Commit 8a3ec24e authored by Lorenzo Faletra's avatar Lorenzo Faletra

Import Debian changes 4.19.37-5parrot1

linux (4.19.37-5parrot1) testing; urgency=medium

  * Import new Debian release.

linux (4.19.37-5) unstable; urgency=medium

  [ Romain Perier ]
  * [sparc64] Fix device naming inconsistency between sunhv_console and
    sunhv_reg (Closes: #926539)

  [ Ben Hutchings ]
  * tcp: Avoid ABI change for DoS fixes (Closes: #930743)
  * Add ABI reference for 4.19.0-5

linux (4.19.37-4) unstable; urgency=high

  [ Ben Hutchings ]
  * libbpf: Fix various build bugs:
    - Drop unnecessary changes from "libbpf: add SONAME to shared object"
    - libbpf: Use only 2 components in soversion, matching package name
      (Closes: #929187)
    - libbpf: Build out-of-tree
  * README.source: Document the various makefiles and use of out-of-tree builds
  * [x86] lockdown,sysrq: Enable ALLOW_LOCKDOWN_LIFT_BY_SYSRQ (Closes: #929583)
  * mwifiex: Fix possible buffer overflows at parsing bss descriptor
    (CVE-2019-3846)
  * mwifiex: Abort at too short BSS descriptor element
  * mwifiex: Don't abort on small, spec-compliant vendor IEs
  * mm/mincore.c: make mincore() more conservative (CVE-2019-5489)
  * mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
    (CVE-2019-10126)
  * tcp: limit payload size of sacked skbs (CVE-2019-11477)
  * tcp: tcp_fragment() should apply sane memory limits (CVE-2019-11478)
  * tcp: add tcp_min_snd_mss sysctl (CVE-2019-11479)
  * tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()

  [ Romain Perier ]
  * [rt] Update to 4.19.37-rt20:
    - powerpc/pseries/iommu: Use a locallock instead local_irq_save()
    - powerpc: reshuffle TIF bits
    - tty/sysrq: Convert show_lock to raw_spinlock_t
    - drm/i915: Don't disable interrupts independently of the lock
    - sched/completion: Fix a lockup in wait_for_completion()

  [ Salvatore Bonaccorso ]
  * brcmfmac: assure SSID length from firmware is limited (CVE-2019-9500)
  * brcmfmac: add subtype check for event handling in data path
    (CVE-2019-9503)
  * ext4: zero out the unused memory region in the extent tree block
    (CVE-2019-11833)
  * Bluetooth: hidp: fix buffer overflow (CVE-2019-11884)

  [ Aurelien Jarno ]
  * [mips] Correctly bounds check virt_addr_valid (Closes: #929366)

  [ John Paul Adrian Glaubitz ]
  * [sparc64] udeb: Disable suffix for kernel-image

  [ Alper Nebi Yasak ]
  * udeb: input-modules: Include all keyboard driver modules
  * [arm64] udeb: kernel-image: Include cros_ec_spi and SPI drivers
  * [arm64] udeb: kernel-image: Include phy-rockchip-pcie
  * [arm64] udeb: usb-modules: Include phy-rockchip-typec, extcon-usbc-cros-ec
  * [arm64] udeb: mmc-modules: Include phy-rockchip-emmc
  * [arm64] udeb: fb-modules: Include rockchipdrm, panel-simple, pwm_bl and
    pwm-cros-ec
parent 30acfcb8
......@@ -253,3 +253,26 @@ Several build profiles are understood and supported:
with nopython as the build-dependencies will be unsatisfiable otherwise.
- nopython: Disable Python bindings. This currently disables building the
linux-perf-<version> package, as the perf program embeds Python.
Build rules
===========
The Debian build rules are split across multiple makefiles:
- debian/rules: Standard top-level makefile for Debian package build.
- debian/rules.gen: Intermediate makefile between debian/rules and
debian/rules.real. This is generated by gencontrol.py based on
the configuration under debian/config.
- debian/rules.real: Makefile for building a single kernel flavour
or other group of binary packages.
- debian/rules.d: Makefiles for building userland code from specific
source directories. The directory structure mirrors the kernel
source directories. debian/rules.real uses the "make-tools" to
invoke these makefiles.
All builds *must* be done out-of-tree in a subdirectory of
debian/build, so that the output files do not end up in the
linux-source-<version> binary package. Currently kernel builds use
debian/build/build_<arch>_<featureset>_<flavour>, userland code uses
debian/build/build-tools/<source-dir> and documentation uses
debian/build/build-doc.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
Source: linux
Version: 4.19.37-3parrot5
linux (4.19.37-5parrot1) testing; urgency=medium
* Import new Debian release.
-- Lorenzo "Palinuro" Faletra <palinuro@parrotsec.org> Sun, 23 Jun 2019 01:01:59 +0200
linux (4.19.37-5) unstable; urgency=medium
[ Romain Perier ]
* [sparc64] Fix device naming inconsistency between sunhv_console and
sunhv_reg (Closes: #926539)
[ Ben Hutchings ]
* tcp: Avoid ABI change for DoS fixes (Closes: #930743)
* Add ABI reference for 4.19.0-5
-- Ben Hutchings <ben@decadent.org.uk> Wed, 19 Jun 2019 23:16:58 +0100
linux (4.19.37-4) unstable; urgency=high
[ Ben Hutchings ]
* libbpf: Fix various build bugs:
- Drop unnecessary changes from "libbpf: add SONAME to shared object"
- libbpf: Use only 2 components in soversion, matching package name
(Closes: #929187)
- libbpf: Build out-of-tree
* README.source: Document the various makefiles and use of out-of-tree builds
* [x86] lockdown,sysrq: Enable ALLOW_LOCKDOWN_LIFT_BY_SYSRQ (Closes: #929583)
* mwifiex: Fix possible buffer overflows at parsing bss descriptor
(CVE-2019-3846)
* mwifiex: Abort at too short BSS descriptor element
* mwifiex: Don't abort on small, spec-compliant vendor IEs
* mm/mincore.c: make mincore() more conservative (CVE-2019-5489)
* mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
(CVE-2019-10126)
* tcp: limit payload size of sacked skbs (CVE-2019-11477)
* tcp: tcp_fragment() should apply sane memory limits (CVE-2019-11478)
* tcp: add tcp_min_snd_mss sysctl (CVE-2019-11479)
* tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
[ Romain Perier ]
* [rt] Update to 4.19.37-rt20:
- powerpc/pseries/iommu: Use a locallock instead local_irq_save()
- powerpc: reshuffle TIF bits
- tty/sysrq: Convert show_lock to raw_spinlock_t
- drm/i915: Don't disable interrupts independently of the lock
- sched/completion: Fix a lockup in wait_for_completion()
[ Salvatore Bonaccorso ]
* brcmfmac: assure SSID length from firmware is limited (CVE-2019-9500)
* brcmfmac: add subtype check for event handling in data path
(CVE-2019-9503)
* ext4: zero out the unused memory region in the extent tree block
(CVE-2019-11833)
* Bluetooth: hidp: fix buffer overflow (CVE-2019-11884)
[ Aurelien Jarno ]
* [mips] Correctly bounds check virt_addr_valid (Closes: #929366)
[ John Paul Adrian Glaubitz ]
* [sparc64] udeb: Disable suffix for kernel-image
[ Alper Nebi Yasak ]
* udeb: input-modules: Include all keyboard driver modules
* [arm64] udeb: kernel-image: Include cros_ec_spi and SPI drivers
* [arm64] udeb: kernel-image: Include phy-rockchip-pcie
* [arm64] udeb: usb-modules: Include phy-rockchip-typec, extcon-usbc-cros-ec
* [arm64] udeb: mmc-modules: Include phy-rockchip-emmc
* [arm64] udeb: fb-modules: Include rockchipdrm, panel-simple, pwm_bl and
pwm-cros-ec
-- Ben Hutchings <ben@decadent.org.uk> Mon, 17 Jun 2019 20:00:22 +0100
linux (4.19.37-3parrot5) testing; urgency=medium
* Import new Debian release.
......
This diff is collapsed.
......@@ -8,6 +8,7 @@ kernel-arch: arm
image-file: arch/arm/boot/zImage
# uncompressed-image is just for size checking
uncompressed-image-file: arch/arm/boot/Image
signed-code: false
[image]
install-stem: vmlinuz
......
......@@ -7,6 +7,7 @@ kernel-arch: arm
[build]
image-file: arch/arm/boot/zImage
vdso: true
signed-code: false
[image]
install-stem: vmlinuz
......
[abi]
abiname: 3parrot5
abiname: parrot1
ignore-changes:
__cpuhp_*
__xive_vm_h_*
......
......@@ -2011,6 +2011,11 @@ CONFIG_NFC_HCI=m
CONFIG_VMWARE_VMCI_VSOCKETS=m
CONFIG_HYPERV_VSOCKETS=m
##
## file: security/Kconfig
##
CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ=y
##
## file: sound/drivers/Kconfig
##
......
This diff is collapsed.
ee4a1d15d41bf60863ffc0d86d4b4891 debian/bin/gencontrol.py
4b9453dfd5b5b7f734adf7b2715dfb1b debian/build/version-info
42546a57a91e81e6f175630dfb9a9805 debian/build/version-info
74b180a87aa1f6377d9bf8a10368c657 debian/templates/control.main.in
1cfc49a285f1f37ce6415e811e5c737f debian/templates/control.image-unsigned.in
38004750aa03cea41d5d3aeafff16fcc debian/templates/image.preinst.in
......@@ -16,7 +16,7 @@ a4a60fc48b3240e46bbac6a1ddcaad30 debian/templates/image.postrm.in
b5b99078d7e73c15ac6055496e33d1ec debian/templates/control.sourcebin.in
57685436e079bbef4f8bb6e8a2dfbf1b debian/templates/control.signed-template.in
eda4623fb10d5ba1cefa8502ebaeb0fd debian/templates/control.image-dbg.in
d712742b9b484e3390b209f2eae2c7a6 debian/templates/control.source.in
d8fc0ea28c343fb12ed27606464cc80a debian/templates/control.source.in
6fea4e452a7a77e7063bb17051fff3a7 debian/templates/control.docs.in
578bb70eb1ed930f2cf8a774666b747f debian/templates/control.headers.featureset.in
befa899554918fd2a5264e5dca3c4eef debian/templates/tests-control.main.in
......@@ -25,11 +25,11 @@ befa899554918fd2a5264e5dca3c4eef debian/templates/tests-control.main.in
0c86e2579f89e94a6cd144eb98593a5b debian/templates/control.extra.in
fe4456d48e3218fb8980c8577d03a7ae debian/templates/control.config.in
103ea5fb237e376b511ba638afc41837 debian/templates/control.headers.arch.in
a174cab03ec2819c0e6dfd45356d1343 debian/config/defines
3455a2739532ef16d166221b6b075a4e debian/config/defines
d317561732748d137c4784c48ed7b7a9 debian/config/i386/defines
32e264f468daa991fa1bafce9e1eee3c debian/config/mips64el/defines
8f2e4969633ff660d026f2b7e02e6336 debian/config/sh3/defines
3a8d9bb342084862815b0d7d7df2eee4 debian/config/armhf/defines
5b9674737f5bf7a34d2fec7c9dbd4684 debian/config/armhf/defines
065f079f537bcea2963b88a2acaa65e5 debian/config/amd64/defines
d08ab699e6a25ec0da4cb70efc0f2288 debian/config/ppc64el/defines
1f1ed4a31b20a1ab483dd1357b30ed76 debian/config/mipsr6el/defines
......@@ -56,7 +56,7 @@ d26ac56948a79e6d37f7673073132de5 debian/config/s390x/defines
da871dd4234a8d1ed82d76fa536fa411 debian/config/alpha/defines
73e2f095b2485f95bc164bf685684a47 debian/config/mipsn32r6el/defines
51fa9bda1954320723c7c7daf42471a5 debian/config/hppa/defines
193b542830508cb812da06dfa0feddd2 debian/config/armel/defines
0f78d2116a1ebf7399f495edfffcc0ad debian/config/armel/defines
2f649099bc889fdbccc9b2f72305681c debian/config/mips64r6/defines
3e673c1434c6132c73c0cfb4bfe38763 debian/config/arm64ilp32/defines
832f4a53a034eac58b25c90a813b4669 debian/config/mips64r6el/defines
......@@ -70,5 +70,5 @@ d5cd6e820002011c1183909686eca2a2 debian/config/amd64/none/defines
d3c04182d8746e4871de922a63f03f97 debian/config/arm64/none/defines