-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Jan 2022 23:12:52 +0100 Source: linux Architecture: source Version: 5.16.3-1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 983757 1002706 1004095 Changes: linux (5.16.3-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.16 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.1 - bpf: Fix out of bounds access from invalid *_or_null type verification (CVE-2022-23222) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments (Closes: #1002706) . [ Helmut Grohne ] * Multiarchify python build-depends. (Closes: #983757) . [ Ben Hutchings ] * linux-perf: Fix detection of libperl and libpython in cross-build * debian/README.source: Tag signatures are automatically verified * [rt] trace: Enable OSNOISE_TRACER, TIMERLAT_TRACER, HIST_TRIGGERS * d/bin/git-tag-gpg-wrapper, debian/upstream: Use ASCII-armored keyring * d/watch: Rewrite to find all upstream versions through Git * d/bin/genorig.py, d/README.source: Only support Git as upstream * d/bin/genorig.py, d/README.source: Add support for remote upstream repos * lintian: Refresh lintian-overrides * d/copyright: Fix license name with spaces in it * d/copyright: Update for removed and renamed source files * d/tests/selftests: Use $AUTOPKGTEST_TMP instead of $ADTTMP * Fix missing user-space hardening: - d/rules.real: Define KBUILD_HOST{C,LD}FLAGS for sub-make - linux-kbuild: Build modpost with standard CPPFLAGS - cpupower: Build with standard CPPFLAGS - usbip: Build with standard CPPFLAGS - objtool: Build with standard CFLAGS and CPPFLAGS - tools/perf: Define DEBUG=0 for sub-make so libapi doesn't use wrong flags - libapi: Define _FORTIFY_SOURCE as 2, not empty - tools/perf: Fix missing LDFLAGS for some programs * d/rules: Tell blhc to ignore missing flags for perf-read-vdso* helpers * d/rules: Tell blhc to ignore kernel compilation * d/rules: Filter out -s option so that Kbuild is not silent * d/bin/gencontrol.py, d/lib/python: Use classes for build restriction formulae * d/bin/gencontrol.py, d/rules.real: Replace DEBUG variable with if_package * Introduce pkg.linux.quick build profile for quicker CI builds * d/salsa-ci.yml: Add CI config using some of the common pipeline * d/salsa-ci.yml, d/tests/python: Only run static checks in CI * d/salsa-ci.yml: Run kconfigeditor2 as kconfig static check * d/rules, d/salsa-ci.yml: Enable blhc, ignoring terse output * bpftool, objtool, usbip: Always build with V=1 so blhc can check them * d/salsa-ci.yml: Use per-release cache of orig tarballs * linux-perf: Build a single unversioned package of perf, as it is no longer necessary to match the kernel version . [ Vincent Blut ] * drivers/net/wireless/realtek/rtw89: Enable RTW89 and RTW89_8852AE as modules (Closes: #1004095) . [ Aurelien Jarno ] * [riscv64] Add support for SBI SRST extension . [ YunQiang Su ] * [mips*/generic] Change zload address for QEMU compatibility. . [ Salvatore Bonaccorso ] * [rt] Update to 5.16.2-rt18 * [rt] Update to 5.16.2-rt19 * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330) * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942) . [ Bastian Blank ] * Build-depend on pahole after rename from dwarves. * Remove remaining aufs patches for good. Checksums-Sha1: f1bad30f6ef401e0672641228c71b0a8a81b9619 260356 linux_5.16.3-1~exp1.dsc 4efc067bcd42fc396f52e8835ae1554511c13613 129172772 linux_5.16.3.orig.tar.xz 38871a7a7881581b3dcacb92d009e7260b91527c 1300396 linux_5.16.3-1~exp1.debian.tar.xz 936216a80ff2b3c63c398b4ab6e4ec36d6279e3e 6485 linux_5.16.3-1~exp1_source.buildinfo Checksums-Sha256: a469cf553b017489294e44311c1b56bd5168bbc2d6b5ea3b353ec51dc950e4bc 260356 linux_5.16.3-1~exp1.dsc 78aef8c5449d64b8ee7e48b62301f95f3f855565fcb56951192e37999b0d4c13 129172772 linux_5.16.3.orig.tar.xz 4ca893aa7bc54dc65b4fb1efe378adac506b2d39c328602a33e3cd00bc78d5c0 1300396 linux_5.16.3-1~exp1.debian.tar.xz 567df90edf84c2af7cfd7a7f812158529c4e9d4de63368b8aa628dbcaddd90f8 6485 linux_5.16.3-1~exp1_source.buildinfo Files: ee53491cc19b24a38b9bf11e840e171a 260356 kernel optional linux_5.16.3-1~exp1.dsc 085a5468a341d4d7fb6a4b92668f830d 129172772 kernel optional linux_5.16.3.orig.tar.xz d7bbbe33d1df75137d3e8fb73760b9da 1300396 kernel optional linux_5.16.3-1~exp1.debian.tar.xz 805e838fe3c9167d083656a39ad48caf 6485 kernel optional linux_5.16.3-1~exp1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmHzGXxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EE2AP/2M+78mPYFceu4kyV1QRFKX6nJFnyU3R RLHOMMhPa4cWSRLz9kQNTMxar1uni4f1IV8hNQIYfQoZSvNN/BY5wBxuQUOObAt0 ipQcYf5IJFaCKdHD/LSymPnWJ8KxKC9PmqIndNrxGFPmJQeaeuHcLJsE+HNetW1T 0HWpaUlvs1REE3bVghxLWlcSv69wT4eNE3oBITCKrB2jCUDJYnvjTJ3quUaUGA7n g06TWVH3fhwc547Kz7R/35Z0+kEZL+nje9X/9fz2TPwRp+1Y0/KBAjl4NEF8n9LP D6TtNDzz6ycPEfWbLu+Nl5d7JMn5sKfP45n5loqHyi68fEb5xpvlxAU1zg+X1VNm zaLi7FSRjLZ+xYAP3idPVhvzZeBOL6j4ewVB7O3sbECWWwYPurYBgLmKZlY5h+5b E5RwFL7tyEIW4+5RLWIS2IPeL0gkKZUNOCTiHH8ex1DvyHYs9TGQ/d8a31aB+Etu 9+CLQ2ycWdu6MFPdNNq6glLZfsFtKT1f9Xk1Kwg5UqqEf+APic1v61F93D8eKhUN FfeYQEQtQLb4DtOwvKwQx4mkhVxdGx68wd2e5Ujdr+xb61DmHEe+vrkyzhkWPkqs OrU2cHsixgJ4YB+63y5iowEzAN3+XkvmUiq6Z8BbSQgEfYg4QoQZWfel54dEkjGV QzikwwSFzDkg =d1CE -----END PGP SIGNATURE-----