-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 26 Aug 2018 20:52:17 +0100
Source: linux-signed-arm64
Binary: kernel-image-4.18.0-trunk-arm64-di nic-modules-4.18.0-trunk-arm64-di nic-wireless-modules-4.18.0-trunk-arm64-di nic-shared-modules-4.18.0-trunk-arm64-di ppp-modules-4.18.0-trunk-arm64-di cdrom-core-modules-4.18.0-trunk-arm64-di scsi-core-modules-4.18.0-trunk-arm64-di scsi-modules-4.18.0-trunk-arm64-di loop-modules-4.18.0-trunk-arm64-di btrfs-modules-4.18.0-trunk-arm64-di ext4-modules-4.18.0-trunk-arm64-di isofs-modules-4.18.0-trunk-arm64-di jfs-modules-4.18.0-trunk-arm64-di xfs-modules-4.18.0-trunk-arm64-di fat-modules-4.18.0-trunk-arm64-di md-modules-4.18.0-trunk-arm64-di multipath-modules-4.18.0-trunk-arm64-di usb-modules-4.18.0-trunk-arm64-di usb-storage-modules-4.18.0-trunk-arm64-di fb-modules-4.18.0-trunk-arm64-di input-modules-4.18.0-trunk-arm64-di event-modules-4.18.0-trunk-arm64-di nic-usb-modules-4.18.0-trunk-arm64-di sata-modules-4.18.0-trunk-arm64-di i2c-modules-4.18.0-trunk-arm64-di crc-modules-4.18.0-trunk-arm64-di crypto-modules-4.18.0-trunk-arm64-di
crypto-dm-modules-4.18.0-trunk-arm64-di efi-modules-4.18.0-trunk-arm64-di ata-modules-4.18.0-trunk-arm64-di mmc-modules-4.18.0-trunk-arm64-di nbd-modules-4.18.0-trunk-arm64-di squashfs-modules-4.18.0-trunk-arm64-di virtio-modules-4.18.0-trunk-arm64-di uinput-modules-4.18.0-trunk-arm64-di compress-modules-4.18.0-trunk-arm64-di leds-modules-4.18.0-trunk-arm64-di udf-modules-4.18.0-trunk-arm64-di fuse-modules-4.18.0-trunk-arm64-di
linux-image-4.18.0-trunk-arm64
Architecture: source
Version: 4.18.5+1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Description:
ata-modules-4.18.0-trunk-arm64-di - ATA disk modules (udeb)
btrfs-modules-4.18.0-trunk-arm64-di - BTRFS filesystem support (udeb)
cdrom-core-modules-4.18.0-trunk-arm64-di - CDROM support (udeb)
compress-modules-4.18.0-trunk-arm64-di - lzo modules (udeb)
crc-modules-4.18.0-trunk-arm64-di - CRC modules (udeb)
crypto-dm-modules-4.18.0-trunk-arm64-di - devicemapper crypto module (udeb)
crypto-modules-4.18.0-trunk-arm64-di - crypto modules (udeb)
efi-modules-4.18.0-trunk-arm64-di - EFI modules (udeb)
event-modules-4.18.0-trunk-arm64-di - Event support (udeb)
ext4-modules-4.18.0-trunk-arm64-di - ext2/ext3/ext4 filesystem support (udeb)
fat-modules-4.18.0-trunk-arm64-di - FAT filesystem support (udeb)
fb-modules-4.18.0-trunk-arm64-di - Frame buffer support (udeb)
fuse-modules-4.18.0-trunk-arm64-di - FUSE modules (udeb)
i2c-modules-4.18.0-trunk-arm64-di - i2c support modules (udeb)
input-modules-4.18.0-trunk-arm64-di - Input devices support (udeb)
isofs-modules-4.18.0-trunk-arm64-di - ISOFS filesystem support (udeb)
jfs-modules-4.18.0-trunk-arm64-di - JFS filesystem support (udeb)
kernel-image-4.18.0-trunk-arm64-di - Linux kernel image and core modules for the Debian installer (udeb)
leds-modules-4.18.0-trunk-arm64-di - LED modules (udeb)
linux-image-4.18.0-trunk-arm64 - ${unsigned:DescriptionShort} (signed)
loop-modules-4.18.0-trunk-arm64-di - Loopback filesystem support (udeb)
md-modules-4.18.0-trunk-arm64-di - RAID and LVM support (udeb)
mmc-modules-4.18.0-trunk-arm64-di - MMC/SD card modules (udeb)
multipath-modules-4.18.0-trunk-arm64-di - Multipath support (udeb)
nbd-modules-4.18.0-trunk-arm64-di - Network Block Device modules (udeb)
nic-modules-4.18.0-trunk-arm64-di - NIC drivers (udeb)
nic-shared-modules-4.18.0-trunk-arm64-di - Shared NIC drivers (udeb)
nic-usb-modules-4.18.0-trunk-arm64-di - USB NIC drivers (udeb)
nic-wireless-modules-4.18.0-trunk-arm64-di - Wireless NIC drivers (udeb)
ppp-modules-4.18.0-trunk-arm64-di - PPP drivers (udeb)
sata-modules-4.18.0-trunk-arm64-di - SATA drivers (udeb)
scsi-core-modules-4.18.0-trunk-arm64-di - Core SCSI subsystem (udeb)
scsi-modules-4.18.0-trunk-arm64-di - SCSI drivers (udeb)
squashfs-modules-4.18.0-trunk-arm64-di - squashfs modules (udeb)
udf-modules-4.18.0-trunk-arm64-di - UDF modules (udeb)
uinput-modules-4.18.0-trunk-arm64-di - uinput support (udeb)
usb-modules-4.18.0-trunk-arm64-di - USB support (udeb)
usb-storage-modules-4.18.0-trunk-arm64-di - USB storage support (udeb)
virtio-modules-4.18.0-trunk-arm64-di - virtio modules (udeb)
xfs-modules-4.18.0-trunk-arm64-di - XFS filesystem support (udeb)
Closes: 904043 905116
Changes:
linux-signed-arm64 (4.18.5+1~exp1) experimental; urgency=medium
.
* Sign kernel from linux 4.18.5-1~exp1
.
* New upstream release: https://kernelnewbies.org/Linux_4.18
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1
- [x86] paravirt: Fix spectre-v2 mitigations for paravirt guests
- [x86] speculation: Protect against userspace-userspace spectreRSB
- [x86] kprobes: Fix %p uses in error messages
- [x86] irqflags: Provide a declaration for native_save_fl
- [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
- [x86] speculation/l1tf: Change order of offset/type in swap entry
- [x86] speculation/l1tf: Protect swap entries against L1TF
- [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation
- [x86] speculation/l1tf: Make sure the first page is always reserved
- [x86] speculation/l1tf: Add sysfs reporting for l1tf
- [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE
mappings
- [x86] speculation/l1tf: Limit swap file size to MAX_PA/2
- [x86] Move the l1tf function and define pr_fmt properly
- sched/smt: Update sched_smt_present at runtime
- [x86] smp: Provide topology_is_primary_thread()
- [x86] topology: Provide topology_smt_supported()
- cpu/hotplug: Make bringup/teardown of smp threads symmetric
- cpu/hotplug: Split do_cpu_down()
- cpu/hotplug: Provide knobs to control SMT
- [x86] cpu: Remove the pointless CPU printout
- [x86] cpu/AMD: Remove the pointless detect_ht() call
- [x86] cpu/common: Provide detect_ht_early()
- [x86] cpu/topology: Provide detect_extended_topology_early()
- [x86] cpu/intel: Evaluate smp_num_siblings early
- [x86] cpu/AMD: Do not check CPUID max ext level before parsing SMP info
- [x86] cpu/AMD: Evaluate smp_num_siblings early
- [x86] apic: Ignore secondary threads if nosmt=force
- [x86] speculation/l1tf: Extend 64bit swap file size limit
- [x86] cpufeatures: Add detection of L1D cache flush support.
- [x86] cpu/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF
- [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE
- Revert "x86/apic: Ignore secondary threads if nosmt=force"
- cpu/hotplug: Boot HT siblings at least once
- [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
- [x86] KVM/VMX: Add module argument for L1TF mitigation
- [x86] KVM/VMX: Add L1D flush algorithm
- [x86] KVM/VMX: Add L1D MSR based flush
- [x86] KVM/VMX: Add L1D flush logic
- [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest
numbers
- [x86] KVM/VMX: Add find_msr() helper function
- [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
- [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
- [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
- cpu/hotplug: Online siblings when SMT control is turned on
- [x86] litf: Introduce vmx status variable
- [x86] kvm: Drop L1TF MSR list approach
- [x86] l1tf: Handle EPT disabled state proper
- [x86] kvm: Move l1tf setup function
- [x86] kvm: Add static key for flush always
- [x86] kvm: Serialize L1D flush parameter setter
- [x86] kvm: Allow runtime control of L1D flush
- cpu/hotplug: Expose SMT control init function
- cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
- [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations
- [x86] speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED
architectures
- [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content
- cpu/hotplug: detect SMT disabled by BIOS
- [x86] KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
- [x86] KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
- [x86] KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
- [x86] irq: Demote irq_cpustat_t::__softirq_pending to u16
- [x86] KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
- [x86] Don't include linux/irq.h from asm/hardirq.h
- [x86] irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
- [x86] KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
- [x86] speculation: Simplify sysfs report of VMX L1TF vulnerability
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
- [x86] KVM/VMX: Tell the nested hypervisor to skip L1D flush on vmentry
- cpu/hotplug: Fix SMT supported evaluation
- [x86] speculation/l1tf: Invert all not present mappings
- [x86] speculation/l1tf: Make pmd/pud_mknotpresent() invert
- [x86] mm/pat: Make set_memory_np() L1TF safe
- [x86] mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- [x86] microcode: Allow late microcode loading with SMT disabled
- cpu/hotplug: Non-SMP machines do not make use of booted_once
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.2
- [x86] l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
- [x86] hyper-v: Check for VP_INVAL in hyperv_flush_tlb_others()
- [x86] platform/UV: Mark memblock related init code and data correctly
- [x86] mm/pti: Clear Global bit more aggressively
- [x86] xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits
- [x86] mm: Disable ioremap free page handling on x86-PAE
- crypto: ccp - Check for NULL PSP pointer at module unload
- crypto: ccp - Fix command completion detection race
- [x86] crypto: x86/sha256-mb - fix digest copy in
sha256_mb_mgr_get_comp_job_avx2()
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
- ioremap: Update pgtable free interfaces with addr
- [x86] mm: Add TLB purge to free pmd/pte page interfaces
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.3
- [x86] speculation/l1tf: Exempt zeroed PTEs from inversion
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.4
- l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
- net_sched: fix NULL pointer dereference when delete tcindex filter
- net_sched: Fix missing res info when create new tc_index filter
- r8169: don't use MSI-X on RTL8168g
- ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
- ALSA: hda - Turn CX8200 into D3 as well upon reboot
- ALSA: vx222: Fix invalid endian conversions
- ALSA: cs5535audio: Fix invalid endian conversion
- ALSA: dice: fix wrong copy to rx parameters for Alesis iO26
- ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
- ALSA: memalloc: Don't exceed over the requested size
- ALSA: vxpocket: Fix invalid endian conversions
- ALSA: seq: Fix poll() error return
- media: gl861: fix probe of dvb_usb_gl861
- USB: serial: sierra: fix potential deadlock at close
- USB: serial: pl2303: add a new device id for ATEN
- USB: option: add support for DW5821e
- [x86] ACPI / PM: save NVS memory for ASUS 1025C laptop
- tty: serial: 8250: Revert NXP SC16C2552 workaround
- serial: 8250_exar: Read INT0 from slave device, too
- [x86, armhf, arm64] serial: 8250_dw: always set baud rate in
dw8250_set_termios
- [armhf, arm64] serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
- uio: fix wrong return value from uio_mmap()
- Revert "uio: use request_threaded_irq instead"
- Bluetooth: avoid killing an already killed socket
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
- [x86] hv/netvsc: Fix NULL dereference at single queue mode fallback
- r8169: don't use MSI-X on RTL8106e
- ip_vti: fix a null pointer deferrence when create vti fallback tunnel
- [arm64] net: ethernet: mvneta: Fix napi structure mixup on armada 3700
- [arm64] net: mvneta: fix mvneta_config_rss on armada 3700
- cls_matchall: fix tcf_unbind_filter missing
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.5
- [mips*, x86] EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
- pty: fix O_CLOEXEC for TIOCGPTPEER
- mm: Allow non-direct-map arguments to free_reserved_area()
- [x86] mm/init: Pass unconverted symbol addresses to free_init_pages()
- [x86] mm/init: Add helper for freeing kernel image pages
- [x86] mm/init: Remove freed kernel image areas from alias mapping
- [powerpc64] Show ori31 availability in spectre_v1 sysfs file not v2
- ext4: fix spectre gadget in ext4_mb_regular_allocator()
- [x86] drm/i915/kvmgt: Fix potential Spectre v1
- drm/amdgpu/pm: Fix potential Spectre v1
- [hppa/parisc] Remove unnecessary barriers from spinlock.h
- [hppa/parisc] Remove ordered stores from syscall.S
- PCI: Restore resized BAR state on resume
- PCI/ACPI/PM: Resume all bridges on suspend-to-RAM
- PCI: hotplug: Don't leak pci_slot on registration failure
- [arm64] PCI: aardvark: Size bridges before resources allocation
- PCI: Skip MPS logic for Virtual Functions (VFs)
- PCI: pciehp: Fix use-after-free on unplug
- PCI: pciehp: Fix unprotected list iteration in IRQ handler
- i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
- [armhf] i2c: imx: Fix race condition in dma read
- reiserfs: fix broken xattr handling (heap corruption, bad retval)
.
[ Uwe Kleine-König ]
* [arm64] enable RTC_DRV_PCF8563 for Odroid-C2
.
[ Romain Perier ]
* [armhf, arm64] add the rt featureset, which adds support for
PREEMPT_RT (Closes #719547)
* spi: Enable CONFIG_SPI_SPIDEV (Closes: #904043)
.
[ Ben Hutchings ]
* certs: Remove certificate for my personal signing key
* Update policy version to 4.2.0:
- linux-kbuild: Change "#!/usr/bin/env perl" to "#!/usr/bin/perl"
- Build with KBUILD_VERBOSE=1 by default
- objtool, usbip: Build with V=1 by default
* cpupower: Fix handling of noopt and nostrip build options
* debian/bin/gencontrol_signed.py: Add certificate fingerprints to template
metadata
* scripts/kernel-doc: Escape all literal braces in regexes (Closes: #905116)
* debian/bin/genorig.py: Add support for debian/copyright Files-Excluded
field
* Move file exclusion from d/p/debian/dfsg/files-1 to d/copyright
* Move disabling of broken features from d/p/series-orig to d/p/series
* Remove our private patch system, which is no longer needed
* debian/bin: Change "#!/usr/bin/env python3" to "#!/usr/bin/python3"
Checksums-Sha1:
1ddf43ccf018a59d7b60544f04cd98e186c2b934 6470 linux-signed-arm64_4.18.5+1~exp1.dsc
b4285868f22a51c1162b14343a4d48193cd09c5d 1217420 linux-signed-arm64_4.18.5+1~exp1.tar.xz
Checksums-Sha256:
f1f200856103bdf0897a8e9c44e2e1bd1c6f4932e247517203128098b9a7a114 6470 linux-signed-arm64_4.18.5+1~exp1.dsc
9b1aa2319e1f5e2d21c61fd07006bc9f89cad9cdccb4a0dd860b0635bda02dea 1217420 linux-signed-arm64_4.18.5+1~exp1.tar.xz
Files:
988a3ef525db20bcacffabd8ede53038 6470 kernel optional linux-signed-arm64_4.18.5+1~exp1.dsc
8707a4ddf009cbe2b032a9b8483f3031 1217420 kernel optional linux-signed-arm64_4.18.5+1~exp1.tar.xz
-----BEGIN PGP SIGNATURE-----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=WN4o
-----END PGP SIGNATURE-----
