GitLab

linux (4.13.10-1parrot10) testing; urgency=medium

  * Import new Debian version.

linux (4.13.10-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
    - cifs: check rsp for NULL before dereferencing in SMB2_open
    - cifs: release cifs root_cred after exit_cifs
    - cifs: release auth_key.response for reconnect.
    - nvme-pci: fix host memory buffer allocation fallback
    - nvme-pci: use appropriate initial chunk size for HMB allocation
    - nvme-pci: propagate (some) errors from host memory buffer setup
    - dax: remove the pmem_dax_ops->flush abstraction
    - dm integrity: do not check integrity for failed read operations
    - mmc: block: Fix incorrectly initialized requests
    - fs/proc: Report eip/esp in /prod/PID/stat for coredumping
    - scsi: scsi_transport_fc: fix NULL pointer dereference in
      fc_bsg_job_timeout
    - cifs: SMB3: Add support for multidialect negotiate (SMB2.1 and later)
    - mac80211: fix VLAN handling with TXQs
    - mac80211_hwsim: Use proper TX power
    - mac80211: flush hw_roc_start work before cancelling the ROC
    - genirq: Make sparse_irq_lock protect what it should protect
    - genirq/msi: Fix populating multiple interrupts
    - genirq: Fix cpumask check in __irq_startup_managed()
    - [powerpc*] KVM: Book3S HV: Hold kvm->lock around call to
      kvmppc_update_lpcr
    - [powerpc*] KVM: Book3S HV: Fix bug causing host SLB to be restored
      incorrectly
    - [powerpc*] KVM: PPC: Book3S HV: Don't access XIVE PIPR register using
      byte accesses
    - tracing: Fix trace_pipe behavior for instance traces
    - tracing: Erase irqsoff trace with empty write
    - tracing: Remove RCU work arounds from stack tracer
    - md/raid5: fix a race condition in stripe batch
    - md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list
    - scsi: aacraid: Fix 2T+ drives on SmartIOC-2000
    - scsi: aacraid: Add a small delay after IOP reset
    - [armhf] drm/exynos: Fix locking in the suspend/resume paths
    - [x86] drm/i915/gvt: Fix incorrect PCI BARs reporting
    - Revert "drm/i915/bxt: Disable device ready before shutdown command"
    - drm/amdgpu: revert tile table update for oland
    - drm/radeon: disable hard reset in hibernate for APUs
    - crypto: drbg - fix freeing of resources
    - security/keys: properly zero out sensitive key material in big_key
    - security/keys: rewrite all of big_key crypto
    - KEYS: fix writing past end of user-supplied buffer in keyring_read()
    - KEYS: prevent creating a different user's keyrings
    - [x86] libnvdimm, namespace: fix btt claim class crash
    - [powerpc*] eeh: Create PHB PEs after EEH is initialized
    - [powerpc*] pseries: Fix parent_dn reference leak in add_dt_node()
    - [powerpc*] tm: Flush TM only if CPU has TM feature
    - [mips*] Fix perf event init
    - [s390x] perf: fix bug when creating per-thread event
    - [s390x] mm: make pmdp_invalidate() do invalidation only
    - [s390x] mm: fix write access check in gup_huge_pmd()
    - PM: core: Fix device_pm_check_callbacks()
    - Revert "IB/ipoib: Update broadcast object if PKey value was changed in
      index 0"
    - cifs: Fix SMB3.1.1 guest authentication to Samba
    - cifs: SMB3: Fix endian warning
    - cifs: SMB3: Warn user if trying to sign connection that authenticated as
      guest
    - cifs: SMB: Validate negotiate (to protect against downgrade) even if
      signing off
    - cifs: SMB3: handle new statx fields
    - cifs: SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
    - vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
    - libceph: don't allow bidirectional swap of pg-upmap-items
    - brd: fix overflow in __brd_direct_access
    - gfs2: Fix debugfs glocks dump
    - bsg-lib: don't free job in bsg_prepare_job
    - iw_cxgb4: drop listen destroy replies if no ep found
    - iw_cxgb4: remove the stid on listen create failure
    - iw_cxgb4: put ep reference in pass_accept_req()
    - rcu: Allow for page faults in NMI handlers
    - mmc: sdhci-pci: Fix voltage switch for some Intel host controllers
    - extable: Consolidate *kernel_text_address() functions
    - extable: Enable RCU if it is not watching in kernel_text_address()
    - seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()
    - [arm64] Make sure SPsel is always set
    - [arm64] mm: Use READ_ONCE when dereferencing pointer to pte table
    - [arm64] fault: Route pte translation faults via do_translation_fault
    - [x86] KVM: VMX: extract __pi_post_block
    - [x86] KVM: VMX: avoid double list add with VT-d posted interrupts
    - [x86] KVM: VMX: simplify and fix vmx_vcpu_pi_load
    - [x86] KVM: nVMX: fix HOST_CR3/HOST_CR4 cache
    - [x86] kvm: Handle async PF in RCU read-side critical sections
    - xfs: validate bdev support for DAX inode flag
    - sched/sysctl: Check user input value of sysctl_sched_time_avg
    - irq/generic-chip: Don't replace domain's name
    - mtd: Fix partition alignment check on multi-erasesize devices
    - [armhf] etnaviv: fix submit error path
    - [armhf] etnaviv: fix gem object list corruption
    - futex: Fix pi_state->owner serialization
    - md: fix a race condition for flush request handling
    - md: separate request handling
    - PCI: Fix race condition with driver_override
    - btrfs: fix NULL pointer dereference from free_reloc_roots()
    - btrfs: clear ordered flag on cleaning up ordered extents
    - btrfs: finish ordered extent cleaning if no progress is found
    - btrfs: propagate error to btrfs_cmp_data_prepare caller
    - btrfs: prevent to set invalid default subvolid
    - [x86] platform: fujitsu-laptop: Don't oops when FUJ02E3 is not presnt
    - PM / OPP: Call notifier without holding opp_table->lock
    - [x86] mm: Fix fault error path using unsafe vma pointer
    - [x86] fpu: Don't let userspace set bogus xcomp_bv (CVE-2017-15537)
    - [x86] KVM: VMX: do not change SN bit in vmx_update_pi_irte()
    - [x86] KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt
    - [x86] KVM: VMX: use cmpxchg64
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6
    - [armhf,arm64] usb: dwc3: ep0: fix DMA starvation by assigning req->trb on
      ep0
    - mlxsw: spectrum: Fix EEPROM access in case of SFP/SFP+
    - net: bonding: Fix transmit load balancing in balance-alb mode if
      specified by sysfs
    - openvswitch: Fix an error handling path in
      'ovs_nla_init_match_and_action()'
    - net: bonding: fix tlb_dynamic_lb default value
    - net_sched: gen_estimator: fix scaling error in bytes/packets samples
    - net: sched: fix use-after-free in tcf_action_destroy and tcf_del_walker
    - sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
    - tcp: update skb->skb_mstamp more carefully
    - bpf/verifier: reject BPF_ALU64|BPF_END
    - tcp: fix data delivery rate
    - udpv6: Fix the checksum computation when HW checksum does not apply
    - ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header
    - net: phy: Fix mask value write on gmii2rgmii converter speed register
    - ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline
    - net/sched: cls_matchall: fix crash when used with classful qdisc
    - 8139too: revisit napi_complete_done() usage
    - bpf: do not disable/enable BH in bpf_map_free_id()
    - tcp: fastopen: fix on syn-data transmit failure
    - [powerpc*] net: emac: Fix napi poll list corruption
    - net: ipv6: fix regression of no RTM_DELADDR sent after DAD failure
    - packet: hold bind lock when rebinding to fanout hook (CVE-2017-15649)
    - net: change skb->mac_header when Generic XDP calls adjust_head
    - net_sched: always reset qdisc backlog in qdisc_reset()
    - [armhf,arm64] net: stmmac: Cocci spatch "of_table"
    - [arm64] net: qcom/emac: specify the correct size when mapping a DMA buffer
    - vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
    - l2tp: fix race condition in l2tp_tunnel_delete
    - tun: bail out from tun_get_user() if the skb is empty
    - [armhf,arm64] net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple
      vlans
    - [armhf,arm64] net: dsa: Fix network device registration order
    - packet: in packet_do_bind, test fanout with bind_lock held (CVE-2017-15649)
    - packet: only test po->has_vnet_hdr once in packet_snd
    - [armhf,arm64] net: dsa: mv88e6xxx: lock mutex when freeing IRQs
    - net: Set sk_prot_creator when cloning sockets to the right proto
    - net/mlx5e: IPoIB, Fix access to invalid memory address
    - netlink: do not proceed if dump's start() errs
    - ip6_gre: ip6gre_tap device should keep dst
    - ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device in tx path
    - IPv4: early demux can return an error code
    - tipc: use only positive error codes in messages
    - l2tp: fix l2tp_eth module loading
    - socket, bpf: fix possible use after free
    - net: rtnetlink: fix info leak in RTM_GETSTATS call
    - [amd64] bpf: fix bpf_tail_call() x64 JIT
    - usb: gadget: core: fix ->udc_set_speed() logic
    - USB: gadgetfs: Fix crash caused by inadequate synchronization
    - USB: gadgetfs: fix copy_to_user while holding spinlock
    - usb: gadget: udc: atmel: set vbus irqflags explicitly
    - usb-storage: unusual_devs entry to fix write-access regression for
      Seagate external drives
    - usb-storage: fix bogus hardware error messages for ATA pass-thru devices
    - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
    - usb: pci-quirks.c: Corrected timeout values used in handshake
    - USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse
    - USB: dummy-hcd: fix connection failures (wrong speed)
    - USB: dummy-hcd: fix infinite-loop resubmission bug
    - USB: dummy-hcd: Fix erroneous synchronization change
    - USB: devio: Prevent integer overflow in proc_do_submiturb()
    - USB: g_mass_storage: Fix deadlock when driver is unbound
    - USB: uas: fix bug in handling of alternate settings
    - USB: core: harden cdc_parse_cdc_header
    - usb: Increase quirk delay for USB devices
    - USB: fix out-of-bounds in usb_set_configuration
    - usb: xhci: Free the right ring in xhci_add_endpoint()
    - xhci: fix finding correct bus_state structure for USB 3.1 hosts
    - xhci: fix wrong endpoint ESIT value shown in tracing
    - usb: host: xhci-plat: allow sysdev to inherit from ACPI
    - xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A workaround
    - xhci: set missing SuperSpeedPlus Link Protocol bit in roothub descriptor
    - [x86] Revert "xhci: Limit USB2 port wake support for AMD Promontory hosts"
    - [armhf] iio: adc: twl4030: Fix an error handling path in
      'twl4030_madc_probe()'
    - [armhf] iio: adc: twl4030: Disable the vusb3v1 rugulator in the error
      handling path of 'twl4030_madc_probe()'
    - iio: core: Return error for failed read_reg
    - uwb: properly check kthread_run return value
    - uwb: ensure that endpoint is interrupt
    - ksm: fix unlocked iteration over vmas in cmp_and_merge_page()
    - mm, hugetlb, soft_offline: save compound page order before page migration
    - mm, oom_reaper: skip mm structs with mmu notifiers
    - mm: fix RODATA_TEST failure "rodata_test: test data was not read only"
    - mm: avoid marking swap cached page as lazyfree
    - mm: fix data corruption caused by lazyfree page
    - userfaultfd: non-cooperative: fix fork use after free
    - ALSA: compress: Remove unused variable
    - Revert "ALSA: echoaudio: purge contradictions between dimension matrix
      members and total number of members"
    - ALSA: usx2y: Suppress kernel warning at page allocation failures
    - [powerpc*] powernv: Increase memory block size to 1GB on radix
    - [powerpc*] Fix action argument for cpufeatures-based TLB flush
    - percpu: make this_cpu_generic_read() atomic w.r.t. interrupts
    - [x86] intel_th: pci: Add Lewisburg PCH support
    - driver core: platform: Don't read past the end of "driver_override" buffer
    - cgroup: Reinit cgroup_taskset structure before cgroup_migrate_execute()
      returns
    - [x86] Drivers: hv: fcopy: restore correct transfer length
    - [x86] vmbus: don't acquire the mutex in vmbus_hvsock_device_unregister()
    - ftrace: Fix kmemleak in unregister_ftrace_graph
    - ovl: fix error value printed in ovl_lookup_index()
    - ovl: fix dput() of ERR_PTR in ovl_cleanup_index()
    - ovl: fix dentry leak in ovl_indexdir_cleanup()
    - ovl: fix missing unlock_rename() in ovl_do_copy_up()
    - ovl: fix regression caused by exclusive upper/work dir protection
    - [arm64] dt marvell: Fix AP806 system controller size
    - [arm64] Ensure the instruction emulation is ready for userspace
    - HID: rmi: Make sure the HID device is opened on resume
    - HID: i2c-hid: allocate hid buffers for real worst case
    - HID: wacom: leds: Don't try to control the EKR's read-only LEDs
    - HID: wacom: Properly report negative values from Intuos Pro 2 Bluetooth
    - HID: wacom: Correct coordinate system of touchring and pen twist
    - HID: wacom: generic: Send MSC_SERIAL and ABS_MISC when leaving prox
    - HID: wacom: generic: Clear ABS_MISC when tool leaves proximity
    - HID: wacom: Always increment hdev refcount within wacom_get_hdev_data
    - HID: wacom: bits shifted too much for 9th and 10th buttons
    - btrfs: avoid overflow when sector_t is 32 bit
    - Btrfs: fix overlap of fs_info::flags values
    - dm crypt: reject sector_size feature if device length is not aligned to it
    - dm ioctl: fix alignment of event number in the device list
    - dm crypt: fix memory leak in crypt_ctr_cipher_old()
    - [powerpc*] KVM: Book3S: Fix server always zero from kvmppc_xive_get_xive()
    - [x86] kvm: Avoid async PF preempting the kernel incorrectly
    - iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD
    - scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP
    - scsi: sd: Do not override max_sectors_kb sysfs setting
    - brcmfmac: setup passive scan if requested by user-space
    - [x86] drm/i915: always update ELD connector type after get modes
    - [x86] drm/i915/bios: ignore HDMI on port A
    - bsg-lib: fix use-after-free under memory-pressure
    - nvme-pci: Use PCI bus address for data/queues in CMB
    - mmc: core: add driver strength selection when selecting hs400es
    - nl80211: Define policy for packet pattern attributes
    - [armhf] clk: samsung: exynos4: Enable VPLL and EPLL clocks for
      suspend/resume cycle
    - udp: perform source validation for mcast early demux
    - udp: fix bcast packet reception
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.7
    - watchdog: Revert "iTCO_wdt: all versions count down twice"
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8
    - USB: dummy-hcd: Fix deadlock caused by disconnect detection
    - [mips*] math-emu: Remove pr_err() calls from fpu_emu()
    - [mips*] bpf: Fix uninitialised target compiler error
    - [x86] mei: always use domain runtime pm callbacks.
    - [armhf] dmaengine: edma: Align the memcpy acnt array size with the
      transfer
    - [armhf] dmaengine: ti-dma-crossbar: Fix possible race condition with
      dma_inuse
    - NFS: Fix uninitialized rpc_wait_queue
    - nfs/filelayout: fix oops when freeing filelayout segment
    - HID: usbhid: fix out-of-bounds bug
    - crypto: skcipher - Fix crash on zero-length input
    - crypto: shash - Fix zero-length shash ahash digest crash
    - [x86] KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
    - [x86] pinctrl/amd: Fix build dependency on pinmux code
    - [x86] iommu/amd: Finish TLB flush in amd_iommu_unmap()
    - device property: Track owner device of device property
    - Revert "vmalloc: back off when the current task is killed"
    - fs/mpage.c: fix mpage_writepage() for pages with buffers
    - ALSA: usb-audio: Kill stray URB at exiting
    - ALSA: seq: Fix copy_from_user() call inside lock
    - ALSA: caiaq: Fix stray URB at probe error path
    - ALSA: line6: Fix NULL dereference at podhd_disconnect()
    - ALSA: line6: Fix missing initialization before error path
    - ALSA: line6: Fix leftover URB at error-path during probe
    - drm/atomic: Unref duplicated drm_atomic_state in
      drm_atomic_helper_resume()
    - [x86] drm/i915/edp: Get the Panel Power Off timestamp after panel is off
    - [x86] drm/i915: Read timings from the correct transcoder in
      intel_crtc_mode_get()
    - [x86] drm/i915/bios: parse DDI ports also for CHV for HDMI DDC pin and DP
      AUX channel
    - [x86] drm/i915: Use crtc_state_is_legacy_gamma in intel_color_check
    - usb: gadget: configfs: Fix memory leak of interface directory data
    - usb: gadget: composite: Fix use-after-free in
      usb_composite_overwrite_options
    - [arm64] PCI: aardvark: Move to struct pci_host_bridge IRQ mapping
      functions
    - [armhf,armhf] Revert "PCI: tegra: Do not allocate MSI target memory"
    - direct-io: Prevent NULL pointer access in submit_page_section
    - fix unbalanced page refcounting in bio_map_user_iov (CVE-2017-12190)
    - more bio_map_user_iov() leak fixes
    - bio_copy_user_iov(): don't ignore ->iov_offset
    - perf script: Add missing separator for "-F ip,brstack" (and brstackoff)
    - genirq/cpuhotplug: Enforce affinity setting on startup of managed irqs
    - genirq/cpuhotplug: Add sanity check for effective affinity mask
    - USB: serial: cp210x: fix partnum regression
    - USB: serial: console: fix use-after-free on disconnect
    - USB: serial: console: fix use-after-free after failed setup
    - RAS/CEC: Use the right length for "cec_disable"
    - [x86] alternatives: Fix alt_max_short macro to really be a max()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.9
    - [x86] apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on CPUs
      without the feature
    - [x86] apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on
      hypervisors
    - [armhf,arm64] perf pmu: Unbreak perf record for arm/arm64 with events
      with explicit PMU
    - mm: page_vma_mapped: ensure pmd is loaded with READ_ONCE outside of lock
    - HID: hid-elecom: extend to fix descriptor for HUGE trackball
    - [x86] Drivers: hv: vmbus: Fix rescind handling issues
    - [x86] Drivers: hv: vmbus: Fix bugs in rescind handling
    - [x86] vmbus: simplify hv_ringbuffer_read
    - [x86] vmbus: refactor hv_signal_on_read
    - [x86] vmbus: eliminate duplicate cached index
    - [x86] vmbus: more host signalling avoidance
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
    - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
    - usb: hub: Allow reset retry for USB2 devices on connect bounce
    - ALSA: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital
    - can: gs_usb: fix busy loop if no more TX context is available
    - scsi: qla2xxx: Fix uninitialized work element
    - nbd: don't set the device size until we're connected
    - [s390x] cputime: fix guest/irq/softirq times after CPU hotplug
    - [hppa/parisc] Fix double-word compare and exchange in LWS code on 32-bit
      kernels
    - [hppa] Fix detection of nonsynchronous cr16 cycle counters
    - iio: dummy: events: Add missing break
    - [armhf] usb: musb: sunxi: Explicitly release USB PHY on exit
    - [armhf] USB: musb: fix session-bit runtime-PM quirk
    - [armhf] USB: musb: fix late external abort on suspend
    - [armhf] usb: musb: musb_cppi41: Fix the address of teardown and autoreq
      registers
    - [armhf] usb: musb: musb_cppi41: Fix cppi41_set_dma_mode() for DA8xx
    - [armhf] usb: musb: musb_cppi41: Configure the number of channels for DA8xx
    - [armhf] usb: musb: Check for host-mode using is_host_active() on reset
      interrupt
    - xhci: Identify USB 3.1 capable hosts by their port protocol capability
    - xhci: Cleanup current_cmd in xhci_cleanup_command_queue()
    - usb: xhci: Reset halted endpoint if trb is noop
    - usb: xhci: Handle error condition in xhci_stop_device()
    - can: esd_usb2: Fix can_dlc value for received RTR, frames
    - can: af_can: can_pernet_init(): add missing error handling for kzalloc
      returning NULL
    - KEYS: encrypted: fix dereference of NULL user_key_payload
    - mmc: sdhci-pci: Fix default d3_retune for Intel host controllers
    - [x86] drm/i915: Use bdw_ddi_translations_fdi for Broadwell
    - drm/nouveau/kms/nv50: fix oops during DP IRQ handling on non-MST boards
    - drm/nouveau/bsp/g92: disable by default
    - drm/nouveau/mmu: flush tlbs before deleting page tables
    - media: cec: Respond to unregistered initiators, when applicable
    - media: dvb: i2c transfers over usb cannot be done from stack
    - ALSA: seq: Enable 'use' locking in all configurations
    - ALSA: hda: Remove superfluous '-' added by printk conversion
    - ALSA: hda: Abort capability probe at invalid register read
    - [x86] i2c: ismt: Separate I2C block read from SMBus block read
    - [x86] i2c: piix4: Fix SMBus port selection for AMD Family 17h chips
    - Revert "tools/power turbostat: stop migrating, unless '-m'"
    - brcmfmac: Add check for short event packets
    - brcmsmac: make some local variables 'static const' to reduce stack size
    - [armhf] dts: sun6i: Fix endpoint IDs in second display pipeline
    - [i386] clockevents/drivers/cs5535: Improve resilience to spurious
      interrupts
    - rtlwifi: rtl8821ae: Fix connection lost problem
    - [x86] microcode/intel: Disable late loading on model 79
    - lib/digsig: fix dereference of NULL user_key_payload
    - fscrypt: fix dereference of NULL user_key_payload
    - ecryptfs: fix dereference of NULL user_key_payload
    - KEYS: Fix race between updating and finding a negative key
      (CVE-2017-15951)
    - FS-Cache: fix dereference of NULL user_key_payload
    - KEYS: don't let add_key() update an uninstantiated key (CVE-2017-15299)
    - pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.
    - [arm64] dts: rockchip: correct vqmmc voltage for rk3399 platforms
    - ALSA: hda - Fix incorrect TLV callback check introduced during set_fs()
      removal
    - iomap_dio_rw: Allocate AIO completion queue before submitting dio
    - xfs: don't unconditionally clear the reflink flag on zero-block files
    - xfs: evict CoW fork extents when performing finsert/fcollapse
    - fs/xfs: Use %pS printk format for direct addresses
    - xfs: report zeroed or not correctly in xfs_zero_range()
    - xfs: update i_size after unwritten conversion in dio completion
    - xfs: perag initialization should only touch m_ag_max_usable for AG 0
    - xfs: Capture state of the right inode in xfs_iflush_done
    - xfs: always swap the cow forks when swapping extents
    - xfs: handle racy AIO in xfs_reflink_end_cow
    - xfs: Don't log uninitialised fields in inode structures
    - xfs: move more RT specific code under CONFIG_XFS_RT
    - xfs: don't change inode mode if ACL update fails
    - xfs: reinit btree pointer on attr tree inactivation walk
    - xfs: handle error if xfs_btree_get_bufs fails
    - xfs: cancel dirty pages on invalidation
    - xfs: trim writepage mapping to within eof
    - xfs: move two more RT specific functions into CONFIG_XFS_RT

  [ Ben Hutchings ]
  * [arm64] brcmfmac: Enable BRCMFMAC_SDIO (Closes: #877911)
  * Update build dependencies on libbabeltrace[,-ctf}-dev
  * linux-kbuild: Include scripts/ld-version.sh, needed for powerpc 64-bit
    modules
  * dax: Avoid most ABI changes in 4.13.5
  * SCSI: Avoid ABI change in 4.13.6
  * [x86] kvm: Ignore ABI change in 4.13.6
  * inet, l2tp, snd-seq, usb/gadget: Ignore ABI changes
  * [armel,armhf] mbus: Ignore ABI change in 4.13.10
  * Revert "bpf: one perf event close won't free bpf program attached ..."
    to avoid an ABI change
  * [armel] security: Enable SECURITY_APPARMOR and disable SECURITY_SELINUX
  * security: Enable DEFAULT_SECURITY_APPARMOR
  * mac80211: Avoid ABI change in 4.13.5
  * [x86] rmi4: Enable RMI4_SMB as module (Closes: #875621)
  * KEYS: Limit ABI change in 4.13.10

linux (4.13.4-2parrot0) testing; urgency=medium

  * Import new Debian version.

linux (4.13.4-1parrot4) testing; urgency=medium

  * Import new Debian version

linux (4.13.4-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.3
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4

  [ Ben Hutchings ]
  * [armhf,arm64] mmc: Enable MMC_BCM2835 (Closes: #845422)
  * [arm64ilp32] Build a linux-libc-dev package (Closes: #874536)
  * [mips*r6*] Re-enable these architectures, now that dak knows about them
    (Closes: #825024)
  * [x86] Enable INTEL_CHT_INT33FE as module (Closes: #873164)
  * [armhf] Enable AXP20X_ADC, CHARGER_AXP20X, BATTERY_AXP20X, GPIO_AXP209,
    AXP288_CHARGER, AXP288_FUEL_GAUGE, EXTCON_AXP288, AXP288_ADC as modules
    (Closes: #873038)
  * thp: Enable TRANSPARENT_HUGEPAGE_ALWAYS instead of
    TRANSPARENT_HUGEPAGE_MADVISE
  * ALSA: Enable SND_OSSEMUL, a new dependency of SND_{MIXER,PCM}_OSS
  * [armel] rtc: Disable RTC_NVMEM
  * [x86] hyperv-daemons: Use pid file name in init script status operation
  * Update policy version to 4.1.1:
    - linux-doc: Build an empty package when the nodoc profile is used
    - [x86] hyperv-daemons: Create pid files under /run, not /var/run
    - Change all binary packages with priority: extra to priority: optional
    - Install copyright file (and some other documentation) when the nodoc
      profile is used
  * debian/control: Move many build dependencies to Build-Depends-Arch field
  * debian/control: Remove obsolete workarounds and alternate build deps
  * usbip: Stop building broken libusbip-dev package
  * Rename lintian-overrides template files to be consistent
  * linux-image-dbg: Override lintian errors binary-from-other-architecture and
    shlib-without-PT_GNU_STACK-section for vDSOs
  * [armhf] dts: exynos: Add dwc3 SUSPHY quirk (Closes: #843448)
  * liblockdep: Make missing function declarations fatal errors, to catch use
    of missing kernel APIs
  * liblockdep: Define pr_cont()
  * Set ABI to 1

  [ Uwe Kleine-König ]
  * [arm64] really enable NET_DSA_MV88E6XXX for Espressobin

  [ John Paul Adrian Glaubitz ]
  * [m68k] Enable CONFIG_PATA_FALCON as module.

  [ Salvatore Bonaccorso ]
  * fix infoleak in waitid(2) (CVE-2017-14954)

linux (4.13.2-1~exp1) experimental; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2

  [ Uwe Kleine-König ]
  * USB/misc: reenable UCSI which got lost due to upstream changes
  * update kernel config templates for upstream changes
  * [amd64] enable CONFIG_SPI_PXA2XX for Apple MacBook Pro (Closes: #872004)

linux (4.13.1-1~exp1) experimental; urgency=medium

  * New upstream release: https://kernelnewbies.org/Linux_4.13
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.1

  [ Roger Shimizu ]
  * debian/bin/buildcheck.py:
    Add check for uncompressed Image size, which is necessary for
    armel/marvell flavour currently.

  [ Ben Hutchings ]
  * [mips*/octeon] mmc: Enable MMC_CAVIUM_OCTEON as module (Closes: #800594)

  [ Uwe Kleine-König ]
  * [arm64] enable NET_DSA_MV88E6XXX for Espressobin.

linux (4.13~rc7-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Ben Hutchings ]
  * [sh4] Do not use hyphen in exported variable names (fixes FTBFS)
  * aufs: Update support patchset to aufs4.x-rcN-20170828

  [ Roger Shimizu ]
  * [armel] Disable CONFIG_STRICT_KERNEL_RWX, which will save about 3MB
    on linux Image (before compression). (Closes: #870185)
  * [armel] Change MTD_OF_PARTS, MTD_BLOCK, and MTD_PHYSMAP_OF from
    built-in to modules.
    Also change all RTC related except RTC_DRV_MV, which includes
    RTC_DRV_DS1307, RTC_DRV_RS5C372, RTC_DRV_PCF8563, RTC_DRV_M41T80,
    and RTC_DRV_S35390A, to modules. Because most marvell boards use
    RTC_DRV_MV. (above two fix FTBFS)

linux (4.13~rc5-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Ben Hutchings ]
  * cpupower: Add/update definition of MSRHEADER macro for turbostat and
    x86_energy_perf_policy
  * Remove support for upstream DocBook-based documentation, including the
    linux-manual package
  * liblockdep: Re-enable liblockdep packages following upstream fixes

linux (4.12.13-1parrot13) testing; urgency=medium

  * Import new upstream release.

linux (4.12.13-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13
    - mtd: nand: make Samsung SLC NAND usable again
    - mtd: nand: hynix: add support for 20nm NAND chips
    - [armhf] mtd: nand: mxc: Fix mxc_v1 ooblayout
    - nvme-fabrics: generate spec-compliant UUID NQNs
    - btrfs: resume qgroup rescan on rw remount
    - rtlwifi: btcoexist: Fix breakage of ant_sel for rtl8723be
    - radix-tree: must check __radix_tree_preload() return value
    - mm: kvfree the swap cluster info if the swap file is unsatisfactory
    - mm/swapfile.c: fix swapon frontswap_map memory leak on error
    - mm/memory.c: fix mem_cgroup_oom_disable() call missing
    - [i386] ALSA: msnd: Optimize / harden DSP and MIDI loops
    - [x86] KVM: SVM: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest
    - rt2800: fix TX_PIN_CFG setting for non MT7620 chips
    - Bluetooth: Properly check L2CAP config option output buffer length
      (CVE-2017-1000251) (Closes: #875881)
    - [arm64] dts: marvell: armada-37xx: Fix GIC maintenance interrupt
    - [armel,armhf] 8692/1: mm: abort uaccess retries upon fatal signal
    - NFS: Fix 2 use after free issues in the I/O code
    - NFS: Sync the correct byte range during synchronous writes
    - NFSv4: Fix up mirror allocation
    - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
      (CVE-2017-14340)

  [ Salvatore Bonaccorso ]
  * sctp: Avoid out-of-bounds reads from address storage (CVE-2017-7558)
  * scsi: qla2xxx: Fix an integer overflow in sysfs code (CVE-2017-14051)
  * Add ABI reference for 4.12.0-2

  [ Ben Hutchings ]
  * nl80211: check for the required netlink attributes presence (CVE-2017-12153)
  * [x86] kvm: nVMX: Don't allow L2 to access the hardware CR8 (CVE-2017-12154)
  * video: fbdev: aty: do not leak uninitialized padding in clk to userspace
    (CVE-2017-14156)
  * scsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly
    (CVE-2017-14489)
  * packet: Don't write vnet header beyond end of buffer (CVE-2017-14497)
  * [x86] KVM: VMX: Do not BUG() on out-of-bounds guest IRQ (CVE-2017-1000252)
  * nfs: Ignore ABI change

linux (4.12.12-2parrot12) testing; urgency=medium

  * Import new Debian version.

linux (4.12.12-2) unstable; urgency=medium



linux (4.12.12-2parrot12) testing; urgency=medium

  * Import new Debian version.

linux (4.12.12-2) unstable; urgency=medium

  * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
    error triggered by a ReSTified copy of the GFDL

linux (4.12.12-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.7
    - ppp: Fix false xmit recursion detect with two ppp devices
    - ppp: fix xmit recursion detection on ppp channels
    - tcp: avoid setting cwnd to invalid ssthresh after cwnd reduction states
    - net: fix keepalive code vs TCP_FASTOPEN_CONNECT
    - ipv6: set rt6i_protocol properly in the route when it is installed
    - [s390x] bpf: fix jit branch offset related to ldimm64
    - net/mlx4_en: don't set CHECKSUM_COMPLETE on SCTP packets
    - net: sched: set xt_tgchk_param par.net properly in ipt_init_target
    - net: sched: set xt_tgchk_param par.nft_compat as 0 in ipt_init_target
    - tcp: fastopen: tcp_connect() must refresh the route
    - qmi_wwan: fix NULL deref on disconnect
    - net: avoid skb_warn_bad_offload false positives on UFO
    - igmp: Fix regression caused by igmp sysctl namespace code.
    - scsi: sg: only check for dxfer_len greater than 256M
    - btrfs: Remove false alert when fiemap range is smaller than on-disk
      extent
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.8
    - mm: ratelimit PFNs busy info message
    - mm: fix list corruptions on shmem shrinklist
    - futex: Remove unnecessary warning from get_futex_key
    - xfs: Fix leak of discard bio
    - [armhf] pinctrl: armada-37xx: Fix number of pin in south bridge
    - mtd: nand: Fix timing setup for NANDs that do not support SET FEATURES
    - mtd: nand: Declare tBERS, tR and tPROG as u64 to avoid integer overflow
    - iscsi-target: fix memory leak in iscsit_setup_text_cmd()
    - iscsi-target: Fix iscsi_np reset hung task during parallel delete
    - usb-storage: fix deadlock involving host lock and scsi_done
    - target: Fix node_acl demo-mode + uncached dynamic shutdown regression
    - fuse: initialize the flock flag in fuse_file on allocation
    - i2c: designware: Some broken DSTDs use 1MiHz instead of 1MHz
    - nand: fix wrong default oob layout for small pages using soft ecc
    - mmc: mmc: correct the logic for setting HS400ES signal voltage
    - nfs/flexfiles: fix leak of nfs4_ff_ds_version arrays
    - [armhf] drm/etnaviv: Fix off-by-one error in reloc checking
    - [x86] drm/i915: Fix out-of-bounds array access in bdw_load_gamma_lut
    - [armhf] usb: musb: fix tx fifo flush handling again
    - USB: hcd: Mark secondary HCD as dead if the primary one died
    - [armhf] iio: accel: st_accel: add SPI-3wire support
    - [x86] iio: accel: bmc150: Always restore device to normal mode after
      suspend-resume
    - iio: light: tsl2563: use correct event code
    - staging: comedi: comedi_fops: do not call blocking ops when !TASK_RUNNING
    - uas: Add US_FL_IGNORE_RESIDUE for Initio Corporation INIC-3069
    - firmware: fix batched requests - wake all waiters
    - firmware: fix batched requests - send wake up on failure on direct lookups
    - firmware: avoid invalid fallback aborts by using killable wait
    - block: Make blk_mq_delay_kick_requeue_list() rerun the queue at a quiet
      time
    - USB: Check for dropped connection before switching to full speed
    - usb: core: unlink urbs from the tail of the endpoint's urb_list
    - usb: quirks: Add no-lpm quirk for Moshi USB to Ethernet Adapter
    - usb:xhci:Add quirk for Certain failing HP keyboard on reset after resume
    - PCI: Protect pci_error_handlers->reset_notify() usage with device_lock()
    - xhci: Reset Renesas uPD72020x USB controller for 32-bit DMA issue
    - pnfs/blocklayout: require 64-bit sector_t
    - [x86] pinctrl: cherryview: Add Setzer models to the Chromebook DMI quirk
    - [armhf] pinctrl: sunxi: add a missing function of A10/A20 pinctrl driver
    - [x86] pinctrl: intel: merrifield: Correct UART pin lists
    - [armhf] pinctrl: samsung: Remove bogus irq_[un]mask from resource
      management
    - [arm64] pinctrl: meson-gxbb: Add missing GPIODV_18 pin entry
    - [arm64] pinctrl: meson-gxl: Add missing GPIODV_18 pin entry
    - [mips*] Revert "MIPS: Don't unnecessarily include kmalloc.h into
      <asm/cache.h>."
    - [mips*/octeon] Fix broken EDAC driver.
    - [ppc64el] Fix /proc/cpuinfo revision for POWER9 DD2
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9
    - audit: Fix use after free in audit_remove_watch_rule()
    - [hppa] pci memory bar assignment fails with 64bit kernels on dino/cujo
    - [x86] crypto: sha1 - Fix reads beyond the number of blocks passed
    - [x86] drm/i915: Perform an invalidate prior to executing golden
      renderstate
    - drm/amdgpu: save list length when fence is signaled
    - md: fix test in md_write_start()
    - md: always clear ->safemode when md_check_recovery gets the mddev lock.
    - MD: not clear ->safemode for external metadata array
    - ALSA: seq: 2nd attempt at fixing race creating a queue
    - ALSA: usb-audio: Apply sample rate quirk to Sennheiser headset
    - ALSA: usb-audio: Add mute TLV for playback volumes on C-Media devices
    - ALSA: usb-audio: add DSD support for new Amanero PID
    - mm: discard memblock data later
    - slub: fix per memcg cache leak on css offline
    - mm: fix double mmap_sem unlock on MMF_UNSTABLE enforced SIGBUS
    - mm/cma_debug.c: fix stack corruption due to sprintf usage
    - mm/mempolicy: fix use after free when calling get_mempolicy
    - mm/vmalloc.c: don't unconditonally use __GFP_HIGHMEM
    - [amd64,arm64] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes
    - xen: fix bio vec merging (CVE-2017-12134) (Closes: #866511)
    - [armhf] ARM: dts: imx6qdl-nitrogen6_som2: fix PCIe reset
    - blk-mq-pci: add a fallback when pci_irq_get_affinity returns NULL
    - [powerpc*] Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC
    - xen-blkfront: use a right index when checking requests
    - [x86] perf: Fix RDPMC vs. mm_struct tracking
    - [amd64] asm: Clear AC on NMI entries
    - [x86] Fix norandmaps/ADDR_NO_RANDOMIZE
    - [x86] elf: Remove the unnecessary ADDR_NO_RANDOMIZE checks
    - genirq: Restore trigger settings in irq_modify_status()
    - genirq/ipi: Fixup checks against nr_cpu_ids
    - kernel/watchdog: Prevent false positives with turbo modes
    - Sanitize 'move_pages()' permission checks (CVE-2017-14140)
    - pids: make task_tgid_nr_ns() safe
    - debug: Fix WARN_ON_ONCE() for modules
    - usb: optimize acpi companion search for usb port devices
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10
    - [sparc64] remove unnecessary log message
    - bonding: require speed/duplex only for 802.3ad, alb and tlb
    - bonding: ratelimit failed speed/duplex update warning
    - af_key: do not use GFP_KERNEL in atomic contexts
    - dccp: purge write queue in dccp_destroy_sock()
    - dccp: defer ccid_hc_tx_delete() at dismantle time
    - ipv4: fix NULL dereference in free_fib_info_rcu()
    - net_sched/sfq: update hierarchical backlog when drop packet
    - net_sched: remove warning from qdisc_hash_add
    - bpf: fix bpf_trace_printk on 32 bit archs
    - net: igmp: Use ingress interface rather than vrf device
    - openvswitch: fix skb_panic due to the incorrect actions attrlen
    - ptr_ring: use kmalloc_array()
    - ipv4: better IP_MAX_MTU enforcement
    - nfp: fix infinite loop on umapping cleanup
    - tun: handle register_netdevice() failures properly
    - sctp: fully initialize the IPv6 address in sctp_v6_to_addr()
    - tipc: fix use-after-free
    - ipv6: reset fn->rr_ptr when replacing route
    - ipv6: repair fib6 tree in failure case
    - tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP
    - net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled
    - irda: do not leak initialized list.dev to userspace
    - net: sched: fix NULL pointer dereference when action calls some targets
    - net_sched: fix order of queue length updates in qdisc_replace()
    - bpf, verifier: add additional patterns to evaluate_reg_imm_alu
    - bpf: fix mixed signed/unsigned derived min/max value bounds
    - bpf/verifier: fix min/max handling in BPF_SUB
    - Input: ALPS - fix two-finger scroll breakage in right side on ALPS
      touchpad
    - [s390x] KVM: sthyi: fix sthyi inline assembly
    - [s390x] KVM: sthyi: fix specification exception detection
    - [x86] KVM: simplify handling of PKRU
    - [x86] KVM, pkeys: do not use PKRU value in vcpu->arch.guest_fpu.state
    - [x86] KVM: block guest protection keys unless the host has them enabled
    - ALSA: core: Fix unexpected error at replacing user TLV
    - ALSA: firewire: fix NULL pointer dereference when releasing
      uninitialized data of iso-resource
    - ALSA: firewire-motu: destroy stream data surely at failure of card
      initialization
    - PM/hibernate: touch NMI watchdog when creating snapshot
    - mm, shmem: fix handling /sys/kernel/mm/transparent_hugepage/shmem_enabled
    - dax: fix deadlock due to misaligned PMD faults
    - i2c: designware: Fix system suspend
    - mm/madvise.c: fix freeing of locked page with MADV_FREE
    - fork: fix incorrect fput of ->exe_file causing use-after-free
    - mm/memblock.c: reversed logic in memblock_discard()
    - [arm64] fpsimd: Prevent registers leaking across exec
    - drm: Fix framebuffer leak
    - drm: Release driver tracking before making the object available again
    - [armhf] drm/sun4i: Implement drm_driver lastclose to restore fbdev
      console
    - drm/atomic: Handle -EDEADLK with out-fences correctly
    - drm/atomic: If the atomic check fails, return its value first
    - [x86] drm/i915/vbt: ignore extraneous child devices for a port
    - [x86] drm/i915/gvt: Fix the kernel null pointer error
    - Revert "drm/amdgpu: fix vblank_time when displays are off"
    - ACPI: device property: Fix node lookup in
      acpi_graph_get_child_prop_value()
    - tracing: Call clear_boot_tracer() at lateinit_sync
    - tracing: Missing error code in tracer_alloc_buffers()
    - tracing: Fix kmemleak in tracing_map_array_free()
    - tracing: Fix freeing of filter in create_filter() when set_str is false
    - RDMA/uverbs: Initialize cq_context appropriately
    - cifs: Fix df output for users with quota limits
    - cifs: return ENAMETOOLONG for overlong names in
      cifs_open()/cifs_lookup()
    - nfsd: Limit end of page list when decoding NFSv4 WRITE
    - ring-buffer: Have ring_buffer_alloc_read_page() return error on offline
      CPU
    - virtio_pci: fix cpu affinity support
    - ftrace: Check for null ret_stack on profile function graph entry
      function
    - perf/core: Fix group {cpu,task} validation
    - timers: Fix excessive granularity of new timers after a nohz idle
    - [x86] mm: Fix use-after-free of ldt_struct
    - net: sunrpc: svcsock: fix NULL-pointer exception
    - netfilter: expect: fix crash when putting uninited expectation
    - netfilter: nat: fix src map lookup
    - netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv
    - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread
    - Bluetooth: cmtp: fix possible might sleep error in cmtp_session
    - Bluetooth: bnep: fix possible might sleep error in bnep_session
    - iio: hid-sensor-trigger: Fix the race with user space powering up
      sensors
    - iommu: Fix wrong freeing of iommu_device->dev
    - Clarify (and fix) MAX_LFS_FILESIZE macros
    - ACPI: EC: Fix regression related to wrong ECDT initialization order
    - [powerpc*] mm: Ensure cpumask update is ordered
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.11
    - [arm64] mm: abort uaccess retries upon fatal signal
    - [x86] io: Add "memory" clobber to insb/insw/insl/outsb/outsw/outsl
    - [mips*] irqchip: mips-gic: SYNC after enabling GIC region
    - Input: synaptics - fix device info appearing different on reconnect
    - Input: xpad - fix PowerA init quirk for some gamepad models
    - crypto: chacha20 - fix handling of chunked input
    - [x86] i2c: ismt: Don't duplicate the receive length for block reads
    - [x86] i2c: ismt: Return EMSGSIZE for block reads with bogus length
    - crypto: algif_skcipher - only call put_page on referenced and used pages
    - mm, uprobes: fix multiple free of ->uprobes_state.xol_area
    - mm, madvise: ensure poisoned pages are removed from per-cpu lists
    - ceph: fix readpage from fscache
    - cpumask: fix spurious cpumask_of_node() on non-NUMA multi-node configs
    - cpuset: Fix incorrect memory_pressure control file mapping
    - CIFS: Fix maximum SMB2 header size
    - CIFS: remove endian related sparse warning
    - dm mpath: do not lock up a CPU with requeuing activity
    - [x86] drm/vmwgfx: Fix F26 Wayland screen update issue
    - [arm64, armhf] wl1251: add a missing spin_lock_init()
    - [arm64] mmc: sdhci-xenon: add set_power callback
    - lib/mpi: kunmap after finishing accessing buffer
    - xfrm: policy: check policy direction value
    - drm/ttm: Fix accounting error when fail to get pages for pool
    - nvme: fix the definition of the doorbell buffer config support bit
    - drm/nouveau/i2c/gf119-: add support for address-only transactions
    - epoll: fix race between ep_poll_callback(POLLFREE) and
      ep_free()/ep_remove()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.12
    - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
    - USB: serial: option: add support for D-Link DWM-157 C1
    - usb: Add device quirk for Logitech HD Pro Webcam C920-C
    - usb:xhci:Fix regression when ATI chipsets detected
    - [armhf] USB: musb: fix external abort on suspend
    - USB: core: Avoid race of async_completed() w/ usbdev_release()
    - [x86] staging/rts5208: fix incorrect shift to extract upper nybble
    - iio: adc: ti-ads1015: fix incorrect data rate setting update
    - iio: adc: ti-ads1015: fix scale information for ADS1115
    - iio: adc: ti-ads1015: enable conversion when CONFIG_PM is not set
    - iio: adc: ti-ads1015: avoid getting stale result after runtime resume
    - iio: adc: ti-ads1015: don't return invalid value from buffer setup
      callbacks
    - iio: adc: ti-ads1015: add adequate wait time to get correct conversion
    - driver core: bus: Fix a potential double free
    - HID: wacom: Do not completely map WACOM_HID_WD_TOUCHRINGSTATUS usage
    - [x86] intel_th: pci: Add Cannon Lake PCH-H support
    - [x86] intel_th: pci: Add Cannon Lake PCH-LP support
    - ath10k: fix memory leak in rx ring buffer allocation
    - Input: trackpoint - assume 3 buttons when buttons detection fails
    - rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
    - Bluetooth: Add support of 13d3:3494 RTL8723BE device
    - iwlwifi: pci: add new PCI ID for 7265D
    - dlm: avoid double-free on error path in dlm_device_{register,unregister}
    - mwifiex: correct channel stat buffer overflows
    - [s390x] mm: avoid empty zero pages for KVM guests to avoid postcopy
      hangs
    - [s390x] mm: fix BUG_ON in crst_table_upgrade
    - drm/nouveau/pci/msi: disable MSI on big-endian platforms by default
    - drm/nouveau: Fix error handling in nv50_disp_atomic_commit
    - workqueue: Fix flag collision
    - ahci: don't use MSI for devices with the silly Intel NVMe remapping
      scheme
    - cs5536: add support for IDE controller variant
    - scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
    - scsi: sg: recheck MMAP_IO request length with lock held
    - of/device: Prevent buffer overflow in of_device_modalias()
    - rtlwifi: Fix memory leak when firmware request fails
    - rtlwifi: Fix fallback firmware loading

  [ Ben Hutchings ]
  * [alpha] udeb: Add i2c-modules (fixes FTBFS)
  * cpupower: Add/update definition of MSRHEADER macro for turbostat and
    x86_energy_perf_policy (Closes: #872414)
  * Bump ABI to 2

  [ Roger Shimizu ]
  * [armel] Disable CONFIG_STRICT_KERNEL_RWX, which will save about 3MB
    on linux Image (before compression). (Closes: #870185)

  [ Uwe Kleine-König ]
  * mtd: nandsim: remove debugfs entries in error path

linux (4.12.6-1parrot6) testing; urgency=medium

  * Import new Debian release.

linux (4.12.6-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3
    -  brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
       (CVE-2017-7541)
    - [sparc64] Adding asm-prototypes.h for genksyms to generate crc
    - [sparc64] sed regex in Makefile.build requires line break between
      exported symbols
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4
    - f2fs: sanity check checkpoint segno and blkoff (CVE-2017-10663)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.5
    - dentry name snapshots (CVE-2017-7533)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.6
    - saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
    - ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)

  [ Ben Hutchings ]
  * media: Enable USB_RAINSHADOW_CEC as module (see #868511)
  * Clean up symbol version fixes for symbols exported from asm
    (fixes FTBFS on sparc64):
    - [alpha] Un-revert "alpha: move exports to actual definitions"
    - [alpha] Restore symbol versions for symbols exported from assembly
    - [m68k] Un-revert "m68k: move exports to definitions"
    - [sparc64] Un-revert "sparc: move exports to definitions"
  * [mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
  * [armhf] Revert "gpu: host1x: Add IOMMU support"
  * [armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
  * [i386] perf tools: Fix unwind build (fixes FTBFS)
  * debian/control: Fix version in dependencies on arch-independent
    linux-headers-*-common* (Closes: #869511)
  * xfrm: policy: check policy direction value (CVE-2017-11600)
  * rtlwifi: Fix memory leak when firmware request fails
  * rtlwifi: Fix fallback firmware loading (Closes: #869084)
  * [arm64] video: Enable FRAMEBUFFER_CONSOLE (Closes: #870071)
  * integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS
    (Closes: #869565)
  * [x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module
    (Closes: #869372)
  * blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
  * blk-mq: Enable IOSCHED_BFQ as module (Closes: #869028); enable
    BFQ_GROUP_IOSCHED
  * bfq: Enable auto-loading when built as a module
  * netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules
    (Closes: #868803)
  * [amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base
    (Closes: #869090)

  [ Salvatore Bonaccorso ]
  * packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
  * udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
  * Set ABI to 1

  [ Uwe Kleine-König ]
  * [arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin and enable
    respective device in its device tree (Closes: #871049)

  [ Roger Shimizu ]
  * [armel] Change NAND related stuff to modules (fixes FTBFS)

linux (4.12.2-1~exp1) experimental; urgency=medium

  * New upstream release: https://kernelnewbies.org/Linux_4.12
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.2

  [ Ben Hutchings ]
  * Add script to regenerate lockdown patch series from git
  * [rt] Disable until it is updated for 4.12 or later
  * scripts/mod: Update modpost wrapper for 4.12
  * Set ABI name to trunk

linux (4.11.11-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.7
    - fs: pass on flags in compat_writev
    - configfs: Fix race between create_link and configfs_rmdir
    - can: gs_usb: fix memory leak in gs_cmd_reset()
    - ila_xlat: add missing hash secret initialization
    - cpufreq: conservative: Allow down_threshold to take values from 1 to 10
    - vb2: Fix an off by one error in 'vb2_plane_vaddr'
    - cec: race fix: don't return -ENONET in cec_receive()
    - selinux: fix double free in selinux_parse_opts_str()
    - mac80211: don't look at the PM bit of BAR frames
    - mac80211/wpa: use constant time memory comparison for MACs
    - [x86] drm/amdgpu: Fix overflow of watermark calcs at > 4k resolutions.
    - [x86] drm/i915: Fix GVT-g PVINFO version compatibility check
    - [x86] drm/i915: Fix scaling check for 90/270 degree plane rotation
    - [x86] drm/i915: Do not sync RCU during shrinking
    - mac80211: fix IBSS presp allocation size
    - mac80211: strictly check mesh address extension mode
    - mac80211: fix dropped counter in multiqueue RX
    - mac80211: don't send SMPS action frame in AP mode when not needed
    - [arm64, armhf] drm/vc4: Fix OOPSes from trying to cache a partially
      constructed BO.
    - serial: 8250_lpss: Unconditionally set PCI master for Quark
    - [sh4] serial: sh-sci: Fix (AUTO)RTS in sci_init_pins()
    - [sh4] serial: sh-sci: Fix late enablement of AUTORTS
    - [x86] mm/32: Set the '__vmalloc_start_set' flag in initmem_init()
    - [armhf] mfd: axp20x: Add support for dts property "xpowers,master-mode"
    - [armhf] dt-bindings: mfd: axp20x: Add "xpowers,master-mode" property for
      AXP806 PMICs
    - [powerpc] mm: Add physical address to Linux page table dump
    - staging: rtl8188eu: prevent an underflow in rtw_check_beacon_data()
    - [armhf] iio: adc: ti_am335x_adc: allocating too much in probe
    - [x86] ALSA: hda: Add Geminilake id to SKL_PLUS
    - ALSA: usb-audio: fix Amanero Combo384 quirk on big-endian hosts
    - USB: hub: fix SS max number of ports
    - usb: core: fix potential memory leak in error path during hcd creation
    - [x86] USB: usbip: fix nonconforming hub descriptor
    - [arm64, armhf] usb: dwc3: gadget: Fix ISO transfer performance
    - pvrusb2: reduce stack usage pvr2_eeprom_analyze()
    - USB: gadget: dummy_hcd: fix hub-descriptor removable fields
    - coda: restore original firmware locations
    - usb: xhci: Fix USB 3.1 supported protocol parsing
    - usb: xhci: ASMedia ASM1042A chipset need shorts TX quirk
    - USB: gadget: fix GPF in gadgetfs
    - USB: gadgetfs, dummy-hcd, net2280: fix locking for callbacks
    - mm/memory-failure.c: use compound_head() flags for huge pages
    - swap: cond_resched in swap_cgroup_prepare()
    - mm: numa: avoid waiting on freed migrated pages
    - userfaultfd: shmem: handle coredumping in handle_userfault()
    - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off()
    - genirq: Release resources in __setup_irq() error path
    - alarmtimer: Prevent overflow of relative timers
    - alarmtimer: Rate limit periodic intervals
    - virtio_balloon: disable VIOMMU support
    - [mips*] Fix bnezc/jialc return address calculation
    - [mips*] .its targets depend on vmlinux
    - [sparc*] crypto: Work around deallocated stack frame reference gcc bug
      on sparc.
    - [armhf] dts: am335x-sl50: Fix card detect pin for mmc1
    - [armhf] dts: am335x-sl50: Fix cannot claim requested pins for spi0
    - mm: larger stack guard gap, between vmas
    - Allow stack to grow up to address space limit
    - mm: fix new crash in unmapped_area_topdown()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8
    - [armhf] clk: sunxi-ng: a31: Correct lcd1-ch1 clock register offset
    - [armhf] clk: sunxi-ng: v3s: Fix usb otg device reset bit
    - [armhf] clk: sunxi-ng: sun5i: Fix ahb_bist_clk definition
    - xen/blkback: fix disconnect while I/Os in flight
    - xen-blkback: don't leak stack data via response ring (XSA-216,
      CVE-2017-10911)
    - ALSA: firewire-lib: Fix stall of process context at packet error
    - ALSA: pcm: Don't treat NULL chmap as a fatal error
    - ALSA: hda - Add Coffelake PCI ID
    - ALSA: hda - Apply quirks to Broxton-T, too
    - fs/exec.c: account for argv/envp pointers (CVE-2017-1000365)
    - [powerpc] perf: Fix oops when kthread execs user process
    - autofs: sanity check status reported with AUTOFS_DEV_IOCTL_FAIL
    - fs/dax.c: fix inefficiency in dax_writeback_mapping_range()
    - lib/cmdline.c: fix get_options() overflow while parsing ranges
    - [x86] perf/x86/intel: Add 1G DTLB load/store miss support for SKL
    - perf probe: Fix probe definition for inlined functions
    - [x86] KVM: fix singlestepping over syscall (CVE-2017-7518)
    - [s390x] KVM gaccess: fix real-space designation asce handling for gmap
      shadows
    - [powerpc*] KVM: Book3S HV: Cope with host using large decrementer mode
    - [powerpc*] KVM: Book3S HV: Preserve userspace HTM state properly
    - [powerpc*] KVM: Book3S HV: Ignore timebase offset on POWER9 DD1
    - [powerpc*] KVM: Book3S HV: Context-switch EBB registers properly
    - [powerpc*] KVM: Book3S HV: Restore critical SPRs to host values on guest
      exit
    - [powerpc*] KVM: Book3S HV: Save/restore host values of debug registers
    - CIFS: Improve readdir verbosity
    - CIFS: Fix some return values in case of error in 'crypt_message'
    - cxgb4: notify uP to route ctrlq compl to rdma rspq
    - HID: Add quirk for Dell PIXART OEM mouse
    - random: silence compiler warnings and fix race
    - signal: Only reschedule timers on signals timers have sent
    - [powerpc] kprobes: Pause function_graph tracing during jprobes handling
    - ]powerpc*] 64s: Handle data breakpoints in Radix mode
    - Input: i8042 - add Fujitsu Lifebook AH544 to notimeout list
    - brcmfmac: add parameter to pass error code in firmware callback
    - brcmfmac: use firmware callback upon failure to load
    - brcmfmac: unbind all devices upon failure in firmware callback
    - time: Fix clock->read(clock) race around clocksource changes
    - time: Fix CLOCK_MONOTONIC_RAW sub-nanosecond accounting
    - [arm64] vdso: Fix nsec handling for CLOCK_MONOTONIC_RAW
    - target: Fix kref->refcount underflow in transport_cmd_finish_abort
    - iscsi-target: Fix delayed logout processing greater than
      SECONDS_FOR_LOGOUT_COMP
    - iscsi-target: Reject immediate data underflow larger than SCSI transfer
      length
    - drm/radeon: add a PX quirk for another K53TK variant
    - drm/radeon: add a quirk for Toshiba Satellite L20-183
    - [x86] drm/amdgpu/atom: fix ps allocation size for EnableDispPowerGating
    - [x86] drm/amdgpu: adjust default display clock
    - [x86] drm/amdgpu: add Polaris12 DID
    - ACPI / scan: Apply default enumeration to devices with ACPI drivers
    - ACPI / scan: Fix enumeration for special SPI and I2C devices
    - rxrpc: Fix several cases where a padded len isn't checked in ticket
      decode (CVE-2017-7482)
    - drm: Fix GETCONNECTOR regression
    - usb: gadget: f_fs: avoid out of bounds access on comp_desc
    - spi: double time out tolerance
    - net: phy: fix marvell phy status reading
    - netfilter: xtables: zero padding in data_to_user
    - netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside
      CONFIG_COMPAT
    - brcmfmac: fix uninitialized warning in brcmf_usb_probe_phase2()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.9
    - net: don't call strlen on non-terminated string in dev_set_alias()
    - net: Fix inconsistent teardown and release of private netdev state.
    - [s390x] net: fix up for "Fix inconsistent teardown and release of
      private netdev state"
    - mac80211: free netdev on dev_alloc_name() error
    - decnet: dn_rtmsg: Improve input length sanitization in
      dnrmg_receive_user_skb
    - net: Zero ifla_vf_info in rtnl_fill_vfinfo()
    - net: ipv6: Release route when device is unregistering
    - net: vrf: Make add_fib_rules per network namespace flag
    - af_unix: Add sockaddr length checks before accessing sa_family in bind
      and connect handlers
    - Fix an intermittent pr_emerg warning about lo becoming free.
    - sctp: disable BH in sctp_for_each_endpoint
    - net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
    - net: tipc: Fix a sleep-in-atomic bug in tipc_msg_reverse
    - net/mlx5: Remove several module events out of ethtool stats
    - net/mlx5e: Added BW check for DIM decision mechanism
    - net/mlx5e: Fix wrong indications in DIM due to counter wraparound
    - net/mlx5: Enable 4K UAR only when page size is bigger than 4K
    - proc: snmp6: Use correct type in memset
    - igmp: acquire pmc lock for ip_mc_clear_src()
    - igmp: add a missing spin_lock_init()
    - qmi_wwan: new Telewell and Sierra device IDs
    - net: don't global ICMP rate limit packets originating from loopback
    - ipv6: fix calling in6_ifa_hold incorrectly for dad work
    - sctp: return next obj by passing pos + 1 into sctp_transport_get_idx
    - net/mlx5e: Fix min inline value for VF rep SQs
    - net/mlx5e: Avoid doing a cleanup call if the profile doesn't have it
    - net/mlx5: Wait for FW readiness before initializing command interface
    - net/mlx5e: Fix timestamping capabilities reporting
    - decnet: always not take dst->__refcnt when inserting dst into hash table
    - net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev
    - ipv6: Do not leak throw route references
    - rtnetlink: add IFLA_GROUP to ifla_policy
    - netfilter: synproxy: fix conntrackd interaction
    - NFSv4.x/callback: Create the callback service through svc_create_pooled
    - xen/blkback: don't use xen_blkif_get() in xen-blkback kthread
    - [mips*] head: Reorder instructions missing a delay slot
    - [mips*] Avoid accidental raw backtrace
    - [mips*] pm-cps: Drop manual cache-line alignment of ready_count
    - [mips*] Fix IRQ tracing & lockdep when rescheduling
    - ALSA: hda - Fix endless loop of codec configure
    - ALSA: hda - set input_path bitmap to zero after moving it to new place
    - NFSv4.2: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask
    - NFSv4.1: Fix a race in nfs4_proc_layoutget
    - Revert "NFS: nfs_rename() handle -ERESTARTSYS dentry left behind"
    - ovl: copy-up: don't unlock between lookup and link
    - gpiolib: fix filtering out unwanted events
    - [x86] intel_rdt: Fix memory leak on mount failure
    - [x86] perf/x86/intel/uncore: Fix wrong box pointer check
    - [x86] drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr
    - dm thin: do not queue freed thin mapping for next stage processing
    - [x86] mm: Fix boot crash caused by incorrect loop count calculation in
      sync_global_pgds()
    - [arm64] pinctrl/amd: Use regular interrupt instead of chained
    - mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap
      mappings
    - xen/blkback: don't free be structure too early
    - xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish
    - xfrm: move xfrm_garbage_collect out of xfrm_policy_flush
    - xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
    - xfrm: NULL dereference on allocation failure
    - xfrm: Oops on error in pfkey_msg2xfrm_state()
    - [arm64] PCI: Fix struct acpi_pci_root_ops allocation failure path
    - [arm64] ACPI: Fix BAD_MADT_GICC_ENTRY() macro implementation
    - [arm*] 8685/1: ensure memblock-limit is pmd-aligned
    - [arm*] davinci: PM: Free resources in error handling path in
      'davinci_pm_init'
    - [arm*] davinci: PM: Do not free useful resources in normal path in
      'davinci_pm_init'
    - Revert "x86/entry: Fix the end of the stack for newly forked tasks"
    - [x86] boot/KASLR: Fix kexec crash due to 'virt_addr' calculation bug
    - [x86] perf: Fix spurious NMI with PEBS Load Latency event
    - [x86] mpx: Correctly report do_mpx_bt_fault() failures to user-space
    - [x86] mm: Fix flush_tlb_page() on Xen
    - ocfs2: o2hb: revert hb threshold to keep compatible
    - ocfs2: fix deadlock caused by recursive locking in xattr
    - iommu/dma: Don't reserve PCI I/O windows
    - [amd64] iommu/amd: Fix incorrect error handling in
      amd_iommu_bind_pasid()
    - [amd64] iommu/amd: Fix interrupt remapping when disable guest_mode
    - mtd: nand: brcmnand: Check flash #WP pin status before nand
      erase/program
    - mtd: nand: fsmc: fix NAND width handling
    - [x86] KVM: fix emulation of RSM and IRET instructions
    - [x86] KVM: vPMU: fix undefined shift in intel_pmu_refresh()
    - [x86] KVM: zero base3 of unusable segments
    - KVM: nVMX: Fix exception injection
    - esp4: Fix udpencap for local TCP packets.
    - [armhf] hsi: Fix build regression due to netdev destructor fix.
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.10
    - fs: completely ignore unknown open flags
    - driver core: platform: fix race condition with driver_override
    - RDMA/uverbs: Check port number supplied by user verbs cmds
    - ceph: choose readdir frag based on previous readdir reply
    - tracing/kprobes: Allow to create probe with a module name starting with a
      digit
    - drm/virtio: don't leak bo on drm_gem_object_init failure (CVE-2017-10810)
    - usb: dwc3: replace %p with %pK
    - Add USB quirk for HVR-950q to avoid intermittent device resets
    - usb: usbip: set buffer pointers to NULL after free
    - usb: Fix typo in the definition of Endpoint[out]Request
    - USB: core: fix device node leak
    - [armhf] pinctrl: meson: meson8b: fix the NAND DQS pins
    - [armhf,arm64] pinctrl: sunxi: Fix SPDIF function name for A83T
    - pinctrl: core: Fix warning by removing bogus code
    - [x86] xhci: Limit USB2 port wake support for AMD Promontory hosts
    - gfs2: Fix glock rhashtable rcu bug
    - Add "shutdown" to "struct class".
    - tpm: Issue a TPM2_Shutdown for TPM2 devices.
    - tpm: fix a kernel memory leak in tpm-sysfs.c
    - [x86] uaccess: Optimize copy_user_enhanced_fast_string() for short strings
    - xen: avoid deadlock in xenbus driver
    - crypto: drbg - Fixes panic in wait_for_completion call
    - [x86] rt286: add Thinkpad Helix 2 to force_combo_jack_table
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.11
    - mqueue: fix a use-after-free in sys_mq_notify() (CVE-2017-11176)
    - proc: Fix proc_sys_prune_dcache to hold a sb reference
    - locking/rwsem-spinlock: Fix EINTR branch in __down_write_common()
    - [x86] staging: comedi: fix clean-up of comedi_class in comedi_init()
    - crypto: rsa-pkcs1pad - use constant time memory comparison for MACs
    - ext4: check return value of kstrtoull correctly in reserved_clusters_store
    - [x86] mm/pat: Don't report PAT on CPUs that don't support it

  [ Ben Hutchings ]
  * [m68k] udeb: Use only the common module list for nic-shared-modules
    (fixes FTBFS)
  * [sparc64] Update "Revert "sparc: move exports to definitions"" for the
    addition of __multi3 (fixes FTBFS)
  * binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370,
    CVE-2017-1000371)
  * [rt] Update to 4.11.9-rt7:
    - smp/hotplug: Move unparking of percpu threads to the control CPU
    - cpu_pm: replace raw_notifier to atomic_notifier
  * media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
    (Closes: #868511)
  * [armhf] udeb: Add sunxi_wdt to kernel-image (Closes: #866130)
  * crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules (Closes: #868291)
  * udeb: Add dm-raid to md-modules (Closes: #868251)
  * [arm64] sound: Enable SND_HDA_INTEL as module (Closes: #867611)
  * aufs: Update support patchset to aufs4.11.7+-20170703 (Closes: #867257)
  * [x86] ideapad-laptop: Add various IdeaPad models to no_hw_rfkill list
    (Closes: #866706)
  * firmware: dmi: Add DMI_PRODUCT_FAMILY identification string
  * [x86] pinctrl: cherryview: Extend the Chromebook DMI quirk to Intel_Strago
    systems (Closes: #862723)
  * [armhf] Add ARM Mali Midgard device tree bindings and gpu node for rk3288
    (thanks to Guillaume Tucker) (Closes: #865646)

  [ Uwe Kleine-König ]
  * [arm64] enable FB_SIMPLE

  [ Vagrant Cascadian ]
  * [arm64] Enable support for Rockchip systems (Closes: #860976).

  [ Salvatore Bonaccorso ]
  * Bump ABI to 2
  * [rt] Update to 4.11.8-rt5

  [ Cyril Brulebois ]
  * [arm64,armhf] udeb: Ship usb3503 module in usb-modules, needed for
    e.g. Arndale development boards, thanks to Wei Liu (Closes: #865645).

linux (4.11.6-1parrot6) testing; urgency=medium

  * Import new upstream release.
  * Re-include parrot patches.

Ben Hutchings authored Jun 20, 2017 and Lorenzo "Palinuro" Faletra committed Jun 28, 2017

linux (4.11.6-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.4
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5
    - [x86] drm/vmwgfx: limit the number of mip levels in
      vmw_gb_surface_define_ioctl() (CVE-2017-7346)
    - [x86] drm/vmwgfx: Make sure backup_handle is always valid (CVE-2017-9605)
    - ALSA: timer: Fix race between read and ioctl (CVE-2017-1000380)
    - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
      (CVE-2017-1000380)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.6

  [ John Paul Adrian Glaubitz ]
  * [m68k] udeb: Build affs-modules package
  * [m68k] udeb: Build hfs-modules package
  * [m68k] udeb: Build nic-modules package
  * [m68k] udeb: Build pata-modules package
  * [m68k] udeb: Build scsi-core-modules package
  * [m68k] udeb: Move non-shared modules from nic-shared-modules to nic-modules
  * [m68k] udeb: Add buddha, falconide, gayle, macide, q40ide to pata-modules
  * [m68k] udeb: Add atari_scsi, mac_esp, mac_scsi to scsi-modules

  [ Ben Hutchings ]
  * [x86] Enable SERIAL_8250_MID as built-in (Closes: #864368)
  * Set ABI to 1
  * debian/rules.real: Include rules.defs before using architecture variables
    (Closes: #862842)
  * [rt] Update to 4.11.5-rt1 and reenable
  * fs: Reenable HPFS_FS as module (Closes: #864878)
  * USB: serial: option: add two Longcheer device ids (Closes: #864604)
  * [armhf] PCI: Enable PCI_HOST_GENERIC (Closes: #864726)
  * mm: larger stack guard gap, between vmas (CVE-2017-1000364)

linux (4.11.3-1~exp1) experimental; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.2
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3

  [ Ben Hutchings ]
  * [armel] udeb: Add af_packet. firmware_class, nls_base to kernel-image
    (fixes FTBFS)
  * [m68k] Update 'Revert "m68k: move exports to definitions"' for 4.11
    (fixes FTBFS) (Closes: #862393)

linux (4.11-1~exp2) experimental; urgency=medium

  * [armel/marvell] Change MQ_IOSCHED_DEADLINE, FW_LOADER, HWMON,
    INPUT_MOUSEDEV, THERMAL, SERIAL_8250_PCI, SERIAL_8250_EXAR, NLS, PACKET
    from built-in to modules (fixes FTBFS)
  * usbip: Fix potential format overflow in userspace tools (fixes FTBFS on
    64-bit architectures with gcc-7)
  * [mips*/octeon] Increase RELOCATION_TABLE_SIZE to 0x00110000 (fixes FTBFS)

linux (4.11-1~exp1) experimental; urgency=medium

  * New upstream release: https://kernelnewbies.org/Linux_4.11
    (thanks to Lukas Wunner for rebasing up to 4.11-rc6)

  [ Ben Hutchings ]
  * aufs: Update support patchset to aufs4.x-rcN-20170410
  * [arm64,x86] Replace securelevel patch set with lockdown patch set
  * [x86] Make hyperv-modules depends on nic-shared-modules, as hv_utils now
    implements PTP clock
  * [arm64] Enable ARCH_SUNXI, RTC_DRV_SUN6I as built-in,
    MMC_SUNXI and PHY_SUN4I_USB as modules (Closes: #860855)
  * [arm64] Enable REGULATOR_GPIO as module (Closes: #860222)
  * block: Enable BLK_WBT, BLK_WBT_MQ (Closes: #859570)

linux (4.10.7-1~exp1) experimental; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.3
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.5
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.6
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7

  [ Ben Hutchings ]
  * netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules
    (Closes: #858897)
  * [s390x] Set NR_CPUS=256 (Closes: #858731)
  * Enable BUG_ON_DATA_CORRUPTION

linux (4.10-1~exp1) experimental; urgency=medium

  * New upstream release: https://kernelnewbies.org/Linux_4.10

  [ Ben Hutchings ]
  * aufs: Update support patchset to aufs4.x-rcN-20170206
  * Set ABI to trunk

  [ Roger Shimizu ]
  * debian/copyright & debian/README.source:
    - Prefer https URL than http for security merit.

linux (4.10~rc6-1~exp2) experimental; urgency=medium

  * [s390x] Un-revert upstream change moving exports to assembly sources
    (fixes FTBFS)
  * [sparc64] topology_64.h: Fix condition for including cpudata.h
    (might fix FTBFS)
  * [powerpc*] Fix various build failures:
    - Revert the initial stack protector support
    - Fix missing CRC for _mcount
    - [ppc64el] udeb: Exclude ehea from nic-modules
  * debian/control: Fix compiler build-dependencies for cross-building
  * [armel] Adjust configuration to reduce image size (fixes FTBFS):
    - PCI: Disable PCIEAER, PCIEASPM
    - net: Disable LWTUNNEL, IPV6_ILA
    - trace: Disable UPROBE_EVENT

linux (4.10~rc6-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Ben Hutchings ]
  * [rt] Disable until it is updated for 4.10 or later
  * [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
    (Closes: #852620).  This breaks (e)glibc versions < 2.14 and dietlibc
    versions < 0.33.  It can be reverted using the kernel parameter:
    vsyscall=emulate
  * [arm64] Enable DRM_MESON, MMC_MESON_GX, DWMAC_MESON, MESON_GXL_PHY,
    PHY_MESON8B_USB2, MESON_WATCHDOG as modules
  * net: Enable SFC_FALCON as module; SFC_FALCON_MTD
  * cpupower: Fix compiler options for turbostat on 4.10
  * linux-doc: Update documentation file list for 4.10
  * linux-doc: Fix up symlinks to gzipped docs
  * debian/control: Add build-dependency on graphviz for documentation
  * linux-doc: Copy source to build directory, to avoid creating files in
    source directory

  [ Roger Shimizu ]
  * debian/copyright: Add GPL/X11 Dual License

linux (4.9.30-2) unstable; urgency=high

  * [x86] Enable SERIAL_8250_MID as built-in (Closes: #864368)
  * Fix bugs introduced by original fix for CVE-2017-9074:
    - ipv6: Check ip6_find_1stfragopt() return value properly.
    - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
    - ipv6: Fix leak in ipv6_gso_segment().
  * Revert "uapi: fix linux/if.h userspace compilation errors" (see #864269)
  * [armhf] udeb: Add axp20x_usb_power to kernel-image; add i2c-modules
    package including i2c-mv64xxx and i2c-rk3x (thanks to Karsten Merker)
    (Closes: #856111)
  * NFSv4.x/callback: Create the callback service through svc_create_pooled
    (Closes: #862357)

linux (4.9.30-1parrot30) testing; urgency=medium

  * Import new upstream release.

linux (4.9.30-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.26
    - [arm64] Revert "mmc: sdhci-msm: Enable few quirks"
    - ping: implement proper locking
    - [sparc64] kern_addr_valid regression
    - [sparc64] Fix kernel panic due to erroneous #ifdef surrounding
      pmd_write()
    - net: neigh: guard against NULL solicit() method
    - net: phy: handle state correctly in phy_stop_machine
    - bpf: improve verifier packet range checks
    - net/mlx5: Avoid dereferencing uninitialized pointer
    - l2tp: hold tunnel socket when handling control frames in l2tp_ip
      and l2tp_ip6
    - l2tp: purge socket queues in the .destruct() callback
    - net/packet: fix overflow in check for tp_frame_nr
    - net/packet: fix overflow in check for tp_reserve
    - l2tp: take reference on sessions being dumped
    - l2tp: fix PPP pseudo-wire auto-loading
    - net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
    - sctp: listen on the sock only when it's state is listening or
      closed
    - tcp: clear saved_syn in tcp_disconnect()
    - ipv6: Fix idev->addr_list corruption
    - net-timestamp: avoid use-after-free in ip_recv_error
    - net: vrf: Fix setting NLM_F_EXCL flag when adding l3mdev rule
    - dp83640: don't recieve time stamps twice
    - gso: Validate assumption of frag_list segementation
    - net: ipv6: RTF_PCPU should not be settable from userspace
    - netpoll: Check for skb->queue_mapping
    - ip6mr: fix notification device destruction
    - net/mlx5: Fix driver load bad flow when having fw
      initializing timeout
    - net/mlx5e: Fix small packet threshold
    - net/mlx5e: Fix ETHTOOL_GRXCLSRLALL handling
    - macvlan: Fix device ref leak when purging bc_queue
    - net: ipv6: regenerate host route if moved to gc list
    - net: phy: fix auto-negotiation stall due to unavailable interrupt
    - ipv6: check skb->protocol before lookup for nexthop
    - tcp: memset ca_priv data to 0 properly
    - ipv6: check raw payload size correctly in ioctl
    - ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d
    - ALSA: firewire-lib: fix inappropriate assignment between
      signed/unsigned type
    - ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
    - [mips*] KGDB: Use kernel context for sleeping threads
    - [mips*] Avoid BUG warning in arch_check_elf
    - p9_client_readdir() fix
    - [x86] ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
    - Input: i8042 - add Clevo P650RS to the i8042 reset list
    - nfsd: check for oversized NFSv2/v3 arguments
    - nfsd4: minor NFSv2/v3 write decoding cleanup
    - nfsd: stricter decoding of write-like NFSv2/v3 ops
    - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
    - macsec: avoid heap overflow in skb_to_sgvec
    - net: can: usb: gs_usb: Fix buffer on stack
    - [x86] ftrace: Fix triple fault with graph tracing and suspend-to-ram
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.27
    - timerfd: Protect the might cancel mechanism proper
    - Handle mismatched open calls
    - [x86] tpm_tis: use default timeout value if chip reports it as zero
    - scsi: storvsc: Workaround for virtual DVD SCSI version
    - [powerpc, x86] hwmon: (it87) Avoid registering the same chip on both SIO
      addresses
    - 8250_pci: Fix potential use-after-free in error path
    - ceph: try getting buffer capability for readahead/fadvise
    - cpu/hotplug: Serialize callback invocations proper
    - dm ioctl: prevent stack leak in dm ioctl call
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.28
    - 9p: fix a potential acl leak
    - hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628
    - [x86] tpm: fix RC value check in tpm2_seal_trusted
    - [x86] tmp: use pdev for parent device in tpm_chip_alloc
    - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
    - [powerpc*] mm: Fixup wrong LPCR_VRMASD value
    - [powerpc*] powernv: Fix opal_exit tracepoint opcode
    - [powerpc*] Correctly disable latent entropy GCC plugin on
      prom_init.o
    - [x86] perf/x86/intel/pt: Add format strings for PTWRITE and power
      event tracing
    - [arm64] dts: r8a7795: Mark EthernetAVB device node disabled
    - [arm64] dts: qcom: Fix ipq board clock rates
    - [arm64] Improve detection of user/non-user mappings in
      set_pte(_at)
    - [armhf] OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
    - [armhf] dts: sun7i: lamobo-r1: Fix CPU port RGMII settings
    - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
    - mwifiex: remove redundant dma padding in AMSDU
    - mwifiex: Avoid skipping WEP key deletion for AP
    - iwlwifi: fix MODULE_FIRMWARE for 6030
    - iwlwifi: mvm: don't restart HW if suspend fails with unified image
    - iwlwifi: mvm: overwrite skb info later
    - iwlwifi: pcie: don't increment / decrement a bool
    - iwlwifi: pcie: trans: Remove unused 'shift_param'
    - iwlwifi: pcie: fix the set of DMA memory mask
    - iwlwifi: mvm: fix reorder timer re-arming
    - iwlwifi: mvm: Use aux queue for offchannel frames in dqa
    - iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe
    - iwlwifi: mvm: fix pending frame counter calculation
    - iwlwifi: mvm: fix references to first_agg_queue in DQA mode
    - iwlwifi: mvm: synchronize firmware DMA paging memory
    - iwlwifi: mvm: writing zero bytes to debugfs causes a crash
    - [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
    - [amd64] x86/pci-calgary: Fix iommu_free() comparison of unsigned
      expression >= 0
    - [x86] kprobes/x86: Fix kernel panic when certain exception-
      handling addresses are probed
    - [x86] platform/intel-mid: Correct MSI IRQ line for watchdog device
    - [x86] KVM: nVMX: initialize PML fields in vmcs02
    - [x86] KVM: nVMX: do not leak PML full vmexit to L1
    - [arm64, armhf] usb: dwc2: host: use msleep() for long delay
    - [armhf] usb: host: ehci-exynos: Decrese node refcount on
      exynos_ehci_get_phy() error paths
    - [armhf] usb: host: ohci-exynos: Decrese node refcount on
      exynos_ehci_get_phy() error paths
    - [arm64, armhf] usb: chipidea: Only read/write OTGSC from one place
    - [arm64, armhf] usb: chipidea: Handle extcon events properly
    - USB: serial: keyspan_pda: fix receive sanity checks
    - USB: serial: digi_acceleport: fix incomplete rx sanity check
    - USB: serial: ssu100: fix control-message error handling
    - USB: serial: io_edgeport: fix epic-descriptor handling
    - USB: serial: ti_usb_3410_5052: fix control-message error handling
    - USB: serial: ark3116: fix open error handling
    - USB: serial: ftdi_sio: fix latency-timer error handling
    - USB: serial: quatech2: fix control-message error handling
    - USB: serial: mct_u232: fix modem-status error handling
    - USB: serial: io_edgeport: fix descriptor error handling
    - [armhf] clk: rockchip: add "," to
      mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036
    - phy: qcom-usb-hs: Add depends on EXTCON
    - scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr
    - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
    - scsi: smartpqi: fix time handling
    - [mips*] R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
    - brcmfmac: Ensure pointer correctly set if skb data location
      changes
    - brcmfmac: Make skb header writable before use
    - [x86] staging/lustre/llite: move root_squash from sysfs to debugfs
    - [x86] staging: wlan-ng: add missing byte order conversion
    - ALSA: hda - Fix deadlock of controller device lock at unbinding
    - [sparc64] fix fault handling in NGbzero.S and GENbzero.S
    - macsec: dynamically allocate space for sglist
    - tcp: do not underestimate skb->truesize in tcp_trim_head()
    - bpf: enhance verifier to understand stack pointer arithmetic
    - [arm64] bpf: fix jit branch offset related to ldimm64
    - tcp: fix wraparound issue in tcp_lp
    - net: ipv6: Do not duplicate DAD on link up
    - net: usb: qmi_wwan: add Telit ME910 support
    - tcp: do not inherit fastopen_req from parent
    - ipv4, ipv6: ensure raw socket message is big enough to hold
      an IP header
    - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
    - ipv6: initialize route null entry in addrconf_init()
    - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
    - bnxt_en: allocate enough space for ->ntp_fltr_bmap
    - bpf: don't let ldimm64 leak map addresses on unprivileged
      (CVE-2017-9150)
    - f2fs: sanity check segment count
    - xen: Revert commits da72ff5bfcb0 and 72a9b186292d
    - [arm64, armhf] wlcore: Pass win_size taken from
      ieee80211_sta to FW
    - [arm64, armhf] wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
    - drm/ttm: fix use-after-free races in vm fault handling
    - block: get rid of blk_integrity_revalidate()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.29
    - [x86] xen: adjust early dom0 p2m handling to xen hypervisor behavior
    - target: Fix compare_and_write_callback handling for non GOOD status
    - target/fileio: Fix zero-length READ and WRITE handling
    - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
    - usb: xhci: bInterval quirk for TI TUSB73x0
    - usb: host: xhci: print correct command ring address
    - USB: Proper handling of Race Condition when two USB class drivers try to
      call init_usb_class simultaneously
    - USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications"
    - [x86] staging: vt6656: use off stack for in buffer USB transfers.
    - [x86] staging: vt6656: use off stack for out buffer USB transfers.
    - [x86] staging: comedi: jr3_pci: fix possible null pointer dereference
    - [x86] staging: comedi: jr3_pci: cope with jiffies wraparound
    - usb: misc: add missing continue in switch
    - usb: gadget: legacy gadgets are optional
    - usb: Make sure usb/phy/of gets built-in
    - usb: hub: Fix error loop seen after hub communication errors
    - usb: hub: Do not attempt to autosuspend disconnected devices
    - [x86] boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
    - [amd64] pmem: Fix cache flushing for iovec write < 8 bytes
    - [x86] perf: Fix Broadwell-EP DRAM RAPL events
    - [x86] KVM: fix user triggerable warning in kvm_apic_accept_events()
    - [armhf,arm64] KVM: fix races in kvm_psci_vcpu_on
    - [arm64] KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
    - block: fix blk_integrity_register to use template's interval_exp if not 0
    - crypto: algif_aead - Require setkey before accept(2)
    - [x86] crypto: ccp - Use only the relevant interrupt bits
    - [x86] crypto: ccp - Disable interrupts early on unload
    - [x86] crypto: ccp - Change ISR handler method for a v3 CCP
    - [x86] crypto: ccp - Change ISR handler method for a v5 CCP
    - dm era: save spacemap metadata root after the pre-commit
    - dm rq: check blk_mq_register_dev() return value in
      dm_mq_init_request_queue()
    - dm thin: fix a memory leak when passing discard bio down
    - vfio/type1: Remove locked page accounting workqueue
    - iov_iter: don't revert iov buffer if csum error
    - IB/core: Fix sysfs registration error flow
    - IB/core: For multicast functions, verify that LIDs are multicast LIDs
    - IB/IPoIB: ibX: failed to create mcg debug file
    - IB/mlx4: Fix ib device initialization error flow
    - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
    - IB/hfi1: Prevent kernel QP post send hard lockups
    - perf auxtrace: Fix no_size logic in addr_filter__resolve_kernel_syms()
    - ext4: evict inline data when writing to memory map
    - fs/xattr.c: zero out memory copied to userspace in getxattr
    - ceph: fix memory leak in __ceph_setxattr()
    - fs/block_dev: always invalidate cleancache in invalidate_bdev()
    - mm: prevent potential recursive reclaim due to clearing PF_MEMALLOC
    - Fix match_prepath()
    - Set unicode flag on cifs echo request to avoid Mac error
    - SMB3: Work around mount failure when using SMB3 dialect to Macs
    - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
    - cifs: fix leak in FSCTL_ENUM_SNAPS response handling
    - cifs: fix CIFS_ENUMERATE_SNAPSHOTS oops
    - CIFS: fix oplock break deadlocks
    - cifs: fix CIFS_IOC_GET_MNT_INFO oops
    - CIFS: add misssing SFM mapping for doublequote
    - padata: free correct variable
    - device-dax: fix cdev leak
    - fscrypt: fix context consistency check when key(s) unavailable
    - [armhf] serial: samsung: Use right device for DMA-mapping calls
    - [armhf] serial: omap: fix runtime-pm handling on unbind
    - [armhf] serial: omap: suspend device on probe errors
    - tty: pty: Fix ldisc flush after userspace become aware of the data already
    - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
    - Bluetooth: hci_bcm: add missing tty-device sanity check
    - Bluetooth: hci_intel: add missing tty-device sanity check
    - ipmi: Fix kernel panic at ipmi_ssif_thread()
    - libnvdimm, region: fix flush hint detection crash
    - libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
    - libnvdimm, pfn: fix 'npfns' vs section alignment
    - [powerpc*/*64*] pstore: Fix flags to enable dumps on powerpc
    - pstore: Shut down worker when unregistering
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.30
    - usb: misc: legousbtower: Fix buffers on stack
    - usb: misc: legousbtower: Fix memory leak
    - USB: ene_usb6250: fix DMA to the stack
    - watchdog: pcwd_usb: fix NULL-deref at probe
    - char: lp: fix possible integer overflow in lp_setup() (CVE-2017-1000363)
    - USB: core: replace %p with %pK
    - tpm_tis_core: Choose appropriate timeout for reading burstcount
    - ALSA: hda: Fix cpu lockup when stopping the cmd dmas
    - [armhf] tegra: paz00: Mark panel regulator as enabled on boot
    - fanotify: don't expose EOPENSTALE to userspace
    - tpm_tis_spi: Use single function to transfer data
    - tpm_tis_spi: Abort transfer when too many wait states are signaled
    - tpm_tis_spi: Check correct byte for wait state indicator
    - tpm_tis_spi: Remove limitation of transfers to MAX_SPI_FRAMESIZE bytes
    - tpm_tis_spi: Add small delay after last transfer
    - tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver
    - tpm: add sleep only for retry in i2c_nuvoton_write_status()
    - tpm_crb: check for bad response size
    - mlx5: Fix mlx5_ib_map_mr_sg mr length
    - infiniband: call ipv6 route lookup via the stub interface
    - dm btree: fix for dm_btree_find_lowest_key()
    - dm raid: select the Kconfig option CONFIG_MD_RAID0
    - dm bufio: avoid a possible ABBA deadlock
    - dm bufio: check new buffer allocation watermark every 30 seconds
    - dm mpath: split and rename activate_path() to prepare for its expanded use
    - dm cache metadata: fail operations if fail_io mode has been established
    - dm bufio: make the parameter "retain_bytes" unsigned long
    - dm thin metadata: call precommit before saving the roots
    - dm space map disk: fix some book keeping in the disk space map
    - md: update slab_cache before releasing new stripes when stripes resizing
    - md: MD_CLOSING needs to be cleared after called md_set_readonly or
      do_md_stop
    - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
    - mwifiex: MAC randomization should not be persistent
    - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
    - ima: accept previously set IMA_NEW_FILE
    - [x86] KVM: Fix load damaged SSEx MXCSR register
    - [x86] KVM: Fix potential preemption when get the current kvmclock
      timestamp
    - [x86] KVM: Fix read out-of-bounds vulnerability in kvm pio emulation
    - [i386] fix 32-bit case of __get_user_asm_u64()
    - [armhf] regulator: rk808: Fix RK818 LDO2
    - [s390x] kdump: Add final note
    - [s390x] cputime: fix incorrect system time
    - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
    - ath9k_htc: fix NULL-deref at probe
    - [x86] drm/amdgpu: Make display watermark calculations more accurate
    - [x86] drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
      calculations.
    - [x86] drm/amdgpu: Add missing lb_vblank_lead_lines setup to DCE-6 path.
    - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
    - drm/nouveau/tmr: ack interrupt before processing alarms
    - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
      alarm
    - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
    - drm/nouveau/tmr: handle races with hw when updating the next alarm time
    - [armhf] gpio: omap: return error if requested debounce time is not
      possible
    - cdc-acm: fix possible invalid access when processing notification
    - ohci-pci: add qemu quirk
    - [powerpc*] cxl: Force context lock during EEH flow
    - [powerpc*] cxl: Route eeh events to all drivers in
      cxl_pci_error_detected()
    - proc: Fix unbalanced hard link numbers
    - of: fix sparse warning in of_pci_range_parser_one
    - of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
    - of: fdt: add missing allocation-failure check
    - [powerpc*/*64*] ibmvscsis: Do not send aborted task response
    - [x86] IIO: bmp280-core.c: fix error in humidity calculation
    - IB/hfi1: Return an error on memory allocation failure
    - IB/hfi1: Fix a subcontext memory leak
    - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
    - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
    - USB: serial: ftdi_sio: fix setting latency for unprivileged users
    - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
    - USB: chaoskey: fix Alea quirk on big-endian hosts
    - f2fs: check entire encrypted bigname when finding a dentry
    - fscrypt: avoid collisions when presenting long encrypted filenames
    - libnvdimm: fix clear length of nvdimm_forget_poison()
    - xhci: remove GFP_DMA flag from allocation
    - usb: host: xhci-plat: propagate return value of platform_get_irq()
    - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
    - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
    - net: irda: irda-usb: fix firmware name on big-endian hosts
    - usbvision: fix NULL-deref at probe
    - mceusb: fix NULL-deref at probe
    - ttusb2: limit messages to buffer size
    - [armhf,arm64] usb: dwc3: gadget: Prevent losing events in event cache
    - [armhf] usb: musb: tusb6010_omap: Do not reset the other direction's
      packet size
    - [armhf] usb: musb: Fix trying to suspend while active for OTG
      configurations
    - USB: iowarrior: fix info ioctl on big-endian hosts
    - usb: serial: option: add Telit ME910 support
    - USB: serial: qcserial: add more Lenovo EM74xx device IDs
    - USB: serial: mct_u232: fix big-endian baud-rate handling
    - USB: serial: io_ti: fix div-by-zero in set_termios
    - USB: hub: fix SS hub-descriptor handling
    - USB: hub: fix non-SS hub-descriptor handling
    - ipx: call ipxitf_put() in ioctl error path (CVE-2017-7487)
    - iio: hid-sensor: Store restore poll and hysteresis on S3
    - gspca: konica: add missing endpoint sanity check
    - dib0700: fix NULL-deref at probe
    - zr364xx: enforce minimum size when reading header
    - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
    - digitv: limit messages to buffer size
    - dw2102: limit messages to buffer size
    - cx231xx-audio: fix init error path
    - cx231xx-audio: fix NULL-deref at probe
    - cx231xx-cards: fix NULL-deref at probe
    - [powerpc*] mm: Ensure IRQs are off in switch_mm()
    - [powerpc*] eeh: Avoid use after free in eeh_handle_special_event()
    - [powerpc*] book3s/mce: Move add_taint() later in virtual mode
    - [powerpc*] pseries: Fix of_node_put() underflow during DLPAR remove
    - [powerpc*] iommu: Do not call PageTransHuge() on tail pages
    - [powerpc*] tm: Fix FP and VMX register corruption
    - [arm64] KVM: Do not use stack-protector to compile EL2 code
    - [armhf] KVM: Do not use stack-protector to compile HYP code
    - [armhf] KVM: plug potential guest hardware debug leakage
    - [armel,armhf] 8662/1: module: split core and init PLT sections
    - [armhf] dts: imx6sx-sdb: Remove OPP override
    - [arm64] dts: hi6220: Reset the mmc hosts
    - [arm64] xchg: hazard against entire exchange variable
    - [arm64] ensure extension of smp_store_release value
    - [arm64] armv8_deprecated: ensure extension of addr
    - [arm64] uaccess: ensure extension of access_ok() addr
    - [arm64] documentation: document tagged pointer stack constraints
    - [x86] staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out
      memory.
    - [x86] staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
    - [x86] staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of
      EPROM_CMD.
    - [x86] staging: rtl8192e: GetTs Fix invalid TID 7 warning.
    - [x86] iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
    - stackprotector: Increase the per-task stack canary's random range from 32
      bits to 64 bits on 64-bit platforms
    - uwb: fix device quirk on big-endian hosts
    - genirq: Fix chained interrupt data ordering
    - nvme: unmap CMB and remove sysfs file in reset path
    - [alpha] osf_wait4(): fix infoleak
    - tracing/kprobes: Enforce kprobes teardown after testing
    - [x86] PCI: hv: Allocate interrupt descriptors with GFP_ATOMIC
    - [x86] PCI: hv: Specify CPU_AFFINITY_ALL for MSI affinity when >= 32 CPUs
    - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
    - PCI: Fix another sanity check bug in /proc/pci mmap
    - PCI: Only allow WC mmap on prefetchable resources
    - PCI: Freeze PME scan before suspending devices
    - [armel,armhf] mtd: nand: orion: fix clk handling
    - [armhf] mtd: nand: omap2: Fix partition creation via cmdline mtdparts
    - mtd: nand: add ooblayout for old hamming layout
    - [x86] drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
    - NFSv4: Fix a hang in OPEN related to server reboot
    - NFS: Fix use after free in write error path
    - NFS: Use GFP_NOIO for two allocations in writeback
    - nfsd: fix undefined behavior in nfsd4_layout_verify
    - nfsd: encoders mustn't use unitialized values in error cases
    - drivers: char: mem: Check for address space wraparound with mmap()
    - [x86] drm/i915/gvt: Disable access to stolen memory as a guest

  [ Aurelien Jarno ]
  * [mips*/*-malta] Enable POWER_RESET and POWER_RESET_SYSCON.

  [ Uwe Kleine-König ]
  * [arm64] Enable DRM modules (Closes: #863344)
  * Ignore ABI changes in chipidea driver

  [ Ben Hutchings ]
  * Ignore ABI changes in ccp and hid-sensors
  * [mips*el/loongson-3] Revert "MIPS: Loongson-3: Select
    MIPS_L1_CACHE_SHIFT_6" to avoid ABI change
  * SUNRPC: Refactor svc_set_num_threads()
  * NFSv4: Fix callback server shutdown (CVE-2017-9059) (Closes: #862357)
  * uapi: fix linux/if.h userspace compilation errors (see #822393, #824442)
  * debian/control: Fix compiler build-dependencies for cross-building
    (Closes: #863907)
  * Add Debian package version to "hung task" log messages
  * btrfs: warn about RAID5/6 being experimental at mount time (Closes: #863290)
  * [x86] pinctrl: cherryview: Add a quirk to make Acer Chromebook keyboard
    work again (Closes: #862723)
  * [arm64] serial: pl011: add console matching function (Closes: #861898)
  * [rt] Add new GPG subkeys for Sebastian Andrzej Siewior
  * [rt] Update to 4.9.30-rt20:
    - rtmutex: Deboost before waking up the top waiter
    - sched/rtmutex/deadline: Fix a PI crash for deadline tasks
    - sched/deadline/rtmutex: Dont miss the dl_runtime/dl_period update
    - rtmutex: Clean up
    - sched/rtmutex: Refactor rt_mutex_setprio()
    - sched,tracing: Update trace_sched_pi_setprio()
    - rtmutex: Fix PI chain order integrity
    - rtmutex: Fix more prio comparisons
    - rtmutex: Plug preempt count leak in rt_mutex_futex_unlock()
    - futex: Avoid freeing an active timer
    - futex: Fix small (and harmless looking) inconsistencies
    - futex,rt_mutex: Fix rt_mutex_cleanup_proxy_lock()
    - Revert "timers: Don't wake ktimersoftd on every tick"
    - futex/rtmutex: Cure RT double blocking issue
    - random: avoid preempt_disable()ed section

  [ Salvatore Bonaccorso ]
  * tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
    (CVE-2017-0605)
  * dccp/tcp: do not inherit mc_list from parent (CVE-2017-8890)
  * ipv6: Prevent overrun when parsing v6 header options (CVE-2017-9074)
  * sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (CVE-2017-9075)
  * ipv6/dccp: do not inherit ipv6_mc_list from parent (CVE-2017-9076,
    CVE-2017-9077)
  * crypto: skcipher - Add missing API setkey checks (CVE-2017-9211)
  * ipv6: fix out of bound writes in __ip6_append_data() (CVE-2017-9242)

  [ Cyril Brulebois ]
  * udeb: Add efivarfs to efi-modules, which can be needed to retrieve
    firmware or configuration bits from d-i. (Closes: #862555)

  [ John Paul Adrian Glaubitz ]
  * [m68k] udeb: Build loop-modules package (Closes: #862813)

linux (4.9.25-1parrot25) testing; urgency=medium

  * Import new upstream release.

Ben Hutchings authored May 02, 2017 and Lorenzo "Palinuro" Faletra committed May 07, 2017

linux (4.9.25-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.19
    - net/openvswitch: Set the ipv6 source tunnel key address attribute
      correctly
    - net: properly release sk_frag.page
    - [arm64] amd-xgbe: Fix jumbo MTU processing on newer hardware
    - openvswitch: Add missing case OVS_TUNNEL_KEY_ATTR_PAD
    - net: unix: properly re-increment inflight counter of GC discarded
      candidates
    - net: vrf: Reset rt6i_idev in local dst after put
    - net/mlx5: Add missing entries for set/query rate limit commands
    - net/mlx5e: Use the proper UAPI values when offloading TC vlan actions
    - net/mlx5: Increase number of max QPs in default profile
    - net/mlx5e: Count GSO/LRO packets correctly
    - ipv6: make sure to initialize sockc.tsflags before first use
    - ipv4: provide stronger user input validation in nl_fib_input()
    - socket, bpf: fix sk_filter use after free in sk_clone_lock
    - tcp: initialize icsk_ack.lrcvtime at session start time
    - Input: iforce,ims-pcu,hanwang,yealink,cm109,kbtab,sur40 - validate
      number of endpoints before using them
    - ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
    - ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
    - ALSA: hda - Adding a group of pin definition to fix headset problem
    - ACM gadget: fix endianness in notifications
    - usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's
      wBytesPerInterval
    - USB: uss720,idmouse,wusbcore: fix NULL-deref at probe
    - usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
    - usb: hub: Fix crash after failure to read BOS descriptor
    - USB: usbtmc: add missing endpoint sanity check
    - USB: usbtmc: fix probe error path
    - uwb: i1480-dfu: fix NULL-deref at probe
    - mmc: ushc: fix NULL-deref at probe
    - [armhf[ iio: adc: ti_am335x_adc: fix fifo overrun recovery
    - iio: sw-device: Fix config group initialization
    - iio: hid-sensor-trigger: Change get poll value function order to avoid
      sensor properties losing after resume from S3
    - parport: fix attempt to write duplicate procfiles
    - ext4: mark inode dirty after converting inline directory
    - ext4: lock the xattr block before checksuming it
    - [powerpc*/*64*] Fix idle wakeup potential to clobber registers
    - mmc: sdhci: Do not disable interrupts while waiting for clock
    - mmc: sdhci-pci: Do not disable interrupts in sdhci_intel_set_power
    - [x86] hwrng: amd - Revert managed API changes
    - [x86] hwrng: geode - Revert managed API changes
    - [armhf] clk: sunxi-ng: sun6i: Fix enable bit offset for hdmi-ddc module
      clock
    - [armhf] clk: sunxi-ng: mp: Adjust parent rate for pre-dividers
    - mwifiex: pcie: don't leak DMA buffers when removing
    - [x86] crypto: ccp - Assign DMA commands to the channel's CCP
    - xen/acpi: upload PM state from init-domain to Xen
    - [x86] iommu/vt-d: Fix NULL pointer dereference in device_to_iommu
    - [arm64] kaslr: Fix up the kernel image alignment
    - cpufreq: Restore policy min/max limits on CPU online
    - cgroup, net_cls: iterate the fds of only the tasks which are being
      migrated
    - blk-mq: don't complete un-started request in timeout handler
    - [x86] drm/amdgpu: reinstate oland workaround for sclk
    - jbd2: don't leak memory if setting up journal fails
    - [x86] intel_th: Don't leak module refcount on failure to activate
    - [x86] Drivers: hv: vmbus: Don't leak channel ids
    - [x86] Drivers: hv: vmbus: Don't leak memory when a channel is rescinded
    - libceph: don't set weight to IN when OSD is destroyed
    - [x86] device-dax: fix pmd/pte fault fallback handling
    - [armhf] drm/bridge: analogix dp: Fix runtime PM state on driver bind
    - nl80211: fix dumpit error path RTNL deadlocks
    - drm: reference count event->completion
    - fbcon: Fix vc attr at deinit
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.20
    - xfrm: policy: init locks early
    - [x86] KVM: cleanup the page tracking SRCU instance
    - virtio_balloon: init 1st buffer in stats vq
    - [mips*] ptrace: Preserve previous registers for short regset write
    - [sparc64] ptrace: Preserve previous registers for short regset write
    - fscrypt: remove broken support for detecting keyring key revocation
      (CVE-2017-7374)
    - sched/rt: Add a missing rescheduling point
    - [armhf] usb: musb: fix possible spinlock deadlock
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.21
    - libceph: force GFP_NOIO for socket allocations
    - xen/setup: Don't relocate p2m over existing one
    - xfs: only update mount/resv fields on success in __xfs_ag_resv_init
    - xfs: use per-AG reservations for the finobt
    - xfs: pull up iolock from xfs_free_eofblocks()
    - xfs: sync eofblocks scans under iolock are livelock prone
    - xfs: fix eofblocks race with file extending async dio writes
    - xfs: fix toctou race when locking an inode to access the data map
    - xfs: fail _dir_open when readahead fails
    - xfs: filter out obviously bad btree pointers
    - xfs: check for obviously bad level values in the bmbt root
    - xfs: verify free block header fields
    - xfs: allow unwritten extents in the CoW fork
    - xfs: mark speculative prealloc CoW fork extents unwritten
    - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t
    - xfs: update ctime and mtime on clone destinatation inodes
    - xfs: reject all unaligned direct writes to reflinked files
    - xfs: don't fail xfs_extent_busy allocation
    - xfs: handle indlen shortage on delalloc extent merge
    - xfs: split indlen reservations fairly when under reserved
    - xfs: fix uninitialized variable in _reflink_convert_cow
    - xfs: don't reserve blocks for right shift transactions
    - xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
    - xfs: tune down agno asserts in the bmap code
    - xfs: only reclaim unwritten COW extents periodically
    - xfs: fix and streamline error handling in xfs_end_io
    - xfs: Use xfs_icluster_size_fsb() to calculate inode alignment mask
    - xfs: use iomap new flag for newly allocated delalloc blocks
    - xfs: try any AG when allocating the first btree block when reflinking
    - scsi: libsas: fix ata xfer length
    - scsi: scsi_dh_alua: Check scsi_device_get() return value
    - scsi: scsi_dh_alua: Ensure that alua_activate() calls the completion
      function
    - ALSA: seq: Fix race during FIFO resize
    - ALSA: hda - fix a problem for lineout on a Dell AIO machine
    - [x86] ASoC: Intel: Skylake: fix invalid memory access due to wrong
      reference of pointer
    - HID: wacom: Don't add ghost interface as shared data
    - mmc: sdhci: Disable runtime pm when the sdio_irq is enabled
    - NFSv4.1 fix infinite loop on IO BAD_STATEID error
    - nfsd: map the ENOKEY to nfserr_perm for avoiding warning
    - [hppa] Clean up fixup routines for get_user()/put_user()
    - [hppa] Avoid stalled CPU warnings after system shutdown
    - [hppa] Fix access fault handling in pa_memcpy()
    - ACPI: Fix incompatibility with mcount-based function graph tracing
    - ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
    - USB: fix linked-list corruption in rh_call_control()
    - [x86] KVM: clear bus pointer when destroyed
    - KVM: kvm_io_bus_unregister_dev() should never fail
    - drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
    - [armhf,arm64] drm/vc4: Allocate the right amount of space for boot-time
      CRTC state.
    - [armhf] drm/etnaviv: (re-)protect fence allocation with GPU mutex
    - [x86] mm/KASLR: Exclude EFI region from KASLR VA space randomization
    - [x86] mce: Fix copy/paste error in exception table entries
    - lib/syscall: Clear return values when no stack
    - mm: rmap: fix huge file mmap accounting in the memcg stats
    - mm, hugetlb: use pte_present() instead of pmd_present() in
      follow_huge_pmd()
    - qla2xxx: Allow vref count to timeout on vport delete.
    - mm: workingset: fix premature shadow node shrinking with cgroups
    - blk: improve order of bio handling in generic_make_request()
    - blk: Ensure users for current->bio_list can see the full list.
    - padata: avoid race in reordering
    - nvme/core: Fix race kicking freed request_queue
    - nvme/pci: Disable on removal when disconnected
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.22
    - ppdev: check before attaching port
    - ppdev: fix registering same device name
    - [x86] drm/vmwgfx: Type-check lookups of fence objects
    - [x86] drm/vmwgfx: avoid calling vzalloc with a 0 size in
      vmw_get_cap_3d_ioctl()
    - drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
    - [x86] drm/vmwgfx: Remove getparam error message
    - sysfs: be careful of error returns from ops->show()
    - [armhf,arm64] KVM: Take mmap_sem in stage2_unmap_vm
    - [armhf,arm64] KVM: Take mmap_sem in kvm_arch_prepare_memory_region
    - [armhf,arm64] kvm: Fix locking for kvm_free_stage2_pgd
    - [x86] iio: bmg160: reset chip when probing
    - [arm64] mm: unaligned access by user-land should be received as SIGBUS
    - cfg80211: check rdev resume callback only for registered wiphy
    - CIFS: Reset TreeId to zero on SMB2 TREE_CONNECT
    - mm/page_alloc.c: fix print order in show_free_areas()
    - ptrace: fix PTRACE_LISTEN race corrupting task->state
    - dm verity fec: limit error correction recursion
    - dm verity fec: fix bufio leaks
    - ACPI / gpio: do not fall back to parsing _CRS when we get a deferral
    - xfs: Honor FALLOC_FL_KEEP_SIZE when punching ends of files
    - ring-buffer: Fix return value check in test_ringbuffer()
    - mac80211: unconditionally start new netdev queues with iTXQ support
    - brcmfmac: use local iftype avoiding use-after-free of virtual interface
    - [powerpc*] Disable HFSCR[TM] if TM is not supported
    - [powerpc*] mm: Add missing global TLB invalidate if cxl is active
    - [powerpc*/*64*]: Fix flush_(d|i)cache_range() called from modules
    - [powerpc*] Don't try to fix up misaligned load-with-reservation
      instructions
    - [powerpc*] crypto/crc32c-vpmsum: Fix missing preempt_disable()
    - dm raid: fix NULL pointer dereference for raid1 without bitmap
    - [s390x] decompressor: fix initrd corruption caused by bss clear
    - [s390x] uaccess: get_user() should zero on failure (again)
    - [mips*el/loongson-3] Check TLB before handle_ri_rdhwr() for Loongson-3
    - [mips*el/loongson-3] Add MIPS_CPU_FTLB for Loongson-3A R2
    - [mips*el/loongson-3] Flush wrong invalid FTLB entry for huge page
    - [mips*el/loongson-3] c-r4k: Fix Loongson-3's vcache/scache waysize
      calculation
    - mm/mempolicy.c: fix error handling in set_mempolicy and mbind
      (CVE-2017-7616)
    - random: use chacha20 for get_random_int/long
    - [armhf] drm/sun4i: tcon: Move SoC specific quirks to a DT matched data
      structure
    - [armhf] drm/sun4i: Add compatible strings for A31/A31s display pipelines
    - [armhf] drm/sun4i: Add compatible string for A31/A31s TCON (timing
      controller)
    - HID: i2c-hid: add a simple quirk to fix device defects
    - usb: dwc3: gadget: delay unmap of bounced requests
    - [x86] ASoC: Intel: bytct_rt5640: change default capture settings
    - [armhf,arm64] clocksource/drivers/arm_arch_timer: Don't assume clock runs
      in suspend
    - scsi: ufs: introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk
    - HID: multitouch: do not retrieve all reports for all devices
    - [arm64] mmc: sdhci-msm: Enable few quirks
    - scsi: ufs: ensure that host pa_tactivate is higher than device
    - svcauth_gss: Close connection when dropping an incoming message
    - scsi: ufs: add quirk to increase host PA_SaveConfigTime
    - [x86] platform: acer-wmi: Only supports AMW0_GUID1 on acer family
    - nvme: simplify stripe quirk
    - ACPI / sysfs: Provide quirk mechanism to prevent GPE flooding
    - HID: usbhid: Add quirk for the Futaba TOSD-5711BB VFD
    - [x86] drm/i915: actually drive the BDW reserved IDs
    - scsi: ufs: issue link starup 2 times if device isn't active
    - [armhf] serial: 8250_omap: Add OMAP_DMA_TX_KICK quirk for AM437x
    - ACPI / button: Change default behavior to lid_init_state=open
    - [x86] ACPI: save NVS memory for Lenovo G50-45
    - HID: wacom: don't apply generic settings to old devices
    - [arm64] firmware: qcom: scm: Fix interrupted SCM calls
    - [armhf] watchdog: s3c2410: Fix infinite interrupt in soft mode
    - [x86] platform: asus-wmi: Set specified XUSB2PR value for X550LB
    - [x86] platform: asus-wmi: Detect quirk_no_rfkill from the DSDT
    - [x86] reboot/quirks: Add ASUS EeeBook X205TA reboot quirk
    - [x86] reboot/quirks: Add ASUS EeeBook X205TA/W reboot quirk
    - usb-storage: Add ignore-residue quirk for Initio INIC-3619
    - [x86] reboot/quirks: Fix typo in ASUS EeeBook X205TA reboot quirk
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.23
    - [x86] drm/i915/gen9: Increase PCODE request timeout to 50ms
    - [x86] drm/i915: Nuke debug messages from the pipe update critical section
    - [x86] drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
    - [x86] drm/i915: Only enable hotplug interrupts if the display interrupts
      are enabled
    - [x86] drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
    - [x86] drm/i915: Stop using RP_DOWN_EI on Baytrail
    - [x86] drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
    - [armhf,arm64] i2c: bcm2835: Fix hang for writing messages larger than 16
      bytes
    - rt2x00usb: fix anchor initialization
    - rt2x00usb: do not anchor rx and tx urb's
    - [mips*] Introduce irq_stack
    - [mips*] Stack unwinding while on IRQ stack
    - [mips*] Only change $28 to thread_info if coming from user mode
    - [mips*] Switch to the irq_stack in interrupts
    - [mips*] Select HAVE_IRQ_EXIT_ON_IRQ_STACK
    - [mips*] IRQ Stack: Fix erroneous jal to plat_irq_dispatch
    - [x86] Revert "drm/i915/execlists: Reset RING registers upon resume"
    - blk-mq: Avoid memory reclaim when remapping queues
    - usb: hub: Wait for connection to be reestablished after port reset
    - net/mlx4_en: Fix bad WQE issue
    - net/mlx4_core: Fix racy CQ (Completion Queue) free
    - net/mlx4_core: Fix when to save some qp context flags for dynamic VST to
      VGT transitions
    - dma-buf: add support for compat ioctl
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.24
    - cgroup, kthread: close race window where new kthreads can be migrated to
      non-root cgroups
    - thp: fix MADV_DONTNEED vs. MADV_FREE race
    - thp: fix MADV_DONTNEED vs clear soft dirty race
    - zsmalloc: expand class bit
    - drm/nouveau/mpeg: mthd returns true on success now
    - drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
    - [armhf] drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
    - CIFS: reconnect thread reschedule itself
    - CIFS: store results of cifs_reopen_file to avoid infinite wait
    - Input: xpad - add support for Razer Wildcat gamepad
    - [x86] perf: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
    - [x86] efi: Don't try to reserve runtime regions
    - [x86] signals: Fix lower/upper bound reporting in compat siginfo
    - [x86] pmem: fix broken __copy_user_nocache cache-bypass assumptions
    - [x86] vdso: Ensure vdso32_enabled gets set to valid values only
    - [x86] vdso: Plug race between mapping and ELF header setup
    - [x86] acpi, nfit, libnvdimm: fix interleave set cookie calculation
      (64-bit comparison)
    - ACPI / scan: Set the visited flag for all enumerated devices
    - [hppa] fix bugs in pa_memcpy
    - efi/libstub: Skip GOP with PIXEL_BLT_ONLY format
    - efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
    - iscsi-target: Fix TMR reference leak during session shutdown
    - iscsi-target: Drop work-around for legacy GlobalSAN initiator
    - scsi: sr: Sanity check returned mode data
    - scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
    - scsi: qla2xxx: Add fix to read correct register value for ISP82xx.
    - scsi: sd: Fix capacity calculation with 32-bit sector_t
    - target: Avoid mappedlun symlink creation during lun shutdown
    - xen, fbfront: fix connecting to backend
    - new privimitive: iov_iter_revert()
    - make skb_copy_datagram_msg() et.al. preserve ->msg_iter on error
    - [x86] libnvdimm: fix blk free space accounting
    - [x86] libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep
      splat
    - [armhf] pwm: rockchip: State of PWM clock should synchronize with PWM
      enabled state
    - cpufreq: Bring CPUs up even if cpufreq_online() failed
    - [armhf] irqchip/irq-imx-gpcv2: Fix spinlock initialization
    - ftrace: Fix removing of second function probe
    - zram: do not use copy_page with non-page aligned address
    - ftrace: Fix function pid filter on instances
    - crypto: algif_aead - Fix bogus request dereference in completion function
    - crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618)
    - [hppa] Fix get_user() for 64-bit value on 32-bit kernel
    - dvb-usb-v2: avoid use-after-free (CVE-2017-8064)
    - drm/nouveau/disp/mcp7x: disable dptmds workaround (Closes: #850219)
    - [x86] mm: Tighten x86 /dev/mem with zeroing reads (CVE-2017-7889)
    - dvb-usb-firmware: don't do DMA on stack (CVE-2017-8061)
    - cxusb: Use a dma capable buffer also for reading (CVE-2017-8063)
    - virtio-console: avoid DMA from stack (CVE-2017-8067)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.25
    - KEYS: Disallow keyrings beginning with '.' to be joined as session
      keyrings (CVE-2016-9604)
    - KEYS: Change the name of the dead type to ".dead" to prevent user access
      (CVE-2017-6951)
    - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
      (CVE-2017-7472)
    - tracing: Allocate the snapshot buffer before enabling probe
    - ring-buffer: Have ring_buffer_iter_empty() return true when empty
    - mm: prevent NR_ISOLATE_* stats from going negative
    - cifs: Do not send echoes before Negotiate is complete (Closes: #856843)
    - CIFS: remove bad_network_name flag
    - [s390x] mm: fix CMMA vs KSM vs others
    - Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled
    - ACPI / power: Avoid maybe-uninitialized warning
    - [armhf] mmc: sdhci-esdhc-imx: increase the pad I/O drive strength for
      DDR50 card
    - ubifs: Fix RENAME_WHITEOUT support
    - ubifs: Fix O_TMPFILE corner case in ubifs_link()
    - mac80211: reject ToDS broadcast data frames
    - mac80211: fix MU-MIMO follow-MAC mode
    - ubi/upd: Always flush after prepared for an update
    - [powerpc*] kprobe: Fix oops when kprobed on 'stdu' instruction
    - [x86] mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs
    - [x86] mce: Make the MCE notifier a blocking one
    - device-dax: switch to srcu, fix rcu_read_lock() vs pte allocation

  [ Ben Hutchings ]
  * w1: Really enable W1_MASTER_GPIO as module (Closes: #858975)
  * debian/rules.real: Undefine $LANGUAGE, which can break debug symbols for
    vDSOs (Closes: #859807)
  * Bump ABI to 3
  * [s390x] Set NR_CPUS=256 (Closes: #858731)
  * [x86] usbip: Increase USBIP_VHCI_NR_HCS to 8 and USBIP_VHCI_HC_PORTS to 31
    (Closes: #859641)
  * [powerpc/powerpc64,ppc64*] target: Enable SCSI_IBMVSCSIS as module
  * cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
    (Closes: #859978)
  * udeb: Include all AHCI drivers in sata-modules (Closes: #860335)
  * [powerpc/powerpc64,ppc64] Set NR_CPUS=2048, matching ppc64el
  * [powerpc*/*64*] Enable CPUMASK_OFFSTACK to reduce stack usage
  * [mips*el/loongson-3] Set NR_CPUS=16 to allow for Loongson 3B2000
  * [mips*/octeon] Set NR_CPUS=64 to allow for Cavium CN7890
  * [arm64] Set NR_CPUS=256 to allow for multi-SoC systems (Closes: #861209)
  * [powerpc/powerpc-smp,powerpcspe] Explicitly set NR_CPUS=4
  * Move debug symbols back to the main archive, to avoid problems with the
    current handling in dak
  * linux-image: Disable signing until it's supported in dak
  * [rt] Update to 4.9.20-rt16:
    - rtmutex: Make lock_killable work
    - rtmutex: Provide rt_mutex_lock_state()
    - rtmutex: Provide locked slowpath
    - rwsem/rt: Lift single reader restriction
  * PCI: Enable PCIE_PTM (except on armel/marvell)
  * 6lowpan: Enable Generic Header Compression modules
  * net/sched: Enable NET_ACT_SKBMOD as module
  * ethernet: Enable NFP_NETVF as module
  * net/phy: Enable MICROSEMI_PHY as module
  * input/tablet: Enable TABLET_USB_PEGASUS as module
  * [x86] input/touchscreen: Enable TOUCHSCREEN_SURFACE3_SPI as module
  * serial/8250: Enable SERIAL_8250_MOXA as module
  * [x86] gpio: Enable GPIO_AMDPT as module
  * [x86] thermal: Enable INT3406_THERMAL as module
  * watchdog: Enable WATCHDOG_SYSFS
  * integrity: Enable IMA, IMA_DEFAULT_HASH_SHA256, IMA_APPRAISE,
    IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY, IMA_BLACKLIST_KEYRING
    (except on armel/marvell) (Closes: #788290)
  * media: Enable VIDEO_TW5864, VIDEO_TW686X as modules
  * [x86] amdgpu,sound/soc: Enable DRM_AMD_ACP; enable SND_SOC_AMD_ACP as module
  * hda: Set SND_HDA_PREALLOC_SIZE=2048 as recommended for PulseAudio
  * HID: Enable HID_SENSOR_CUSTOM_SENSOR as module
  * leds,USB: Enable USB_LEDS_TRIGGER_USBPORT as module
  * usbip: Enable USBIP_VUDC as module
  * USB/misc: Enable UCSI as module
  * leds: Enable LEDS_TRIGGER_DISK, LEDS_TRIGGER_MTD, LEDS_TRIGGER_PANIC
  * IB: Enable INFINIBAND_HFI1, INFINIBAND_I40IW, INFINIBAND_QEDR, RDMA_RXE
    as modules
  * [amd64] EDAC: Enable EDAC_SKX as module
  * [x86] comedi: Enable COMEDI_ADV_PCI1720, COMEDI_ADV_PCI1760 as modules
  * [x86] platform: Enable INTEL_HID_EVENT as module
  * [x86] hwtracing: Enable INTEL_TH, INTEL_TH_PCI, INTEL_TH_GTH, INTEL_TH_MSU,
    INTEL_TH_PTI as modules
  * [rt] tracing: Enable HWLAT_TRACER
  * [x86] crypto: Enable CRYPTO_DEV_QAT_C3XXX, CRYPTO_DEV_QAT_C62X,
    CRYPTO_DEV_QAT_C3XXXVF, CRYPTO_DEV_QAT_C62XVF as modules
  * crypto: Enable CRYPTO_DEV_CHELSIO as module
  * [arm64] Enable ARMV8_DEPRECATED, SWP_EMULATION, CP15_BARRIER_EMULATION,
    SETEND_EMULATION (Closes: #861384)
  * udeb: Add tifm_7xx1 to mmc-modules (Closes: #861195)
  * leds: Enable LEDS_GPIO as module for all configurations with GPIOs
    (Closes: #860569)
  * selinux: Set SECURITY_SELINUX_CHECKREQPROT_VALUE=0, per default.
    This may break some old applications if SELinux is enabled, and can be
    reverted using the kernel parameter: checkreqprot=1
  * udeb: Move mfd-core to kernel-image, as both input-modules and
    mmc-modules need it
  * crypto: Change CRYPTO_SHA256 from module to built-in, as required by IMA

  [ Salvatore Bonaccorso ]
  * ping: implement proper locking (CVE-2017-2671)
  * macsec: avoid heap overflow in skb_to_sgvec (CVE-2017-7477)
  * macsec: dynamically allocate space for sglist
  * nfsd: check for oversized NFSv2/v3 arguments (CVE-2017-7645)
  * nfsd4: minor NFSv2/v3 write decoding cleanup
  * nfsd: stricter decoding of write-like NFSv2/v3 ops (CVE-2017-7895)

  [ Aurelien Jarno ]
  * [mips*/octeon] Drop obsolete patch adding support for the UBNT E200
    board.
  * [mips*el/loongson-3] Disable PAGE_EXTENSION and PAGE_POISONING.

  [ John Paul Adrian Glaubitz ]
  * [m68k] udeb: Enable suffix for kernel-image (Closes: #859366)

linux (4.9.18-1parrot18) testing; urgency=medium

  * Import new upstream release.

linux (4.9.18-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.17
    - net/mlx5e: Register/unregister vport representors on interface
      attach/detach
    - net/mlx5e: Do not reduce LRO WQE size when not using build_skb
    - net/mlx5e: Fix wrong CQE decompression
    - vxlan: correctly validate VXLAN ID against VXLAN_N_VID
    - vti6: return GRE_KEY for vti6
    - vxlan: don't allow overwrite of config src addr
    - ipv4: mask tos for input route
    - net sched actions: decrement module reference count after table flush.
    - l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv
    - net: phy: Avoid deadlock during phy_error()
    - vxlan: lock RCU on TX path
    - geneve: lock RCU on TX path
    - tcp/dccp: block BH for SYN processing
    - net: bridge: allow IPv6 when multicast flood is disabled
    - net: don't call strlen() on the user buffer in packet_bind_spkt()
    - net: net_enable_timestamp() can be called from irq contexts
    - ipv6: orphan skbs in reassembly unit
    - dccp: Unlock sock before calling sk_free()
    - strparser: destroy workqueue on module exit
    - tcp: fix various issues for sockets morphing to listen state
    - net: fix socket refcounting in skb_complete_wifi_ack()
    - net: fix socket refcounting in skb_complete_tx_timestamp()
    - net/sched: act_skbmod: remove unneeded rcu_read_unlock in tcf_skbmod_dump
    - dccp: fix use-after-free in dccp_feat_activate_values
    - vrf: Fix use-after-free in vrf_xmit
    - net/tunnel: set inner protocol in network gro hooks
    - act_connmark: avoid crashing on malformed nlattrs with null parms
    - mpls: Send route delete notifications when router module is unloaded
    - mpls: Do not decrement alive counter for unregister events
    - ipv6: make ECMP route replacement less greedy
    - ipv6: avoid write to a possibly cloned skb
    - bridge: drop netfilter fake rtable unconditionally
    - dccp/tcp: fix routing redirect race
    - tun: fix premature POLLOUT notification on tun devices
    - dccp: fix memory leak during tear-down of unsuccessful connection request
    - bpf: Detect identical PTR_TO_MAP_VALUE_OR_NULL registers
    - bpf: fix state equivalence
    - bpf: fix regression on verifier pruning wrt map lookups
    - bpf: fix mark_reg_unknown_value for spilled regs on map value marking
    - dmaengine: iota: ioat_alloc_chan_resources should not perform sleeping
      allocations.
    - xen: do not re-use pirq number cached in pci device msi msg data
    - igb: Workaround for igb i210 firmware issue
    - igb: add i211 to i210 PHY workaround
    - [x86] hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic
    - PCI: Separate VF BAR updates from standard BAR updates
    - PCI: Remove pci_resource_bar() and pci_iov_resource_bar()
    - PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE
    - PCI: Don't update VF BARs while VF memory space is enabled
    - PCI: Update BARs using property bits appropriate for type
    - PCI: Ignore BAR updates on virtual functions
    - PCI: Do any VF BAR updates before enabling the BARs
    - [powerpc*] ibmveth: calculate gso_segs for large packets
    - [x86] Drivers: hv: ring_buffer: count on wrap around mappings in
      get_next_pkt_raw() (v2)
    - vfio/spapr: Postpone allocation of userspace version of TCE table
    - [powerpc*] iommu: Stop using @current in mm_iommu_xxx
    - [powerpc*] vfio/spapr: Reference mm in tce_container
    - [powerpc*] mm/iommu, vfio/spapr: Put pages on VFIO container shutdown
    - [powerpc*] vfio/spapr: Add a helper to create default DMA window
    - [powerpc*] vfio/spapr: Postpone default window creation
    - drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
    - drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
    - drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing
      classes
    - block: allow WRITE_SAME commands with the SG_IO ioctl
    - [s390x] zcrypt: Introduce CEX6 toleration
    - uvcvideo: uvc_scan_fallback() for webcams with broken chain
    - [x86] ACPI / blacklist: add _REV quirks for Dell Precision 5520 and 3520
    - [x86] ACPI / blacklist: Make Dell Latitude 3350 ethernet work
    - serial: 8250_pci: Detach low-level driver during PCI error recovery
    - [armhf] clk: bcm2835: Fix ->fixed_divider of pllh_aux
    - [armhf] drm/vc4: Fix race between page flip completion event and clean-up
    - [armhf] drm/vc4: Fix ->clock_select setting for the VEC encoder
    - [arm64] KVM: VHE: Clear HCR_TGE when invalidating guest TLBs
    - [armhf,arm64] irqchip/gicv3-its: Add workaround for QDF2400 ITS erratum
      0065
    - [x86] tsc: Fix ART for TSC_KNOWN_FREQ
    - [x86] perf: Fix CR4.PCE propagation to use active_mm instead of mm
    - futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
    - futex: Add missing error handling to FUTEX_REQUEUE_PI
    - locking/rwsem: Fix down_write_killable() for
      CONFIG_RWSEM_GENERIC_SPINLOCK=y
    - [powerpc*] crypto: Fix initialisation of crc32c context
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.18
    - [armhf] drm/vc4: Fix termination of the initial scan for branch targets.
    - [armhf] drm/vc4: Use runtime autosuspend to avoid thrashing V3D power
      state.
    - qla2xxx: Fix memory leak for abts processing
    - qla2xxx: Fix request queue corruption.
    - [hppa] Optimize flush_kernel_vmap_range and invalidate_kernel_vmap_range
    - [hppa] Fix system shutdown halt
    - perf/core: Fix use-after-free in perf_release()
    - perf/core: Fix event inheritance on fork()
    - NFS prevent double free in async nfs4_exchange_id
    - cpufreq: Fix and clean up show_cpuinfo_cur_freq()
    - [powerpc*] boot: Fix zImage TOC alignment
    - md/raid1/10: fix potential deadlock
    - target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
    - scsi: lpfc: Add shutdown method for kexec
    - scsi: libiscsi: add lock around task lists to fix list corruption
      regression
    - target: Fix VERIFY_16 handling in sbc_parse_cdb
    - isdn/gigaset: fix NULL-deref at probe
    - gfs2: Avoid alignment hole in struct lm_lockname
    - percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
    - cgroup/pids: remove spurious suspicious RCU usage warning
    - [x86] drm/amdgpu/si: add dpm quirk for Oland
    - ext4: fix fencepost in s_first_meta_bg validation (Closes: #856808)

  [ Ben Hutchings ]
  * [powerpc*] Ignore ABI changes in cxl (fixes FTBFS) (Closes: #858530)
    and IOMMU setup
  * Ignore ABI changes in bpf, dccp, libiscsi
  * [x86] Ignore ABI changes in kvm
  * [rt] Update to 4.9.18-rt14:
    - lockdep: Fix per-cpu static objects
    - futex: Cleanup variable names for futex_top_waiter()
    - futex: Use smp_store_release() in mark_wake_futex()
    - futex: Remove rt_mutex_deadlock_account_*()
    - futex,rt_mutex: Provide futex specific rt_mutex API
    - futex: Change locking rules
    - futex: Cleanup refcounting
    - futex: Rework inconsistent rt_mutex/futex_q state
    - futex: Pull rt_mutex_futex_unlock() out from under hb->lock
    - futex,rt_mutex: Introduce rt_mutex_init_waiter()
    - futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
    - futex: Rework futex_lock_pi() to use rt_mutex_*_proxy_lock()
    - futex: Futex_unlock_pi() determinism
    - futex: Drop hb->lock before enqueueing on the rtmutex
    - futex: workaround migrate_disable/enable in different context
    - Revert "kernel/futex: don't deboost too early"
  * xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
    (CVE-2017-7184)
  * xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (CVE-2017-7184)
  * scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187)
  * [x86] vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
    (CVE-2017-7261)
  * [x86] drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
    (CVE-2017-7294)
  * net/packet: Fix integer overflow in various range checks (CVE-2017-7308)
  * [arm64] rtc: tegra: Implement clock handling (Closes: #858514)
  * [armhf] sound/soc: Enable SND_SUN4I_SPDIF as module (Closes: #857410)
  * [arm64,x86] Enable CROS_KBD_LED_BACKLIGHT as module (Closes: #856906)
  * netfilter: nft_ct: add notrack support (Closes: #845500)
  * w1: Enable W1_MASTER_GPIO as module (Closes: #858975)

  [ James Clarke ]
  * [sparc64] udeb: Re-add ufs-modules (Closes: #858049)

linux (4.9.16-1parrot0) testing; urgency=medium

  * Import new upstream release

linux (4.9.13-1parrot1) testing; urgency=medium

  * Minor fixes

linux (4.9.13-1parrot0) testing; urgency=medium

  * Import new upstream release

Ben Hutchings authored Feb 27, 2017 and Lorenzo "Palinuro" Faletra committed Mar 02, 2017

linux (4.9.13-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
    - can: Fix kernel panic at security_sock_rcv_skb
    - net/mlx5e: Fix update of hash function/key via ethtool
    - net/sched: matchall: Fix configuration race
    - ipv6: fix ip6_tnl_parse_tlv_enc_lim()
    - ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
    - tcp: fix 0 divide in __tcp_select_window()
    - stmmac: Discard masked flags in interrupt status register
    - net: use a work queue to defer net_disable_timestamp() work
    - netlabel: out of bound access in cipso_v4_validate()
    - ip6_gre: fix ip6gre_err() invalid reads (CVE-2017-5897)
    - ipv6: tcp: add a missing tcp_v6_restore_cb()
    - tcp: avoid infinite loop in tcp_splice_read() (CVE-2017-6214)
    - tun: read vnet_hdr_sz once
    - macvtap: read vnet_hdr_size once
    - rtl8150: Use heap buffers for all register access
    - catc: Combine failure cleanup code in catc_probe()
    - catc: Use heap buffer for memory size test
    - mlx4: Invoke softirqs after napi_reschedule
    - lwtunnel: valid encap attr check should return 0 when lwtunnel
      is disabled
    - sit: fix a double free on error path
    - net: introduce device min_header_len
    - packet: round up linear to header len
    - ping: fix a null pointer dereference
    - net: dsa: Do not destroy invalid network devices
    - l2tp: do not use udp_ioctl()
    - mld: do not remove mld souce list info when set link down
    - igmp, mld: Fix memory leak in igmpv3/mld_del_delrec()
    - tcp: fix mark propagation with fwmark_reflect enabled
    - net/mlx5: Don't unlock fte while still using it
    - tcp: don't annotate mark on control socket from
      tcp_v6_send_response()
    - [x86] fpu/xstate: Fix xcomp_bv in XSAVES header
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.12
    - vfs: fix uninitialized flags in splice_to_pipe()
    - siano: make it work again with CONFIG_VMAP_STACK
    - fuse: fix use after free issue in fuse_dev_do_read()
    - fuse: fix uninitialized flags in pipe_buffer
    - mmc: core: fix multi-bit bus width without high-speed mode
    - [powerpc*/*64*] Disable use of radix under a hypervisor
    - scsi: don't BUG_ON() empty DMA transfers
    - Fix missing sanity check in /dev/sg
    - [x86] Input: elan_i2c - add ELAN0605 to the ACPI table
    - drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
    - drm/dp/mst: fix kernel oops when turning off secondary monitor
    - futex: Move futex_init() to core_initcall
    - [armel,armhf] 8658/1: uaccess: fix zeroing of 64-bit get_user()
    - Revert "i2c: designware: detect when dynamic tar update is possible"
    - PCI/PME: Restore pcie_pme_driver.remove
    - printk: use rcuidle console tracepoint
    - timekeeping: Use deferred printk() in debug code
    - bcache: Make gc wakeup sane, remove set_task_state()
    - videodev2.h: go back to limited range Y'CbCr for SRGB and, ADOBERGB
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13
    - net/mlx5e: Disable preemption when doing TC statistics upcall
    - net/llc: avoid BUG_ON() in skb_orphan() (CVE-2017-6345)
    - net: ethernet: ti: cpsw: fix cpsw assignment in resume
      (regression in 4.9)
    - packet: fix races in fanout_add() (CVE-2017-6346)
    - packet: Do not call fanout_release from atomic contexts
      (regression in 4.9)
    - net: neigh: Fix netevent NETEVENT_DELAY_PROBE_TIME_UPDATE notification
    - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074)
    - vxlan: fix oops in dev_fill_metadata_dst (regression in 4.6)
    - irda: Fix lockdep annotations in hashbin_delete(). (CVE-2017-6348)
    - ptr_ring: fix race conditions when resizing
    - ip: fix IP_CHECKSUM handling (regression in 4.0) (CVE-2017-6347)
    - net: socket: fix recvmmsg not returning error from sock_error
      (regression in 4.6)
    - USB: serial: mos7840: fix another NULL-deref at open
    - USB: serial: ftdi_sio: fix modem-status error handling
    - USB: serial: ftdi_sio: fix extreme low-latency setting
    - USB: serial: ftdi_sio: fix line-status over-reporting
    - USB: serial: spcp8x5: fix modem-status handling
    - USB: serial: opticon: fix CTS retrieval at open
    - USB: serial: ark3116: fix register-accessor error handling
    - netfilter: nf_ct_helper: warn when not applying default helper assignment
    - block: fix double-free in the failure path of cgwb_bdi_init()
    - rtlwifi: rtl_usb: Fix for URB leaking when doing ifconfig up/down
    - xfs: clear delalloc and cache on buffered write failure

  [ Ben Hutchings ]
  * [armel] dts: kirkwood: Fix SATA pinmux-ing for TS419 (Closes: #855017)
  * [armhf] Enable DRM_OMAP_PANEL_TPO_TD028TTEC1, PWM_OMAP_DMTIMER as modules
    (Closes: #855472)
  * net: Ignore ABI changes to can_rx_register(), ip6_xmit()
  * net: Avoid ABI change for min_header_len
  * udeb: Add more USB host and dual-role drivers to usb-modules
    (Closes: #856111)
  * [x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596)
  * ipc/shm: Fix shmat mmap nil-page protection (CVE-2017-5669)
  * time: Disable TIMER_STATS (CVE-2017-5967)
  * sctp: deny peeloff operation on asocs with threads sleeping on it
    (CVE-2017-6353)
  * [rt] Update to 4.9.13-rt10:
    - sched/rt: Add a missing rescheduling point
    - lockdep: Handle statically initialized PER_CPU locks proper
    - Change export of rt_mutex_destroy() back to GPL-only

linux (4.9.10-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7
    - drm: Schedule the output_poll_work with 1s delay if we have delayed event
    - drm: Fix broken VT switch with video=1366x768 option
    - [x86] drm/i915: Ignore bogus plane coordinates on SKL when the plane is
      not visible
    - [armhf,arm64] drm/vc4: Fix memory leak of the CRTC state.
    - [armhf,arm64] drm/vc4: fix a bounds check
    - Revert "drm/radeon: always apply pci shutdown callbacks"
    - drm/atomic: clear out fence when duplicating state
    - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
    - mm/mempolicy.c: do not put mempolicy before using its nodemask
    - mm, page_alloc: fix check for NULL preferred_zone
    - mm, page_alloc: fix fast-path race with cpuset update or removal
    - mm, page_alloc: move cpuset seqcount checking to slowpath
    - mm, page_alloc: fix premature OOM when racing with cpuset mems update
    - userns: Make ucounts lock irq-safe
    - sysctl: fix proc_doulongvec_ms_jiffies_minmax()
    - xfs: prevent quotacheck from overloading inode lru
    - ISDN: eicon: silence misleading array-bounds warning
    - Btrfs: remove old tree_root case in btrfs_read_locked_inode()
    - Btrfs: disable xattr operations on subvolume directories
    - Btrfs: remove ->{get, set}_acl() from btrfs_dir_ro_inode_operations
    - RDMA/cma: Fix unknown symbol when CONFIG_IPV6 is not enabled
    - [s390x] mm: Fix cmma unused transfer from pgste into pte
    - [s390x] ptrace: Preserve previous registers for short regset write
    - IB/cxgb3: fix misspelling in header guard
    - IB/iser: Fix sg_tablesize calculation
    - IB/srp: fix mr allocation when the device supports sg gaps
    - IB/srp: fix invalid indirect_sg_entries parameter value
    - can: c_can_pci: fix null-pointer-deref in c_can_start() - set device
      pointer
    - can: ti_hecc: add missing prepare and unprepare of the clock
    - [hppa] Don't use BITS_PER_LONG in userspace-exported swab.h header
    - nfs: Don't increment lock sequence ID after NFS4ERR_MOVED
    - NFSv4.1: Fix a deadlock in layoutget
    - NFSv4.0: always send mode in SETATTR after EXCLUSIVE4
    - SUNRPC: cleanup ida information when removing sunrpc module
    - iw_cxgb4: free EQ queue memory on last deref
    - pctv452e: move buffer to heap, no mutex
    - v4l: tvp5150: Reset device at probe time, not in get/set format handlers
    - v4l: tvp5150: Fix comment regarding output pin muxing
    - v4l: tvp5150: Don't override output pinmuxing at stream on/off time
    - [x86] drm/i915: Clear ret before unbinding in i915_gem_evict_something()
    - [x86] drm/i915: prevent crash with .disable_display parameter
    - [x86] drm/i915: Don't leak edid in intel_crt_detect_ddc()
    - [x86] drm/i915: Don't init hpd polling for vlv and chv from
      runtime_suspend()
    - [x86] drm/i915: Fix calculation of rotated x and y offsets for planar
      formats
    - [x86] drm/i915: Check for NULL atomic state in
      intel_crtc_disable_noatomic()
    - IB/umem: Release pid in error and ODP flow
    - [x86] pinctrl: baytrail: Rectify debounce support
    - memory_hotplug: make zone_can_shift() return a boolean value
    - virtio_mmio: Set DMA masks appropriately
    - mm, memcg: do not retry precharge charges
    - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
      (CVE-2017-6001)
    - [x86] drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.8
    - r8152: fix the sw rx checksum is unavailable
    - [x86] netvsc: add rcu_read locking to netvsc callback
    - net: lwtunnel: Handle lwtunnel_fill_encap failure
    - net: ipv4: fix table id in getroute response
    - tcp: fix tcp_fastopen unaligned access complaints on sparc
    - openvswitch: maintain correct checksum state in conntrack actions
    - mlx4: do not call napi_schedule() without care
    - ip6_tunnel: Account for tunnel header in tunnel MTU
    - ax25: Fix segfault after sock connection timeout
    - net sched actions: fix refcnt when GETing of action after bind
    - virtio: don't set VIRTIO_NET_HDR_F_DATA_VALID on xmit
    - virtio-net: restore VIRTIO_HDR_F_DATA_VALID on receiving
    - vxlan: fix byte order of vxlan-gpe port number
    - net: fix harmonize_features() vs NETIF_F_HIGHDMA
    - lwtunnel: fix autoload of lwt modules
    - ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock
    - tcp: initialize max window for a new fastopen socket
    - net/mlx5e: Do not recycle pages from emergency reserve
    - bridge: netlink: call br_changelink() during br_dev_newlink()
    - net: mpls: Fix multipath selection for LSR use case
    - r8152: don't execute runtime suspend if the tx is not empty
    - af_unix: move unix_mknod() out of bindlock
    - net: Specify the owning module for lwtunnel ops
    - lwtunnel: Fix oops on state free after encap module unload
    - [armhf] net: dsa: Bring back device detaching in dsa_slave_suspend()
    - xfs: bump up reserved blocks in xfs_alloc_set_aside
    - xfs: fix bogus minleft manipulations
    - xfs: adjust allocation length in xfs_alloc_space_available
    - xfs: don't rely on ->total in xfs_alloc_space_available
    - xfs: don't print warnings when xfs_log_force fails
    - xfs: make the ASSERT() condition likely
    - xfs: sanity check directory inode di_size
    - xfs: add missing include dependencies to xfs_dir2.h
    - xfs: replace xfs_mode_to_ftype table with switch statement
    - xfs: sanity check inode mode when creating new dentry
    - xfs: sanity check inode di_mode
    - xfs: don't wrap ID in xfs_dq_get_next_id
    - xfs: fix xfs_mode_to_ftype() prototype
    - xfs: fix COW writeback race
    - xfs: verify dirblocklog correctly
    - xfs: remove racy hasattr check from attr ops
    - xfs: extsize hints are not unlikely in xfs_bmap_btalloc
    - xfs: clear _XBF_PAGES from buffers when readahead page
    - xfs: fix bmv_count confusion w/ shared extents
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9
    - PCI/ASPM: Handle PCI-to-PCIe bridges as roots of PCIe hierarchies
    - ext4: validate s_first_meta_bg at mount time (CVE-2016-10208)
    - [x86] efi: Always map the first physical page into the EFI pagetables
    - [arm64] efi/fdt: Avoid FDT manipulation after ExitBootServices()
      (Closes: #853170)
    - HID: cp2112: fix sleep-while-atomic
    - HID: cp2112: fix gpio-callback error handling
    - [x86] pinctrl: baytrail: Add missing spinlock usage in
      byt_gpio_irq_handler
    - [x86] drm/amdgpu/si: fix crash on headless asics
    - drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
    - drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
    - crypto: api - Clear CRYPTO_ALG_DEAD bit before registering an alg
    - crypto: arm64/aes-blk - honour iv_out requirement in CBC and CTR modes
    - perf/core: Fix use-after-free bug
    - perf/core: Fix PERF_RECORD_MMAP2 prot/flags for anonymous memory
    - ata: sata_mv:- Handle return value of devm_ioremap.
    - libata: apply MAX_SEC_1024 to all CX1-JB*-HP devices
    - libata: Fix ATA request sense
    - [powerpc*] eeh: Fix wrong flag passed to eeh_unfreeze_pe()
    - [powerpc*] Add missing error check to prom_find_boot_cpu()
    - [powerpc*] mm: Use the correct pointer when setting a 2MB pte
    - NFSD: Fix a null reference case in find_or_create_lock_stateid()
    - svcrpc: fix oops in absence of krb5 module
    - zswap: disable changing params if init fails
    - cifs: initialize file_info_lock
    - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone()
    - base/memory, hotplug: fix a kernel oops in show_valid_zones()
    - mm, fs: check for fatal signals in do_generic_file_read()
    - tracing: Fix hwlat kthread migration
    - can: bcm: fix hrtimer/tasklet termination in bcm op removal
    - cgroup: don't online subsystems before cgroup_name/path() are operational
    - mmc: sdhci: Ignore unexpected CARD_INT interrupts
    - vhost: fix initialization for vq->is_le
    - [armhf] regulator: axp20x: AXP806: Fix dcdcb being set instead of dcdce
    - percpu-refcount: fix reference leak during percpu-atomic transition
    - [x86] pinctrl: baytrail: Debounce register is one per community
    - [x86] pinctrl: intel: merrifield: Add missed check in mrfld_config_set()
    - iwlwifi: fix double hyphen in MODULE_FIRMWARE for 8000
    - iwlwifi: mvm: avoid crash on restart w/o reserved queues
    - HID: usbhid: Quirk a AMI virtual mouse and keyboard with ALWAYS_POLL
    - HID: hid-lg: Fix immediate disconnection of Logitech Rumblepad 2
    - HID: wacom: Fix poor prox handling in 'wacom_pl_irq'
    - [x86] perf/intel/uncore: Clean up hotplug conversion fallout
    - [armhf] dmaengine: cppi41: Fix runtime PM timeouts with USB mass storage
    - [armhf] dmaengine: cppi41: Fix oops in cppi41_runtime_resume
    - [x86] KVM: do not save guest-unsupported XSAVE state
    - USB: Add quirk for WORLDE easykey.25 MIDI keyboard
    - usb: musb: Fix host mode error -71 regression
    - usb: gadget: f_fs: Assorted buffer overflow checks.
    - irqdomain: Avoid activating interrupts more than once
    - [x86] irq: Make irq activate operations symmetric
    - iw_cxgb4: set correct FetchBurstMax for QPs
    - fs: break out of iomap_file_buffered_write on fatal signals
    - [x86] drm/i915/execlists: Reset RING registers upon resume
      (Closes: #855055)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10
    - [x86] cpufreq: intel_pstate: Disable energy efficiency optimization
    - acpi, nfit: fix acpi_nfit_flush_probe() crash
    - [x86] libnvdimm, namespace: do not delete namespace-id 0
    - [x86] libnvdimm, pfn: fix memmap reservation size versus 4K alignment
    - dm rq: cope with DM device destruction while in dm_old_request_fn()
    - crypto: algif_aead - Fix kernel panic on list_del
    - [x86] crypto: qat - fix bar discovery for c62x
    - [x86] crypto: qat - zero esram only for DH85x devices
    - [x86] crypto: ccp - Fix DMA operations when IOMMU is enabled
    - [x86] crypto: ccp - Fix double add when creating new DMA command
    - Input: uinput - fix crash when mixing old and new init style
    - selinux: fix off-by-one in setprocattr (CVE-2017-2618)
    - [x86] Revert "x86/ioapic: Restore IO-APIC irq_chip retrigger callback"
    - rtlwifi: rtl8192ce: Fix loading of incorrect firmware (Closes: #853073)
    - cpumask: use nr_cpumask_bits for parsing functions (Closes: #848682)
    - [armel,armhf] 8643/3: arm/ptrace: Preserve previous registers for short
      regset write
    - [x86] drm/i915: fix use-after-free in page_flip_completed()
    - [x86] drm/i915/bxt: Add MST support when do DPLL calculation
    - drm/atomic: Fix double free in drm_atomic_state_default_clear
    - target: Don't BUG_ON during NodeACL dynamic -> explicit conversion
    - target: Use correct SCSI status during EXTENDED_COPY exception
    - target: Fix early transport_generic_handle_tmr abort scenario
    - target: Fix multi-session dynamic se_node_acl double free OOPs
    - target: Fix COMPARE_AND_WRITE ref leak for non GOOD status
    - [armhf] dts: imx6dl: fix GPIO4 range
    - [armhf] 8642/1: LPAE: catch pending imprecise abort on unmask
    - [x86] drm/i915: Always convert incoming exec offsets to non-canonical
    - nl80211: Fix mesh HT operation check
    - mac80211: Fix adding of mesh vendor IEs
    - net/mlx5e: Modify TIRs hash only when it's needed
    - [x86] Drivers: hv: vmbus: Base host signaling strictly on the ring state
    - [x86] Drivers: hv: vmbus: On write cleanup the logic to interrupt the host
    - [x86] Drivers: hv: vmbus: On the read path cleanup the logic to interrupt
      the host
    - [x86] Drivers: hv: vmbus: finally fix hv_need_to_signal_on_read()
    - [s390x] scsi: zfcp: fix use-after-free by not tracing WKA port open/close
      on failed send
    - scsi: aacraid: Fix INTx/MSI-x issue with older controllers
    - scsi: mpt3sas: disable ASPM for MPI2 controllers
    - scsi: qla2xxx: Avoid that issuing a LIP triggers a kernel crash
    - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls
    - [powerpc*] mm/radix: Update ERAT flushes when invalidating TLB
    - [powerpc*] powernv: Fix CPU hotplug to handle waking on HVI
    - xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend()
    - ALSA: hda - adding a new NV HDMI/DP codec ID in the driver
    - ALSA: seq: Fix race at creating a queue
    - ALSA: seq: Don't handle loop timeout at snd_seq_pool_done()
    - Revert "ALSA: line6: Only determine control port properties if needed"
    - [x86] mm/ptdump: Fix soft lockup in page table walker
    - [x86] CPU/AMD: Bring back Compute Unit ID
    - [x86] CPU/AMD: Fix Zen SMT topology
    - IB/rxe: Fix resid update
    - IB/rxe: Fix mem_check_range integer overflow (CVE-2016-8636)
    - stacktrace, lockdep: Fix address, newline ugliness
    - perf diff: Fix -o/--order option behavior (again)
    - perf diff: Fix segfault on 'perf diff -o N' option
    - perf/core: Fix crash in perf_event_read()

  [ Ben Hutchings ]
  * Bump ABI to 2
  * [or1k] Remove configuration, as the port has been abandoned
  * [arm64] Enable KEXEC (Closes: #852747)
  * [arm64,armhf,x86] usb: gadget: Enable USB_CONFIGFS, USB_ETH, USB_GADGETFS,
    USB_FUNCTIONFS, USB_G_SERIAL as modules;
    USB_CONFIGFS_{SERIAL,ACM,OBEX,NCM,ECM,ECM_SUBSET,RNDIS,EEM,PHONET,MASS_STORAGE},
    USB_CONFIGFS_F_{LB_SS,LS,UAC1,UAC2,MIDI,HID,UVC,PRINTER}, USB_ETH_RNDIS,
    USB_FUNCTIONFS_{ETH,RNDIS,GENERIC} (thanks to Riku Voipio)
  * [ppc64el] Disable IBMEBUS; this bus does not exist on POWER8 systems
  * aufs: Update support patchset to aufs4.9-20170206
  * [rt] Update to 4.9.9-rt6:
    - Revert "btrfs: swap free() and trace point in run_ordered_work()"
    - pinctrl: qcom: Use raw spinlock variants
    - x86/mm/cpa: avoid wbinvd() for PREEMPT
    - Revert "radix-tree: Make RT aware"
    - radix-tree: use local locks
    - softirq: wake the timer softirq if needed
    - timers: Don't wake ktimersoftd on every tick
    - rt: Drop mutex_disable() on !DEBUG configs and the GPL suffix from export
      symbol
    - cpuset: Convert callback_lock to raw_spinlock_t
  * pegasus: Use heap buffers for all register access (Closes: #852556)
  * test-patches: Use the pkg.linux.notools build profile
  * test-patches: Set default number of jobs to number of available processors
  * dccp: Disable auto-loading as mitigation against local exploits
  * net: ipv6: check route protocol when deleting routes (Closes: #855153)
  * [arm64] drm: Enable DRM_AST as module (Closes: #820168)
    - udeb: Add ast to fb-modules
  * [armel/marvell] hwmon: Enable SENSORS_G762 as module (Closes: #854662)
  * [m68k] Change MAC8390, MAC_SCSI from built-in to modules (Closes: #826614)
    - udeb: Add mac8390 to nic-shared-modules
  * udeb: Add bcache to md-modules (Closes: #718548)
  * [x86] platform: acer-wmi: setup accelerometer when machine has appropriate
    notify event (Closes: #853067)
  * [x86] xen: Fix APIC id mismatch warning on Intel (Closes: #853193)
  * media: dvb-usb-dibusb-mc-common: Add MODULE_LICENSE (Closes: #853110)

  [ Roger Shimizu ]
  * [armel] ARM: dts: orion5x-lschl: Fix model name
  * [armel] ARM: dts: orion5x-lschl: More consistent naming on linkstation
    series
  * [armel] ARM: orion5x: fix Makefile for linkstation-lschl.dtb

  [ Salvatore Bonaccorso ]
  * ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970)
  * sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986)

linux (4.9.6-3parrot0) testing; urgency=medium

  * Import new Debian version
  * Fix patches

linux (4.9.6-3) unstable; urgency=medium

  * btree,musb,st_sensors: Ignore ABI changes (fixes FTBFS on armel,armhf)

linux (4.9.6-2) unstable; urgency=medium

  * linux-cpupower: Use dh-exec architecture filtering for x86-specific files
    (fixes FTBFS on !x86)

linux (4.9.6-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3
    - iio: common: st_sensors: fix channel data parsing
    - [mips] staging: octeon: Call SET_NETDEV_DEV()
    - ALSA: hda - Fix up GPIO for ASUS ROG Ranger
    - ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
    - ALSA: usb-audio: Fix irq/process data synchronization
    - fscrypt: fix renaming and linking special files
    - [hppa/parisc] Add line-break when printing segfault info
    - [hppa/parisc] Mark cr16 clocksource unstable on SMP systems
    - HID: sensor-hub: Move the memset to sensor_hub_get_feature()
    - mac80211: initialize fast-xmit 'info' later
    - asm-prototypes: Clear any CPP defines before declaring the functions
    - [x86] drm/i915: Fix oopses in the overlay code due to i915_gem_active
      stuff
    - [x86] drm/i915: Fix oops in overlay due to frontbuffer tracking
    - [x86] drm/i915: Force VDD off on the new power seqeuencer before
      starting to use it
    - [x86] drm/i915: Initialize overlay->last_flip properly
    - [x86] KVM: reset MMU on KVM_SET_VCPU_EVENTS
    - [armhf] usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
    - [armhf] usb: musb: dsps: implement clear_ep_rxintr() callback
    - usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
    - usb: gadgetfs: restrict upper bound on device configuration size
    - USB: gadgetfs: fix unbounded memory allocation bug
    - USB: gadgetfs: fix use-after-free bug
    - USB: gadgetfs: fix checks of wTotalLength in config descriptors
    - USB: fix problems with duplicate endpoint addresses
    - usb: gadget: composite: Test get_alt() presence instead of set_alt()
    - [arm64, armhf] usb: dwc3: core: avoid Overflow events
    - usb: xhci: fix possible wild pointer
    - [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
    - xhci: free xhci virtual devices with leaf nodes first
    - usb: xhci: fix return value of xhci_setup_device()
    - usb: host: xhci: Fix possible wild pointer when handling abort command
    - xhci: Handle command completion and timeout race
    - usb: xhci: hold lock over xhci_abort_cmd_ring()
    - USB: serial: omninet: fix NULL-derefs at open and disconnect
    - USB: serial: quatech2: fix sleep-while-atomic in close
    - USB: serial: pl2303: fix NULL-deref at open
    - USB: serial: keyspan_pda: verify endpoints at probe
    - USB: serial: spcp8x5: fix NULL-deref at open
    - USB: serial: io_ti: fix NULL-deref at open
    - USB: serial: io_ti: fix another NULL-deref at open
    - USB: serial: io_ti: fix I/O after disconnect
    - USB: serial: iuu_phoenix: fix NULL-deref at open
    - USB: serial: garmin_gps: fix memory leak on failed URB submit
    - USB: serial: ti_usb_3410_5052: fix NULL-deref at open
    - USB: serial: io_edgeport: fix NULL-deref at open
    - USB: serial: oti6858: fix NULL-deref at open
    - USB: serial: cyberjack: fix NULL-deref at open
    - USB: serial: kobil_sct: fix NULL-deref in write
    - USB: serial: mos7840: fix NULL-deref at open
    - USB: serial: mos7720: fix NULL-deref at open
    - USB: serial: mos7720: fix use-after-free on probe errors
    - USB: serial: mos7720: fix parport use-after-free on probe errors
    - USB: serial: mos7720: fix parallel probe
    - usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
    - xhci: Use delayed_work instead of timer for command timeout
    - xhci: Fix race related to abort operation
    - [armhf] usb: musb: Fix trying to free already-free IRQ 4
    - usb: hub: Move hub_port_disable() to fix warning if PM is disabled
    - usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
    - ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
    - USB: serial: kl5kusb105: abort on open exception path
    - usb: gadget: Fix second argument of percpu_ida_alloc()
    - usb: gadget: fix request length error for isoc transfer
    - [armhf] dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host
      support
    - dibusb: fix possible memory leak in dibusb_rc_query()
    - USB: serial: io_ti: bind to interface after fw download
    - [x86] mei: move write cb to completion on credentials failures
    - iio: accel: st_accel: fix LIS3LV02 reading and scaling
    - [arm64, armhf] usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
    - [arm64, armhf] usb: dwc3: ep0: explicitly call
      dwc3_ep0_prepare_one_trb()
    - [arm64, armhf] usb: dwc3: gadget: always unmap EP0 requests
    - [x86] drm/i915/dp: add lane_count check in intel_dp_check_link_status
    - [x86] drm/i915: tune down the fast link training vs boot fail
    - mac80211: fix tid_agg_rx NULL dereference
    - nl80211: Use different attrs for BSSID and random MAC addr in scan req
    - ath10k: fix failure to send NULL func frame for 10.4
    - ath10k: use the right length of "background"
    - efi/efivar_ssdt_load: Don't return success on allocation failure
    - debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
    - [x86] prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
    - [x86] cpu: Probe CPUID leaf 6 even when cpuid_level == 6
    - [x86] platform/x86: fujitsu-laptop: use brightness_set_blocking for
      LED-setting callbacks
    - hwmon: (amc6821) sign extension temperature
    - hwmon: (ds620) Fix overflows seen when writing temperature limits
    - [armhf] hwmon: (g762) Fix overflows and crash seen when writing limit
      attributes
    - hwmon: (lm90) fix temp1_max_alarm attribute
    - Input: synaptics-rmi4 - unlock on error
    - [armhf] clk: ti: dra7: fix "failed to lookup clock node
      gmac_gmii_ref_clk_div" boot message
    - [amd64] iommu/amd: Missing error code in amd_iommu_init_device()
    - [amd64] iommu/amd: Fix the left value check of cmd buffer
    - [x86] iommu/vt-d: Fix pasid table size encoding
    - [x86] iommu/vt-d: Flush old iommu caches for kdump when the device gets
      context mapped
    - [x86] ASoC: cht_bsw_rt5645: Fix leftover kmalloc
    - [x86] ASoC: Intel: Skylake: Fix a shift wrapping bug
    - scsi: mvsas: fix command_active typo
    - target/iscsi: Fix double free in lio_target_tiqn_addtpg()
    - sbp-target: Fix second argument of percpu_ida_alloc()
    - relay: check array offset before using it
    - PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
    - PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
    - genirq/affinity: Fix node generation from cpumask
    - mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
    - docs-rst: fix LaTeX \DURole renewcommand with Sphinx 1.3+
    - mm: khugepaged: close use-after-free race during shmem collapsing
    - mm: khugepaged: fix radix tree node leak in shmem collapse error path
    - mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
    - [s390x] crypto: unlock on error in prng_tdes_read()
    - [arm64] crypto: sha2-ce - fix for big endian
    - [arm64] crypto: ghash-ce - fix for big endian
    - [arm64] crypto: aes-ccm-ce: fix for big endian
    - [arm64] crypto: sha1-ce - fix for big endian
    - [arm64] crypto: aes-xts-ce: fix for big endian
    - [arm64] crypto: aes-ce - fix for big endian
    - md: MD_RECOVERY_NEEDED is set for mddev->recovery
    - md: fix refcount problem on mddev when stopping array.
    - f2fs: remove percpu_count due to performance regression
    - f2fs: hide a maybe-uninitialized warning
    - PCI: Add Mellanox device IDs
    - PCI: Convert broken INTx masking quirks from HEADER to FINAL
    - PCI: Convert Mellanox broken INTx quirks to be for listed devices only
    - PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
    - PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
    - [powerpc/powerpc64,ppc64*] pci/rpadlpar: Fix device reference leaks
    - [s390x] topology: always use s390 specific sched_domain_topology_level
    - [s390x] pci: fix dma address calculation in map_sg
    - drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
    - [x86] drm/i915: disable PSR by default on HSW/BDW
    - [x86] drm/i915/gen9: unconditionally apply the memory bandwidth WA
    - [x86] drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
    - xfs: don't call xfs_sb_quota_from_disk twice
    - xfs: check return value of _trans_reserve_quota_nblks
    - xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
    - xfs: don't BUG() on mixed direct and mapped I/O
    - xfs: provide helper for counting extents from if_bytes
    - xfs: check minimum block size for CRC filesystems
    - xfs: fix unbalanced inode reclaim flush locking
    - xfs: new inode extent list lookup helpers
    - xfs: factor rmap btree size into the indlen calculations
    - xfs: always succeed when deduping zero bytes
    - xfs: remove prev argument to xfs_bmapi_reserve_delalloc
    - xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
    - xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
    - xfs: clean up cow fork reservation and tag inodes correctly
    - xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
    - xfs: pass post-eof speculative prealloc blocks to bmapi
    - xfs: Move AGI buffer type setting to xfs_read_agi
    - xfs: pass state not whichfork to trace_xfs_extlist
    - xfs: handle cow fork in xfs_bmap_trace_exlist
    - xfs: forbid AG btrees with level == 0
    - xfs: check for bogus values in btree block headers
    - xfs: complain if we don't get nextents bmap records
    - xfs: don't crash if reading a directory results in an unexpected hole
    - xfs: error out if trying to add attrs and anextents > 0
    - xfs: don't allow di_size with high bit set
    - xfs: don't cap maximum dedupe request length
    - xfs: ignore leaf attr ichdr.count in verifier during log replay
    - xfs: use GPF_NOFS when allocating btree cursors
    - xfs: fix double-cleanup when CUI recovery fails
    - xfs: use the actual AG length when reserving blocks
    - xfs: fix crash and data corruption due to removal of busy COW extents
    - xfs: fix max_retries _show and _store functions
    - clocksource/dummy_timer: Move hotplug callback after the real timers
    - tick/broadcast: Prevent NULL pointer dereference
    - Revert "rtlwifi: Fix enter/exit power_save"
    - Revert "usb: gadget: composite: always set ep->mult to a sensible value"
    - usb: gadget: composite: always set ep->mult to a sensible value
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
    - net: vrf: Fix NAT within a VRF
    - net: vrf: Drop conntrack data after pass through VRF device on Tx
    - sctp: sctp_transport_lookup_process should rcu_read_unlock when transport
      is null
    - inet: fix IP(V6)_RECVORIGDSTADDR for udp sockets
    - ipv6: handle -EFAULT from skb_copy_bits
    - net, sched: fix soft lockup in tc_classify
    - [arm64, armhf] net: stmmac: Fix race between stmmac_drv_probe and
      stmmac_open
    - net/sched: cls_flower: Fix missing addr_type in classify
    - net/mlx5: Check FW limitations on log_max_qp before setting it
    - net/mlx5: Cancel recovery work in remove flow
    - net/mlx5: Avoid shadowing numa_node
    - net/mlx5: Mask destination mac value in ethtool steering rules
    - net/mlx5: Prevent setting multicast macs for VFs
    - net/mlx5e: Don't sync netdev state when not registered
    - net/mlx5e: Disable netdev after close
    - rtnl: stats - add missing netlink message size checks
    - net: fix incorrect original ingress device index in PKTINFO
    - net: ipv4: dst for local input routes should use l3mdev if relevant
    - drop_monitor: add missing call to genlmsg_end
    - drop_monitor: consider inserted data in genlmsg_end
    - flow_dissector: Update pptp handling to avoid null pointer deref.
    - igmp: Make igmp group member RFC 3376 compliant
    - ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
    - net: vrf: Add missing Rx counters
    - [x86] bpf: change back to orig prog on too many passes
    - [armhf] net: dsa: bcm_sf2: Do not clobber b53_switch_ops
    - [armhf] net: dsa: bcm_sf2: Utilize nested MDIO read/write
    - r8152: split rtl8152_suspend function
    - r8152: fix rx issue for runtime suspend
    - [armhf] net: dsa: Ensure validity of dst->ds[0]
    - net: add the AF_QIPCRTR entries to family name tables
    - gro: Enter slow-path if there is no tailroom
    - gro: use min_t() in skb_gro_reset_offset()
    - gro: Disable frag0 optimization on IPv6 ext headers
    - net/mlx5e: Remove WARN_ONCE from adaptive moderation code
    - net: ipv4: Fix multipath selection with vrf
    - net: vrf: do not allow table id 0
    - HID: hid-cypress: validate length of report
    - ALSA: firewire-tascam: Fix to handle error from initialization of stream
      data
    - [powerpc] Fix build warning on 32-bit PPC
    - [arm64] dts: mt8173: Fix auxadc node
    - [arm64] dts: bcm2837-rpi-3-b: remove incorrect pwr LED
    - [arm64] dts: bcm2835: Fix bcm2837 compatible string
    - svcrdma: Clear xpt_bc_xps in xprt_setup_rdma_bc() error exit arm
    - [armhf] OMAP5: Fix mpuss_early_init
    - [armhf] OMAP5: Fix build for PM code
    - [armhf] OMAP4+: Fix bad fallthrough for cpuidle
    - [armhf] omap2+: am437x: rollback to use omap3_gptimer_timer_init()
    - [armel/marvell, armhf] spi: mvebu: fix baudrate calculation for armada
      variant
    - ALSA: usb-audio: Add a quirk for Plantronics BT600
    - [x86] drm/i915/gen9: Fix PCODE polling during CDCLK change notification
    - rtlwifi: Fix enter/exit power_save
    - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
    - Input: xpad - use correct product id for x360w controllers
    - Input: i8042 - add Pegatron touchpad to noloop table
    - [armhf] regulator: axp20x: Fix axp809 ldo_io registration error on cold
      boot
    - [arm64, armhf] drm/tegra: dpaux: Fix error handling
    - [arm64, armhf] drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
    - drm/savage: dereferencing an error pointer
    - zram: revalidate disk under init_lock
    - zram: support BDI_CAP_STABLE_WRITES
    - dax: fix deadlock with DAX 4k holes
    - mm: pmd dirty emulation in page fault handler
    - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
    - ocfs2: fix crash caused by stale lvb with fsdlm plugin
    - mm, memcg: fix the active list aging for lowmem requests when memcg is
      enabled
    - mm: support anonymous stable page
    - mm/slab.c: fix SLAB freelist randomization duplicate entries
      (CVE-2017-5546)
    - mm/hugetlb.c: fix reservation race when freeing surplus pages
    - [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
    - KVM: eventfd: fix NULL deref irqbypass consumer
    - jump_labels: API for flushing deferred jump label updates
    - [x86] KVM: flush pending lapic jump label updates on module unload
    - [x86] KVM: fix NULL deref in vcpu_scan_ioapic
    - [x86] KVM: add Align16 instruction flag
    - [x86] KVM: add asm_safe wrapper
    - [x86] KVM: emulate FXSAVE and FXRSTOR
    - [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
    - efi/libstub/arm*: Pass latest memory map to the kernel
    - [x86] efi: Prune invalid memory map entries and fix boot regression
    - [x86] efi: Don't allocate memmap through memblock after mm_init()
      (Closes: #851928)
    - nl80211: fix sched scan netlink socket owner destruction
    - gpio: Move freeing of GPIO hogs before numbing of the device
    - xfs: Timely free truncated dirty pages
    - bridge: netfilter: Fix dropping packets that moving through bridge
      interface
    - [x86] cpu/AMD: Clean up cpu_llc_id assignment per topology feature
    - [x86] bugs: Separate AMD E400 erratum and C1E bug
    - [x86] CPU/AMD: Fix Bulldozer topology
    - wusbcore: Fix one more crypto-on-the-stack bug
    - [armhf] usb: musb: fix runtime PM in debugfs
    - USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
    - USB: serial: ch341: fix initial modem-control state
    - USB: serial: ch341: fix resume after reset
    - USB: serial: ch341: fix open error handling
    - USB: serial: ch341: fix control-message error handling
    - USB: serial: ch341: fix open and resume after B0
    - i2c: print correct device invalid address
    - i2c: fix kernel memory disclosure in dev interface
    - fix a fencepost error in pipe_advance() (CVE-2017-5550)
    - xhci: fix deadlock at host remove by running watchdog correctly
    - btrfs: fix crash when tracepoint arguments are freed by wq callbacks
    - ASoC: hdmi-codec: use unsigned type to structure members with bit-field
    - Revert "tty: serial: 8250: add CON_CONSDEV to flags"
    - pid: fix lockdep deadlock warning due to ucount_lock
    - mnt: Protect the mountpoint hashtable with mount_lock
    - drivers: char: mem: Fix thinkos in kmem address checks
    - [armhf] dmaengine: omap-dma: Fix dynamic lch_map allocation
    - virtio_blk: avoid DMA to stack for the sense buffer
    - orinoco: Use shash instead of ahash for MIC calculations
    - sysrq: attach sysrq handler correctly for 32-bit kernel
    - [arm64, armhf] extcon: return error code on failure
    - Clearing FIFOs in RS485 emulation mode causes subsequent transmits to
      break
    - sysctl: Drop reference added by grab_header in proc_sys_readdir
      (CVE-2016-9191)
    - [s390x] net/af_iucv: don't use paged skbs for TX on HiperSockets
    - [x86] drm/i915/gen9: Fix PCODE polling timeout in stable backport
    - drm: Clean up planes in atomic commit helper failure path
    - drm/radeon: update smc firmware selection for SI
    - drm/radeon: drop verde dpm quirks
    - [x86] drm/amdgpu: update si kicker smc firmware
    - [x86] drm/amdgpu: drop verde dpm quirks
    - USB: serial: ch341: fix modem-control and B0 handling
    - net/mlx5: Only cancel recovery work when cleaning up device
    - i2c: piix4: Avoid race conditions with IMC
    - [x86] cpu: Fix bootup crashes by sanitizing the argument of the
      'clearcpuid=' command-line option
    - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
    - btrfs: fix locking when we put back a delayed ref that's too new
    - btrfs: fix error handling when run_delayed_extent_op fails
    - NFS: fix typo in parameter description
    - pNFS: Fix race in pnfs_wait_on_layoutreturn
    - NFS: Fix a performance regression in readdir
    - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
    - [armhf] i2c: mux: pca954x: fix i2c mux selection caching
    - [x86] drm/i915/gen9: Fix PCODE polling during SAGV disabling
    - drm: avoid uninitialized timestamp use in wait_vblank
    - [arm64, armhf] drm/panel: simple: Check against num_timings when setting
      preferred for timing
    - [x86] drm/i915: Move the min_pixclk[] handling to the end of readout
    - drm: Initialise drm_mm.head_node.allocated
    - block: Change extern inline to static inline
    - block: cfq_cpd_alloc() should use @gfp
    - [x86] ACPI / APEI: Fix NMI notification handling
    - [x86] powercap/intel_rapl: fix and tidy up error handling
    - iw_cxgb4: Fix error return code in c4iw_rdev_open()
    - [arm64, armhf] power: supply: bq27xxx_battery: Fix register map for
      BQ27510 and BQ27520
    - blk-mq: Always schedule hctx->next_cpu
    - [powerpc] mm: Correct process and partition table max size
    - [powerpc*] ibmebus: Fix further device reference leaks
    - [powerpc*] ibmebus: Fix device reference leaks in sysfs interface
    - [powerpc*] powernv: Don't warn on PE init if unfreeze is unsupported
    - [arm64] hugetlb: fix the wrong address for several functions
    - [arm64] hugetlb: remove the wrong pmd check in find_num_contig()
    - [arm64] hugetlb: fix the wrong return value for
      huge_ptep_set_access_flags
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6
    - IB/core: Release allocated memory in cache setup failure
    - IB/rxe: Increase max number of completions to 32k
    - IB/rxe: avoid putting a large struct rxe_qp on stack
    - IB/mlx5: Avoid system crash when enabling many VFs
    - IB/mlx5: Fix reported max SGE calculation
    - IB/mlx5: Assign SRQ type earlier
    - IB/mlx5: Wait for all async command completions to complete
    - IB/mlx4: Set traffic class in AH
    - IB/mlx4: Fix out-of-range array index in destroy qp flow
    - IB/mlx4: Handle well-known-gid in mad_demux processing
    - IB/mlx4: Fix port query for 56Gb Ethernet links
    - IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
    - IB/mlx4: Check if GRH is available before using it
    - IB/IPoIB: Remove can't use GFP_NOIO warning
    - perf trace: Use the syscall raw_syscalls:sys_enter timestamp
    - perf mem: Fix --all-user/--all-kernel options
    - perf trace: Check if MAP_32BIT is defined (again)
    - perf diff: Do not overwrite valid build id
    - perf callchain: Fixup help/config for no-unwinding
    - perf scripting: Avoid leaking the scripting_context variable
    - perf jit: Enable jitdump support without dwarf
    - [armhf] dts: bcm283x: fix typo in mailbox address
    - [armhf] dts: imx6q-cm-fx6: fix fec pinctrl
    - [armhf] dts: omap3: Add DTS for Logic PD SOM-LV 37xx Dev Kit
    - tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
    - [x86] PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
    - rcu: Narrow early boot window of illegal synchronous grace periods
    - sunrpc: don't call sleeping functions from the notifier block callbacks
    - svcrpc: don't leak contexts on PROC_DESTROY
    - libnvdimm, namespace: fix pmem namespace leak, delete when size set to
      zero
    - fuse: clear FR_PENDING flag when moving requests out of pending queue
    - fuse: fix time_to_jiffies nsec sanity check
    - PCI: Enumerate switches below PCI-to-PCIe bridges
    - HID: corsair: fix DMA buffers on stack (CVE-2017-5547)
    - HID: corsair: fix control-transfer error handling
    - mmc: sdhci-acpi: Only powered up enabled acpi child devices
    - ieee802154: atusb: do not use the stack for buffers to make them DMA able
      (CVE-2017-5548)
    - [s390x] KVM: do not expose random data via facility bitmap
    - [armhf,arm64] KVM: vgic: Fix deadlock on error handling
    - [powerpc*] icp-opal: Fix missing KVM case and harden replay
    - [powerpc*] perf: Fix PM_BRU_CMPL event code for power9
    - [powerpc*] ptrace: Preserve previous fprs/vsrs on short regset write
    - [powerpc*] ptrace: Preserve previous TM fprs/vsrs on short regset write
    - [powerpc*] Ignore reserved field in DCSR and PVR reads and writes
    - [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
    - qla2xxx: Fix crash due to null pointer access
    - mac80211: implement multicast forwarding on fast-RX path
    - ubifs: Fix journal replay wrt. xattr nodes
    - [armhf] clocksource/exynos_mct: Clear interrupt when cpu is shut down
    - svcrdma: avoid duplicate dma unmapping during error recovery
    - ceph: fix bad endianness handling in parse_reply_info_extra
    - [armhf] dts: OMAP5 / DRA7: indicate that SATA port 0 is available.
    - [arm64] avoid returning from bad_mode
    - [arm64] ptrace: Preserve previous registers for short regset write
    - [arm64] ptrace: Avoid uninitialised struct padding in fpr_set()
    - [arm64] ptrace: Reject attempts to set incomplete hardware breakpoint
      fields
    - Input: ALPS - fix TrackStick support for SS5 hardware
    - libceph: ceph_x_encrypt_buflen() takes in_len
    - libceph: old_key in process_one_ticket() is redundant
    - libceph: introduce ceph_x_encrypt_offset()
    - libceph: introduce ceph_crypt() for in-place en/decryption
      (CVE-2016-10153)
    - libceph: rename and align ceph_x_authorizer::reply_buf
    - libceph: tweak calcu_signature() a little
    - libceph: switch ceph_x_encrypt() to ceph_crypt()
    - libceph: switch ceph_x_decrypt() to ceph_crypt()
    - libceph: remove now unused ceph_*{en,de}crypt*() functions
    - [armhf] dts: Add an empty chosen node to top level DTSI
    - [armel,armhf] 8613/1: Fix the uaccess crash on PB11MPCore
    - ceph: fix scheduler warning due to nested blocking
    - ceph: fix ceph_get_caps() interruption
    - ceph: fix endianness of getattr mask in ceph_d_revalidate
    - ceph: fix endianness bug in frag_tree_split_cmp
    - libceph: make sure ceph_aes_crypt() IV is aligned
    - xprtrdma: Make FRWR send queue entry accounting more accurate
    - xprtrdma: Squelch "max send, max recv" messages at connect time
    - [arm64] mm: avoid name clash in __page_to_voff()
    - [arm64] Fix swiotlb fallback allocation
    - swiotlb: Convert swiotlb_force from int to enum
    - swiotlb: Add swiotlb=noforce debug option
    - scsi: ses: Fix SAS device detection in enclosure
    - scsi: mpt3sas: fix hang on ata passthrough commands
    - [armhf] PM / devfreq: exynos-bus: Fix the wrong return value
    - PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL
    - mtd: spi-nor: Off by one in cqspi_setup_flash()
    - mtd: spi-nor: Fix some error codes in cqspi_setup_flash()
    - [x86] ite-cir: initialize use_demodulator before using it
    - [armhf] dmaengine: pl330: Fix runtime PM support for terminated transfers
    - [armhf] soc: ti: wkup_m3_ipc: Fix error return code in wkup_m3_ipc_probe()
    - libceph: uninline ceph_crypto_key_destroy()
    - libceph: stop allocating a new cipher on every crypto request

  [ Ben Hutchings ]
  * [armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler
    support (Closes: #851481)
  * nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533)
  * ath9k: fix NULL pointer dereference (Closes: #851621)
  * cfg80211,memcg,power: Avoid ABI changes
  * bq27xxx_battery,cpuhp,libceph,orinoco,xhci: Ignore ABI changes
  * linux-image: Increase minimum version of initramfs-tools (Closes: #808038)
  * [x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
    (Closes: #778249)
  * [arm64] Enable ARCH_MESON and related drivers (Closes: #852132)
  * [arm64] dts: meson-gx: Add firmware reserved memory zones
  * [x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
    (Closes: #851916)
  * [arm64] video/fbdev: Change FB from module to built-in
  * [arm64,armhf] video/fbdev: Enable FB_EFI (Closes: #851778)
  * fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
  * [rt] genpatch.py: Verify tag and tarball signatures
  * fbdev: color map copying bounds checking (CVE-2016-8405)
  * [armhf,arm64] drm/vc4: Fix an integer overflow in temporary allocation
    layout. (CVE-2017-5576)
  * [armhf,arm64] drm/vc4: Return -EINVAL on the overflow checks failing.
    (CVE-2017-5577)
  * [arm64] ptrace: Avoid ABI change in 4.9.6
  * [arm64] Enable ARM64_ACPI_PARKING_PROTOCOL, ARCH_THUNDER, GPIO_PL061,
    GPIO_XGENE, ARM_SMMU, ARM_SMMU_V3, PCI_HOST_THUNDER_PEM, and
    PCI_HOST_THUNDER_ECAM; PINCTRL_AMD as built-in; SATA_AHCI_SEATTLE,
    HW_RANDOM_XGENE, HW_RANDOM_CAVIUM, CPUFREQ_DT, K3_DMA, GPIO_XGENE_SB,
    SENSORS_XGENE, I2C_THUNDERX, KEYBOARD_GPIO, TI_ST, THUNDER_NIC_PF,
    THUNDER_NIC_VF (Closes: #852493), THUNDER_NIC_BGX, THUNDER_NIC_RGX,
    MDIO_THUNDER, MDIO_XGENE, SPI_THUNDERX, and SND_SOC_APQ8016_SBC as
    modules (thanks to Riku Voipio)

  [ Roger Shimizu ]
  * [armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL)
  * drivers/input: Enable TOUCHSCREEN_GOODIX as module (Closes: #851821).
  * [mips/octeon] hwmon: Enable SENSORS_ADM1031 as module (Closes: #851963).
    Thanks to James Cowgill.
  * nbd: fix 64-bit division.

linux (4.9.2-2kali1) kali-dev; urgency=medium

  * Import new version from Debian

linux (4.9.2-2) unstable; urgency=medium

  * [sparc64] Export memcpy and memset to modules again (fixes FTBFS)
  * Revert "Remove debug symbol packages from debian/control to work around dak
    bug", which caused most binary uploads to be rejected

linux (4.9.2-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.2

  [ Ben Hutchings ]
  * abiupdate.py: Use current config instead of downloading previous config
  * abiupdate.py: Update base URLs
  * abiupdate.py: Add support for incoming.ports.debian.org
  * Make the pickled config (config.defines.dump) reproducible
  * Remove debug symbol packages from debian/control to work around dak bug
  * udeb: Add switch (DSA) drivers to nic-modules (Closes: #845075)
  * netfilter: Enable NFT_NUMGEN, NFT_QUOTA as modules
  * net/sched: Enable NET_ACT_TUNNEL_KEY, NET_IFE_SKBTCINDEX as modules
  * vsock: Enable VSOCKETS, VHOST_VSOCK, VIRTIO_VSOCKETS as modules
  * hci_uart: Enable BT_HCIUART_MRVL
  * rxrpc: Enable AF_RXRPC_IPV6
  * net: Enable NET_DEVLINK, MACSEC as modules
  * SCSI: Enable SCSI_SMARTPQI as module
  * target: Enable ISCSI_TARGET_CXGB4 as module
  * cxgb4: Enable CHELSIO_T4_FCOE
  * drm: Enable DRM_LEGACY; re-enable DRM_TDFX, DRM_R128, DRM_MGA, DRM_SIS,
    DRM_VIA, DRM_SAVAGE as modules for some architectures
  * 8250: Disable SERIAL_8250_LPSS, since it causes DW_DMAC_CORE to be built-in
  * Partially revert "usb: Kconfig: using select for USB_COMMON dependency",
    since it causes USB_COMMON to be built-in
  * Set ABI to 1

  [ John Paul Adrian Glaubitz ]
  * [sh3] Build a linux-libc-dev package (Closes: #850732)

  [ Martin Michlmayr ]
  * [arm64] Enable MV_XOR and MV_XOR_V2.

linux (4.9.1-1~exp1) experimental; urgency=medium

  * New upstream release: https://kernelnewbies.org/Linux_4.9
    - Revert "default exported asm symbols to zero"
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1

  [ Ben Hutchings ]
  * Set ABI to trunk
  * Enable USERFAULTFD (except on armel/marvell)
  * [x86] PCI: Enable VMD as module
  * mm: Enable PAGE_POISONING (Closes: #849450), PAGE_POISONING_NO_SANITY
    (except on armel/marvell)
  * ieee802154: Enable IEEE802154_FAKELB as module
  * [armhf] leds,gpio: Enable LEDS_TCA6507 as module (Closes: #847770)
  * [x86] iio,HID: Enable INTEL_ISH_HID as module
  * hwmon,watchdog: Enable SENSORS_FTSTEUTATES as module (together with the
    previous, Closes: #847017)
  * net: Enable GTP as module (Closes: #846913)
  * [armhf] gpio: Enable GPIO_MCP23S08 as module (Closes: #845064)
  * aufs: Update support patchset to aufs4.9-20161219
  * Use debhelper compatibility level 9
  * [arm64] Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on
    incompatible mozjs
  * genorig.py: Verify tag signatures (based on work by Yves-Alexis Perez)

  [ Uwe Kleine-König ]
  * enable `perf data' support; patch by Sebastian Andrzej Siewior
    (Closes: #846597)
  * [rt] Update to 4.9-rt1 and reenable
  * [armhf] Add support for switch hardware on Turris Omnia

  [ Aurelien Jarno ]
  * [arm64] Enable RTC_DRV_DS1307.

linux (4.9~rc8-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Ben Hutchings ]
  * radeon: Update package name in error message for missing firmware
  * [amd64] Remove xen-linux-system-<version> package
  * debian/control: Fix build-dependency on flex to work with new versions
    that have M-A: allowed
  * Revert "default exported asm symbols to zero"
  * [arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS)
  * [sparc64] Don't re-add exports of string functions that are now only
    defined as macros (fixes FTBFS, after other fixes)

linux (4.9~rc7-1~exp1) experimental; urgency=medium

  * New upstream release candidate:
    - [armhf,armel] Revert "arm: move exports to definitions" (Closes: #844530)

  [ Martin Michlmayr ]
  * [arm64] Enable more QCOM options: BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS,
    QCOM_WCNSS_PIL and EXTCON_QCOM_SPMI_MISC.
  * [arm64] Enable ARCH_MVEBU and related options.

  [ Ben Hutchings ]
  * linux-headers-common: Make these packages architecture-independent by
    including headers for all architectures that we build a kernel for
  * Fix exported symbol versions:
    - Revert upstream changes moving exports to assembly sources
    - [x86] kbuild: enable modversions for symbols exported from assembly
    - [powerpc] Remove Mac-on-Linux hooks
    - [powerpc*] Fix missing CRCs, add yet more asm-prototypes.h declarations
    - Re-enable CONFIG_MODVERSIONS in a slightly weaker form
    - module: Disable matching missing version CRC
  * debian/bin/buildcheck.py: Add check for symbols with version CRC of 0

linux (4.9~rc5-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Aurelien Jarno ]
  * Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230,
    IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40.
  * [arm64] Enable VIRTUALIZATION and KVM.

  [ Ben Hutchings ]
  * [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS)
  * linux-perf: Exclude perf-read-vdso* from shared library dependency
    check (fixes FTBFS on sparc64)
  * [x86] kexec: add -fno-PIE
  * wireless: Enable RTL8XXXU as module, replacement for R8723AU
  * netfilter: Enable NFT_SET_RBTREE and NFT_SET_HASH as modules,
    renamed from NFT_RBTREE and NFT_HASH
  * tcp: Enable TCP_CONG_BBR as module
  * [armel] Drop versatile flavour, which has been broken since version
    4.5~rc4-1~exp1
  * [x86] ethernet: Enable ENA_ETHERNET as module
  * [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y
  * w1: Disable W1_MASTER_MATROX

linux (4.9~rc3-1~exp1) experimental; urgency=medium

  * New upstream release candidate

  [ Ben Hutchings ]
  * [rt] Disable until it is updated for 4.9 or later
  * kbuild: add -fno-PIE (Closes: #841368)
  * Compile with gcc-6 on all architectures
  * debian/control: Fix build-dependency on openssl to work with new
    versions that have M-A: allowed (Closes: #839145)

linux (4.8.15-2) unstable; urgency=medium

  [ Ben Hutchings ]
  * [x86] Enable INTEL_VBTN as module (Closes: #848967)
  * debian/control: Change build-dependency on asciidoc to prefer the new
    asciidoc-base, so we don't pull in LaTeX unnecessarily
  * [x86] Enable LEDS_DELL_NETBOOKS and DELL_SMBIOS as modules; re-enable
    DELL_LAPTOP and DELL_WMI as modules (Closes: #849674)
  * [powerpc*] boot: Request no dynamic linker for boot wrapper
    (Closes: #848851, FTBFS on ppc6el)
  * cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module
  * [x86] ACPI: Enable DPTF_POWER as module
  * [x86] perf: Enable PERF_EVENTS_AMD_POWER as module
  * [x86] perf: Change PERF_EVENTS_INTEL_{CSTATE,RAPL,UNCORE} from built-in
    to modules
  * PCI: Enable PCIE_DPC (except for armel/versatile)
  * [amd64] PCI: Enable PCI_HYPERV as module
  * inet: Enable INET_DIAG_DESTROY
  * tcp: Enable TCP_CONG_NV as module
  * ipv6: Enable IPV6_ILA as module
  * net/sched: Enable NET_CLS_MATCHALL, NET_ACT_IFE, NET_IFE_SKBMARK,
    NET_IFE_SKBPRIO as modules
  * hci_uart: Enable BT_HCIUART_AG6XX
  * nvme: Enable NVME_RDMA, NVME_TARGET, NVME_TARGET_RDMA as modules
  * [amd64] mic: Enable VOP_BUS and VOP as modules; re-enable INTEL_MIC_HOST as
    module
  * debian/control: Add Salvatore Bonaccorso to Uploaders
  * [rt] Update to 4.8.15-rt10 (no functional change)

  [ Salvatore Bonaccorso ]
  * sg_write()/bsg_write() is not fit to be called under KERNEL_DS
    (CVE-2016-10088)
  * kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)
    (CVE-2016-9588)