_fn | |
349 | - drivers/perf: arm_pmu: fold init into alloc | |
350 | - drivers/perf: arm_pmu: factor out pmu registration | |
351 | - drivers/perf: arm_pmu: simplify cpu_pmu_request_irqs() | |
352 | - drivers/perf: arm_pmu: handle no platform_device | |
353 | - drivers/perf: arm_pmu: rename irq request/free functions | |
354 | - drivers/perf: arm_pmu: split cpu-local irq request/free | |
355 | - drivers/perf: arm_pmu: move irq request/free into probe | |
356 | - drivers/perf: arm_pmu: split out platform device probe logic | |
357 | - arm64: add function to get a cpu's MADT GICC table | |
358 | - [Config] CONFIG_ARM_PMU_ACPI=y | |
359 | - drivers/perf: arm_pmu: add ACPI framework | |
360 | - arm64: pmuv3: handle !PMUv3 when probing | |
361 | - arm64: pmuv3: use arm_pmu ACPI framework | |
362 | ||
363 | * Fix NVLINK2 TCE route (LP: #1690155) | |
364 | - powerpc/powernv: Fix TCE kill on NVLink2 | |
365 | ||
366 | * CVE-2017-0605 | |
367 | - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() | |
368 | ||
369 | * Miscellaneous Ubuntu changes | |
370 | - [Config] Restore powerpc arch to annotations file | |
371 | - [Config] Disable runtime testing modules | |
372 | - [Config] Disable drivers not needed on s390x | |
373 | - [Config] Update annotations for 4.11 | |
374 | - [Config] updateconfigs after apparmor updates | |
375 | ||
376 | * Miscellaneous upstream changes | |
377 | - apparmor: use SHASH_DESC_ON_STACK | |
378 | - apparmor: fix invalid reference to index variable of iterator line 836 | |
379 | - apparmor: fix parameters so that the permission test is bypassed at boot | |
380 | - apparmor: Make path_max parameter readonly | |
381 | - apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show() | |
382 | - apparmorfs: Use seq_putc() in two functions | |
383 | - apparmor: provide information about path buffer size at boot | |
384 | - apparmor: add/use fns to print hash string hex value | |
385 | ||
386 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 16 May 2017 00:39:13 -0500 | |
387 | ||
388 | linux (4.11.0-2.7) artful; urgency=low | |
389 | ||
390 | * kernel-wedge fails in artful due to leftover squashfs-modules d-i files | |
391 | (LP: #1688259) | |
392 | - Remove squashfs-modules files from d-i | |
393 | - [Config] as squashfs-modules is builtin kernel-image must Provides: it | |
394 | ||
395 | * [Zesty] d-i: replace msm_emac with qcom_emac (LP: #1677297) | |
396 | - Revert "UBUNTU: d-i: initrd needs msm_emac on amberwing platform." | |
397 | - d-i: initrd needs qcom_emac on amberwing platform. | |
398 | ||
399 | * update for V3 kernel bits and improved multiple fan slice support | |
400 | (LP: #1470091) | |
401 | - SAUCE: fan: tunnel multiple mapping mode (v3) | |
402 | ||
403 | * Miscellaneous Ubuntu changes | |
404 | - SAUCE: (noup) Update spl to 0.6.5.9-1ubuntu1, zfs to 0.6.5.9-5ubuntu5 | |
405 | - Enable zfs | |
406 | - SAUCE: fan: add VXLAN implementation | |
407 | - SAUCE: (efi-lockdown) efi: Add EFI_SECURE_BOOT bit | |
408 | - SAUCE: (efi-lockdown) Add the ability to lock down access to the running | |
409 | kernel image | |
410 | - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot | |
411 | mode | |
412 | - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down | |
413 | - SAUCE: (efi-lockdown) Restrict /dev/mem and /dev/kmem when the kernel is | |
414 | locked down | |
415 | - SAUCE: (efi-lockdown) Add a sysrq option to exit secure boot mode | |
416 | - SAUCE: (efi-lockdown) kexec: Disable at runtime if the kernel is locked down | |
417 | - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec | |
418 | reboot | |
419 | - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if securelevel has been | |
420 | set | |
421 | - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down | |
422 | - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down | |
423 | - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked | |
424 | down | |
425 | - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is | |
426 | locked down | |
427 | - SAUCE: (efi-lockdown) x86: Restrict MSR access when the kernel is locked | |
428 | down | |
429 | - SAUCE: (efi-lockdown) asus-wmi: Restrict debugfs interface when the kernel | |
430 | is locked down | |
431 | - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is | |
432 | locked down | |
433 | - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel | |
434 | has been locked down | |
435 | - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is | |
436 | locked down | |
437 | - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is | |
438 | locked down | |
439 | - SAUCE: (efi-lockdown) Enable cold boot attack mitigation | |
440 | - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the | |
441 | kernel is locked down | |
442 | - SAUCE: (efi-lockdown) scsi: Lock down the eata driver | |
443 | - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked | |
444 | down | |
445 | - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL | |
446 | - SAUCE: (efi-lockdown) Add EFI signature data types | |
447 | - SAUCE: (efi-lockdown) Add an EFI signature blob parser and key loader. | |
448 | - SAUCE: (efi-lockdown) KEYS: Add a system blacklist keyring | |
449 | - SAUCE: (efi-lockdown) MODSIGN: Import certificates from UEFI Secure Boot | |
450 | - SAUCE: (efi-lockdown) MODSIGN: Support not importing certs from db | |
451 | - SAUCE: (efi-lockdown) MODSIGN: Don't try secure boot if EFI runtime is | |
452 | disabled | |
453 | - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub | |
454 | - SAUCE: (efi-lockdown) efi: Add secure_boot state and status bit for | |
455 | MokSBState | |
456 | - SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and MokSBState | |
457 | - [Config] Set values for UEFI secure boot lockdown options | |
458 | - Update dropped.txt | |
459 | ||
460 | [ Upstream Kernel Changes ] | |
461 | ||
462 | * rebase to v4.11 | |
463 | ||
464 | -- Seth Forshee <seth.forshee@canonical.com> Fri, 05 May 2017 07:43:14 -0500 | |
465 | ||
466 | linux (4.11.0-1.6) artful; urgency=low | |
467 | ||
468 | * Miscellaneous Ubuntu changes | |
469 | - [Debian] Use default compression for all packages | |
470 | - SAUCE: (namespace) block_dev: Support checking inode permissions in | |
471 | lookup_bdev() | |
472 | - SAUCE: (namespace) block_dev: Check permissions towards block device inode | |
473 | when mounting | |
474 | - SAUCE: (namespace) mtd: Check permissions towards mtd block device inode | |
475 | when mounting | |
476 | - SAUCE: (namespace) fs: Allow superblock owner to change ownership of inodes | |
477 | - SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root | |
478 | - SAUCE: (namespace) fs: Allow superblock owner to access do_remount_sb() | |
479 | - SAUCE: (namespace) capabilities: Allow privileged user in s_user_ns to set | |
480 | security.* xattrs | |
481 | - SAUCE: (namespace) fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw | |
482 | filesystems | |
483 | - SAUCE: (namespace) fuse: Add support for pid namespaces | |
484 | - SAUCE: (namespace) fuse: Support fuse filesystems outside of init_user_ns | |
485 | - SAUCE: (namespace) fuse: Restrict allow_other to the superblock's namespace | |
486 | or a descendant | |
487 | - SAUCE: (namespace) fuse: Allow user namespace mounts | |
488 | - SAUCE: (namespace) ext4: Add support for unprivileged mounts from user | |
489 | namespaces | |
490 | - SAUCE: (namespace) evm: Don't update hmacs in user ns mounts | |
491 | - SAUCE: (namespace) ext4: Add module parameter to enable user namespace | |
492 | mounts | |
493 | - SAUCE: (namespace) block_dev: Forbid unprivileged mounting when device is | |
494 | opened for writing | |
495 | ||
496 | -- Seth Forshee <seth.forshee@canonical.com> Wed, 26 Apr 2017 10:08:29 -0500 | |
497 | ||
498 | linux (4.11.0-0.5) artful; urgency=low | |
499 | ||
500 | * [Hyper-V][SAUCE] pci-hyperv: Use only 16 bit integer for PCI domain | |
501 | (LP: #1684971) | |
502 | - SAUCE: pci-hyperv: Use only 16 bit integer for PCI domain | |
503 | ||
504 | * [Hyper-V] Ubuntu 14.04.2 LTS Generation 2 SCSI Errors on VSS Based Backups | |
505 | (LP: #1470250) | |
506 | - SAUCE: Tools: hv: vss: Thaw the filesystem and continue after freeze fails | |
507 | ||
508 | * Enable virtual scsi server driver for Power (LP: #1615665) | |
509 | - SAUCE: Return TCMU-generated sense data to fabric module | |
510 | ||
511 | * include/linux/security.h header syntax error with !CONFIG_SECURITYFS | |
512 | (LP: #1630990) | |
513 | - SAUCE: (no-up) include/linux/security.h -- fix syntax error with | |
514 | CONFIG_SECURITYFS=n | |
515 | ||
516 | * Miscellaneous Ubuntu changes | |
517 | - SAUCE: Import aufs driver | |
518 | - [Config] Enable aufs | |
519 | - [Debian] Add script to update virtualbox | |
520 | - ubuntu: vbox -- Update to 5.1.20-dfsg-2 | |
521 | - Enable vbox | |
522 | - SAUCE: aufs -- Include linux/mm.h in fs/aufs/file.h | |
523 | ||
524 | [ Upstream Kernel Changes ] | |
525 | ||
526 | * rebase to v4.11-rc8 | |
527 | ||
528 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 25 Apr 2017 13:42:54 -0500 | |
529 | ||
530 | linux (4.11.0-0.4) zesty; urgency=low | |
531 | ||
532 | * POWER9: Improve performance on memory management (LP: #1681429) | |
533 | - SAUCE: powerpc/mm/radix: Don't do page walk cache flush when doing full mm | |
534 | flush | |
535 | - SAUCE: powerpc/mm/radix: Remove unnecessary ptesync | |
536 | ||
537 | * Miscellaneous Ubuntu changes | |
538 | - find-missing-sauce.sh | |
539 | ||
540 | [ Upstream Kernel Changes ] | |
541 | ||
542 | * rebase to v4.11-rc7 | |
543 | ||
544 | -- Seth Forshee <seth.forshee@canonical.com> Tue, 18 Apr 2017 08:19:43 -0500 | |
545 | ||
546 | linux (4.11.0-0.3) zesty; urgency=low | |
547 | ||
548 | * Disable CONFIG_HVC_UDBG on ppc64el (LP: #1680888) | |
549 | - [Config] Disable CONFIG_HVC_UDBG on ppc64el | |
550 | ||
551 | * smartpqi driver needed in initram disk and installer (LP: #1680156) | |
552 | - [Config] Add smartpqi to d-i | |
553 | ||
554 | * Disable CONFIG_SECURITY_SELINUX_DISABLE (LP: #1680315) | |
555 | - [Config] CONFIG_SECURITY_SELINUX_DISABLE=n | |
556 | ||
557 | * Miscellaneous Ubuntu changes | |
558 | - [Config] flash-kernel should be a Breaks | |
559 | - [Config] drop the info directory | |
560 | - [Config] drop NOTES as obsolete | |
561 | - [Config] drop changelog.historical as obsolete | |
562 | - rebase to v4.11-rc6 | |
563 | ||
564 | [ Upstream Kernel Changes ] | |
565 | ||
566 | * rebase to v4.11-rc6 | |
567 | ||
568 | -- Tim Gardner <tim.gardner@canonical.com> Tue, 11 Apr 2017 07:16:52 -0600 | |
569 | ||
570 | linux (4.11.0-0.2) zesty; urgency=low | |
571 | ||
572 | [ Upstream Kernel Changes ] | |
573 | ||
574 | * rebase to v4.11-rc5 | |
575 | ||
576 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 03 Apr 2017 08:26:07 +0100 | |
577 | ||
578 | linux (4.11.0-0.1) zesty; urgency=low | |
579 | ||
580 | [ Upstream Kernel Changes ] | |
581 | ||
582 | * rebase to v4.11-rc4 | |
583 | - LP: #1591053 | |
584 | ||
585 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600 | |
586 | ||
587 | linux (4.11.0-0.0) zesty; urgency=low | |
588 | ||
589 | * dummy entry | |
590 | ||
591 | -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600 |