]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blob - debian.master/changelog
UBUNTU: Ubuntu-4.13.0-14.15
[mirror_ubuntu-artful-kernel.git] / debian.master / changelog
1 linux (4.13.0-14.15) artful; urgency=low
2
3 * linux: 4.13.0-14.15 -proposed tracker (LP: #1721122)
4
5 * [Artful] ltp rwtest - Unable to handle kernel paging request at virtual
6 address (LP: #1721067)
7 - arm64: mm: Use READ_ONCE when dereferencing pointer to pte table
8
9 * linux 4.13.0-13.14 ADT test failure with linux 4.13.0-13.14 (LP: #1720779)
10 - SAUCE: LSM stacking: check for invalid zero sized writes
11
12 * Add installer support for Broadcom BCM573xx network drivers. (LP: #1720466)
13 - d-i: Add bnxt_en to nic-modules.
14
15 * Miscellaneous Ubuntu changes
16 - [Packaging] Include arch/arm64/kernel/ftrace-mod.o in headers package
17
18 -- Seth Forshee <seth.forshee@canonical.com> Tue, 03 Oct 2017 14:51:52 -0500
19
20 linux (4.13.0-13.14) artful; urgency=low
21
22 * linux: 4.13.0-13.14 -proposed tracker (LP: #1720239)
23
24 * [Bug] USB 3.1 Gen2 works as 5Gbps (LP: #1720045)
25 - xhci: set missing SuperSpeedPlus Link Protocol bit in roothub descriptor
26
27 * [Feature]Memory Bandwidth Monitoring(MBM) port to new Cache Quality
28 Monitoring (CQM) (LP: #1591609)
29 - x86/perf/cqm: Wipe out perf based cqm
30 - x86/intel_rdt/cqm: Documentation for resctrl based RDT Monitoring
31 - x86/intel_rdt: Introduce a common compile option for RDT
32 - x86/intel_rdt: Change file names to accommodate RDT monitor code
33 - x86/intel_rdt: Mark rdt_root and closid_alloc as static
34 - x86/intel_rdt: Cleanup namespace to support RDT monitoring
35 - x86/intel_rdt: Make rdt_resources_all more readable
36 - x86/intel_rdt/cqm: Add RDT monitoring initialization
37 - x86/intel_rdt/cqm: Add RMID (Resource monitoring ID) management
38 - x86/intel_rdt: Simplify info and base file lists
39 - x86/intel_rdt/cqm: Add info files for RDT monitoring
40 - x86/intel_rdt: Prepare for RDT monitoring mkdir support
41 - x86/intel_rdt/cqm: Add mkdir support for RDT monitoring
42 - x86/intel_rdt: Change closid type from int to u32
43 - x86/intel_rdt/cqm: Add tasks file support
44 - x86/intel_rdt: Prepare to add RDT monitor cpus file support
45 - x86/intel_rdt/cqm: Add cpus file support
46 - x86/intel_rdt: Prepare for RDT monitor data support
47 - x86/intel_rdt/cqm: Add mon_data
48 - x86/intel_rdt: Separate the ctrl bits from rmdir
49 - x86/intel_rdt/cqm: Add rmdir support
50 - x86/intel_rdt/cqm: Add mount,umount support
51 - x86/intel_rdt: Introduce rdt_enable_key for scheduling
52 - x86/intel_rdt/cqm: Add sched_in support
53 - x86/intel_rdt/cqm: Add CPU hotplug support
54 - x86/intel_rdt/mbm: Basic counting of MBM events (total and local)
55 - x86/intel_rdt/mbm: Add mbm counter initialization
56 - x86/intel_rdt/mbm: Handle counter overflow
57 - x86/intel_rdt: Show bitmask of shareable resource with other executing units
58 - x86/intel_rdt/cqm: Clear the default RMID during hotcpu
59 - x86/intel_rdt: Modify the intel_pqr_state for better performance
60 - x86/intel_rdt/mbm: Fix MBM overflow handler during CPU hotplug
61 - x86/intel_rdt/cqm: Improve limbo list processing
62 - x86/intel_rdt: Remove redundant ternary operator on return
63 - [Config] CONFIG_INTEL_RDT=y
64
65 * [Feature] RDT: Disable most RDT features on Skylake server (LP: #1713619)
66 - x86/intel_rdt: Move special case code for Haswell to a quirk function
67 - x86/intel_rdt: Add command line options for resource director technology
68 - x86/intel_rdt: Turn off most RDT features on Skylake
69
70 * CVE-2017-1000252
71 - KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
72
73 * POWER9: NX842 module changes (LP: #1718292)
74 - crypto/nx: Rename nx842_powernv_function as icswx function
75 - crypto/nx: Create nx842_configure_crb function
76 - crypto/nx: Create nx842_delete_coprocs function
77 - crypto/nx: Add nx842_add_coprocs_list function
78 - crypto/nx: Use kzalloc for workmem allocation
79 - crypto/nx: Add P9 NX specific error codes for 842 engine
80 - crypto/nx: Add P9 NX support for 842 compression engine
81
82 * [Ubuntu 17.10] POWER9 - Base - Integrate P9 VAS (Virtual Accelerator
83 Switchboard) support in kernel (LP: #1718293)
84 - powerpc/powernv: Add IMC OPAL APIs
85 - powerpc/powernv: Detect and create IMC device
86 - powerpc/perf: Add nest IMC PMU support
87 - powerpc/powernv: Add support for powercap framework
88 - powerpc/powernv: Add support to set power-shifting-ratio
89 - powerpc/powernv: Enable PCI peer-to-peer
90 - powerpc/powernv/vas: Define macros, register fields and structures
91 - powerpc/powernv: Move GET_FIELD/SET_FIELD to vas.h
92 - powerpc/powernv/vas: Define vas_init() and vas_exit()
93 - powerpc/powernv/vas: Define helpers to access MMIO regions
94 - powerpc/powernv/vas: Define helpers to init window context
95 - powerpc/powernv/vas: Define helpers to alloc/free windows
96 - powerpc/powernv/vas: Define vas_rx_win_open() interface
97 - powerpc/powernv/vas: Define vas_win_close() interface
98 - powerpc/powernv/vas: Define vas_tx_win_open()
99 - powerpc/powernv/vas: Define copy/paste interfaces
100 - [Config] CONFIG_PPC_VAS=y
101
102 * Artful update to v4.13.4 stable release (LP: #1720154)
103 - orangefs: Don't clear SGID when inheriting ACLs
104 - <linux/uaccess.h>: Fix copy_in_user() declaration
105 - IB/hfi1: Revert egress pkey check enforcement
106 - IB/{qib, hfi1}: Avoid flow control testing for RDMA write operation
107 - IB/mlx5: Fix cached MR allocation flow
108 - srcu: Provide ordering for CPU not involved in grace period
109 - smp/hotplug: Handle removal correctly in cpuhp_store_callbacks()
110 - Input: xpad - validate USB endpoint type during probe
111 - drm/amdgpu: read reg in each iterator of psp_wait_for loop
112 - tty: improve tty_insert_flip_char() fast path
113 - tty: improve tty_insert_flip_char() slow path
114 - tty: fix __tty_insert_flip_char regression
115 - pinctrl: samsung: Fix invalid register offset used for Exynos5433 external
116 interrupts
117 - pinctrl: samsung: Fix NULL pointer exception on external interrupts on
118 S3C24xx
119 - pinctrl/amd: save pin registers over suspend/resume
120 - MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix quiet NaN propagation
121 - MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix cases of both inputs zero
122 - MIPS: math-emu: <MAX|MIN>.<D|S>: Fix cases of both inputs negative
123 - MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of input values with opposite
124 signs
125 - MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of both infinite inputs
126 - MIPS: math-emu: MINA.<D|S>: Fix some cases of infinity and zero inputs
127 - MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix NaN propagation
128 - MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix some cases of infinite inputs
129 - MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix some cases of zero inputs
130 - MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Clean up "maddf_flags" enumeration
131 - MIPS: math-emu: <MADDF|MSUBF>.S: Fix accuracy (32-bit case)
132 - MIPS: math-emu: <MADDF|MSUBF>.D: Fix accuracy (64-bit case)
133 - docs: disable KASLR when debugging kernel
134 - crypto: ccp - Fix XTS-AES-128 support on v5 CCPs
135 - crypto: scompress - don't sleep with preemption disabled
136 - crypto: caam/qi - fix typo in authenc alg driver name
137 - crypto: caam/qi - properly set IV after {en,de}crypt
138 - crypto: AF_ALG - remove SGL terminator indicator when chaining
139 - regulator: cpcap: Fix standby mode
140 - wcn36xx: Introduce mutual exclusion of fw configuration
141 - ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets
142 - ext4: fix incorrect quotaoff if the quota feature is enabled
143 - ext4: fix quota inconsistency during orphan cleanup for read-only mounts
144 - cxl: Fix driver use count
145 - powerpc/powernv/npu: Move tlb flush before launching ATSD
146 - powerpc/pseries: Don't attempt to acquire drc during memory hot add for
147 assigned lmbs
148 - powerpc: Fix DAR reporting when alignment handler faults
149 - block: Relax a check in blk_start_queue()
150 - block: directly insert blk-mq request from blk_insert_cloned_request()
151 - md/bitmap: copy correct data for bitmap super
152 - md/bitmap: disable bitmap_resize for file-backed bitmaps.
153 - skd: Avoid that module unloading triggers a use-after-free
154 - skd: Submit requests to firmware before triggering the doorbell
155 - scsi: zfcp: fix queuecommand for scsi_eh commands when DIX enabled
156 - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path
157 - scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response trace records
158 - scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to correlate with HBA
159 - scsi: zfcp: fix missing trace records for early returns in TMF eh handlers
160 - scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace records
161 - scsi: zfcp: trace HBA FSF response by default on dismiss or timedout late
162 response
163 - scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
164 - scsi: qedi: off by one in qedi_get_cmd_from_tid()
165 - scsi: aacraid: Fix command send race condition
166 - scsi: megaraid_sas: mismatch of allocated MFI frame size and length exposed
167 in MFI MPT pass through command
168 - scsi: megaraid_sas: set minimum value of resetwaittime to be 1 secs
169 - scsi: megaraid_sas: Check valid aen class range to avoid kernel panic
170 - scsi: megaraid_sas: Return pended IOCTLs with cmd_status
171 MFI_STAT_WRONG_STATE in case adapter is dead
172 - scsi: storvsc: fix memory leak on ring buffer busy
173 - scsi: sg: factor out sg_fill_request_table()
174 - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
175 - scsi: qla2xxx: Update fw_started flags at qpair creation.
176 - scsi: qla2xxx: Correction to vha->vref_count timeout
177 - scsi: qla2xxx: Fix target multiqueue configuration
178 - scsi: qla2xxx: Use BIT_6 to acquire FAWWPN from switch
179 - scsi: qla2xxx: Use fabric name for Get Port Speed command
180 - scsi: qla2xxx: Fix an integer overflow in sysfs code
181 - mailbox: bcm-flexrm-mailbox: Fix mask used in CMPL_START_ADDR_VALUE()
182 - ftrace: Fix debug preempt config name in stack_tracer_{en,dis}able
183 - ftrace: Fix selftest goto location on error
184 - ftrace: Fix memleak when unregistering dynamic ops when tracing disabled
185 - tracing: Add barrier to trace_printk() buffer nesting modification
186 - tracing: Fix clear of RECORDED_TGID flag when disabling trace event
187 - tracing: Apply trace_clock changes to instance max buffer
188 - ARC: Re-enable MMU upon Machine Check exception
189 - PCI: shpchp: Enable bridge bus mastering if MSI is enabled
190 - PCI: pciehp: Report power fault only once until we clear it
191 - net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
192 - media: v4l2-compat-ioctl32: Fix timespec conversion
193 - media: Revert "[media] lirc_dev: remove superfluous get/put_device() calls"
194 - media: venus: fix copy/paste error in return_buf_error
195 - media: uvcvideo: Prevent heap overflow when accessing mapped controls
196 - media: adv7180: add missing adv7180cp, adv7180st i2c device IDs
197 - PM / devfreq: Fix memory leak when fail to register device
198 - ALSA: seq: Cancel pending autoload work at unbinding device
199 - bcache: initialize dirty stripes in flash_dev_run()
200 - bcache: Fix leak of bdev reference
201 - bcache: do not subtract sectors_to_gc for bypassed IO
202 - bcache: correct cache_dirty_target in __update_writeback_rate()
203 - bcache: Correct return value for sysfs attach errors
204 - bcache: fix sequential large write IO bypass
205 - bcache: fix for gc and write-back race
206 - bcache: fix bch_hprint crash and improve output
207 - sched/cpuset/pm: Fix cpuset vs. suspend-resume bugs
208 - iwlwifi: add workaround to disable wide channels in 5GHz
209 - Linux 4.13.4
210
211 * [17.10 FEAT] KVM: CPU Model z14 (LP: #1719297)
212 - KVM: s390: Support Configuration z/Architecture Mode
213
214 * sata reset hangs w/ early cn99xx silicon (LP: #1719031)
215 - SAUCE: ahci: thunderx2: Fix for errata that affects stop engine
216 - SAUCE: ahci: thunderx2: stop engine fix update
217
218 * PCI quirk required for SATA on early cn99xx silicon (LP: #1718760)
219 - SAUCE: PCI: Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
220
221 * Please make linux-libc-dev Provide: aufs-dev (LP: #1716091)
222 - [Packaging] Add aufs-dev to the Provides: for linux-libc-dev
223
224 * Miscellaneous Ubuntu changes
225 - [Packaging] Use SRCPKGNAME rather than hard-coding the source package name
226 - SAUCE: LSM stacking: procfs: add smack subdir to attrs
227 - SAUCE: LSM stacking: LSM: manage credential security blobs
228 - SAUCE: LSM stacking: LSM: Manage file security blobs
229 - SAUCE: LSM stacking: LSM: manage task security blobs
230 - SAUCE: LSM stacking: LSM: Infrastructure management of the remaining blobs
231 - SAUCE: LSM stacking: LSM: general but not extreme module stacking
232 - SAUCE: LSM stacking: LSM: Complete task_alloc hook
233 - SAUCE: LSM stacking: fixup procsfs: add smack subdir to attrs
234 - SAUCE: LSM stacking: fixup initialize task->security
235 - SAUCE: LSM stacking: fixup: alloc_task_ctx is dead code
236 - SAUCE: LSM stacking: add support for stacking getpeersec_stream
237 - SAUCE: LSM stacking: add stacking support to apparmor network hooks
238 - SAUCE: LSM stacking: fixup apparmor stacking enablement
239 - SAUCE: LSM stacking: fixup stacking kconfig
240 - SAUCE: LSM stacking: allow selecting multiple LSMs using kernel boot params
241 - SAUCE: LSM stacking: provide prctl interface for setting context
242 - SAUCE: LSM stacking: inherit current display LSM
243 - SAUCE: LSM stacking: keep an index for each registered LSM
244 - SAUCE: LSM stacking: verify display LSM
245 - SAUCE: LSM stacking: provide a way to specify the default display lsm
246 - SAUCE: LSM stacking: make sure LSM blob align on 64 bit boundaries
247 - SAUCE: LSM stacking: add /proc/<pid>/attr/display_lsm
248 - SAUCE: LSM stacking: add Kconfig to set default display LSM
249 - SAUCE: LSM stacking: add configs for LSM stacking
250 - [Config] Run updateconfigs after merging LSM stacking
251
252 -- Seth Forshee <seth.forshee@canonical.com> Thu, 28 Sep 2017 17:36:53 -0400
253
254 linux (4.13.0-12.13) artful; urgency=low
255
256 * linux: 4.13.0-12.13 -proposed tracker (LP: #1718980)
257
258 * [Feature] SKX: Support crystall ridge / far / near memory indication in PEBS
259 (LP: #1591813)
260 - perf/x86: Move Nehalem PEBS code to flag
261 - perf/x86: Fix data source decoding for Skylake
262
263 * Upgrade to 4.13.0-11.12 in artful amd64 VM breaks display on wayland
264 (LP: #1718679)
265 - [Config] CONFIG_DRM_VBOXVIDEO=n
266
267 * ipmmu-vmsa driver breaks arm64 boots (LP: #1718734)
268 - [Config] Disable CONFIG_IPMMU_VMSA on arm64
269
270 * Vlun resize request could fail with cxlflash driver (LP: #1713575)
271 - scsi: cxlflash: Fix vlun resize failure in the shrink path
272
273 * multipath -ll is not showing the disks which are actually multipath
274 (LP: #1718397)
275 - fs: aio: fix the increment of aio-nr and counting against aio-max-nr
276
277 * [Feature] Crystal Ridge - BTT - Rework error clearing (LP: #1704350)
278 - libnvdimm, btt: fix a missed NVDIMM_IO_ATOMIC case in the write path
279 - libnvdimm, btt: refactor map entry operations with macros
280 - libnvdimm, btt: ensure that flags were also unchanged during a map_read
281 - libnvdimm, btt: cache sector_size in arena_info
282 - libnvdimm: fix potential deadlock while clearing errors
283 - libnvdimm, btt: rework error clearing
284
285 * [Feature] Crystal Ridge - have 4k DAX faults use a common zero page
286 (LP: #1704439)
287 - mm: add vm_insert_mixed_mkwrite()
288 - dax: relocate some dax functions
289 - dax: use common 4k zero page for dax mmap reads
290 - dax: remove DAX code from page_cache_tree_insert()
291 - dax: move all DAX radix tree defs to fs/dax.c
292
293 * [bug] 17.10: CDP test fail on platform of Purley-2S/4S/Neoncity,BDW-
294 de/ep/ex, (LP: #1716843)
295 - SAUCE: (no-up) x86/intel_rdt: Fix cdp info directory files issue
296
297 * [featue] GPIO support for Denverton (LP: #1591829)
298 - pinctrl: intel: Add Intel Denverton pin controller support
299
300 * ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
301 (LP: #1594214)
302 - Input: i8042 - add Gigabyte P57 to the keyboard reset table
303
304 * autopkgtest profile fails to build on armhf (LP: #1717920)
305 - [Packaging] autopkgtest -- disable d-i when dropping flavours
306
307 * Artful update to v4.13.3 stable release (LP: #1718412)
308 - Revert "net: use lib/percpu_counter API for fragmentation mem accounting"
309 - Revert "net: fix percpu memory leaks"
310 - gianfar: Fix Tx flow control deactivation
311 - vhost_net: correctly check tx avail during rx busy polling
312 - ip6_gre: update mtu properly in ip6gre_err
313 - udp: drop head states only when all skb references are gone
314 - ipv6: fix memory leak with multiple tables during netns destruction
315 - ipv6: fix typo in fib6_net_exit()
316 - sctp: fix missing wake ups in some situations
317 - tcp: fix a request socket leak
318 - ip_tunnel: fix setting ttl and tos value in collect_md mode
319 - f2fs: let fill_super handle roll-forward errors
320 - f2fs: check hot_data for roll-forward recovery
321 - x86/fsgsbase/64: Fully initialize FS and GS state in start_thread_common
322 - x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core dumps
323 - x86/switch_to/64: Rewrite FS/GS switching yet again to fix AMD CPUs
324 - x86/mm, mm/hwpoison: Clear PRESENT bit for kernel 1:1 mappings of poison
325 pages
326 - ovl: fix false positive ESTALE on lookup
327 - fuse: allow server to run in different pid_ns
328 - idr: remove WARN_ON_ONCE() when trying to replace negative ID
329 - libnvdimm, btt: check memory allocation failure
330 - libnvdimm: fix integer overflow static analysis warning
331 - xfs: write unmount record for ro mounts
332 - xfs: toggle readonly state around xfs_log_mount_finish
333 - xfs: Add infrastructure needed for error propagation during buffer IO
334 failure
335 - xfs: Properly retry failed inode items in case of error during buffer
336 writeback
337 - xfs: fix recovery failure when log record header wraps log end
338 - xfs: always verify the log tail during recovery
339 - xfs: fix log recovery corruption error due to tail overwrite
340 - xfs: handle -EFSCORRUPTED during head/tail verification
341 - xfs: stop searching for free slots in an inode chunk when there are none
342 - xfs: evict all inodes involved with log redo item
343 - xfs: check for race with xfs_reclaim_inode() in xfs_ifree_cluster()
344 - xfs: open-code xfs_buf_item_dirty()
345 - xfs: remove unnecessary dirty bli format check for ordered bufs
346 - xfs: ordered buffer log items are never formatted
347 - xfs: refactor buffer logging into buffer dirtying helper
348 - xfs: don't log dirty ranges for ordered buffers
349 - xfs: skip bmbt block ino validation during owner change
350 - xfs: move bmbt owner change to last step of extent swap
351 - xfs: disallow marking previously dirty buffers as ordered
352 - xfs: relog dirty buffers during swapext bmbt owner change
353 - xfs: disable per-inode DAX flag
354 - xfs: fix incorrect log_flushed on fsync
355 - xfs: don't set v3 xflags for v2 inodes
356 - xfs: open code end_buffer_async_write in xfs_finish_page_writeback
357 - xfs: use kmem_free to free return value of kmem_zalloc
358 - md/raid1/10: reset bio allocated from mempool
359 - md/raid5: release/flush io in raid5_do_work()
360 - xfs: fix compiler warnings
361 - Linux 4.13.3
362
363 * Artful update to v4.13.2 stable release (LP: #1717549)
364 - mtd: nand: make Samsung SLC NAND usable again
365 - mtd: nand: hynix: add support for 20nm NAND chips
366 - mtd: nand: mxc: Fix mxc_v1 ooblayout
367 - mtd: nand: qcom: fix read failure without complete bootchain
368 - mtd: nand: qcom: fix config error for BCH
369 - nvme-fabrics: generate spec-compliant UUID NQNs
370 - btrfs: resume qgroup rescan on rw remount
371 - rtlwifi: btcoexist: Fix breakage of ant_sel for rtl8723be
372 - rtlwifi: btcoexist: Fix antenna selection code
373 - radix-tree: must check __radix_tree_preload() return value
374 - brcmfmac: feature check for multi-scheduled scan fails on bcm4345 devices
375 - kselftests: timers: leap-a-day: Change default arguments to help test runs
376 - selftests: timers: Fix run_destructive_tests target to handle skipped tests
377 - selftests/x86/fsgsbase: Test selectors 1, 2, and 3
378 - mm: kvfree the swap cluster info if the swap file is unsatisfactory
379 - mm/swapfile.c: fix swapon frontswap_map memory leak on error
380 - mm/sparse.c: fix typo in online_mem_sections
381 - mm/memory.c: fix mem_cgroup_oom_disable() call missing
382 - KVM: SVM: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest
383 - Revert "firmware: add sanity check on shutdown/suspend"
384 - rt2800: fix TX_PIN_CFG setting for non MT7620 chips
385 - ARM64: dts: marvell: armada-37xx: Fix GIC maintenance interrupt
386 - ARM: 8692/1: mm: abort uaccess retries upon fatal signal
387 - NFS: Fix 2 use after free issues in the I/O code
388 - NFS: Sync the correct byte range during synchronous writes
389 - NFSv4: Fix up mirror allocation
390 - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
391 - Linux 4.13.2
392
393 * [Bug] Thunderbolt-patches: Related to the way the key for secure connection
394 is handled (LP: #1717430)
395 - thunderbolt: Remove superfluous check
396 - thunderbolt: Make key root-only accessible
397 - thunderbolt: Allow clearing the key
398
399 * [Bug] Thunderbolt-patches: Fixes the issue regarding the order of ACPI calls
400 w.r.t. PCI enumeration (LP: #1717431)
401 - ACPICA: Dispatch active GPEs at init time
402 - ACPICA: Make it possible to enable runtime GPEs earlier
403 - ACPI / scan: Enable GPEs before scanning the namespace
404
405 * Miscellaneous Ubuntu changes
406 - ubuntu: vbox -- update to 5.1.28-dfsg-1
407 - [Config] CONFIG_PINCTRL_DENVERTON=m
408 - [Config] CONFIG_I2C_XLP9XX=m
409
410 * Miscellaneous upstream changes
411 - Introduce v3 namespaced file capabilities
412
413 -- Seth Forshee <seth.forshee@canonical.com> Fri, 22 Sep 2017 12:10:03 -0500
414
415 linux (4.13.0-11.12) artful; urgency=low
416
417 * linux: 4.13.0-11.12 -proposed tracker (LP: #1716699)
418
419 * kernel panic -not syncing: Fatal exception: panic_on_oops (LP: #1708399)
420 - s390/mm: fix local TLB flushing vs. detach of an mm address space
421 - s390/mm: fix race on mm->context.flush_mm
422
423 * CVE-2017-1000251
424 - Bluetooth: Properly check L2CAP config option output buffer length
425
426 -- Seth Forshee <seth.forshee@canonical.com> Tue, 12 Sep 2017 10:18:38 -0500
427
428 linux (4.13.0-10.11) artful; urgency=low
429
430 * linux: 4.13.0-10.11 -proposed tracker (LP: #1716287)
431
432 * please add aufs-dkms to the Provides: for the kernel packages (LP: #1716093)
433 - [Packaging] Add aufs-dkms to the Provides: for kernel packages
434
435 * Artful update to v4.13.1 stable release (LP: #1716284)
436 - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
437 - USB: serial: option: add support for D-Link DWM-157 C1
438 - usb: Add device quirk for Logitech HD Pro Webcam C920-C
439 - usb:xhci:Fix regression when ATI chipsets detected
440 - USB: musb: fix external abort on suspend
441 - ANDROID: binder: add padding to binder_fd_array_object.
442 - ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES.
443 - USB: core: Avoid race of async_completed() w/ usbdev_release()
444 - staging/rts5208: fix incorrect shift to extract upper nybble
445 - staging: ccree: save ciphertext for CTS IV
446 - staging: fsl-dpaa2/eth: fix off-by-one FD ctrl bitmaks
447 - iio: adc: ti-ads1015: fix incorrect data rate setting update
448 - iio: adc: ti-ads1015: fix scale information for ADS1115
449 - iio: adc: ti-ads1015: enable conversion when CONFIG_PM is not set
450 - iio: adc: ti-ads1015: avoid getting stale result after runtime resume
451 - iio: adc: ti-ads1015: don't return invalid value from buffer setup callbacks
452 - iio: adc: ti-ads1015: add adequate wait time to get correct conversion
453 - driver core: bus: Fix a potential double free
454 - HID: wacom: Do not completely map WACOM_HID_WD_TOUCHRINGSTATUS usage
455 - binder: free memory on error
456 - crypto: caam/qi - fix compilation with CONFIG_DEBUG_FORCE_WEAK_PER_CPU=y
457 - crypto: caam/qi - fix compilation with DEBUG enabled
458 - thunderbolt: Fix reset response_type
459 - fpga: altera-hps2fpga: fix multiple init of l3_remap_lock
460 - intel_th: pci: Add Cannon Lake PCH-H support
461 - intel_th: pci: Add Cannon Lake PCH-LP support
462 - ath10k: fix memory leak in rx ring buffer allocation
463 - drm/vgem: Pin our pages for dmabuf exports
464 - drm/ttm: Fix accounting error when fail to get pages for pool
465 - drm/dp/mst: Handle errors from drm_atomic_get_private_obj_state() correctly
466 - rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
467 - Bluetooth: Add support of 13d3:3494 RTL8723BE device
468 - iwlwifi: pci: add new PCI ID for 7265D
469 - dlm: avoid double-free on error path in dlm_device_{register,unregister}
470 - mwifiex: correct channel stat buffer overflows
471 - MCB: add support for SC31 to mcb-lpc
472 - s390/mm: avoid empty zero pages for KVM guests to avoid postcopy hangs
473 - drm/nouveau/pci/msi: disable MSI on big-endian platforms by default
474 - drm/nouveau: Fix error handling in nv50_disp_atomic_commit
475 - workqueue: Fix flag collision
476 - ahci: don't use MSI for devices with the silly Intel NVMe remapping scheme
477 - cs5536: add support for IDE controller variant
478 - scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
479 - scsi: sg: recheck MMAP_IO request length with lock held
480 - of/device: Prevent buffer overflow in of_device_modalias()
481 - rtlwifi: Fix memory leak when firmware request fails
482 - rtlwifi: Fix fallback firmware loading
483 - Linux 4.13.1
484
485 * Kernel has trouble recognizing Corsair Strafe RGB keyboard (LP: #1678477)
486 - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
487
488 * SRIOV: warning if unload VFs (LP: #1715073)
489 - PCI: Disable VF decoding before pcibios_sriov_disable() updates resources
490
491 * [Patch] network-i40e:NVM bug fixes (cherrypick from 4.14) (LP: #1715578)
492 - i40e: avoid NVM acquire deadlock during NVM update
493 - i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq
494
495 * [P9,POwer NV] Perf PMU event : pm_br_2path and pm_ld_miss_l1 is counted
496 twice when perf stat is done (perf:) (LP: #1714571)
497 - perf vendor events powerpc: Remove duplicate events
498
499 * Unable to install Ubuntu on the NVMe disk under VMD PCI domain
500 (LP: #1703339)
501 - [Config] Include vmd in storage-core-modules udeb
502
503 * 17.10 fails to boot on POWER9 DD2.0 with Deep stop states (LP: #1715064)
504 - powerpc/powernv: Save/Restore additional SPRs for stop4 cpuidle
505 - powerpc/powernv: Clear PECE1 in LPCR via stop-api only on Hotplug
506 - SAUCE: powerpc/powernv: Clear LPCR[PECE1] via stop-api only for deep state
507 offline
508
509 * Miscellaneous Ubuntu changes
510 - SAUCE: selftests/seccomp: Support glibc 2.26 siginfo_t.h
511 - Revert "UBUNTU: SAUCE: Import aufs driver"
512 - SAUCE: Import aufs driver
513
514 -- Seth Forshee <seth.forshee@canonical.com> Sun, 10 Sep 2017 17:48:59 -0500
515
516 linux (4.13.0-9.10) artful; urgency=low
517
518 * linux: 4.13.0-9.10 -proposed tracker (LP: #1715145)
519
520 * EDAC sbridge: Failed to register device with error -22. (LP: #1714112)
521 - [Config] CONFIG_EDAC_GHES=n
522
523 * Miscellaneous Ubuntu changes
524 - ubuntu: vbox -- update to 5.1.26-dfsg-2
525
526 [ Upstream Kernel Changes ]
527
528 * Rebase to v4.13
529
530 -- Seth Forshee <seth.forshee@canonical.com> Tue, 05 Sep 2017 07:51:19 -0500
531
532 linux (4.13.0-8.9) artful; urgency=low
533
534 * snapd 2.27.3+17.10 ADT test failure with linux 4.13.0-6.7 (LP: #1713103)
535 - SAUCE: apparmor: fix apparmorfs DAC access, permissions
536
537 * enable ARCH_SUNXI (and friends) in arm64 kernel .config (LP: #1701137)
538 - [Config] Enable CONFIG_ARCH_SUNXI and related options for arm64
539
540 * [Bug] Harrisonville: pnd2_edac always fail to load on B1 stepping
541 Harrisonville SDP (LP: #1709257)
542 - EDAC, pnd2: Build in a minimal sideband driver for Apollo Lake
543 - EDAC, pnd2: Mask off the lower four bits of a BAR
544 - EDAC, pnd2: Conditionally unhide/hide the P2SB PCI device to read BAR
545 - EDAC, pnd2: Properly toggle hidden state for P2SB PCI device
546 - SAUCE: i2c: i801: Restore the presence state of P2SB PCI device after
547 reading BAR
548
549 * Miscellaneous Ubuntu changes
550 - Revert "UBUNTU: SAUCE: Import aufs driver"
551 - SAUCE: Import aufs driver
552 - SAUCE: selftests/powerpc: Disable some ptrace selftests
553 - [Config] CONFIG_CRYPTO_DEV_NITROX_CNN55XX=n for s390x
554 - [Config] CONFIG_I2C_SLAVE=n for amd64, i386, ppc64el
555 - [Config] Disable CONFIG_MDIO_* options for s390x
556 - [Config] CONFIG_SCSI_MQ_DEFAULT=n for s390x
557 - [Config] Update annotations for 4.13
558
559 -- Seth Forshee <seth.forshee@canonical.com> Thu, 31 Aug 2017 14:27:09 -0500
560
561 linux (4.13.0-7.8) artful; urgency=low
562
563 * linux 4.12.0-11.12 ADT test failure with linux 4.12.0-11.12 (LP: #1710904)
564 - SAUCE: selftests/powerpc: Use snprintf to construct DSCR sysfs interface
565 paths
566
567 * Miscellaneous Ubuntu changes
568 - Revert "UBUNTU: SAUCE: seccomp: log actions even when audit is disabled"
569
570 * Miscellaneous upstream changes
571 - seccomp: Provide matching filter for introspection
572 - seccomp: Sysctl to display available actions
573 - seccomp: Operation for checking if an action is available
574 - seccomp: Sysctl to configure actions that are allowed to be logged
575 - seccomp: Selftest for detection of filter flag support
576 - seccomp: Filter flag to log all actions except SECCOMP_RET_ALLOW
577 - seccomp: Action to log before allowing
578
579 [ Upstream Kernel Changes ]
580
581 * Rebase to v4.13-rc7
582
583 -- Seth Forshee <seth.forshee@canonical.com> Mon, 28 Aug 2017 08:12:24 -0500
584
585 linux (4.13.0-6.7) artful; urgency=low
586
587 * HID: multitouch: Support ALPS PTP Stick and Touchpad devices (LP: #1712481)
588 - SAUCE: HID: multitouch: Support ALPS PTP stick with pid 0x120A
589
590 * sort ABI files with C.UTF-8 locale (LP: #1712345)
591 - [Packaging] sort ABI files with C.UTF-8 locale
592
593 * igb: Support using Broadcom 54616 as PHY (LP: #1712024)
594 - SAUCE: igb: add support for using Broadcom 54616 as PHY
595
596 * RPT related fixes missing in Ubuntu 16.04.3 (LP: #1709220)
597 - powerpc/mm/radix: Improve _tlbiel_pid to be usable for PWC flushes
598 - powerpc/mm/radix: Improve TLB/PWC flushes
599 - powerpc/mm/radix: Avoid flushing the PWC on every flush_tlb_range
600
601 * Linux 4.12 refuses to load self-signed modules under Secure Boot with
602 properly enrolled keys (LP: #1712168)
603 - SAUCE: (efi-lockdown) MODSIGN: Fix module signature verification
604
605 * [17.10 FEAT] Enable NVMe driver - kernel (LP: #1708432)
606 - [Config] CONFIG_BLK_DEV_NVME=m for s390
607
608 * Artful: 4.12.0-11.12: Boot panic in vlv2_plat_configure_clock+0x3b/0xa0
609 (LP: #1711298)
610 - [Config] CONFIG_INTEL_ATOMISP=n
611
612 * Miscellaneous Ubuntu changes
613 - SAUCE: apparmor: af_unix mediation
614
615 * Miscellaneous upstream changes
616 - apparmor: Fix shadowed local variable in unpack_trans_table()
617 - apparmor: Fix logical error in verify_header()
618 - apparmor: Fix an error code in aafs_create()
619 - apparmor: Redundant condition: prev_ns. in [label.c:1498]
620 - apparmor: add the ability to mediate signals
621 - apparmor: add mount mediation
622 - apparmor: cleanup conditional check for label in label_print
623 - apparmor: add support for absolute root view based labels
624 - apparmor: make policy_unpack able to audit different info messages
625 - apparmor: add more debug asserts to apparmorfs
626 - apparmor: add base infastructure for socket mediation
627 - apparmor: move new_null_profile to after profile lookup fns()
628 - apparmor: fix race condition in null profile creation
629 - apparmor: ensure unconfined profiles have dfas initialized
630 - apparmor: fix incorrect type assignment when freeing proxies
631
632 [ Upstream Kernel Changes ]
633
634 * Rebase to v4.13-rc6
635
636 -- Seth Forshee <seth.forshee@canonical.com> Wed, 23 Aug 2017 08:10:38 -0500
637
638 linux (4.13.0-5.6) artful; urgency=low
639
640 * Ubuntu17.10 - perf: Update Power9 PMU event JSON files (LP: #1708630)
641 - perf pmu-events: Support additional POWER8+ PVR in mapfile
642 - perf vendor events: Add POWER9 PMU events
643 - perf vendor events: Add POWER9 PVRs to mapfile
644 - SAUCE: perf vendor events powerpc: remove suffix in mapfile
645 - SAUCE: perf vendor events powerpc: Update POWER9 events
646
647 * Disable CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE (LP: #1709171)
648 - [Config] CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=n for ppc64el
649
650 * Please only recommend or suggest initramfs-tools | linux-initramfs-tool for
651 kernels able to boot without initramfs (LP: #1700972)
652 - [Debian] Don't depend on initramfs-tools
653
654 * Miscellaneous Ubuntu changes
655 - SAUCE: Import aufs driver
656 - SAUCE: aufs -- Add missing argument to loop_switch() call
657 - [Config] Enable aufs
658 - SAUCE: (noup) Update spl to 0.6.5.11-ubuntu1, zfs to 0.6.5.11-1ubuntu3
659 - Enable zfs build
660 - SAUCE: powerpc: Always initialize input array when calling epapr_hypercall()
661 - [Packaging] switch up to debhelper 9
662
663 [ Upstream Kernel Changes ]
664
665 * Rebase to v4.13-rc5
666
667 -- Seth Forshee <seth.forshee@canonical.com> Tue, 15 Aug 2017 09:24:16 -0500
668
669 linux (4.13.0-4.5) artful; urgency=low
670
671 * Lenovo Yoga 910 Sensors (LP: #1708120)
672 - SAUCE: (no-up) HID: Add quirk for Lenovo Yoga 910 with ITE Chips
673
674 * Unable to install Ubuntu on the NVMe disk under VMD PCI domain
675 (LP: #1703339)
676 - [Config] Add vmd driver to generic inclusion list
677
678 * Set CONFIG_SATA_HIGHBANK=y on armhf (LP: #1703430)
679 - [Config] CONFIG_SATA_HIGHBANK=y
680
681 * Miscellaneous Ubuntu changes
682 - ubuntu: vbox -- update to 5.1.26-dfsg-1
683 - SAUCE: hio: Build fixes for 4.13
684 - Enable hio build
685 - SAUCE: (noup) Update spl to 0.6.5.11-1, zfs to 0.6.5.11-1ubuntu1
686 - [debian] use all rather than amd64 dkms debs for sync
687
688 [ Upstream Kernel Changes ]
689
690 * Rebase to v4.13-rc4
691
692 -- Seth Forshee <seth.forshee@canonical.com> Tue, 08 Aug 2017 11:31:48 -0500
693
694 linux (4.13.0-3.4) artful; urgency=low
695
696 * Adt tests of src:linux time out often on armhf lxc containers (LP: #1705495)
697 - [Packaging] tests -- reduce rebuild test to one flavour
698 - [Packaging] tests -- reduce rebuild test to one flavour -- use filter
699
700 * snapd 2.26.8+17.10 ADT test failure with linux 4.12.0-6.7 (LP: #1704158)
701 - SAUCE: virtio_net: Revert mergeable buffer handling rework
702
703 [ Upstream Kernel Changes ]
704
705 * Rebase to v4.13-rc3
706
707 -- Seth Forshee <seth.forshee@canonical.com> Mon, 31 Jul 2017 10:08:16 -0500
708
709 linux (4.13.0-2.3) artful; urgency=low
710
711 * Change CONFIG_IBMVETH to module (LP: #1704479)
712 - [Config] CONFIG_IBMVETH=m
713
714 [ Upstream Kernel Changes ]
715
716 * Rebase to v4.13-rc2
717
718 -- Seth Forshee <seth.forshee@canonical.com> Mon, 24 Jul 2017 13:58:08 -0500
719
720 linux (4.13.0-1.2) artful; urgency=low
721
722 * Miscellaneous Ubuntu changes
723 - [Debian] Support sphinx-based kernel documentation
724
725 -- Seth Forshee <seth.forshee@canonical.com> Thu, 20 Jul 2017 09:18:33 -0500
726
727 linux (4.13.0-0.1) artful; urgency=low
728
729 * Miscellaneous Ubuntu changes
730 - Disable hio
731 - Disable zfs build
732 - ubuntu: vbox -- update to 5.1.24-dfsg-1
733
734 [ Upstream Kernel Changes ]
735
736 * Rebase to v4.13-rc1
737
738 -- Seth Forshee <seth.forshee@canonical.com> Wed, 19 Jul 2017 15:09:31 -0500
739
740 linux (4.12.0-7.8) artful; urgency=low
741
742 * ThunderX: soft lockup on 4.8+ kernels when running qemu-efi with vhost=on
743 (LP: #1673564)
744 - arm64: Add a facility to turn an ESR syndrome into a sysreg encoding
745 - KVM: arm/arm64: vgic-v3: Add accessors for the ICH_APxRn_EL2 registers
746 - KVM: arm64: Make kvm_condition_valid32() accessible from EL2
747 - KVM: arm64: vgic-v3: Add hook to handle guest GICv3 sysreg accesses at EL2
748 - KVM: arm64: vgic-v3: Add ICV_BPR1_EL1 handler
749 - KVM: arm64: vgic-v3: Add ICV_IGRPEN1_EL1 handler
750 - KVM: arm64: vgic-v3: Add ICV_IAR1_EL1 handler
751 - KVM: arm64: vgic-v3: Add ICV_EOIR1_EL1 handler
752 - KVM: arm64: vgic-v3: Add ICV_AP1Rn_EL1 handler
753 - KVM: arm64: vgic-v3: Add ICV_HPPIR1_EL1 handler
754 - KVM: arm64: vgic-v3: Enable trapping of Group-1 system registers
755 - KVM: arm64: Enable GICv3 Group-1 sysreg trapping via command-line
756 - KVM: arm64: vgic-v3: Add ICV_BPR0_EL1 handler
757 - KVM: arm64: vgic-v3: Add ICV_IGNREN0_EL1 handler
758 - KVM: arm64: vgic-v3: Add misc Group-0 handlers
759 - KVM: arm64: vgic-v3: Enable trapping of Group-0 system registers
760 - KVM: arm64: Enable GICv3 Group-0 sysreg trapping via command-line
761 - arm64: Add MIDR values for Cavium cn83XX SoCs
762 - arm64: Add workaround for Cavium Thunder erratum 30115
763 - KVM: arm64: vgic-v3: Add ICV_DIR_EL1 handler
764 - KVM: arm64: vgic-v3: Add ICV_RPR_EL1 handler
765 - KVM: arm64: vgic-v3: Add ICV_CTLR_EL1 handler
766 - KVM: arm64: vgic-v3: Add ICV_PMR_EL1 handler
767 - KVM: arm64: Enable GICv3 common sysreg trapping via command-line
768 - KVM: arm64: vgic-v3: Log which GICv3 system registers are trapped
769 - KVM: arm64: Log an error if trapping a read-from-write-only GICv3 access
770 - KVM: arm64: Log an error if trapping a write-to-read-only GICv3 access
771
772 * hns: under heavy load, NIC may fail and require reboot (LP: #1704146)
773 - net: hns: Bugfix for Tx timeout handling in hns driver
774
775 * New ACPI identifiers for ThunderX SMMU (LP: #1703437)
776 - iommu/arm-smmu: Plumb in new ACPI identifiers
777
778 * Transparent hugepages should default to enabled=madvise (LP: #1703742)
779 - SAUCE: use CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y as default
780
781 * Artful update to v4.12.1 stable release (LP: #1703858)
782 - driver core: platform: fix race condition with driver_override
783 - RDMA/uverbs: Check port number supplied by user verbs cmds
784 - usb: dwc3: replace %p with %pK
785 - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
786 - usb: usbip: set buffer pointers to NULL after free
787 - Add USB quirk for HVR-950q to avoid intermittent device resets
788 - usb: Fix typo in the definition of Endpoint[out]Request
789 - USB: core: fix device node leak
790 - USB: serial: option: add two Longcheer device ids
791 - USB: serial: qcserial: new Sierra Wireless EM7305 device ID
792 - xhci: Limit USB2 port wake support for AMD Promontory hosts
793 - gfs2: Fix glock rhashtable rcu bug
794 - Add "shutdown" to "struct class".
795 - tpm: Issue a TPM2_Shutdown for TPM2 devices.
796 - tpm: fix a kernel memory leak in tpm-sysfs.c
797 - powerpc/powernv: Fix CPU_HOTPLUG=n idle.c compile error
798 - x86/uaccess: Optimize copy_user_enhanced_fast_string() for short strings
799 - sched/fair, cpumask: Export for_each_cpu_wrap()
800 - sched/core: Implement new approach to scale select_idle_cpu()
801 - sched/numa: Use down_read_trylock() for the mmap_sem
802 - sched/numa: Override part of migrate_degrades_locality() when idle balancing
803 - sched/fair: Simplify wake_affine() for the single socket case
804 - sched/numa: Implement NUMA node level wake_affine()
805 - sched/fair: Remove effective_load()
806 - sched/numa: Hide numa_wake_affine() from UP build
807 - xen: avoid deadlock in xenbus driver
808 - crypto: drbg - Fixes panic in wait_for_completion call
809 - Linux 4.12.1
810
811 * cxlflash update request in the Xenial SRU stream (LP: #1702521)
812 - scsi: cxlflash: Combine the send queue locks
813 - scsi: cxlflash: Update cxlflash_afu_sync() to return errno
814 - scsi: cxlflash: Reset hardware queue context via specified register
815 - scsi: cxlflash: Schedule asynchronous reset of the host
816 - scsi: cxlflash: Handle AFU sync failures
817 - scsi: cxlflash: Track pending scsi commands in each hardware queue
818 - scsi: cxlflash: Flush pending commands in cleanup path
819 - scsi: cxlflash: Add scsi command abort handler
820 - scsi: cxlflash: Create character device to provide host management interface
821 - scsi: cxlflash: Separate AFU internal command handling from AFU sync
822 specifics
823 - scsi: cxlflash: Introduce host ioctl support
824 - scsi: cxlflash: Refactor AFU capability checking
825 - scsi: cxlflash: Support LUN provisioning
826 - scsi: cxlflash: Support AFU debug
827 - scsi: cxlflash: Support WS16 unmap
828 - scsi: cxlflash: Remove zeroing of private command data
829 - scsi: cxlflash: Update TMF command processing
830 - scsi: cxlflash: Avoid double free of character device
831 - scsi: cxlflash: Update send_tmf() parameters
832 - scsi: cxlflash: Update debug prints in reset handlers
833
834 * make snap-pkg support (LP: #1700747)
835 - make snap-pkg support
836
837 * Quirk for non-compliant PCI bridge on HiSilicon D05 board (LP: #1698706)
838 - SAUCE: PCI: Support hibmc VGA cards behind a misbehaving HiSilicon bridge
839
840 * arm64: fix crash reading /proc/kcore (LP: #1702749)
841 - fs/proc: kcore: use kcore_list type to check for vmalloc/module address
842 - arm64: mm: select CONFIG_ARCH_PROC_KCORE_TEXT
843
844 * Opal and POWER9 DD2 (LP: #1702159)
845 - SAUCE: powerpc/powernv: Tell OPAL about our MMU mode on POWER9
846
847 * Data corruption with hio driver (LP: #1701316)
848 - SAUCE: hio: Fix incorrect use of enum req_opf values
849
850 * Miscellaneous Ubuntu changes
851 - SAUCE: (noup) Update spl to 0.6.5.10-1, zfs to 0.6.5.10-1ubuntu2
852 - snapcraft.yaml: Sync with xenial
853 - [Config] CONFIG_CAVIUM_ERRATUM_30115=y
854
855 * Miscellaneous upstream changes
856 - Revert "UBUNTU: SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and
857 MokSBState"
858
859 -- Seth Forshee <seth.forshee@canonical.com> Fri, 14 Jul 2017 15:25:41 -0500
860
861 linux (4.12.0-6.7) artful; urgency=low
862
863 * update ENA driver to 1.2.0k from net-next (LP: #1701575)
864 - net: ena: change return value for unsupported features unsupported return
865 value
866 - net: ena: add hardware hints capability to the driver
867 - net: ena: change sizeof() argument to be the type pointer
868 - net: ena: add reset reason for each device FLR
869 - net: ena: add support for out of order rx buffers refill
870 - net: ena: allow the driver to work with small number of msix vectors
871 - net: ena: use napi_schedule_irqoff when possible
872 - net: ena: separate skb allocation to dedicated function
873 - net: ena: use lower_32_bits()/upper_32_bits() to split dma address
874 - net: ena: update driver's rx drop statistics
875 - net: ena: update ena driver to version 1.2.0
876
877 * APST gets enabled against explicit kernel option (LP: #1699004)
878 - nvme: explicitly disable APST on quirked devices
879
880 * Miscellaneous Ubuntu changes
881 - SAUCE: hio: Update to Huawei ES3000_V2 (2.1.0.40)
882 - SAUCE: hio updates for 4.12
883 - SAUCE: Enable hio build
884
885 -- Seth Forshee <seth.forshee@canonical.com> Wed, 05 Jul 2017 14:23:20 -0500
886
887 linux (4.12.0-5.6) artful; urgency=low
888
889 * ERAT invalidate on context switch removal (LP: #1700819)
890 - powerpc: Only do ERAT invalidate on radix context switch on P9 DD1
891
892 * powerpc: Invalidate ERAT on powersave wakeup for POWER9 (LP: #1700521)
893 - SAUCE: powerpc: Invalidate ERAT on powersave wakeup for POWER9
894
895 * Miscellaneous Ubuntu changes
896 - d-i: Move qcom-emac from arm64 to shared nic-modules
897
898 [ Upstream Kernel Changes ]
899
900 * Rebase to v4.12
901
902 -- Seth Forshee <seth.forshee@canonical.com> Mon, 03 Jul 2017 07:52:02 -0500
903
904 linux (4.12.0-4.5) artful; urgency=low
905
906 * aacraid driver may return uninitialized stack data to userspace
907 (LP: #1700077)
908 - SAUCE: scsi: aacraid: Don't copy uninitialized stack memory to userspace
909
910 * KILLER1435-S[0489:e0a2] BT cannot search BT 4.0 device (LP: #1699651)
911 - Bluetooth: btusb: Add support for 0489:e0a2 QCA_ROME device
912
913 * AACRAID for power9 platform (LP: #1689980)
914 - scsi: aacraid: Remove __GFP_DMA for raw srb memory
915 - scsi: aacraid: Fix DMAR issues with iommu=pt
916 - scsi: aacraid: Added 32 and 64 queue depth for arc natives
917 - scsi: aacraid: Set correct Queue Depth for HBA1000 RAW disks
918 - scsi: aacraid: Remove reset support from check_health
919 - scsi: aacraid: Change wait time for fib completion
920 - scsi: aacraid: Log count info of scsi cmds before reset
921 - scsi: aacraid: Print ctrl status before eh reset
922 - scsi: aacraid: Using single reset mask for IOP reset
923 - scsi: aacraid: Rework IOP reset
924 - scsi: aacraid: Add periodic checks to see IOP reset status
925 - scsi: aacraid: Rework SOFT reset code
926 - scsi: aacraid: Rework aac_src_restart
927 - scsi: aacraid: Use correct function to get ctrl health
928 - scsi: aacraid: Make sure ioctl returns on controller reset
929 - scsi: aacraid: Enable ctrl reset for both hba and arc
930 - scsi: aacraid: Add reset debugging statements
931 - scsi: aacraid: Remove reference to Series-9
932 - scsi: aacraid: Update driver version to 50834
933
934 * hibmc driver does not include "pci:" prefix in bus ID (LP: #1698700)
935 - SAUCE: drm: hibmc: Use set_busid function from drm core
936
937 * HiSilicon D05: installer doesn't appear on VGA (LP: #1698954)
938 - d-i: Add hibmc-drm to kernel-image udeb
939
940 * Fix /proc/cpuinfo revision for POWER9 DD2 (LP: #1698844)
941 - SAUCE: powerpc: Fix /proc/cpuinfo revision for POWER9 DD2
942
943 * Miscellaneous Ubuntu changes
944 - [Config] CONFIG_SATA_MV=n and CONFIG_GENERIC_PHY=n for s390x
945 - [Config] CONFIG_ATA=n for s390x
946 - [Config] Update annotations for 4.12
947
948 [ Upstream Kernel Changes ]
949
950 * Rebase to v4.12-rc7
951
952 -- Seth Forshee <seth.forshee@canonical.com> Mon, 26 Jun 2017 11:27:29 -0500
953
954 linux (4.12.0-3.4) artful; urgency=low
955
956 * Miscellaneous upstream changes
957 - ufs: fix the logics for tail relocation
958
959 [ Upstream Kernel Changes ]
960
961 * Rebase to v4.12-rc6
962
963 -- Seth Forshee <seth.forshee@canonical.com> Mon, 19 Jun 2017 14:50:39 -0500
964
965 linux (4.12.0-2.3) artful; urgency=low
966
967 * CVE-2014-9900
968 - SAUCE: (no-up) net: Zeroing the structure ethtool_wolinfo in
969 ethtool_get_wol()
970
971 * System doesn't boot properly on Gigabyte AM4 motherboards (AMD Ryzen)
972 (LP: #1671360)
973 - pinctrl/amd: Use regular interrupt instead of chained
974
975 * extend-diff-ignore should use exact matches (LP: #1693504)
976 - [Packaging] exact extend-diff-ignore matches
977
978 * Miscellaneous Ubuntu changes
979 - SAUCE: efi: Don't print secure boot state from the efi stub
980 - ubuntu: vbox -- Update to 5.1.22-dfsg-1
981 - SAUCE: vbox fixes for 4.12
982 - Re-enable virtualbox build
983 - [Config] CONFIG_ORANGEFS_FS=m
984 - SAUCE: (noup) Update spl to 0.6.5.9-1ubuntu2, zfs to 0.6.5.9-5ubuntu7
985 - Enable zfs build
986
987 [ Upstream Kernel Changes ]
988
989 * Rebase to v4.12-rc4
990 * Rebase to v4.12-rc5
991
992 -- Seth Forshee <seth.forshee@canonical.com> Sun, 11 Jun 2017 22:25:13 -0500
993
994 linux (4.12.0-1.2) artful; urgency=low
995
996 * Enable Matrox driver for Ubuntu 16.04.3 (LP: #1693337)
997 - [Config] Enable CONFIG_DRM_MGAG200 as module
998
999 * Support low-pin-count devices on Hisilicon SoCs (LP: #1677319)
1000 - [Config] CONFIG_LIBIO=y on arm64 only
1001 - SAUCE: LIBIO: Introduce a generic PIO mapping method
1002 - SAUCE: OF: Add missing I/O range exception for indirect-IO devices
1003 - [Config] CONFIG_HISILICON_LPC=y
1004 - SAUCE: LPC: Support the device-tree LPC host on Hip06/Hip07
1005 - SAUCE: LIBIO: Support the dynamically logical PIO registration of ACPI host
1006 I/O
1007 - SAUCE: LPC: Add the ACPI LPC support
1008 - SAUCE: PCI: Apply the new generic I/O management on PCI IO hosts
1009 - SAUCE: PCI: Restore codepath for !CONFIG_LIBIO
1010
1011 * POWER9: Additional patches for TTY and CPU_IDLE (LP: #1674325)
1012 - SAUCE: tty: Fix ldisc crash on reopened tty
1013
1014 * Miscellaneous Ubuntu changes
1015 - [Debian] Add build-dep on libnuma-dev to enable 'perf bench numa'
1016 - Rebase to v4.12-rc3
1017
1018 [ Upstream Kernel Changes ]
1019
1020 * Rebase to v4.12-rc3
1021
1022 -- Seth Forshee <seth.forshee@canonical.com> Mon, 29 May 2017 20:56:29 -0500
1023
1024 linux (4.12.0-0.1) artful; urgency=low
1025
1026 * please enable CONFIG_ARM64_LSE_ATOMICS (LP: #1691614)
1027 - [Config] CONFIG_ARM64_LSE_ATOMICS=y
1028
1029 * [Regression] NUMA_BALANCING disabled on arm64 (LP: #1690914)
1030 - [Config] CONFIG_NUMA_BALANCING{,_DEFAULT_ENABLED}=y on arm64
1031
1032 * exec'ing a setuid binary from a threaded program sometimes fails to setuid
1033 (LP: #1672819)
1034 - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
1035
1036 * Miscellaneous Ubuntu changes
1037 - Update find-missing-sauce.sh to compare to artful
1038 - Update dropped.txt
1039 - SAUCE: (efi-lockdown) efi: Add EFI_SECURE_BOOT bit
1040 - SAUCE: (efi-lockdown) Add the ability to lock down access to the running
1041 kernel image
1042 - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot
1043 mode
1044 - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down
1045 - SAUCE: (efi-lockdown) Restrict /dev/mem and /dev/kmem when the kernel is
1046 locked down
1047 - SAUCE: (efi-lockdown) Add a sysrq option to exit secure boot mode
1048 - SAUCE: (efi-lockdown) kexec: Disable at runtime if the kernel is locked down
1049 - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec
1050 reboot
1051 - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if securelevel has been
1052 set
1053 - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down
1054 - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down
1055 - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked
1056 down
1057 - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is
1058 locked down
1059 - SAUCE: (efi-lockdown) x86: Restrict MSR access when the kernel is locked
1060 down
1061 - SAUCE: (efi-lockdown) asus-wmi: Restrict debugfs interface when the kernel
1062 is locked down
1063 - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is
1064 locked down
1065 - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel
1066 has been locked down
1067 - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is
1068 locked down
1069 - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is
1070 locked down
1071 - SAUCE: (efi-lockdown) Enable cold boot attack mitigation
1072 - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
1073 kernel is locked down
1074 - SAUCE: (efi-lockdown) scsi: Lock down the eata driver
1075 - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
1076 down
1077 - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
1078 - SAUCE: (efi-lockdown) KEYS: Allow unrestricted boot-time addition of keys to
1079 secondary keyring
1080 - SAUCE: (efi-lockdown) efi: Add EFI signature data types
1081 - SAUCE: (efi-lockdown) efi: Add an EFI signature blob parser
1082 - SAUCE: (efi-lockdown) MODSIGN: Import certificates from UEFI Secure Boot
1083 - SAUCE: (efi-lockdown) MODSIGN: Allow the "db" UEFI variable to be suppressed
1084 - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
1085 - SAUCE: (efi-lockdown) efi: Add secure_boot state and status bit for
1086 MokSBState
1087 - SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and MokSBState
1088 - [Config] Set values for UEFI secure boot lockdown options
1089 - Disable virtualbox build
1090 - Disable hio build
1091 - SAUCE: securityfs: Replace CURRENT_TIME with current_time()
1092 - Disable zfs build
1093 - [Debian] Work out upstream tag for use with gen-auto-reconstruct
1094 - SAUCE: Import aufs driver
1095 - SAUCE: aufs -- Include linux/mm.h in fs/aufs/file.h
1096 - [Config] Enable aufs
1097 - SAUCE: perf callchain: Include errno.h on x86 unconditinally
1098
1099 [ Upstream Kernel Changes ]
1100
1101 * Rebase to v4.12-rc2
1102
1103 -- Seth Forshee <seth.forshee@canonical.com> Sun, 21 May 2017 23:44:44 -0500
1104
1105 linux (4.11.0-3.8) artful; urgency=low
1106
1107 [ Seth Forshee ]
1108
1109 * Release Tracking Bug
1110 - LP: #1690999
1111
1112 * apparmor_parser hangs indefinitely when called by multiple threads
1113 (LP: #1645037)
1114 - SAUCE: apparmor: fix lock ordering for mkdir
1115
1116 * apparmor leaking securityfs pin count (LP: #1660846)
1117 - SAUCE: apparmor: fix leak on securityfs pin count
1118
1119 * apparmor reference count leak when securityfs_setup_d_inode\ () fails
1120 (LP: #1660845)
1121 - SAUCE: apparmor: fix reference count leak when securityfs_setup_d_inode()
1122 fails
1123
1124 * apparmor not checking error if security_pin_fs() fails (LP: #1660842)
1125 - SAUCE: apparmor: fix not handling error case when securityfs_pin_fs() fails
1126
1127 * libvirt profile is blocking global setrlimit despite having no rlimit rule
1128 (LP: #1679704)
1129 - SAUCE: apparmor: fix complain mode failure for rlimit mediation
1130 - apparmor: update auditing of rlimit check to provide capability information
1131
1132 * apparmor: does not provide a way to detect policy updataes (LP: #1678032)
1133 - SAUCE: apparmor: add policy revision file interface
1134
1135 * apparmor does not make support of query data visible (LP: #1678023)
1136 - SAUCE: apparmor: add label data availability to the feature set
1137
1138 * apparmor query interface does not make supported query info available
1139 (LP: #1678030)
1140 - SAUCE: apparmor: add information about the query inteface to the feature set
1141
1142 * change_profile incorrect when using namespaces with a compound stack
1143 (LP: #1677959)
1144 - SAUCE: apparmor: fix label parse for stacked labels
1145
1146 * Regression in 4.4.0-65-generic causes very frequent system crashes
1147 (LP: #1669611)
1148 - apparmor: sync of apparmor 3.6+ (17.04)
1149
1150 * Artful update to 4.11.1 stable release (LP: #1690814)
1151 - dm ioctl: prevent stack leak in dm ioctl call
1152 - drm/sti: fix GDP size to support up to UHD resolution
1153 - power: supply: lp8788: prevent out of bounds array access
1154 - brcmfmac: Ensure pointer correctly set if skb data location changes
1155 - brcmfmac: Make skb header writable before use
1156 - sparc64: fix fault handling in NGbzero.S and GENbzero.S
1157 - refcount: change EXPORT_SYMBOL markings
1158 - net: macb: fix phy interrupt parsing
1159 - tcp: fix access to sk->sk_state in tcp_poll()
1160 - geneve: fix incorrect setting of UDP checksum flag
1161 - bpf: enhance verifier to understand stack pointer arithmetic
1162 - bpf, arm64: fix jit branch offset related to ldimm64
1163 - tcp: fix wraparound issue in tcp_lp
1164 - net: ipv6: Do not duplicate DAD on link up
1165 - net: usb: qmi_wwan: add Telit ME910 support
1166 - tcp: do not inherit fastopen_req from parent
1167 - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
1168 - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
1169 - ipv6: initialize route null entry in addrconf_init()
1170 - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
1171 - tcp: randomize timestamps on syncookies
1172 - bnxt_en: allocate enough space for ->ntp_fltr_bmap
1173 - bpf: don't let ldimm64 leak map addresses on unprivileged
1174 - net: mdio-mux: bcm-iproc: call mdiobus_free() in error path
1175 - f2fs: sanity check segment count
1176 - xen/arm,arm64: fix xen_dma_ops after 815dd18 "Consolidate get_dma_ops..."
1177 - xen: Revert commits da72ff5bfcb0 and 72a9b186292d
1178 - block: get rid of blk_integrity_revalidate()
1179 - Linux 4.11.1
1180
1181 * Module signing exclusion for staging drivers does not work properly
1182 (LP: #1690908)
1183 - SAUCE: Fix module signing exclusion in package builds
1184
1185 * perf: qcom: Add L3 cache PMU driver (LP: #1689856)
1186 - [Config] CONFIG_QCOM_L3_PMU=y
1187 - perf: qcom: Add L3 cache PMU driver
1188
1189 * No PMU support for ACPI-based arm64 systems (LP: #1689661)
1190 - drivers/perf: arm_pmu: rework per-cpu allocation
1191 - drivers/perf: arm_pmu: manage interrupts per-cpu
1192 - drivers/perf: arm_pmu: split irq request from enable
1193 - drivers/perf: arm_pmu: remove pointless PMU disabling
1194 - drivers/perf: arm_pmu: define armpmu_init_fn
1195 - drivers/perf: arm_pmu: fold init into alloc
1196 - drivers/perf: arm_pmu: factor out pmu registration
1197 - drivers/perf: arm_pmu: simplify cpu_pmu_request_irqs()
1198 - drivers/perf: arm_pmu: handle no platform_device
1199 - drivers/perf: arm_pmu: rename irq request/free functions
1200 - drivers/perf: arm_pmu: split cpu-local irq request/free
1201 - drivers/perf: arm_pmu: move irq request/free into probe
1202 - drivers/perf: arm_pmu: split out platform device probe logic
1203 - arm64: add function to get a cpu's MADT GICC table
1204 - [Config] CONFIG_ARM_PMU_ACPI=y
1205 - drivers/perf: arm_pmu: add ACPI framework
1206 - arm64: pmuv3: handle !PMUv3 when probing
1207 - arm64: pmuv3: use arm_pmu ACPI framework
1208
1209 * Fix NVLINK2 TCE route (LP: #1690155)
1210 - powerpc/powernv: Fix TCE kill on NVLink2
1211
1212 * CVE-2017-0605
1213 - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
1214
1215 * Miscellaneous Ubuntu changes
1216 - [Config] Restore powerpc arch to annotations file
1217 - [Config] Disable runtime testing modules
1218 - [Config] Disable drivers not needed on s390x
1219 - [Config] Update annotations for 4.11
1220 - [Config] updateconfigs after apparmor updates
1221
1222 * Miscellaneous upstream changes
1223 - apparmor: use SHASH_DESC_ON_STACK
1224 - apparmor: fix invalid reference to index variable of iterator line 836
1225 - apparmor: fix parameters so that the permission test is bypassed at boot
1226 - apparmor: Make path_max parameter readonly
1227 - apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()
1228 - apparmorfs: Use seq_putc() in two functions
1229 - apparmor: provide information about path buffer size at boot
1230 - apparmor: add/use fns to print hash string hex value
1231
1232 -- Seth Forshee <seth.forshee@canonical.com> Tue, 16 May 2017 00:39:13 -0500
1233
1234 linux (4.11.0-2.7) artful; urgency=low
1235
1236 * kernel-wedge fails in artful due to leftover squashfs-modules d-i files
1237 (LP: #1688259)
1238 - Remove squashfs-modules files from d-i
1239 - [Config] as squashfs-modules is builtin kernel-image must Provides: it
1240
1241 * [Zesty] d-i: replace msm_emac with qcom_emac (LP: #1677297)
1242 - Revert "UBUNTU: d-i: initrd needs msm_emac on amberwing platform."
1243 - d-i: initrd needs qcom_emac on amberwing platform.
1244
1245 * update for V3 kernel bits and improved multiple fan slice support
1246 (LP: #1470091)
1247 - SAUCE: fan: tunnel multiple mapping mode (v3)
1248
1249 * Miscellaneous Ubuntu changes
1250 - SAUCE: (noup) Update spl to 0.6.5.9-1ubuntu1, zfs to 0.6.5.9-5ubuntu5
1251 - Enable zfs
1252 - SAUCE: fan: add VXLAN implementation
1253 - SAUCE: (efi-lockdown) efi: Add EFI_SECURE_BOOT bit
1254 - SAUCE: (efi-lockdown) Add the ability to lock down access to the running
1255 kernel image
1256 - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot
1257 mode
1258 - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down
1259 - SAUCE: (efi-lockdown) Restrict /dev/mem and /dev/kmem when the kernel is
1260 locked down
1261 - SAUCE: (efi-lockdown) Add a sysrq option to exit secure boot mode
1262 - SAUCE: (efi-lockdown) kexec: Disable at runtime if the kernel is locked down
1263 - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec
1264 reboot
1265 - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if securelevel has been
1266 set
1267 - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down
1268 - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down
1269 - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked
1270 down
1271 - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is
1272 locked down
1273 - SAUCE: (efi-lockdown) x86: Restrict MSR access when the kernel is locked
1274 down
1275 - SAUCE: (efi-lockdown) asus-wmi: Restrict debugfs interface when the kernel
1276 is locked down
1277 - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is
1278 locked down
1279 - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel
1280 has been locked down
1281 - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is
1282 locked down
1283 - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is
1284 locked down
1285 - SAUCE: (efi-lockdown) Enable cold boot attack mitigation
1286 - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
1287 kernel is locked down
1288 - SAUCE: (efi-lockdown) scsi: Lock down the eata driver
1289 - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
1290 down
1291 - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
1292 - SAUCE: (efi-lockdown) Add EFI signature data types
1293 - SAUCE: (efi-lockdown) Add an EFI signature blob parser and key loader.
1294 - SAUCE: (efi-lockdown) KEYS: Add a system blacklist keyring
1295 - SAUCE: (efi-lockdown) MODSIGN: Import certificates from UEFI Secure Boot
1296 - SAUCE: (efi-lockdown) MODSIGN: Support not importing certs from db
1297 - SAUCE: (efi-lockdown) MODSIGN: Don't try secure boot if EFI runtime is
1298 disabled
1299 - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
1300 - SAUCE: (efi-lockdown) efi: Add secure_boot state and status bit for
1301 MokSBState
1302 - SAUCE: (efi-lockdown) efi: Add sysctls for secureboot and MokSBState
1303 - [Config] Set values for UEFI secure boot lockdown options
1304 - Update dropped.txt
1305
1306 [ Upstream Kernel Changes ]
1307
1308 * rebase to v4.11
1309
1310 -- Seth Forshee <seth.forshee@canonical.com> Fri, 05 May 2017 07:43:14 -0500
1311
1312 linux (4.11.0-1.6) artful; urgency=low
1313
1314 * Miscellaneous Ubuntu changes
1315 - [Debian] Use default compression for all packages
1316 - SAUCE: (namespace) block_dev: Support checking inode permissions in
1317 lookup_bdev()
1318 - SAUCE: (namespace) block_dev: Check permissions towards block device inode
1319 when mounting
1320 - SAUCE: (namespace) mtd: Check permissions towards mtd block device inode
1321 when mounting
1322 - SAUCE: (namespace) fs: Allow superblock owner to change ownership of inodes
1323 - SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root
1324 - SAUCE: (namespace) fs: Allow superblock owner to access do_remount_sb()
1325 - SAUCE: (namespace) capabilities: Allow privileged user in s_user_ns to set
1326 security.* xattrs
1327 - SAUCE: (namespace) fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw
1328 filesystems
1329 - SAUCE: (namespace) fuse: Add support for pid namespaces
1330 - SAUCE: (namespace) fuse: Support fuse filesystems outside of init_user_ns
1331 - SAUCE: (namespace) fuse: Restrict allow_other to the superblock's namespace
1332 or a descendant
1333 - SAUCE: (namespace) fuse: Allow user namespace mounts
1334 - SAUCE: (namespace) ext4: Add support for unprivileged mounts from user
1335 namespaces
1336 - SAUCE: (namespace) evm: Don't update hmacs in user ns mounts
1337 - SAUCE: (namespace) ext4: Add module parameter to enable user namespace
1338 mounts
1339 - SAUCE: (namespace) block_dev: Forbid unprivileged mounting when device is
1340 opened for writing
1341
1342 -- Seth Forshee <seth.forshee@canonical.com> Wed, 26 Apr 2017 10:08:29 -0500
1343
1344 linux (4.11.0-0.5) artful; urgency=low
1345
1346 * [Hyper-V][SAUCE] pci-hyperv: Use only 16 bit integer for PCI domain
1347 (LP: #1684971)
1348 - SAUCE: pci-hyperv: Use only 16 bit integer for PCI domain
1349
1350 * [Hyper-V] Ubuntu 14.04.2 LTS Generation 2 SCSI Errors on VSS Based Backups
1351 (LP: #1470250)
1352 - SAUCE: Tools: hv: vss: Thaw the filesystem and continue after freeze fails
1353
1354 * Enable virtual scsi server driver for Power (LP: #1615665)
1355 - SAUCE: Return TCMU-generated sense data to fabric module
1356
1357 * include/linux/security.h header syntax error with !CONFIG_SECURITYFS
1358 (LP: #1630990)
1359 - SAUCE: (no-up) include/linux/security.h -- fix syntax error with
1360 CONFIG_SECURITYFS=n
1361
1362 * Miscellaneous Ubuntu changes
1363 - SAUCE: Import aufs driver
1364 - [Config] Enable aufs
1365 - [Debian] Add script to update virtualbox
1366 - ubuntu: vbox -- Update to 5.1.20-dfsg-2
1367 - Enable vbox
1368 - SAUCE: aufs -- Include linux/mm.h in fs/aufs/file.h
1369
1370 [ Upstream Kernel Changes ]
1371
1372 * rebase to v4.11-rc8
1373
1374 -- Seth Forshee <seth.forshee@canonical.com> Tue, 25 Apr 2017 13:42:54 -0500
1375
1376 linux (4.11.0-0.4) zesty; urgency=low
1377
1378 * POWER9: Improve performance on memory management (LP: #1681429)
1379 - SAUCE: powerpc/mm/radix: Don't do page walk cache flush when doing full mm
1380 flush
1381 - SAUCE: powerpc/mm/radix: Remove unnecessary ptesync
1382
1383 * Miscellaneous Ubuntu changes
1384 - find-missing-sauce.sh
1385
1386 [ Upstream Kernel Changes ]
1387
1388 * rebase to v4.11-rc7
1389
1390 -- Seth Forshee <seth.forshee@canonical.com> Tue, 18 Apr 2017 08:19:43 -0500
1391
1392 linux (4.11.0-0.3) zesty; urgency=low
1393
1394 * Disable CONFIG_HVC_UDBG on ppc64el (LP: #1680888)
1395 - [Config] Disable CONFIG_HVC_UDBG on ppc64el
1396
1397 * smartpqi driver needed in initram disk and installer (LP: #1680156)
1398 - [Config] Add smartpqi to d-i
1399
1400 * Disable CONFIG_SECURITY_SELINUX_DISABLE (LP: #1680315)
1401 - [Config] CONFIG_SECURITY_SELINUX_DISABLE=n
1402
1403 * Miscellaneous Ubuntu changes
1404 - [Config] flash-kernel should be a Breaks
1405 - [Config] drop the info directory
1406 - [Config] drop NOTES as obsolete
1407 - [Config] drop changelog.historical as obsolete
1408 - rebase to v4.11-rc6
1409
1410 [ Upstream Kernel Changes ]
1411
1412 * rebase to v4.11-rc6
1413
1414 -- Tim Gardner <tim.gardner@canonical.com> Tue, 11 Apr 2017 07:16:52 -0600
1415
1416 linux (4.11.0-0.2) zesty; urgency=low
1417
1418 [ Upstream Kernel Changes ]
1419
1420 * rebase to v4.11-rc5
1421
1422 -- Tim Gardner <tim.gardner@canonical.com> Mon, 03 Apr 2017 08:26:07 +0100
1423
1424 linux (4.11.0-0.1) zesty; urgency=low
1425
1426 [ Upstream Kernel Changes ]
1427
1428 * rebase to v4.11-rc4
1429 - LP: #1591053
1430
1431 -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600
1432
1433 linux (4.11.0-0.0) zesty; urgency=low
1434
1435 * dummy entry
1436
1437 -- Tim Gardner <tim.gardner@canonical.com> Mon, 20 Mar 2017 05:15:32 -0600