+linux (4.10.0-3.5) zesty; urgency=low
+
+ * KVM module handling different per Architecture - ppc64el (LP: #1657734)
+ - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list
+
+ * ENA network driver moved to -extra (LP: #1657767)
+ - [Config] Move Amazon ENA network driver to the main kernel package
+
+ * [Hyper-V] mkfs regression in 4.10 fixed by patch in "for-4.11"
+ (LP: #1657539)
+ - block: relax check on sg gap
+
+ * i915 module requests unreleased GUC firmware files (LP: #1626740)
+ - SAUCE: (no-up) i915: Remove MODULE_FIRMWARE statements for unreleased
+ firmware
+
+ * [17.04 FEAT] Integrate kernel message catalogue for s390x into Ubuntu
+ distribution (LP: #1628889)
+ - [Config] CONFIG_KMSG_IDS=y for s390
+ - SAUCE: s390 Kernel message catalog
+
+ * Miscellaneous Ubuntu changes
+ - ubuntu: vbox -- Update to 5.1.14-dfsg-1
+ - SAUCE: vbox -- remove .readlink assignment
+ - Enable vbox build
+ - [Config] CONFIG_DEFAULT_IOSCHED=cfq
+ - [Config] Bump CONFIG_NR_CPUS up to 256 on arm64
+ - [Config] Fix up s390x config options changed during 4.10 rebase
+ - [Config] Update annotations for 4.10
+ - Disable all flavors for the powerpc architecture
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.10-rc5
+
+ -- Seth Forshee <seth.forshee@canonical.com> Mon, 23 Jan 2017 15:48:35 -0600
+
+linux (4.10.0-2.4) zesty; urgency=low
+
+ * Move some kernel modules to the main kernel package (part 2) (LP: #1655002)
+ - [Config] Add IBM power drivers to the inclusion list
+
+ * Miscellaneous Ubuntu changes
+ - [Config] linux-source Provides should not be a macro
+ - [Config] Correct the note URL for LATENCYTOP
+ - rebase to v4.10-rc4
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.10-rc4
+
+ -- Tim Gardner <tim.gardner@canonical.com> Wed, 11 Jan 2017 07:17:34 -0700
+
+linux (4.10.0-1.3) zesty; urgency=low
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.10-rc3
+
+ -- Seth Forshee <seth.forshee@canonical.com> Mon, 09 Jan 2017 11:41:13 -0600
+
+linux (4.10.0-0.2) zesty; urgency=low
+
+ * [17.04 FEAT] Build IMA and the TPM device drivers into the KVM on POWER
+ host/NV kernel (LP: #1643652)
+ - [Config] Update and enforce IMA options
+
+ * Miscellaneous Ubuntu changes
+ - [Config] Disble stack protector for powerpc-smp
+
+ -- Seth Forshee <seth.forshee@canonical.com> Sat, 07 Jan 2017 19:07:55 -0600
+
+linux (4.10.0-0.1) zesty; urgency=low
+
+ * IP-over-DDP packets dropped (LP: #1559772)
+ - [Config] CONFIG_IPDDP=n
+
+ * Miscellaneous Ubuntu changes
+ - [Config] Update annotations with recent config changes
+ - SAUCE: aufs -- remove .readlink assignment
+ - disable vbox build
+ - disable ZFS build
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.10-rc2
+
+ -- Seth Forshee <seth.forshee@canonical.com> Fri, 06 Jan 2017 07:55:57 -0600
+
+linux (4.9.0-11.12) zesty; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - UBUNTU: SAUCE: Add '-fno-pie -no-pie' to cflags for x86 selftests
+ - UBUNTU: SAUCE: (no-up) aufs: for v4.9-rc1, support setattr_prepare()
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 12 Dec 2016 06:40:40 -0700
+
+linux (4.9.0-10.11) zesty; urgency=low
+
+ * d-i is missing usb support for platforms that use the xhci-platform driver
+ (LP: #1625222)
+ - d-i initrd needs additional usb modules to support the merlin platform
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: Import aufs driver
+ - SAUCE: aufs -- Convert to use xattr handlers
+ - SAUCE: aufs -- Add flags argument to aufs_rename()
+ - [Config] Enable aufs
+ - [Config] CONFIG_FSL_FMAN=y for powerpc
+ - SAUCE: powerpc64: Fix legacy cmpi mneomonic assumption
+ - [Config] Restore powerpc64-emb
+
+ -- Tim Gardner <tim.gardner@canonical.com> Thu, 08 Dec 2016 20:38:12 -0700
+
+linux (4.9.0-9.10) zesty; urgency=low
+
+ * Kernel Fixes to get TCMU File Backed Optical to work (LP: #1646204)
+ - SAUCE: target/user: Fix use-after-free of tcmu_cmds if they are expired
+
+ * Yakkety: arm64: CONFIG_ARM64_ERRATUM_845719 isn't enabled (LP: #1647793)
+ - [Config] CONFIG_ARM64_ERRATUM_845719=y
+
+ * Update hio driver to 2.1.0.28 (LP: #1646643)
+ - SAUCE: hio: update to Huawei ES3000_V2 (2.1.0.28)
+
+ * Miscellaneous Ubuntu changes
+ - ubuntu: vbox -- Update to 5.1.10-dfsg-2
+ - Build vbox for ARCH=x86
+ - SAUCE: Add aufs driver
+ - SAUCE: aufs -- Convert to use xattr handlers
+ - SAUCE: aufs -- Updates for rename2
+ - SAUCE: Export symbols used by aufs
+ - [Config] Enable aufs
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 05 Dec 2016 13:02:18 -0700
+
+linux (4.9.0-8.9) zesty; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: xr-usb-serial: only build for x86
+ Fixes s390x FTBS
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 05 Dec 2016 12:35:33 -0700
+
+linux (4.9.0-7.8) zesty; urgency=low
+
+ * Driver for Exar USB UART (LP: #1645591)
+ - SAUCE: xr-usb-serial: Driver for Exar USB serial ports
+ - SAUCE: xr-usb-serial: interface for switching modes
+ - SAUCE: cdc-acm: Exclude Exar USB serial ports
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9-rc8
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 05 Dec 2016 07:41:58 -0700
+
+linux (4.9.0-6.7) zesty; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - Set build_arch=x86 for i386
+
+ -- Tim Gardner <tim.gardner@canonical.com> Thu, 01 Dec 2016 21:00:11 -0700
+
+linux (4.9.0-5.6) zesty; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - [Debian] restore tools build
+ - Set build_arch=x86 for amd64 and x32
+
+ -- Tim Gardner <tim.gardner@canonical.com> Thu, 01 Dec 2016 07:06:20 -0700
+
+linux (4.9.0-4.5) zesty; urgency=low
+
+ * linux: Staging modules should be unsigned (LP: #1642368)
+ - [Debian] Suppress module signing for staging drivers
+ - SAUCE: Add rtl drivers to signature inclusion list
+
+ * [17.04 FEAT] Build IMA and the TPM device drivers into the KVM on POWER
+ host/NV kernel (LP: #1643652)
+ - [Config] CONFIG_IMA=y
+
+ * Miscellaneous Ubuntu changes
+ - [Debian] config-check -- Make it easier to find annotations syntax errors
+ - [Config] Enable various drivers for ARM platforms
+ - [Config] Fix s390x config carnage
+ - [Config] Set CONFIG_KEXEC=y for all architectures
+ - [Config] Fix up CONFIG_I2C_SLAVE values
+ - [Config] Set CONFIG_WLAN_VENDOR_TI=y for all supported kernels
+ - [Config] Set CONFIG_PWM_PCA9685=m for amd64 and i386
+ - [Config] Set CONFIG_ZONE_DMA=m for amd64-generic
+ - [Config] Update annotations
+ - [Config] CONFIG_NR_CPUS=8192 for amd64
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 28 Nov 2016 12:57:09 -0700
+
+linux (4.9.0-3.4) zesty; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: (namespace) security/integrity: Harden against malformed xattrs
+ - SAUCE: (namespace) block_dev: Support checking inode permissions in lookup_bdev()
+ - SAUCE: (namespace) block_dev: Check permissions towards block device inode when mounting
+ - SAUCE: (namespace) mtd: Check permissions towards mtd block device inode when mounting
+ - SAUCE: (namespace) fs: Allow superblock owner to change ownership of inodes
+ - SAUCE: (namespace) fs: Don't remove suid for CAP_FSETID for userns root
+ - SAUCE: (namespace) fs: Allow superblock owner to access do_remount_sb()
+ - SAUCE: (namespace) capabilities: Allow privileged user in s_user_ns to set security.* xattrs
+ - SAUCE: (namespace) fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw filesystems
+ - SAUCE: (namespace) posix_acl: Export posix_acl_fix_xattr_userns() to modules
+ - SAUCE: (namespace) fuse: Add support for pid namespaces
+ - SAUCE: (namespace) fuse: Support fuse filesystems outside of init_user_ns
+ - SAUCE: (namespace) fuse: Translate ids in posix acl xattrs
+ - SAUCE: (namespace) fuse: Restrict allow_other to the superblock's namespace or a descendant
+ - SAUCE: (namespace) fuse: Allow user namespace mounts
+ - SAUCE: (namespace) ext4: Add support for unprivileged mounts from user namespaces
+ - SAUCE: (namespace) ext4: Add module parameter to enable user namespace mounts
+ - SAUCE: (namespace) block_dev: Forbid unprivileged mounting when device is opened for writing
+ - SAUCE: (noup) Update spl to 0.6.5.8-0ubuntu7, zfs to 0.6.5.8-2ubuntu1
+
+ * Miscellaneous upstream changes
+ - Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs"
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9-rc7
+
+ -- Tim Gardner <tim.gardner@canonical.com> Tue, 22 Nov 2016 07:51:48 -0700
+
+linux (4.9.0-2.3) zesty; urgency=low
+
+ * Fix Kernel Crashing under IBM Virtual Scsi Driver (LP: #1642299)
+ - SAUCE: ibmvscsis: Rearrange functions for future patches
+ - SAUCE: ibmvscsis: Synchronize cmds at tpg_enable_store time
+ - SAUCE: ibmvscsis: Synchronize cmds at remove time
+ - SAUCE: ibmvscsis: Clean up properly if target_submit_cmd/tmr fails
+ - SAUCE: ibmvscsis: Return correct partition name/# to client
+ - SAUCE: ibmvscsis: Issues from Dan Carpenter/Smatch
+
+ * Move some kernel modules to the main kernel package (LP: #1642228)
+ - [Config] Move some powerpc kernel modules to the main kernel package
+
+ * linux: Staging modules should be unsigned (LP: #1642368)
+ - [Debian] Suppress module signing for staging drivers
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: UEFI: bpf: disable bpf when module security is enabled
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9-rc6
+
+ -- Tim Gardner <tim.gardner@canonical.com> Tue, 15 Nov 2016 10:59:54 -0700
+
+linux (4.9.0-1.2) zesty; urgency=low
+
+ * hio: SSD data corruption under stress test (LP: #1638700)
+ - SAUCE: hio: set bi_error field to signal an I/O error on a BIO
+ - SAUCE: hio: splitting bio in the entry of .make_request_fn
+
+ * hio Ubuntu sauce driver needs porting to 4.8 (LP: #1635594)
+ - SAUCE: import Huawei ES3000_V2 (2.1.0.23)
+ - SAUCE: hio: bio_endio() no longer takes errors arg
+ - SAUCE: hio: blk_queue make_request_fn now returns a blk_qc_t
+ - SAUCE: hio: use alloc_cpumask_var to avoid -Wframe-larger-than
+ - SAUCE: hio: fix mask maybe-uninitialized warning
+ - SAUCE: hio: port to v4.8 base
+ - [config] enable CONFIG_HIO (Huawei ES3000_V2 PCIe SSD driver)
+ - SAUCE: hio: Makefile and Kconfig
+ - [Config] Enforce CONFIG_HIO
+
+ * Miscellaneous Ubuntu changes
+ - rebase to v4.9-rc5
+ - zfs: remove the never implemented aio_fsync file operation
+ - [Config] Disable powerpc64-emb for FTBS
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9-rc5
+
+ -- Tim Gardner <tim.gardner@canonical.com> Tue, 08 Nov 2016 08:02:32 -0700
+
+linux (4.9.0-0.1) zesty; urgency=low
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.9-rc4
+ - LP: #1465724
+ - LP: #1535802
+
+ -- Tim Gardner <tim.gardner@canonical.com> Sun, 16 Oct 2016 21:46:31 -0600
+
+linux (4.9.0-0.0) yakkety; urgency=low
+
+ [ Seth Forshee ]
+
+ * Release Tracking Bug
+ - LP: #1632918
+
+ * Revert "If zone is so small that watermarks are the same, stop zone balance"
+ in yakkety (LP: #1632894)
+ - Revert "UBUNTU: SAUCE: (no-up) If zone is so small that watermarks are the
+ same, stop zone balance."
+
+ -- Seth Forshee <seth.forshee@canonical.com> Wed, 12 Oct 2016 21:57:07 -0500
+
+linux (4.8.0-24.26) yakkety; urgency=low
+
+ [ Seth Forshee ]
+
+ * Release Tracking Bug
+ - LP: #1632749
+
+ * lts-yakkety 4.8 cannot mount lvm raid1 (LP: #1631298)
+ - SAUCE: (no-up) dm raid: fix compat_features validation
+
+ * kswapd0 100% CPU usage (LP: #1518457)
+ - SAUCE: (no-up) If zone is so small that watermarks are the same, stop zone
+ balance.
+
+ -- Seth Forshee <seth.forshee@canonical.com> Wed, 12 Oct 2016 10:21:44 -0500
+
+linux (4.8.0-23.25) yakkety; urgency=low
+
+ [ Seth Forshee ]
+
+ * Release Tracking Bug
+ - LP: #1632484
+
+ * [Trusty->Yakkety] powerpc/64: Fix incorrect return value from
+ __copy_tofrom_user (LP: #1632462)
+ - SAUCE: (no-up) powerpc/64: Fix incorrect return value from
+ __copy_tofrom_user
+
+ * Ubuntu 16.10: Oops panic in move_page_tables/page_remove_rmap after running
+ memory_stress_ng. (LP: #1628976)
+ - SAUCE: (no-up) powerpc/pseries: Fix stack corruption in htpe code
+
+ * Paths not failed properly when unmapping virtual FC ports in VIOS (using
+ ibmvfc) (LP: #1632116)
+ - scsi: ibmvfc: Fix I/O hang when port is not mapped
+
+ * [Ubuntu16.10]KV4.8: kernel livepatch config options are not set
+ (LP: #1626983)
+ - [Config] Enable live patching on powerpc/ppc64el
+
+ * CONFIG_AUFS_XATTR is not set (LP: #1557776)
+ - [Config] CONFIG_AUFS_XATTR=y
+
+ * Yakkety update to 4.8.1 stable release (LP: #1632445)
+ - arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP
+ - Using BUG_ON() as an assert() is _never_ acceptable
+ - usb: misc: legousbtower: Fix NULL pointer deference
+ - Staging: fbtft: Fix bug in fbtft-core
+ - usb: usbip: vudc: fix left shift overflow
+ - USB: serial: cp210x: Add ID for a Juniper console
+ - Revert "usbtmc: convert to devm_kzalloc"
+ - ALSA: hda - Adding one more ALC255 pin definition for headset problem
+ - ALSA: hda - Fix headset mic detection problem for several Dell laptops
+ - ALSA: hda - Add the top speaker pin config for HP Spectre x360
+ - Linux 4.8.1
+
+ * PSL data cache should be flushed before resetting CAPI adapter
+ (LP: #1632049)
+ - cxl: Flush PSL cache before resetting the adapter
+
+ * thunder nic: avoid link delays due to RX_PACKET_DIS (LP: #1630038)
+ - net: thunderx: Don't set RX_PACKET_DIS while initializing
+
+ * crypto/vmx/p8_ghash memory corruption (LP: #1630970)
+ - crypto: ghash-generic - move common definitions to a new header file
+ - crypto: vmx - Fix memory corruption caused by p8_ghash
+ - crypto: vmx - Ensure ghash-generic is enabled
+
+ * arm64: SPCR console not autodetected (LP: #1630311)
+ - of/serial: move earlycon early_param handling to serial
+ - [Config] CONFIG_ACPI_SPCR_TABLE=y
+ - ACPI: parse SPCR and enable matching console
+ - ARM64: ACPI: enable ACPI_SPCR_TABLE
+ - serial: pl011: add console matching function
+
+ * include/linux/security.h header syntax error with !CONFIG_SECURITYFS
+ (LP: #1630990)
+ - SAUCE: (no-up) include/linux/security.h -- fix syntax error with
+ CONFIG_SECURITYFS=n
+
+ * sha1-powerpc returning wrong results (LP: #1629977)
+ - crypto: sha1-powerpc - little-endian support
+
+ -- Seth Forshee <seth.forshee@canonical.com> Tue, 11 Oct 2016 16:38:45 -0500
+
+linux (4.8.0-22.24) yakkety; urgency=low
+
+ * CVE-2016-7039 (LP: #1631287)
+ - SAUCE: net: add recursion limit to GRO
+
+ -- Andy Whitcroft <apw@canonical.com> Fri, 07 Oct 2016 22:46:28 +0100
+
+linux (4.8.0-21.23) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1630279
+
+ * powerpc 4.8.0-17 fails to boot on PowerMac G5 (LP: #1628968)
+ - Revert "Revert "powerpc: Simplify module TOC handling""
+
+ * Regression tests can not detect binfmt_elf mmpa semantic change
+ (LP: #1630069)
+ - SAUCE: apparmor: add flag to detect semantic change, to binfmt_elf mmap
+
+ * Autofs parameter substitution broken in kernel 4.4.0-38 and 4.4.0-40
+ (LP: #1629204)
+ - SAUCE: (namespace) autofs4: Use real_cred for requestor's ids
+
+ -- Tim Gardner <tim.gardner@canonical.com> Tue, 04 Oct 2016 08:01:21 -0600
+
+linux (4.8.0-20.22) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1629730
+
+ [ Upstream Kernel Changes ]
+
+ * rebase to v4.8
+
+ -- Tim Gardner <tim.gardner@canonical.com> Sun, 02 Oct 2016 19:10:40 -0600
+
+linux (4.8.0-19.21) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1629057
+
+ * 4.8.0 kernels do not complete boot process on VM (LP: #1627198)
+ - [Config] CONFIG_HARDENED_USERCOPY_PAGESPAN=n
+
+ * mount-image-callback cannot mount partitioned disk image (LP: #1628336)
+ - SAUCE: nbd: Only delay uevent until connected
+
+ * Support snaps inside of lxd containers (LP: #1611078)
+ - apparmor: add interface to be able to grab loaded policy
+ - securityfs: update interface to allow inode_ops, and setup from vfs fns
+ - apparmor: refactor aa_prepare_ns into prepare_ns and create_ns routines
+ - apparmor: add __aa_find_ns fn
+ - apparmor: add mkdir/rmdir interface to manage policy namespaces
+ - apparmor: fix oops in pivot_root mediation
+ - apparmor: fix warning that fn build_pivotroot discards const
+ - apparmor: add interface to advertise status of current task stacking
+ - apparmor: update policy permissions to consider ns being viewed/managed
+ - apparmor: add per ns policy management interface
+ - apparmor: bump domain stacking version to 1.2
+
+ * linux-image-extra-4.8.0-17-generic does not provide many sound card modules
+ (LP: #1628523)
+ - [Config] CONFIG_ZONE_DMA=y for generic
+
+ * Yakkety - disable ARCH_ZX (LP: #1628503)
+ - [Config] armhf: disable ARCH_ZX
+
+ * Enable switchdev config parameter for Yakkety (LP: #1628241)
+ - [Config] CONFIG_NET_SWITCHDEV=y for amd64/arm64
+
+ * Ubuntu 16.10 kernel v4.8: Installation failing on Habanero with Shiner card
+ (LP: #1628009)
+ - firmware: Update bnx2x to 7.13.1.0
+
+ * vNIC driver missing in 4.8 kernel package (LP: #1628187)
+ - [Config] Enable CONFIG_IBMVNIC=m
+
+ * Yakkety - armhf: MFD_TPS65217 and REGULATOR_TPS65217 are boot essential
+ (LP: #1628112)
+ - [Config] armhf: MFD_TPS65217=y && REGULATOR_TPS65217=y
+
+ * Miscellaneous Ubuntu changes
+ - Rebase to v4.8-rc8
+ - [Config] skip Ubuntu-4.8.0-18.20
+ - [Config] missing modules in armhf/s390x
+
+ * Miscellaneous Ubuntu changes
+ - rebase to v4.8-rc8
+
+ -- Leann Ogasawara <leann.ogasawara@canonical.com> Sun, 25 Sep 2016 12:13:35 -0700
+
+linux (4.8.0-17.19) yakkety; urgency=low
+
+ * Release Tracking Bug
+ - LP: #1627387
+
+ * build squashfs into xenial kernels by default (LP: #1593134)
+ - Remove squashfs udeb
+
+ * [Yakkety] Fix up ATA_GENERIC to match annotations file. (LP: #1627322)
+ - Add d-i support for ata_generic
+
+ * [Yakkety] Fix up CONFIG_BLK_DEV_SD to match annotations (LP: #1627330)
+ - [Config] Enforce CONFIG_BLK_DEV_SD=y,CONFIG_BLK_DEV_SR=y
+
+ * [Yakkety] Fix up ATA_PIIX to match annotations file (LP: #1627324)
+ - [Config] Enforce CONFIG_ATA_PIIX=y for amd64/i386
+
+ * Yakkety - USB drivers must be built in (LP: #1627323)
+ - Update annotation enforcement for CONFIG_USB_[E|O|U|X]HCI_HCD
+
+ * 4.8.0-16.17: genirq: Flags mismatch serial vs goldfish_pdev_bus
+ (LP: #1627052)
+ - [Config] CONFIG_GOLDFISH=n
+
+ * yakkety 4.8, remove module noise kernel-4.8 (LP: #1626104)
+ - Revert "UBUNTU: SAUCE: Clear Linux: bootstats: add printk's to measure boot
+ time in more detail"
+
+ * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
+ - SAUCE: Fix regression which breaks DFS mounting
+
+ * Miscellaneous Ubuntu changes
+ - [Config] apply xenial configuration annotations
+ - s390x -- DEBUG_RODATA is now valid
+ - [Config] s390x -- CONFIG_SQUASHFS=y
+ - [Config] s390x -- CONFIG_ECRYPT_FS=y
+ - [Config] Enable CONFIG_ACPI_PCI_SLOT=y for arm64
+ - [Config] Enable CONFIG_ACPI_HED=y for arm64
+ - [Config] Enable CONFIG_QUICC_ENGINE=y
+
+ * Miscellaneous upstream changes
+ - annotations: pull back to xenial
+
+ -- Leann Ogasawara <leann.ogasawara@canonical.com> Sat, 24 Sep 2016 21:31:31 -0700
+
+linux (4.8.0-16.17) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1626768
+
+ * Support ARM GIC ITS in ACPI mode (LP: #1626631)
+ - [Config] CONFIG_ACPI_IORT=y
+ - SAUCE: ACPI: I/O Remapping Table (IORT) initial support
+ - SAUCE: ACPI: Add new IORT functions to support MSI domain handling
+ - SAUCE: irqchip/gicv3-its: Cleanup for ITS domain initialization
+ - SAUCE: irqchip/gicv3-its: Refactor ITS DT init code to prepare for ACPI
+ - SAUCE: irqchip/gicv3-its: Probe ITS in the ACPI way
+ - SAUCE: irqchip/gicv3-its: Factor out PCI-MSI part that might be reused for ACPI
+ - SAUCE: irqchip/gicv3-its: Use MADT ITS subtable to do PCI/MSI domain initialization
+ - SAUCE: PCI/MSI: Setup MSI domain on a per-device basis using IORT ACPI table
+
+ * 4.8 dropped CONFIG_ATA=y (breaks systemd's TEST-08-ISSUE-2730 upstream test)
+ (LP: #1626394)
+ - [Config] CONFIG_ATA=y
+
+ * Yakkety: Enable drivers with respect to Xenial (LP: #1626543)
+ - [Config] CONFIG_VMD=m
+ - [Config] CONFIG_MAC80211_RC_MINSTREL_VHT=y for all arches
+ - [Config] CONFIG_OF=y for all arches
+ - [Config] CONFIG_BLK_DEV_NVME_SCSI=y
+ - [Config] Xenial device settings sync with amd64
+ - [Config] Xenial device settings sync with i386
+ - [Config] CONFIG_MTD_UBI_GLUEBI=m
+ - [Config] Xenial device settings sync with armhf
+ - [Config] Xenial device settings sync with arm64
+
+ * yakkety 4.8, missing config CONFIG_USERFAULTFD=y (LP: #1626149)
+ - [Config] CONFIG_USERFAULTFD=y
+
+ * 4.8 regression: SLAB is being used instead of SLUB (LP: #1626564)
+ - [Config] CONFIG_SLUB=y
+
+ * image won't boot after upgrading to yakkety's 4.8 kernel because efi
+ (LP: #1626158)
+ - add nls_cp437 to the generic.inclusion-list
+
+ -- Tim Gardner <tim.gardner@canonical.com> Thu, 22 Sep 2016 06:51:45 -0600
+
+linux (4.8.0-15.16) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1626239
+
+ * image won't boot after upgrading to yakkety's 4.8 kernel because efi
+ (LP: #1626158)
+ - [Config] CONFIG_FAT_DEFAULT_IOCHARSET=iso8859-1
+ - [Config] CONFIG_NLS_CODEPAGE_437=y
+ - [Config] CONFIG_VFAT_FS=y
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: seccomp: log actions even when audit is disabled
+
+ -- Tim Gardner <tim.gardner@canonical.com> Wed, 21 Sep 2016 06:41:03 -0600
+
+linux (4.8.0-14.15) yakkety; urgency=low
+
+ * CVE-2016-1575 (LP: #1534961)
+ - SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs
+ - SAUCE: overlayfs: Be more careful about copying up sxid files
+ - SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
+
+ * CVE-2016-1576 (LP: #1535150)
+ - SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs
+ - SAUCE: overlayfs: Be more careful about copying up sxid files
+ - SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
+
+ * overlay: mkdir fails if directory exists in lowerdir in a user namespace
+ (LP: #1531747)
+ - SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs
+
+ * Miscellaneous Ubuntu changes
+ - [Config] CONFIG_PM_WAKELOCKS=y
+ - [Config] CONFIG_CLEANCACHE=y
+ - [Config] CONFIG_WQ_POWER_EFFICIENT_DEFAULT=y
+ - [Config] CONFIG_PROCESSOR_SELECT=y
+ - [Config] Enabled some networking options
+ - SAUCE: overlayfs: Enable user namespace mounts
+
+ -- Leann Ogasawara <leann.ogasawara@canonical.com> Tue, 20 Sep 2016 13:56:58 -0700
+
+linux (4.8.0-13.14) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1625733
+
+ * fails to mount ext4 crypto-crc32 is missing (LP: #1625728)
+ - [Config] Add some CRC crypto modules to d-i
+
+ * Linux netfilter IPT_SO_SET_REPLACE memory corruption (LP: #1555338)
+ - SAUCE: [nf,v2] netfilter: x_tables: don't rely on well-behaving userspace
+
+ * Brightness control on Lenovo ThinkPad T430 does not work. (LP: #1183856)
+ - SAUCE: (no-up) ACPI: Disable Windows 8 compatibility for some Lenovo
+ ThinkPads
+
+ * Option GE0301 3G modem doesn't work (LP: #348861)
+ - SAUCE: (no-up) Added quirk to recognize GE0301 3G modem as an interface.
+
+ * [regression 4.4 -> 4.8] Please re-enable CONFIG_TOUCHSCREEN_ELAN
+ (LP: #1625259)
+ - [Config] CONFIG_TOUCHSCREEN_ELAN=m for all arches
+
+ * Miscellaneous Ubuntu changes
+ - SAUCE: (namespace) block_dev: Forbid unprivileged mounting when device is
+ opened for writing
+ - SAUCE: fan: add VXLAN implementation
+ - [Config] CONFIG_VFIO=m for ppc64el
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 19 Sep 2016 10:50:29 -0600
+
+linux (4.8.0-12.13) yakkety; urgency=low
+
+ [ Tim Gardner ]
+
+ * Release Tracking Bug
+ - LP: #1625233
+
+ * Miscellaneous Ubuntu changes
+ - rebase to v4.8-rc7
+ - [Config] CONFIG_SCSI_DEBUG=m for all arches
+
+ -- Tim Gardner <tim.gardner@canonical.com> Mon, 19 Sep 2016 06:35:21 -0600
+
+linux (4.8.0-11.12) yakkety; urgency=low
+
+ * change_hat is logging failures during expected hat probing (LP: #1615893)
+ - SAUCE: apparmor: Fix auditing behavior for change_hat probing
+
+ * deleted files outside of the namespace are not being treated as
+ disconnected
+ (LP: #1615892)
+ - SAUCE: apparmor: deleted dentries can be disconnected
+
+ * stacking to unconfined in a child namespace confuses mediation
+ (LP: #1615890)
+ - SAUCE: apparmor: special case unconfined when determining the mode
+
+ * apparmor module parameters can be changed after the policy is locked
+ (LP: #1615895)
+ - SAUCE: apparmor: fix: parameters can be changed after policy is locked
+
+ * AppArmor profile reloading causes an intermittent kernel BUG (LP:
+ #1579135)
+ - SAUCE: apparmor: fix vec_unique for vectors larger than 8
+
+ * label vec reductions can result in reference labels instead of direct
+ access
+ to labels (LP: #1615889)
+ - SAUCE: apparmor: reduction of vec to single entry is just that entry
+
+ * profiles from different namespaces can block other namespaces from being
+ able to load a profile (LP: #1615887)
+ - SAUCE: apparmor: profiles in one ns can affect mediation in another ns
+
+ * The label build for onexec when stacking is wrong (LP: #1615881)
+ - SAUCE: apparmor: Fix label build for onexec stacking.
+
+ * The inherit check for new to old label comparison for domain transitions
+ is
+ wrong (LP: #1615880)
+ - SAUCE: apparmor: Fix new to old label comparison for domain transitions
+
+ * warning stack trace while playing with apparmor namespaces (LP: #1593874)
+ - SAUCE: apparmor: fix stack trace when removing namespace with profiles
+
+ * __label_update proxy comparison test is wrong (LP: #1615878)
+ - SAUCE: apparmor: Fix __label_update proxy comparison test
+
+ * reading /sys/kernel/security/apparmor/profiles requires CAP_MAC_ADMIN
+ (LP: #1560583)
+ - SAUCE: apparmor: Allow ns_root processes to open profiles file
+ - SAUCE: apparmor: Consult sysctl when reading profiles in a user ns
+
+ * policy namespace stacking (LP: #1379535)
+ - SAUCE: (no-up) apparmor: rebase of apparmor3.5-beta1 snapshot for 4.8
+ - SAUCE: add a sysctl to enable unprivileged user ns AppArmor policy loading
+
+ * Miscellaneous Ubuntu changes
+ - [Debian] Dynamically determine linux udebs package name
+ - [Debian] d-i -- fix dtb handling in new kernel-wedge form
+ - SAUCE: apparmor: Fix FTBFS due to bad include path
+ - SAUCE: apparmor: add data query support
+ - [Config] Set CONFIG_SECURITY_APPARMOR_UNCONFINED_INIT=y
+
+ * Miscellaneous upstream changes
+ - fixup backout policy view capable for forward port
+ - apparmor: fix: Rework the iter loop for label_update
+ - apparmor: add more assertions for updates/merges to help catch errors
+ - apparmor: Make pivot root transitions work with stacking
+ - apparmor: convert delegating deleted files to mediate deleted files
+ - apparmor: add missing parens. not a bug fix but highly recommended
+ - apparmor: add a stack_version file to allow detection of bug fixes
+ - apparmor: push path lookup into mediation loop
+ - apparmor: default to allowing unprivileged userns policy
+ - apparmor: fix: permissions test to view and manage policy
+ - apparmor: Add Basic ns cross check condition for ipc
+
+ -- Leann Ogasawara <leann.ogasawara@canonical.com> Sat, 17 Sep 2016 10:03:16 -0700
+
+linux (4.8.0-10.11) yakkety; urgency=low
+
+ * Miscellaneous Ubuntu changes
+ - ubuntu: vbox -- update to 5.1.6-dfsg-1
+ - SAUCE: Enable vbox build
+
+ -- Tim Gardner <tim.gardner@canonical.com> Thu, 15 Sep 2016 07:10:51 -0600
+
linux (4.8.0-9.10) yakkety; urgency=low
* Miscellaneous Ubuntu changes
projects / mirror_ubuntu-zesty-kernel.git / blobdiff