[ubuntu/eoan-proposed] linux-aws 5.3.0-1002.2 (Accepted)
Seth Forshee
seth.forshee+lp at canonical.com
Sat Oct 5 06:42:35 UTC 2019
linux-aws (5.3.0-1002.2) eoan; urgency=medium
* eoan/linux-aws: 5.3.0-1002.2 -proposed tracker (LP: #1845720)
* Support Hi1620 zip hw accelerator (LP: #1845355)
- [Config] Enable HiSilicon QM/ZIP as modules
* Packaging resync (LP: #1786013)
- [Packaging] update update.conf
[ Ubuntu: 5.3.0-15.16 ]
* eoan/linux: 5.3.0-15.16 -proposed tracker (LP: #1845987)
* Drop i386 build for 19.10 (LP: #1845714)
- [Packaging] Remove x32 arch references from control files
- [Debian] final-checks -- Get arch list from debian/control
* ZFS kernel modules lack debug symbols (LP: #1840704)
- [Debian] Fix conditional for setting zfs debug package path
* Use pyhon3-sphinx instead of python-sphinx for building html docs
(LP: #1845808)
- [Packaging] Update sphinx build dependencies to python3 packages
* Kernel panic with 19.10 beta image (LP: #1845454)
- efi/tpm: Don't access event->count when it isn't mapped.
- efi/tpm: don't traverse an event log with no events
- efi/tpm: only set efi_tpm_final_log_size after successful event log parsing
[ Ubuntu: 5.3.0-14.15 ]
* eoan/linux: 5.3.0-14.15 -proposed tracker (LP: #1845728)
* Drop i386 build for 19.10 (LP: #1845714)
- [Debian] Remove support for producing i386 kernels
- [Debian] Don't use CROSS_COMPILE for i386 configs
* udevadm trigger will fail when trying to add /sys/devices/vio/
(LP: #1845572)
- SAUCE: powerpc/vio: drop bus_type from parent device
* Trying to online dasd drive results in invalid input/output from the kernel
on z/VM (LP: #1845323)
- SAUCE: s390/dasd: Fix error handling during online processing
* intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
- SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
* Support Hi1620 zip hw accelerator (LP: #1845355)
- [Config] Enable HiSilicon QM/ZIP as modules
- crypto: hisilicon - add queue management driver for HiSilicon QM module
- crypto: hisilicon - add hardware SGL support
- crypto: hisilicon - add HiSilicon ZIP accelerator support
- crypto: hisilicon - add SRIOV support for ZIP
- Documentation: Add debugfs doc for hisi_zip
- crypto: hisilicon - add debugfs for ZIP and QM
- MAINTAINERS: add maintainer for HiSilicon QM and ZIP controller driver
- crypto: hisilicon - fix kbuild warnings
- crypto: hisilicon - add dependency for CRYPTO_DEV_HISI_ZIP
- crypto: hisilicon - init curr_sgl_dma to fix compile warning
- crypto: hisilicon - add missing single_release
- crypto: hisilicon - fix error handle in hisi_zip_create_req_q
- crypto: hisilicon - Fix warning on printing %p with dma_addr_t
- crypto: hisilicon - Fix return value check in hisi_zip_acompress()
- crypto: hisilicon - avoid unused function warning
* SafeSetID LSM should be built but disabled by default (LP: #1845391)
- LSM: SafeSetID: Stop releasing uninitialized ruleset
- [Config] Build SafeSetID LSM but don't enable it by default
* CONFIG_LSM should not specify loadpin since it is not built (LP: #1845383)
- [Config] loadpin shouldn't be in CONFIG_LSM
* Add new pci-id's for CML-S, ICL (LP: #1845317)
- drm/i915/icl: Add missing device ID
- drm/i915/cml: Add Missing PCI IDs
* Thunderbolt support for ICL (LP: #1844680)
- thunderbolt: Correct path indices for PCIe tunnel
- thunderbolt: Move NVM upgrade support flag to struct icm
- thunderbolt: Use 32-bit writes when writing ring producer/consumer
- thunderbolt: Do not fail adding switch if some port is not implemented
- thunderbolt: Hide switch attributes that are not set
- thunderbolt: Expose active parts of NVM even if upgrade is not supported
- thunderbolt: Add support for Intel Ice Lake
- ACPI / property: Add two new Thunderbolt property GUIDs to the list
* Ubuntu 19.10 - Additional PCI patch and fix (LP: #1844668)
- s390/pci: fix MSI message data
* Enhanced Hardware Support - Finalize Naming (LP: #1842774)
- s390: add support for IBM z15 machines
- [Config] CONFIG_MARCH_Z15=n, CONFIG_TUNE_Z15=n
* Eoan update: v5.3.1 upstream stable release (LP: #1845642)
- USB: usbcore: Fix slab-out-of-bounds bug during device reset
- media: tm6000: double free if usb disconnect while streaming
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
- ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
- net/sched: fix race between deactivation and dequeue for NOLOCK qdisc
- net_sched: let qdisc_put() accept NULL pointer
- udp: correct reuseport selection with connected sockets
- xen-netfront: do not assume sk_buff_head list is empty in error handling
- net: dsa: Fix load order between DSA drivers and taggers
- net: stmmac: Hold rtnl lock in suspend/resume callbacks
- KVM: coalesced_mmio: add bounds checking
- Documentation: sphinx: Add missing comma to list of strings
- firmware: google: check if size is valid when decoding VPD data
- serial: sprd: correct the wrong sequence of arguments
- tty/serial: atmel: reschedule TX after RX was started
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
- Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
- ovl: fix regression caused by overlapping layers detection
- phy: qcom-qmp: Correct ready status, again
- floppy: fix usercopy direction
- media: technisat-usb2: break out of loop at end of buffer
- Linux 5.3.1
* ZFS kernel modules lack debug symbols (LP: #1840704)
- [Debian]: Remove hardcoded $(pkgdir) in debug symbols handling
- [Debian]: Handle debug symbols for modules in extras too
- [Debian]: Check/link modules with debug symbols after DKMS modules
- [Debian]: Warn about modules without debug symbols
- [Debian]: dkms-build: new parameter for debug package directory
- [Debian]: dkms-build: zfs: support for debug symbols
- [Debian]: dkms-build: Avoid executing post-processor scripts twice
- [Debian]: dkms-build: Move zfs special-casing into configure script
* /proc/self/maps paths missing on live session (was vlc won't start; eoan
19.10 & bionic 18.04 ubuntu/lubuntu/kubuntu/xubuntu/ubuntu-mate dailies)
(LP: #1842382)
- SAUCE: Revert "UBUNTU: SAUCE: shiftfs: enable overlayfs on shiftfs"
[ Ubuntu: 5.3.0-13.14 ]
* eoan/linux: 5.3.0-13.14 -proposed tracker (LP: #1845105)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* Miscellaneous Ubuntu changes
- [Debian] Remove binutils-dev build dependency
[ Ubuntu: 5.3.0-12.13 ]
* Change kernel compression method to improve boot speed (LP: #1840934)
- [Packaging] Add lz4 build dependency for s390x
* Miscellaneous Ubuntu changes
- SAUCE: Remove spl and zfs source
[ Ubuntu: 5.3.0-11.12 ]
* eoan/linux: 5.3.0-11.12 -proposed tracker (LP: #1844144)
* Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
adapters(SAS3.5 onwards) (LP: #1838751)
- PCI: Restore Resizable BAR size bits correctly for 1MB BARs
* s390/setup: Actually init kernel lock down (LP: #1843961)
- SAUCE: (lockdown) s390/setup: Actually init kernel lock down
* cherrypick has_sipl fix (LP: #1843960)
- SAUCE: s390/sclp: Fix bit checked for has_sipl
* Change kernel compression method to improve boot speed (LP: #1840934)
- [Config]: Switch kernel compression from LZO to LZ4 on s390x
* Installation fails on eoan/PowerVM : missing /dev/nvram (LP: #1837726)
- [Config] CONFIG_NVRAM=y for ppc64el
* Miscellaneous Ubuntu changes
- [Config]: remove nvram from ppc64el modules ABI
- [Config] Update annotations for recent config changes
- SAUCE: sched: Add __ASSEMBLY__ guards around struct clone_args
- SAUCE: i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
- SAUCE: arm64: dts: qcom: Add Lenovo Yoga C630
- update dkms package versions
* Rebase to v5.3
[ Ubuntu: 5.3.0-10.11 ]
* eoan/linux: 5.3.0-10.11 -proposed tracker (LP: #1843232)
* No sound inputs from the external microphone and headset on a Dell machine
(LP: #1842265)
- SAUCE: ALSA: hda - Expand pin_match function to match upcoming new tbls
- SAUCE: ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family
* Horizontal corrupted line at top of screen caused by framebuffer compression
(LP: #1840236)
- SAUCE: drm/i915/fbc: disable framebuffer compression on IceLake
* Add bpftool to linux-tools-common (LP: #1774815)
- [Debian] package bpftool in linux-tools-common
* Miscellaneous Ubuntu changes
- update dkms package versions
* Rebase to v5.3-rc8
[ Ubuntu: 5.3.0-9.10 ]
* eoan/linux: 5.3.0-9.10 -proposed tracker (LP: #1842393)
* shiftfs: mark kmem_cache as reclaimable (LP: #1842059)
- SAUCE: shiftfs: mark slab objects SLAB_RECLAIM_ACCOUNT
* shiftfs: drop entries from cache on unlink (LP: #1841977)
- SAUCE: shiftfs: fix buggy unlink logic
* Fix touchpad IRQ storm after S3 (LP: #1841396)
- pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
* Please include DTBs for arm64 laptops (LP: #1842050)
- arm64: dts: qcom: Add Lenovo Miix 630
- arm64: dts: qcom: Add HP Envy x2
- arm64: dts: qcom: Add Asus NovaGo TP370QL
* Miscellaneous Ubuntu changes
- SAUCE: import aufs driver
- [Packaging]: ignore vbox modules when vbox is disabled
* Rebase to v5.3-rc7
[ Ubuntu: 5.3.0-8.9 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
* Change kernel compression method to improve boot speed (LP: #1840934)
- [Config] change kernel compression method to improve boot speed
- [Packaging] add build dependencies for compression algorithms
* realtek r8822be kernel module fails after update to linux kernel-headers
5.0.0-21 (LP: #1838133)
- rtw88: Fix misuse of GENMASK macro
- rtw88: pci: Rearrange the memory usage for skb in RX ISR
- rtw88: pci: Use DMA sync instead of remapping in RX ISR
- rtw88: debug: dump tx power indexes in use
- rtw88: use txpwr_lmt_cfg_pair struct, not arrays
- rtw88: pci: remove set but not used variable 'ip_sel'
- rtw88: allow c2h operation in irq context
- rtw88: enclose c2h cmd handle with mutex
- rtw88: add BT co-existence support
- SAUCE: rtw88: pci: enable MSI interrupt
* VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
- [Config] Enable VIMC module
* Goodix touchpad may drop first input event (LP: #1840075)
- Revert "UBUNTU: SAUCE: i2c: designware: add G3 3590 into i2c quirk"
- Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron 7591 into i2c quirk"
- Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
quirk"
- Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
- mfd: intel-lpss: Remove D3cold delay
* Include Sunix serial/parallel driver (LP: #1826716)
- serial: 8250_pci: Add support for Sunix serial boards
- parport: parport_serial: Add support for Sunix Multi I/O boards
* enable lockdown on s390x when Secure IPL is performed (LP: #1839622)
- SAUCE: (lockdown) s390/ipl: lockdown kernel when booted secure
- Ubuntu: [Config] Enable CONFIG_LOCK_DOWN_KERNEL on s390x.
* UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
- SAUCE: shiftfs: pass correct point down
* shiftfs: add O_DIRECT support (LP: #1837223)
- SAUCE: shiftfs: add O_DIRECT support
* Miscellaneous Ubuntu changes
- [Config] enable secureboot signing on s390x
- [Config] CONFIG_TEST_BLACKHOLE_DEV=m
- SAUCE: selftests: fib_tests: assign address to dummy1 for rp_filter tests
- [Debian] disable dkms builds for autopktest rebuilds
- update dkms package versions
- [Config] updateconfigs after v5.3-rc6 rebase
* Rebase to v5.3-rc5
[ Ubuntu: 5.3.0-7.8 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
* Miscellaneous Ubuntu changes
- [Config] updateconfigs after v5.3-rc5 rebase
- remove missing module after updateconfigs
* Rebase to v5.3-rc5
[ Ubuntu: 5.3.0-6.7 ]
* Miscellaneous Ubuntu changes
- SAUCE: selftests/bpf: prevent headers to be compiled as C code
[ Ubuntu: 5.3.0-5.6 ]
* Miscellaneous Ubuntu changes
- update dkms package versions
- [Config] enable zfs build
[ Ubuntu: 5.3.0-4.5 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665) // Tight
timeout for bcache removal causes spurious failures (LP: #1796292)
- SAUCE: bcache: fix deadlock in bcache_allocator
* shiftfs: allow overlayfs (LP: #1838677)
- SAUCE: shiftfs: enable overlayfs on shiftfs
* Miscellaneous Ubuntu changes
- SAUCE: Revert "kbuild: modpost: do not parse unnecessary rules for vmlinux
modpost"
- update dkms package versions
- enable nvidia dkms build
* Rebase to v5.3-rc4
[ Ubuntu: 5.3.0-3.4 ]
* Miscellaneous Ubuntu changes
- update dkms package versions
- SAUCE: aufs: add "WITH Linux-syscall-note" to SPDX tag of uapi headers
- [Config] add mux-* to modules.ignore
* Rebase to v5.3-rc3
[ Ubuntu: 5.3.0-2.3 ]
* Miscellaneous Ubuntu changes
- [Packaging] add build dependincy on fontconfig
[ Ubuntu: 5.3.0-1.2 ]
* System does not auto detect disconnection of external monitor (LP: #1835001)
- SAUCE: drm/i915: Add support for retrying hotplug
- SAUCE: drm/i915: Enable hotplug retry
* Please enable CONFIG_SCSI_UFS_QCOM as a module on arm64 (LP: #1837332)
- [Config] Enable CONFIG_SCSI_UFS_QCOM as a module on arm64.
* Add arm64 CONFIG_ARCH_MESON=y and related configs Edit (LP: #1820530)
- [Config] enable ARCH_MESON
- remove missing module
- [Config] update annotations after enabling ARCH_MESON for arm64
* Miscellaneous Ubuntu changes
- SAUCE: KVM: PPC: comment implicit fallthrough
- update dkms package versions
- [Config] enable vbox dkms build
* Rebase to v5.3-rc2
[ Ubuntu: 5.3.0-0.1 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* Miscellaneous Ubuntu changes
- SAUCE: (efi-lockdown) Add the ability to lock down access to the running
kernel image
- SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down
- SAUCE: (efi-lockdown) Restrict /dev/{mem,kmem,port} when the kernel is
locked down
- SAUCE: (efi-lockdown) kexec_load: Disable at runtime if the kernel is locked
down
- SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec
reboot
- SAUCE: (efi-lockdown) kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and
KEXEC_SIG_FORCE
- SAUCE: (efi-lockdown) kexec_file: Restrict at runtime if the kernel is
locked down
- SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down
- SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down
- SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked
down
- SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is
locked down
- SAUCE: (efi-lockdown) x86/msr: Restrict MSR access when the kernel is locked
down
- SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is
locked down
- SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel
has been locked down
- SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is
locked down
- SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is
locked down
- SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
down
- SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
- SAUCE: (efi-lockdown) Lock down module params that specify hardware
parameters (eg. ioport)
- SAUCE: (efi-lockdown) x86/mmiotrace: Lock down the testmmiotrace module
- SAUCE: (efi-lockdown) Lock down /proc/kcore
- SAUCE: (efi-lockdown) Lock down kprobes
- SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
kernel is locked down
- SAUCE: (efi-lockdown) Lock down perf
- SAUCE: (efi-lockdown) debugfs: Restrict debugfs when the kernel is locked
down
- SAUCE: (efi-lockdown) lockdown: Print current->comm in restriction messages
- SAUCE: (efi-lockdown) kexec: Allow kexec_file() with appropriate IMA policy
when locked down
- SAUCE: (efi-lockdown) Add a SysRq option to lift kernel lockdown
- SAUCE: (efi-lockdown) debugfs: avoid EPERM when no open file operation
defined
- SAUCE: (efi-lockdown) Make get_cert_list() not complain about cert lists
that aren't present.
- SAUCE: (efi-lockdown) Add efi_status_to_str() and rework
efi_status_to_err().
- SAUCE: (efi-lockdown) Make get_cert_list() use efi_status_to_str() to print
error messages.
- SAUCE: (efi-lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure
boot mode
- SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot
mode
- SAUCE: (efi-lockdown) KEYS: Make use of platform keyring for module
signature verify
- SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
- SAUCE: (efi-lockdown) furter KEXEC_VERIFY_SIG -> KEXEC_SIG updates
- SAUCE: (efi-lockdown) arm64: add kernel config option to lock down when in
Secure Boot mode
- SAUCE: import aufs driver
- SAUCE: aufs: rwsem owner changed to atmoic_long_t in 5.3
- [Config] disable zfs dkms build
- [Config] disable nvidia dkms build
- [Config] disable vbox dkms build
- SAUCE: perf diff: use llabs for s64 vaules
* Rebase to v5.3-rc1
[ Ubuntu: 5.3.0-0.0 ]
* Dummy entry.
[ Ubuntu: 5.2.0-9.10 ]
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* input/mouse: alps trackpoint-only device doesn't work (LP: #1836752)
- SAUCE: Input: alps - don't handle ALPS cs19 trackpoint-only device
- SAUCE: Input: alps - fix a mismatch between a condition check and its
comment
* System does not auto detect disconnection of external monitor (LP: #1835001)
- SAUCE: drm/i915: Add support for retrying hotplug
- SAUCE: drm/i915: Enable hotplug retry
* alsa/hdmi: add icelake hdmi audio support for a Dell machine (LP: #1836916)
- SAUCE: ALSA: hda/hdmi - Remove duplicated define
- SAUCE: ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
* First click on Goodix touchpad doesn't be recognized after runtime suspended
(LP: #1836836)
- SAUCE: i2c: designware: add G3 3590 into i2c quirk
* ixgbe{vf} - Physical Function gets IRQ when VF checks link state
(LP: #1836760)
- ixgbevf: Use cached link state instead of re-reading the value for ethtool
* Doing multiple squashfs (and other loop?) mounts in parallel breaks
(LP: #1836914)
- SAUCE: Revert "loop: Don't change loop device under exclusive opener"
* hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
- SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
- [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
- [Config] add hibmc-drm to modules.ignore
* hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
- ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
* Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
(LP: #1835054)
- [Config] Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
* Unhide Nvidia HDA audio controller (LP: #1836308)
- PCI: Enable NVIDIA HDA controllers
* Intel ethernet I219 may wrongly detect connection speed as 10Mbps
(LP: #1836177)
- e1000e: Make watchdog use delayed work
* Sometimes touchpad(goodix) can't use tap function (LP: #1836020)
- SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c quirk
- SAUCE: i2c: designware: add Inpiron 7591 into i2c quirk
* Intel ethernet I219 has slow RX speed (LP: #1836152)
- e1000e: add workaround for possible stalled packet
- e1000e: disable force K1-off feature
* bcache: risk of data loss on I/O errors in backing or caching devices
(LP: #1829563)
- Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
* bnx2x driver causes 100% CPU load (LP: #1832082)
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
* fcf-protection=none patch with new version
- Revert "UBUNTU: SAUCE: kbuild: add -fcf-protection=none to retpoline flags"
- SAUCE: kbuild: add -fcf-protection=none when using retpoline flags
* CVE-2019-12614
- powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
* Eoan update: v5.2.1 upstream stable release (LP: #1836622)
- crypto: lrw - use correct alignmask
- crypto: talitos - rename alternative AEAD algos.
- fscrypt: don't set policy for a dead directory
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- media: stv0297: fix frequency range limit
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
- ALSA: hda/realtek - Headphone Mic can't record after S3
- tpm: Actually fail on TPM errors during "get random"
- tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
- block: fix .bi_size overflow
- block, bfq: NULL out the bic when it's no longer valid
- perf intel-pt: Fix itrace defaults for perf script
- perf auxtrace: Fix itrace defaults for perf script
- perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
- perf pmu: Fix uncore PMU alias list for ARM64
- perf thread-stack: Fix thread stack return from kernel for kernel-only case
- perf header: Assign proper ff->ph in perf_event__synthesize_features()
- x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- x86/tls: Fix possible spectre-v1 in do_get_thread_area()
- Documentation: Add section about CPU vulnerabilities for Spectre
- Documentation/admin: Remove the vsyscall=native documentation
- mwifiex: Don't abort on small, spec-compliant vendor IEs
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
- p54usb: Fix race between disconnect and firmware loading
- usb: gadget: f_fs: data_len used before properly set
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
- usb: renesas_usbhs: add a workaround for a race condition of workqueue
- drivers/usb/typec/tps6598x.c: fix portinfo width
- drivers/usb/typec/tps6598x.c: fix 4CC cmd write
- p54: fix crash during initialization
- staging: comedi: dt282x: fix a null pointer deref on interrupt
- staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
- staging: bcm2835-camera: Restore return behavior of ctrl_set_bitrate()
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
- HID: Add another Primax PIXART OEM mouse quirk
- lkdtm: support llvm-objcopy
- binder: fix memory leak in error path
- binder: return errors from buffer copy functions
- iio: adc: stm32-adc: add missing vdda-supply
- coresight: Potential uninitialized variable in probe()
- coresight: etb10: Do not call smp_processor_id from preemptible
- coresight: tmc-etr: Do not call smp_processor_id() from preemptible
- coresight: tmc-etr: alloc_perf_buf: Do not call smp_processor_id from
preemptible
- coresight: tmc-etf: Do not call smp_processor_id from preemptible
- carl9170: fix misuse of device driver API
- Revert "x86/build: Move _etext to actual end of .text"
- VMCI: Fix integer overflow in VMCI handle arrays
- staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
- staging: vchiq: make wait events interruptible
- staging: vchiq: revert "switch to wait_for_completion_killable"
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
- staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
- staging: bcm2835-camera: Ensure all buffers are returned on disable
- staging: bcm2835-camera: Remove check of the number of buffers supplied
- staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
- staging: rtl8712: reduce stack usage, again
- Linux 5.2.1
- [Config] updateconfigs after v5.2.1 stable update
* fcf-protection=none patch with upstream version
- Revert "UBUNTU: SAUCE: add -fcf-protection=none to retpoline flags"
- SAUCE: kbuild: add -fcf-protection=none to retpoline flags
* Miscellaneous Ubuntu changes
- SAUCE: selftests/ftrace: avoid failure when trying to probe a notrace
function
- SAUCE: selftests/powerpc/ptrace: fix build failure
- update dkms package versions
- [Packaging] add zlua to zfs-modules.ignore
- update dkms package versions
[ Ubuntu: 5.2.0-8.9 ]
* linux: 5.2.0-8.9 -proposed tracker (LP: #1835700)
* Miscellaneous Ubuntu changes
- [Packaging] replace zfs and spl build with zfs 0.8.1-1ubuntu1
- SAUCE: test_bpf: remove expected fail for Ctx heavy transformations test on
s390
- SAUCE: add -fcf-protection=none to retpoline flags
- SAUCE: usbip: ensure strings copied using strncpy are null-terminated
- SAUCE: usbip: add -Wno-address-of-packed-member to EXTRA_CFLAGS
- SAUCE: perf jvmti: ensure strncpy result is null-terminated
- update dkms package versions
- add removed zfs modules to modules.ignore
* Rebase to v5.2
[ Ubuntu: 5.2.0-7.8 ]
* Kernel panic upon resetting ixgbe SR-IOV VFIO virtual function using 5.0
kernel (LP: #1829652)
- SAUCE: ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw
* Hi1620 driver updates from upstream 5.2 merge window (LP: #1830815)
- net: hns3: initialize CPU reverse mapping
- net: hns3: refine the flow director handle
- net: hns3: add aRFS support for PF
- net: hns3: fix for FEC configuration
- RDMA/hns: Remove unnecessary print message in aeq
- RDMA/hns: Update CQE specifications
- RDMA/hns: Move spin_lock_irqsave to the correct place
- RDMA/hns: Remove jiffies operation in disable interrupt context
- RDMA/hns: Replace magic numbers with #defines
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro
- net: hns3: add support for dump firmware statistics by debugfs
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has
registered
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has
registered
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has
registered
- net: hns3: modify hclge_init_client_instance()
- net: hns3: modify hclgevf_init_client_instance()
- net: hns3: add handshake with hardware while doing reset
- net: hns3: stop schedule reset service while unloading driver
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit()
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
- RDMA/hns: Bugfix for posting multiple srq work request
- net: hns3: remove redundant core reset
- net: hns3: don't configure new VLAN ID into VF VLAN table when it's full
- net: hns3: fix VLAN filter restore issue after reset
- net: hns3: set the port shaper according to MAC speed
- net: hns3: add a check to pointer in error_detected and slot_reset
- net: hns3: set ops to null when unregister ad_dev
- net: hns3: add handling of two bits in MAC tunnel interrupts
- net: hns3: remove setting bit of reset_requests when handling mac tunnel
interrupts
- net: hns3: add opcode about query and clear RAS & MSI-X to special opcode
- net: hns3: delay and separate enabling of NIC and ROCE HW errors
- RDMA/hns: fix inverted logic of readl read and shift
- RDMA/hns: Bugfix for filling the sge of srq
- net: hns3: log detail error info of ROCEE ECC and AXI errors
- net: hns3: fix wrong size of mailbox responding data
- net: hns3: make HW GRO handling compliant with SW GRO
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing
- net: hns3: refactor hns3_get_new_int_gl function
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err
- net: hns3: delete the redundant user NIC codes
- net: hns3: small changes for magic numbers
- net: hns3: use macros instead of magic numbers
- net: hns3: refactor PF/VF RSS hash key configuration
- net: hns3: some modifications to simplify and optimize code
- net: hns3: fix some coding style issues
- net: hns3: delay setting of reset level for hw errors until slot_reset is
called
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not
require reset
- net: hns3: process H/W errors occurred before HNS dev initialization
- net: hns3: add recovery for the H/W errors occurred before the HNS dev
initialization
- net: hns3: some changes of MSI-X bits in PPU(RCB)
- net: hns3: extract handling of mpf/pf msi-x errors into functions
- net: hns3: clear restting state when initializing HW device
- net: hns3: free irq when exit from abnormal branch
- net: hns3: fix for dereferencing before null checking
- net: hns3: fix for skb leak when doing selftest
- net: hns3: delay ring buffer clearing during reset
- net: hns3: some variable modification
- net: hns3: fix dereference of ae_dev before it is null checked
- scsi: hisi_sas: Delete PHY timers when rmmod or probe failed
- scsi: hisi_sas: Fix the issue of argument mismatch of printing ecc errors
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size
- scsi: hisi_sas: Change the type of some numbers to unsigned
- scsi: hisi_sas: Ignore the error code between phy down to phy up
- scsi: hisi_sas: Disable stash for v3 hw
- net: hns3: Add missing newline at end of file
- RDMa/hns: Don't stuck in endless timeout loop
* Sometimes touchpad automatically trigger double click (LP: #1833484)
- SAUCE: i2c: designware: Add disable runtime pm quirk
* Add pointstick support on HP ZBook 17 G5 (LP: #1833387)
- Revert "HID: multitouch: Support ALPS PTP stick with pid 0x120A"
* depmod may prefer unsigned l-r-m nvidia modules to signed modules
(LP: #1834479)
- [Packaging] dkms-build--nvidia-N -- clean up unsigned ko files
* Miscellaneous Ubuntu changes
- SAUCE: selftests/powerpc: disable signal_fuzzer test
* Rebase to v5.2-rc7
[ Ubuntu: 5.2.0-6.7 ]
* hinic: fix oops due to race in set_rx_mode (LP: #1832048)
- hinic: fix a bug in set rx mode
* Miscellaneous Ubuntu changes
- rebase to v5.2-rc6
* Rebase to v5.2-rc6
[ Ubuntu: 5.2.0-5.6 ]
* QCA9377 isn't being recognized sometimes (LP: #1757218)
- SAUCE: USB: Disable USB2 LPM at shutdown
* shiftfs: allow changing ro/rw for subvolumes (LP: #1832316)
- SAUCE: shiftfs: allow changing ro/rw for subvolumes
* Miscellaneous Ubuntu changes
- update dkms package versions
- [Packaging] replace nvidia-418 dkms build with nvidia-430
- SAUCE: import aufs driver
* Rebase to v5.2-rc5
[ Ubuntu: 5.2.0-4.5 ]
* arm64: cma_alloc errors at boot (LP: #1823753)
- [Config] Bump CMA_SIZE_MBYTES to 32 on arm64
- dma-contiguous: add dma_{alloc,free}_contiguous() helpers
- dma-contiguous: use fallback alloc_pages for single pages
- dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc,
free}_contiguous()
* Miscellaneous Ubuntu changes
- [Config] CONFIG_MFD_TQMX86=n for s390x
- [Config] CONFIG_GPIO_AMD_FCH=n for s390x
- [Config] CONFIG_BACKLIGHT_CLASS_DEVICE=n on s390x
- [Config] CONFIG_LCD_CLASS_DEVICE=n for s390x
- [Config] CONFIG_DRM_ETNAVIV=m for armhf generic-lpae
- [Config] CONFIG_DRM_NOUVEAU_SVM=n
- [Config] CONFIG_HWMON=n for s390x
- [Config] CONFIG_NEW_LEDS=n for s390x
- [Config] CONFIG_MTD_NAND_OMAP2=y for armhf
- [Config] CONFIG_VOP_BUS=n for non-amd64 arches
- [Config] CONFIG_TI_CPSW_PHY_SEL=n
- [Config] CONFIG_INTERCONNECT=n for s390x
- [Config] CONFIG_SCSI_GDTH=n for s390x
- [Config] CONFIG_PACKING=n for s390x
- [Config] CONFIG_ARCH_MILBEAUT=y for armhf
- [Config] update annotations following config review
- update dkms package versions
- [Config] enable nvidia dkms build
* Rebase to v5.2-rc4
[ Ubuntu: 5.2.0-3.4 ]
* [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
Ubuntu (LP: #1761379)
- [Packaging] Support building libperf-jvmti.so
* Miscellaneous Ubuntu changes
- SAUCE: Revert "bpf, selftest: test global data/bss/rodata sections"
- update dkms package versions
- [Config] enable zfs
- rebase to v5.2-rc3
* Rebase to v5.2-rc3
[ Ubuntu: 5.2.0-2.3 ]
* Miscellaneous Ubuntu changes
- SAUCE: perf arm64: Fix mksyscalltbl when system kernel headers are ahead of
the kernel
[ Ubuntu: 5.2.0-1.2 ]
* Miscellaneous Ubuntu changes
- [Config] CONFIG_INTEGRITY_PLATFORM_KEYRING=y
- update dkms package versions
- [Config] enable vbox dkms build
- update dkms package versions
* Rebase to v5.2-rc2
[ Ubuntu: 5.2.0-0.1 ]
* Miscellaneous Ubuntu changes
- SAUCE: import aufs driver
- [Packaging] disable ZFS
- [Packaging] disable nvidia
- [Packaging] dkms-build -- expand paths searched for make.log files
- add virtualbox-guest-dkms dkms package build
- enable vbox dkms build for amd64 and i386
- update dkms package versions
- SAUCE: (efi-lockdown) Add the ability to lock down access to the running
kernel image
- SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down
- SAUCE: (efi-lockdown) Restrict /dev/{mem,kmem,port} when the kernel is
locked down
- SAUCE: (efi-lockdown) kexec_load: Disable at runtime if the kernel is locked
down
- SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec
reboot
- SAUCE: (efi-lockdown) kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and
KEXEC_SIG_FORCE
- SAUCE: (efi-lockdown) kexec_file: Restrict at runtime if the kernel is
locked down
- SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down
- SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down
- SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked
down
- SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is
locked down
- SAUCE: (efi-lockdown) x86/msr: Restrict MSR access when the kernel is locked
down
- SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is
locked down
- SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel
has been locked down
- SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is
locked down
- SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is
locked down
- SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
down
- SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
- SAUCE: (efi-lockdown) Lock down module params that specify hardware
parameters (eg. ioport)
- SAUCE: (efi-lockdown) x86/mmiotrace: Lock down the testmmiotrace module
- SAUCE: (efi-lockdown) Lock down /proc/kcore
- SAUCE: (efi-lockdown) Lock down kprobes
- SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
kernel is locked down
- SAUCE: (efi-lockdown) Lock down perf
- SAUCE: (efi-lockdown) debugfs: Restrict debugfs when the kernel is locked
down
- SAUCE: (efi-lockdown) lockdown: Print current->comm in restriction messages
- SAUCE: (efi-lockdown) kexec: Allow kexec_file() with appropriate IMA policy
when locked down
- SAUCE: (efi-lockdown) Make get_cert_list() not complain about cert lists
that aren't present.
- SAUCE: (efi-lockdown) Add efi_status_to_str() and rework
efi_status_to_err().
- SAUCE: (efi-lockdown) Make get_cert_list() use efi_status_to_str() to print
error messages.
- SAUCE: (efi-lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure
boot mode
- SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot
mode
- SAUCE: (efi-lockdown) KEYS: Make use of platform keyring for module
signature verify
- SAUCE: (efi-lockdown) debugfs: avoid EPERM when no open file operation
defined
- SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
- SAUCE: (efi-lockdown) furter KEXEC_VERIFY_SIG -> KEXEC_SIG updates
- SAUCE: (efi-lockdown) arm64: add kernel config option to lock down when in
Secure Boot mode
- update dkms package versions
- [Config] disable vbox build
- SAUCE: s390: mark __cpacf_check_opcode() and cpacf_query_func() as
__always_inline
- SAUCE: IB/mlx5: use size_t instead of u64 when dividing
* Rebase to v5.2-rc1
[ Ubuntu: 5.2.0-0.0 ]
* Dummy entry.
[ Ubuntu: 5.1.0-2.2 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* Eoan update: v5.1.2 upstream stable release (LP: #1829050)
- x86/msr-index: Cleanup bit defines
- x86/speculation: Consolidate CPU whitelists
- x86/speculation/mds: Add basic bug infrastructure for MDS
- x86/speculation/mds: Add BUG_MSBDS_ONLY
- x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
- x86/speculation/mds: Add mds_clear_cpu_buffers()
- x86/speculation/mds: Clear CPU buffers on exit to user
- x86/kvm/vmx: Add MDS protection when L1D Flush is not active
- x86/speculation/mds: Conditionally clear CPU buffers on idle entry
- x86/speculation/mds: Add mitigation control for MDS
- x86/speculation/mds: Add sysfs reporting for MDS
- x86/speculation/mds: Add mitigation mode VMWERV
- Documentation: Move L1TF to separate directory
- Documentation: Add MDS vulnerability documentation
- x86/speculation/mds: Add mds=full,nosmt cmdline option
- x86/speculation: Move arch_smt_update() call to after mitigation decisions
- x86/speculation/mds: Add SMT warning message
- x86/speculation/mds: Fix comment
- x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
- cpu/speculation: Add 'mitigations=' cmdline option
- x86/speculation: Support 'mitigations=' cmdline option
- powerpc/speculation: Support 'mitigations=' cmdline option
- s390/speculation: Support 'mitigations=' cmdline option
- x86/speculation/mds: Add 'mitigations=' support for MDS
- x86/mds: Add MDSUM variant to the MDS documentation
- Documentation: Correct the possible MDS sysfs values
- x86/speculation/mds: Fix documentation typo
- Linux 5.1.2
* Eoan update: v5.1.1 upstream stable release (LP: #1829046)
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
- ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
- staging: greybus: power_supply: fix prop-descriptor request size
- staging: wilc1000: Avoid GFP_KERNEL allocation from atomic context.
- staging: most: cdev: fix chrdev_region leak in mod_exit
- staging: most: sound: pass correct device when creating a sound card
- usb: dwc3: Allow building USB_DWC3_QCOM without EXTCON
- usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- USB: cdc-acm: fix unthrottle races
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- genirq: Prevent use-after-free and work list corruption
- intel_th: pci: Add Comet Lake support
- iio: adc: qcom-spmi-adc5: Fix of-based module autoloading
- cpufreq: armada-37xx: fix frequency calculation for opp
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for
hibernate
- soc: sunxi: Fix missing dependency on REGMAP_MMIO
- scsi: lpfc: change snprintf to scnprintf for possible overflow
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
- scsi: qla2xxx: Set remote port devloss timeout to 0
- scsi: qla2xxx: Fix device staying in blocked state
- Bluetooth: hidp: fix buffer overflow
- Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
- Bluetooth: Fix not initializing L2CAP tx_credits
- Bluetooth: hci_bcm: Fix empty regulator supplies for Intel Macs
- UAS: fix alignment of scatter/gather segments
- ASoC: Intel: avoid Oops if DMA setup fails
- i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
- locking/futex: Allow low-level atomic operations to return -EAGAIN
- arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
- Linux 5.1.1
* shiftfs: lock security sensitive superblock flags (LP: #1827122)
- SAUCE: shiftfs: lock down certain superblock flags
* Please package libbpf (which is done out of the kernel src) in Debian [for
19.10] (LP: #1826410)
- SAUCE: tools -- fix add ability to disable libbfd
* ratelimit cma_alloc messages (LP: #1828092)
- SAUCE: cma: ratelimit cma_alloc error messages
* Headphone jack switch sense is inverted: plugging in headphones disables
headphone output (LP: #1824259)
- ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board
* There are 4 HDMI/Displayport audio output listed in sound setting without
attach any HDMI/DP monitor (LP: #1827967)
- ALSA: hda/hdmi - Read the pin sense from register when repolling
- ALSA: hda/hdmi - Consider eld_valid when reporting jack event
* CONFIG_LOG_BUF_SHIFT set to 14 is too low on arm64 (LP: #1824864)
- [Config] CONFIG_LOG_BUF_SHIFT=18 on all 64bit arches
* CTAUTO:DevOps:860.50:devops4fp1:Error occurred during LINUX Dmesg error
Checking for all LINUX clients for devops4p10 (LP: #1766201)
- SAUCE: integrity: downgrade error to warning
* linux-buildinfo: pull out ABI information into its own package
(LP: #1806380)
- [Packaging] autoreconstruct -- base tag is always primary mainline version
* [SRU] Please sync vbox modules from virtualbox 6.0.6 on next kernel update
(LP: #1825210)
- vbox-update: updates for renamed makefiles
- ubuntu: vbox -- update to 6.0.6-dfsg-1
* autofs kernel module missing (LP: #1824333)
- [Config] Update autofs4 path in inclusion list
* The Realtek card reader does not enter PCIe 1.1/1.2 (LP: #1825487)
- SAUCE: misc: rtsx: Fixed rts5260 power saving parameter and sd glitch
* CVE-2019-3874
- sctp: implement memory accounting on tx path
- sctp: implement memory accounting on rx path
* apparmor does not start in Disco LXD containers (LP: #1824812)
- SAUCE: shiftfs: use separate llseek method for directories
* Miscellaneous Ubuntu changes
- [Packaging] autoreconstruct -- remove for -rc kernels
- SAUCE: (efi-lockdown) debugfs: avoid EPERM when no open file operation
defined
- SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
- SAUCE: (efi-lockdown) furter KEXEC_VERIFY_SIG -> KEXEC_SIG updates
- [Config] (efi-lockdown): update configs after efi lockdown patch refresh
- [Packaging] don't delete efi_parser.c
- vbox-update -- do not fix up KERN_DIR or KBUILD_EXTMOD
- ubuntu: vbox -- update to 6.0.6-dfsg-2
- add nvidia-418 dkms build
- remove virtualbox guest drivers
- [Packaging] dkms-build -- expand paths searched for make.log files
- add virtualbox-guest-dkms dkms package build
- enable vbox dkms build for amd64 and i386
- [Config] update configs for v5.1(-rc7)? rebase
- update dkms package versions
- Add the ability to lock down access to the running kernel image
- Enforce module signatures if the kernel is locked down
- Restrict /dev/{mem,kmem,port} when the kernel is locked down
- kexec_load: Disable at runtime if the kernel is locked down
- Copy secure_boot flag in boot params across kexec reboot
- kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE
- kexec_file: Restrict at runtime if the kernel is locked down
- hibernate: Disable when the kernel is locked down
- uswsusp: Disable when the kernel is locked down
- PCI: Lock down BAR access when the kernel is locked down
- x86: Lock down IO port access when the kernel is locked down
- x86/msr: Restrict MSR access when the kernel is locked down
- ACPI: Limit access to custom_method when the kernel is locked down
- acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down
- acpi: Disable ACPI table override if the kernel is locked down
- acpi: Disable APEI error injection if the kernel is locked down
- Prohibit PCMCIA CIS storage when the kernel is locked down
- Lock down TIOCSSERIAL
- Lock down module params that specify hardware parameters (eg. ioport)
- x86/mmiotrace: Lock down the testmmiotrace module
- Lock down /proc/kcore
- Lock down kprobes
- bpf: Restrict kernel image access functions when the kernel is locked down
- Lock down perf
- debugfs: Restrict debugfs when the kernel is locked down
- lockdown: Print current->comm in restriction messages
- kexec: Allow kexec_file() with appropriate IMA policy when locked down
- Make get_cert_list() not complain about cert lists that aren't present.
- Add efi_status_to_str() and rework efi_status_to_err().
- Make get_cert_list() use efi_status_to_str() to print error messages.
- efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
- efi: Lock down the kernel if booted in secure boot mode
- KEYS: Make use of platform keyring for module signature verify
* Miscellaneous upstream changes
- ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14)
[ Ubuntu: 5.1.0-1.1 ]
* bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868)
- [Packaging]: really drop snapdragon
* Miscellaneous Ubuntu changes
- SAUCE: fix vbox use of MAP_SHARED
- SAUCE: fix vbox use of vm_fault_t
- [Packaging] disable ZFS
- [Packaging] disable nvidia
- SAUCE: perf annotate: Fix build on 32 bit for BPF annotation
- [Config]: updateconfig after rebase to v5.1-rc
- [Config]: build ETNAVIV only on arm platforms
- [Config]: Disable CMA on non-arm platforms
- [Config]: MMC_CQHCI is needed by some built-in drivers
- [Config]: a.out support has been deprecated
- [Config]: R3964 was marked as BROKEN
- [Config]: Add SENSIRION_SGP30 module
* Miscellaneous upstream changes
- Revert "UBUNTU: SAUCE: tools: lib/bpf -- add generated headers to search
path"
- Revert "UBUNTU: SAUCE: btqcomsmd: introduce BT_QCOMSMD_HACK"
[ Ubuntu: 5.1.0-0.0 ]
* Dummy entry.
linux-aws (5.3.0-1001.1) eoan; urgency=medium
* eoan/linux-aws: 5.3.0-1001.1 -proposed tracker (LP: #1844138)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* Miscellaneous Ubuntu changes
- [Config] update configs after rebase to 5.3.0-12.13
- [Packaging] Enable bpftool in linux-tools
linux-aws (5.3.0-1000.0) eoan; urgency=medium
* Empty entry
Date: 2019-10-02 12:46:13.722300+00:00
Changed-By: Andrea Righi <andrea.righi at canonical.com>
Signed-By: Seth Forshee <seth.forshee+lp at canonical.com>
https://launchpad.net/ubuntu/+source/linux-aws/5.3.0-1002.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Eoan-changes
mailing list