====================================== Sat, 08 Feb 2020 - Debian 10.3 released ====================================== ========================================================================= [Date: Sat, 08 Feb 2020 09:57:11 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-all-amd64 | 4.19.67-2+deb10u2 | amd64 linux-headers-4.19.0-6-amd64 | 4.19.67-2+deb10u2 | amd64 linux-headers-4.19.0-6-cloud-amd64 | 4.19.67-2+deb10u2 | amd64 linux-headers-4.19.0-6-rt-amd64 | 4.19.67-2+deb10u2 | amd64 linux-headers-4.19.0-7-all-amd64 | 4.19.87-1 | amd64 linux-headers-4.19.0-7-amd64 | 4.19.87-1 | amd64 linux-headers-4.19.0-7-cloud-amd64 | 4.19.87-1 | amd64 linux-headers-4.19.0-7-rt-amd64 | 4.19.87-1 | amd64 linux-image-4.19.0-6-amd64-dbg | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-amd64-unsigned | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-cloud-amd64-dbg | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-cloud-amd64-unsigned | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-rt-amd64-dbg | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-rt-amd64-unsigned | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-7-amd64-dbg | 4.19.87-1 | amd64 linux-image-4.19.0-7-amd64-unsigned | 4.19.87-1 | amd64 linux-image-4.19.0-7-cloud-amd64-dbg | 4.19.87-1 | amd64 linux-image-4.19.0-7-cloud-amd64-unsigned | 4.19.87-1 | amd64 linux-image-4.19.0-7-rt-amd64-dbg | 4.19.87-1 | amd64 linux-image-4.19.0-7-rt-amd64-unsigned | 4.19.87-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:57:58 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-all-mipsel | 4.19.67-2+deb10u2 | mipsel linux-headers-4.19.0-7-all-mipsel | 4.19.87-1 | mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:02:44 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: ata-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el ata-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el btrfs-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el btrfs-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el cdrom-core-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el cdrom-core-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el compress-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el compress-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el crc-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el crc-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el crypto-dm-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el crypto-dm-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el crypto-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el crypto-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el event-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el event-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el ext4-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el ext4-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el fancontrol-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el fancontrol-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el fat-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el fat-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el fb-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el fb-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el firewire-core-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el firewire-core-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el fuse-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el fuse-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el hypervisor-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el hypervisor-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el i2c-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el i2c-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el input-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el input-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el isofs-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el isofs-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el jfs-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el jfs-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el kernel-image-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el kernel-image-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el linux-headers-4.19.0-6-all-ppc64el | 4.19.67-2+deb10u2 | ppc64el linux-headers-4.19.0-6-powerpc64le | 4.19.67-2+deb10u2 | ppc64el linux-headers-4.19.0-7-all-ppc64el | 4.19.87-1 | ppc64el linux-headers-4.19.0-7-powerpc64le | 4.19.87-1 | ppc64el linux-image-4.19.0-6-powerpc64le | 4.19.67-2+deb10u2 | ppc64el linux-image-4.19.0-6-powerpc64le-dbg | 4.19.67-2+deb10u2 | ppc64el linux-image-4.19.0-7-powerpc64le | 4.19.87-1 | ppc64el linux-image-4.19.0-7-powerpc64le-dbg | 4.19.87-1 | ppc64el loop-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el loop-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el md-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el md-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el mouse-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el mouse-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el mtd-core-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el mtd-core-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el multipath-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el multipath-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el nbd-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el nbd-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el nic-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el nic-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el nic-shared-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el nic-shared-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el nic-usb-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el nic-usb-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el nic-wireless-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el nic-wireless-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el ppp-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el ppp-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el sata-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el sata-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el scsi-core-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el scsi-core-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el scsi-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el scsi-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el scsi-nic-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el scsi-nic-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el serial-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el serial-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el squashfs-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el udf-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el uinput-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el uinput-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el usb-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el usb-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el usb-serial-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el usb-serial-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el usb-storage-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el usb-storage-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el xfs-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el xfs-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:03:04 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: btrfs-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x btrfs-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x cdrom-core-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x compress-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x compress-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x crc-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x crypto-dm-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x crypto-dm-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x crypto-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x dasd-extra-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x dasd-extra-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x dasd-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x ext4-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x ext4-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x fat-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x fat-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x fuse-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x isofs-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x isofs-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x kernel-image-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x linux-headers-4.19.0-6-all-s390x | 4.19.67-2+deb10u2 | s390x linux-headers-4.19.0-6-s390x | 4.19.67-2+deb10u2 | s390x linux-headers-4.19.0-7-all-s390x | 4.19.87-1 | s390x linux-headers-4.19.0-7-s390x | 4.19.87-1 | s390x linux-image-4.19.0-6-s390x | 4.19.67-2+deb10u2 | s390x linux-image-4.19.0-7-s390x | 4.19.87-1 | s390x linux-image-4.19.0-7-s390x-dbg | 4.19.87-1 | s390x loop-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x loop-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x md-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x mtd-core-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x mtd-core-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x multipath-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x nbd-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x nbd-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x nic-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x nic-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x scsi-core-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x scsi-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x scsi-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x udf-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x xfs-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x xfs-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x zlib-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x zlib-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:04:06 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-all | 4.19.67-2+deb10u2 | amd64, arm64, armel, armhf, i386, mips, mips64el, mipsel, ppc64el, s390x linux-headers-4.19.0-7-all | 4.19.87-1 | amd64, arm64, armel, armhf, i386, mips, mips64el, mipsel, ppc64el, s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:04:18 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-all-arm64 | 4.19.67-2+deb10u2 | arm64 linux-headers-4.19.0-6-arm64 | 4.19.67-2+deb10u2 | arm64 linux-headers-4.19.0-6-rt-arm64 | 4.19.67-2+deb10u2 | arm64 linux-headers-4.19.0-7-all-arm64 | 4.19.87-1 | arm64 linux-headers-4.19.0-7-arm64 | 4.19.87-1 | arm64 linux-headers-4.19.0-7-rt-arm64 | 4.19.87-1 | arm64 linux-image-4.19.0-6-arm64-dbg | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-6-arm64-unsigned | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-6-rt-arm64-dbg | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-6-rt-arm64-unsigned | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-7-arm64-dbg | 4.19.87-1 | arm64 linux-image-4.19.0-7-arm64-unsigned | 4.19.87-1 | arm64 linux-image-4.19.0-7-rt-arm64-dbg | 4.19.87-1 | arm64 linux-image-4.19.0-7-rt-arm64-unsigned | 4.19.87-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:05:47 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: btrfs-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel cdrom-core-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel cdrom-core-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel compress-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel compress-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel crc-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel crypto-dm-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel crypto-dm-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel crypto-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel event-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel event-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ext4-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel fat-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel fat-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel fb-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel fb-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel fuse-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel input-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel input-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ipv6-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel isofs-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel isofs-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel jffs2-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel jfs-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel jfs-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel kernel-image-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel kernel-image-4.19.0-7-marvell-di | 4.19.87-1 | armel leds-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel linux-headers-4.19.0-6-all-armel | 4.19.67-2+deb10u2 | armel linux-headers-4.19.0-6-marvell | 4.19.67-2+deb10u2 | armel linux-headers-4.19.0-6-rpi | 4.19.67-2+deb10u2 | armel linux-headers-4.19.0-7-marvell | 4.19.87-1 | armel linux-headers-4.19.0-7-rpi | 4.19.87-1 | armel linux-image-4.19.0-6-marvell | 4.19.67-2+deb10u2 | armel linux-image-4.19.0-6-marvell-dbg | 4.19.67-2+deb10u2 | armel linux-image-4.19.0-6-rpi-dbg | 4.19.67-2+deb10u2 | armel linux-image-4.19.0-7-marvell | 4.19.87-1 | armel linux-image-4.19.0-7-marvell-dbg | 4.19.87-1 | armel linux-image-4.19.0-7-rpi | 4.19.87-1 | armel linux-image-4.19.0-7-rpi-dbg | 4.19.87-1 | armel loop-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel loop-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel md-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel md-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel minix-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel mmc-core-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mmc-core-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel mmc-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mouse-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mouse-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel mtd-core-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mtd-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mtd-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel multipath-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel multipath-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel nbd-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel nic-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel nic-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel nic-shared-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel nic-usb-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel nic-usb-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ppp-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel sata-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel sata-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel scsi-core-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel squashfs-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel squashfs-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel udf-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel udf-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel uinput-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel uinput-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel usb-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel usb-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel usb-serial-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel usb-serial-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel usb-storage-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel usb-storage-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel zlib-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel zlib-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:06:44 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: ata-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf ata-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf btrfs-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf btrfs-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf cdrom-core-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf cdrom-core-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf compress-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf compress-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf crc-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf crc-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf crypto-dm-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf crypto-dm-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf crypto-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf crypto-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf efi-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf efi-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf event-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf event-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf ext4-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf ext4-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf fat-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf fat-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf fb-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf fb-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf fuse-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf fuse-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf i2c-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf i2c-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf input-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf input-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf isofs-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf isofs-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf jfs-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf jfs-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf kernel-image-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf kernel-image-4.19.0-7-armmp-di | 4.19.87-1 | armhf leds-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf leds-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf linux-headers-4.19.0-6-all-armhf | 4.19.67-2+deb10u2 | armhf linux-headers-4.19.0-6-armmp | 4.19.67-2+deb10u2 | armhf linux-headers-4.19.0-6-armmp-lpae | 4.19.67-2+deb10u2 | armhf linux-headers-4.19.0-6-rt-armmp | 4.19.67-2+deb10u2 | armhf linux-headers-4.19.0-7-all-armhf | 4.19.87-1 | armhf linux-headers-4.19.0-7-armmp | 4.19.87-1 | armhf linux-headers-4.19.0-7-armmp-lpae | 4.19.87-1 | armhf linux-headers-4.19.0-7-rt-armmp | 4.19.87-1 | armhf linux-image-4.19.0-6-armmp | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-6-armmp-dbg | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-6-armmp-lpae | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-6-armmp-lpae-dbg | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-6-rt-armmp | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-6-rt-armmp-dbg | 4.19.67-2+deb10u2 | armhf linux-image-4.19.0-7-armmp | 4.19.87-1 | armhf linux-image-4.19.0-7-armmp-dbg | 4.19.87-1 | armhf linux-image-4.19.0-7-armmp-lpae | 4.19.87-1 | armhf linux-image-4.19.0-7-armmp-lpae-dbg | 4.19.87-1 | armhf linux-image-4.19.0-7-rt-armmp | 4.19.87-1 | armhf linux-image-4.19.0-7-rt-armmp-dbg | 4.19.87-1 | armhf loop-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf loop-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf md-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf md-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf mmc-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf mmc-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf mtd-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf mtd-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf multipath-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf multipath-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf nbd-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf nbd-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf nic-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf nic-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf nic-shared-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf nic-shared-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf nic-usb-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf nic-usb-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf nic-wireless-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf nic-wireless-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf pata-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf pata-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf ppp-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf ppp-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf sata-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf sata-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf scsi-core-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf scsi-core-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf scsi-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf scsi-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf scsi-nic-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf scsi-nic-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf squashfs-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf squashfs-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf udf-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf udf-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf uinput-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf uinput-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf usb-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf usb-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf usb-serial-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf usb-serial-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf usb-storage-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf usb-storage-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf zlib-modules-4.19.0-6-armmp-di | 4.19.67-2+deb10u2 | armhf zlib-modules-4.19.0-7-armmp-di | 4.19.87-1 | armhf ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:07:13 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-686 | 4.19.67-2+deb10u2 | i386 linux-headers-4.19.0-6-686-pae | 4.19.67-2+deb10u2 | i386 linux-headers-4.19.0-6-all-i386 | 4.19.67-2+deb10u2 | i386 linux-headers-4.19.0-6-rt-686-pae | 4.19.67-2+deb10u2 | i386 linux-headers-4.19.0-7-686 | 4.19.87-1 | i386 linux-headers-4.19.0-7-686-pae | 4.19.87-1 | i386 linux-headers-4.19.0-7-all-i386 | 4.19.87-1 | i386 linux-headers-4.19.0-7-rt-686-pae | 4.19.87-1 | i386 linux-image-4.19.0-6-686-dbg | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-686-pae-dbg | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-686-pae-unsigned | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-686-unsigned | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-rt-686-pae-dbg | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-rt-686-pae-unsigned | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-7-686-dbg | 4.19.87-1 | i386 linux-image-4.19.0-7-686-pae-dbg | 4.19.87-1 | i386 linux-image-4.19.0-7-686-pae-unsigned | 4.19.87-1 | i386 linux-image-4.19.0-7-686-unsigned | 4.19.87-1 | i386 linux-image-4.19.0-7-rt-686-pae-dbg | 4.19.87-1 | i386 linux-image-4.19.0-7-rt-686-pae-unsigned | 4.19.87-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:07:41 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: affs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel affs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel btrfs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel btrfs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel cdrom-core-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel cdrom-core-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel compress-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel compress-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel crc-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel crc-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel crypto-dm-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel crypto-dm-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel crypto-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel crypto-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel event-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel event-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel ext4-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel ext4-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel fat-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel fat-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel fuse-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel fuse-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel hfs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel hfs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel input-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel input-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel isofs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel isofs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel jfs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel jfs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel kernel-image-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel kernel-image-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel linux-headers-4.19.0-6-5kc-malta | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-headers-4.19.0-6-octeon | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-image-4.19.0-6-5kc-malta | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-image-4.19.0-6-5kc-malta-dbg | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-image-4.19.0-6-octeon | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-image-4.19.0-6-octeon-dbg | 4.19.67-2+deb10u2 | mips, mips64el, mipsel linux-image-4.19.0-7-5kc-malta | 4.19.87-1 | mips, mips64el, mipsel linux-image-4.19.0-7-5kc-malta-dbg | 4.19.87-1 | mips, mips64el, mipsel linux-image-4.19.0-7-octeon | 4.19.87-1 | mips, mips64el, mipsel linux-image-4.19.0-7-octeon-dbg | 4.19.87-1 | mips, mips64el, mipsel loop-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel loop-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel md-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel md-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel minix-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel minix-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel multipath-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel multipath-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel nbd-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel nbd-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel nic-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel nic-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel nic-shared-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel nic-shared-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel nic-usb-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel nic-usb-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel nic-wireless-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel nic-wireless-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel pata-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel pata-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel ppp-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel ppp-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel rtc-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel rtc-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel sata-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel sata-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel scsi-core-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel scsi-core-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel scsi-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel scsi-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel scsi-nic-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel scsi-nic-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel sound-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel sound-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel squashfs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel squashfs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel udf-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel udf-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel usb-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel usb-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel usb-serial-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel usb-serial-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel usb-storage-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel usb-storage-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel xfs-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel xfs-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel zlib-modules-4.19.0-6-octeon-di | 4.19.67-2+deb10u2 | mips, mips64el, mipsel zlib-modules-4.19.0-7-octeon-di | 4.19.87-1 | mips, mips64el, mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:07:59 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: affs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel affs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel ata-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel ata-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel btrfs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel btrfs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel cdrom-core-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel cdrom-core-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel compress-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel compress-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel crc-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel crc-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel crypto-dm-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel crypto-dm-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel crypto-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel crypto-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel event-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel event-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel ext4-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel ext4-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel fat-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel fat-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel fb-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel fb-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel fuse-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel fuse-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel hfs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel hfs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel i2c-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel i2c-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel input-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel input-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel isofs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel isofs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel jfs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel jfs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel kernel-image-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel kernel-image-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel linux-headers-4.19.0-6-4kc-malta | 4.19.67-2+deb10u2 | mips, mipsel linux-headers-4.19.0-7-4kc-malta | 4.19.87-1 | mips, mipsel linux-image-4.19.0-6-4kc-malta | 4.19.67-2+deb10u2 | mips, mipsel linux-image-4.19.0-6-4kc-malta-dbg | 4.19.67-2+deb10u2 | mips, mipsel linux-image-4.19.0-7-4kc-malta | 4.19.87-1 | mips, mipsel linux-image-4.19.0-7-4kc-malta-dbg | 4.19.87-1 | mips, mipsel loop-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel loop-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel md-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel md-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel minix-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel minix-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel mmc-core-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel mmc-core-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel mmc-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel mmc-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel mtd-core-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel mtd-core-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel multipath-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel multipath-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel nbd-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel nbd-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel nic-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel nic-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel nic-shared-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel nic-shared-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel nic-usb-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel nic-usb-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel nic-wireless-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel nic-wireless-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel pata-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel pata-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel ppp-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel ppp-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel sata-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel sata-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel scsi-core-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel scsi-core-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel scsi-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel scsi-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel scsi-nic-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel scsi-nic-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel sound-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel sound-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel squashfs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel squashfs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel udf-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel udf-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel usb-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel usb-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel usb-serial-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel usb-serial-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel usb-storage-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel usb-storage-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel xfs-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel xfs-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel zlib-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips, mipsel zlib-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips, mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:09:11 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: affs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el affs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el ata-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el ata-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el btrfs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el btrfs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el cdrom-core-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el cdrom-core-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el compress-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el compress-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el crc-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el crc-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el crypto-dm-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el crypto-dm-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el crypto-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el crypto-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el event-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el event-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el ext4-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el ext4-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el fat-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el fat-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el fb-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el fb-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el fuse-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el fuse-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el hfs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el hfs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el i2c-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el i2c-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el input-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el input-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el isofs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el isofs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el jfs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el jfs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el kernel-image-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el kernel-image-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el linux-headers-4.19.0-6-all-mips64el | 4.19.67-2+deb10u2 | mips64el linux-headers-4.19.0-7-all-mips64el | 4.19.87-1 | mips64el loop-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el loop-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el md-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el md-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el minix-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el minix-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el mmc-core-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el mmc-core-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el mmc-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el mmc-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el mouse-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el mouse-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el mtd-core-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el mtd-core-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el multipath-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el multipath-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el nbd-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el nbd-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el nic-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el nic-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el nic-shared-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el nic-shared-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el nic-usb-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el nic-usb-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el nic-wireless-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el nic-wireless-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el pata-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el pata-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el ppp-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el ppp-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el sata-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el sata-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el scsi-core-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el scsi-core-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el scsi-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el scsi-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el scsi-nic-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el scsi-nic-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el sound-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el sound-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el squashfs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el squashfs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el udf-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el usb-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el usb-serial-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el usb-serial-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el usb-storage-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el usb-storage-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el xfs-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el xfs-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el zlib-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el zlib-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:10:10 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: affs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel affs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel ata-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel ata-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel btrfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel btrfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel cdrom-core-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel cdrom-core-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel compress-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel compress-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel crc-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel crc-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel crypto-dm-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel crypto-dm-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel crypto-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel crypto-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel event-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel event-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel ext4-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel ext4-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel fat-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel fat-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel fb-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel fb-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel firewire-core-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel firewire-core-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel fuse-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel hfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel input-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel input-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel isofs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel isofs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel jfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel jfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel kernel-image-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel kernel-image-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel linux-headers-4.19.0-6-loongson-3 | 4.19.67-2+deb10u2 | mips64el, mipsel linux-headers-4.19.0-7-loongson-3 | 4.19.87-1 | mips64el, mipsel linux-image-4.19.0-6-loongson-3 | 4.19.67-2+deb10u2 | mips64el, mipsel linux-image-4.19.0-6-loongson-3-dbg | 4.19.67-2+deb10u2 | mips64el, mipsel linux-image-4.19.0-7-loongson-3 | 4.19.87-1 | mips64el, mipsel linux-image-4.19.0-7-loongson-3-dbg | 4.19.87-1 | mips64el, mipsel loop-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel loop-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel md-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel md-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel minix-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel minix-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel mtd-core-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel mtd-core-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel multipath-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel multipath-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nbd-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nbd-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nic-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nic-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nic-shared-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nic-shared-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nic-usb-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nic-usb-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel nic-wireless-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel nic-wireless-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel pata-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel pata-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel ppp-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel ppp-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel sata-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel sata-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel scsi-core-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel scsi-core-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel scsi-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel scsi-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel scsi-nic-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel scsi-nic-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel sound-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel sound-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel speakup-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel speakup-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel squashfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel squashfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel udf-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel udf-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel usb-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel usb-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel usb-serial-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel usb-serial-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel usb-storage-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel usb-storage-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel xfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel xfs-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel zlib-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el, mipsel zlib-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el, mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:10:21 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: acpi-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 acpi-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 ata-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 ata-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 btrfs-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 btrfs-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 cdrom-core-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 cdrom-core-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 compress-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 compress-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 crc-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 crc-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 crypto-dm-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 crypto-dm-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 crypto-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 crypto-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 efi-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 efi-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 event-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 event-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 ext4-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 ext4-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 fat-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 fat-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 fb-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 fb-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 firewire-core-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 firewire-core-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 fuse-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 fuse-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 i2c-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 i2c-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 input-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 input-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 isofs-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 isofs-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 jfs-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 jfs-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 kernel-image-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 kernel-image-4.19.0-7-amd64-di | 4.19.87-1 | amd64 linux-image-4.19.0-6-amd64 | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-cloud-amd64 | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-6-rt-amd64 | 4.19.67-2+deb10u2 | amd64 linux-image-4.19.0-7-amd64 | 4.19.87-1 | amd64 linux-image-4.19.0-7-cloud-amd64 | 4.19.87-1 | amd64 linux-image-4.19.0-7-rt-amd64 | 4.19.87-1 | amd64 loop-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 loop-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 md-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 md-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 mmc-core-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 mmc-core-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 mmc-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 mmc-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 mouse-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 mouse-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 mtd-core-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 mtd-core-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 multipath-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 multipath-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nbd-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nbd-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nic-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nic-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nic-pcmcia-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nic-pcmcia-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nic-shared-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nic-shared-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nic-usb-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nic-usb-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 nic-wireless-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 nic-wireless-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 pata-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 pata-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 pcmcia-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 pcmcia-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 pcmcia-storage-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 pcmcia-storage-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 ppp-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 ppp-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 sata-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 sata-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 scsi-core-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 scsi-core-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 scsi-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 scsi-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 scsi-nic-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 scsi-nic-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 serial-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 serial-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 sound-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 sound-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 speakup-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 speakup-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 squashfs-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 squashfs-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 udf-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 udf-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 uinput-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 uinput-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 usb-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 usb-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 usb-storage-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 usb-storage-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 xfs-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 xfs-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-amd64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:11:08 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: ata-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 ata-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 btrfs-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 btrfs-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 cdrom-core-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 cdrom-core-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 compress-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 compress-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 crc-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 crc-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 crypto-dm-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 crypto-dm-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 crypto-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 crypto-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 efi-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 event-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 ext4-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 ext4-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 fb-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 fb-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 fuse-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 fuse-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 i2c-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 i2c-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 input-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 input-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 isofs-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 isofs-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 jfs-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 jfs-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 kernel-image-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 kernel-image-4.19.0-7-arm64-di | 4.19.87-1 | arm64 leds-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 leds-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 linux-image-4.19.0-6-arm64 | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-7-rt-arm64 | 4.19.87-1 | arm64 loop-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 loop-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 md-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 md-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 mtd-core-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 mtd-core-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 multipath-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 multipath-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 nbd-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 nbd-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 nic-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 nic-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 nic-shared-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 nic-shared-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 nic-usb-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 nic-usb-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 nic-wireless-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 nic-wireless-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 ppp-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 ppp-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 sata-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 sata-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 scsi-core-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 scsi-core-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 scsi-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 scsi-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 scsi-nic-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 scsi-nic-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 squashfs-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 squashfs-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 udf-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 udf-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 uinput-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 uinput-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 usb-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 usb-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 usb-serial-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 usb-serial-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 usb-storage-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 usb-storage-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 xfs-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 xfs-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-arm64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:11:56 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: acpi-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 acpi-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 acpi-modules-4.19.0-7-686-di | 4.19.87-1 | i386 acpi-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 ata-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 ata-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 btrfs-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 btrfs-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 btrfs-modules-4.19.0-7-686-di | 4.19.87-1 | i386 btrfs-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 cdrom-core-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 cdrom-core-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 cdrom-core-modules-4.19.0-7-686-di | 4.19.87-1 | i386 cdrom-core-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 compress-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 compress-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 compress-modules-4.19.0-7-686-di | 4.19.87-1 | i386 compress-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 crc-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 crc-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 crc-modules-4.19.0-7-686-di | 4.19.87-1 | i386 crc-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 crypto-dm-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 crypto-dm-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 crypto-dm-modules-4.19.0-7-686-di | 4.19.87-1 | i386 crypto-dm-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 crypto-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 crypto-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 crypto-modules-4.19.0-7-686-di | 4.19.87-1 | i386 crypto-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 efi-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 efi-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 efi-modules-4.19.0-7-686-di | 4.19.87-1 | i386 efi-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 event-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 event-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 event-modules-4.19.0-7-686-di | 4.19.87-1 | i386 event-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 ext4-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 ext4-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 ext4-modules-4.19.0-7-686-di | 4.19.87-1 | i386 ext4-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 fat-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 fat-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 fat-modules-4.19.0-7-686-di | 4.19.87-1 | i386 fat-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 fb-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 fb-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 fb-modules-4.19.0-7-686-di | 4.19.87-1 | i386 fb-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 firewire-core-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 firewire-core-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 fuse-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 fuse-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 fuse-modules-4.19.0-7-686-di | 4.19.87-1 | i386 fuse-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 i2c-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 i2c-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 i2c-modules-4.19.0-7-686-di | 4.19.87-1 | i386 i2c-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 input-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 input-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 input-modules-4.19.0-7-686-di | 4.19.87-1 | i386 input-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 isofs-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 isofs-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 isofs-modules-4.19.0-7-686-di | 4.19.87-1 | i386 isofs-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 jfs-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 jfs-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 jfs-modules-4.19.0-7-686-di | 4.19.87-1 | i386 jfs-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 kernel-image-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 kernel-image-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 kernel-image-4.19.0-7-686-di | 4.19.87-1 | i386 kernel-image-4.19.0-7-686-pae-di | 4.19.87-1 | i386 linux-image-4.19.0-6-686 | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-686-pae | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-6-rt-686-pae | 4.19.67-2+deb10u2 | i386 linux-image-4.19.0-7-686 | 4.19.87-1 | i386 linux-image-4.19.0-7-686-pae | 4.19.87-1 | i386 linux-image-4.19.0-7-rt-686-pae | 4.19.87-1 | i386 loop-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 loop-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 loop-modules-4.19.0-7-686-di | 4.19.87-1 | i386 loop-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 md-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 md-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 md-modules-4.19.0-7-686-di | 4.19.87-1 | i386 md-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 mmc-core-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 mmc-core-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 mmc-core-modules-4.19.0-7-686-di | 4.19.87-1 | i386 mmc-core-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 mmc-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 mmc-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 mmc-modules-4.19.0-7-686-di | 4.19.87-1 | i386 mmc-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 mouse-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 mouse-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 mouse-modules-4.19.0-7-686-di | 4.19.87-1 | i386 mouse-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 mtd-core-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 mtd-core-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 mtd-core-modules-4.19.0-7-686-di | 4.19.87-1 | i386 mtd-core-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 multipath-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 multipath-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 multipath-modules-4.19.0-7-686-di | 4.19.87-1 | i386 multipath-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nbd-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nbd-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nbd-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nbd-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nic-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nic-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nic-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nic-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nic-pcmcia-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nic-pcmcia-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nic-pcmcia-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nic-pcmcia-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nic-shared-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nic-shared-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nic-shared-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nic-shared-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nic-usb-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nic-usb-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nic-usb-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nic-usb-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 nic-wireless-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 nic-wireless-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 nic-wireless-modules-4.19.0-7-686-di | 4.19.87-1 | i386 nic-wireless-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 pata-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 pata-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 pata-modules-4.19.0-7-686-di | 4.19.87-1 | i386 pata-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 pcmcia-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 pcmcia-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 pcmcia-modules-4.19.0-7-686-di | 4.19.87-1 | i386 pcmcia-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 pcmcia-storage-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 pcmcia-storage-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 pcmcia-storage-modules-4.19.0-7-686-di | 4.19.87-1 | i386 pcmcia-storage-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 ppp-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 ppp-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 ppp-modules-4.19.0-7-686-di | 4.19.87-1 | i386 ppp-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 sata-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 sata-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 sata-modules-4.19.0-7-686-di | 4.19.87-1 | i386 sata-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 scsi-core-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 scsi-core-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 scsi-core-modules-4.19.0-7-686-di | 4.19.87-1 | i386 scsi-core-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 scsi-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 scsi-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 scsi-modules-4.19.0-7-686-di | 4.19.87-1 | i386 scsi-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 scsi-nic-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 scsi-nic-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 scsi-nic-modules-4.19.0-7-686-di | 4.19.87-1 | i386 scsi-nic-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 serial-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 serial-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 serial-modules-4.19.0-7-686-di | 4.19.87-1 | i386 serial-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 sound-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 sound-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 speakup-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 speakup-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 speakup-modules-4.19.0-7-686-di | 4.19.87-1 | i386 speakup-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 squashfs-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 squashfs-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 squashfs-modules-4.19.0-7-686-di | 4.19.87-1 | i386 squashfs-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 udf-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 udf-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 udf-modules-4.19.0-7-686-di | 4.19.87-1 | i386 udf-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 uinput-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 uinput-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 uinput-modules-4.19.0-7-686-di | 4.19.87-1 | i386 uinput-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 usb-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 usb-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 usb-modules-4.19.0-7-686-di | 4.19.87-1 | i386 usb-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 usb-serial-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 usb-serial-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 usb-serial-modules-4.19.0-7-686-di | 4.19.87-1 | i386 usb-serial-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 usb-storage-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 usb-storage-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 usb-storage-modules-4.19.0-7-686-di | 4.19.87-1 | i386 usb-storage-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 xfs-modules-4.19.0-6-686-di | 4.19.67-2+deb10u2 | i386 xfs-modules-4.19.0-6-686-pae-di | 4.19.67-2+deb10u2 | i386 xfs-modules-4.19.0-7-686-di | 4.19.87-1 | i386 xfs-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-i386) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:13:01 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-common | 4.19.67-2+deb10u2 | all linux-headers-4.19.0-6-common-rt | 4.19.67-2+deb10u2 | all linux-headers-4.19.0-7-common | 4.19.87-1 | all linux-headers-4.19.0-7-common-rt | 4.19.87-1 | all linux-support-4.19.0-6 | 4.19.67-2+deb10u2 | all linux-support-4.19.0-7 | 4.19.87-1 | all ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:13:38 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: linux-headers-4.19.0-6-all-mips | 4.19.67-2+deb10u2 | mips linux-headers-4.19.0-7-5kc-malta | 4.19.87-1 | mips linux-headers-4.19.0-7-all-mips | 4.19.87-1 | mips linux-headers-4.19.0-7-octeon | 4.19.87-1 | mips mouse-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mips ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:14:28 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: fuse-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mipsel hfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mipsel linux-headers-4.19.0-7-5kc-malta | 4.19.87-1 | mipsel linux-headers-4.19.0-7-octeon | 4.19.87-1 | mipsel mouse-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mipsel mouse-modules-4.19.0-7-4kc-malta-di | 4.19.87-1 | mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:15:26 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: btrfs-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel crc-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel crypto-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel ext4-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel fuse-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel jffs2-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel leds-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel linux-headers-4.19.0-7-all-armel | 4.19.87-1 | armel linux-image-4.19.0-6-rpi | 4.19.67-2+deb10u2 | armel minix-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel mmc-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel mtd-core-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel nbd-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel nic-shared-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ppp-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel scsi-core-modules-4.19.0-7-marvell-di | 4.19.87-1 | armel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:18:52 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: cdrom-core-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x crc-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x crypto-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x dasd-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x fuse-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x kernel-image-4.19.0-7-s390x-di | 4.19.87-1 | s390x linux-image-4.19.0-6-s390x-dbg | 4.19.67-2+deb10u2 | s390x md-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x multipath-modules-4.19.0-7-s390x-di | 4.19.87-1 | s390x scsi-core-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x udf-modules-4.19.0-6-s390x-di | 4.19.67-2+deb10u2 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:19:04 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: mouse-modules-4.19.0-6-4kc-malta-di | 4.19.67-2+deb10u2 | mips ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:19:11 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: fuse-modules-4.19.0-7-loongson-3-di | 4.19.87-1 | mips64el hfs-modules-4.19.0-6-loongson-3-di | 4.19.67-2+deb10u2 | mips64el linux-headers-4.19.0-7-5kc-malta | 4.19.87-1 | mips64el linux-headers-4.19.0-7-octeon | 4.19.87-1 | mips64el udf-modules-4.19.0-7-5kc-malta-di | 4.19.87-1 | mips64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:19:54 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: squashfs-modules-4.19.0-7-powerpc64le-di | 4.19.87-1 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:20:19 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: udf-modules-4.19.0-6-powerpc64le-di | 4.19.67-2+deb10u2 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:20:29 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: ipv6-modules-4.19.0-6-marvell-di | 4.19.67-2+deb10u2 | armel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:20:40 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: usb-serial-modules-4.19.0-6-amd64-di | 4.19.67-2+deb10u2 | amd64 usb-serial-modules-4.19.0-7-amd64-di | 4.19.87-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-amd64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:20:58 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: efi-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 event-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 fat-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 fat-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 linux-image-4.19.0-6-rt-arm64 | 4.19.67-2+deb10u2 | arm64 linux-image-4.19.0-7-arm64 | 4.19.87-1 | arm64 mmc-modules-4.19.0-6-arm64-di | 4.19.67-2+deb10u2 | arm64 mmc-modules-4.19.0-7-arm64-di | 4.19.87-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-arm64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:21:09 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: ata-modules-4.19.0-7-686-di | 4.19.87-1 | i386 ata-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 firewire-core-modules-4.19.0-7-686-di | 4.19.87-1 | i386 firewire-core-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 sound-modules-4.19.0-7-686-di | 4.19.87-1 | i386 sound-modules-4.19.0-7-686-pae-di | 4.19.87-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-i386) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:21:56 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: usb-modules-4.19.0-6-5kc-malta-di | 4.19.67-2+deb10u2 | mips64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 10:24:40 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: calendar-google-provider | 1:60.9.0-1~deb10u1 | all ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by thunderbird - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:41:16 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: firetray | 0.6.1+dfsg-1.2 | source xul-ext-firetray | 0.6.1+dfsg-1.2 | all Closed bugs: 946124 ------------------- Reason ------------------- ROM; Orphaned and dead upstream, not needed any more ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:42:01 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: python-lamson | 1.0pre11-1.3 | source, all Closed bugs: 948446 ------------------- Reason ------------------- RoQA; broken since python-daemon 2.0.5-1 ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:42:33 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: caml-crush-clients | 1.0.8-1+b1 | armel caml-crush-server | 1.0.8-1+b1 | armel Closed bugs: 948795 ------------------- Reason ------------------- RoQA; B-D ocaml-native-compilers n/a on armel ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:42:54 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: koji | 1.16.2-1 | source koji-client | 1.16.2-1 | all koji-common | 1.16.2-1 | all koji-servers | 1.16.2-1 | all Closed bugs: 950084 ------------------- Reason ------------------- RoM / RoST; security issues ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:43:40 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: libradare2-3.2 | 3.2.1+dfsg-5 | amd64, arm64, armel, armhf, i386, mips, mips64el, mipsel, ppc64el, s390x libradare2-common | 3.2.1+dfsg-5 | all libradare2-dev | 3.2.1+dfsg-5 | amd64, arm64, armel, armhf, i386, mips, mips64el, mipsel, ppc64el, s390x radare2 | 3.2.1+dfsg-5 | source, amd64, arm64, armel, armhf, i386, mips, mips64el, mipsel, ppc64el, s390x Closed bugs: 950691 ------------------- Reason ------------------- RoST; security issues; upstream do not offer stable support ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 08 Feb 2020 09:44:02 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: radare2-cutter | 1.7.4-2 | source, amd64, arm64, armhf, i386, mipsel Closed bugs: 950692 ------------------- Reason ------------------- RoST; depends on to-be-removed radare2 ---------------------------------------------- ========================================================================= alot (0.8.1-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Jordan Justen ] * d/patches: Cherry pick upstream 3446dc44f87d. Closes: #930057 atril (1.20.3-1+deb10u1) buster; urgency=medium . [ Martin Wimpress ] * debian/patches: + Add 0001_prevent_no_doc_segfault.patch. Prevent segfaults when no document is loaded. + Add 0002_CVE-2019-1010006.patch. Fix buffer overflow. (CVE-2019-1010006) . [ Mike Gabriel ] * debian/patches: + Add CVE-2019-11459.patch. tiff: Handle failure from TIFFReadRGBAImageOriented. (Closes: #927821). + Rebase 0001_prevent_no_doc_segfault.patch. base-files (10.3+deb10u3) buster; urgency=medium . * Change /etc/debian_version to 10.3, for Debian 10.3 point release. beagle (5.0-180928+dfsg-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Daniel Baumann ] * Provide wrapper script instead of symlinks to JARs Closes: #940611 bgpdump (1.6.0-1+deb10u1) buster; urgency=medium . * Don't pass the full LDFLAGS set to bgpdump creation. Closes: #945881 boost1.67 (1.67.0-13+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Patch undefined behaviour leading to crashing libboost-numpy (closes: #945987). brightd (0.4.1-2+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Andrej Shadura ] * Actually compare the value read out of /sys/class/power_supply/AC/online with '0' (Closes: #934140) cacti (1.2.2+ds1-2+deb10u2) buster-security; urgency=medium . * Non-maintainer upload by the Security Team. * Acknowledgements to Paul Gevers! * CVE-2019-17358: insufficient validation of form input leading to unsafe unserialization operations and memory corruption (Closes: #947375). * CVE-2019-17357: SQL injection vulnerability in graphs.php (Closes: #947374). * CVE-2019-16723: Authentication bypass allows unprivileged users to view all graphs (Closes: #941036). casacore-data-jplde (2007.07.05+ds.1-0+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Include tables up to 2040 in the upstream tarball. Closes: #949219 chromium (79.0.3945.130-1~deb10u1) buster-security; urgency=medium . * New upstream security release. - CVE-2020-6377: Use after free in audio. Reported by Zhe Jin - CVE-2020-6378: Use-after-free in speech recognizer. Reported by Antti Levomäki and Christian Jalio - CVE-2020-6379: Use-after-free in speech recognizer. Reported by Guang Gong - CVE-2020-6380: Extension message verification error. Reported by Sergei Glazunov - CVE-2019-13725: Use after free in Bluetooth. Reported by Gengming Liu and Jianyu Chen - CVE-2019-13726: Heap buffer overflow in password manager. Reported by Sergei Glazunov - CVE-2019-13727: Insufficient policy enforcement in WebSockets. Reported by @piochu - CVE-2019-13728: Out of bounds write in V8. Reported by Rong Jian and Guang Gong - CVE-2019-13729: Use after free in WebSockets. Reported by Zhe Jin - CVE-2019-13730: Type Confusion in V8. Reported by Soyeon Park and Wen Xu - CVE-2019-13732: Use after free in WebAudio. Reported by Sergei Glazunov - CVE-2019-13734: Out of bounds write in SQLite. Reported by Wenxiang Qian - CVE-2019-13735: Out of bounds write in V8. Reported by Gengming Liu and Zhen Feng - CVE-2019-13764: Type Confusion in V8. Reported by Soyeon Park and Wen Xu - CVE-2019-13736: Integer overflow in PDFium. Reported by Anonymous - CVE-2019-13737: Insufficient policy enforcement in autocomplete. Reported by Mark Amery - CVE-2019-13738: Insufficient policy enforcement in navigation. Reported by Johnathan Norman and Daniel Clark - CVE-2019-13739: Incorrect security UI in Omnibox. Reported by xisigr - CVE-2019-13740: Incorrect security UI. Reported by Khalil Zhani - CVE-2019-13741: Insufficient validation of untrusted input in Blink. Reported by Michał Bentkowski - CVE-2019-13742: Incorrect security UI in Omnibox. Reported by Khalil Zhani - CVE-2019-13743: Incorrect security UI in external protocol handling. Reported by Zhiyang Zeng - CVE-2019-13744: Insufficient policy enforcement in cookies. Reported by Prakash - CVE-2019-13745: Insufficient policy enforcement in audio. Reported by Luan Herrera - CVE-2019-13746: Insufficient policy enforcement in Omnibox. Reported by David Erceg - CVE-2019-13747: Uninitialized Use in rendering. Reported by Ivan Popelyshev and André Bonatti - CVE-2019-13748: Insufficient policy enforcement in developer tools. Reported by David Erceg - CVE-2019-13749: Incorrect security UI in Omnibox. Reported by Khalil Zhani - CVE-2019-13750: Insufficient data validation in SQLite. Reported by Wenxiang Qian - CVE-2019-13751: Uninitialized Use in SQLite. Reported by Wenxiang Qian - CVE-2019-13752: Out of bounds read in SQLite. Reported by Wenxiang Qian - CVE-2019-13753: Out of bounds read in SQLite. Reported by Wenxiang Qian - CVE-2019-13754: Insufficient policy enforcement in extensions. Reported by Cody Crews - CVE-2019-13755: Insufficient policy enforcement in extensions. Reported by Masato Kinugawa - CVE-2019-13756: Incorrect security UI in printing. Reported by Khalil Zhani - CVE-2019-13757: Incorrect security UI in Omnibox. Reported by Khalil Zhani - CVE-2019-13758: Insufficient policy enforcement in navigation. Reported by Khalil Zhani - CVE-2019-13759: Incorrect security UI. Reported by Wenxu Wu - CVE-2019-13761: Incorrect security UI in Omnibox. Reported by Khalil Zhani - CVE-2019-13762: Insufficient policy enforcement in downloads. Reported by csanuragjain - CVE-2019-13763: Insufficient policy enforcement in payments. Reported by weiwangpp93 - CVE-2019-13767: Use after free in media picker. Reported by Sergei Glazunov chromium (79.0.3945.79-1) unstable; urgency=medium . * New upstream stable release. chromium (79.0.3945.56-1) experimental; urgency=medium . * New upstream beta release. * Update standards version to 4.4.1. * Ignore the gpu blacklist by default again. chromium (78.0.3904.108-1) unstable; urgency=medium . * New upstream security release. - CVE-2019-13723: Use-after-free in Bluetooth. Reported by Yuxiang Li - CVE-2019-13724: Out-of-bounds in Bluetooth. Reported by Yuxiang Li * Disable vaapi on armhf (closes: #944627). chromium (78.0.3904.108-1~deb10u1) buster-security; urgency=medium . * New upstream security release. - CVE-2019-13723: Use-after-free in Bluetooth. Reported by Yuxiang Li - CVE-2019-13724: Out-of-bounds in Bluetooth. Reported by Yuxiang Li chromium (78.0.3904.97-1) unstable; urgency=medium . * New upstream security release. * Enable vaapi (closes: #940074). * Fix crash during profile manager shutdown. * Drop libglewmx-dev build dependency (closes: #941050). clamav (0.102.1+dfsg-0+deb10u2) buster; urgency=medium . * clamav-daemon: Correct error from ScanOnAccess option removal so that setting LogFile options via DebConf works again (Closes: #950296) . clamav (0.102.1+dfsg-0+deb10u1) buster; urgency=medium . * Import 0.102.1 (Closes: #945265) - CVE-2019-15961 (A Denial-of-Service as a result of excessively long scan times). - Let freshclam show progress during download (Closes: #690789). * Update symbol file. * Add libfreshclam to the libclamav9 package. * Add the clamonacc binary to the clamav-daemon package. * Drop ScanOnAccess option. The clamonacc provides this functionality. clamav (0.102.1+dfsg-0+deb10u1) buster; urgency=medium . * Import 0.102.1 (Closes: #945265) - CVE-2019-15961 (A Denial-of-Service as a result of excessively long scan times). - Let freshclam show progress during download (Closes: #690789). * Update symbol file. * Add libfreshclam to the libclamav9 package. * Add the clamonacc binary to the clamav-daemon package. * Drop ScanOnAccess option. The clamonacc provides this functionality. clamav (0.102.1+dfsg-0+deb9u2) stretch; urgency=medium . * clamav-daemon: Correct error from ScanOnAccess option removal so that setting LogFile options via DebConf works again (Closes: #950296) . clamav (0.102.1+dfsg-0+deb9u1) stretch; urgency=medium . * Import 0.102.1 (Closes: #945265) - CVE-2019-15961 (A Denial-of-Service as a result of excessively long scan times). - Let freshclam show progress during download (Closes: #690789). * Update symbol file. * Add libfreshclam to the libclamav9 package. * Add the clamonacc binary to the clamav-daemon package. * Drop ScanOnAccess option. The clamonacc provides this functionality. clamav (0.102.1+dfsg-0+deb9u1) stretch; urgency=medium . * Import 0.102.1 (Closes: #945265) - CVE-2019-15961 (A Denial-of-Service as a result of excessively long scan times). - Let freshclam show progress during download (Closes: #690789). * Update symbol file. * Add libfreshclam to the libclamav9 package. * Add the clamonacc binary to the clamav-daemon package. * Drop ScanOnAccess option. The clamonacc provides this functionality. clamav (0.101.4+dfsg-1) unstable; urgency=medium . * Import 0.101.4 - CVE-2019-12625 (Add scan time limit to limit the processing zip-bombs) (Closes:934359) - CVE-2019-12900 (An out of bounds write was possible within ClamAV's NSIS bzip) - update symbols file (bump to 101.4 and drop unused cli_strnstr). compactheader (3.0.0~beta5-2~deb10u1) buster; urgency=medium . * Rebuild for Buster * [cdab1c4] d/gbp.conf: adjsut to debian/buster compactheader (3.0.0~beta5-1) unstable; urgency=medium . * [89f1683] d/control: adding versioned B-D on mozilla-devscripts Using mozilla-devscripts need to be based on some recent version. * [3503e4b] debhelper: use debhelper-compat in B-D Moving over to debhelper-compat version 12, reducing the maintenance of used files. * [e3ef1f4] d/control: bump Standards-Version to 4.4.1 No further changes needed. * [e1787a9] d/control: move Homepage info over to GitHub The upstream project lives basically more on GitHub than on the old mozdev website. * [8944c9d] d/gbp.conf: exclude some more VCS files The upstream source can include some old Mercurial VCS controlling files which are useless fur us, exclude them while importing the source. * [8b0d586] New upstream version 3.0.0~beta5 The AddOn is now full web-extension based. (Closes: #944021) * [ca0fad3] Remove patch queue The one patch we have used within the patch queue isn't needed any more. * [f6a6dca] d/control: remove B-D on mozilla-devscripts For now drop the usage of any helper from mozilla-devscripts as it brings no gain or advantage. The dh sequencers are enough to build the package. * [c578353] d/control: add new package webext-compactheader The source of the package is now web-extension based only, no old transitional xul stuff is included. So make this visible by moving the main binary package over to webext-* syntax. * [d12d2a1] d/rules: adjust package install Clean up all non needed xul-* helpers, makes the mostly needed target reduced to the quite the minimum. * [37b1cd3] d/copyright: update file content Update to data reflecting the year 2019. * [4ed4c79] webext-compactheader: adding install sequencer file * [77cf260] webext-compactheader: adding linking sequencer file * [aebb2f8] d/control: no root rights needed for package build * [7c1da48] d/control: adding dependency on TB >= 68.0 * [b9a01cf] Remove install of outdated file upstream-changelog The previously installed upstream changelog file isn't really helpful and outdated. We can drop it simply. console-common (0.7.90+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Alastair McKinstry ] * Patch from Patrick Cernko for regression that dropped files. Closes: #935096 csh (20110502-4+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Alastair McKinstry ] * Fix for segfault on eval. Patch thanks to Keith Thompson, Graham Inggs. Closes: #933057 cups (2.2.10-6+deb10u2) buster; urgency=medium . * Backport upstream security fixes: - Fix memory leak in ppdOpen (Closes: #946941) - CVE-2019-2228: The `ippSetValuetag` function did not validate the default language value (Closes: #946782) cyrus-imapd (3.0.8-6+deb10u4) buster; urgency=medium . * Add BACKUP type to cyrus-upgrade-db (Closes: #930764) cyrus-imapd (3.0.8-6+deb10u3) buster-security; urgency=medium . * Add patch to avoid mailbox creation as administrator (Closes: #CVE-2019-19783) cyrus-sasl2 (2.1.27+dfsg-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Off-by-one in _sasl_add_string function (CVE-2019-19906) (Closes: #947043) davical (1.1.8-1+deb10u1) buster-security; urgency=high . * Fix three cross-site scripting and cross-site request forgery vulnerabilities in the web administration front-end: CVE-2019-18345 CVE-2019-18346 CVE-2019-18347 (closes: #946343) debian-edu-config (2.10.65+deb10u4) buster; urgency=medium . [ Dominik George ] * Keep proxy settings on client if wpad is unreachable (Closes: #941001). debian-edu-config (2.10.65+deb10u3) buster-security; urgency=high . * Security fix for CVE-2019-3467 . [ Wolfgang Schweer ] * share/debian-edu-config/tools/kerberos-kdc-init: - Set proper rights for users in kadm5.acl file. (Closes: #946797) * Adjust debian/debian-edu-config.postinst to fix kadm5.acl upon upgrades. . [ Holger Levsen ] * Improve debian/debian-edu-config.postinst fix to only run once on upgrades. . [ Dominik George ] * Add NEWS to warn administrators with possible local changes. debian-installer (20190702+deb10u3) buster; urgency=medium . [ Steve McIntyre ] * Tweak mini.iso generation on arm so EFI netboot will work. . [ Cyril Brulebois ] * Update USE_UDEBS_FROM default from unstable to buster; debian/rules uses heuristics to set the right value anyway, but that should help users perform local builds without having to know about those heuristics. Thanks to Carsten Schoenert for the report. * Bump Linux ABI to 4.19.0-8. debian-installer-netboot-images (20190702+deb10u3) buster; urgency=medium . * Update to 20190702+deb10u3, from buster-proposed-updates. debian-lan-config (0.25+deb10u1) buster-security; urgency=high . * Fix kadmin access rules. * Add NEWS file. debian-security-support (2019.12.12~deb10u1) buster; urgency=medium . * Re-uploaded for buster. debian-security-support (2019.12.12~deb9u2) stretch-security; urgency=medium . * Rebuild for stretch-security. * Use debian/compat and depends on debhelper to support building on stretch. debian-security-support (2019.11.16) unstable; urgency=medium . * Add chromium to security-support-ended.deb9. * d/rules: update to NEXT_VERSION_ID=11. debian-security-support (2019.11.15) unstable; urgency=medium . * Team upload. * Add libqb to security-support-ended.deb8. debian-security-support (2019.11.01) unstable; urgency=medium . * Remove nodejs from security-support-limited as it is supported since the Buster release. Closes: #931376. * Add empty security-support-ended.deb11 file. * check-support-status.in: set DEB_NEXT_VER_ID=11. debian-security-support (2019.10.31) unstable; urgency=medium . * Mark nodejs only suitable for trusted content. Closes: #931376. * Add nasm-mozilla and nodejs-mozilla to security-support-ended.deb8 and security-support-ended.deb9 as they are only provided as build dependency for Firefox/Thunderbird >= 68. Closes: #943365. * Bump standards version to 4.4.1, no changes needed. dispmua (1.8.4.6-1~deb10u1) buster; urgency=medium . * Team upload. * Backport to Buster in order to make dispmua compatible with Thunderbird 68.x again. (Closes: #943584) dispmua (1.8.4.6-1~deb9u1) stretch; urgency=medium . * Team upload * Backport to Stretch in order to make dispmua compatible with Thunderbird 68.x again. (Closes: #943584) * Revert to compat level 10. dkimpy (0.9.6-0+deb10u1) buster; urgency=medium . * Update debian/watch to only see 0.9 versions for stable updates * Update debian/gbp.conf to use buster branches * New upstream bugfix releases: * 0.9.6 - Follow CNAMES when looking up key records when using DNS (pydns) (LP: #1856421) - Provide specialized error message when signing or verifying ed25519 signatures and pynacl is not installed (LP: #1854475) - Catch binascii related key format errors (LP: #1854477) * 0.9.5 - Ignore unknown service types in key records (LP: #1847020) - This is required by RFC 6376 and predecessors. It becomes important now that RFC 8460, which defines a new DKIM service type exists. This change is required to avoid processing tlsrpt keys like regular email keys, which is incorrect, they have different requirements. * 0.9.4 - Add LICENSE to MANIFEST.in so it is included in the tarball (LP: #1845318) * 0.9.3 - Fix linesep setting in arcsign script (LP: #1838262) (Thanks to Gowtham Gopalakrishnan for the report and the patch) - Fix default canonicalization for DKIM signature verification to be simple/simple per RFC 6376 (LP: #1839299) (Thanks to Cyril Nicodème for the report and a suggested fix) * 0.9.2 - Fix the arcsign script so it works with the current API (Note: the new srv_id option is the authserv_id to use in the ARC signatures - Only AR fields with an authserv-id that matches srv_id will be considered for ARC signing) - Fix cv=none processing for initial signature in chain - Add additional text documenting use of srv_id for ARC signing to docstrings and man 1 arcsign (LP: #1808301) - Use same line seperator for output as input in dkimsign/arcsign (LP: #1808686) - Refactor canonicalization.py strip_trailing_lines to avoid using re for more consistent processing across python versions (Thanks to Jonathan Bastien-Filiatrault for the change) - Refactor header folding for more consistent results, including reduced stray whitespace (Also Jonathan Bastien-Filiatrault) - Don't log message headers and body unless explicitely requested. This should also reduce memory usage on large messages. (Jonathan Bastien-Filiatrault) - Clarify the crlf does not count towards line length in fold - Adjust fold maxlen to one shorter for lines after the first, since they already have a leading space (LP: #1823008) dkimpy (0.9.5-1) unstable; urgency=medium . * New upstream release * Bump standards-version to 4.4.1 without further change dkimpy (0.9.4-1) unstable; urgency=medium . * New upstream release * Update public upstream key to be minimal dkimpy (0.9.3-1) unstable; urgency=medium . [ Ondřej Nový ] * Use debhelper-compat instead of debian/compat. . [ Scott Kitterman ] * New upstream release * Update debian/copyright dkimpy (0.9.2-1) unstable; urgency=medium . * New upstream release * Drop Python 2 support (no rdepends) * Bump standards-version to 4.4.0 without further change dkimpy-milter (1.0.3-1) buster; urgency=medium . * New upstream release: * Fix priviledge managment at startup so Unix sockets work: Milter: Move drop_privileges before Milter.runmilter and delete own_socketfile so that the milter interface runs as the correct user without race conditions about changing ownership of the socket file when it hasn't been created yet (When the milter is started, it will create the socket based on uMask, so we don't need to manually change it) * Improve error log messages to aid troublshooting dpdk (18.11.5-1~deb10u1) buster; urgency=medium . * Merge tag 'debian/18.11.5-1' into buster. * Drop CVE-2019-14818 patches, merged upstream. . dpdk (18.11.5-1) unstable; urgency=medium . * New upstream version 18.11.5; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html * Refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch to remove fuzz from 18.11.5 . dpdk (18.11.4-1) unstable; urgency=high . * Merge stable update to 18.11.4; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html * Fixes CVE-2019-14818 * Refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch to remove fuzz from 18.11.4 . dpdk (18.11.3-1) unstable; urgency=medium . * Merge stable update to 18.11.3; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#id2 - refresh d/p/0004-build-bump-minimum-Meson-version-to-0.47.1.patch - refresh d/p/avoid-as-needed-as-it-causes-overlinking.patch - d/dpdk-dev.install: dpdk-test is now properly in usr/bin - d/librte-security18.11.symbols: mark some symbols that now properly are experimental as such (none is gone) - among other things it fixes a dkms build issue with kernel 5.4 (LP: #1848585) . dpdk (18.11.2-4) unstable; urgency=medium . * d/p/avoid-as-needed-as-it-causes-overlinking.patch: fix overlinking in software using the dpdk pkg-config (LP: #1841759) . dpdk (18.11.2-3) unstable; urgency=medium . * Note branch in Vcs-Git. * Bump Standards-Version to 4.4.0. * Fix distribution in dpdk-dev.NEWS. Fixes LW: debian-news-entry-has-strange-distribution dpdk (18.11.4-1) unstable; urgency=high . * Merge stable update to 18.11.4; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html * Fixes CVE-2019-14818 * Refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch to remove fuzz from 18.11.4 dpdk (18.11.3-1) unstable; urgency=medium . * Merge stable update to 18.11.3; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#id2 - refresh d/p/0004-build-bump-minimum-Meson-version-to-0.47.1.patch - refresh d/p/avoid-as-needed-as-it-causes-overlinking.patch - d/dpdk-dev.install: dpdk-test is now properly in usr/bin - d/librte-security18.11.symbols: mark some symbols that now properly are experimental as such (none is gone) - among other things it fixes a dkms build issue with kernel 5.4 (LP: #1848585) dpdk (18.11.2-4) unstable; urgency=medium . * d/p/avoid-as-needed-as-it-causes-overlinking.patch: fix overlinking in software using the dpdk pkg-config (LP: #1841759) dpdk (18.11.2-3) unstable; urgency=medium . * Note branch in Vcs-Git. * Bump Standards-Version to 4.4.0. * Fix distribution in dpdk-dev.NEWS. Fixes LW: debian-news-entry-has-strange-distribution dpdk (18.11.2-2+deb10u2) buster-security; urgency=high . * Backport patches to fix CVE-2019-14818. A denial of service security issue has been found in the Vhost PMD. e2fsprogs (1.44.5-1+deb10u3) buster; urgency=medium . * Fix CVE-2019-5188: potential stack underflow in e2fsck (Closes: #948508) * Fix use after free in e2fsck (Closes: #948517) enigmail (2:2.1.3+ds1-4~deb10u2) buster-security; urgency=medium . * Upload to buster-security after discussing with the security team (closes: #945014) . enigmail (2:2.1.3+ds1-4~deb10u1) buster; urgency=medium . * Upload to debian stable to keep it installable now that Thunderbird 68 is in stable (Closes: #945014) . enigmail (2:2.1.3+ds1-4) unstable; urgency=medium . * convert to python3 * convert unit tests to python3 as well * wrap-and-sort -ast . enigmail (2:2.1.3+ds1-3) unstable; urgency=medium . * d/tests: permit stderr on tbird-sqlite . enigmail (2:2.1.3+ds1-2) unstable; urgency=medium . * Address autopkgtest failures (Closes: #944216) . enigmail (2:2.1.3+ds1-1) unstable; urgency=medium . * new upstream version (closes: #933832) * prepare to exclude more pieces of OpenPGP.js from upstream * upstream renamed the openpgp.worker javascript file * standards-version: bump to 4.4.1 (no changes needed) * drop mozilla-devscripts due to lack of install.rdf * strip out config.guess and config.sub when importing orig tarballs * refresh patches * strip even more OpenPGP.js when building * build in build-tb/ instead of build/ * d/copyright: drop unnecessary stanzas * enigmail 2.1.3 needs thunderbird 68 * d/run-tests: adapt to enigmail 2.1 test practices * use thunderbird --headless and rely on main.js to identify jsunit test * Avoid testing dependency on X11 for sqlite * ensure that we see some output when testing. * JSUnit is provided globally if jsunit 0.2.2 is installed * make unit test run without xvfb * always use system config.{guess,sub} * whittle down errors in the test suite . enigmail (2:2.0.12+ds1-1) unstable; urgency=medium . * new upstream release * refresh patches, dropping those already upstream * Standards-Version: bump to 4.4.0 (no changes needed) * move to debhelper 12 . enigmail (2:2.0.11+ds1-2) unstable; urgency=medium . * minimize legacy-display protected headers for encrypted mails . enigmail (2:2.0.11+ds1-1) unstable; urgency=medium . * new upstream release * refresh patches * use the older import-show with --dry-run instead of show-only enigmail (2:2.1.3+ds1-3+exp2) experimental; urgency=medium . * convert unit tests to python3 as well * try adding unit tests back to debian build process * wrap-and-sort -ast enigmail (2:2.1.3+ds1-3+exp1) experimental; urgency=medium . * move to debian/experimental * convert packaging to python3 (Closes: #936482) enigmail (2:2.1.3+ds1-3) unstable; urgency=medium . * d/tests: permit stderr on tbird-sqlite enigmail (2:2.1.3+ds1-2) unstable; urgency=medium . * Address autopkgtest failures (Closes: #944216) enigmail (2:2.1.3+ds1-1) unstable; urgency=medium . * new upstream version (closes: #933832) * prepare to exclude more pieces of OpenPGP.js from upstream * upstream renamed the openpgp.worker javascript file * standards-version: bump to 4.4.1 (no changes needed) * drop mozilla-devscripts due to lack of install.rdf * strip out config.guess and config.sub when importing orig tarballs * refresh patches * strip even more OpenPGP.js when building * build in build-tb/ instead of build/ * d/copyright: drop unnecessary stanzas * enigmail 2.1.3 needs thunderbird 68 * d/run-tests: adapt to enigmail 2.1 test practices * use thunderbird --headless and rely on main.js to identify jsunit test * Avoid testing dependency on X11 for sqlite * ensure that we see some output when testing. * JSUnit is provided globally if jsunit 0.2.2 is installed * make unit test run without xvfb * always use system config.{guess,sub} * whittle down errors in the test suite enigmail (2:2.0.12+ds1-1) unstable; urgency=medium . * new upstream release * refresh patches, dropping those already upstream * Standards-Version: bump to 4.4.0 (no changes needed) * move to debhelper 12 fig2dev (1:3.2.7a-5+deb10u3) buster; urgency=medium . * 42_CVE-2019-19746: Reject huge arrow types causing integer overflow. This fixes CVE-2019-19746 (Closes: #946628). * 43_fgets2getline: Replace most calls to fgets() by getline() in read.c. This fixes CVE-2019-19797 and several other segfaults (Closes: #946866). fig2dev (1:3.2.7a-5+deb10u2) buster; urgency=medium . * 41_CVE-2019-19555: Allow Fig v2 text strings ending with multiple ^A. This fixes CVE-2019-19555 (Closes: #946176). firefox-esr (68.4.1esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. * Fix for mfsa2020-03, also known as CVE-2019-17026. firefox-esr (68.4.1esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. * Fix for mfsa2020-03, also known as CVE-2019-17026. firefox-esr (68.4.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2020-02, also known as: CVE-2019-17015, CVE-2019-17016, CVE-2019-17017, CVE-2019-17021, CVE-2019-17022, CVE-2019-17024. . * debian/rules: Don't build with --compress-debug-sections on jessie. * debian/rules: Use sourcestamp.txt for MOZ_BUILD_DATE. Closes: #946193. . * sourcestamp.txt: Fill with the missing info. * intl/icu_sources_data.py: Don't build ICU in parallel. * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around older GCC ICEs on arm. (Thanks Emilio Pozuelo Monfort) firefox-esr (68.4.0esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. * Fixes for mfsa2020-02, also known as: CVE-2019-17015, CVE-2019-17016, CVE-2019-17017, CVE-2019-17021, CVE-2019-17022, CVE-2019-17024. . * debian/rules: Don't build with --compress-debug-sections on jessie. * debian/rules: Use sourcestamp.txt for MOZ_BUILD_DATE. Closes: #946193. . * sourcestamp.txt: Fill with the missing info. * intl/icu_sources_data.py: Don't build ICU in parallel. * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around older GCC ICEs on arm. (Thanks Emilio Pozuelo Monfort) firefox-esr (68.4.0esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. * Fixes for mfsa2020-02, also known as: CVE-2019-17015, CVE-2019-17016, CVE-2019-17017, CVE-2019-17021, CVE-2019-17022, CVE-2019-17024. . * debian/rules: Don't build with --compress-debug-sections on jessie. * debian/rules: Use sourcestamp.txt for MOZ_BUILD_DATE. Closes: #946193. . * sourcestamp.txt: Fill with the missing info. firefox-esr (68.3.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-37, also known as: CVE-2019-17008, CVE-2019-11745, CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012. . * debian/control*: Bump nss build dependencies. * debian/rules, debian/control.in: - Build with nodejs-mozilla on jessie and stretch. - Build with nasm-mozilla on jessie and stretch. - Don't build with system libvpx on stretch. (Thanks Emilio Pozuelo Monfort) firefox-esr (68.3.0esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-37, also known as: CVE-2019-17008, CVE-2019-11745, CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012. . * debian/control*: Bump nss build dependencies. * debian/rules, debian/control.in: - Build with nodejs-mozilla on jessie and stretch. - Build with nasm-mozilla on jessie and stretch. - Don't build with system libvpx on stretch. (Thanks Emilio Pozuelo Monfort) firefox-esr (68.3.0esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-37, also known as: CVE-2019-17008, CVE-2019-11745, CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012. . * debian/control.in: Bump nss build dependencies. * intl/icu_sources_data.py: - Revert change from 68.2.0esr-1~deb9u2. - Don't build ICU in parallel. * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around GCC ICEs on arm. (Thanks Emilio Pozuelo Monfort) firefox-esr (68.2.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-33, also known as: CVE-2019-15903, CVE-2019-11757, CVE-2019-11758, CVE-2019-11759, CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764. freeimage (3.18.0+ds2-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2019-12213: stack exhaustion caused by unwanted recursion in ReadThumbnail (Closes: #929597). * CVE-2019-12211: heap buffer overflow caused by invalid memcpy in PluginTIFF. freerdp2 (2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u1) buster; urgency=medium . * debian/patches: + Add 0001_CVE-2019-17177.patch. Fix realloc return handling. (CVE-2019-17177). freetds (1.00.104-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. * tds: Make sure UDT has varint set to 8 (CVE-2019-13508) (Closes: #944012) ghostscript (9.27~dfsg-2+deb10u3) buster-security; urgency=high . * remove .forceput from /.charkeys (CVE-2019-14869) git (1:2.20.1-2+deb10u1) buster-security; urgency=high . * new upstream point release (see RelNotes/2.20.2.txt). * Addresses the security issues CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, and CVE-2019-1387. . Credit for finding these vulnerabilities goes to Microsoft Security Response Center, in particular to Nicolas Joly. Fixes were provided by Jeff King and Johannes Schindelin with help from Garima Singh. . * Addresses CVE-2019-19604, arbitrary code execution via the "update" field in .gitmodules. . Credit for finding this vulnerability goes to Joern Schneeweisz from GitLab. git-lfs (2.7.1-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Stephen Gelman ] * Backport a fix from upstream that fixes FTBFS under Go 1.12.8, 1.11.13 (aka 1.11.6-1+deb10u1) (Closes: #940485) gnubg (1.06.002-1+deb10u1) buster; urgency=medium . [ Russ Allbery ] * Increase the size of static buffers used to build messages during program start so that the Spanish translation doesn't overflow a buffer. (Closes: #932351) gnutls28 (3.6.7-4+deb10u2) buster; urgency=medium . * Fix parsing of certificates using RegisteredID Closes: #949293 gnutls28 (3.6.7-4+deb10u1) buster; urgency=medium . * 42_rel3.6.10_01-gnutls_epoch_set_keys-do-not-forbid-random-padding.patch from 3.6.10: Fix interop problems with gnutls 2.x. Closes: #933538 (Thanks, Hanno Stock!) gtk2-engines-murrine (0.98.2-2+deb10u1) buster; urgency=medium . * debian/control: + Downgrade from R to S (gtk2-engine-themes): murrine-themes. (Closes: #838994). guile-2.2 (2.2.4+1-2+deb10u1) buster; urgency=medium . * Switch to dh_missing and ignore guile-X.Y for binary-indep. Thanks to Santiago Vila for reporting the problem. (Closes: 930774) haproxy (1.8.19-1+deb10u1) buster-security; urgency=high . * Apply two patches around HTTP/2 header validation allowing an attacker to use a CRLF inside an HTTP header. Fix CVE-2019-19330. intel-microcode (3.20191115.2~deb10u1) buster-security; urgency=high . * Rebuild for buster-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191115.2) unstable; urgency=medium . * Microcode rollbacks (closes: #946515, LP#1854764): sig 0x00050654, pf_mask 0xb7, 2019-07-31, rev 0x2000064, size 33792 * Avoids hangs on warm reboots (cold boots work fine) on HEDT and Xeon processors with signature 0x50654. https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/21 . intel-microcode (3.20191115.1) unstable; urgency=high . * New upstream microcode datafile 20191115 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376 sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376 sig 0x000806e9, pf_mask 0x10, 2019-10-15, rev 0x00ca, size 100352 sig 0x000806e9, pf_mask 0xc0, 2019-09-26, rev 0x00ca, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806eb, pf_mask 0xd0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ec, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906ed, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 100352 sig 0x000a0660, pf_mask 0x80, 2019-10-03, rev 0x00ca, size 91136 . intel-microcode (3.20191113.1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191113.1) unstable; urgency=high . * New upstream microcode datafile 20191113 + SECURITY UPDATE, refer to the 3.20191112.1 changelog entry for details Adds microcode update for CFL-S (Coffe Lake Desktop) INTEL-SA-00270, CVE-2019-11135, CVE-2019-0117 + Updated Microcodes (previously removed): sig 0x000906ec, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 intel-microcode (3.20191115.2~deb9u1) stretch-security; urgency=high . * Rebuild for stretch-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191115.2) unstable; urgency=medium . * Microcode rollbacks (closes: #946515, LP#1854764): sig 0x00050654, pf_mask 0xb7, 2019-07-31, rev 0x2000064, size 33792 * Avoids hangs on warm reboots (cold boots work fine) on HEDT and Xeon processors with signature 0x50654. https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/21 . intel-microcode (3.20191115.1) unstable; urgency=high . * New upstream microcode datafile 20191115 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376 sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376 sig 0x000806e9, pf_mask 0x10, 2019-10-15, rev 0x00ca, size 100352 sig 0x000806e9, pf_mask 0xc0, 2019-09-26, rev 0x00ca, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806eb, pf_mask 0xd0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ec, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906ed, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 100352 sig 0x000a0660, pf_mask 0x80, 2019-10-03, rev 0x00ca, size 91136 . intel-microcode (3.20191113.1~deb9u1) stretch-security; urgency=high . * Rebuild for stretch-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191113.1) unstable; urgency=high . * New upstream microcode datafile 20191113 + SECURITY UPDATE, refer to the 3.20191112.1 changelog entry for details Adds microcode update for CFL-S (Coffe Lake Desktop) INTEL-SA-00270, CVE-2019-11135, CVE-2019-0117 + Updated Microcodes (previously removed): sig 0x000906ec, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 intel-microcode (3.20191115.1) unstable; urgency=high . * New upstream microcode datafile 20191115 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376 sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376 sig 0x000806e9, pf_mask 0x10, 2019-10-15, rev 0x00ca, size 100352 sig 0x000806e9, pf_mask 0xc0, 2019-09-26, rev 0x00ca, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806eb, pf_mask 0xd0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ec, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906ed, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 100352 sig 0x000a0660, pf_mask 0x80, 2019-10-03, rev 0x00ca, size 91136 intel-microcode (3.20191115.1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191115.1) unstable; urgency=high . * New upstream microcode datafile 20191115 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376 sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376 sig 0x000806e9, pf_mask 0x10, 2019-10-15, rev 0x00ca, size 100352 sig 0x000806e9, pf_mask 0xc0, 2019-09-26, rev 0x00ca, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806eb, pf_mask 0xd0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ec, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906ed, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 100352 sig 0x000a0660, pf_mask 0x80, 2019-10-03, rev 0x00ca, size 91136 . intel-microcode (3.20191113.1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191113.1) unstable; urgency=high . * New upstream microcode datafile 20191113 + SECURITY UPDATE, refer to the 3.20191112.1 changelog entry for details Adds microcode update for CFL-S (Coffe Lake Desktop) INTEL-SA-00270, CVE-2019-11135, CVE-2019-0117 + Updated Microcodes (previously removed): sig 0x000906ec, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 intel-microcode (3.20191115.1~deb9u1) stretch-security; urgency=high . * Rebuild for stretch-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191115.1) unstable; urgency=high . * New upstream microcode datafile 20191115 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376 sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376 sig 0x000806e9, pf_mask 0x10, 2019-10-15, rev 0x00ca, size 100352 sig 0x000806e9, pf_mask 0xc0, 2019-09-26, rev 0x00ca, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806eb, pf_mask 0xd0, 2019-10-03, rev 0x00ca, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-10-03, rev 0x00ca, size 100352 sig 0x000906ec, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 99328 sig 0x000906ed, pf_mask 0x22, 2019-10-03, rev 0x00ca, size 100352 sig 0x000a0660, pf_mask 0x80, 2019-10-03, rev 0x00ca, size 91136 . intel-microcode (3.20191113.1~deb9u1) stretch-security; urgency=high . * Rebuild for stretch-security (no changes) * Refer to DSA-4565-2 for details. . intel-microcode (3.20191113.1) unstable; urgency=high . * New upstream microcode datafile 20191113 + SECURITY UPDATE, refer to the 3.20191112.1 changelog entry for details Adds microcode update for CFL-S (Coffe Lake Desktop) INTEL-SA-00270, CVE-2019-11135, CVE-2019-0117 + Updated Microcodes (previously removed): sig 0x000906ec, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 intel-microcode (3.20191113.1) unstable; urgency=high . * New upstream microcode datafile 20191113 + SECURITY UPDATE, refer to the 3.20191112.1 changelog entry for details Adds microcode update for CFL-S (Coffe Lake Desktop) INTEL-SA-00270, CVE-2019-11135, CVE-2019-0117 + Updated Microcodes (previously removed): sig 0x000906ec, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 intel-microcode (3.20191112.1) unstable; urgency=medium . * New upstream microcode datafile 20191112 + SECURITY UPDATE - Implements MDS mitigation (TSX TAA), INTEL-SA-00270, CVE-2019-11135 - Implements TA Indirect Sharing mitigation, and improves the MDS mitigation (VERW) - Fixes FIVR (Xeon Voltage Modulation) vulnerability, INTEL-SA-00271, CVE-2019-11139 - Fixes SGX vulnerabilities and errata (including CVE-2019-0117) + CRITICAL ERRATA FIXES - Fixes Jcc conditional jump macro-fusion erratum (Skylake+, except Ice Lake), causes a 0-3% typical perforance hit (can be as bad as 10%). But ensures the processor will actually jump where it should, so don't even *dream* of not applying this fix. - Fixes AVX SHUF* instruction implementation flaw erratum + Removed Microcodes: sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304 + New Microcodes: sig 0x000406d8, pf_mask 0x01, 2019-09-16, rev 0x012d, size 84992 sig 0x00050656, pf_mask 0xbf, 2019-09-05, rev 0x400002c, size 51200 sig 0x00060663, pf_mask 0x80, 2018-04-17, rev 0x002a, size 87040 sig 0x000706a8, pf_mask 0x01, 2019-08-29, rev 0x0016, size 74752 sig 0x000706e5, pf_mask 0x80, 2019-09-05, rev 0x0046, size 102400 sig 0x000a0660, pf_mask 0x80, 2019-08-27, rev 0x00c6, size 91136 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-08-14, rev 0x00d4, size 101376 sig 0x00050654, pf_mask 0xb7, 2019-09-05, rev 0x2000065, size 34816 sig 0x00050657, pf_mask 0xbf, 2019-09-05, rev 0x500002c, size 51200 sig 0x000506e3, pf_mask 0x36, 2019-08-14, rev 0x00d4, size 101376 sig 0x000706a1, pf_mask 0x01, 2019-08-28, rev 0x0032, size 73728 sig 0x000806e9, pf_mask 0x10, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806e9, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806eb, pf_mask 0xd0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ed, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 + Updated Microcodes (previously removed): sig 0x00050653, pf_mask 0x97, 2019-09-09, rev 0x1000151, size 32768 intel-microcode (3.20191112.1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security (no changes) * Refer to DSA-4565-1 for details. . intel-microcode (3.20191112.1) unstable; urgency=medium . * New upstream microcode datafile 20191112 + SECURITY UPDATE - Implements MDS mitigation (TSX TAA), INTEL-SA-00270, CVE-2019-11135 - Implements TA Indirect Sharing mitigation, and improves the MDS mitigation (VERW) - Fixes FIVR (Xeon Voltage Modulation) vulnerability, INTEL-SA-00271, CVE-2019-11139 - Fixes SGX vulnerabilities and errata (including CVE-2019-0117) + CRITICAL ERRATA FIXES - Fixes Jcc conditional jump macro-fusion erratum (Skylake+, except Ice Lake), causes a 0-3% typical perforance hit (can be as bad as 10%). But ensures the processor will actually jump where it should, so don't even *dream* of not applying this fix. - Fixes AVX SHUF* instruction implementation flaw erratum + Removed Microcodes: sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304 + New Microcodes: sig 0x000406d8, pf_mask 0x01, 2019-09-16, rev 0x012d, size 84992 sig 0x00050656, pf_mask 0xbf, 2019-09-05, rev 0x400002c, size 51200 sig 0x00060663, pf_mask 0x80, 2018-04-17, rev 0x002a, size 87040 sig 0x000706a8, pf_mask 0x01, 2019-08-29, rev 0x0016, size 74752 sig 0x000706e5, pf_mask 0x80, 2019-09-05, rev 0x0046, size 102400 sig 0x000a0660, pf_mask 0x80, 2019-08-27, rev 0x00c6, size 91136 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-08-14, rev 0x00d4, size 101376 sig 0x00050654, pf_mask 0xb7, 2019-09-05, rev 0x2000065, size 34816 sig 0x00050657, pf_mask 0xbf, 2019-09-05, rev 0x500002c, size 51200 sig 0x000506e3, pf_mask 0x36, 2019-08-14, rev 0x00d4, size 101376 sig 0x000706a1, pf_mask 0x01, 2019-08-28, rev 0x0032, size 73728 sig 0x000806e9, pf_mask 0x10, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806e9, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806eb, pf_mask 0xd0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ed, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 + Updated Microcodes (previously removed): sig 0x00050653, pf_mask 0x97, 2019-09-09, rev 0x1000151, size 32768 . intel-microcode (3.20190918.1) unstable; urgency=medium . * New upstream microcode datafile 20190918 + SECURITY UPDATE *Might* contain mitigations for INTEL-SA-00247 (RAMBleed), given the set of processors being updated. + Updated Microcodes: sig 0x000306d4, pf_mask 0xc0, 2019-06-13, rev 0x002e, size 19456 sig 0x000306f4, pf_mask 0x80, 2019-06-17, rev 0x0016, size 18432 sig 0x00040671, pf_mask 0x22, 2019-06-13, rev 0x0021, size 14336 sig 0x000406f1, pf_mask 0xef, 2019-06-18, rev 0xb000038, size 30720 sig 0x00050654, pf_mask 0xb7, 2019-07-31, rev 0x2000064, size 33792 sig 0x00050657, pf_mask 0xbf, 2019-08-12, rev 0x500002b, size 51200 sig 0x00050662, pf_mask 0x10, 2019-06-17, rev 0x001c, size 32768 sig 0x00050663, pf_mask 0x10, 2019-06-17, rev 0x7000019, size 24576 sig 0x00050664, pf_mask 0x10, 2019-06-17, rev 0xf000017, size 24576 sig 0x00050665, pf_mask 0x10, 2019-06-17, rev 0xe00000f, size 19456 intel-microcode (3.20191112.1~deb9u1) stretch-security; urgency=high . * Rebuild for stretch-security (no changes) * Refer to DSA-4565-1 for details. . intel-microcode (3.20191112.1) unstable; urgency=medium . * New upstream microcode datafile 20191112 + SECURITY UPDATE - Implements MDS mitigation (TSX TAA), INTEL-SA-00270, CVE-2019-11135 - Implements TA Indirect Sharing mitigation, and improves the MDS mitigation (VERW) - Fixes FIVR (Xeon Voltage Modulation) vulnerability, INTEL-SA-00271, CVE-2019-11139 - Fixes SGX vulnerabilities and errata (including CVE-2019-0117) + CRITICAL ERRATA FIXES - Fixes Jcc conditional jump macro-fusion erratum (Skylake+, except Ice Lake), causes a 0-3% typical perforance hit (can be as bad as 10%). But ensures the processor will actually jump where it should, so don't even *dream* of not applying this fix. - Fixes AVX SHUF* instruction implementation flaw erratum + Removed Microcodes: sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304 + New Microcodes: sig 0x000406d8, pf_mask 0x01, 2019-09-16, rev 0x012d, size 84992 sig 0x00050656, pf_mask 0xbf, 2019-09-05, rev 0x400002c, size 51200 sig 0x00060663, pf_mask 0x80, 2018-04-17, rev 0x002a, size 87040 sig 0x000706a8, pf_mask 0x01, 2019-08-29, rev 0x0016, size 74752 sig 0x000706e5, pf_mask 0x80, 2019-09-05, rev 0x0046, size 102400 sig 0x000a0660, pf_mask 0x80, 2019-08-27, rev 0x00c6, size 91136 + Updated Microcodes: sig 0x000406e3, pf_mask 0xc0, 2019-08-14, rev 0x00d4, size 101376 sig 0x00050654, pf_mask 0xb7, 2019-09-05, rev 0x2000065, size 34816 sig 0x00050657, pf_mask 0xbf, 2019-09-05, rev 0x500002c, size 51200 sig 0x000506e3, pf_mask 0x36, 2019-08-14, rev 0x00d4, size 101376 sig 0x000706a1, pf_mask 0x01, 2019-08-28, rev 0x0032, size 73728 sig 0x000806e9, pf_mask 0x10, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806e9, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ea, pf_mask 0xc0, 2019-08-14, rev 0x00c6, size 99328 sig 0x000806eb, pf_mask 0xd0, 2019-08-14, rev 0x00c6, size 100352 sig 0x000806ec, pf_mask 0x94, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906e9, pf_mask 0x2a, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ea, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 sig 0x000906eb, pf_mask 0x02, 2019-08-14, rev 0x00c6, size 100352 sig 0x000906ed, pf_mask 0x22, 2019-08-14, rev 0x00c6, size 99328 + Updated Microcodes (previously removed): sig 0x00050653, pf_mask 0x97, 2019-09-09, rev 0x1000151, size 32768 . intel-microcode (3.20190918.1) unstable; urgency=medium . * New upstream microcode datafile 20190918 + SECURITY UPDATE *Might* contain mitigations for INTEL-SA-00247 (RAMBleed), given the set of processors being updated. + Updated Microcodes: sig 0x000306d4, pf_mask 0xc0, 2019-06-13, rev 0x002e, size 19456 sig 0x000306f4, pf_mask 0x80, 2019-06-17, rev 0x0016, size 18432 sig 0x00040671, pf_mask 0x22, 2019-06-13, rev 0x0021, size 14336 sig 0x000406f1, pf_mask 0xef, 2019-06-18, rev 0xb000038, size 30720 sig 0x00050654, pf_mask 0xb7, 2019-07-31, rev 0x2000064, size 33792 sig 0x00050657, pf_mask 0xbf, 2019-08-12, rev 0x500002b, size 51200 sig 0x00050662, pf_mask 0x10, 2019-06-17, rev 0x001c, size 32768 sig 0x00050663, pf_mask 0x10, 2019-06-17, rev 0x7000019, size 24576 sig 0x00050664, pf_mask 0x10, 2019-06-17, rev 0xf000017, size 24576 sig 0x00050665, pf_mask 0x10, 2019-06-17, rev 0xe00000f, size 19456 intel-microcode (3.20190918.1) unstable; urgency=medium . * New upstream microcode datafile 20190918 + SECURITY UPDATE *Might* contain mitigations for INTEL-SA-00247 (RAMBleed), given the set of processors being updated. + Updated Microcodes: sig 0x000306d4, pf_mask 0xc0, 2019-06-13, rev 0x002e, size 19456 sig 0x000306f4, pf_mask 0x80, 2019-06-17, rev 0x0016, size 18432 sig 0x00040671, pf_mask 0x22, 2019-06-13, rev 0x0021, size 14336 sig 0x000406f1, pf_mask 0xef, 2019-06-18, rev 0xb000038, size 30720 sig 0x00050654, pf_mask 0xb7, 2019-07-31, rev 0x2000064, size 33792 sig 0x00050657, pf_mask 0xbf, 2019-08-12, rev 0x500002b, size 51200 sig 0x00050662, pf_mask 0x10, 2019-06-17, rev 0x001c, size 32768 sig 0x00050663, pf_mask 0x10, 2019-06-17, rev 0x7000019, size 24576 sig 0x00050664, pf_mask 0x10, 2019-06-17, rev 0xf000017, size 24576 sig 0x00050665, pf_mask 0x10, 2019-06-17, rev 0xe00000f, size 19456 ldm (2:2.18.06-1+deb10u1) buster-security; urgency=medium . * Add patch fixing root access when LDM_USERNAME is unset. libburn (1.5.0-1+deb10u1) buster; urgency=low . * Patch taken from upstream development + cdrskin multi-track burning was slow and stalled after track 1. Regression introduced in version 1.5.0 by commit 84fad99, 2018.02.05, which should fix a bug with O_DIRECT track reading. Debian never enabled O_DIRECT, so 84fad99 was never desirable. The patch reverts the upstream commit to bring the fifo code of cdrskin back to the state in Debian 9 and Debian 8. Closes: #946679 libcgns (3.3.0-7~deb10u1) buster; urgency=medium . * Rebuild for buster. . libcgns (3.3.0-7) unstable; urgency=medium . * Backport fix from experimental * New patch gcc-pr92361.patch to fix FTBFS on ppcel64 (closes: #944127) libidn2 (2.0.5-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix free of random (stack) value in idn2_to_ascii_4i() * idn2_to_ascii_4i(): Restrict output length to 63 (CVE-2019-18224) (Closes: #942895) * Fail make if 'ronn' doesn't exist when building docs * Fix generation of idn2.1 man page file * Move texinfo from Build-Depends-Indep to Build-Depends (Closes: #949705) libimobiledevice (1.2.1~git20181030.92c5462-2) stable; urgency=medium . * d/patches: properly handle partial SSL writes * d/gbp.conf: follow buster branch libmatroska (1.4.9-1+deb10u1) buster; urgency=medium . * debian/shlibs: Bump version to 1.4.7 since that version introduced new symbols (Closes: #946669) libmysofa (0.6~dfsg0-3+deb10u1) buster; urgency=high . * Backport security fixes (Closes: #939735) * CVE-2019-16091 * CVE-2019-16092 * CVE-2019-16093 * CVE-2019-16094 * CVE-2019-16095 * misc security fixes that have no CVE assigned libole-storage-lite-perl (0.19-2+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Backport upstream fix for years >= 2020 being misinterpreted. (Closes: #948668) libparse-win32registry-perl (1.0-2+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Add patch to fix Y2K20 problem. (Closes: #948682) libparse-win32registry-perl (1.0-2+deb9u1) stretch; urgency=medium . * Non-maintainer upload. * Add patch to fix Y2K20 problem. (Closes: #948682) libperl4-corelibs-perl (0.004-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Add t/timelocal.t fix for Y2K20 problem in t/timelocal.t. (Closes: #948666) libsolv (0.6.35-2+deb10u1) buster; urgency=medium . * debian/patches: + CVE-2019-20387: Add 0001_CVE-2019-20387.patch. Resolves heap-based buffer over-read in repodata.c (Closes: #949611). + 1006_various-types.patch: Trivial rebase. libspreadsheet-wright-perl (0.105-1+deb10u1) buster; urgency=medium . * Fixing previously unusable OpenDocument Spreadsheets (https://rt.cpan.org/Ticket/Display.html?id=128919). * Fixing previously unusable multisheet OpenDocument Spreadsheets (https://rt.cpan.org/Ticket/Display.html?id=131334). * Fixing passing JSON formatting options (https://github.com/tobyink/p5-spreadsheet-wright/issues/5). libtimedate-perl (2.3000-2+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Add patch from upstream pull request to fix Y2K20 test failure. (Closes: #948680) libtimedate-perl (2.3000-2+deb9u1) stretch; urgency=medium . * Non-maintainer upload. * Add patch from upstream pull request to fix Y2K20 test failure. (Closes: #948680) libvirt (5.0.0-4+deb10u1) buster; urgency=medium . [ Tobias Wolter ] * [711f612] apparmor: Allow one to run pygrub . [ Guido Günther ] * [3bcbf56] Don't render osxsave, ospke into QEMU comman line. This helps newer QEMU with some configs generated by virt-install. Thanks to Michal Arbet for digging out the patches (Closes: #944248) libvncserver (0.9.11+dfsg-1.3+deb10u2) buster; urgency=medium . * Regression update. . * debian/patches: Add use-after-free/{4,5,6}.patch. All cherry-picked from upstream. Resolves crashing of x11vnc when vncviewer connects. (Closes: #905786). libvncserver (0.9.11+dfsg-1.3+deb10u1) buster; urgency=medium . * CVE-2019-15681: rfbserver: don't leak stack memory to the remote. (Closes: #943793). * debian/patches: + Trivial patch rebasing. + Add 3 use-after-free patches. Resolve a freeze during connection closure and a segmentation fault on multi-threaded VNC servers. (Closes: #905786). + Add 0002-set-true-color-flag-to-1.patch. Fix connecting to VMware servers. (Closes: #880531). libvpx (1.7.0-3+deb10u1) buster-security; urgency=medium . * CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 limnoria (2019.02.23-1+deb10u1) buster; urgency=medium . * Add patch from upstream to fix remote information disclosure and possibly remote code execution in the Math plugin. CVE-2019-19010 linux (4.19.98-1) buster; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.88 - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate - ASoC: compress: fix unsigned integer overflow check - reset: Fix memory leak in reset_control_array_put() - [armhf] clk: samsung: exynos5433: Fix error paths - [armel/marvell,armhf] ASoC: kirkwood: fix external clock probe defer - [armel/marvell,armhf] ASoC: kirkwood: fix device remove ordering - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic - [armhf] dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts - reset: fix reset_control_ops kerneldoc comment - [armhf,arm64] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend - [ppc64el] bpf: Fix tail call implementation - idr: Fix integer overflow in idr_for_each_entry - idr: Fix idr_alloc_u32 on 32-bit systems - [x86] resctrl: Prevent NULL pointer dereference when reading mondata - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay timeout - bridge: ebtables: don't crash when using dnat target in output chains - can: peak_usb: report bus recovery as well - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error - [armhf] can: flexcan: increase error counters if skb enqueueing via can_rx_offload_queue_sorted() fails - [arm64] watchdog: meson: Fix the wrong value of left time - ceph: return -EINVAL if given fsc mount option on kernel w/o support - net/fq_impl: Switch to kvmalloc() for memory allocation - mac80211: fix station inactive_time shortly after boot - block: drbd: remove a stray unlock in __drbd_send_protocol() - scsi: target/tcmu: Fix queue_cmd_ring() declaration - scsi: lpfc: Fix kernel Oops due to null pring pointers - scsi: lpfc: Fix dif and first burst use in write commands - tracing: Lock event_mutex before synth_event_mutex - [armhf] dts: imx*: Fix memory node duplication - [armhf] dts: Fix hsi gdd range for omap4 - [arm64] mm: Prevent mismatched 52-bit VA support - [arm64] smp: Handle errors reported by the firmware - [armhf] bus: ti-sysc: Check for no-reset and no-idle flags at the child level - [arm64] RDMA/hns: Fix the bug while use multi-hop of pbl - [x86] RDMA/vmw_pvrdma: Use atomic memory allocation in create AH - [armhf] PM / AVS: SmartReflex: NULL check before some freeing functions is not needed - xfs: zero length symlinks are not valid - ACPI / LPSS: Ignore acpi_device_fix_up_power() return value - scsi: lpfc: Enable Management features for IF_TYPE=6 - scsi: qla2xxx: Fix NPIV handling for FC-NVMe - scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port - nvme: provide fallback for discard alloc failure - [s390x] zcrypt: make sysfs reset attribute trigger queue reset - crypto: user - support incremental algorithm dumps - mwifiex: fix potential NULL dereference and use after free - mwifiex: debugfs: correct histogram spacing, formatting - brcmfmac: set F2 watermark to 256 for 4373 - brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 - rtl818x: fix potential use after free - bcache: do not check if debug dentry is ERR or NULL explicitly on remove - bcache: do not mark writeback_running too early - xfs: require both realtime inodes to mount - nvme: fix kernel paging oops - ubifs: Fix default compression selection in ubifs - ubi: Put MTD device after it is not used - ubi: Do not drop UBI device reference before using - iwlwifi: move iwl_nvm_check_version() into dvm - iwlwifi: mvm: force TCM re-evaluation on TCM resume - iwlwifi: pcie: fix erroneous print - iwlwifi: pcie: set cmd_len in the correct place - [armhf,arm64] gpio: pca953x: Fix AI overflow on PCAL6524 - gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB - [x86] kvm: vmx: Set IA32_TSC_AUX for legacy mode guests - [x86] Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" - [x86] Revert "KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode()" - VSOCK: bind to random port for VMADDR_PORT_ANY - [amd64] mmc: meson-gx: make sure the descriptor is stopped on errors - [armhf] mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET - [armhf] usb: ehci-omap: Fix deferred probe for phy handling - btrfs: Check for missing device before bio submission in btrfs_map_bio - btrfs: fix ncopies raid_attr for RAID56 - btrfs: dev-replace: set result code of cancel by status of scrub - Btrfs: allow clear_extent_dirty() to receive a cached extent state record - btrfs: only track ref_heads in delayed_ref_updates - [x86] HID: intel-ish-hid: fixes incorrect error handling - serial: 8250: Rate limit serial port rx interrupts during input overruns - [x86] kprobes/xen: blacklist non-attachable xen interrupt functions - xen/pciback: Check dev_data before using it - kprobes: Blacklist symbols in arch-defined prohibited area - [amd64] kprobes: Show x86-64 specific blacklisted symbols correctly - [armhf] memory: omap-gpmc: Get the header of the enum - net/mlx5: Continue driver initialization despite debugfs failure - netfilter: nf_nat_sip: fix RTP/RTCP source port translations - exofs_mount(): fix leaks on failure exits - bnxt_en: Return linux standard errors in bnxt_ethtool.c - bnxt_en: Save ring statistics before reset. - bnxt_en: query force speeds before disabling autoneg mode. - [s390x] KVM: unregister debug feature on failing arch init - dm flakey: Properly corrupt multi-page bios. - gfs2: take jdata unstuff into account in do_grow - dm raid: fix false -EBUSY when handling check/repair message - xfs: Align compat attrlist_by_handle with native implementation. - xfs: Fix bulkstat compat ioctls on x32 userspace. - IB/qib: Fix an error code in qib_sdma_verbs_send() - vxlan: Fix error path in __vxlan_dev_create() - [ppc64el] xmon: fix dump_segments() - drivers/regulator: fix a missing check of return value - Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer - scsi: qla2xxx: deadlock by configfs_depend_item - scsi: csiostor: fix incorrect dma device in case of vport - brcmfmac: Fix access point mode - ath6kl: Only use match sets when firmware supports it - ath6kl: Fix off by one error in scan completion - [ppc64el] perf: Fix unit_sel/cache_sel checks - [ppc64el] prom: fix early DEBUG messages - [ppc64el] mm: Make NULL pointer deferences explicit on bad page faults. - [ppc64el] vfio/spapr_tce: Get rid of possible infinite loop - [ppc64el] powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status - drbd: ignore "all zero" peer volume sizes in handshake - drbd: reject attach of unsuitable uuids even if connected - drbd: do not block when adjusting "disk-options" while IO is frozen - drbd: fix print_st_err()'s prototype to match the definition - IB/rxe: Make counters thread safe - bpf/cpumap: make sure frame_size for build_skb is aligned if headroom isn't - [armhf] regulator: tps65910: fix a missing check of return value - [ppc64el] powerpc/pseries: Fix node leak in update_lmb_associativity_index() - net/netlink_compat: Fix a missing check of nla_parse_nested - net/net_namespace: Check the return value of register_pernet_subsys() - f2fs: fix block address for __check_sit_bitmap - f2fs: fix to dirty inode synchronously - [armhf] net: dsa: bcm_sf2: Propagate error value from mdio_write - atl1e: checking the status of atl1e_write_phy_reg - tipc: fix a missing check of genlmsg_put - net: marvell: fix a missing check of acpi_match_device - ocfs2: clear journal dirty flag after shutdown journal - vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n - mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() - mm/page_alloc.c: use a single function to free page - mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() - netfilter: nf_tables: fix a missing check of nla_put_failure - xprtrdma: Prevent leak of rpcrdma_rep objects - infiniband/qedr: Potential null ptr dereference of qp - lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk - lib/genalloc.c: use vzalloc_node() to allocate the bitmap - drivers/base/platform.c: kmemleak ignore a known leak - lib/genalloc.c: include vmalloc.h - mtd: Check add_mtd_device() ret code - tipc: fix memory leak in tipc_nl_compat_publ_dump - net/core/neighbour: tell kmemleak about hash tables - [armhf,arm64] ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs - PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() - net/core/neighbour: fix kmemleak minimal reference count for hash tables - serial: 8250: Fix serial8250 initialization crash - [armhf] gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change - sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe - ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel - decnet: fix DN_IFREQ_SIZE - net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() - net/smc: don't wait for send buffer space when data was already sent - mm/hotplug: invalid PFNs from pfn_to_online_page() - xfs: end sync buffer I/O properly on shutdown error - net/smc: fix sender_free computation - blktrace: Show requests without sector - net/smc: fix byte_order for rx_curs_confirmed - tipc: fix skb may be leaky in tipc_link_input - sfc: initialise found bitmap in efx_ef10_mtd_probe - geneve: change NET_UDP_TUNNEL dependency to select - net: fix possible overflow in __sk_mem_raise_allocated() - net: ip_gre: do not report erspan_ver for gre or gretap - net: ip6_gre: do not report erspan_ver for ip6gre or ip6gretap - sctp: don't compare hb_timer expire date before starting it - bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() - mmc: core: align max segment size with logical block size - net: dev: Use unsigned integer as an argument to left-shift - kvm: properly check debugfs dentry before using it - bpf: drop refcount if bpf_map_new_fd() fails in map_create() - [arm64] net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED - [arm64] net: hns3: fix PFC not setting problem for DCB module - [arm64] net: hns3: fix an issue for hclgevf_ae_get_hdev - [arm64] net: hns3: fix an issue for hns3_update_new_int_gl - [x86] iommu/amd: Fix NULL dereference bug in match_hid_uid - apparmor: delete the dentry in aafs_remove() to avoid a leak - scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing - ACPI / APEI: Switch estatus pool to use vmalloc memory - [arm64] scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned - scsi: libsas: Check SMP PHY control function result - [arm64] RDMA/hns: Fix the bug with updating rq head pointer when flush cqe - [arm64] RDMA/hns: Bugfix for the scene without receiver queue - [arm64] RDMA/hns: Fix the state of rereg mr - [arm64] RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp - ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board - [ppc64el] pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (CVE-2019-12614) - xdp: fix cpumap redirect SKB creation bug - mtd: Remove a debug trace in mtdpart.c - [s390x] mm, gup: add missing refcount overflow checks on s390 - [armhf,arm64] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - thunderbolt: Power cycle the router if NVM authentication fails - xfrm: Fix memleak on xfrm state destroy - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE - [arm64] net: macb: fix error format in dev_err() - pwm: Clear chip_data in pwm_put() - macvlan: schedule bc_work even if error - net: psample: fix skb_over_panic - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - tipc: fix link name length check - sctp: cache netns in sctp_ep_common - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - [arm64] net: macb: add missed tasklet_kill - ext4: add more paranoia checking in ext4_expand_extra_isize handling (CVE-2019-19767) - [arm64] net: macb: Fix SUBNS increment and increase resolution - [arm64] net: macb driver, check for SKBTX_HW_TSTAMP - mtd: spi-nor: cast to u64 to avoid uint overflows - tcp: exit if nothing to retransmit on RTO timeout - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform: hp-wmi: Fix ACPI errors caused by passing 0 as input size https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89 - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071) - [arm64] tegra: Fix 'active-low' warning for Jetson TX1 regulator - usb: gadget: u_serial: add missing port entry locking - [arm64] tty: serial: msm_serial: Fix flow control - [armhf,arm64] serial: pl011: Fix DMA ->flush_buffer() - serial: serial_core: Perform NULL checks for break_ctl ops - autofs: fix a leak in autofs_expire_indirect() - [arm64] RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN - iwlwifi: pcie: don't consider IV len in A-MSDU - exportfs_decode_fh(): negative pinned may become positive without the parent locked - audit_get_nd(): don't unlock parent too early - xfrm: release device reference for invalid state - sched/core: Avoid spurious lock dependencies - perf/core: Consistently fail fork on allocation failures - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() - [armhf,arm64] drm/sun4i: tcon: Set min division of TCON0_DCLK to 1. - rsxx: add missed destroy_workqueue calls in remove - i2c: core: fix use after free in of_i2c_notify - serial: core: Allow processing sysrq at port unlock time - cxgb4vf: fix memleak in mac_hlist initialization - iwlwifi: mvm: synchronize TID queue removal - iwlwifi: trans: Clear persistence bit when starting the FW - iwlwifi: mvm: Send non offchannel traffic via AP sta - [armhf] 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+ - audit: Embed key into chunk - netfilter: nf_tables: don't use position attribute on rule replacement - net/mlx5: Release resource on error flow - [arm64] clk: sunxi-ng: a64: Fix gate bit of DSI DPHY - ice: Fix NVM mask defines - dlm: fix possible call to kfree() for non-initialized pointer - [armhf] dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1 - [armhf,arm64] rtc: max77686: Fix the returned value in case of error in 'max77686_rtc_read_time()' - i40e: don't restart nway if autoneg not supported - virtchnl: Fix off by one error - [armhf] clk: rockchip: fix rk3188 sclk_smc gate data - [armhf] clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering - [armhf] dts: rockchip: Fix rk3288-rock2 vcc_flash name - dlm: fix missing idr_destroy for recover_idr - [armhf,arm64] net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2 - [s390x] scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the CDB - [s390x] scsi: zfcp: drop default switch case which might paper over missing case - [armhf] bus: ti-sysc: Fix getting optional clocks in clock_roles - [armhf] dts: imx6: RDU2: fix eGalax touchscreen node - crypto: ecc - check for invalid values in the key verification test - crypto: bcm - fix normal/non key hash algorithm failure - [arm64] dts: zynqmp: Fix node names which contain "_" - [arm64] pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues - [arm*] firmware: raspberrypi: Fix firmware calls with large buffers - mm/vmstat.c: fix NUMA statistics updates - [arm64] clk: rockchip: fix I2S1 clock gate register for rk3328 - [arm64] clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 - sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit - regulator: Fix return value of _set_load() stub - USB: serial: f81534: fix reading old/new IC config - xfs: extent shifting doesn't fully invalidate page cache - net-next/hinic:fix a bug in set mac address - net-next/hinic: fix a bug in rx data flow - ice: Fix return value from NAPI poll - ice: Fix possible NULL pointer de-reference - iomap: FUA is wrong for DIO O_DSYNC writes into unwritten extents - iomap: sub-block dio needs to zeroout beyond EOF - iomap: dio data corruption and spurious errors when pipes fill - iomap: readpages doesn't zero page tail beyond EOF - iw_cxgb4: only reconnect with MPAv1 if the peer aborts - [mips*/octeon] octeon-platform: fix typing - net/smc: use after free fix in smc_wr_tx_put_slot() - [armhf] dts: exynos: Use Samsung SoC specific compatible for DWC2 module - media: pulse8-cec: return 0 when invalidating the logical address - media: cec: report Vendor ID after initialization - iwlwifi: fix cfg structs for 22000 with different RF modules - net/ipv6: re-do dad when interface has IFF_NOARP flag change - [x86] dmaengine: dw-dmac: implement dma protection control setting - [armhf,arm64] usb: dwc3: debugfs: Properly print/set link state for HS - [armhf,arm64] usb: dwc3: don't log probe deferrals; but do log other error codes - ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() - f2fs: fix to account preflush command for noflush_merge mode - f2fs: fix count of seg_freed to make sec_freed correct - f2fs: change segment to section in f2fs_ioc_gc_range - [armhf] dts: rockchip: Fix the PMU interrupt number for rv1108 - [armhf] dts: rockchip: Assign the proper GPIO clocks for rv1108 - f2fs: fix to allow node segment for GC by ioctl path - nvme: Free ctrl device name on init failure - dma-mapping: fix return type of dma_set_max_seg_size() - [armhf] serial: imx: fix error handling in console_setup - [armhf] i2c: imx: don't print error message on probe defer - [arm64] clk: meson: Fix GXL HDMI PLL fractional bits width - [armhf,arm64] gpu: host1x: Fix syncpoint ID field size on Tegra186 - lockd: fix decoding of TEST results - sctp: increase sk_wmem_alloc when head->truesize is increased - [x86] iommu/amd: Fix line-break in error log reporting - [armhf] dts: sun8i: a23/a33: Fix OPP DTC warnings - [armhf] dts: sun8i: v3s: Change pinctrl nodes to avoid warning - nfsd: fix a warning in __cld_pipe_upcall() - bpf: btf: implement btf_name_valid_identifier() - bpf: btf: check name validity for various types - [armhf] OMAP1/2: fix SoC name printing - [arm64] dts: meson-gxl-libretech-cc: fix GPIO lines names - [arm64] dts: meson-gxbb-nanopi-k2: fix GPIO lines names - [arm64] dts: meson-gxbb-odroidc2: fix GPIO lines names - [arm64] dts: meson-gxl-khadas-vim: fix GPIO lines names - net/x25: fix called/calling length calculation in x25_parse_address_block - net/x25: fix null_x25_address handling - tcp: make tcp_space() aware of socket backlog - tcp: fix off-by-one bug on aborting window-probing socket - tcp: fix SNMP under-estimation on failed retransmission - tcp: fix SNMP TCP timeout under-estimation - kbuild: fix single target build for external module - mtd: fix mtd_oobavail() incoherent returned value - [arm64] clk: meson: meson8b: fix the offset of vid_pll_dco's N value - [armhf,arm64] clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent - [arm64] clk: qcom: Fix MSM8998 resets - dlm: fix invalid cluster name warning - net/mlx4_core: Fix return codes of unsupported operations - pstore/ram: Avoid NULL deref in ftrace merging failure path - [mips*/octeon] cvmx_pko_mem_debug8: use oldest forward compatible definition - nfsd: Return EPERM, not EACCES, in some SETATTR cases - media: uvcvideo: Abstract streaming object lifetime - [armhf] dts: sun8i: h3: Fix the system-control register range - tty: Don't block on IO when ldisc change is pending - media: stkwebcam: Bugfix for wrong return values - sctp: frag_point sanity check - IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state - IB/hfi1: Close VNIC sdma_progress sleep window - mlx4: Use snprintf instead of complicated strcpy - [armhf] dts: sunxi: Fix PMU compatible strings - [armhf] dts: am335x-pdu001: Fix polarity of card detection input - net: aquantia: fix RSS table and key sizes - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - fuse: verify nlink - fuse: verify attributes - [x86] ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - [x86] ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - ALSA: pcm: oss: Avoid potential buffer overflows - [x86] ALSA: hda - Add mute led support for HP ProBook 645 G4 - [x86] Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus - [x86] Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers - [x86] Input: goodix - add upside-down quirk for Teclast X89 tablet - Input: Fix memory leak in psxpad_spi_probe - [i386] mm: Sync only to VMALLOC_END in vmalloc_sync_all() - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect - xfrm interface: fix memory leak on creation - xfrm interface: avoid corruption on changelink - xfrm interface: fix list corruption for x-netns - xfrm interface: fix management of phydev - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks - CIFS: Fix SMB2 oplock break processing - tty: vt: keyboard: reject invalid keycodes - can: slcan: Fix use-after-free Read in slcan_open - kernfs: fix ino wrap-around detection - jbd2: Fix possible overflow in jbd2_log_space_left() - [arm64] drm/msm: fix memleak on release - [i386] drm/i810: Prevent underflow in ioctl - [armhf,arm64] KVM: vgic: Don't rely on the wrong pending table - [x86] KVM: do not modify masked bits of shared MSRs - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES - [x86] KVM: Grab KVM's srcu lock when setting nested state - crypto: af_alg - cast ki_complete ternary op to int - [x86] crypto: ccp - fix uninitialized list head - crypto: ecdh - fix big endian bug in ECC library - crypto: user - fix memory leak in crypto_report (CVE-2019-19062) - mwifiex: update set_mac_address logic - can: ucan: fix non-atomic allocation in completion handler - RDMA/qib: Validate ->show()/store() callbacks before calling them - iomap: Fix pipe page leakage during splicing - thermal: Fix deadlock in thermal thermal_zone_device_check - vcs: prevent write access to vcsu devices (CVE-2019-19252) - binder: Fix race between mmap() and binder_alloc_print_pages() - binder: Handle start==NULL in binder_update_page_range() - ALSA: hda - Fix pending unsol events at shutdown - perf script: Fix invalid LBR/binary mismatch error - splice: don't read more than available pipe space - iomap: partially revert 4721a601099 (simulated directio short read on EFAULT) - xfs: add missing error check in xfs_prepare_shift() - ASoC: rsnd: fixup MIX kctrl registration - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) - net: qrtr: fix memort leak in qrtr_tun_write_iter (CVE-2019-19079) - appletalk: Fix potential NULL pointer dereference in unregister_snap_client (CVE-2019-19227) - appletalk: Set error code if register_snap_client failed https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.90 - usb: gadget: configfs: Fix missing spin_lock_init() - [x86] usb: gadget: pch_udc: fix use after free - scsi: qla2xxx: Fix driver unload hang - [arm64] media: venus: remove invalid compat_ioctl32 handler - USB: uas: honor flag to avoid CAPACITY16 - USB: uas: heed CAPACITY_HEURISTICS - usb: Allow USB device to be warm reset in suspended state - staging: rtl8188eu: fix interface sanity check - staging: rtl8712: fix interface sanity check - staging: gigaset: fix general protection fault on probe - staging: gigaset: fix illegal free on probe errors - staging: gigaset: add endpoint-type sanity check - usb: xhci: only set D3hot for pci device - xhci: Fix memory leak in xhci_add_in_port() - xhci: Increase STS_HALT timeout in xhci_suspend() - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. - [armhf] dts: pandora-common: define wl1251 as child node of mmc3 - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit - USB: atm: ueagle-atm: add missing endpoint check - USB: idmouse: fix interface sanity checks - USB: serial: io_edgeport: fix epic endpoint lookup - usb: roles: fix a potential use after free - USB: adutux: fix interface sanity check - usb: core: urb: fix URB structure initialization function - usb: mon: Fix a deadlock in usbmon between mmap and read - tpm: add check after commands attribs tab allocation - virtio-balloon: fix managed page counts when migrating pages between zones - [armhf,arm64] usb: dwc3: gadget: Fix logical condition - [armhf,arm64] usb: dwc3: ep0: Clear started flag on completion - btrfs: check page->mapping when loading free space cache - btrfs: use refcount_inc_not_zero in kill_all_nodes - Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc - Btrfs: fix negative subv_writers counter and data space leak after buffered write - btrfs: Avoid getting stuck during cyclic writebacks - btrfs: Remove btrfs_bio::flags member - Btrfs: send, skip backreference walking for extents with many references - btrfs: record all roots for rename exchange on a subvol - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer - rtlwifi: rtl8192de: Fix missing enable interrupt flag - ovl: fix corner case of non-unique st_dev;st_ino - ovl: relax WARN_ON() on rename to self - [armhf] hwrng: omap - Fix RNG wait loop timeout - dm writecache: handle REQ_FUA - dm zoned: reduce overhead of backing device checks - workqueue: Fix spurious sanity check failures in destroy_workqueue() - workqueue: Fix pwq ref leak in rescuer_thread() - ASoC: rt5645: Fixed buddy jack support. - ASoC: rt5645: Fixed typo for buddy jack support. - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report - md: improve handling of bio with REQ_PREFLUSH in md_flush_request() - blk-mq: avoid sysfs buffer overflow with too many CPU cores - cgroup: pids: use atomic64_t for pids->limit - ar5523: check NULL before memcpy() in ar5523_cmd() - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported - media: cec.h: CEC_OP_REC_FLAG_ values were swapped - cpuidle: Do not unset the driver if it is there already - erofs: zero out when listxattr is called with no xattr - [x86] intel_th: Fix a double put_device() in error path - [x86] intel_th: pci: Add Ice Lake CPU support - [x86] intel_th: pci: Add Tiger Lake CPU support - PM / devfreq: Lock devfreq in trans_stat_show - [ppc64el] cpufreq: powernv: fix stack bloat and hard limit on number of CPUs - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge - ACPI: OSL: only free map once in osl.c - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() - ACPI: PM: Avoid attaching ACPI PM domain to certain devices - [arm64] pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() - [armhf] pinctrl: samsung: Add of_node_put() before return in error path - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card - [armhf] dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity - ppdev: fix PPGETTIME/PPSETTIME ioctls - [ppc64el] Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB - [ppc64el] xive: Prevent page fault issues in the machine crash handler - [ppc64el] Allow flush_icache_range to work across ranges >4GB - [ppc64el] xive: Skip ioremap() of ESB pages for LSI interrupts - video/hdmi: Fix AVI bar unpack - quota: Check that quota is not dirty before release - ext2: check err when partial != NULL - quota: fix livelock in dquot_writeback_dquots - ext4: Fix credit estimate for final inode freeing - reiserfs: fix extended attributes on the root directory - block: fix single range discard merge - [s390x] scsi: zfcp: trace channel log even for FCP command responses - scsi: qla2xxx: Fix DMA unmap leak - scsi: qla2xxx: Fix hang in fcport delete path - scsi: qla2xxx: Fix session lookup in qlt_abort_work() - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value - scsi: qla2xxx: Fix message indicating vectors used by driver - scsi: qla2xxx: Fix SRB leak on switch command timeout - xhci: make sure interrupts are restored to correct state - usb: typec: fix use after free in typec_register_port() - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 - scsi: lpfc: Cap NPIV vports to 256 - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE - scsi: lpfc: Correct topology type reporting on G7 adapters - sch_cake: Correctly update parent qlen when splitting GSO packets - net/smc: do not wait under send_lock - [arm64] net: hns3: clear pci private data when unload hns3 driver - [arm64] net: hns3: change hnae3_register_ae_dev() to int - [arm64] net: hns3: Check variable is valid before assigning it to another - [arm64] scsi: hisi_sas: send primitive NOTIFY to SSP situation only - [arm64] scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G - [x86] MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models - [x86] MCE/AMD: Carve out the MC4_MISC thresholding quirk - ath10k: fix fw crash by moving chip reset after napi disabled - [ppc64el] Fix vDSO clock_getres() - ext4: work around deleting a file with i_nlink == 0 safely (CVE-2019-19447) - mm/shmem.c: cast the type of unmap_start to u64 - rtc: disable uie before setting time and enable after - splice: only read in as much information as there is pipe buffer space - ext4: fix a bug in ext4_wait_for_tail_page_commit - [armhf,arm64] mfd: rk808: Fix RK818 ID template - mm, thp, proc: report THP eligibility for each vma - [s390x] smp,vdso: fix ASCE handling - blk-mq: make sure that line break can be printed - workqueue: Fix missing kfree(rescuer) in destroy_workqueue() - perf callchain: Fix segfault in thread__resolve_callchain_sample() - gre: refetch erspan header from skb->data after pskb_may_pull() - sunrpc: fix crash when cache_head become valid before update - net/mlx5e: Fix SFF 8472 eeprom length - leds: trigger: netdev: fix handling on interface rename - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - of: overlay: add_changeset_property() memory leak - kernel/module.c: wakeup processes in module_wq on module unload - cifs: Fix potential softlockups while refreshing DFS cache - [x86] gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist - raid5: need to set STRIPE_HANDLE for batch head - scsi: qla2xxx: Change discovery state before PLOGI - [x86] iio: imu: mpu6050: add missing available scan masks - idr: Fix idr_get_next_ul race with idr_remove - of: unittest: fix memory leak in attach_node_and_children https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91 - inet: protect against too small mtu values. - mqprio: Fix out-of-bounds access in mqprio_dump - net: bridge: deny dev_set_mac_address() when unregistering - net: dsa: fix flow dissection on Tx path - net: ethernet: ti: cpsw: fix extra rx interrupt - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues - [arm64] net: thunderx: start phy before starting autonegotiation - openvswitch: support asymmetric conntrack - tcp: md5: fix potential overestimation of TCP option space - tipc: fix ordering of tipc module init and exit routine - net/mlx5e: Query global pause state before setting prio2buffer - tcp: fix rejected syncookies due to stale timestamps - tcp: tighten acceptance of ACKs not matching a child socket - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() - [arm64] Revert "arm64: preempt: Fix big-endian when checking preempt count in assembly" - mmc: block: Make card_busy_detect() a bit more generic - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response - PCI/PM: Always return devices to D0 when thawing - PCI: pciehp: Avoid returning prematurely from sysfs requests - [x86] PCI: Fix Intel ACS quirk UPDCR register address - PCI/MSI: Fix incorrect MSI-X masking on resume - [arm64] PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 - [arm64] rpmsg: glink: Set tail pointer to 0 at end of FIFO - [arm64] rpmsg: glink: Fix reuse intents memory leak issue - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case - [arm64] rpmsg: glink: Put an extra reference during cleanup - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling - [arm64] rpmsg: glink: Don't send pending rx_done during remove - [arm64] rpmsg: glink: Free pending deferred work on remove - cifs: smbd: Return -EAGAIN when transport is reconnecting - cifs: smbd: Add messages on RDMA session destroy and reconnection - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE - cifs: Don't display RDMA transport on reconnect - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect - CIFS: Close open handle after interrupted close - [armhf] tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() - vfio/pci: call irq_bypass_unregister_producer() before freeing irq - dma-buf: Fix memory leak in sync_file_merge() - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching - dm mpath: remove harmful bio-based optimization - dm btree: increase rebalance threshold in __rebalance2() - scsi: iscsi: Fix a potential deadlock in the timeout handler - scsi: qla2xxx: Change discovery state before PLOGI - drm/radeon: fix r1xx/r2xx register checker for POT textures - xhci: fix USB3 device initiated resume race with roothub autosuspend https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.92 - af_packet: set defaule value for tmo - [amd64] fjes: fix missed check in fjes_acpi_add - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl - net: qlogic: Fix error paths in ql_alloc_large_buffers() - net: usb: lan78xx: Fix suspend/resume PHY register access error - qede: Disable hardware gro when xdp prog is installed - qede: Fix multicast mac configuration - sctp: fully initialize v4 addr in some functions - btrfs: don't double lock the subvol_sem for rename exchange - btrfs: do not call synchronize_srcu() in inode_tree_del - Btrfs: fix missing data checksums after replaying a log tree - btrfs: send: remove WARN_ON for readonly mount - btrfs: abort transaction after failed inode updates in create_subvol - btrfs: skip log replay on orphaned roots - btrfs: do not leak reloc root if we fail to read the fs root - btrfs: handle ENOENT in btrfs_uuid_tree_iterate - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues - ALSA: pcm: Avoid possible info leaks from PCM stream buffers - ALSA: hda/ca0132 - Keep power on during processing DSP response - ALSA: hda/ca0132 - Avoid endless loop - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers - drm/amdgpu: grab the id mgr lock while accessing passid_mapping - spi: Add call to spi_slave_abort() function when spidev driver is released - [x86] staging: rtl8192u: fix multiple memory leaks on error path - staging: rtl8188eu: fix possible null dereference - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063) - libertas: fix a potential NULL pointer dereference - ath10k: fix backtrace on coredump - IB/iser: bound protection_sg size by data_sg size - [arm64] media: venus: core: Fix msm8996 frequency table - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq - pinctrl: devicetree: Avoid taking direct reference to device name string - [amd64] drm/amdkfd: fix a potential NULL pointer dereference - [arm64] media: venus: Fix occasionally failures to suspend - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller - block: Fix writeback throttling W=1 compiler warnings - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (CVE-2019-19057) - drm/drm_vblank: Change EINVAL by the correct errno - media: cx88: Fix some error handling path in 'cx8800_initdev()' - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0 - [x86] mm: Use the correct function type for native_set_fixmap() - ath10k: Correct error handling of dma_map_single() - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode - perf report: Add warning when libunwind not compiled in - usb: usbfs: Suppress problematic bind and unbind uevents. - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req - Bluetooth: Workaround directed advertising bug in Broadcom controllers - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL - [x86] mce: Lower throttling MCE messages' priority to warning - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot - ipmi: Don't allow device module unload when in use - [x86] ioapic: Prevent inconsistent state when moving an interrupt - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill() - i40e: initialize ITRN registers with correct values - net: phy: dp83867: enable robust auto-mdix - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210 - ACPI: button: Add DMI quirk for Medion Akoya E2215T - RDMA/qedr: Fix memory leak in user qp and mr - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle - [s390x] time: ensure get_clock_monotonic() returns monotonic values - [s390x] mm: add mm_pxd_folded() checks to pxd_free() - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout - libata: Ensure ata_port probe has completed before detach - loop: fix no-unmap write-zeroes request behavior - Bluetooth: Fix advertising duplicated flags - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() - ixgbe: protect TX timestamping from API misuse - media: rcar_drif: fix a memory disclosure (CVE-2019-18786) - media: v4l2-core: fix touch support in v4l_g_fmt - rfkill: allocate static minor - bnx2x: Fix PF-VF communication over multi-cos queues. - ALSA: timer: Limit max amount of slave instances - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() - perf probe: Fix to find range-only function instance - perf probe: Fix to list probe event with correct line number - perf jevents: Fix resource leak in process_mapfile() and main() - perf probe: Walk function lines in lexical blocks - perf probe: Fix to probe an inline function which has no entry pc - perf probe: Fix to show ranges of variables in functions without entry_pc - perf probe: Fix to show inlined function callsite without entry_pc - perf probe: Fix to probe a function which has no entry pc - perf tools: Splice events onto evlist even on error - perf parse: If pmu configuration fails free terms - perf probe: Skip overlapped location on searching variables - perf probe: Return a better scope DIE if there is no best scope - perf probe: Fix to show calling lines of inlined functions - perf probe: Skip end-of-sequence and non statement lines - perf probe: Filter out instances except for inlined subroutine and subprogram - ath10k: fix get invalid tx rate for Mesh metric - media: pvrusb2: Fix oops on tear-down when radio support is not present - ice: delay less - [amd64] spi: pxa2xx: Add missed security checks - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile - iio: dac: ad5446: Add support for new AD5600 DAC - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint - [s390x] disassembler: don't hide instruction addresses - nvme: Discard workaround for non-conformant devices - parport: load lowlevel driver if ports not found - bcache: fix static checker warning in bcache_device_free() - cpufreq: Register drivers only after CPU devices have been registered - tracing: use kvcalloc for tgid_map array allocation - tracing/kprobe: Check whether the non-suffixed symbol is notrace - bcache: fix deadlock in bcache_allocator - iwlwifi: mvm: fix unaligned read of rx_pkt_status - [arm64] spi: tegra20-slink: add missed clk_unprepare - tun: fix data-race in gro_normal_list() - crypto: virtio - deal with unsupported input sizes - btrfs: don't prematurely free work in end_workqueue_fn() - btrfs: don't prematurely free work in run_ordered_work() - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1 - [x86] insn: Add some Intel instructions to the opcode map - brcmfmac: remove monitor interface when detaching - iwlwifi: check kasprintf() return value - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED - net: phy: initialise phydev speed and duplex sanely - btrfs: don't prematurely free work in reada_start_machine_worker() - btrfs: don't prematurely free work in scrub_missing_raid56_worker() - Revert "mmc: sdhci: Fix incorrect switch to HS mode" - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (CVE-2019-19947) - usb: xhci: Fix build warning seen with CONFIG_PM=n - [s390x] ftrace: fix endless recursion in function_graph tracer - btrfs: return error pointer from alloc_test_extent_buffer - usbip: Fix receive error in vhci-hcd when using scatter-gather - usbip: Fix error path of vhci_recv_ret_submit() - cpufreq: Avoid leaving stale IRQ work items during CPU offline - [x86] intel_th: pci: Add Comet Lake PCH-V support - [x86] intel_th: pci: Add Elkhart Lake SOC support - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037) - ext4: check for directory entries too close to block end - ext4: unlock on error in ext4_expand_extra_isize() - [arm64] KVM: Ensure 'params' is initialised when looking up sys register - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] - [powerpc*] irq: fix stack overflow verification - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register - mmc: sdhci: Update the tuning failed messages to pr_debug level - mmc: sdhci: Workaround broken command queuing on Intel GLK - mmc: sdhci: Add a quirk for broken command queuing - nbd: fix shutdown and recv work deadlock - perf probe: Fix to show function entry line as probe-able https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.93 - scsi: lpfc: Fix discovery failures when target device connectivity bounces - scsi: mpt3sas: Fix clear pending bit in ioctl status - scsi: lpfc: Fix locking on mailbox command completion - Input: atmel_mxt_ts - disable IRQ across suspend - f2fs: fix to update time in lazytime mode - [arm64,armhf] iommu: rockchip: Free domain on .domain_free - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory - scsi: target: compare full CHAP_A Algorithm strings - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices - scsi: csiostor: Don't enable IRQs too early - [arm64] scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec() - [ppc64el] pseries: Mark accumulate_stolen_time() as notrace - [ppc64el] pseries: Don't fail hash page table insert for bolted mapping - clocksource/drivers/timer-of: Use unique device name instead of timer - [ppc64el] security/book3s64: Report L1TF status in sysfs - [ppc64el] book3s64/hash: Add cond_resched to avoid soft lockup warning - ext4: update direct I/O read lock pattern for IOCB_NOWAIT - ext4: iomap that extends beyond EOF should be marked dirty - jbd2: Fix statistics for the number of logged blocks - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow - f2fs: fix to update dir's i_pino during cross_rename - [arm64] clk: qcom: Allow constant ratio freq tables for rcg - clk: clk-gpio: propagate rate change to parent - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences - [ppc64el] PCI: rpaphp: Fix up pointer to first drc-info entry - scsi: ufs: fix potential bug which ends in system hang - [ppc64el] PCI: rpaphp: Don't rely on firmware feature to imply drc-info support - [ppc64el] PCI: rpaphp: Annotate and correctly byte swap DRC properties - [ppc64el] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info - [ppc64el] powerpc/security: Fix wrong message when RFI Flush is disable - bcache: at least try to shrink 1 node in bch_mca_scan() - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening - libnvdimm/btt: fix variable 'rc' set but not used - HID: Improve Windows Precision Touchpad detection. - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device - watchdog: Fix the race between the release of watchdog_core_data and cdev - scsi: pm80xx: Fix for SATA device discovery - scsi: ufs: Fix error handing during hibern8 enter - scsi: scsi_debug: num_tgts must be >= 0 - scsi: iscsi: Don't send data to unbound connection - scsi: target: iscsi: Wait for all commands to finish before freeing a session - apparmor: fix unsigned len comparison with less than zero - scripts/kallsyms: fix definitely-lost memory leak - cdrom: respect device capabilities during opening action - perf script: Fix brstackinsn for AUXTRACE - perf regs: Make perf_reg_name() return "unknown" instead of NULL - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR - [s390x] cpum_sf: Check for SDBT and SDB consistency - ocfs2: fix passing zero to 'PTR_ERR' warning - kernel: sysctl: make drop_caches write-only - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK - [x86] mce: Fix possibly incorrect severity calculation on AMD - net, sysctl: Fix compiler warning when only cBPF is present - netfilter: nf_queue: enqueue skbs with NULL dst - ALSA: hda - Downgrade error message for single-cmd fallback - bonding: fix active-backup transition after link failure - perf strbuf: Remove redundant va_end() in strbuf_addv() - Make filldir[64]() verify the directory entry filename is valid (CVE-2019-10220) - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (CVE-2019-10220) - netfilter: ebtables: compat: reject all padding in matches/watchers - 6pack,mkiss: fix possible deadlock - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() - inetpeer: fix data-race in inet_putpeer / inet_putpeer - net: add a READ_ONCE() in skb_peek_tail() - net: icmp: fix data-race in cmp_global_allow() - hrtimer: Annotate lockless access to timer->state - net: ena: fix napi handler misbehavior when the napi budget is zero - net/mlxfw: Fix out-of-memory error in mfa2 flash burning - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs - ptp: fix the race between the release of ptp_clock and cdev - tcp: Fix highest_sack and highest_sack_seq - udp: fix integer overflow while computing available space in sk_rcvbuf - vhost/vsock: accept only packets with the right dst_cid - net: add bool confirm_neigh parameter for dst_ops.update_pmtu - ip6_gre: do not confirm neighbor when do pmtu update - gtp: do not confirm neighbor when do pmtu update - net/dst: add new function skb_dst_update_pmtu_no_confirm - tunnel: do not confirm neighbor when do pmtu update - vti: do not confirm neighbor when do pmtu update - sit: do not confirm neighbor when do pmtu update - net/dst: do not confirm neighbor for vxlan and geneve pmtu update - gtp: do not allow adding duplicate tid and ms_addr pdp context - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt - tcp/dccp: fix possible race __inet_lookup_established() - tcp: do not send empty skb from tcp_write_xmit() - gtp: fix wrong condition in gtp_genl_dump_pdp() - gtp: fix an use-after-free in ipv4_pdp_find() - gtp: avoid zero size hashtable - [arm64,armhf] pinctrl: baytrail: Really serialize all register accesses https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.94 - nvme_fc: add module to ops template to allow module references - nvme-fc: fix double-free scenarios on hw queues - drm/amdgpu: add check before enabling/disabling broadcast mode - drm/amdgpu: add cache flush workaround to gfx8 emit_fence - PM / devfreq: Fix devfreq_notifier_call returning errno - PM / devfreq: Set scaling_max_freq to max on OPP notifier error - PM / devfreq: Don't fail devfreq_dev_release if not in list - afs: Fix afs_find_server lookups for ipv4 peers - afs: Fix SELinux setting security label on /afs - RDMA/cma: add missed unregister_pernet_subsys in init failure - rxe: correctly calculate iCRC for unaligned payloads - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work - scsi: qla2xxx: Don't call qlt_async_event twice - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length - scsi: qla2xxx: Configure local loop for N2N target - scsi: qla2xxx: Send Notify ACK after N2N PLOGI - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI - scsi: iscsi: qla4xxx: fix double free in probe - scsi: libsas: stop discovering if oob mode is disconnected (CVE-2019-19965) - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit - usb: gadget: fix wrong endpoint desc - net: make socket read/write_iter() honor IOCB_NOWAIT - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP - md: raid1: check rdev before reference in raid1_sync_request func - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler - IB/mlx4: Follow mirror sequence of device add during device removal - IB/mlx5: Fix steering rule of drop and count - xen-blkback: prevent premature module unload - xen/balloon: fix ballooned page accounting without hotplug enabled - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen - xfs: fix mount failure crash on invalid iclog memory access - taskstats: fix data-race - drm: limit to INT_MAX in create_blob ioctl - netfilter: nft_tproxy: Fix port selector on Big Endian - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code - ALSA: usb-audio: fix set_format altsetting sanity check - ALSA: usb-audio: set the interface format after resume on Dell WD19 - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls - [mips*] Avoid VDSO ABI breakage due to global register variable - media: pulse8-cec: fix lost cec_transmit_attempt_done() call - media: cec: CEC 2.0-only bcast messages were ignored - media: cec: avoid decrementing transmit_queue_sz if it is 0 - media: cec: check 'transmit_in_progress', not 'transmitting' - mm/zsmalloc.c: fix the migrated zspage statistics. - memcg: account security cred as well to kmemcg - mm: move_pages: return valid node id in status if the page is already on the target node - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones - locks: print unsigned ino in /proc/locks - compat_ioctl: block: handle Persistent Reservations - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE - ata: libahci_platform: Export again ahci_platform_able_phys() - libata: Fix retrieving of active qcs - gpiolib: fix up emulated open drain outputs - tracing: Fix lock inversion in trace_event_enable_tgid_record() - tracing: Avoid memory leak in process_system_preds() - tracing: Have the histogram compare functions convert to u64 first - tracing: Fix endianness bug in histogram trigger - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer - ALSA: firewire-motu: Correct a typo in the clock proc string - exit: panic before exit_mm() on global init exit - [arm64] Revert support for execute-only user mappings - ftrace: Avoid potential division by zero in function profiler - [arm64] drm/msm: include linux/sched/task.h - PM / devfreq: Check NULL governor in available_governors_show - nfsd4: fix up replay_matches_cache() - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 - xfs: don't check for AG deadlock for realtime files in bunmapi - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table - Bluetooth: btusb: fix PM leak in error case of setup - Bluetooth: delete a stray unlock - Bluetooth: Fix memory leak in hci_connect_le_scan - media: flexcop-usb: ensure -EIO is returned on error condition - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809) - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP - bdev: Factor out bdev revalidation into a common helper - bdev: Refresh bdev size for disks without partitioning - scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails - drm/mst: Fix MST sideband up-reply failure handling - [ppc64el] pseries/hvconsole: Fix stack overread via udbg - [ppc64el] KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag - rxrpc: Fix possible NULL pointer access in ICMP handling - tcp: annotate tp->rcv_nxt lockless reads - net: core: limit nested device depth - ath9k_htc: Modify byte order for an error message - ath9k_htc: Discard undersized packets - xfs: periodically yield scrub threads to the scheduler - net: add annotations on hh->hh_len lockless accesses - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps - [s390x] smp: fix physical to logical CPU map for SMT - xen/blkback: Avoid unmapping unmapped grant pages - [x86] perf/x86/intel/bts: Fix the use of page_private() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.95 - bpf: Fix passing modified ctx to ld/abs/ind instruction - regulator: fix use after free issue - ASoC: max98090: fix possible race conditions - netfilter: ctnetlink: netns exit must wait for callbacks - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (CVE-2019-14901) - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec breakage - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89 - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs - efi/gop: Return EFI_SUCCESS if a usable GOP was found - efi/gop: Fix memory leak in __gop_query32/64() - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init() - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions() - ASoC: topology: Check return value for soc_tplg_pcm_create() - bnxt_en: Return error if FW returns more data than dump length - [mips*] bpf, mips: Limit to 33 tail calls - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS - [powerpc*] Ensure that swiotlb buffer is allocated from low memory - btrfs: Fix error messages in qgroup_rescan_init - bpf: Clear skb->tstamp in bpf_redirect when necessary - bnx2x: Do not handle requests from VFs after parity - bnx2x: Fix logic to get total no. of PFs per engine - cxgb4: Fix kernel panic while accessing sge_info - net: usb: lan78xx: Fix error message format specifier - rfkill: Fix incorrect check to avoid NULL pointer dereference - iommu/iova: Init the struct iova to fix the possible memleak - [x86] perf/x86/intel: Fix PT PMI handling - fs: avoid softlockups in s_inodes iterators - [arm64,armhf] net: stmmac: Do not accept invalid MTU values - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission start - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly - [s390x] dasd: fix memleak in path handling error case - block: fix memleak when __blk_rq_map_user_iov() is failed - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) - [x86] hv_netvsc: Fix unwanted rx_table reset - [powerpc*] vcpu: Assume dedicated processors as non-preempt - [powerpc*] spinlocks: Include correct header for static key - [armhf] cpufreq: imx6q: read OCOTP through nvmem for imx6ul/imx6ull - gtp: fix bad unlock balance in gtp_encap_enable_socket - macvlan: do not assume mac_header is set in macvlan_broadcast() - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU port. - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes - net: usb: lan78xx: fix possible skb leak - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM - sch_cake: avoid possible divide by zero in cake_enqueue() - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK - vxlan: fix tos value before xmit - vlan: fix memory leak in vlan_dev_set_egress_priority - vlan: vlan_changelink() should propagate errors - net: sch_prio: When ungrafting, replace with FIFO - [arm64,armhf] usb: dwc3: gadget: Fix request complete check - USB: core: fix check for duplicate endpoints - USB: serial: option: add Telit ME910G1 0x110a composition - usb: missing parentheses in USE_NEW_SCHEME https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96 - chardev: Avoid potential use-after-free in 'chrdev_open()' - i2c: fix bus recovery stop mode timing - [arm64,armhf] usb: chipidea: host: Disable port power only if previously enabled - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 - ALSA: hda/realtek - Add new codec supported for ALCS1200A - ALSA: hda/realtek - Set EAPD control to default for ALC222 - [x86] ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined - tracing: Change offset type to s32 in preempt/irq tracepoints - HID: Fix slab-out-of-bounds read in hid_field_extract - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll - HID: hid-input: clear unmapped usages - Input: add safety guards to input_set_keycode() - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model - drm/fb-helper: Round up bits_per_pixel if possible - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ - can: kvaser_usb: fix interface sanity check - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism - [x86] staging: vt6656: set usb_set_intfdata on driver fail. - USB: serial: option: add ZLP support for 0x1bc7/0x9010 - [arm64,armhf] usb: musb: fix idling for suspend after disconnect interrupt - [arm64,armhf] usb: musb: Disable pullup at init - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 - serdev: Don't claim unsupported ACPI serial devices - tty: link tty and port before configuring it as console - tty: always relink the port - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (CVE-2019-14895) - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (CVE-2019-19056) - scsi: bfa: release allocated memory in case of error (CVE-2019-19066) - rtl8xxxu: prevent leaking urb (CVE-2019-19068) - ath10k: fix memory leak (CVE-2019-19078) - HID: hiddev: fix mess in hiddev_open() - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct - netfilter: conntrack: dccp, sctp: handle null timeout argument - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present - [x86] drm/i915/gen9: Clear residual context state on context switch (CVE-2019-14615) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.97 - hidraw: Return EPOLLOUT from hidraw_poll - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll - HID: hidraw, uhid: Always report EPOLLOUT - cfg80211/mac80211: make ieee80211_send_layer2_update a public function - mac80211: Do not send Layer 2 Update frame before authorization (CVE-2019-5108) - f2fs: Move err variable to function scope in f2fs_fill_dentries() - f2fs: check memory boundary by insane namelen - f2fs: check if file namelen exceeds max value (CVE-2019-9445) - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (CVE-2019-15217) - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (CVE-2019-19058) - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (CVE-2019-19059) - RDMA: Fix goto target to release the allocated memory (CVE-2019-19077) - dccp: Fix memleak in __feat_register_sp (CVE-2019-20096) - [x86] drm/i915: Fix use-after-free when destroying GEM context - ASoC: soc-core: Set dpcm_playback / dpcm_capture - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API - iommu: Remove device link to group on failure - gpio: Fix error message on out-of-range GPIO in lookup table - [s390x] qeth: fix false reporting of VNIC CHAR config failure - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set - cifs: Adjust indentation in smb2_open_file - afs: Fix missing cell comparison in afs_test_super() - drm/ttm: fix start page for huge page check in ttm_put_pages() (CVE-2019-19927) - drm/ttm: fix incrementing the page pointer for huge pages (CVE-2019-19927) - btrfs: simplify inode locking for RWF_NOWAIT - RDMA/mlx5: Return proper error value - RDMA/srpt: Report the SCSI residual to the initiator - scsi: enclosure: Fix stale device oops with hot replug - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 - [x86] platform/x86: GPD pocket fan: Use default values when wrong modparams are given - xprtrdma: Fix completion wait during device removal - crypto: virtio - implement missing support for output IVs - NFSv2: Fix a typo in encode_sattr() - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn - mei: fix modalias documentation - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume - [armhf] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6 - scsi: sd: enable compat ioctls for sed-opal - af_unix: add compat_ioctl support - compat_ioctl: handle SIOCOUTQNSD - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage - PCI/PTM: Remove spurious "d" from granularity message - [powerpc*] powernv: Disable native PCIe port management - [armhf] tty: serial: imx: use the sg count from dma_map_sg - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg - mtd: spi-nor: fix silent truncation in spi_nor_read() - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() - rtlwifi: Remove unnecessary NULL check in rtl_regd_init - f2fs: fix potential overflow - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() - [mips*] cacheinfo: report shared CPU map - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static - [arm64] dmaengine: k3dma: Avoid null pointer traversal - [amd64] ioat: ioat_alloc_ring() failure handling. - ocfs2: call journal flush to mark journal as empty after journal recovery when mount https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.98 - clk: Don't try to enable critical clocks if prepare failed - iio: buffer: align the size of scan bytes to size of the largest element - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx - USB: serial: option: Add support for Quectel RM500Q - USB: serial: opticon: fix control-message timeouts - USB: serial: option: add support for Quectel RM500Q in QDL mode - USB: serial: suppress driver bind attributes - USB: serial: ch341: handle unbound port at reset_resume - USB: serial: io_edgeport: handle unbound ports on URB completion - USB: serial: io_edgeport: add missing active-port sanity check - USB: serial: keyspan: handle unbound ports - USB: serial: quatech2: handle unbound ports - [x86] scsi: fnic: fix invalid stack access - scsi: mptfusion: Fix double fetch bug in ioctl - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection - ALSA: dice: fix fallback from protocol extension into limited functionality - ALSA: seq: Fix racy access for queue timer in proc read - ALSA: usb-audio: fix sync-ep altsetting sanity check - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator - block: fix an integer overflow in logical block size - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio number - LSM: generalize flag passing to security_capable - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() - usb: core: hub: Improved device recognition on remote wakeup - [x86] resctrl: Fix an imbalance in domain_remove_cpu() - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained - [amd64] x86/efistub: Disable paging at mixed mode entry - [x86] resctrl: Fix potential memory leak - perf hists: Fix variable name's inconsistency in hists__for_each() macro - perf report: Fix incorrectly added dimensions as switch perf data file - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid - btrfs: rework arguments of btrfs_unlink_subvol - btrfs: fix invalid removal of root ref - btrfs: do not delete mismatched root refs - btrfs: fix memory leak in qgroup accounting - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() - [armhf] dts: imx6qdl: Add Engicam i.Core 1.5 MX6 - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned - [arm64,armhf] net: stmmac: Enable 16KB buffer size - mm/huge_memory.c: make __thp_get_unmapped_area static - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment - bpf: Fix incorrect verifier simulation of ARSH under ALU32 - cfg80211: fix deadlocks in autodisconnect work - cfg80211: fix memory leak in cfg80211_cqm_rssi_update - cfg80211: fix page refcount issue in A-MSDU decap - netfilter: fix a use-after-free in mtype_destroy() - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct - netfilter: nft_tunnel: fix null-attribute check - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits - netfilter: nf_tables: store transaction list locally while requesting module - netfilter: nf_tables: fix flowtable list del corruption - NFC: pn533: fix bulk-message timeout - batman-adv: Fix DAT candidate selection on little endian systems - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() - [x86] hv_netvsc: Fix memory leak when removing rndis device - [arm64] net: hns: fix soft lockup when there is not enough memory - net: usb: lan78xx: limit size of local TSO packets - ptp: free ptp device pin descriptors properly - r8152: add missing endpoint sanity check - tcp: fix marked lost packets not being retransmitted - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk - tcp: refine rule to allow EPOLLOUT generation under mem pressure - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node - cfg80211: check for set_wiphy_params - tick/sched: Annotate lockless access to last_jiffies_update - drm/nouveau/bar/nv50: check bar1 vmm return value - drm/nouveau/bar/gf100: ensure BAR is mapped - drm/nouveau/mmu: qualify vmm during dtor - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr - scsi: esas2r: unlock on error in esas2r_nvram_read_direct() - scsi: qla4xxx: fix double free bug - scsi: bnx2i: fix potential use after free - scsi: target: core: Fix a pr_debug() argument - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan - scsi: core: scsi_trace: Use get_unaligned_be*() - perf probe: Fix wrong address verification . [ Joe Richey ] * [cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237) . [ Salvatore Bonaccorso ] * Refresh powerpc-fix-mcpu-options-for-spe-only-compiler.patch (Context changes in 4.19.88) * Drop 0027-RDMA-hns-Fix-the-bug-with-updating-rq-head-pointer-w.patch * Drop 0028-RDMA-hns-Bugfix-for-the-scene-without-receiver-queue.patch * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.88) * [rt] Update to 4.19.90-rt35: - Update "workqueue: rework" for workqueue changes in 4.19.90 * [rt] Drop 0245-Revert-arm64-preempt-Fix-big-endian-when-checking-pr.patch * Refresh 0013-scsi-hisi_sas-Relocate-some-codes-to-avoid-an-unused.patch for context changes in 4.19.93. * [rt] Refresh 0253-watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch (Context changes in 4.19.93) * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.97) . [ Ben Hutchings ] * [rt] Update to 4.19.94-rt38: - Refresh "x86/ioapic: Don't let setaffinity unmask threaded EOI interrupt too early" which was partly included in 4.19.92 * aufs: Update support patchset to aufs4.19.63+ 20200113; no functional changes * Bump ABI to 8 * libertas: Fix two buffer overflows at parsing bss descriptor (CVE-2019-14896, CVE-2019-14897) * wimax: i2400: fix memory leak (CVE-2019-19051) * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (CVE-2019-19051) * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511) . [ Noah Meyerhans ] * random: try to actively add entropy rather than passively wait for it (Closes: #948519) . [ Aurelien Jarno ] * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF. linux (4.19.87-1) buster; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - Revert "pwm: Set class for exported channels in sysfs" - cpufreq: schedutil: Don't skip freq update when limits change - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify - ALSA: hda - Let all conexant codec enter D3 when rebooting - HID: holtek: test for sanity of intfdata - HID: hiddev: avoid opening a disconnected device - HID: hiddev: do cleanup in failure of opening a device - Input: kbtab - sanity check for endpoint type - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - netfilter: ebtables: also count base chain policies - xen/pciback: remove set but not used variable 'old_state' - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules - [arm64] efi: fix variable 'si' set but not used - [arm64] unwind: Prohibit probing on return_address() - [arm64] mm: fix variable 'pud' set but not used - IB/core: Add mitigation for Spectre V1 - IB/mlx5: Fix MR registration flow to use UMR properly - IB/mad: Fix use-after-free in ib mad completion handling - [arm64] drm: msm: Fix add_gpu_components - [armhf] drm/exynos: fix missing decrement of retry counter - ocfs2: remove set but not used variable 'last_hash' - asm-generic: fix -Wtype-limits compiler warnings - [arm64] KVM: regmap: Fix unexpected switch fall-through - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - [x86] drm/i915/cfl: Add a new CFL PCI ID. - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - Input: psmouse - fix build error of multiple definition - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - net: dsa: Check existence of .port_mdb_add callback before calling it - net/mlx4_en: fix a memory leak bug - net/packet: fix race in tpacket_snd() - sctp: fix memleak in sctp_send_reset_streams - sctp: fix the transport error_count check - team: Add vlan tx offload to hw_enc_features - tipc: initialise addr_trail_end when setting node addresses - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - net/mlx5e: Use flow keys dissector to parse packets for ARFS - [arm64] mmc: sdhci-of-arasan: Do now show error message in case of deffered probe https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.69 - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - [mips*] kernel: only use i8253 clocksource with periodic clockevent - [mips*] fix cacheinfo - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - bonding: Force slave speed check after link state recovery for 802.3ad - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - can: dev: call netif_carrier_off() in register_candev() - can: gw: Fix error path of cgw_module_init - [armhf,arm64] ASoC: rockchip: Fix mono capture - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - net/ethernet/qlogic/qed: force the string buffer NULL-terminated - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - [x86] lib/cpu: Address missing prototypes warning - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - [arm64] KVM: Don't write junk to sysregs on reset - [armhf] KVM: Don't write junk to CP15 registers on reset - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - Revert "dm bufio: fix deadlock with loop device" (regression in 4.19.61) - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX - gpiolib: never report open-drain/source lines as 'input' to user-space - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - [x86] apic: Handle missing global clockevent gracefully - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - [x86] boot: Save fields explicitly, zero out everything else - [x86] boot: Fix boot regression caused by bootparam sanitizing - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() - dm raid: add missing cleanup in raid_ctr() - dm space map metadata: fix missing store of apply_bops() return value - dm table: fix invalid memory accesses with too high sector number - dm zoned: improve error handling in reclaim - dm zoned: improve error handling in i/o map code - dm zoned: properly handle backing device failure - genirq: Properly pair kobject_del() with kobject_add() - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - xfs: don't trip over uninitialized buffer on extent read of corrupted inode - xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h - xfs: Add helper function xfs_attr_try_sf_addname - xfs: Add attibute set and helper functions - xfs: Add attibute remove and helper functions - xfs: always rejoin held resources during defer roll - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - [ppc64el] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.70 - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Only update d_fsdata if different in afs_d_revalidate() - nvmet-loop: Flush nvme_delete_wq when removing the port - nvme: fix a possible deadlock when passthru commands sent to a multipath device - nvme-pci: Fix async probe remove race - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - [arm64] cpufeature: Don't treat granule sizes as strict - drm/ast: Fixed reboot test may cause system hanged - [x86] tools: hv: fix KVP and VSS daemons exit code - [x86] drm/i915: fix broadwell EU computation - [arm*] watchdog: bcm2835_wdt: Fix module autoload - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value - [armhf] drm/tilcdc: Register cpufreq notifier after we have initialized crtc - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Default fib6_type to RTN_UNICAST when not set - net/smc: make sure EPOLLOUT is raised - tcp: make sure EPOLLOUT wont be missed - ipv4/icmp: fix rt dst dev null pointer dereference - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n - ALSA: usb-audio: Check mixer unit bitmap yet more strictly - ALSA: line6: Fix memory leak at line6_init_pcm() error path - ALSA: hda - Fixes inverted Conexant GPIO mic mute led - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - [x86] kvm: skip populating logical dest map if apic is not sw enabled - [x86] KVM: Don't update RIP or do single-step on faulting emulation - [amd64] uprobes: Fix detection of 32-bit user mode - [x86] apic: Do not initialize LDR and DFR for bigsmp - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has stopped - usb: host: ohci: fix a race condition between shutdown and irq - usb: host: xhci: rcar: Fix typo in compatible string matching - USB: storage: ums-realtek: Update module parameter description for auto_delink_en - USB: storage: ums-realtek: Whitelist auto-delink support - [x86] mei: me: add Tiger Lake point LP device ID - mmc: core: Fix init of SD cards reporting an invalid VDD range - stm class: Fix a double free of stm_source_device - [x86] intel_th: pci: Add support for another Lewisburg PCH - [x86] intel_th: pci: Add Tiger Lake support - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - [x86] drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash - [x86] VMCI: Release resource if the work is already queued - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - Revert "cfg80211: fix processing world regdomain when non modular" - mac80211: fix possible sta leak - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - [ppc64el] KVM: Book3S: Fix incorrect guest-to-user-translation error handling - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - NFS: Clean up list moves of struct nfs_page - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Pass error information to the pgio error cleanup routine - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - [x86] i2c: piix4: Fix port selection for AMD Family 16h Model 30h - mt76: mt76x0u: do not reset radio on resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.71 - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 4.19.67) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.72 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - [armhf,arm64] net: stmmac: dwmac-rk: Don't fail if phy regulator is absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) - [x86] boot: Preserve boot_params.secure_boot from sanitizing - [arm*] spi: bcm2835aux: unifying code between polling and interrupt driven code - [arm*] spi: bcm2835aux: remove dangerous uncontrolled read of fifo - [arm*] spi: bcm2835aux: fix corruptions for longer spi transfers - netfilter: nf_tables: use-after-free in failing rule with bound set - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - Bluetooth: btqca: Add a short delay before downloading the NVM - [ppc64el] ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug - liquidio: add cleanup in octeon_setup_iq() - net: myri10ge: fix memory leaks - lan78xx: Fix memory leaks - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - kprobes: Fix potential deadlock in kprobe_optimizer() - HID: cp2112: prevent sleeping function called from invalid context - [amd64] boot/compressed: Fix boot on machines with broken E820 table - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel callback - [x86] Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - IB/mlx4: Fix memory leaks - infiniband: hfi1: fix a memory leak bug - infiniband: hfi1: fix memory leaks - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - [armhf,arm64] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - [armhf,arm64] KVM: VGIC: Properly initialise private IRQ affinity - [amd64] boot/compressed: Fix missing initialization in find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.73 - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - [x86] ALSA: hda/realtek - Add quirk for HP Pavilion 15 - [x86] ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - [x86] ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() - [ppc64el] tm: Fix FP/VMX unavailable exceptions inside a transaction (CVE-2019-15030) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - [x86] hv_sock: Fix hang when a connection is closed - Blk-iolatency: warn on negative inflight IO counter - blk-iolatency: fix STS_AGAIN handling - {nl,mac}80211: fix interface combinations on crypto controlled devices - timekeeping: Use proper ktime_add when adding nsecs in coarse offset - selftests: fib_rule_tests: use pre-defined DEV_ADDR - [x86] ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() - [ppc64el] mark start_here_multiplatform as __ref - [arm64] dts: rockchip: enable usb-host regulators at boot on rk3328-rock64 - nvme-fc: use separate work queue to avoid warning - [armhf] clk: s2mps11: Add used attribute to s2mps11_dt_match - [arm64] remoteproc: qcom: q6v5: shore up resource probe handling - modules: always page-align module section allocations - kernel/module: Fix mem leak in module_add_modinfo_attrs - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" - scsi: qla2xxx: Move log messages before issuing command to firmware - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h - [x86] Drivers: hv: kvp: Fix two "this statement may fall through" warnings - [x86] hibernate: Fix nosave_regions setup for hibernation - [arm64] remoteproc: qcom: q6v5-mss: add SCM probe dependency - drm/amdgpu/gfx9: Update gfx9 golden settings. - drm/amdgpu: Update gc_9_0 golden settings. - [x86] KVM: hyperv: enforce vp_index < KVM_MAX_VCPUS - [x86] KVM: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' variables - [x86] KVM: hyperv: keep track of mismatched VP indexes - [x86] KVM: hyperv: define VP assist page helpers - [x86] kvm/lapic: preserve gfn_to_hva_cache len on cache reinit - [x86] drm/i915: Fix intel_dp_mst_best_encoder() - [x86] drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE - [x86] drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/atomic_helper: Disallow new modesets on unregistered connectors - [x86] Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up - powerplay: Respect units on max dcfclk watermark - drm/amd/pp: Fix truncated clock value when set watermark - drm/amd/dm: Understand why attaching path/tile properties are needed - [s390x] zcrypt: reinit ap queue state machine during device probe - [x86] drm/i915: Restore sane defaults for KMS on GEM error load - [x86] drm/i915: Cleanup gt powerstate from gem - [ppc64el] KVM: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch - Btrfs: clean up scrub is_dev_replace parameter - Btrfs: fix deadlock with memory reclaim during scrub - btrfs: Remove extent_io_ops::fill_delalloc - btrfs: Fix error handling in btrfs_cleanup_ordered_extents - scsi: megaraid_sas: Fix combined reply queue mode detection - scsi: megaraid_sas: Add check for reset adapter bit - scsi: megaraid_sas: Use 63-bit DMA addressing - [ppc64el] pkeys: Fix handling of pkey state across fork() - btrfs: volumes: Make sure no dev extent is beyond device boundary - btrfs: Use real device structure to verify dev extent - IB/uverbs: Fix OOPs upon device disassociation - drm/vblank: Allow dynamic per-crtc max_vblank_count - [x86] drm/i915/ilk: Fix warning when reading emon_status with no output - tpm: Fix some name collisions with drivers/char/tpm.h - bcache: replace hard coded number with BUCKET_GC_GEN_MAX - bcache: treat stale && dirty keys as bad keys - [x86] KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run - [armhf] iio: adc: exynos-adc: Add S5PV210 variant - [armhf] iio: adc: exynos-adc: Use proper number of channels for Exynos4x12 - mt76: fix corrupted software generated tx CCMP PN - drm/nouveau: Don't WARN_ON VCPI allocation failures - iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules - iwlwifi: add new card for 9260 series - spi: spi-gpio: fix SPI_CS_HIGH capability - [ppc64el] kvm: Save and restore host AMR/IAMR/UAMOR - btrfs: scrub: pass fs_info to scrub_setup_ctx - btrfs: scrub: move scrub_setup_ctx allocation out of device_list_mutex - btrfs: scrub: fix circular locking dependency warning - btrfs: init csum_list before possible free - [arm64] PCI: qcom: Fix error handling in runtime PM support - [arm64] PCI: qcom: Don't deassert reset GPIO during probe - CIFS: Fix error paths in writeback code - CIFS: Fix leaking locked VFS cache pages in writeback retry - [x86] drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set - [x86] drm/i915: Sanity check mmap length against object size - [x86] usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps - IB/mlx5: Reset access mask when looping inside page fault handler - kvm: mmu: Fix overflow on kvm mmu page limit calculation - [x86] kvm: move kvm_load/put_guest_xcr0 into atomic context - [x86] KVM: Always use 32-bit SMRAM save state for 32-bit kernels - cifs: Fix lease buffer length error (CVE-2019-15918) - ext4: protect journal inode's blocks using block_validity - [x86] PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary - dm mpath: fix missing call of path selector type->end_io - blk-mq: free hw queue's resource in hctx's release handler - mmc: sdhci-pci: Add support for Intel CML - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code - cifs: smbd: take an array of reqeusts when sending upper layer data - dm crypt: move detailed message into debug level - [x86] drm/amdkfd: Add missing Polaris10 ID - kvm: Check irqchip mode before assign irqfd - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc - Btrfs: fix race between block group removal and block group allocation - cifs: add spinlock for the openFileList to cifsInodeInfo - [arm64] clk: tegra: Fix maximum audio sync clock for Tegra124/210 - [arm64] clk: tegra210: Fix default rates for HDA clocks - IB/hfi1: Avoid hardlockup with flushlist_lock - apparmor: reset pos on failure to unpack for various functions - scsi: target/core: Use the SECTOR_SHIFT constant - scsi: target/iblock: Fix overrun in WRITE SAME emulation - [s390x] scsi: zfcp: fix request object use-after-free in send path causing wrong traces - cifs: Properly handle auto disabling of serverino option - [x86] ALSA: hda - Don't resume forcibly i915 HDMI/DP codec - [x86] KVM: optimize check for valid PAT value - [x86] KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value - [x86] KVM: VMX: Fix handling of #MC that occurs during VM-Entry - [x86] KVM: VMX: check CPUID before allowing read/write of IA32_XSS - [ppc64el] KVM: Use ccr field in pt_regs struct embedded in vcpu struct - [ppc64el] KVM: Book3S HV: Fix CR0 setting in TM emulation - RDMA/srp: Document srp_parse_in() arguments - RDMA/srp: Accept again source addresses that do not have a port number - btrfs: correctly validate compression type - resource: Include resource end in walk_*() interfaces - resource: Fix find_next_iomem_res() iteration issue - resource: fix locking in find_next_iomem_res() - pstore: Fix double-free in pstore_mkfile() failure path - dm thin metadata: check if in fail_io mode when setting needs_check - [armhf,arm64] drm/panel: Add support for Armadeus ST0700 Adapt - [x86] ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips - [ppc64el] mm: Limit rma_size to 1TB when running without HV mode - iommu/iova: Remove stale cached32_node - gpio: don't WARN() on NULL descs if gpiolib is disabled - mm/migrate.c: initialize pud_entry in migrate_vma() - NFSv4: Fix delegation state recovery - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - [s390x] virtio: fix race on airq_areas[] - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors - ext4: don't perform block validity checks on the journal inode - ext4: fix block validity checks for journal inodes using indirect blocks - ext4: unsigned int compared against zero - [x86] PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround - [ppc64el] tm: Remove msr_tm_active() - [ppc64el] tm: Fix restoring FP/VMX facility incorrectly on interrupts (CVE-2019-15031) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.74 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - net: Fix null de-reference of device refcount - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist - gpio: fix line flag validation in linehandle_create - Btrfs: fix assertion failure during fsync and use of stale transaction - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - genirq: Prevent NULL pointer dereference in resend_irqs() - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - [x86] KVM: work around leak of uninitialized stack contents - [x86] KVM: nVMX: handle page fault in vmread - [x86] purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - [ppc64el] Add barrier_nospec to raw_copy_in_user() - [arm64] drm/meson: Add support for XBGR8888 & ABGR8888 formats - [armhf,arm64] clk: rockchip: Don't yell about bad mmc phases when getting - PCI: Always allow probing with driver_override - gpio: fix line flag validation in lineevent_create - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - firmware: ti_sci: Always request response from firmware - [x86] drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - modules: fix BUG when load module with rodata=n - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) - nvmem: Use the same permissions for eeprom as for nvmem https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.75 - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - RDMA/restrack: Release task struct which was hold by CM_ID object - [x86] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - [ppc64el] mm/radix: Use the right page size for vmemmap mapping - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net_sched: let qdisc_put() accept NULL pointer - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - [armhf] dts: am57xx: Disable voltage switching for SD card - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - [armhf] bus: ti-sysc: Fix using configured sysc mask value - [s390x] bpf: fix lcgr instruction encoding - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 - [armhf] bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - [s390x] bpf: use 32-bit index for tail calls - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - xdp: unpin xdp umem pages in error path - qed: Add cleanup in qed_slowpath_start() - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - [x86] apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - [armhf,arm64] usb: host: xhci-tegra: Set DMA mask correctly - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - [x86] perf/intel: Restrict period on Nehalem - [x86] perf/amd/ibs: Fix sample bias for dispatched micro-ops - amd-xgbe: Fix error path in xgbe_mod_init() - [x86] tools/power x86_energy_perf_policy: Fix argument parsing - [x86] tools/power turbostat: fix buffer overrun - net: aquantia: fix out of memory condition on rx side - [armhf] dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - [x86] uaccess: Don't leak the AC flags into __get_user() argument evaluation - [x86] hyper-v: Fix overflow bug in fill_gva_list() - keys: Fix missing null pointer check in request_key_auth_describe() - [x86] iommu/amd: Flush old domains in kdump kernel - [x86] iommu/amd: Fix race in increase_address_space() - [arm64] PCI: kirin: Fix section mismatch warning - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - binfmt_elf: move brk out of mmap when doing direct loader exec - [arm64] kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field - media: technisat-usb2: break out of loop at end of buffer (CVE-2019-15505) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.76 - Revert "Bluetooth: validate BLE connection interval updates" - RDMA/restrack: Protect from reentry to resource return path - [ppc64el] xive: Fix bogus error code returned by OPAL - IB/core: Add an unbound WQ type to the new CQ API - HID: prodikeys: Fix general protection fault during probe - HID: sony: Fix memory corruption issue on cleanup. - HID: logitech: Fix general protection fault caused by Logitech driver - HID: hidraw: Fix invalid read in hidraw_ioctl - HID: Add quirk for HP X500 PIXART OEM mouse - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() - CIFS: fix deadlock in cached root handling - net/mlx5e: Set ECN for received packets using CQE indication - net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets - mlx5: fix get_ip_proto() - net/mlx5e: Allow reporting of checksum unnecessary - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding - net/mlx5e: Rx, Check ip headers sanity - iwlwifi: mvm: send BCAST management frames to the right station - iwlwifi: mvm: always init rs_fw with 20MHz bandwidth rates - media: tvp5150: fix switch exit in set control handler - [x86] ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it enabled - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support - ALSA: usb-audio: Add DSD support for EVGA NU Audio - ALSA: dice: fix wrong packet parameter for Alesis iO26 - [x86] ALSA: hda - Add laptop imic fixup for ASUS M9V laptop - [x86] ALSA: hda - Apply AMD controller workaround for Raven platform - objtool: Clobber user CFLAGS variable - power: supply: sysfs: ratelimit property read error message - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion - scsi: qla2xxx: Remove all rports if fabric scan retry fails - scsi: qla2xxx: Return switch command on a timeout - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" - bpf: libbpf: retry loading program on EAGAIN - [armhf,arm64] irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices - f2fs: check all the data segments against all node ones - [x86] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it - bcache: remove redundant LIST_HEAD(journal) from run_cache_set() - initramfs: don't free a non-existent initrd - blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - Revert "f2fs: avoid out-of-range memory access" - dm zoned: fix invalid memory access - f2fs: fix to do sanity check on segment bitmap of LFS curseg - drm: Flush output polling on shutdown - net: don't warn in inet diag when IPV6 is disabled - Bluetooth: btrtl: HCI reset on close for Realtek BT chip - [x86] ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling - xfs: don't crash on null attr fork xfs_bmapi_read - netfilter: nft_socket: fix erroneous socket assignment - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices - net_sched: check cops->tcf_block in tc_bind_tclass() - net/rds: An rds_sock is added too early to the hash table - net/rds: Check laddr_check before calling it - f2fs: use generic EFSBADCRC/EFSCORRUPTED https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.77 - arcnet: provide a buffer big enough to actually receive packets - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize - macsec: drop skb sk before calling gro_cells_receive - net/phy: fix DP83865 10 Mbps HDX loopback disable function - net/sched: act_sample: don't push mac header on ip6gre ingress - net_sched: add max len check for TCA_KIND - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (CVE-2019-19081) - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC - ppp: Fix memory leak in ppp_write - sch_netem: fix a divide by zero in tabledist() - skge: fix checksum byte order - usbnet: ignore endpoints with invalid wMaxPacketSize - usbnet: sanity checking of packet sizes and device mtu - net: sched: fix possible crash in tcf_action_destroy() - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state - net/mlx5: Add device ID of upcoming BlueField-2 - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (CVE-2019-19080) - ALSA: hda: Flush interrupts on disabling - [armhf] ASoC: sgtl5000: Fix of unmute outputs on probe - [armhf] ASoC: sgtl5000: Fix charge pump source assignment - [arm*] dmaengine: bcm2835: Print error in case setting DMA mask fails - media: dib0700: fix link error for dibx000_i2c_set_speed - media: hdpvr: Add device num check and handling - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint - sched/fair: Fix imbalance due to CPU affinity - sched/core: Fix CPU controller for !RT_GROUP_SCHED - [x86] apic: Make apic_pending_intr_clear() more robust - sched/deadline: Fix bandwidth accounting at all levels after offline migration - [x86] reboot: Always use NMI fallback when shutdown via reboot vector IPI fails - [x86] apic: Soft disable APIC before initializing it - ALSA: hda - Show the fatal CORB/RIRB error more clearly - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() - EDAC/mc: Fix grain_bits calculation - media: iguanair: add sanity checks - base: soc: Export soc_device_register/unregister APIs - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid - [arm64] prefetch: fix a -Wtype-limits warning - md/raid1: end bio when the device faulty - md: don't call spare_active in md_reap_sync_thread if all member devices can't work - md: don't set In_sync if array is frozen - ACPI / processor: don't print errors for processorIDs == 0xff - loop: Add LOOP_SET_DIRECT_IO to compat ioctl - [x86] EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() - efi: cper: print AER info of PCIe fatal error - sched/fair: Use rq_lock/unlock in online_fair_sched_group - idle: Prevent late-arriving interrupts from disrupting offline - media: gspca: zero usb_buf on error - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig - perf test vfs_getname: Disable ~/.perfconfig to get default output - media: em28xx: modules workqueue not inited for 2nd device - media: rc: imon: Allow iMON RC protocol for ffdc 7e device - [arm64] perf record: Support aarch64 random socket_id assignment - [armhf] media: omap3isp: Don't set streaming state on random subdevs - media: radio/si470x: kill urb on error - media: hdpvr: add terminating 0 at end of string - led: triggers: Fix a memory leak bug - nbd: add missing config put - media: mceusb: fix (eliminate) TX IR signal length limit - media: dvb-frontends: use ida for pll number - posix-cpu-timers: Sanitize bogus WARNONS - media: dvb-core: fix a memory leak bug - libperf: Fix alignment trap with xyarray contents in 'perf stat' - [amd64] EDAC/amd64: Recognize DRAM device type ECC capability - [amd64] EDAC/amd64: Decode syndrome before translating address - PM / devfreq: passive: Use non-devm notifiers - PM / devfreq: exynos-bus: Correct clock enable sequence - media: cec-notifier: clear cec_adap in cec_notifier_unregister - media: saa7146: add cleanup in hexium_attach() - media: cpia2_usb: fix memory leaks - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() - perf trace beauty ioctl: Fix off-by-one error in cmd->string table - [x86] ASoC: es8316: fix headphone mixer volume table - ACPI / CPPC: do not require the _PSD method - sched/cpufreq: Align trace event behavior of fast switching - [x86] apic/vector: Warn when vector space exhaustion breaks affinity - [arm64] kpti: ensure patched kernel text is fetched from PoU - [x86] mm/pti: Do not invoke PTI functions when PTI is disabled - [x86] mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() - nvmet: fix data units read and written counters in SMART log - nvme-multipath: fix ana log nsid lookup when nsid is not found - ALSA: firewire-motu: add support for MOTU 4pre - iommu/amd: Silence warnings under memory pressure - libata/ahci: Drop PCS quirk for Denverton and beyond - iommu/iova: Avoid false sharing on fq_timer_on - libtraceevent: Change users plugin directory - [armhf] dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks - ACPI: custom_method: fix memory leaks - ACPI / PCI: fix acpi_pci_irq_enable() memory leak - closures: fix a race on wakeup from closure_sync - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' - md/raid1: fail run raid1 array when active disk less than one - dmaengine: ti: edma: Do not reset reserved paRAM slots - kprobes: Prohibit probing on BUG() and WARN() address - [s390x] crypto: xts-aes-s390 fix extra run-time crypto self tests finding - [x86] cpu: Add Tiger Lake to Intel family - [x86] platform: intel_pmc_core: Do not ioremap RAM - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set - raid5: don't set STRIPE_HANDLE to stripe which is in batch list - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD - mmc: sdhci: Fix incorrect switch to HS mode - mmc: core: Add helper function to indicate if SDIO IRQs is enabled - [armhf,arm64] mmc: dw_mmc: Re-store SDIO IRQs mask at system resume - raid5: don't increment read_errors on EILSEQ return - libertas: Add missing sentinel at end of if_usb.c fw_table - e1000e: add workaround for possible stalled packet - ALSA: hda - Drop unsol event handler for Intel HDMI codecs - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() - [x86] ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 - [x86] iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type - [armhf] media: omap3isp: Set device on omap3isp subdevs - PM / devfreq: passive: fix compiler warning - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 - ALSA: firewire-tascam: handle error code when getting current source of clock - ALSA: firewire-tascam: check intermediate state of clock status and retry - scsi: scsi_dh_rdac: zero cdb in send_mode_select() - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag - printk: Do not lose last line in kmsg buffer dump - IB/mlx5: Free mpi in mp_slave mode - IB/hfi1: Define variables as unsigned long to fix KASAN warning - randstruct: Check member structs in is_pure_ops_struct() - ceph: use ceph_evict_inode to cleanup inode's resource - [x86] ALSA: hda/realtek - PCI quirk for Medion E4254 - blk-mq: add callback of .cleanup_rq - scsi: implement .cleanup_rq callback - [ppc64el] imc: Dont create debugfs files for cpu-less nodes - fuse: fix missing unlock_page in fuse_writepage() - [x86] KVM: always stop emulation on page fault - [x86] KVM: set ctxt->have_exception in x86_decode_insn() - [x86] KVM: Manually calculate reserved bits when loading PDPTRS - [x86] media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table - media: don't drop front-end reference count for ->detach - binfmt_elf: Do not move brk for INTERP-less ET_EXEC - [x86] ASoC: Intel: NHLT: Fix debug print format - [x86] ASoC: Intel: Skylake: Use correct function to access iomem space - [x86] ASoC: Intel: Fix use of potentially uninitialized variable - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - [arm64] tlb: Ensure we execute an ISB following walk cache invalidation - [arm64] dts: rockchip: limit clock rate of MMC controllers for RK3328 - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP - regulator: Defer init completion for a while after late_initcall - efifb: BGRT: Improve efifb_bgrt_sanity_check - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer - memcg, kmem: do not fail __GFP_NOFAIL charges - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask - block: fix null pointer dereference in blk_mq_rq_timed_out() - smb3: allow disabling requesting leases - ovl: Fix dereferencing possible ERR_PTR() - ovl: filter of trusted xattr results in audit - btrfs: fix allocation of free space cache v1 bitmap pages - Btrfs: fix use-after-free when using the tree modification log - btrfs: Relinquish CPUs in btrfs_compare_trees - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls - Btrfs: fix race setting up and completing qgroup rescan workers - md/raid6: Set R5_ReadError when there is read failure on parity disk - md: don't report active array_state until after revalidate_disk() completes. - md: only call set_in_sync() when it is expected to succeed. - cfg80211: Purge frame registrations on iftype change - /dev/mem: Bail out upon SIGKILL. - ext4: fix warning inside ext4_convert_unwritten_extents_endio - ext4: fix punch hole for inline_data file systems - quota: fix wrong condition in is_quota_modification() - hwrng: core - don't wait on add_early_randomness() - CIFS: fix max ea value size - CIFS: Fix oplock handling for SMB 2.1+ protocols - md/raid0: avoid RAID0 data corruption due to layout confusion. - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone - drm/amd/display: Restore backlight brightness after system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.78 - tpm: use tpm_try_get_ops() in tpm-sysfs.c. - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations - [armhf,arm64] drm/panel: simple: fix AUO g185han01 horizontal blanking - [armhf,arm64] drm/panel: check failure cases in the probe func - [armhf,arm64] drm/rockchip: Check for fast link training before enabling psr - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() - [ppc64el] PCI: rpaphp: Avoid a sometimes-uninitialized warning - ipmi_si: Only schedule continuously in the thread in maintenance mode - [armhf,arm64] clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks - drm/amd/display: fix issue where 252-255 values are clipped - drm/amd/display: reprogram VM config when system resume - [ppc64el] powernv/ioda2: Allocate TCE table levels on demand for default DMA window - [ppc64el] xmon: Check for HV mode when dumping XIVE info from OPAL - [ppc64el] rtas: use device model APIs and serialization during LPM - [ppc64el] futex: Fix warning: 'oldval' may be used uninitialized in this function - [ppc64el] pseries/mobility: use cond_resched when updating device tree - [armhf,arm64] pinctrl: tegra: Fix write barrier placement in pmx_writel - [ppc64el] eeh: Clear stale EEH_DEV_NO_HANDLER flag - vfio_pci: Restore original state on release - drm/nouveau/volt: Fix for some cards having 0 maximum voltage - [x86] pinctrl: amd: disable spurious-firing GPIO IRQs - drm/amd/display: support spdif - drm/amdgpu/si: fix ASIC tests - [ppc64el] exception: machine check use correct cfar for late handler - pstore: fs superblock limits - [ppc64el] pseries: correctly track irq state in default idle - [arm64] pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c - [ppc64el] dump kernel log before carrying out fadump or kdump - [arm64] mbox: qcom: add APCS child device for QCS404 - scsi: core: Reduce memory required for SCSI logging - dma-buf/sw_sync: Synchronize signal vs syncpt free - ext4: fix potential use after free after remounting with noblock_validity - [mips*] tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean - [x86] i2c-cht-wc: Fix lockdep warning - [x86] mfd: intel-lpss: Remove D3cold delay - HID: wacom: Fix several minor compiler warnings - [armel,armhf] 8898/1: mm: Don't treat faults reported from cache maintenance as writes - [armhf] rtc: snvs: fix possible race condition - HID: apple: Fix stuck function keys when using FN - [arm64] PCI: rockchip: Propagate errors for optional regulators - [armhf] PCI: imx6: Propagate errors for optional regulators - [armel,armhf] 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address - fat: work around race with userspace's read via blockdev while mounting - pktcdvd: remove warning on attempting to register non-passthrough dev - [s390x] hypfs: Fix error number left in struct pointer member - ocfs2: wait for recovering done after direct unlock request - [arm64] consider stack randomization for mmap base only when necessary - [mips*] properly account for stack randomization and stack guard gap - [armel,armhf] properly account for stack randomization and stack guard gap - [armel,armhf] use STACK_TOP when computing mmap base address - block: mq-deadline: Fix queue restart handling - bpf: fix use after free in prog symbol exposure - cxgb4:Fix out-of-bounds MSI-X info array access - erspan: remove the incorrect mtu limit for erspan - hso: fix NULL-deref on tty open - ipv6: drop incoming packets having a v4mapped source address - ipv6: Handle missing host route in __ipv6_ifa_notify - net: ipv4: avoid mixed n_redirects and rate_tokens usage - net: qlogic: Fix memory leak in ql_alloc_large_buffers - net: Unpublish sk from sk_reuseport_cb before call_rcu - nfc: fix memory leak in llcp_sock_bind() - qmi_wwan: add support for Cinterion CLS8 devices - rxrpc: Fix rxrpc_recvmsg tracepoint - sch_dsmark: fix potential NULL deref in dsmark_init() - udp: fix gso_segs calculations - vsock: Fix a lockdep warning in __vsock_release() - udp: only do GSO if # of segs > 1 - net/rds: Fix error handling in rds_ib_add_one() - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() - tipc: fix unlimited bundling of small messages - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash - NFC: fix attrs checks in netlink interface - kexec: bail out upon SIGKILL when allocating memory. - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.79 - [s390x] process: avoid potential reading of freed stack - [s390x] KVM: Test for bad access register and size at the start of S390_MEM_OP - [s390x] topology: avoid firing events before kobjs are created - [s390x] cio: exclude subchannels with no parent from pseudo check - [ppc64el] KVM: Book3S HV: Fix race in re-enabling XIVE escalation interrupts - [ppc64el] KVM: Book3S HV: Check for MMU ready on piggybacked virtual cores - [ppc64el] KVM: Book3S HV: Don't lose pending doorbell request on migration on P9 - [x86] KVM: Fix userspace set invalid CR4 - [x86] KVM: nVMX: handle page fault in vmread fix - nbd: fix max number of supported devs - PM / devfreq: tegra: Fix kHz to Hz conversion - ASoC: Define a set of DAPM pre/post-up events - [armhf] ASoC: sgtl5000: Improve VAG power and mute control - [ppc64el] mce: Fix MCE handling for huge pages - [ppc64el] mce: Schedule work from irq_work - [ppc64el] powernv: Restrict OPAL symbol map to only be readable by root - [ppc64el] powernv/ioda: Fix race in TCE level allocation - [ppc64el] book3s64/mm: Don't do tlbie fixup for some hardware revisions - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file - [x86] crypto: qat - Silence smp_processor_id() warning - crypto: skcipher - Unmap pages after an external error - [mips*el/loongson-3] Treat Loongson Extensions as ASEs - power: supply: sbs-battery: use correct flags field - power: supply: sbs-battery: only return health when battery present - tracing: Make sure variable reference alias has correct var_ref_idx - usercopy: Avoid HIGHMEM pfn warning - timer: Read jiffies once when forwarding base clk - [x86] PCI: vmd: Fix shadow offsets to reflect spec changes - PCI: Restore Resizable BAR size bits correctly for 1MB BARs - [armhf] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout - perf stat: Fix a segmentation fault when using repeat forever - [armhf] drm/omap: fix max fclk divider for omap36xx - [arm64] drm/msm/dsi: Fix return value check for clk_get_parent - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors - [x86] drm/i915/gvt: update vgpu workload head pointer correctly - mmc: sdhci: improve ADMA error reporting - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" - xen/xenbus: fix self-deadlock after killing user process - ieee802154: atusb: fix use-after-free at disconnect - [s390x] cio: avoid calling strlen on null pointer - cfg80211: initialize on-stack chandefs - [arm64] cpufeature: Detect SSBS and advertise to userspace - ima: always return negative code for error - ima: fix freeing ongoing ahash_request - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() - 9p: Transport error uninitialized - 9p: avoid attaching writeback_fid on mmap with type PRIVATE - xen/pci: reserve MCFG areas earlier - ceph: fix directories inode i_blkbits initialization - ceph: reconnect connection if session hang in opening state - watchdog: aspeed: Add support for AST2600 - netfilter: nf_tables: allow lookups in dynamic sets - drm/amdgpu: Fix KFD-related kernel oops on Hawaii - drm/amdgpu: Check for valid number of registers to read - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors - [x86] purgatory: Disable the stackleak GCC plugin for the purgatory - ntb: point to right memory window index - thermal: Fix use-after-free when unregistering thermal zone device - thermal_hwmon: Sanitize thermal_zone type - libnvdimm/region: Initialize bad block for volatile namespaces - fuse: fix memleak in cuse_channel_open - libnvdimm/nfit_test: Fix acpi_handle redefinition - sched/membarrier: Call sync_core only before usermode for same mm - sched/membarrier: Fix private expedited registration check - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() - kernel/elfcore.c: include proper prototypes - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed - [ppc64el] KVM: HV: XIVE: Free escalation interrupts before disabling the VP - [x86] KVM: nVMX: Fix consistency check on injected exception error code - nbd: fix crash when the blksize is zero - [ppc64el] pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() - [ppc64el] radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure - tick: broadcast-hrtimer: Fix a race in bc_set_next - perf tools: Fix segfault in cpu_cache_level__read() - perf stat: Reset previous counts on repeat with interval - [arm64] ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 - [arm64] KVM: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe - [arm64] docs: Document SSBS HWCAP - [arm64] fix SSBS sanitization - [arm64] Add sysfs vulnerability show for spectre-v1 - [arm64] add sysfs vulnerability show for meltdown - [arm64] enable generic CPU vulnerabilites support - [arm64] Always enable ssb vulnerability detection - [arm64] Provide a command line to disable spectre_v2 mitigation - [arm64] Advertise mitigation of Spectre-v2, or lack thereof - [arm64] Always enable spectre-v2 vulnerability detection - [arm64] add sysfs vulnerability show for spectre-v2 - [arm64] add sysfs vulnerability show for speculative store bypass - [arm64] ssbs: Don't treat CPUs with SSBS as unaffected by SSB - [arm64] Force SSBS on context switch - [arm64] Use firmware to detect CPUs that are not affected by Spectre-v2 - [arm64] speculation: Support 'mitigations=' cmdline option - vfs: Fix EOVERFLOW testing in put_compat_statfs64 - cfg80211: add and use strongly typed element iteration macros - cfg80211: Use const more consistently in for_each_element macros - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.80 - panic: ensure preemption is disabled during panic() - f2fs: use EINVAL for superblock with invalid magic - USB: rio500: Remove Rio 500 kernel driver - USB: yurex: Don't retry on unexpected errors - USB: yurex: fix NULL-derefs on disconnect - USB: usb-skeleton: fix runtime PM after driver unbind - USB: usb-skeleton: fix NULL-deref on disconnect - xhci: Fix false warning message about wrong bounce buffer write length - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long - xhci: Check all endpoints for LPM timeout - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts - usb: xhci: wait for CNR controller not ready bit in xhci resume - xhci: Prevent deadlock when xhci adapter breaks during init - xhci: Increase STS_SAVE timeout in xhci_suspend() - USB: adutux: fix use-after-free on disconnect - USB: adutux: fix NULL-derefs on disconnect - USB: adutux: fix use-after-free on release - USB: iowarrior: fix use-after-free on disconnect - USB: iowarrior: fix use-after-free on release - USB: iowarrior: fix use-after-free after driver unbind - USB: usblp: fix runtime PM after driver unbind - USB: chaoskey: fix use-after-free on release - USB: ldusb: fix NULL-derefs on driver unbind - serial: uartlite: fix exit path null pointer - USB: serial: keyspan: fix NULL-derefs on open() and write() - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 - USB: serial: option: add Telit FN980 compositions - USB: serial: option: add support for Cinterion CLS8 devices - USB: serial: fix runtime PM after driver unbind - USB: usblcd: fix I/O after disconnect - USB: microtek: fix info-leak at probe - USB: dummy-hcd: fix power budget for SuperSpeed mode - USB: legousbtower: fix slab info leak at probe - USB: legousbtower: fix deadlock on disconnect - USB: legousbtower: fix potential NULL-deref on disconnect - USB: legousbtower: fix open after failed reset request - USB: legousbtower: fix use-after-free on release - [x86] mei: me: add comet point (lake) LP device ids - [x86] mei: avoid FW version request on Ibex Peak and earlier - [armhf,arm64] iio: adc: axp288: Override TS pin bias current for some models - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified - perf llvm: Don't access out-of-scope array - perf inject jit: Fix JIT_CODE_MOVE filename - blk-wbt: fix performance regression in wbt scale_up/scale_down - CIFS: Gracefully handle QueryInfo errors during open - CIFS: Force revalidate inode when dentry is stale - CIFS: Force reval dentry if LOOKUP_REVAL flag is set - kernel/sysctl.c: do not override max_threads provided by userspace - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic - btrfs: fix incorrect updating of log root tree - btrfs: fix uninitialized ret in ref-verify - NFS: Fix O_DIRECT accounting of number of bytes read/written - [mips*] elf_hwcap: Export userspace ASEs - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags - ACPI/PPTT: Add support for ACPI 6.3 thread flag - [arm64] topology: Use PPTT to determine if PE is a thread - vfs: Fix the locking in dcache_readdir() and friends - media: stkwebcam: fix runtime PM after driver unbind - [arm64] sve: Fix wrong free for task->thread.sve_state - [rt] tracing/hwlat: Report total time spent in all NMIs during the sample - [rt] tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency - ftrace: Get a reference counter for the trace_array on filter files - tracing: Get trace_array reference for available_tracers files - hwmon: Fix HWMON_P_MIN_ALARM mask - [x86] asm: Fix MWAITX C-state hint value - [x86] PCI: vmd: Fix config addressing when using bus offsets - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.81 - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - [mips*el/loongson-3] Fix the link time qualifier of 'serial_exit()' - [arm64] net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - r8152: Set macpassthru in reset_resume callback - libata/ahci: Fix PCS quirk application - md/raid0: fix warning message for parameter default_layout - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - net: avoid potential infinite loop in tc_ctl_action() - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - sctp: change sctp_prot .no_autobind with true - memfd: Fix locking when tagging pins - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Input: synaptics-rmi4 - avoid processing unknown IRQs - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - [x86] drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - EDAC/ghes: Fix Use after free in ghes_edac remove path - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up - [arm64] pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.82 - zram: fix race between backing_dev_show and backing_dev_store - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - Btrfs: fix memory leak due to concurrent append writes with fiemap - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - btrfs: tracepoints: Fix wrong parameter order for qgroup events - wil6210: fix freeing of rx buffers in EDMA mode - f2fs: flush quota blocks after turnning it off - scsi: lpfc: Fix a duplicate 0711 log message number. - f2fs: fix to recover inode's i_gc_failures during POR - f2fs: fix to recover inode->i_flags of inode block during POR - [x86] HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override - [arm64,armel,armhf] usb: dwc2: fix unbalanced use of external vbus-supply - [x86] tools/power turbostat: fix goldmont C-state limit decoding - [x86] cpu: Add Atom Tremont (Jacobsville) - [arm64] drm/msm/dpu: handle failures while initializing displays - bcache: fix input overflow to writeback_rate_minimum - PCI: Fix Switchtec DMA aliasing quirk dmesg noise - Btrfs: fix deadlock on tree root leaf when finding free extent - netfilter: ipset: Make invalid MAC address checks consistent - HID: i2c-hid: Disable runtime PM for LG touchscreen - HID: i2c-hid: Ignore input report if there's no data present on Elan touchpanels - HID: i2c-hid: Add Odys Winbook 13 to descriptor override - [x86] platform/x86: Add the VLV ISP PCI ID to atomisp2_pm - [x86] platform/x86: Fix config space access for intel_atomisp2_pm - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 - HID: Add ASUS T100CHI keyboard dock battery quirks - NFSv4: Ensure that the state manager exits the loop on SIGKILL - HID: steam: fix boot loop with bluetooth firmware - HID: steam: fix deadlock with input devices. - [arm64,armhf] usb: dwc3: gadget: early giveback if End Transfer already completed - [arm64,armhf] usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete - ALSA: usb-audio: Cleanup DSD whitelist - usb: handle warm-reset port requests on hub resume - [armhf] rtc: pcf8523: set xtal load capacitance from DT - [arm64] Add MIDR encoding for HiSilicon Taishan CPUs - [arm64] kpti: Whitelist HiSilicon Taishan v110 CPUs - scsi: lpfc: Correct localport timeout duration error - CIFS: Respect SMB2 hdr preamble size in read responses - cifs: add credits from unmatched responses/messages - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT - exec: load_script: Do not exec truncated interpreter path - [arm64,armhf] net: dsa: mv88e6xxx: Release lock while requesting IRQ - PCI/PME: Fix possible use-after-free on remove - [arm64,armhf] iio: adc: meson_saradc: Fix memory allocation order - [x86] iio: fix center temperature of bmc150-accel-core - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Return appropriate error code for allocation failures - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init (CVE-2019-19065) - RDMA/iwcm: Fix a lock inversion issue - [x86] HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 - [arm64] gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - [armhf] serial: mctrl_gpio: Check for NULL pointer - efi/cper: Fix endianness of PCIe class code - [x86] efi/x86: Do not clean dummy variable in kexec path - [x86] xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - [arm64] armv8_deprecated: Checking return value for memory allocation - [x86] cpu: Add Comet Lake to the Intel CPU models header - sched/vtime: Fix guest/system mis-accounting on task switch - [x86] perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - iio: imu: adis16400: release allocated memory on failure (CVE-2019-19060) - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (CVE-2019-19048) - NFSv4: Fix leak of clp->cl_acceptor string - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 - iwlwifi: exclude GEO SAR support for 3168 - nbd: verify socket is supported during setup - USB: legousbtower: fix a signedness bug in tower_probe() - [x86] thunderbolt: Use 32-bit writes when writing ring producer/consumer - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe() (CVE-2019-15098) - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 - ALSA: hda/realtek - Add support for ALC623 - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix __le32/__le64 accessors in debugfs code - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - nl80211: fix validation of mesh path nexthop - [s390x] cmm: fix information leak in cmm_timeout_handler() - [s390x] idle: fix cpu idle time calculation - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default - rtlwifi: Fix potential overflow on P2P code (CVE-2019-17666) - [arm64] dmaengine: qcom: bam_dma: Fix resource leak - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - ALSA: timer: Simplify error path in snd_timer_open() - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - [ppc64el] powerpc/powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.83 - regulator: of: fix suspend-min/max-voltage parsing - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay - [arm64] arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - [armhf] regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - [x86] ASoC: rt5682: add NULL handler to set_jack function - [armhf] regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - [arm64,armhf] ASoc: rockchip: i2s: Fix RPM imbalance - [armel,armhf] mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - drm/amdgpu: fix potential VM faults - scsi: target: core: Do not overwrite CDB byte 1 - tracing: Fix "gfp_t" format for synthetic events - of: unittest: fix memory leak in unittest_data_add (CVE-2019-19049) - [arm64,armhf] irqchip/gic-v3-its: Use the exact ITSList for VMOVP - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: fix sk_page_frag() recursion from memory reclaim - [arm64] net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - [armhf] net: dsa: b53: Do not clear existing mirrored port mask - [armhf] net: phy: bcm7xxx: define soft_reset for 40nm EPHY - net: usb: lan78xx: Connect PHY before registering MAC - [arm64,armhf] net: dsa: fix switch tree list - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net/flow_dissector: switch to siphash - wireless: Skip directory when generating certificates - [x86] platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - [ppc64el] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.84 - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - [mips*] net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: usb: qmi_wwan: add support for DW5821e with eSIM support - nfc: netlink: fix double device reference drop - qede: fix NULL pointer deref in __qede_remove() - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - [arm64] Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - [armhf] sunxi: Fix CPU powerdown on A83T - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - [x86] intel_th: pci: Add Comet Lake PCH support - [x86] intel_th: pci: Add Jasper Lake PCH support - [x86] apic/32: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - [armhf] can: flexcan: disable completely the ECC mechanism - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052) - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - sched/fair: Fix -Wunused-but-set-variable warnings - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - [arm64,armhf] PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - [amd64] HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/qedr: Fix reported firmware version - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (CVE-2019-19045) - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - netfilter: nf_flow_table: set timeout before insertion into hashes - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: gadget: composite: Fix possible double free memory bug - [arm64] usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813) - usb: gadget: configfs: fix concurrent issue between composite APIs - [arm64,armhf] usb: dwc3: remove the call trace of USBx_GFLADJ - [x86] perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - [x86] perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - [x86] perf/x86/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - nvme-multipath: fix possible io hang after ctrl reconnect - [amd64] fjes: Handle workqueue allocation failure - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ" - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - [x86] hv_netvsc: Fix error handling in netvsc_attach() - [arm64,armhf] usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - NFSv4: Don't allow a cached open with a revoked delegation - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation - blkcg: make blkcg_print_stat() print stats only for online blkgs - [x86] iio: imu: mpu6050: Add support for the ICM 20602 IMU - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050 - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - net: prevent load/store tearing on sk->sk_stamp - [x86] iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/cpu: Add Tremont to the cpu vulnerability whitelist https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.85 - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - ipmr: Fix skb headroom in ipmr_get_route(). - net: gemini: add missed free_netdev - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - [armhf] net: ethernet: dwmac-sun8i: Use the correct function in exit path - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - iio: adc: max9611: explicitly cast gain_selectors - tee: optee: take DT status property into account - ath10k: fix kernel panic by moving pci flush after napi_disable - clk: sunxi-ng: h6: fix PWM gate/reset offset - soundwire: Initialize completion for defer messages - [x86] soundwire: intel: Fix uninitialized adev deref - [arm64] dts: allwinner: a64: Orange Pi Win: Fix SD card node - [arm64] dts: allwinner: a64: Olinuxino: fix DRAM voltage - [arm64] dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() - [arm64] soc/tegra: pmc: Fix pad voltage configuration for Tegra186 - [arm64] dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply - y2038: make do_gettimeofday() and get_seconds() inline - rtc: sysfs: fix NULL check in rtc_add_groups() - remoteproc/davinci: Use %zx for formating size_t - extcon: cht-wc: Return from default case to avoid warnings - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set - ALSA: seq: Do error checks at creating system ports - ath10k: skip resetting rx filter for WCN3990 - ath9k: fix tx99 with monitor mode interface - wil6210: drop Rx multicast packets that are looped-back to STA - wil6210: set edma variables only for Talyn-MB devices - wil6210: prevent usage of tx ring 0 for eDMA - wil6210: fix invalid memory access for rx_buff_mgmt debugfs - ath10k: limit available channels via DT ieee80211-freq-limit - ice: Update request resource command to latest specification - ice: Prevent control queue operations during reset - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated - ice: Fix and update driver version string - ASoC: dapm: Don't fail creating new DAPM control on NULL pinctrl - ASoC: dpcm: Properly initialise hw->rate_max - ASoC: meson: axg-fifo: report interrupt request failure - ASoC: AMD: Change MCLK to 48Mhz - pinctrl: ingenic: Probe driver at subsys_initcall - [armhf] dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale - [armhf] dts: exynos: Fix HDMI-HPD line handling on Arndale - [armhf] dts: exynos: Fix sound in Snow-rev5 Chromebook - liquidio: fix race condition in instruction completion processing - [arm64] dts: stratix10: i2c clock running out of spec - [armhf] dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks - i40evf: Validate the number of queues a PF sends - i40e: use correct length for strncpy - i40evf: set IFF_UNICAST_FLT flag for the VF - i40e: Check and correct speed values for link on open - i40evf: Don't enable vlan stripping when rx offload is turned on - i40e: hold the rtnl lock on clearing interrupt scheme - i40evf: cancel workqueue sync for adminq when a VF is removed - i40e: Prevent deleting MAC address from VF when set by PF - IB/rxe: avoid back-to-back retries - IB/rxe: fixes for rdma read retry - iwlwifi: drop packets with bad status in CD - iwlwifi: don't WARN on trying to dump dead firmware - iwlwifi: mvm: avoid sending too many BARs - media: vicodec: fix out-of-range values when decoding - media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers - media: ov772x: Disable clk on error path - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument - mwifiex: do no submit URB in suspended state - mwifex: free rx_cmd skb in suspended state - brcmfmac: fix wrong strnchr usage - mt76: Fix comparisons with invalid hardware key index - soc: imx: gpc: fix PDN delay - ASoC: rsnd: ssi: Fix issue in dma data address assignment - net: hns3: Fix for multicast failure - net: hns3: Fix error of checking used vlan id - net: hns3: Fix for loopback selftest failed problem - net: hns3: Change the dst mac addr of loopback packet - net/mlx5: Fix atomic_mode enum values - net: phy: mscc: read 'vsc8531,vddmac' as an u32 - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 - [armhf] dts: meson8: fix the clock controller register size - [armhf] dts: meson8b: fix the clock controller register size - mtd: rawnand: marvell: use regmap_update_bits() for syscon access - mtd: rawnand: fsl_ifc: check result of SRAM initialization - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions - mtd: rawnand: qcom: don't include dma-direct.h - IB/mlx5: Change TX affinity assignment in RoCE LAG mode - qxl: fix null-pointer crash during suspend - mac80211: fix saving a few HE values - cfg80211: validate wmm rule when setting - f2fs: avoid wrong decrypted data from disk - net: lan78xx: Bail out if lan78xx_get_endpoints fails - rtnetlink: move type calculation out of loop - ASoC: sgtl5000: avoid division by zero if lo_vag is zero - ath10k: avoid possible memory access violation - [armhf] dts: exynos: Disable pull control for S5M8767 PMIC - ath10k: wmi: disable softirq's while calling ieee80211_rx - i2c: mediatek: Use DMA safe buffers for i2c transactions - IB/mlx5: Don't hold spin lock while checking device state - IB/ipoib: Ensure that MTU isn't less than minimum permitted - RDMA/core: Rate limit MAD error messages - RDMA/core: Follow correct unregister order between sysfs and cgroup - udf: Fix crash during mount - ASoC: dapm: Avoid uninitialised variable warning - [x86] ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation - ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA - [powerpc] make PowerMac cache node search conditional on CONFIG_PPC_PMAC - [armhf] dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files - [armhf] dts: omap3-gta04: fixes for tvout / venc - [armhf] dts: omap3-gta04: tvout: enable as display1 alias - [armhf] dts: omap3-gta04: fix touchscreen tsc2007 - [armhf] dts: omap3-gta04: make NAND partitions compatible with recent U-Boot - [armhf] dts: omap3-gta04: keep vpll2 always on - f2fs: submit bio after shutdown - failover: Fix error return code in net_failover_create - sched/debug: Explicitly cast sched_feat() to bool - sched/debug: Use symbolic names for task state constants - firmware: arm_scmi: use strlcpy to ensure NULL-terminated strings - [arm64] dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire - [armhf] dts: exynos: Disable pull control for PMIC IRQ line on Artik5 board - usb: mtu3: disable vbus rise/fall interrupts of ltssm - EDAC, sb_edac: Return early on ADDRV bit and address type test - [armhf] rtc: pl030: fix possible race condition - ath9k: add back support for using active monitor interfaces for tx99 - dmaengine: at_xdmac: remove a stray bottom half unlock - RDMA/hns: Fix an error code in hns_roce_v2_init_eq_table() - IB/hfi1: Missing return value in error path for user sdma - signal: Always ignore SIGKILL and SIGSTOP sent to the global init - signal: Properly deliver SIGILL from uprobes - signal: Properly deliver SIGSEGV from x86 uprobes - f2fs: fix memory leak of write_io in fill_super() - f2fs: fix memory leak of percpu counter in fill_super() - f2fs: fix setattr project check upon fssetxattr ioctl - scsi: qla2xxx: Use correct qpair for ABTS/CMD - scsi: qla2xxx: Fix iIDMA error - scsi: qla2xxx: Defer chip reset until target mode is enabled - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 - scsi: qla2xxx: Fix deadlock between ATIO and HW lock - scsi: qla2xxx: Increase abort timeout value - scsi: qla2xxx: Check for Register disconnect - scsi: qla2xxx: Fix port speed display on chip reset - scsi: qla2xxx: Fix dropped srb resource. - scsi: qla2xxx: Fix duplicate switch's Nport ID entries - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 - scsi: lpfc: Fix errors in log messages. - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() - [armhf] imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set - scsi: pm80xx: Corrected dma_unmap_sg() parameter - scsi: pm80xx: Fixed system hang issue during kexec boot - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list - net: aquantia: fix hw_atl_utils_fw_upload_dwords - Drivers: hv: vmbus: Fix synic per-cpu context initialization - nvmem: core: return error code instead of NULL from nvmem_device_get - media: dt-bindings: adv748x: Fix decimal unit addresses - [x86] ALSA: hda: Fix implicit definition of pci_iomap() on SH - media: fix: media: pci: meye: validate offset to avoid arbitrary access - media: dvb: fix compat ioctl translation - net: bcmgenet: Fix speed selection for reverse MII - [arm64] dts: meson: libretech: update board model - [arm64] dts: meson-axg: use the proper compatible for ethmac - [x86] ALSA: intel8x0m: Register irq handler after register initializations - [arm64] dts: renesas: salvator-common: adv748x: Override secondary addresses - [arm64] dts: renesas: r8a77965: Attach the SYS-DMAC to the IPMMU - [arm64] dts: renesas: r8a77965: Fix HS-USB compatible - [arm64] dts: renesas: r8a77965: Fix clock/reset for usb2_phy1 - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() - llc: avoid blocking in llc_sap_close() - [armhf] dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value - [arm64] soc: qcom: wcnss_ctrl: Avoid string overflow - [arm64] dts: broadcom: Fix I2C and SPI bus warnings - [armhf] dts: bcm: Fix SPI bus warnings - [armhf] dts: aspeed: Fix I2C bus warnings - [ppc64el,powerpc*] powerpc/vdso: Correct call frame information - [armhf] dts: socfpga: Fix I2C bus unit-address error - [armhf] dts: sunxi: Fix I2C bus warnings - [armhf] dts: sun9i: Fix I2C bus warnings - android: binder: no outgoing transaction when thread todo has transaction - cxgb4: Fix endianness issue in t4_fwcache() - [arm64] fix for bad_mode() handler to always result in panic - block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash - blok, bfq: do not plug I/O if all queues are weight-raised - [arm64] dts: meson: Fix erroneous SPI bus warnings - power: supply: ab8500_fg: silence uninitialized variable warnings - component: fix loop condition to call unbind() if bind() fails - kernfs: Fix range checks in kernfs_get_target_path - ip_gre: fix parsing gre header in ipgre_err - scsi: ufshcd: Fix NULL pointer dereference for in ufshcd_init - [armhf] dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 - [arm64] dts: rockchip: Fix I2C bus unit-address error on rk3399-puma-haikou - [x86] ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask - netfilter: nf_tables: avoid BUG_ON usage - ath9k: Fix a locking bug in ath9k_add_interface() - [s390x] qeth: uninstall IRQ handler on device removal - [s390x] qeth: invoke softirqs after napi_schedule() - media: vsp1: Fix vsp1_regs.h license header - media: vsp1: Fix YCbCr planar formats pitch calculation - media: ov2680: don't register the v4l2 subdevice before checking chip ID - PCI/ACPI: Correct error message for ASPM disabling - net: socionext: Fix two sleep-in-atomic-context bugs in ave_rxfifo_reset() - PCI: mediatek: Fix unchecked return value - [armhf] dts: xilinx: Fix I2C and SPI bus warnings - serial: uartps: Fix suspend functionality - serial: samsung: Enable baud clock for UART reset procedure in resume - serial: mxs-auart: Fix potential infinite loop - tty: serial: qcom_geni_serial: Fix serial when not used as console - [arm64] dts: ti: k3-am65: Change #address-cells and #size-cells of interconnect to 2 - samples/bpf: fix a compilation failure - spi: mediatek: Don't modify spi_transfer when transfer. - ASoC: rt5682: Fix the boost volume at the begining of playback - ipmi_si_pci: fix NULL device in ipmi_si error message - ipmi_si: fix potential integer overflow on large shift - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address - ipmi: fix return value of ipmi_set_my_LUN - net: hns3: fix return type of ndo_start_xmit function - net: cavium: fix return type of ndo_start_xmit function - net: ibm: fix return type of ndo_start_xmit function - [ppc64el,powerpc*] iommu: Avoid derefence before pointer check - [ppc64el,powerpc*] selftests: Do not fail with reschedule - [ppc64el,powerpc64] hash: Fix stab_rr off by one initialization - [ppc64el,powerpc64] pseries/memory-hotplug: Only update DT once per memory DLPAR request - [ppc64el,powerpc64] pseries: Disable CPU hotplug across migrations - [ppc64el,powerpc*] Fix duplicate const clang warning in user access code - RDMA/i40iw: Fix incorrect iterator type - OPP: Protect dev_list with opp_table lock - of/unittest: Fix I2C bus unit-address error - libfdt: Ensure INT_MAX is defined in libfdt_env.h - power: supply: twl4030_charger: fix charging current out-of-bounds - power: supply: twl4030_charger: disable eoc interrupt on linear charge - net: mvpp2: fix the number of queues per cpu for PPv2.2 - net: marvell: fix return type of ndo_start_xmit function - net: toshiba: fix return type of ndo_start_xmit function - net: xilinx: fix return type of ndo_start_xmit function - net: broadcom: fix return type of ndo_start_xmit function - net: amd: fix return type of ndo_start_xmit function - net: sun: fix return type of ndo_start_xmit function - net: hns3: Fix for setting speed for phy failed problem - net: hns3: Fix cmdq registers initialization issue for vf - net: hns3: Clear client pointer when initialize client failed or unintialize finished - net: hns3: Fix client initialize state issue when roce client initialize failed - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() - nfp: provide a better warning when ring allocation fails - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started - usb: chipidea: Fix otg event handler - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT - [s390x] zcrypt: enable AP bus scan without a valid default domain - [s390x] vdso: avoid 64-bit vdso mapping for compat tasks - [s390x] vdso: correct CFI annotations of vDSO functions - brcmfmac: increase buffer for obtaining firmware capabilities - brcmsmac: Use kvmalloc() for ucode allocations - mlxsw: spectrum: Init shaper for TCs 8..15 - PCI: portdrv: Initialize service drivers directly - [armhf] dts: am335x-evm: fix number of cpsw - [armhf] dts: ti: Fix SPI and I2C bus warnings - f2fs: avoid infinite loop in f2fs_alloc_nid - f2fs: fix to recover inode's uid/gid during POR - [armhf] dts: ux500: Correct SCU unit address - [armhf] dts: ux500: Fix LCDA clock line muxing - [armhf] dts: ste: Fix SPI controller node names - spi: pic32: Use proper enum in dmaengine_prep_slave_rg - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) - cpufeature: avoid warning when compiling with clang - [armhf] crypto: crc32 - avoid warning when compiling with Clang - [armel] dts: marvell: Fix SPI and I2C bus warnings - [x86] mce-inject: Reset injection struct after injection - [armhf,arm64] dts: clearfog: fix sdhci supply property name - bnx2x: Ignore bandwidth attention in single function mode - PCI/AER: Take reference on error devices - PCI/AER: Don't read upstream ports below fatal errors - PCI/ERR: Use slot reset if available - samples/bpf: fix compilation failure - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider - net: micrel: fix return type of ndo_start_xmit function - net: freescale: fix return type of ndo_start_xmit function - [x86] CPU: Use correct macros for Cyrix calls - [x86] CPU: Change query logic so CPUID is enabled before testing - EDAC: Correct DIMM capacity unit symbol - [mips*] kexec: Relax memory restriction - [arm64] dts: rockchip: Fix microSD in rk3399 sapphire board - mlxsw: Make MLXSW_SP1_FWREV_MINOR a hard requirement - media: imx: work around false-positive warning, again - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() - media: au0828: Fix incorrect error messages - media: davinci: Fix implicit enum conversion warning - [armhf] dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock - usb: gadget: uvc: configfs: Drop leaked references to config items - usb: gadget: uvc: configfs: Prevent format changes after linking header - usb: gadget: uvc: configfs: Sort frame intervals upon writing - [armhf] dts: exynos: Correct audio subsystem parent clock on Peach Chromebooks - i2c: aspeed: fix invalid clock parameters for very large divisors - gpiolib: Fix gpio_direction_* for single direction GPIOs - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs - phy: phy-twl4030-usb: fix denied runtime access - [armhf] dts: imx6ull: update vdd_soc voltage for 900MHz operating point - usb: gadget: uvc: Factor out video USB request queueing - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode - coresight: Use ERR_CAST instead of ERR_PTR - coresight: Fix handling of sinks - coresight: perf: Fix per cpu path management - coresight: perf: Disable trace path upon source error - coresight: tmc-etr: Handle driver mode specific ETR buffers - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP - coresight: tmc: Fix byte-address alignment for RRP - coresight: dynamic-replicator: Handle multiple connections - slimbus: ngd: register ngd driver only once. - slimbus: ngd: return proper error code instead of zero - silmbus: ngd: register controller after power up. - misc: kgdbts: Fix restrict error - misc: genwqe: should return proper error value. - vmbus: keep pointer to ring buffer page - vfio/pci: Fix potential memory leak in vfio_msi_cap_len - vfio/pci: Mask buggy SR-IOV VF INTx support - iw_cxgb4: Use proper enumerated type in c4iw_bar2_addrs - scsi: libsas: always unregister the old device if going to discover new - f2fs: fix remount problem of option io_bits - phy: lantiq: Fix compile warning - [arm64] dts: fsl: Fix I2C and SPI bus warnings - [armhf] dts: imx51-zii-rdu1: Fix the rtc compatible string - [arm64] tegra: I2C on Tegra194 is not compatible with Tegra114 - [armhf] dts: tegra30: fix xcvr-setup-use-fuses - [armhf] dts: tegra20: restore address order - [armhf] tegra: apalis_t30: fix mmc1 cmd pull-up - [armhf] tegra: apalis_t30: fix mcp2515 can controller interrupt polarity - [armhf] tegra: colibri_t30: fix mcp2515 can controller interrupt polarity - [armhf] dts: paz00: fix wakeup gpio keycode - net: smsc: fix return type of ndo_start_xmit function - net: faraday: fix return type of ndo_start_xmit function - PCI/ERR: Run error recovery callbacks for all affected devices - f2fs: update i_size after DIO completion - f2fs: fix to recover inode's project id during POR - f2fs: mark inode dirty explicitly in recover_inode() - RDMA: Fix dependencies for rdma_user_mmap_io - EDAC: Raise the maximum number of memory controllers - firmware: dell_rbu: Make payload memory uncachable - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS - Bluetooth: btrsi: fix bt tx timeout issue - [x86] hyperv: Suppress "PCI: Fatal: No config space access function found" - crypto: s5p-sss: Fix race in error handling - crypto: s5p-sss: Fix Fix argument list alignment - crypto: fix a memory leak in rsa-kcs1pad's encryption mode - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump - iwlwifi: fix non_shared_ant for 22000 devices - iwlwifi: pcie: read correct prph address for newer devices - iwlwifi: api: annotate compressed BA notif array sizes - iwlwifi: pcie: gen2: build A-MSDU only for GSO - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN - iwlwifi: mvm: use correct FIFO length - iwlwifi: mvm: Allow TKIP for AP mode - scsi: NCR5380: Clear all unissued commands on host reset - scsi: NCR5380: Have NCR5380_select() return a bool - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data - scsi: NCR5380: Check for invalid reselection target - scsi: NCR5380: Don't clear busy flag when abort fails - scsi: NCR5380: Don't call dsprintk() following reselection interrupt - scsi: NCR5380: Handle BUS FREE during reselection - scsi: NCR5380: Check for bus reset - [arm64] dts: amd: Fix SPI bus warnings - [arm64] dts: lg: Fix SPI controller node names - rtc: isl1208: avoid possible sysfs race - rtc: tx4939: fixup nvmem name and register size - rtc: armada38x: fix possible race condition - netfilter: masquerade: don't flush all conntracks if only one address deleted on device - usb: xhci-mtk: fix ISOC error when interval is zero - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear - fuse: use READ_ONCE on congestion_threshold and max_background - IB/iser: Fix possible NULL deref at iser_inv_desc() - media: ov2680: fix null dereference at power on - [s390x] vdso: correct vdso mapping for compat tasks - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused - memfd: Use radix_tree_deref_slot_protected to avoid the warning. - slcan: Fix memory leak in error path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.86 - spi: mediatek: use correct mata->xfer_len when in fifo transfer - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() - tee: optee: add missing of_node_put after of_device_is_available - Revert "OPP: Protect dev_list with opp_table lock" - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - idr: Fix idr_get_next race with idr_remove - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - [i386] bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 - [i386] bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} - net: ovs: fix return type of ndo_start_xmit function - net: xen-netback: fix return type of ndo_start_xmit function - [armhf] dts: dra7: Enable workaround for errata i870 in PCIe host mode - [armhf] dts: omap5: enable OTG role for DWC3 controller - [arm64] net: hns3: Fix for netdev not up problem when setting mtu - [arm64] net: hns3: Fix loss of coal configuration while doing reset - f2fs: return correct errno in f2fs_gc - [armhf] dts: sun8i: h3-h5: ir register size should be the whole memory block - [armhf] dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet PHY - tcp: up initial rmem to 128KB and SYN rwin to around 64KB - SUNRPC: Fix priority queue fairness - ACPI / LPSS: Make acpi_lpss_find_device() also find PCI devices - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq - f2fs: keep lazytime on remount - IB/hfi1: Error path MAD response size is incorrect - IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds - mt76x2: fix tx power configuration for VHT mcs 9 - mt76x2: disable WLAN core before probe - mt76: fix handling ps-poll frames - [arm64,armhf] iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() - [arm64,armhf] iommu/arm-smmu-v3: Fix unexpected CMD_SYNC timeout - [arm64,armhf] kvm: Fix stage2_flush_memslot for 4 level page table - [arm64] numa: Report correct memblock range for the dummy node - ath10k: fix vdev-start timeout on error - rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface - ata: ahci_brcm: Allow using driver or DSL SoCs - PM / devfreq: Fix devfreq_add_device() when drivers are built as modules. - PM / devfreq: Fix handling of min/max_freq == 0 - PM / devfreq: stopping the governor before device_unregister() - ath9k: fix reporting calculated new FFT upper max - selftests/tls: Fix recv(MSG_PEEK) & splice() test cases - usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() - usb: dwc3: gadget: Check ENBLSLPM before sending ep command - nl80211: Fix a GET_KEY reply attribute - [arm64,armhf] irqchip/irq-mvebu-icu: Fix wrong private data retrieval - watchdog: core: fix null pointer dereference when releasing cdev - watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D - [ppc64el,powerpc64] Inform the userspace about TCE update failures - printk: Do not miss new messages when replaying the log - printk: CON_PRINTBUFFER console registration is a bit racy - dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction - dmaengine: timb_dma: Use proper enum in td_prep_slave_sg - [x86] ALSA: hda: Fix mismatch for register mask and value in ext controller. - ext4: fix build error when DX_DEBUG is defined - clk: keystone: Enable TISCI clocks if K3_ARCH - sunrpc: Fix connect metrics - [x86] PCI: Apply VMD's AERSID fixup generically - mei: samples: fix a signedness bug in amt_host_if_call() - cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update - cxgb4: Use proper enum in IEEE_FAUX_SYNC - [ppc64el,powerpc*] Fix DTL buffer registration - [ppc64el,powerpc*] Fix how we iterate over the DTL entries - [ppc64el,powerpc*] xive: Move a dereference below a NULL test - mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer - PM / hibernate: Check the success of generating md5 digest before hibernation - tools: PCI: Fix compilation warnings - ice: Fix forward to queue group logic - md: allow metadata updates while suspending an array - fix - ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit - i40e: Use proper enum in i40e_ndo_set_vf_link_state - ixgbe: Fix crash with VFs and flow director on interface flap - IB/mthca: Fix error return code in __mthca_init_one() - IB/rxe: avoid srq memory leak - RDMA/hns: Bugfix for reserved qp number - RDMA/hns: Submit bad wr when post send wr exception - RDMA/hns: Bugfix for CM test - RDMA/hns: Limit the size of extend sge of sq - IB/mlx4: Avoid implicit enumerated type conversion - rpmsg: glink: smem: Support rx peak for size less than 4 bytes - msm/gpu/a6xx: Force of_dma_configure to setup DMA for GMU - OPP: Return error on error from dev_pm_opp_get_opp_count() - ACPICA: Never run _REG on system_memory and system_IO - cpuidle: menu: Fix wakeup statistics updates for polling state - ASoC: qdsp6: q6asm-dai: checking NULL vs IS_ERR() - [ppc64el,powerpc*] time: Use clockevents_register_device(), fixing an issue with large decrementer - [ppc64el,powerpc64] radix: Explicitly flush ERAT with local LPID invalidation - ata: ep93xx: Use proper enums for directions - qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers - media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote - media: pxa_camera: Fix check for pdev->dev.of_node - media: rcar-vin: fix redeclaration of symbol - media: i2c: adv748x: Support probing a single output - [x86] ALSA: hda/sigmatel - Disable automute for Elo VuPoint - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED - [ppc64el,powerpc64] Book3S PR: Exiting split hack mode needs to fixup both PC and LR - USB: serial: cypress_m8: fix interrupt-out transfer length - usb: dwc2: disable power_down on rockchip devices - mtd: physmap_of: Release resources on error - cpu/SMT: State SMT is disabled even with nosmt and without "=force" - brcmfmac: reduce timeout for action frame scan - brcmfmac: fix full timeout waiting for action frame on-channel tx - qtnfmac: request userspace to do OBSS scanning if FW can not - qtnfmac: pass sgi rate info flag to wireless core - qtnfmac: inform wireless core about supported extended capabilities - qtnfmac: drop error reports for out-of-bounds key indexes - [armhf] clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume - [armhf] clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420 - [armhf] clk: samsung: Use clk_hw API for calling clk framework from clk notifiers - printk: Correct wrong casting - NFSv4.x: fix lock recovery during delegation recall - dmaengine: ioat: fix prototype of ioat_enumerate_channels - media: ov5640: fix framerate update - media: cec-gpio: select correct Signal Free Time - gfs2: slow the deluge of io error messages - i2c: omap: use core to detect 'no zero length' quirk - i2c: qup: use core to detect 'no zero length' quirk - i2c: tegra: use core to detect 'no zero length' quirk - i2c: zx2967: use core to detect 'no zero length' quirk - Input: st1232 - set INPUT_PROP_DIRECT property - Input: silead - try firmware reload after unsuccessful resume - soc: fsl: bman_portals: defer probe after bman's probe - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware - tc-testing: fix build of eBPF programs - remoteproc: Check for NULL firmwares in sysfs interface - remoteproc: qcom: q6v5: Fix a race condition on fatal crash - kexec: Allocate decrypted control pages for kdump if SME is enabled - [x86] olpc: Fix build error with CONFIG_MFD_CS5535=m - dmaengine: rcar-dmac: set scatter/gather max segment size - xfrm: use correct size to initialise sp->ovec - ACPI / SBS: Fix rare oops when removing modules - iwlwifi: mvm: don't send keys when entering D3 - xsk: proper AF_XDP socket teardown ordering - [amd64] fsgsbase: Fix ptrace() to read the FS/GS base accurately - mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1 - mmc: tmio: Fix SCC error detection - mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size - fbdev: sbuslib: use checked version of put_user() - fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() - fbdev: fix broken menu dependencies - reset: Fix potential use-after-free in __of_reset_control_get() - bcache: account size of buckets used in uuid write to ca->meta_sectors_written - bcache: recal cached_dev_sectors on detach - [x86] platform: mlx-platform: Properly use mlxplat_mlxcpld_msn201x_items - media: dw9714: Fix error handling in probe function - media: dw9807-vcm: Fix probe error handling - media: cx18: Don't check for address of video_dev - mtd: spi-nor: cadence-quadspi: Use proper enum for dma_[un]map_single - mtd: devices: m25p80: Make sure WRITE_EN is issued before each write - [x86] intel_rdt: Introduce utility to obtain CDP peer - [x86] intel_rdt: CBM overlap should also check for overlap with CDP peer - mmc: mmci: expand startbiterr to irqmask and error check - [s390x] kasan: avoid vdso instrumentation - [s390x] kasan: avoid instrumentation of early C code - [s390x] kasan: avoid user access code instrumentation - [i386] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() - backlight: lm3639: Unconditionally call led_classdev_unregister - mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable - printk: Give error on attempt to set log buffer length to over 2G - media: isif: fix a NULL pointer dereference bug - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads - media: cx231xx: fix potential sign-extension overflow on large shift - media: venus: vdec: fix decoded data size - [x86] ALSA: hda/ca0132 - Fix input effect controls for desktop cards - lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync - lightnvm: pblk: fix incorrect min_write_pgs - lightnvm: pblk: guarantee emeta on line close - lightnvm: pblk: fix write amplificiation calculation - lightnvm: pblk: guarantee mw_cunits on read buffer - lightnvm: do no update csecs and sos on 1.2 - lightnvm: pblk: fix error handling of pblk_lines_init() - lightnvm: pblk: consider max hw sectors supported for max_write_pgs - [x86] kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error - bpf: btf: Fix a missing check bug - net: fix generic XDP to handle if eth header was mangled - gpio: syscon: Fix possible NULL ptr usage - spi: fsl-lpspi: Prevent FIFO under/overrun by default - pinctrl: gemini: Mask and set properly - spi: spidev: Fix OF tree warning logic - [armel,armhf] 8802/1: Call syscall_trace_exit even when system call skipped - [x86] mm: Do not warn about PCI BIOS W+X mappings - orangefs: rate limit the client not running info message - pinctrl: gemini: Fix up TVC clock group - scsi: arcmsr: clean up clang warning on extraneous parentheses - [x86] hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors - hwmon: (nct6775) Fix names of DIMM temperature sources - hwmon: (pwm-fan) Silence error on probe deferral - hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros - hwmon: (npcm-750-pwm-fan) Change initial pwm target to 255 - selftests: forwarding: Have lldpad_app_wait_set() wait for unknown, too - net: sched: avoid writing on noop_qdisc - netfilter: nft_compat: do not dump private area - misc: cxl: Fix possible null pointer dereference - mac80211: minstrel: fix using short preamble CCK rates on HT clients - mac80211: minstrel: fix CCK rate group streams value - mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode - spi: rockchip: initialize dma_slave_config properly - mlxsw: spectrum_switchdev: Check notification relevance based on upper device - [armhf] dts: omap5: Fix dual-role mode on Super-Speed port - tcp: start receiver buffer autotuning sooner - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate - PM / devfreq: Fix static checker warning in try_then_request_governor - tools: PCI: Fix broken pcitest compilation - [ppc64el,powerpc*] time: Fix clockevent_decrementer initalisation for PR KVM - mmc: tmio: fix SCC error handling to avoid false positive CRC error - [x86] resctrl: Fix rdt_find_domain() return value and checks https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.87 - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel - net/mlx4_en: fix mlx4 ethtool -N insertion - net/mlx4_en: Fix wrong limitation for number of TX rings - net: rtnetlink: prevent underflows in do_setvfinfo() - net/sched: act_pedit: fix WARN() in the traffic path - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key - sfc: Only cancel the PPS workqueue if it exists - net/mlx5e: Fix set vf link state error flow - net/mlxfw: Verify FSM error code translation doesn't exceed array size - net/mlx5: Fix auto group size calculation - vhost/vsock: split packets to send using multiple buffers - gpio: max77620: Fixup debounce delays - tools: gpio: Correctly add make dependencies for gpio_utils - nbd:fix memory leak in nbd_get_socket() - virtio_console: allocate inbufs in add_port() only if it is needed - Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()" - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() - [x86] drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles - [x86] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() - mwifiex: Fix NL80211_TX_POWER_LIMITED - ALSA: isight: fix leak of reference to firewire unit in error path of .probe callback - crypto: testmgr - fix sizeof() on COMP_BUF_SIZE - printk: lock/unlock console only for new logbuf entries - printk: fix integer overflow in setup_log_buf() - pinctrl: madera: Fix uninitialized variable bug in madera_mux_set_mux - PCI: cadence: Write MSI data with 32bits - gfs2: Fix marking bitmaps non-full - pty: fix compat ioctls - synclink_gt(): fix compat_ioctl() - [ppc64] Fix signedness bug in update_flash_db() - [powerpc] boot: Fix opal console in boot wrapper - [ppc64*,powerpc] boot: Disable vector instructions - [ppc64*,powerpc] eeh: Fix null deref for devices removed during EEH - [ppc64*,powerpc] eeh: Fix use of EEH_PE_KEEP on wrong field - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr() - mt76: do not store aggregation sequence number for null-data frames - mt76x0: phy: fix restore phase in mt76x0_phy_recalibrate_after_assoc - brcmsmac: AP mode: update beacon when TIM changes - ath10k: set probe request oui during driver start - ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem - skd: fixup usage of legacy IO API - cdrom: don't attempt to fiddle with cdo->capability - spi: sh-msiof: fix deferred probing - mmc: mediatek: fill the actual clock for mmc debugfs - mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail - PCI: mediatek: Fix class type for MT7622 to PCI_CLASS_BRIDGE_PCI - btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag - btrfs: handle error of get_old_root - gsmi: Fix bug in append_to_eventlog sysfs handler - misc: mic: fix a DMA pool free failure - w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for unsigned, count for max size). - [m68k] fix command-line parsing when passed from u-boot - RDMA/bnxt_re: Avoid NULL check after accessing the pointer - RDMA/bnxt_re: Fix qp async event reporting - RDMA/bnxt_re: Avoid resource leak in case the NQ registration fails - pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' - pwm: lpss: Only set update bit if we are actually changing the settings - amiflop: clean up on errors during setup - qed: Align local and global PTT to propagate through the APIs. - scsi: ips: fix missing break in switch - nfp: bpf: protect against mis-initializing atomic counters - [x86] KVM: nVMX: reset cache/shadows when switching loaded VMCS - [x86] KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode() - [x86] KVM: Fix invvpid and invept register operand size in 64-bit mode - clk: tegra: Fixes for MBIST work around - scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler - scsi: isci: Change sci_controller_start_task's return type to sci_status - scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event - scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param - nvmet: avoid integer overflow in the discard code - nvmet-fcloop: suppress a compiler warning - nvme-pci: fix hot removal during error handling - PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks - clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk - ASoC: tegra_sgtl5000: fix device_node refcounting - scsi: dc395x: fix dma API usage in srb_done - scsi: dc395x: fix DMA API usage in sg_update_list - scsi: zorro_esp: Limit DMA transfers to 65535 bytes - net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed - net: fix warning in af_unix - xfs: fix use-after-free race in xfs_buf_rele - xfs: clear ail delwri queued bufs on unmount of shutdown fs - kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack - ACPI / scan: Create platform device for INT33FE ACPI nodes - PM / Domains: Deal with multiple states but no governor in genpd - ALSA: i2c/cs8427: Fix int to char conversion - macintosh/windfarm_smu_sat: Fix debug output - PCI: vmd: Detach resources after stopping root bus - USB: misc: appledisplay: fix backlight update_status return code - usbip: tools: fix atoi() on non-null terminated string - sctp: use sk_wmem_queued to check for writable space - dm raid: avoid bitmap with raid4/5/6 journal device - selftests/bpf: fix file resource leak in load_kallsyms - SUNRPC: Fix a compile warning for cmpxchg64() - sunrpc: safely reallow resvport min/max inversion - atm: zatm: Fix empty body Clang warnings - [s390x] perf: Return error when debug_register fails - swiotlb: do not panic on mapping failures - spi: omap2-mcspi: Set FIFO DMA trigger level to word length - [x86] intel_rdt: Prevent pseudo-locking from using stale pointers - sparc: Fix parport build warnings. - [ppc64*,powerpc] pseries: Export raw per-CPU VPA data via debugfs - [ppc64*,powerpc] mm/radix: Fix off-by-one in split mapping logic - [ppc64*,powerpc] mm/radix: Fix overuse of small pages in splitting logic - [ppc64*,powerpc] mm/radix: Fix small page at boundary when splitting - [ppc64*] radix: Fix radix__flush_tlb_collapsed_pmd double flushing pmd - selftests/bpf: fix return value comparison for tests in test_libbpf.sh - tools: bpftool: fix completion for "bpftool map update" - ceph: fix dentry leak in ceph_readdir_prepopulate - ceph: only allow punch hole mode in fallocate - thermal: armada: fix a test in probe() - f2fs: fix to spread clear_cold_data() - f2fs: spread f2fs_set_inode_flags() - mISDN: Fix type of switch control variable in ctrl_teimanager - qlcnic: fix a return in qlcnic_dcb_get_capability() - net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode - mfd: arizona: Correct calling of runtime_put_sync - mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values - [x86] mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well - mfd: max8997: Enale irq-wakeup unconditionally - net: socionext: Stop PHY before resetting netsec - fs/cifs: fix uninitialised variable warnings - spi: uniphier: fix incorrect property items - selftests/ftrace: Fix to test kprobe $comm arg only if available - selftests: watchdog: fix message when /dev/watchdog open fails - selftests: watchdog: Fix error message. - selftests: kvm: Fix -Wformat warnings - selftests: fix warning: "_GNU_SOURCE" redefined - net: ethernet: cadence: fix socket buffer corruption problem - bpf: devmap: fix wrong interface selection in notifier_call - bpf, btf: fix a missing check bug in btf_parse - [sparc64] Rework xchg() definition to avoid warnings. - [arm64] lib: use C string functions with KASAN enabled - fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle() - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock - tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage - mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition - macsec: update operstate when lower device changes - macsec: let the administrator set UP state even if lowerdev is down - block: fix the DISCARD request merge - i2c: uniphier-f: make driver robust against concurrency - i2c: uniphier-f: fix occasional timeout error - i2c: uniphier-f: fix race condition when IRQ is cleared - um: Make line/tty semantics use true write IRQ - vfs: avoid problematic remapping requests into partial EOF block - ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12 - [ppc64*,powerpc] xmon: Relax frame size for clang - [ppc64*,powerpc] selftests/ptrace: Fix out-of-tree build - [ppc64*,powerpc] selftests/signal: Fix out-of-tree build - [ppc64*,powerpc] selftests/switch_endian: Fix out-of-tree build - [ppc64*,powerpc] selftests/cache_shape: Fix out-of-tree build - block: call rq_qos_exit() after queue is frozen - mm/gup_benchmark.c: prevent integer overflow in ioctl - linux/bitmap.h: handle constant zero-size bitmaps correctly - linux/bitmap.h: fix type of nbits in bitmap_shift_right() - lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf - hfsplus: fix BUG on bnode parent update - hfs: fix BUG on bnode parent update - hfsplus: prevent btree data loss on ENOSPC - hfs: prevent btree data loss on ENOSPC - hfsplus: fix return value of hfsplus_get_block() - hfs: fix return value of hfs_get_block() - hfsplus: update timestamps on truncate() - hfs: update timestamp on truncate() - fs/hfs/extent.c: fix array out of bounds read of array extent - kernel/panic.c: do not append newline to the stack protector panic string - mm/memory_hotplug: make add_memory() take the device_hotplug_lock - mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock - [ppc64*,powerprc] powerpc/powernv: hold device_hotplug_lock when calling device_online() - igb: shorten maximum PHC timecounter update interval - fm10k: ensure completer aborts are marked as non-fatal after a resume - [arm64] net: hns3: bugfix for buffer not free problem during resetting - [arm64] net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem - [arm64] net: hns3: bugfix for is_valid_csq_clean_head() - [arm64] net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read - ntb_netdev: fix sleep time mismatch - [x86] ntb: intel: fix return value for ndev_vec_mask() - irq/matrix: Fix memory overallocation - nvme-pci: fix conflicting p2p resource adds - [arm64] makefile fix build of .i file in external module case - [x86] tools/power turbosat: fix AMD APIC-id output - mm: handle no memcg case in memcg_kmem_charge() properly - ocfs2: without quota support, avoid calling quota recovery - ocfs2: don't use iocb when EIOCBQUEUED returns - ocfs2: don't put and assigning null to bh allocated outside - ocfs2: fix clusters leak in ocfs2_defrag_extent() - net: do not abort bulk send on BQL status - sched/topology: Fix off by one bug - sched/fair: Don't increase sd->balance_interval on newidle balance - openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS - [armhf] dts: imx6sx-sdb: Fix enet phy regulator - [arm64] sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock - soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL - audit: print empty EXECVE args - sock_diag: fix autoloading of the raw_diag module - net: bpfilter: fix iptables failure if bpfilter_umh is disabled - nds32: Fix bug in bitfield.h - media: ov13858: Check for possible null pointer - btrfs: avoid link error with CONFIG_NO_AUTO_INLINE - wil6210: fix debugfs memory access alignment - wil6210: fix L2 RX status handling - wil6210: fix RGF_CAF_ICR address for Talyn-MB - wil6210: fix locking in wmi_call - ath10k: snoc: fix unbalanced clock error handling - wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()' - rtl8xxxu: Fix missing break in switch - brcmsmac: never log "tid x is not agg'able" by default - wireless: airo: potential buffer overflow in sprintf() - rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information - net: dsa: bcm_sf2: Turn on PHY to allow successful registration - scsi: mpt3sas: Fix Sync cache command failure during driver unload - scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices - scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11 - scsi: megaraid_sas: Fix msleep granularity - scsi: megaraid_sas: Fix goto labels in error handling - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point - scsi: lpfc: Correct loss of fc4 type on remote port address change - usb: typec: tcpm: charge current handling for sink during hard reset - dlm: fix invalid free - dlm: don't leak kernel pointer to userspace - vrf: mark skb for multicast or link-local as enslaved to VRF - clk: tegra20: Turn EMC clock gate into divider - ACPICA: Use %d for signed int print formatting instead of %u - net: bcmgenet: return correct value 'ret' from bcmgenet_power_down - of: unittest: allow base devicetree to have symbol metadata - of: unittest: initialize args before calling of_*parse_*() - tools: bpftool: pass an argument to silence open_obj_pinned() - cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces - pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues - pinctrl: bcm2835: Use define directive for BCM2835_PINCONF_PARAM_PULL - pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT - pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD - PCI: keystone: Use quirk to limit MRRS for K2G - nvme-pci: fix surprise removal - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch - i2c: uniphier-f: fix timeout error after reading 8 bytes - mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock - ipv6: Fix handling of LLA with VRF and sockets bound to VRF - cfg80211: call disconnect_wk when AP stops - mm/page_io.c: do not free shared swap slots - Bluetooth: Fix invalid-free in bcsp_close() - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe - ath9k_hw: fix uninitialized variable data - md/raid10: prevent access of uninitialized resync_pages offset - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() - net: phy: dp83867: fix speed 10 in sgmii mode - net: phy: dp83867: increase SGMII autoneg timer duration - ocfs2: remove ocfs2_is_o2cb_active() - [arm*] 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary - ARC: perf: Accommodate big-endian CPU - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - y2038: futex: Move compat implementation into futex.c - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - nfc: port100: handle command failure cleanly - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - virtio_ring: fix return code on DMA mapping fails - USBIP: add config dependency for SGL_ALLOC - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [ppc64*] support nospectre_v2 cmdline option - [ppc64*] book3s: Fix link stack flush on context switch (CVE-2019-18660) - [ppc64*, powerpc] PPC: Book3S HV: Flush link stack on guest exit to host kernel - PM / devfreq: Fix kernel oops on governor module load . [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) * [armhf, arm64] Backport devicetree for enabling support for the Raspberry PI 3 A+ . [ Salvatore Bonaccorso ] * ixgbe: Fix secpath usage for IPsec TX offload (Closes: #930443) * ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (Closes: #945023) * [x86] KVM: x86: introduce is_pae_paging (Regression in 4.19.77) * [rt] Refresh 0011-sched-fair-Robustify-CFS-bandwidth-timer-locking.patch (context changes in 4.19.84) . [ Bastian Blank ] * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341) . [ Noah Meyerhans ] * drivers/net/ethernet/amazon: Backport driver fixes from Linux 5.4 (Closes: #941291) * Bump ABI to 7 . [ Ben Hutchings ] * debian/bin/genpatch-rt: Fix series generation from git * [rt] Update to 4.19.82-rt30: - Drop changes in "fs/dcache: disable preemption on i_dir_seq's write side" that conflict with "Fix the locking in dcache_readdir() and friends" - Rewrite "fs/aio: simple simple work" using kthread_work - Rewrite "thermal: Defer thermal wakups to threads" using kthread_work - Rewrite "block: blk-mq: move blk_queue_usage_counter_release() into process context" using kthread_work - workqueue: rework . [ Benjamin Poirier ] * tools/perf: Add python3 support to scripts (Closes: #944641) . [ Aurelien Jarno ] * [rt] Refresh 0025-NFSv4-replace-seqcount_t-with-a-seqlock_t.patch (context changes in 4.19.86) * [rt] Refresh 0202-net-Qdisc-use-a-seqlock-instead-seqcount.patch (context changes in 4.19.86) * [rt] Refresh 0057-printk-Add-a-printk-kill-switch.patch (context changes in 4.19.87) * [rt] Refresh 0207-printk-Make-rt-aware.patch (context changes in 4.19.87) linux (4.19.67-2+deb10u2) buster-security; urgency=high . * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - KVM: x86: use Intel speculation bugs and features as derived in generic x86 code - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: Convert kvm_lock to a mutex - kvm: x86: Do not release the page inside mmu_set_spte() - KVM: x86: make FNAME(fetch) and __direct_map more similar - KVM: x86: remove now unneeded hugepage gfn adjustment - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON - KVM: x86: add tracepoints around __direct_map and FNAME(fetch) - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA linux (4.19.67-2+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports; no further changes required . linux (4.19.67-2+deb10u2) buster-security; urgency=high . * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - KVM: x86: use Intel speculation bugs and features as derived in generic x86 code - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: Convert kvm_lock to a mutex - kvm: x86: Do not release the page inside mmu_set_spte() - KVM: x86: make FNAME(fetch) and __direct_map more similar - KVM: x86: remove now unneeded hugepage gfn adjustment - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON - KVM: x86: add tracepoints around __direct_map and FNAME(fetch) - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA linux-latest (105+deb10u3) buster; urgency=medium . * Update to 4.19.0-8 linux-latest (105+deb10u2) buster; urgency=medium . * Update to 4.19.0-7 linux-signed-amd64 (4.19.98+1) buster; urgency=medium . * Sign kernel from linux 4.19.98-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.88 - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate - ASoC: compress: fix unsigned integer overflow check - reset: Fix memory leak in reset_control_array_put() - [armhf] clk: samsung: exynos5433: Fix error paths - [armel/marvell,armhf] ASoC: kirkwood: fix external clock probe defer - [armel/marvell,armhf] ASoC: kirkwood: fix device remove ordering - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic - [armhf] dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts - reset: fix reset_control_ops kerneldoc comment - [armhf,arm64] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend - [ppc64el] bpf: Fix tail call implementation - idr: Fix integer overflow in idr_for_each_entry - idr: Fix idr_alloc_u32 on 32-bit systems - [x86] resctrl: Prevent NULL pointer dereference when reading mondata - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay timeout - bridge: ebtables: don't crash when using dnat target in output chains - can: peak_usb: report bus recovery as well - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error - [armhf] can: flexcan: increase error counters if skb enqueueing via can_rx_offload_queue_sorted() fails - [arm64] watchdog: meson: Fix the wrong value of left time - ceph: return -EINVAL if given fsc mount option on kernel w/o support - net/fq_impl: Switch to kvmalloc() for memory allocation - mac80211: fix station inactive_time shortly after boot - block: drbd: remove a stray unlock in __drbd_send_protocol() - scsi: target/tcmu: Fix queue_cmd_ring() declaration - scsi: lpfc: Fix kernel Oops due to null pring pointers - scsi: lpfc: Fix dif and first burst use in write commands - tracing: Lock event_mutex before synth_event_mutex - [armhf] dts: imx*: Fix memory node duplication - [armhf] dts: Fix hsi gdd range for omap4 - [arm64] mm: Prevent mismatched 52-bit VA support - [arm64] smp: Handle errors reported by the firmware - [armhf] bus: ti-sysc: Check for no-reset and no-idle flags at the child level - [arm64] RDMA/hns: Fix the bug while use multi-hop of pbl - [x86] RDMA/vmw_pvrdma: Use atomic memory allocation in create AH - [armhf] PM / AVS: SmartReflex: NULL check before some freeing functions is not needed - xfs: zero length symlinks are not valid - ACPI / LPSS: Ignore acpi_device_fix_up_power() return value - scsi: lpfc: Enable Management features for IF_TYPE=6 - scsi: qla2xxx: Fix NPIV handling for FC-NVMe - scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port - nvme: provide fallback for discard alloc failure - [s390x] zcrypt: make sysfs reset attribute trigger queue reset - crypto: user - support incremental algorithm dumps - mwifiex: fix potential NULL dereference and use after free - mwifiex: debugfs: correct histogram spacing, formatting - brcmfmac: set F2 watermark to 256 for 4373 - brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 - rtl818x: fix potential use after free - bcache: do not check if debug dentry is ERR or NULL explicitly on remove - bcache: do not mark writeback_running too early - xfs: require both realtime inodes to mount - nvme: fix kernel paging oops - ubifs: Fix default compression selection in ubifs - ubi: Put MTD device after it is not used - ubi: Do not drop UBI device reference before using - iwlwifi: move iwl_nvm_check_version() into dvm - iwlwifi: mvm: force TCM re-evaluation on TCM resume - iwlwifi: pcie: fix erroneous print - iwlwifi: pcie: set cmd_len in the correct place - [armhf,arm64] gpio: pca953x: Fix AI overflow on PCAL6524 - gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB - [x86] kvm: vmx: Set IA32_TSC_AUX for legacy mode guests - [x86] Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" - [x86] Revert "KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode()" - VSOCK: bind to random port for VMADDR_PORT_ANY - [amd64] mmc: meson-gx: make sure the descriptor is stopped on errors - [armhf] mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET - [armhf] usb: ehci-omap: Fix deferred probe for phy handling - btrfs: Check for missing device before bio submission in btrfs_map_bio - btrfs: fix ncopies raid_attr for RAID56 - btrfs: dev-replace: set result code of cancel by status of scrub - Btrfs: allow clear_extent_dirty() to receive a cached extent state record - btrfs: only track ref_heads in delayed_ref_updates - [x86] HID: intel-ish-hid: fixes incorrect error handling - serial: 8250: Rate limit serial port rx interrupts during input overruns - [x86] kprobes/xen: blacklist non-attachable xen interrupt functions - xen/pciback: Check dev_data before using it - kprobes: Blacklist symbols in arch-defined prohibited area - [amd64] kprobes: Show x86-64 specific blacklisted symbols correctly - [armhf] memory: omap-gpmc: Get the header of the enum - net/mlx5: Continue driver initialization despite debugfs failure - netfilter: nf_nat_sip: fix RTP/RTCP source port translations - exofs_mount(): fix leaks on failure exits - bnxt_en: Return linux standard errors in bnxt_ethtool.c - bnxt_en: Save ring statistics before reset. - bnxt_en: query force speeds before disabling autoneg mode. - [s390x] KVM: unregister debug feature on failing arch init - dm flakey: Properly corrupt multi-page bios. - gfs2: take jdata unstuff into account in do_grow - dm raid: fix false -EBUSY when handling check/repair message - xfs: Align compat attrlist_by_handle with native implementation. - xfs: Fix bulkstat compat ioctls on x32 userspace. - IB/qib: Fix an error code in qib_sdma_verbs_send() - vxlan: Fix error path in __vxlan_dev_create() - [ppc64el] xmon: fix dump_segments() - drivers/regulator: fix a missing check of return value - Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer - scsi: qla2xxx: deadlock by configfs_depend_item - scsi: csiostor: fix incorrect dma device in case of vport - brcmfmac: Fix access point mode - ath6kl: Only use match sets when firmware supports it - ath6kl: Fix off by one error in scan completion - [ppc64el] perf: Fix unit_sel/cache_sel checks - [ppc64el] prom: fix early DEBUG messages - [ppc64el] mm: Make NULL pointer deferences explicit on bad page faults. - [ppc64el] vfio/spapr_tce: Get rid of possible infinite loop - [ppc64el] powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status - drbd: ignore "all zero" peer volume sizes in handshake - drbd: reject attach of unsuitable uuids even if connected - drbd: do not block when adjusting "disk-options" while IO is frozen - drbd: fix print_st_err()'s prototype to match the definition - IB/rxe: Make counters thread safe - bpf/cpumap: make sure frame_size for build_skb is aligned if headroom isn't - [armhf] regulator: tps65910: fix a missing check of return value - [ppc64el] powerpc/pseries: Fix node leak in update_lmb_associativity_index() - net/netlink_compat: Fix a missing check of nla_parse_nested - net/net_namespace: Check the return value of register_pernet_subsys() - f2fs: fix block address for __check_sit_bitmap - f2fs: fix to dirty inode synchronously - [armhf] net: dsa: bcm_sf2: Propagate error value from mdio_write - atl1e: checking the status of atl1e_write_phy_reg - tipc: fix a missing check of genlmsg_put - net: marvell: fix a missing check of acpi_match_device - ocfs2: clear journal dirty flag after shutdown journal - vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n - mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() - mm/page_alloc.c: use a single function to free page - mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() - netfilter: nf_tables: fix a missing check of nla_put_failure - xprtrdma: Prevent leak of rpcrdma_rep objects - infiniband/qedr: Potential null ptr dereference of qp - lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk - lib/genalloc.c: use vzalloc_node() to allocate the bitmap - drivers/base/platform.c: kmemleak ignore a known leak - lib/genalloc.c: include vmalloc.h - mtd: Check add_mtd_device() ret code - tipc: fix memory leak in tipc_nl_compat_publ_dump - net/core/neighbour: tell kmemleak about hash tables - [armhf,arm64] ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs - PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() - net/core/neighbour: fix kmemleak minimal reference count for hash tables - serial: 8250: Fix serial8250 initialization crash - [armhf] gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change - sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe - ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel - decnet: fix DN_IFREQ_SIZE - net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() - net/smc: don't wait for send buffer space when data was already sent - mm/hotplug: invalid PFNs from pfn_to_online_page() - xfs: end sync buffer I/O properly on shutdown error - net/smc: fix sender_free computation - blktrace: Show requests without sector - net/smc: fix byte_order for rx_curs_confirmed - tipc: fix skb may be leaky in tipc_link_input - sfc: initialise found bitmap in efx_ef10_mtd_probe - geneve: change NET_UDP_TUNNEL dependency to select - net: fix possible overflow in __sk_mem_raise_allocated() - net: ip_gre: do not report erspan_ver for gre or gretap - net: ip6_gre: do not report erspan_ver for ip6gre or ip6gretap - sctp: don't compare hb_timer expire date before starting it - bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() - mmc: core: align max segment size with logical block size - net: dev: Use unsigned integer as an argument to left-shift - kvm: properly check debugfs dentry before using it - bpf: drop refcount if bpf_map_new_fd() fails in map_create() - [arm64] net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED - [arm64] net: hns3: fix PFC not setting problem for DCB module - [arm64] net: hns3: fix an issue for hclgevf_ae_get_hdev - [arm64] net: hns3: fix an issue for hns3_update_new_int_gl - [x86] iommu/amd: Fix NULL dereference bug in match_hid_uid - apparmor: delete the dentry in aafs_remove() to avoid a leak - scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing - ACPI / APEI: Switch estatus pool to use vmalloc memory - [arm64] scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned - scsi: libsas: Check SMP PHY control function result - [arm64] RDMA/hns: Fix the bug with updating rq head pointer when flush cqe - [arm64] RDMA/hns: Bugfix for the scene without receiver queue - [arm64] RDMA/hns: Fix the state of rereg mr - [arm64] RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp - ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board - [ppc64el] pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (CVE-2019-12614) - xdp: fix cpumap redirect SKB creation bug - mtd: Remove a debug trace in mtdpart.c - [s390x] mm, gup: add missing refcount overflow checks on s390 - [armhf,arm64] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - thunderbolt: Power cycle the router if NVM authentication fails - xfrm: Fix memleak on xfrm state destroy - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE - [arm64] net: macb: fix error format in dev_err() - pwm: Clear chip_data in pwm_put() - macvlan: schedule bc_work even if error - net: psample: fix skb_over_panic - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - tipc: fix link name length check - sctp: cache netns in sctp_ep_common - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - [arm64] net: macb: add missed tasklet_kill - ext4: add more paranoia checking in ext4_expand_extra_isize handling (CVE-2019-19767) - [arm64] net: macb: Fix SUBNS increment and increase resolution - [arm64] net: macb driver, check for SKBTX_HW_TSTAMP - mtd: spi-nor: cast to u64 to avoid uint overflows - tcp: exit if nothing to retransmit on RTO timeout - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform: hp-wmi: Fix ACPI errors caused by passing 0 as input size https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89 - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071) - [arm64] tegra: Fix 'active-low' warning for Jetson TX1 regulator - usb: gadget: u_serial: add missing port entry locking - [arm64] tty: serial: msm_serial: Fix flow control - [armhf,arm64] serial: pl011: Fix DMA ->flush_buffer() - serial: serial_core: Perform NULL checks for break_ctl ops - autofs: fix a leak in autofs_expire_indirect() - [arm64] RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN - iwlwifi: pcie: don't consider IV len in A-MSDU - exportfs_decode_fh(): negative pinned may become positive without the parent locked - audit_get_nd(): don't unlock parent too early - xfrm: release device reference for invalid state - sched/core: Avoid spurious lock dependencies - perf/core: Consistently fail fork on allocation failures - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() - [armhf,arm64] drm/sun4i: tcon: Set min division of TCON0_DCLK to 1. - rsxx: add missed destroy_workqueue calls in remove - i2c: core: fix use after free in of_i2c_notify - serial: core: Allow processing sysrq at port unlock time - cxgb4vf: fix memleak in mac_hlist initialization - iwlwifi: mvm: synchronize TID queue removal - iwlwifi: trans: Clear persistence bit when starting the FW - iwlwifi: mvm: Send non offchannel traffic via AP sta - [armhf] 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+ - audit: Embed key into chunk - netfilter: nf_tables: don't use position attribute on rule replacement - net/mlx5: Release resource on error flow - [arm64] clk: sunxi-ng: a64: Fix gate bit of DSI DPHY - ice: Fix NVM mask defines - dlm: fix possible call to kfree() for non-initialized pointer - [armhf] dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1 - [armhf,arm64] rtc: max77686: Fix the returned value in case of error in 'max77686_rtc_read_time()' - i40e: don't restart nway if autoneg not supported - virtchnl: Fix off by one error - [armhf] clk: rockchip: fix rk3188 sclk_smc gate data - [armhf] clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering - [armhf] dts: rockchip: Fix rk3288-rock2 vcc_flash name - dlm: fix missing idr_destroy for recover_idr - [armhf,arm64] net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2 - [s390x] scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the CDB - [s390x] scsi: zfcp: drop default switch case which might paper over missing case - [armhf] bus: ti-sysc: Fix getting optional clocks in clock_roles - [armhf] dts: imx6: RDU2: fix eGalax touchscreen node - crypto: ecc - check for invalid values in the key verification test - crypto: bcm - fix normal/non key hash algorithm failure - [arm64] dts: zynqmp: Fix node names which contain "_" - [arm64] pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues - [arm*] firmware: raspberrypi: Fix firmware calls with large buffers - mm/vmstat.c: fix NUMA statistics updates - [arm64] clk: rockchip: fix I2S1 clock gate register for rk3328 - [arm64] clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 - sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit - regulator: Fix return value of _set_load() stub - USB: serial: f81534: fix reading old/new IC config - xfs: extent shifting doesn't fully invalidate page cache - net-next/hinic:fix a bug in set mac address - net-next/hinic: fix a bug in rx data flow - ice: Fix return value from NAPI poll - ice: Fix possible NULL pointer de-reference - iomap: FUA is wrong for DIO O_DSYNC writes into unwritten extents - iomap: sub-block dio needs to zeroout beyond EOF - iomap: dio data corruption and spurious errors when pipes fill - iomap: readpages doesn't zero page tail beyond EOF - iw_cxgb4: only reconnect with MPAv1 if the peer aborts - [mips*/octeon] octeon-platform: fix typing - net/smc: use after free fix in smc_wr_tx_put_slot() - [armhf] dts: exynos: Use Samsung SoC specific compatible for DWC2 module - media: pulse8-cec: return 0 when invalidating the logical address - media: cec: report Vendor ID after initialization - iwlwifi: fix cfg structs for 22000 with different RF modules - net/ipv6: re-do dad when interface has IFF_NOARP flag change - [x86] dmaengine: dw-dmac: implement dma protection control setting - [armhf,arm64] usb: dwc3: debugfs: Properly print/set link state for HS - [armhf,arm64] usb: dwc3: don't log probe deferrals; but do log other error codes - ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() - f2fs: fix to account preflush command for noflush_merge mode - f2fs: fix count of seg_freed to make sec_freed correct - f2fs: change segment to section in f2fs_ioc_gc_range - [armhf] dts: rockchip: Fix the PMU interrupt number for rv1108 - [armhf] dts: rockchip: Assign the proper GPIO clocks for rv1108 - f2fs: fix to allow node segment for GC by ioctl path - nvme: Free ctrl device name on init failure - dma-mapping: fix return type of dma_set_max_seg_size() - [armhf] serial: imx: fix error handling in console_setup - [armhf] i2c: imx: don't print error message on probe defer - [arm64] clk: meson: Fix GXL HDMI PLL fractional bits width - [armhf,arm64] gpu: host1x: Fix syncpoint ID field size on Tegra186 - lockd: fix decoding of TEST results - sctp: increase sk_wmem_alloc when head->truesize is increased - [x86] iommu/amd: Fix line-break in error log reporting - [armhf] dts: sun8i: a23/a33: Fix OPP DTC warnings - [armhf] dts: sun8i: v3s: Change pinctrl nodes to avoid warning - nfsd: fix a warning in __cld_pipe_upcall() - bpf: btf: implement btf_name_valid_identifier() - bpf: btf: check name validity for various types - [armhf] OMAP1/2: fix SoC name printing - [arm64] dts: meson-gxl-libretech-cc: fix GPIO lines names - [arm64] dts: meson-gxbb-nanopi-k2: fix GPIO lines names - [arm64] dts: meson-gxbb-odroidc2: fix GPIO lines names - [arm64] dts: meson-gxl-khadas-vim: fix GPIO lines names - net/x25: fix called/calling length calculation in x25_parse_address_block - net/x25: fix null_x25_address handling - tcp: make tcp_space() aware of socket backlog - tcp: fix off-by-one bug on aborting window-probing socket - tcp: fix SNMP under-estimation on failed retransmission - tcp: fix SNMP TCP timeout under-estimation - kbuild: fix single target build for external module - mtd: fix mtd_oobavail() incoherent returned value - [arm64] clk: meson: meson8b: fix the offset of vid_pll_dco's N value - [armhf,arm64] clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent - [arm64] clk: qcom: Fix MSM8998 resets - dlm: fix invalid cluster name warning - net/mlx4_core: Fix return codes of unsupported operations - pstore/ram: Avoid NULL deref in ftrace merging failure path - [mips*/octeon] cvmx_pko_mem_debug8: use oldest forward compatible definition - nfsd: Return EPERM, not EACCES, in some SETATTR cases - media: uvcvideo: Abstract streaming object lifetime - [armhf] dts: sun8i: h3: Fix the system-control register range - tty: Don't block on IO when ldisc change is pending - media: stkwebcam: Bugfix for wrong return values - sctp: frag_point sanity check - IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state - IB/hfi1: Close VNIC sdma_progress sleep window - mlx4: Use snprintf instead of complicated strcpy - [armhf] dts: sunxi: Fix PMU compatible strings - [armhf] dts: am335x-pdu001: Fix polarity of card detection input - net: aquantia: fix RSS table and key sizes - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - fuse: verify nlink - fuse: verify attributes - [x86] ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - [x86] ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - ALSA: pcm: oss: Avoid potential buffer overflows - [x86] ALSA: hda - Add mute led support for HP ProBook 645 G4 - [x86] Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus - [x86] Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers - [x86] Input: goodix - add upside-down quirk for Teclast X89 tablet - Input: Fix memory leak in psxpad_spi_probe - [i386] mm: Sync only to VMALLOC_END in vmalloc_sync_all() - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect - xfrm interface: fix memory leak on creation - xfrm interface: avoid corruption on changelink - xfrm interface: fix list corruption for x-netns - xfrm interface: fix management of phydev - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks - CIFS: Fix SMB2 oplock break processing - tty: vt: keyboard: reject invalid keycodes - can: slcan: Fix use-after-free Read in slcan_open - kernfs: fix ino wrap-around detection - jbd2: Fix possible overflow in jbd2_log_space_left() - [arm64] drm/msm: fix memleak on release - [i386] drm/i810: Prevent underflow in ioctl - [armhf,arm64] KVM: vgic: Don't rely on the wrong pending table - [x86] KVM: do not modify masked bits of shared MSRs - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES - [x86] KVM: Grab KVM's srcu lock when setting nested state - crypto: af_alg - cast ki_complete ternary op to int - [x86] crypto: ccp - fix uninitialized list head - crypto: ecdh - fix big endian bug in ECC library - crypto: user - fix memory leak in crypto_report (CVE-2019-19062) - mwifiex: update set_mac_address logic - can: ucan: fix non-atomic allocation in completion handler - RDMA/qib: Validate ->show()/store() callbacks before calling them - iomap: Fix pipe page leakage during splicing - thermal: Fix deadlock in thermal thermal_zone_device_check - vcs: prevent write access to vcsu devices (CVE-2019-19252) - binder: Fix race between mmap() and binder_alloc_print_pages() - binder: Handle start==NULL in binder_update_page_range() - ALSA: hda - Fix pending unsol events at shutdown - perf script: Fix invalid LBR/binary mismatch error - splice: don't read more than available pipe space - iomap: partially revert 4721a601099 (simulated directio short read on EFAULT) - xfs: add missing error check in xfs_prepare_shift() - ASoC: rsnd: fixup MIX kctrl registration - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) - net: qrtr: fix memort leak in qrtr_tun_write_iter (CVE-2019-19079) - appletalk: Fix potential NULL pointer dereference in unregister_snap_client (CVE-2019-19227) - appletalk: Set error code if register_snap_client failed https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.90 - usb: gadget: configfs: Fix missing spin_lock_init() - [x86] usb: gadget: pch_udc: fix use after free - scsi: qla2xxx: Fix driver unload hang - [arm64] media: venus: remove invalid compat_ioctl32 handler - USB: uas: honor flag to avoid CAPACITY16 - USB: uas: heed CAPACITY_HEURISTICS - usb: Allow USB device to be warm reset in suspended state - staging: rtl8188eu: fix interface sanity check - staging: rtl8712: fix interface sanity check - staging: gigaset: fix general protection fault on probe - staging: gigaset: fix illegal free on probe errors - staging: gigaset: add endpoint-type sanity check - usb: xhci: only set D3hot for pci device - xhci: Fix memory leak in xhci_add_in_port() - xhci: Increase STS_HALT timeout in xhci_suspend() - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. - [armhf] dts: pandora-common: define wl1251 as child node of mmc3 - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit - USB: atm: ueagle-atm: add missing endpoint check - USB: idmouse: fix interface sanity checks - USB: serial: io_edgeport: fix epic endpoint lookup - usb: roles: fix a potential use after free - USB: adutux: fix interface sanity check - usb: core: urb: fix URB structure initialization function - usb: mon: Fix a deadlock in usbmon between mmap and read - tpm: add check after commands attribs tab allocation - virtio-balloon: fix managed page counts when migrating pages between zones - [armhf,arm64] usb: dwc3: gadget: Fix logical condition - [armhf,arm64] usb: dwc3: ep0: Clear started flag on completion - btrfs: check page->mapping when loading free space cache - btrfs: use refcount_inc_not_zero in kill_all_nodes - Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc - Btrfs: fix negative subv_writers counter and data space leak after buffered write - btrfs: Avoid getting stuck during cyclic writebacks - btrfs: Remove btrfs_bio::flags member - Btrfs: send, skip backreference walking for extents with many references - btrfs: record all roots for rename exchange on a subvol - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer - rtlwifi: rtl8192de: Fix missing enable interrupt flag - ovl: fix corner case of non-unique st_dev;st_ino - ovl: relax WARN_ON() on rename to self - [armhf] hwrng: omap - Fix RNG wait loop timeout - dm writecache: handle REQ_FUA - dm zoned: reduce overhead of backing device checks - workqueue: Fix spurious sanity check failures in destroy_workqueue() - workqueue: Fix pwq ref leak in rescuer_thread() - ASoC: rt5645: Fixed buddy jack support. - ASoC: rt5645: Fixed typo for buddy jack support. - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report - md: improve handling of bio with REQ_PREFLUSH in md_flush_request() - blk-mq: avoid sysfs buffer overflow with too many CPU cores - cgroup: pids: use atomic64_t for pids->limit - ar5523: check NULL before memcpy() in ar5523_cmd() - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported - media: cec.h: CEC_OP_REC_FLAG_ values were swapped - cpuidle: Do not unset the driver if it is there already - erofs: zero out when listxattr is called with no xattr - [x86] intel_th: Fix a double put_device() in error path - [x86] intel_th: pci: Add Ice Lake CPU support - [x86] intel_th: pci: Add Tiger Lake CPU support - PM / devfreq: Lock devfreq in trans_stat_show - [ppc64el] cpufreq: powernv: fix stack bloat and hard limit on number of CPUs - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge - ACPI: OSL: only free map once in osl.c - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() - ACPI: PM: Avoid attaching ACPI PM domain to certain devices - [arm64] pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() - [armhf] pinctrl: samsung: Add of_node_put() before return in error path - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card - [armhf] dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity - ppdev: fix PPGETTIME/PPSETTIME ioctls - [ppc64el] Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB - [ppc64el] xive: Prevent page fault issues in the machine crash handler - [ppc64el] Allow flush_icache_range to work across ranges >4GB - [ppc64el] xive: Skip ioremap() of ESB pages for LSI interrupts - video/hdmi: Fix AVI bar unpack - quota: Check that quota is not dirty before release - ext2: check err when partial != NULL - quota: fix livelock in dquot_writeback_dquots - ext4: Fix credit estimate for final inode freeing - reiserfs: fix extended attributes on the root directory - block: fix single range discard merge - [s390x] scsi: zfcp: trace channel log even for FCP command responses - scsi: qla2xxx: Fix DMA unmap leak - scsi: qla2xxx: Fix hang in fcport delete path - scsi: qla2xxx: Fix session lookup in qlt_abort_work() - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value - scsi: qla2xxx: Fix message indicating vectors used by driver - scsi: qla2xxx: Fix SRB leak on switch command timeout - xhci: make sure interrupts are restored to correct state - usb: typec: fix use after free in typec_register_port() - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 - scsi: lpfc: Cap NPIV vports to 256 - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE - scsi: lpfc: Correct topology type reporting on G7 adapters - sch_cake: Correctly update parent qlen when splitting GSO packets - net/smc: do not wait under send_lock - [arm64] net: hns3: clear pci private data when unload hns3 driver - [arm64] net: hns3: change hnae3_register_ae_dev() to int - [arm64] net: hns3: Check variable is valid before assigning it to another - [arm64] scsi: hisi_sas: send primitive NOTIFY to SSP situation only - [arm64] scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G - [x86] MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models - [x86] MCE/AMD: Carve out the MC4_MISC thresholding quirk - ath10k: fix fw crash by moving chip reset after napi disabled - [ppc64el] Fix vDSO clock_getres() - ext4: work around deleting a file with i_nlink == 0 safely (CVE-2019-19447) - mm/shmem.c: cast the type of unmap_start to u64 - rtc: disable uie before setting time and enable after - splice: only read in as much information as there is pipe buffer space - ext4: fix a bug in ext4_wait_for_tail_page_commit - [armhf,arm64] mfd: rk808: Fix RK818 ID template - mm, thp, proc: report THP eligibility for each vma - [s390x] smp,vdso: fix ASCE handling - blk-mq: make sure that line break can be printed - workqueue: Fix missing kfree(rescuer) in destroy_workqueue() - perf callchain: Fix segfault in thread__resolve_callchain_sample() - gre: refetch erspan header from skb->data after pskb_may_pull() - sunrpc: fix crash when cache_head become valid before update - net/mlx5e: Fix SFF 8472 eeprom length - leds: trigger: netdev: fix handling on interface rename - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - of: overlay: add_changeset_property() memory leak - kernel/module.c: wakeup processes in module_wq on module unload - cifs: Fix potential softlockups while refreshing DFS cache - [x86] gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist - raid5: need to set STRIPE_HANDLE for batch head - scsi: qla2xxx: Change discovery state before PLOGI - [x86] iio: imu: mpu6050: add missing available scan masks - idr: Fix idr_get_next_ul race with idr_remove - of: unittest: fix memory leak in attach_node_and_children https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91 - inet: protect against too small mtu values. - mqprio: Fix out-of-bounds access in mqprio_dump - net: bridge: deny dev_set_mac_address() when unregistering - net: dsa: fix flow dissection on Tx path - net: ethernet: ti: cpsw: fix extra rx interrupt - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues - [arm64] net: thunderx: start phy before starting autonegotiation - openvswitch: support asymmetric conntrack - tcp: md5: fix potential overestimation of TCP option space - tipc: fix ordering of tipc module init and exit routine - net/mlx5e: Query global pause state before setting prio2buffer - tcp: fix rejected syncookies due to stale timestamps - tcp: tighten acceptance of ACKs not matching a child socket - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() - [arm64] Revert "arm64: preempt: Fix big-endian when checking preempt count in assembly" - mmc: block: Make card_busy_detect() a bit more generic - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response - PCI/PM: Always return devices to D0 when thawing - PCI: pciehp: Avoid returning prematurely from sysfs requests - [x86] PCI: Fix Intel ACS quirk UPDCR register address - PCI/MSI: Fix incorrect MSI-X masking on resume - [arm64] PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 - [arm64] rpmsg: glink: Set tail pointer to 0 at end of FIFO - [arm64] rpmsg: glink: Fix reuse intents memory leak issue - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case - [arm64] rpmsg: glink: Put an extra reference during cleanup - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling - [arm64] rpmsg: glink: Don't send pending rx_done during remove - [arm64] rpmsg: glink: Free pending deferred work on remove - cifs: smbd: Return -EAGAIN when transport is reconnecting - cifs: smbd: Add messages on RDMA session destroy and reconnection - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE - cifs: Don't display RDMA transport on reconnect - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect - CIFS: Close open handle after interrupted close - [armhf] tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() - vfio/pci: call irq_bypass_unregister_producer() before freeing irq - dma-buf: Fix memory leak in sync_file_merge() - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching - dm mpath: remove harmful bio-based optimization - dm btree: increase rebalance threshold in __rebalance2() - scsi: iscsi: Fix a potential deadlock in the timeout handler - scsi: qla2xxx: Change discovery state before PLOGI - drm/radeon: fix r1xx/r2xx register checker for POT textures - xhci: fix USB3 device initiated resume race with roothub autosuspend https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.92 - af_packet: set defaule value for tmo - [amd64] fjes: fix missed check in fjes_acpi_add - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl - net: qlogic: Fix error paths in ql_alloc_large_buffers() - net: usb: lan78xx: Fix suspend/resume PHY register access error - qede: Disable hardware gro when xdp prog is installed - qede: Fix multicast mac configuration - sctp: fully initialize v4 addr in some functions - btrfs: don't double lock the subvol_sem for rename exchange - btrfs: do not call synchronize_srcu() in inode_tree_del - Btrfs: fix missing data checksums after replaying a log tree - btrfs: send: remove WARN_ON for readonly mount - btrfs: abort transaction after failed inode updates in create_subvol - btrfs: skip log replay on orphaned roots - btrfs: do not leak reloc root if we fail to read the fs root - btrfs: handle ENOENT in btrfs_uuid_tree_iterate - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues - ALSA: pcm: Avoid possible info leaks from PCM stream buffers - ALSA: hda/ca0132 - Keep power on during processing DSP response - ALSA: hda/ca0132 - Avoid endless loop - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers - drm/amdgpu: grab the id mgr lock while accessing passid_mapping - spi: Add call to spi_slave_abort() function when spidev driver is released - [x86] staging: rtl8192u: fix multiple memory leaks on error path - staging: rtl8188eu: fix possible null dereference - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063) - libertas: fix a potential NULL pointer dereference - ath10k: fix backtrace on coredump - IB/iser: bound protection_sg size by data_sg size - [arm64] media: venus: core: Fix msm8996 frequency table - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq - pinctrl: devicetree: Avoid taking direct reference to device name string - [amd64] drm/amdkfd: fix a potential NULL pointer dereference - [arm64] media: venus: Fix occasionally failures to suspend - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller - block: Fix writeback throttling W=1 compiler warnings - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (CVE-2019-19057) - drm/drm_vblank: Change EINVAL by the correct errno - media: cx88: Fix some error handling path in 'cx8800_initdev()' - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0 - [x86] mm: Use the correct function type for native_set_fixmap() - ath10k: Correct error handling of dma_map_single() - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode - perf report: Add warning when libunwind not compiled in - usb: usbfs: Suppress problematic bind and unbind uevents. - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req - Bluetooth: Workaround directed advertising bug in Broadcom controllers - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL - [x86] mce: Lower throttling MCE messages' priority to warning - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot - ipmi: Don't allow device module unload when in use - [x86] ioapic: Prevent inconsistent state when moving an interrupt - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill() - i40e: initialize ITRN registers with correct values - net: phy: dp83867: enable robust auto-mdix - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210 - ACPI: button: Add DMI quirk for Medion Akoya E2215T - RDMA/qedr: Fix memory leak in user qp and mr - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle - [s390x] time: ensure get_clock_monotonic() returns monotonic values - [s390x] mm: add mm_pxd_folded() checks to pxd_free() - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout - libata: Ensure ata_port probe has completed before detach - loop: fix no-unmap write-zeroes request behavior - Bluetooth: Fix advertising duplicated flags - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() - ixgbe: protect TX timestamping from API misuse - media: rcar_drif: fix a memory disclosure (CVE-2019-18786) - media: v4l2-core: fix touch support in v4l_g_fmt - rfkill: allocate static minor - bnx2x: Fix PF-VF communication over multi-cos queues. - ALSA: timer: Limit max amount of slave instances - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() - perf probe: Fix to find range-only function instance - perf probe: Fix to list probe event with correct line number - perf jevents: Fix resource leak in process_mapfile() and main() - perf probe: Walk function lines in lexical blocks - perf probe: Fix to probe an inline function which has no entry pc - perf probe: Fix to show ranges of variables in functions without entry_pc - perf probe: Fix to show inlined function callsite without entry_pc - perf probe: Fix to probe a function which has no entry pc - perf tools: Splice events onto evlist even on error - perf parse: If pmu configuration fails free terms - perf probe: Skip overlapped location on searching variables - perf probe: Return a better scope DIE if there is no best scope - perf probe: Fix to show calling lines of inlined functions - perf probe: Skip end-of-sequence and non statement lines - perf probe: Filter out instances except for inlined subroutine and subprogram - ath10k: fix get invalid tx rate for Mesh metric - media: pvrusb2: Fix oops on tear-down when radio support is not present - ice: delay less - [amd64] spi: pxa2xx: Add missed security checks - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile - iio: dac: ad5446: Add support for new AD5600 DAC - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint - [s390x] disassembler: don't hide instruction addresses - nvme: Discard workaround for non-conformant devices - parport: load lowlevel driver if ports not found - bcache: fix static checker warning in bcache_device_free() - cpufreq: Register drivers only after CPU devices have been registered - tracing: use kvcalloc for tgid_map array allocation - tracing/kprobe: Check whether the non-suffixed symbol is notrace - bcache: fix deadlock in bcache_allocator - iwlwifi: mvm: fix unaligned read of rx_pkt_status - [arm64] spi: tegra20-slink: add missed clk_unprepare - tun: fix data-race in gro_normal_list() - crypto: virtio - deal with unsupported input sizes - btrfs: don't prematurely free work in end_workqueue_fn() - btrfs: don't prematurely free work in run_ordered_work() - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1 - [x86] insn: Add some Intel instructions to the opcode map - brcmfmac: remove monitor interface when detaching - iwlwifi: check kasprintf() return value - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED - net: phy: initialise phydev speed and duplex sanely - btrfs: don't prematurely free work in reada_start_machine_worker() - btrfs: don't prematurely free work in scrub_missing_raid56_worker() - Revert "mmc: sdhci: Fix incorrect switch to HS mode" - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (CVE-2019-19947) - usb: xhci: Fix build warning seen with CONFIG_PM=n - [s390x] ftrace: fix endless recursion in function_graph tracer - btrfs: return error pointer from alloc_test_extent_buffer - usbip: Fix receive error in vhci-hcd when using scatter-gather - usbip: Fix error path of vhci_recv_ret_submit() - cpufreq: Avoid leaving stale IRQ work items during CPU offline - [x86] intel_th: pci: Add Comet Lake PCH-V support - [x86] intel_th: pci: Add Elkhart Lake SOC support - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037) - ext4: check for directory entries too close to block end - ext4: unlock on error in ext4_expand_extra_isize() - [arm64] KVM: Ensure 'params' is initialised when looking up sys register - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] - [powerpc*] irq: fix stack overflow verification - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register - mmc: sdhci: Update the tuning failed messages to pr_debug level - mmc: sdhci: Workaround broken command queuing on Intel GLK - mmc: sdhci: Add a quirk for broken command queuing - nbd: fix shutdown and recv work deadlock - perf probe: Fix to show function entry line as probe-able https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.93 - scsi: lpfc: Fix discovery failures when target device connectivity bounces - scsi: mpt3sas: Fix clear pending bit in ioctl status - scsi: lpfc: Fix locking on mailbox command completion - Input: atmel_mxt_ts - disable IRQ across suspend - f2fs: fix to update time in lazytime mode - [arm64,armhf] iommu: rockchip: Free domain on .domain_free - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory - scsi: target: compare full CHAP_A Algorithm strings - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices - scsi: csiostor: Don't enable IRQs too early - [arm64] scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec() - [ppc64el] pseries: Mark accumulate_stolen_time() as notrace - [ppc64el] pseries: Don't fail hash page table insert for bolted mapping - clocksource/drivers/timer-of: Use unique device name instead of timer - [ppc64el] security/book3s64: Report L1TF status in sysfs - [ppc64el] book3s64/hash: Add cond_resched to avoid soft lockup warning - ext4: update direct I/O read lock pattern for IOCB_NOWAIT - ext4: iomap that extends beyond EOF should be marked dirty - jbd2: Fix statistics for the number of logged blocks - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow - f2fs: fix to update dir's i_pino during cross_rename - [arm64] clk: qcom: Allow constant ratio freq tables for rcg - clk: clk-gpio: propagate rate change to parent - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences - [ppc64el] PCI: rpaphp: Fix up pointer to first drc-info entry - scsi: ufs: fix potential bug which ends in system hang - [ppc64el] PCI: rpaphp: Don't rely on firmware feature to imply drc-info support - [ppc64el] PCI: rpaphp: Annotate and correctly byte swap DRC properties - [ppc64el] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info - [ppc64el] powerpc/security: Fix wrong message when RFI Flush is disable - bcache: at least try to shrink 1 node in bch_mca_scan() - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening - libnvdimm/btt: fix variable 'rc' set but not used - HID: Improve Windows Precision Touchpad detection. - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device - watchdog: Fix the race between the release of watchdog_core_data and cdev - scsi: pm80xx: Fix for SATA device discovery - scsi: ufs: Fix error handing during hibern8 enter - scsi: scsi_debug: num_tgts must be >= 0 - scsi: iscsi: Don't send data to unbound connection - scsi: target: iscsi: Wait for all commands to finish before freeing a session - apparmor: fix unsigned len comparison with less than zero - scripts/kallsyms: fix definitely-lost memory leak - cdrom: respect device capabilities during opening action - perf script: Fix brstackinsn for AUXTRACE - perf regs: Make perf_reg_name() return "unknown" instead of NULL - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR - [s390x] cpum_sf: Check for SDBT and SDB consistency - ocfs2: fix passing zero to 'PTR_ERR' warning - kernel: sysctl: make drop_caches write-only - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK - [x86] mce: Fix possibly incorrect severity calculation on AMD - net, sysctl: Fix compiler warning when only cBPF is present - netfilter: nf_queue: enqueue skbs with NULL dst - ALSA: hda - Downgrade error message for single-cmd fallback - bonding: fix active-backup transition after link failure - perf strbuf: Remove redundant va_end() in strbuf_addv() - Make filldir[64]() verify the directory entry filename is valid (CVE-2019-10220) - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (CVE-2019-10220) - netfilter: ebtables: compat: reject all padding in matches/watchers - 6pack,mkiss: fix possible deadlock - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() - inetpeer: fix data-race in inet_putpeer / inet_putpeer - net: add a READ_ONCE() in skb_peek_tail() - net: icmp: fix data-race in cmp_global_allow() - hrtimer: Annotate lockless access to timer->state - net: ena: fix napi handler misbehavior when the napi budget is zero - net/mlxfw: Fix out-of-memory error in mfa2 flash burning - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs - ptp: fix the race between the release of ptp_clock and cdev - tcp: Fix highest_sack and highest_sack_seq - udp: fix integer overflow while computing available space in sk_rcvbuf - vhost/vsock: accept only packets with the right dst_cid - net: add bool confirm_neigh parameter for dst_ops.update_pmtu - ip6_gre: do not confirm neighbor when do pmtu update - gtp: do not confirm neighbor when do pmtu update - net/dst: add new function skb_dst_update_pmtu_no_confirm - tunnel: do not confirm neighbor when do pmtu update - vti: do not confirm neighbor when do pmtu update - sit: do not confirm neighbor when do pmtu update - net/dst: do not confirm neighbor for vxlan and geneve pmtu update - gtp: do not allow adding duplicate tid and ms_addr pdp context - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt - tcp/dccp: fix possible race __inet_lookup_established() - tcp: do not send empty skb from tcp_write_xmit() - gtp: fix wrong condition in gtp_genl_dump_pdp() - gtp: fix an use-after-free in ipv4_pdp_find() - gtp: avoid zero size hashtable - [arm64,armhf] pinctrl: baytrail: Really serialize all register accesses https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.94 - nvme_fc: add module to ops template to allow module references - nvme-fc: fix double-free scenarios on hw queues - drm/amdgpu: add check before enabling/disabling broadcast mode - drm/amdgpu: add cache flush workaround to gfx8 emit_fence - PM / devfreq: Fix devfreq_notifier_call returning errno - PM / devfreq: Set scaling_max_freq to max on OPP notifier error - PM / devfreq: Don't fail devfreq_dev_release if not in list - afs: Fix afs_find_server lookups for ipv4 peers - afs: Fix SELinux setting security label on /afs - RDMA/cma: add missed unregister_pernet_subsys in init failure - rxe: correctly calculate iCRC for unaligned payloads - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work - scsi: qla2xxx: Don't call qlt_async_event twice - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length - scsi: qla2xxx: Configure local loop for N2N target - scsi: qla2xxx: Send Notify ACK after N2N PLOGI - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI - scsi: iscsi: qla4xxx: fix double free in probe - scsi: libsas: stop discovering if oob mode is disconnected (CVE-2019-19965) - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit - usb: gadget: fix wrong endpoint desc - net: make socket read/write_iter() honor IOCB_NOWAIT - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP - md: raid1: check rdev before reference in raid1_sync_request func - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler - IB/mlx4: Follow mirror sequence of device add during device removal - IB/mlx5: Fix steering rule of drop and count - xen-blkback: prevent premature module unload - xen/balloon: fix ballooned page accounting without hotplug enabled - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen - xfs: fix mount failure crash on invalid iclog memory access - taskstats: fix data-race - drm: limit to INT_MAX in create_blob ioctl - netfilter: nft_tproxy: Fix port selector on Big Endian - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code - ALSA: usb-audio: fix set_format altsetting sanity check - ALSA: usb-audio: set the interface format after resume on Dell WD19 - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls - [mips*] Avoid VDSO ABI breakage due to global register variable - media: pulse8-cec: fix lost cec_transmit_attempt_done() call - media: cec: CEC 2.0-only bcast messages were ignored - media: cec: avoid decrementing transmit_queue_sz if it is 0 - media: cec: check 'transmit_in_progress', not 'transmitting' - mm/zsmalloc.c: fix the migrated zspage statistics. - memcg: account security cred as well to kmemcg - mm: move_pages: return valid node id in status if the page is already on the target node - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones - locks: print unsigned ino in /proc/locks - compat_ioctl: block: handle Persistent Reservations - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE - ata: libahci_platform: Export again ahci_platform_able_phys() - libata: Fix retrieving of active qcs - gpiolib: fix up emulated open drain outputs - tracing: Fix lock inversion in trace_event_enable_tgid_record() - tracing: Avoid memory leak in process_system_preds() - tracing: Have the histogram compare functions convert to u64 first - tracing: Fix endianness bug in histogram trigger - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer - ALSA: firewire-motu: Correct a typo in the clock proc string - exit: panic before exit_mm() on global init exit - [arm64] Revert support for execute-only user mappings - ftrace: Avoid potential division by zero in function profiler - [arm64] drm/msm: include linux/sched/task.h - PM / devfreq: Check NULL governor in available_governors_show - nfsd4: fix up replay_matches_cache() - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 - xfs: don't check for AG deadlock for realtime files in bunmapi - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table - Bluetooth: btusb: fix PM leak in error case of setup - Bluetooth: delete a stray unlock - Bluetooth: Fix memory leak in hci_connect_le_scan - media: flexcop-usb: ensure -EIO is returned on error condition - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809) - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP - bdev: Factor out bdev revalidation into a common helper - bdev: Refresh bdev size for disks without partitioning - scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails - drm/mst: Fix MST sideband up-reply failure handling - [ppc64el] pseries/hvconsole: Fix stack overread via udbg - [ppc64el] KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag - rxrpc: Fix possible NULL pointer access in ICMP handling - tcp: annotate tp->rcv_nxt lockless reads - net: core: limit nested device depth - ath9k_htc: Modify byte order for an error message - ath9k_htc: Discard undersized packets - xfs: periodically yield scrub threads to the scheduler - net: add annotations on hh->hh_len lockless accesses - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps - [s390x] smp: fix physical to logical CPU map for SMT - xen/blkback: Avoid unmapping unmapped grant pages - [x86] perf/x86/intel/bts: Fix the use of page_private() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.95 - bpf: Fix passing modified ctx to ld/abs/ind instruction - regulator: fix use after free issue - ASoC: max98090: fix possible race conditions - netfilter: ctnetlink: netns exit must wait for callbacks - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (CVE-2019-14901) - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec breakage - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89 - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs - efi/gop: Return EFI_SUCCESS if a usable GOP was found - efi/gop: Fix memory leak in __gop_query32/64() - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init() - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions() - ASoC: topology: Check return value for soc_tplg_pcm_create() - bnxt_en: Return error if FW returns more data than dump length - [mips*] bpf, mips: Limit to 33 tail calls - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS - [powerpc*] Ensure that swiotlb buffer is allocated from low memory - btrfs: Fix error messages in qgroup_rescan_init - bpf: Clear skb->tstamp in bpf_redirect when necessary - bnx2x: Do not handle requests from VFs after parity - bnx2x: Fix logic to get total no. of PFs per engine - cxgb4: Fix kernel panic while accessing sge_info - net: usb: lan78xx: Fix error message format specifier - rfkill: Fix incorrect check to avoid NULL pointer dereference - iommu/iova: Init the struct iova to fix the possible memleak - [x86] perf/x86/intel: Fix PT PMI handling - fs: avoid softlockups in s_inodes iterators - [arm64,armhf] net: stmmac: Do not accept invalid MTU values - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission start - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly - [s390x] dasd: fix memleak in path handling error case - block: fix memleak when __blk_rq_map_user_iov() is failed - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) - [x86] hv_netvsc: Fix unwanted rx_table reset - [powerpc*] vcpu: Assume dedicated processors as non-preempt - [powerpc*] spinlocks: Include correct header for static key - [armhf] cpufreq: imx6q: read OCOTP through nvmem for imx6ul/imx6ull - gtp: fix bad unlock balance in gtp_encap_enable_socket - macvlan: do not assume mac_header is set in macvlan_broadcast() - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU port. - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes - net: usb: lan78xx: fix possible skb leak - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM - sch_cake: avoid possible divide by zero in cake_enqueue() - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK - vxlan: fix tos value before xmit - vlan: fix memory leak in vlan_dev_set_egress_priority - vlan: vlan_changelink() should propagate errors - net: sch_prio: When ungrafting, replace with FIFO - [arm64,armhf] usb: dwc3: gadget: Fix request complete check - USB: core: fix check for duplicate endpoints - USB: serial: option: add Telit ME910G1 0x110a composition - usb: missing parentheses in USE_NEW_SCHEME https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96 - chardev: Avoid potential use-after-free in 'chrdev_open()' - i2c: fix bus recovery stop mode timing - [arm64,armhf] usb: chipidea: host: Disable port power only if previously enabled - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 - ALSA: hda/realtek - Add new codec supported for ALCS1200A - ALSA: hda/realtek - Set EAPD control to default for ALC222 - [x86] ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined - tracing: Change offset type to s32 in preempt/irq tracepoints - HID: Fix slab-out-of-bounds read in hid_field_extract - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll - HID: hid-input: clear unmapped usages - Input: add safety guards to input_set_keycode() - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model - drm/fb-helper: Round up bits_per_pixel if possible - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ - can: kvaser_usb: fix interface sanity check - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism - [x86] staging: vt6656: set usb_set_intfdata on driver fail. - USB: serial: option: add ZLP support for 0x1bc7/0x9010 - [arm64,armhf] usb: musb: fix idling for suspend after disconnect interrupt - [arm64,armhf] usb: musb: Disable pullup at init - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 - serdev: Don't claim unsupported ACPI serial devices - tty: link tty and port before configuring it as console - tty: always relink the port - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (CVE-2019-14895) - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (CVE-2019-19056) - scsi: bfa: release allocated memory in case of error (CVE-2019-19066) - rtl8xxxu: prevent leaking urb (CVE-2019-19068) - ath10k: fix memory leak (CVE-2019-19078) - HID: hiddev: fix mess in hiddev_open() - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct - netfilter: conntrack: dccp, sctp: handle null timeout argument - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present - [x86] drm/i915/gen9: Clear residual context state on context switch (CVE-2019-14615) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.97 - hidraw: Return EPOLLOUT from hidraw_poll - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll - HID: hidraw, uhid: Always report EPOLLOUT - cfg80211/mac80211: make ieee80211_send_layer2_update a public function - mac80211: Do not send Layer 2 Update frame before authorization (CVE-2019-5108) - f2fs: Move err variable to function scope in f2fs_fill_dentries() - f2fs: check memory boundary by insane namelen - f2fs: check if file namelen exceeds max value (CVE-2019-9445) - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (CVE-2019-15217) - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (CVE-2019-19058) - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (CVE-2019-19059) - RDMA: Fix goto target to release the allocated memory (CVE-2019-19077) - dccp: Fix memleak in __feat_register_sp (CVE-2019-20096) - [x86] drm/i915: Fix use-after-free when destroying GEM context - ASoC: soc-core: Set dpcm_playback / dpcm_capture - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API - iommu: Remove device link to group on failure - gpio: Fix error message on out-of-range GPIO in lookup table - [s390x] qeth: fix false reporting of VNIC CHAR config failure - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set - cifs: Adjust indentation in smb2_open_file - afs: Fix missing cell comparison in afs_test_super() - drm/ttm: fix start page for huge page check in ttm_put_pages() (CVE-2019-19927) - drm/ttm: fix incrementing the page pointer for huge pages (CVE-2019-19927) - btrfs: simplify inode locking for RWF_NOWAIT - RDMA/mlx5: Return proper error value - RDMA/srpt: Report the SCSI residual to the initiator - scsi: enclosure: Fix stale device oops with hot replug - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 - [x86] platform/x86: GPD pocket fan: Use default values when wrong modparams are given - xprtrdma: Fix completion wait during device removal - crypto: virtio - implement missing support for output IVs - NFSv2: Fix a typo in encode_sattr() - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn - mei: fix modalias documentation - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume - [armhf] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6 - scsi: sd: enable compat ioctls for sed-opal - af_unix: add compat_ioctl support - compat_ioctl: handle SIOCOUTQNSD - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage - PCI/PTM: Remove spurious "d" from granularity message - [powerpc*] powernv: Disable native PCIe port management - [armhf] tty: serial: imx: use the sg count from dma_map_sg - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg - mtd: spi-nor: fix silent truncation in spi_nor_read() - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() - rtlwifi: Remove unnecessary NULL check in rtl_regd_init - f2fs: fix potential overflow - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() - [mips*] cacheinfo: report shared CPU map - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static - [arm64] dmaengine: k3dma: Avoid null pointer traversal - [amd64] ioat: ioat_alloc_ring() failure handling. - ocfs2: call journal flush to mark journal as empty after journal recovery when mount https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.98 - clk: Don't try to enable critical clocks if prepare failed - iio: buffer: align the size of scan bytes to size of the largest element - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx - USB: serial: option: Add support for Quectel RM500Q - USB: serial: opticon: fix control-message timeouts - USB: serial: option: add support for Quectel RM500Q in QDL mode - USB: serial: suppress driver bind attributes - USB: serial: ch341: handle unbound port at reset_resume - USB: serial: io_edgeport: handle unbound ports on URB completion - USB: serial: io_edgeport: add missing active-port sanity check - USB: serial: keyspan: handle unbound ports - USB: serial: quatech2: handle unbound ports - [x86] scsi: fnic: fix invalid stack access - scsi: mptfusion: Fix double fetch bug in ioctl - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection - ALSA: dice: fix fallback from protocol extension into limited functionality - ALSA: seq: Fix racy access for queue timer in proc read - ALSA: usb-audio: fix sync-ep altsetting sanity check - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator - block: fix an integer overflow in logical block size - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio number - LSM: generalize flag passing to security_capable - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() - usb: core: hub: Improved device recognition on remote wakeup - [x86] resctrl: Fix an imbalance in domain_remove_cpu() - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained - [amd64] x86/efistub: Disable paging at mixed mode entry - [x86] resctrl: Fix potential memory leak - perf hists: Fix variable name's inconsistency in hists__for_each() macro - perf report: Fix incorrectly added dimensions as switch perf data file - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid - btrfs: rework arguments of btrfs_unlink_subvol - btrfs: fix invalid removal of root ref - btrfs: do not delete mismatched root refs - btrfs: fix memory leak in qgroup accounting - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() - [armhf] dts: imx6qdl: Add Engicam i.Core 1.5 MX6 - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned - [arm64,armhf] net: stmmac: Enable 16KB buffer size - mm/huge_memory.c: make __thp_get_unmapped_area static - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment - bpf: Fix incorrect verifier simulation of ARSH under ALU32 - cfg80211: fix deadlocks in autodisconnect work - cfg80211: fix memory leak in cfg80211_cqm_rssi_update - cfg80211: fix page refcount issue in A-MSDU decap - netfilter: fix a use-after-free in mtype_destroy() - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct - netfilter: nft_tunnel: fix null-attribute check - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits - netfilter: nf_tables: store transaction list locally while requesting module - netfilter: nf_tables: fix flowtable list del corruption - NFC: pn533: fix bulk-message timeout - batman-adv: Fix DAT candidate selection on little endian systems - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() - [x86] hv_netvsc: Fix memory leak when removing rndis device - [arm64] net: hns: fix soft lockup when there is not enough memory - net: usb: lan78xx: limit size of local TSO packets - ptp: free ptp device pin descriptors properly - r8152: add missing endpoint sanity check - tcp: fix marked lost packets not being retransmitted - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk - tcp: refine rule to allow EPOLLOUT generation under mem pressure - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node - cfg80211: check for set_wiphy_params - tick/sched: Annotate lockless access to last_jiffies_update - drm/nouveau/bar/nv50: check bar1 vmm return value - drm/nouveau/bar/gf100: ensure BAR is mapped - drm/nouveau/mmu: qualify vmm during dtor - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr - scsi: esas2r: unlock on error in esas2r_nvram_read_direct() - scsi: qla4xxx: fix double free bug - scsi: bnx2i: fix potential use after free - scsi: target: core: Fix a pr_debug() argument - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan - scsi: core: scsi_trace: Use get_unaligned_be*() - perf probe: Fix wrong address verification . [ Joe Richey ] * [cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237) . [ Salvatore Bonaccorso ] * Refresh powerpc-fix-mcpu-options-for-spe-only-compiler.patch (Context changes in 4.19.88) * Drop 0027-RDMA-hns-Fix-the-bug-with-updating-rq-head-pointer-w.patch * Drop 0028-RDMA-hns-Bugfix-for-the-scene-without-receiver-queue.patch * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.88) * [rt] Update to 4.19.90-rt35: - Update "workqueue: rework" for workqueue changes in 4.19.90 * [rt] Drop 0245-Revert-arm64-preempt-Fix-big-endian-when-checking-pr.patch * Refresh 0013-scsi-hisi_sas-Relocate-some-codes-to-avoid-an-unused.patch for context changes in 4.19.93. * [rt] Refresh 0253-watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch (Context changes in 4.19.93) * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.97) . [ Ben Hutchings ] * [rt] Update to 4.19.94-rt38: - Refresh "x86/ioapic: Don't let setaffinity unmask threaded EOI interrupt too early" which was partly included in 4.19.92 * aufs: Update support patchset to aufs4.19.63+ 20200113; no functional changes * Bump ABI to 8 * libertas: Fix two buffer overflows at parsing bss descriptor (CVE-2019-14896, CVE-2019-14897) * wimax: i2400: fix memory leak (CVE-2019-19051) * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (CVE-2019-19051) * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511) . [ Noah Meyerhans ] * random: try to actively add entropy rather than passively wait for it (Closes: #948519) . [ Aurelien Jarno ] * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF. linux-signed-amd64 (4.19.87+1) buster; urgency=medium . * Sign kernel from linux 4.19.87-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - Revert "pwm: Set class for exported channels in sysfs" - cpufreq: schedutil: Don't skip freq update when limits change - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify - ALSA: hda - Let all conexant codec enter D3 when rebooting - HID: holtek: test for sanity of intfdata - HID: hiddev: avoid opening a disconnected device - HID: hiddev: do cleanup in failure of opening a device - Input: kbtab - sanity check for endpoint type - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - netfilter: ebtables: also count base chain policies - xen/pciback: remove set but not used variable 'old_state' - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules - [arm64] efi: fix variable 'si' set but not used - [arm64] unwind: Prohibit probing on return_address() - [arm64] mm: fix variable 'pud' set but not used - IB/core: Add mitigation for Spectre V1 - IB/mlx5: Fix MR registration flow to use UMR properly - IB/mad: Fix use-after-free in ib mad completion handling - [arm64] drm: msm: Fix add_gpu_components - [armhf] drm/exynos: fix missing decrement of retry counter - ocfs2: remove set but not used variable 'last_hash' - asm-generic: fix -Wtype-limits compiler warnings - [arm64] KVM: regmap: Fix unexpected switch fall-through - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - [x86] drm/i915/cfl: Add a new CFL PCI ID. - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - Input: psmouse - fix build error of multiple definition - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - net: dsa: Check existence of .port_mdb_add callback before calling it - net/mlx4_en: fix a memory leak bug - net/packet: fix race in tpacket_snd() - sctp: fix memleak in sctp_send_reset_streams - sctp: fix the transport error_count check - team: Add vlan tx offload to hw_enc_features - tipc: initialise addr_trail_end when setting node addresses - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - net/mlx5e: Use flow keys dissector to parse packets for ARFS - [arm64] mmc: sdhci-of-arasan: Do now show error message in case of deffered probe https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.69 - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - [mips*] kernel: only use i8253 clocksource with periodic clockevent - [mips*] fix cacheinfo - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - bonding: Force slave speed check after link state recovery for 802.3ad - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - can: dev: call netif_carrier_off() in register_candev() - can: gw: Fix error path of cgw_module_init - [armhf,arm64] ASoC: rockchip: Fix mono capture - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - net/ethernet/qlogic/qed: force the string buffer NULL-terminated - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - [x86] lib/cpu: Address missing prototypes warning - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - [arm64] KVM: Don't write junk to sysregs on reset - [armhf] KVM: Don't write junk to CP15 registers on reset - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - Revert "dm bufio: fix deadlock with loop device" (regression in 4.19.61) - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX - gpiolib: never report open-drain/source lines as 'input' to user-space - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - [x86] apic: Handle missing global clockevent gracefully - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - [x86] boot: Save fields explicitly, zero out everything else - [x86] boot: Fix boot regression caused by bootparam sanitizing - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() - dm raid: add missing cleanup in raid_ctr() - dm space map metadata: fix missing store of apply_bops() return value - dm table: fix invalid memory accesses with too high sector number - dm zoned: improve error handling in reclaim - dm zoned: improve error handling in i/o map code - dm zoned: properly handle backing device failure - genirq: Properly pair kobject_del() with kobject_add() - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - xfs: don't trip over uninitialized buffer on extent read of corrupted inode - xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h - xfs: Add helper function xfs_attr_try_sf_addname - xfs: Add attibute set and helper functions - xfs: Add attibute remove and helper functions - xfs: always rejoin held resources during defer roll - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - [ppc64el] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.70 - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Only update d_fsdata if different in afs_d_revalidate() - nvmet-loop: Flush nvme_delete_wq when removing the port - nvme: fix a possible deadlock when passthru commands sent to a multipath device - nvme-pci: Fix async probe remove race - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - [arm64] cpufeature: Don't treat granule sizes as strict - drm/ast: Fixed reboot test may cause system hanged - [x86] tools: hv: fix KVP and VSS daemons exit code - [x86] drm/i915: fix broadwell EU computation - [arm*] watchdog: bcm2835_wdt: Fix module autoload - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value - [armhf] drm/tilcdc: Register cpufreq notifier after we have initialized crtc - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Default fib6_type to RTN_UNICAST when not set - net/smc: make sure EPOLLOUT is raised - tcp: make sure EPOLLOUT wont be missed - ipv4/icmp: fix rt dst dev null pointer dereference - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n - ALSA: usb-audio: Check mixer unit bitmap yet more strictly - ALSA: line6: Fix memory leak at line6_init_pcm() error path - ALSA: hda - Fixes inverted Conexant GPIO mic mute led - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - [x86] kvm: skip populating logical dest map if apic is not sw enabled - [x86] KVM: Don't update RIP or do single-step on faulting emulation - [amd64] uprobes: Fix detection of 32-bit user mode - [x86] apic: Do not initialize LDR and DFR for bigsmp - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has stopped - usb: host: ohci: fix a race condition between shutdown and irq - usb: host: xhci: rcar: Fix typo in compatible string matching - USB: storage: ums-realtek: Update module parameter description for auto_delink_en - USB: storage: ums-realtek: Whitelist auto-delink support - [x86] mei: me: add Tiger Lake point LP device ID - mmc: core: Fix init of SD cards reporting an invalid VDD range - stm class: Fix a double free of stm_source_device - [x86] intel_th: pci: Add support for another Lewisburg PCH - [x86] intel_th: pci: Add Tiger Lake support - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - [x86] drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash - [x86] VMCI: Release resource if the work is already queued - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - Revert "cfg80211: fix processing world regdomain when non modular" - mac80211: fix possible sta leak - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - [ppc64el] KVM: Book3S: Fix incorrect guest-to-user-translation error handling - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - NFS: Clean up list moves of struct nfs_page - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Pass error information to the pgio error cleanup routine - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - [x86] i2c: piix4: Fix port selection for AMD Family 16h Model 30h - mt76: mt76x0u: do not reset radio on resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.71 - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 4.19.67) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.72 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - [armhf,arm64] net: stmmac: dwmac-rk: Don't fail if phy regulator is absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) - [x86] boot: Preserve boot_params.secure_boot from sanitizing - [arm*] spi: bcm2835aux: unifying code between polling and interrupt driven code - [arm*] spi: bcm2835aux: remove dangerous uncontrolled read of fifo - [arm*] spi: bcm2835aux: fix corruptions for longer spi transfers - netfilter: nf_tables: use-after-free in failing rule with bound set - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - Bluetooth: btqca: Add a short delay before downloading the NVM - [ppc64el] ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug - liquidio: add cleanup in octeon_setup_iq() - net: myri10ge: fix memory leaks - lan78xx: Fix memory leaks - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - kprobes: Fix potential deadlock in kprobe_optimizer() - HID: cp2112: prevent sleeping function called from invalid context - [amd64] boot/compressed: Fix boot on machines with broken E820 table - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel callback - [x86] Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - IB/mlx4: Fix memory leaks - infiniband: hfi1: fix a memory leak bug - infiniband: hfi1: fix memory leaks - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - [armhf,arm64] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - [armhf,arm64] KVM: VGIC: Properly initialise private IRQ affinity - [amd64] boot/compressed: Fix missing initialization in find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.73 - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - [x86] ALSA: hda/realtek - Add quirk for HP Pavilion 15 - [x86] ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - [x86] ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() - [ppc64el] tm: Fix FP/VMX unavailable exceptions inside a transaction (CVE-2019-15030) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - [x86] hv_sock: Fix hang when a connection is closed - Blk-iolatency: warn on negative inflight IO counter - blk-iolatency: fix STS_AGAIN handling - {nl,mac}80211: fix interface combinations on crypto controlled devices - timekeeping: Use proper ktime_add when adding nsecs in coarse offset - selftests: fib_rule_tests: use pre-defined DEV_ADDR - [x86] ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() - [ppc64el] mark start_here_multiplatform as __ref - [arm64] dts: rockchip: enable usb-host regulators at boot on rk3328-rock64 - nvme-fc: use separate work queue to avoid warning - [armhf] clk: s2mps11: Add used attribute to s2mps11_dt_match - [arm64] remoteproc: qcom: q6v5: shore up resource probe handling - modules: always page-align module section allocations - kernel/module: Fix mem leak in module_add_modinfo_attrs - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" - scsi: qla2xxx: Move log messages before issuing command to firmware - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h - [x86] Drivers: hv: kvp: Fix two "this statement may fall through" warnings - [x86] hibernate: Fix nosave_regions setup for hibernation - [arm64] remoteproc: qcom: q6v5-mss: add SCM probe dependency - drm/amdgpu/gfx9: Update gfx9 golden settings. - drm/amdgpu: Update gc_9_0 golden settings. - [x86] KVM: hyperv: enforce vp_index < KVM_MAX_VCPUS - [x86] KVM: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' variables - [x86] KVM: hyperv: keep track of mismatched VP indexes - [x86] KVM: hyperv: define VP assist page helpers - [x86] kvm/lapic: preserve gfn_to_hva_cache len on cache reinit - [x86] drm/i915: Fix intel_dp_mst_best_encoder() - [x86] drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE - [x86] drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/atomic_helper: Disallow new modesets on unregistered connectors - [x86] Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up - powerplay: Respect units on max dcfclk watermark - drm/amd/pp: Fix truncated clock value when set watermark - drm/amd/dm: Understand why attaching path/tile properties are needed - [s390x] zcrypt: reinit ap queue state machine during device probe - [x86] drm/i915: Restore sane defaults for KMS on GEM error load - [x86] drm/i915: Cleanup gt powerstate from gem - [ppc64el] KVM: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch - Btrfs: clean up scrub is_dev_replace parameter - Btrfs: fix deadlock with memory reclaim during scrub - btrfs: Remove extent_io_ops::fill_delalloc - btrfs: Fix error handling in btrfs_cleanup_ordered_extents - scsi: megaraid_sas: Fix combined reply queue mode detection - scsi: megaraid_sas: Add check for reset adapter bit - scsi: megaraid_sas: Use 63-bit DMA addressing - [ppc64el] pkeys: Fix handling of pkey state across fork() - btrfs: volumes: Make sure no dev extent is beyond device boundary - btrfs: Use real device structure to verify dev extent - IB/uverbs: Fix OOPs upon device disassociation - drm/vblank: Allow dynamic per-crtc max_vblank_count - [x86] drm/i915/ilk: Fix warning when reading emon_status with no output - tpm: Fix some name collisions with drivers/char/tpm.h - bcache: replace hard coded number with BUCKET_GC_GEN_MAX - bcache: treat stale && dirty keys as bad keys - [x86] KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run - [armhf] iio: adc: exynos-adc: Add S5PV210 variant - [armhf] iio: adc: exynos-adc: Use proper number of channels for Exynos4x12 - mt76: fix corrupted software generated tx CCMP PN - drm/nouveau: Don't WARN_ON VCPI allocation failures - iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules - iwlwifi: add new card for 9260 series - spi: spi-gpio: fix SPI_CS_HIGH capability - [ppc64el] kvm: Save and restore host AMR/IAMR/UAMOR - btrfs: scrub: pass fs_info to scrub_setup_ctx - btrfs: scrub: move scrub_setup_ctx allocation out of device_list_mutex - btrfs: scrub: fix circular locking dependency warning - btrfs: init csum_list before possible free - [arm64] PCI: qcom: Fix error handling in runtime PM support - [arm64] PCI: qcom: Don't deassert reset GPIO during probe - CIFS: Fix error paths in writeback code - CIFS: Fix leaking locked VFS cache pages in writeback retry - [x86] drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set - [x86] drm/i915: Sanity check mmap length against object size - [x86] usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps - IB/mlx5: Reset access mask when looping inside page fault handler - kvm: mmu: Fix overflow on kvm mmu page limit calculation - [x86] kvm: move kvm_load/put_guest_xcr0 into atomic context - [x86] KVM: Always use 32-bit SMRAM save state for 32-bit kernels - cifs: Fix lease buffer length error (CVE-2019-15918) - ext4: protect journal inode's blocks using block_validity - [x86] PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary - dm mpath: fix missing call of path selector type->end_io - blk-mq: free hw queue's resource in hctx's release handler - mmc: sdhci-pci: Add support for Intel CML - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code - cifs: smbd: take an array of reqeusts when sending upper layer data - dm crypt: move detailed message into debug level - [x86] drm/amdkfd: Add missing Polaris10 ID - kvm: Check irqchip mode before assign irqfd - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc - Btrfs: fix race between block group removal and block group allocation - cifs: add spinlock for the openFileList to cifsInodeInfo - [arm64] clk: tegra: Fix maximum audio sync clock for Tegra124/210 - [arm64] clk: tegra210: Fix default rates for HDA clocks - IB/hfi1: Avoid hardlockup with flushlist_lock - apparmor: reset pos on failure to unpack for various functions - scsi: target/core: Use the SECTOR_SHIFT constant - scsi: target/iblock: Fix overrun in WRITE SAME emulation - [s390x] scsi: zfcp: fix request object use-after-free in send path causing wrong traces - cifs: Properly handle auto disabling of serverino option - [x86] ALSA: hda - Don't resume forcibly i915 HDMI/DP codec - [x86] KVM: optimize check for valid PAT value - [x86] KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value - [x86] KVM: VMX: Fix handling of #MC that occurs during VM-Entry - [x86] KVM: VMX: check CPUID before allowing read/write of IA32_XSS - [ppc64el] KVM: Use ccr field in pt_regs struct embedded in vcpu struct - [ppc64el] KVM: Book3S HV: Fix CR0 setting in TM emulation - RDMA/srp: Document srp_parse_in() arguments - RDMA/srp: Accept again source addresses that do not have a port number - btrfs: correctly validate compression type - resource: Include resource end in walk_*() interfaces - resource: Fix find_next_iomem_res() iteration issue - resource: fix locking in find_next_iomem_res() - pstore: Fix double-free in pstore_mkfile() failure path - dm thin metadata: check if in fail_io mode when setting needs_check - [armhf,arm64] drm/panel: Add support for Armadeus ST0700 Adapt - [x86] ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips - [ppc64el] mm: Limit rma_size to 1TB when running without HV mode - iommu/iova: Remove stale cached32_node - gpio: don't WARN() on NULL descs if gpiolib is disabled - mm/migrate.c: initialize pud_entry in migrate_vma() - NFSv4: Fix delegation state recovery - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - [s390x] virtio: fix race on airq_areas[] - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors - ext4: don't perform block validity checks on the journal inode - ext4: fix block validity checks for journal inodes using indirect blocks - ext4: unsigned int compared against zero - [x86] PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround - [ppc64el] tm: Remove msr_tm_active() - [ppc64el] tm: Fix restoring FP/VMX facility incorrectly on interrupts (CVE-2019-15031) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.74 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - net: Fix null de-reference of device refcount - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist - gpio: fix line flag validation in linehandle_create - Btrfs: fix assertion failure during fsync and use of stale transaction - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - genirq: Prevent NULL pointer dereference in resend_irqs() - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - [x86] KVM: work around leak of uninitialized stack contents - [x86] KVM: nVMX: handle page fault in vmread - [x86] purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - [ppc64el] Add barrier_nospec to raw_copy_in_user() - [arm64] drm/meson: Add support for XBGR8888 & ABGR8888 formats - [armhf,arm64] clk: rockchip: Don't yell about bad mmc phases when getting - PCI: Always allow probing with driver_override - gpio: fix line flag validation in lineevent_create - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - firmware: ti_sci: Always request response from firmware - [x86] drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - modules: fix BUG when load module with rodata=n - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) - nvmem: Use the same permissions for eeprom as for nvmem https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.75 - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - RDMA/restrack: Release task struct which was hold by CM_ID object - [x86] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - [ppc64el] mm/radix: Use the right page size for vmemmap mapping - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net_sched: let qdisc_put() accept NULL pointer - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - [armhf] dts: am57xx: Disable voltage switching for SD card - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - [armhf] bus: ti-sysc: Fix using configured sysc mask value - [s390x] bpf: fix lcgr instruction encoding - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 - [armhf] bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - [s390x] bpf: use 32-bit index for tail calls - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - xdp: unpin xdp umem pages in error path - qed: Add cleanup in qed_slowpath_start() - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - [x86] apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - [armhf,arm64] usb: host: xhci-tegra: Set DMA mask correctly - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - [x86] perf/intel: Restrict period on Nehalem - [x86] perf/amd/ibs: Fix sample bias for dispatched micro-ops - amd-xgbe: Fix error path in xgbe_mod_init() - [x86] tools/power x86_energy_perf_policy: Fix argument parsing - [x86] tools/power turbostat: fix buffer overrun - net: aquantia: fix out of memory condition on rx side - [armhf] dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - [x86] uaccess: Don't leak the AC flags into __get_user() argument evaluation - [x86] hyper-v: Fix overflow bug in fill_gva_list() - keys: Fix missing null pointer check in request_key_auth_describe() - [x86] iommu/amd: Flush old domains in kdump kernel - [x86] iommu/amd: Fix race in increase_address_space() - [arm64] PCI: kirin: Fix section mismatch warning - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - binfmt_elf: move brk out of mmap when doing direct loader exec - [arm64] kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field - media: technisat-usb2: break out of loop at end of buffer (CVE-2019-15505) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.76 - Revert "Bluetooth: validate BLE connection interval updates" - RDMA/restrack: Protect from reentry to resource return path - [ppc64el] xive: Fix bogus error code returned by OPAL - IB/core: Add an unbound WQ type to the new CQ API - HID: prodikeys: Fix general protection fault during probe - HID: sony: Fix memory corruption issue on cleanup. - HID: logitech: Fix general protection fault caused by Logitech driver - HID: hidraw: Fix invalid read in hidraw_ioctl - HID: Add quirk for HP X500 PIXART OEM mouse - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() - CIFS: fix deadlock in cached root handling - net/mlx5e: Set ECN for received packets using CQE indication - net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets - mlx5: fix get_ip_proto() - net/mlx5e: Allow reporting of checksum unnecessary - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding - net/mlx5e: Rx, Check ip headers sanity - iwlwifi: mvm: send BCAST management frames to the right station - iwlwifi: mvm: always init rs_fw with 20MHz bandwidth rates - media: tvp5150: fix switch exit in set control handler - [x86] ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it enabled - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support - ALSA: usb-audio: Add DSD support for EVGA NU Audio - ALSA: dice: fix wrong packet parameter for Alesis iO26 - [x86] ALSA: hda - Add laptop imic fixup for ASUS M9V laptop - [x86] ALSA: hda - Apply AMD controller workaround for Raven platform - objtool: Clobber user CFLAGS variable - power: supply: sysfs: ratelimit property read error message - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion - scsi: qla2xxx: Remove all rports if fabric scan retry fails - scsi: qla2xxx: Return switch command on a timeout - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" - bpf: libbpf: retry loading program on EAGAIN - [armhf,arm64] irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices - f2fs: check all the data segments against all node ones - [x86] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it - bcache: remove redundant LIST_HEAD(journal) from run_cache_set() - initramfs: don't free a non-existent initrd - blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - Revert "f2fs: avoid out-of-range memory access" - dm zoned: fix invalid memory access - f2fs: fix to do sanity check on segment bitmap of LFS curseg - drm: Flush output polling on shutdown - net: don't warn in inet diag when IPV6 is disabled - Bluetooth: btrtl: HCI reset on close for Realtek BT chip - [x86] ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling - xfs: don't crash on null attr fork xfs_bmapi_read - netfilter: nft_socket: fix erroneous socket assignment - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices - net_sched: check cops->tcf_block in tc_bind_tclass() - net/rds: An rds_sock is added too early to the hash table - net/rds: Check laddr_check before calling it - f2fs: use generic EFSBADCRC/EFSCORRUPTED https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.77 - arcnet: provide a buffer big enough to actually receive packets - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize - macsec: drop skb sk before calling gro_cells_receive - net/phy: fix DP83865 10 Mbps HDX loopback disable function - net/sched: act_sample: don't push mac header on ip6gre ingress - net_sched: add max len check for TCA_KIND - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (CVE-2019-19081) - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC - ppp: Fix memory leak in ppp_write - sch_netem: fix a divide by zero in tabledist() - skge: fix checksum byte order - usbnet: ignore endpoints with invalid wMaxPacketSize - usbnet: sanity checking of packet sizes and device mtu - net: sched: fix possible crash in tcf_action_destroy() - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state - net/mlx5: Add device ID of upcoming BlueField-2 - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (CVE-2019-19080) - ALSA: hda: Flush interrupts on disabling - [armhf] ASoC: sgtl5000: Fix of unmute outputs on probe - [armhf] ASoC: sgtl5000: Fix charge pump source assignment - [arm*] dmaengine: bcm2835: Print error in case setting DMA mask fails - media: dib0700: fix link error for dibx000_i2c_set_speed - media: hdpvr: Add device num check and handling - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint - sched/fair: Fix imbalance due to CPU affinity - sched/core: Fix CPU controller for !RT_GROUP_SCHED - [x86] apic: Make apic_pending_intr_clear() more robust - sched/deadline: Fix bandwidth accounting at all levels after offline migration - [x86] reboot: Always use NMI fallback when shutdown via reboot vector IPI fails - [x86] apic: Soft disable APIC before initializing it - ALSA: hda - Show the fatal CORB/RIRB error more clearly - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() - EDAC/mc: Fix grain_bits calculation - media: iguanair: add sanity checks - base: soc: Export soc_device_register/unregister APIs - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid - [arm64] prefetch: fix a -Wtype-limits warning - md/raid1: end bio when the device faulty - md: don't call spare_active in md_reap_sync_thread if all member devices can't work - md: don't set In_sync if array is frozen - ACPI / processor: don't print errors for processorIDs == 0xff - loop: Add LOOP_SET_DIRECT_IO to compat ioctl - [x86] EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() - efi: cper: print AER info of PCIe fatal error - sched/fair: Use rq_lock/unlock in online_fair_sched_group - idle: Prevent late-arriving interrupts from disrupting offline - media: gspca: zero usb_buf on error - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig - perf test vfs_getname: Disable ~/.perfconfig to get default output - media: em28xx: modules workqueue not inited for 2nd device - media: rc: imon: Allow iMON RC protocol for ffdc 7e device - [arm64] perf record: Support aarch64 random socket_id assignment - [armhf] media: omap3isp: Don't set streaming state on random subdevs - media: radio/si470x: kill urb on error - media: hdpvr: add terminating 0 at end of string - led: triggers: Fix a memory leak bug - nbd: add missing config put - media: mceusb: fix (eliminate) TX IR signal length limit - media: dvb-frontends: use ida for pll number - posix-cpu-timers: Sanitize bogus WARNONS - media: dvb-core: fix a memory leak bug - libperf: Fix alignment trap with xyarray contents in 'perf stat' - [amd64] EDAC/amd64: Recognize DRAM device type ECC capability - [amd64] EDAC/amd64: Decode syndrome before translating address - PM / devfreq: passive: Use non-devm notifiers - PM / devfreq: exynos-bus: Correct clock enable sequence - media: cec-notifier: clear cec_adap in cec_notifier_unregister - media: saa7146: add cleanup in hexium_attach() - media: cpia2_usb: fix memory leaks - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() - perf trace beauty ioctl: Fix off-by-one error in cmd->string table - [x86] ASoC: es8316: fix headphone mixer volume table - ACPI / CPPC: do not require the _PSD method - sched/cpufreq: Align trace event behavior of fast switching - [x86] apic/vector: Warn when vector space exhaustion breaks affinity - [arm64] kpti: ensure patched kernel text is fetched from PoU - [x86] mm/pti: Do not invoke PTI functions when PTI is disabled - [x86] mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() - nvmet: fix data units read and written counters in SMART log - nvme-multipath: fix ana log nsid lookup when nsid is not found - ALSA: firewire-motu: add support for MOTU 4pre - iommu/amd: Silence warnings under memory pressure - libata/ahci: Drop PCS quirk for Denverton and beyond - iommu/iova: Avoid false sharing on fq_timer_on - libtraceevent: Change users plugin directory - [armhf] dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks - ACPI: custom_method: fix memory leaks - ACPI / PCI: fix acpi_pci_irq_enable() memory leak - closures: fix a race on wakeup from closure_sync - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' - md/raid1: fail run raid1 array when active disk less than one - dmaengine: ti: edma: Do not reset reserved paRAM slots - kprobes: Prohibit probing on BUG() and WARN() address - [s390x] crypto: xts-aes-s390 fix extra run-time crypto self tests finding - [x86] cpu: Add Tiger Lake to Intel family - [x86] platform: intel_pmc_core: Do not ioremap RAM - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set - raid5: don't set STRIPE_HANDLE to stripe which is in batch list - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD - mmc: sdhci: Fix incorrect switch to HS mode - mmc: core: Add helper function to indicate if SDIO IRQs is enabled - [armhf,arm64] mmc: dw_mmc: Re-store SDIO IRQs mask at system resume - raid5: don't increment read_errors on EILSEQ return - libertas: Add missing sentinel at end of if_usb.c fw_table - e1000e: add workaround for possible stalled packet - ALSA: hda - Drop unsol event handler for Intel HDMI codecs - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() - [x86] ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 - [x86] iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type - [armhf] media: omap3isp: Set device on omap3isp subdevs - PM / devfreq: passive: fix compiler warning - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 - ALSA: firewire-tascam: handle error code when getting current source of clock - ALSA: firewire-tascam: check intermediate state of clock status and retry - scsi: scsi_dh_rdac: zero cdb in send_mode_select() - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag - printk: Do not lose last line in kmsg buffer dump - IB/mlx5: Free mpi in mp_slave mode - IB/hfi1: Define variables as unsigned long to fix KASAN warning - randstruct: Check member structs in is_pure_ops_struct() - ceph: use ceph_evict_inode to cleanup inode's resource - [x86] ALSA: hda/realtek - PCI quirk for Medion E4254 - blk-mq: add callback of .cleanup_rq - scsi: implement .cleanup_rq callback - [ppc64el] imc: Dont create debugfs files for cpu-less nodes - fuse: fix missing unlock_page in fuse_writepage() - [x86] KVM: always stop emulation on page fault - [x86] KVM: set ctxt->have_exception in x86_decode_insn() - [x86] KVM: Manually calculate reserved bits when loading PDPTRS - [x86] media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table - media: don't drop front-end reference count for ->detach - binfmt_elf: Do not move brk for INTERP-less ET_EXEC - [x86] ASoC: Intel: NHLT: Fix debug print format - [x86] ASoC: Intel: Skylake: Use correct function to access iomem space - [x86] ASoC: Intel: Fix use of potentially uninitialized variable - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - [arm64] tlb: Ensure we execute an ISB following walk cache invalidation - [arm64] dts: rockchip: limit clock rate of MMC controllers for RK3328 - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP - regulator: Defer init completion for a while after late_initcall - efifb: BGRT: Improve efifb_bgrt_sanity_check - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer - memcg, kmem: do not fail __GFP_NOFAIL charges - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask - block: fix null pointer dereference in blk_mq_rq_timed_out() - smb3: allow disabling requesting leases - ovl: Fix dereferencing possible ERR_PTR() - ovl: filter of trusted xattr results in audit - btrfs: fix allocation of free space cache v1 bitmap pages - Btrfs: fix use-after-free when using the tree modification log - btrfs: Relinquish CPUs in btrfs_compare_trees - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls - Btrfs: fix race setting up and completing qgroup rescan workers - md/raid6: Set R5_ReadError when there is read failure on parity disk - md: don't report active array_state until after revalidate_disk() completes. - md: only call set_in_sync() when it is expected to succeed. - cfg80211: Purge frame registrations on iftype change - /dev/mem: Bail out upon SIGKILL. - ext4: fix warning inside ext4_convert_unwritten_extents_endio - ext4: fix punch hole for inline_data file systems - quota: fix wrong condition in is_quota_modification() - hwrng: core - don't wait on add_early_randomness() - CIFS: fix max ea value size - CIFS: Fix oplock handling for SMB 2.1+ protocols - md/raid0: avoid RAID0 data corruption due to layout confusion. - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone - drm/amd/display: Restore backlight brightness after system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.78 - tpm: use tpm_try_get_ops() in tpm-sysfs.c. - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations - [armhf,arm64] drm/panel: simple: fix AUO g185han01 horizontal blanking - [armhf,arm64] drm/panel: check failure cases in the probe func - [armhf,arm64] drm/rockchip: Check for fast link training before enabling psr - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() - [ppc64el] PCI: rpaphp: Avoid a sometimes-uninitialized warning - ipmi_si: Only schedule continuously in the thread in maintenance mode - [armhf,arm64] clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks - drm/amd/display: fix issue where 252-255 values are clipped - drm/amd/display: reprogram VM config when system resume - [ppc64el] powernv/ioda2: Allocate TCE table levels on demand for default DMA window - [ppc64el] xmon: Check for HV mode when dumping XIVE info from OPAL - [ppc64el] rtas: use device model APIs and serialization during LPM - [ppc64el] futex: Fix warning: 'oldval' may be used uninitialized in this function - [ppc64el] pseries/mobility: use cond_resched when updating device tree - [armhf,arm64] pinctrl: tegra: Fix write barrier placement in pmx_writel - [ppc64el] eeh: Clear stale EEH_DEV_NO_HANDLER flag - vfio_pci: Restore original state on release - drm/nouveau/volt: Fix for some cards having 0 maximum voltage - [x86] pinctrl: amd: disable spurious-firing GPIO IRQs - drm/amd/display: support spdif - drm/amdgpu/si: fix ASIC tests - [ppc64el] exception: machine check use correct cfar for late handler - pstore: fs superblock limits - [ppc64el] pseries: correctly track irq state in default idle - [arm64] pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c - [ppc64el] dump kernel log before carrying out fadump or kdump - [arm64] mbox: qcom: add APCS child device for QCS404 - scsi: core: Reduce memory required for SCSI logging - dma-buf/sw_sync: Synchronize signal vs syncpt free - ext4: fix potential use after free after remounting with noblock_validity - [mips*] tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean - [x86] i2c-cht-wc: Fix lockdep warning - [x86] mfd: intel-lpss: Remove D3cold delay - HID: wacom: Fix several minor compiler warnings - [armel,armhf] 8898/1: mm: Don't treat faults reported from cache maintenance as writes - [armhf] rtc: snvs: fix possible race condition - HID: apple: Fix stuck function keys when using FN - [arm64] PCI: rockchip: Propagate errors for optional regulators - [armhf] PCI: imx6: Propagate errors for optional regulators - [armel,armhf] 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address - fat: work around race with userspace's read via blockdev while mounting - pktcdvd: remove warning on attempting to register non-passthrough dev - [s390x] hypfs: Fix error number left in struct pointer member - ocfs2: wait for recovering done after direct unlock request - [arm64] consider stack randomization for mmap base only when necessary - [mips*] properly account for stack randomization and stack guard gap - [armel,armhf] properly account for stack randomization and stack guard gap - [armel,armhf] use STACK_TOP when computing mmap base address - block: mq-deadline: Fix queue restart handling - bpf: fix use after free in prog symbol exposure - cxgb4:Fix out-of-bounds MSI-X info array access - erspan: remove the incorrect mtu limit for erspan - hso: fix NULL-deref on tty open - ipv6: drop incoming packets having a v4mapped source address - ipv6: Handle missing host route in __ipv6_ifa_notify - net: ipv4: avoid mixed n_redirects and rate_tokens usage - net: qlogic: Fix memory leak in ql_alloc_large_buffers - net: Unpublish sk from sk_reuseport_cb before call_rcu - nfc: fix memory leak in llcp_sock_bind() - qmi_wwan: add support for Cinterion CLS8 devices - rxrpc: Fix rxrpc_recvmsg tracepoint - sch_dsmark: fix potential NULL deref in dsmark_init() - udp: fix gso_segs calculations - vsock: Fix a lockdep warning in __vsock_release() - udp: only do GSO if # of segs > 1 - net/rds: Fix error handling in rds_ib_add_one() - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() - tipc: fix unlimited bundling of small messages - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash - NFC: fix attrs checks in netlink interface - kexec: bail out upon SIGKILL when allocating memory. - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.79 - [s390x] process: avoid potential reading of freed stack - [s390x] KVM: Test for bad access register and size at the start of S390_MEM_OP - [s390x] topology: avoid firing events before kobjs are created - [s390x] cio: exclude subchannels with no parent from pseudo check - [ppc64el] KVM: Book3S HV: Fix race in re-enabling XIVE escalation interrupts - [ppc64el] KVM: Book3S HV: Check for MMU ready on piggybacked virtual cores - [ppc64el] KVM: Book3S HV: Don't lose pending doorbell request on migration on P9 - [x86] KVM: Fix userspace set invalid CR4 - [x86] KVM: nVMX: handle page fault in vmread fix - nbd: fix max number of supported devs - PM / devfreq: tegra: Fix kHz to Hz conversion - ASoC: Define a set of DAPM pre/post-up events - [armhf] ASoC: sgtl5000: Improve VAG power and mute control - [ppc64el] mce: Fix MCE handling for huge pages - [ppc64el] mce: Schedule work from irq_work - [ppc64el] powernv: Restrict OPAL symbol map to only be readable by root - [ppc64el] powernv/ioda: Fix race in TCE level allocation - [ppc64el] book3s64/mm: Don't do tlbie fixup for some hardware revisions - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file - [x86] crypto: qat - Silence smp_processor_id() warning - crypto: skcipher - Unmap pages after an external error - [mips*el/loongson-3] Treat Loongson Extensions as ASEs - power: supply: sbs-battery: use correct flags field - power: supply: sbs-battery: only return health when battery present - tracing: Make sure variable reference alias has correct var_ref_idx - usercopy: Avoid HIGHMEM pfn warning - timer: Read jiffies once when forwarding base clk - [x86] PCI: vmd: Fix shadow offsets to reflect spec changes - PCI: Restore Resizable BAR size bits correctly for 1MB BARs - [armhf] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout - perf stat: Fix a segmentation fault when using repeat forever - [armhf] drm/omap: fix max fclk divider for omap36xx - [arm64] drm/msm/dsi: Fix return value check for clk_get_parent - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors - [x86] drm/i915/gvt: update vgpu workload head pointer correctly - mmc: sdhci: improve ADMA error reporting - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" - xen/xenbus: fix self-deadlock after killing user process - ieee802154: atusb: fix use-after-free at disconnect - [s390x] cio: avoid calling strlen on null pointer - cfg80211: initialize on-stack chandefs - [arm64] cpufeature: Detect SSBS and advertise to userspace - ima: always return negative code for error - ima: fix freeing ongoing ahash_request - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() - 9p: Transport error uninitialized - 9p: avoid attaching writeback_fid on mmap with type PRIVATE - xen/pci: reserve MCFG areas earlier - ceph: fix directories inode i_blkbits initialization - ceph: reconnect connection if session hang in opening state - watchdog: aspeed: Add support for AST2600 - netfilter: nf_tables: allow lookups in dynamic sets - drm/amdgpu: Fix KFD-related kernel oops on Hawaii - drm/amdgpu: Check for valid number of registers to read - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors - [x86] purgatory: Disable the stackleak GCC plugin for the purgatory - ntb: point to right memory window index - thermal: Fix use-after-free when unregistering thermal zone device - thermal_hwmon: Sanitize thermal_zone type - libnvdimm/region: Initialize bad block for volatile namespaces - fuse: fix memleak in cuse_channel_open - libnvdimm/nfit_test: Fix acpi_handle redefinition - sched/membarrier: Call sync_core only before usermode for same mm - sched/membarrier: Fix private expedited registration check - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() - kernel/elfcore.c: include proper prototypes - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed - [ppc64el] KVM: HV: XIVE: Free escalation interrupts before disabling the VP - [x86] KVM: nVMX: Fix consistency check on injected exception error code - nbd: fix crash when the blksize is zero - [ppc64el] pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() - [ppc64el] radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure - tick: broadcast-hrtimer: Fix a race in bc_set_next - perf tools: Fix segfault in cpu_cache_level__read() - perf stat: Reset previous counts on repeat with interval - [arm64] ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 - [arm64] KVM: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe - [arm64] docs: Document SSBS HWCAP - [arm64] fix SSBS sanitization - [arm64] Add sysfs vulnerability show for spectre-v1 - [arm64] add sysfs vulnerability show for meltdown - [arm64] enable generic CPU vulnerabilites support - [arm64] Always enable ssb vulnerability detection - [arm64] Provide a command line to disable spectre_v2 mitigation - [arm64] Advertise mitigation of Spectre-v2, or lack thereof - [arm64] Always enable spectre-v2 vulnerability detection - [arm64] add sysfs vulnerability show for spectre-v2 - [arm64] add sysfs vulnerability show for speculative store bypass - [arm64] ssbs: Don't treat CPUs with SSBS as unaffected by SSB - [arm64] Force SSBS on context switch - [arm64] Use firmware to detect CPUs that are not affected by Spectre-v2 - [arm64] speculation: Support 'mitigations=' cmdline option - vfs: Fix EOVERFLOW testing in put_compat_statfs64 - cfg80211: add and use strongly typed element iteration macros - cfg80211: Use const more consistently in for_each_element macros - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.80 - panic: ensure preemption is disabled during panic() - f2fs: use EINVAL for superblock with invalid magic - USB: rio500: Remove Rio 500 kernel driver - USB: yurex: Don't retry on unexpected errors - USB: yurex: fix NULL-derefs on disconnect - USB: usb-skeleton: fix runtime PM after driver unbind - USB: usb-skeleton: fix NULL-deref on disconnect - xhci: Fix false warning message about wrong bounce buffer write length - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long - xhci: Check all endpoints for LPM timeout - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts - usb: xhci: wait for CNR controller not ready bit in xhci resume - xhci: Prevent deadlock when xhci adapter breaks during init - xhci: Increase STS_SAVE timeout in xhci_suspend() - USB: adutux: fix use-after-free on disconnect - USB: adutux: fix NULL-derefs on disconnect - USB: adutux: fix use-after-free on release - USB: iowarrior: fix use-after-free on disconnect - USB: iowarrior: fix use-after-free on release - USB: iowarrior: fix use-after-free after driver unbind - USB: usblp: fix runtime PM after driver unbind - USB: chaoskey: fix use-after-free on release - USB: ldusb: fix NULL-derefs on driver unbind - serial: uartlite: fix exit path null pointer - USB: serial: keyspan: fix NULL-derefs on open() and write() - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 - USB: serial: option: add Telit FN980 compositions - USB: serial: option: add support for Cinterion CLS8 devices - USB: serial: fix runtime PM after driver unbind - USB: usblcd: fix I/O after disconnect - USB: microtek: fix info-leak at probe - USB: dummy-hcd: fix power budget for SuperSpeed mode - USB: legousbtower: fix slab info leak at probe - USB: legousbtower: fix deadlock on disconnect - USB: legousbtower: fix potential NULL-deref on disconnect - USB: legousbtower: fix open after failed reset request - USB: legousbtower: fix use-after-free on release - [x86] mei: me: add comet point (lake) LP device ids - [x86] mei: avoid FW version request on Ibex Peak and earlier - [armhf,arm64] iio: adc: axp288: Override TS pin bias current for some models - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified - perf llvm: Don't access out-of-scope array - perf inject jit: Fix JIT_CODE_MOVE filename - blk-wbt: fix performance regression in wbt scale_up/scale_down - CIFS: Gracefully handle QueryInfo errors during open - CIFS: Force revalidate inode when dentry is stale - CIFS: Force reval dentry if LOOKUP_REVAL flag is set - kernel/sysctl.c: do not override max_threads provided by userspace - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic - btrfs: fix incorrect updating of log root tree - btrfs: fix uninitialized ret in ref-verify - NFS: Fix O_DIRECT accounting of number of bytes read/written - [mips*] elf_hwcap: Export userspace ASEs - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags - ACPI/PPTT: Add support for ACPI 6.3 thread flag - [arm64] topology: Use PPTT to determine if PE is a thread - vfs: Fix the locking in dcache_readdir() and friends - media: stkwebcam: fix runtime PM after driver unbind - [arm64] sve: Fix wrong free for task->thread.sve_state - [rt] tracing/hwlat: Report total time spent in all NMIs during the sample - [rt] tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency - ftrace: Get a reference counter for the trace_array on filter files - tracing: Get trace_array reference for available_tracers files - hwmon: Fix HWMON_P_MIN_ALARM mask - [x86] asm: Fix MWAITX C-state hint value - [x86] PCI: vmd: Fix config addressing when using bus offsets - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.81 - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - [mips*el/loongson-3] Fix the link time qualifier of 'serial_exit()' - [arm64] net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - r8152: Set macpassthru in reset_resume callback - libata/ahci: Fix PCS quirk application - md/raid0: fix warning message for parameter default_layout - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - net: avoid potential infinite loop in tc_ctl_action() - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - sctp: change sctp_prot .no_autobind with true - memfd: Fix locking when tagging pins - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Input: synaptics-rmi4 - avoid processing unknown IRQs - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - [x86] drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - EDAC/ghes: Fix Use after free in ghes_edac remove path - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up - [arm64] pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.82 - zram: fix race between backing_dev_show and backing_dev_store - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - Btrfs: fix memory leak due to concurrent append writes with fiemap - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - btrfs: tracepoints: Fix wrong parameter order for qgroup events - wil6210: fix freeing of rx buffers in EDMA mode - f2fs: flush quota blocks after turnning it off - scsi: lpfc: Fix a duplicate 0711 log message number. - f2fs: fix to recover inode's i_gc_failures during POR - f2fs: fix to recover inode->i_flags of inode block during POR - [x86] HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override - [arm64,armel,armhf] usb: dwc2: fix unbalanced use of external vbus-supply - [x86] tools/power turbostat: fix goldmont C-state limit decoding - [x86] cpu: Add Atom Tremont (Jacobsville) - [arm64] drm/msm/dpu: handle failures while initializing displays - bcache: fix input overflow to writeback_rate_minimum - PCI: Fix Switchtec DMA aliasing quirk dmesg noise - Btrfs: fix deadlock on tree root leaf when finding free extent - netfilter: ipset: Make invalid MAC address checks consistent - HID: i2c-hid: Disable runtime PM for LG touchscreen - HID: i2c-hid: Ignore input report if there's no data present on Elan touchpanels - HID: i2c-hid: Add Odys Winbook 13 to descriptor override - [x86] platform/x86: Add the VLV ISP PCI ID to atomisp2_pm - [x86] platform/x86: Fix config space access for intel_atomisp2_pm - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 - HID: Add ASUS T100CHI keyboard dock battery quirks - NFSv4: Ensure that the state manager exits the loop on SIGKILL - HID: steam: fix boot loop with bluetooth firmware - HID: steam: fix deadlock with input devices. - [arm64,armhf] usb: dwc3: gadget: early giveback if End Transfer already completed - [arm64,armhf] usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete - ALSA: usb-audio: Cleanup DSD whitelist - usb: handle warm-reset port requests on hub resume - [armhf] rtc: pcf8523: set xtal load capacitance from DT - [arm64] Add MIDR encoding for HiSilicon Taishan CPUs - [arm64] kpti: Whitelist HiSilicon Taishan v110 CPUs - scsi: lpfc: Correct localport timeout duration error - CIFS: Respect SMB2 hdr preamble size in read responses - cifs: add credits from unmatched responses/messages - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT - exec: load_script: Do not exec truncated interpreter path - [arm64,armhf] net: dsa: mv88e6xxx: Release lock while requesting IRQ - PCI/PME: Fix possible use-after-free on remove - [arm64,armhf] iio: adc: meson_saradc: Fix memory allocation order - [x86] iio: fix center temperature of bmc150-accel-core - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Return appropriate error code for allocation failures - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init (CVE-2019-19065) - RDMA/iwcm: Fix a lock inversion issue - [x86] HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 - [arm64] gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - [armhf] serial: mctrl_gpio: Check for NULL pointer - efi/cper: Fix endianness of PCIe class code - [x86] efi/x86: Do not clean dummy variable in kexec path - [x86] xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - [arm64] armv8_deprecated: Checking return value for memory allocation - [x86] cpu: Add Comet Lake to the Intel CPU models header - sched/vtime: Fix guest/system mis-accounting on task switch - [x86] perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - iio: imu: adis16400: release allocated memory on failure (CVE-2019-19060) - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (CVE-2019-19048) - NFSv4: Fix leak of clp->cl_acceptor string - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 - iwlwifi: exclude GEO SAR support for 3168 - nbd: verify socket is supported during setup - USB: legousbtower: fix a signedness bug in tower_probe() - [x86] thunderbolt: Use 32-bit writes when writing ring producer/consumer - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe() (CVE-2019-15098) - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 - ALSA: hda/realtek - Add support for ALC623 - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix __le32/__le64 accessors in debugfs code - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - nl80211: fix validation of mesh path nexthop - [s390x] cmm: fix information leak in cmm_timeout_handler() - [s390x] idle: fix cpu idle time calculation - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default - rtlwifi: Fix potential overflow on P2P code (CVE-2019-17666) - [arm64] dmaengine: qcom: bam_dma: Fix resource leak - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - ALSA: timer: Simplify error path in snd_timer_open() - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - [ppc64el] powerpc/powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.83 - regulator: of: fix suspend-min/max-voltage parsing - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay - [arm64] arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - [armhf] regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - [x86] ASoC: rt5682: add NULL handler to set_jack function - [armhf] regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - [arm64,armhf] ASoc: rockchip: i2s: Fix RPM imbalance - [armel,armhf] mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - drm/amdgpu: fix potential VM faults - scsi: target: core: Do not overwrite CDB byte 1 - tracing: Fix "gfp_t" format for synthetic events - of: unittest: fix memory leak in unittest_data_add (CVE-2019-19049) - [arm64,armhf] irqchip/gic-v3-its: Use the exact ITSList for VMOVP - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: fix sk_page_frag() recursion from memory reclaim - [arm64] net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - [armhf] net: dsa: b53: Do not clear existing mirrored port mask - [armhf] net: phy: bcm7xxx: define soft_reset for 40nm EPHY - net: usb: lan78xx: Connect PHY before registering MAC - [arm64,armhf] net: dsa: fix switch tree list - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net/flow_dissector: switch to siphash - wireless: Skip directory when generating certificates - [x86] platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - [ppc64el] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.84 - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - [mips*] net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: usb: qmi_wwan: add support for DW5821e with eSIM support - nfc: netlink: fix double device reference drop - qede: fix NULL pointer deref in __qede_remove() - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - [arm64] Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - [armhf] sunxi: Fix CPU powerdown on A83T - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - [x86] intel_th: pci: Add Comet Lake PCH support - [x86] intel_th: pci: Add Jasper Lake PCH support - [x86] apic/32: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - [armhf] can: flexcan: disable completely the ECC mechanism - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052) - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - sched/fair: Fix -Wunused-but-set-variable warnings - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - [arm64,armhf] PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - [amd64] HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/qedr: Fix reported firmware version - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (CVE-2019-19045) - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - netfilter: nf_flow_table: set timeout before insertion into hashes - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: gadget: composite: Fix possible double free memory bug - [arm64] usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813) - usb: gadget: configfs: fix concurrent issue between composite APIs - [arm64,armhf] usb: dwc3: remove the call trace of USBx_GFLADJ - [x86] perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - [x86] perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - [x86] perf/x86/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - nvme-multipath: fix possible io hang after ctrl reconnect - [amd64] fjes: Handle workqueue allocation failure - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ" - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - [x86] hv_netvsc: Fix error handling in netvsc_attach() - [arm64,armhf] usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - NFSv4: Don't allow a cached open with a revoked delegation - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation - blkcg: make blkcg_print_stat() print stats only for online blkgs - [x86] iio: imu: mpu6050: Add support for the ICM 20602 IMU - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050 - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - net: prevent load/store tearing on sk->sk_stamp - [x86] iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/cpu: Add Tremont to the cpu vulnerability whitelist https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.85 - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - ipmr: Fix skb headroom in ipmr_get_route(). - net: gemini: add missed free_netdev - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - [armhf] net: ethernet: dwmac-sun8i: Use the correct function in exit path - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - iio: adc: max9611: explicitly cast gain_selectors - tee: optee: take DT status property into account - ath10k: fix kernel panic by moving pci flush after napi_disable - clk: sunxi-ng: h6: fix PWM gate/reset offset - soundwire: Initialize completion for defer messages - [x86] soundwire: intel: Fix uninitialized adev deref - [arm64] dts: allwinner: a64: Orange Pi Win: Fix SD card node - [arm64] dts: allwinner: a64: Olinuxino: fix DRAM voltage - [arm64] dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() - [arm64] soc/tegra: pmc: Fix pad voltage configuration for Tegra186 - [arm64] dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply - y2038: make do_gettimeofday() and get_seconds() inline - rtc: sysfs: fix NULL check in rtc_add_groups() - remoteproc/davinci: Use %zx for formating size_t - extcon: cht-wc: Return from default case to avoid warnings - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set - ALSA: seq: Do error checks at creating system ports - ath10k: skip resetting rx filter for WCN3990 - ath9k: fix tx99 with monitor mode interface - wil6210: drop Rx multicast packets that are looped-back to STA - wil6210: set edma variables only for Talyn-MB devices - wil6210: prevent usage of tx ring 0 for eDMA - wil6210: fix invalid memory access for rx_buff_mgmt debugfs - ath10k: limit available channels via DT ieee80211-freq-limit - ice: Update request resource command to latest specification - ice: Prevent control queue operations during reset - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated - ice: Fix and update driver version string - ASoC: dapm: Don't fail creating new DAPM control on NULL pinctrl - ASoC: dpcm: Properly initialise hw->rate_max - ASoC: meson: axg-fifo: report interrupt request failure - ASoC: AMD: Change MCLK to 48Mhz - pinctrl: ingenic: Probe driver at subsys_initcall - [armhf] dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale - [armhf] dts: exynos: Fix HDMI-HPD line handling on Arndale - [armhf] dts: exynos: Fix sound in Snow-rev5 Chromebook - liquidio: fix race condition in instruction completion processing - [arm64] dts: stratix10: i2c clock running out of spec - [armhf] dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks - i40evf: Validate the number of queues a PF sends - i40e: use correct length for strncpy - i40evf: set IFF_UNICAST_FLT flag for the VF - i40e: Check and correct speed values for link on open - i40evf: Don't enable vlan stripping when rx offload is turned on - i40e: hold the rtnl lock on clearing interrupt scheme - i40evf: cancel workqueue sync for adminq when a VF is removed - i40e: Prevent deleting MAC address from VF when set by PF - IB/rxe: avoid back-to-back retries - IB/rxe: fixes for rdma read retry - iwlwifi: drop packets with bad status in CD - iwlwifi: don't WARN on trying to dump dead firmware - iwlwifi: mvm: avoid sending too many BARs - media: vicodec: fix out-of-range values when decoding - media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers - media: ov772x: Disable clk on error path - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument - mwifiex: do no submit URB in suspended state - mwifex: free rx_cmd skb in suspended state - brcmfmac: fix wrong strnchr usage - mt76: Fix comparisons with invalid hardware key index - soc: imx: gpc: fix PDN delay - ASoC: rsnd: ssi: Fix issue in dma data address assignment - net: hns3: Fix for multicast failure - net: hns3: Fix error of checking used vlan id - net: hns3: Fix for loopback selftest failed problem - net: hns3: Change the dst mac addr of loopback packet - net/mlx5: Fix atomic_mode enum values - net: phy: mscc: read 'vsc8531,vddmac' as an u32 - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 - [armhf] dts: meson8: fix the clock controller register size - [armhf] dts: meson8b: fix the clock controller register size - mtd: rawnand: marvell: use regmap_update_bits() for syscon access - mtd: rawnand: fsl_ifc: check result of SRAM initialization - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions - mtd: rawnand: qcom: don't include dma-direct.h - IB/mlx5: Change TX affinity assignment in RoCE LAG mode - qxl: fix null-pointer crash during suspend - mac80211: fix saving a few HE values - cfg80211: validate wmm rule when setting - f2fs: avoid wrong decrypted data from disk - net: lan78xx: Bail out if lan78xx_get_endpoints fails - rtnetlink: move type calculation out of loop - ASoC: sgtl5000: avoid division by zero if lo_vag is zero - ath10k: avoid possible memory access violation - [armhf] dts: exynos: Disable pull control for S5M8767 PMIC - ath10k: wmi: disable softirq's while calling ieee80211_rx - i2c: mediatek: Use DMA safe buffers for i2c transactions - IB/mlx5: Don't hold spin lock while checking device state - IB/ipoib: Ensure that MTU isn't less than minimum permitted - RDMA/core: Rate limit MAD error messages - RDMA/core: Follow correct unregister order between sysfs and cgroup - udf: Fix crash during mount - ASoC: dapm: Avoid uninitialised variable warning - [x86] ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation - ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA - [powerpc] make PowerMac cache node search conditional on CONFIG_PPC_PMAC - [armhf] dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files - [armhf] dts: omap3-gta04: fixes for tvout / venc - [armhf] dts: omap3-gta04: tvout: enable as display1 alias - [armhf] dts: omap3-gta04: fix touchscreen tsc2007 - [armhf] dts: omap3-gta04: make NAND partitions compatible with recent U-Boot - [armhf] dts: omap3-gta04: keep vpll2 always on - f2fs: submit bio after shutdown - failover: Fix error return code in net_failover_create - sched/debug: Explicitly cast sched_feat() to bool - sched/debug: Use symbolic names for task state constants - firmware: arm_scmi: use strlcpy to ensure NULL-terminated strings - [arm64] dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire - [armhf] dts: exynos: Disable pull control for PMIC IRQ line on Artik5 board - usb: mtu3: disable vbus rise/fall interrupts of ltssm - EDAC, sb_edac: Return early on ADDRV bit and address type test - [armhf] rtc: pl030: fix possible race condition - ath9k: add back support for using active monitor interfaces for tx99 - dmaengine: at_xdmac: remove a stray bottom half unlock - RDMA/hns: Fix an error code in hns_roce_v2_init_eq_table() - IB/hfi1: Missing return value in error path for user sdma - signal: Always ignore SIGKILL and SIGSTOP sent to the global init - signal: Properly deliver SIGILL from uprobes - signal: Properly deliver SIGSEGV from x86 uprobes - f2fs: fix memory leak of write_io in fill_super() - f2fs: fix memory leak of percpu counter in fill_super() - f2fs: fix setattr project check upon fssetxattr ioctl - scsi: qla2xxx: Use correct qpair for ABTS/CMD - scsi: qla2xxx: Fix iIDMA error - scsi: qla2xxx: Defer chip reset until target mode is enabled - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 - scsi: qla2xxx: Fix deadlock between ATIO and HW lock - scsi: qla2xxx: Increase abort timeout value - scsi: qla2xxx: Check for Register disconnect - scsi: qla2xxx: Fix port speed display on chip reset - scsi: qla2xxx: Fix dropped srb resource. - scsi: qla2xxx: Fix duplicate switch's Nport ID entries - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 - scsi: lpfc: Fix errors in log messages. - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() - [armhf] imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set - scsi: pm80xx: Corrected dma_unmap_sg() parameter - scsi: pm80xx: Fixed system hang issue during kexec boot - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list - net: aquantia: fix hw_atl_utils_fw_upload_dwords - Drivers: hv: vmbus: Fix synic per-cpu context initialization - nvmem: core: return error code instead of NULL from nvmem_device_get - media: dt-bindings: adv748x: Fix decimal unit addresses - [x86] ALSA: hda: Fix implicit definition of pci_iomap() on SH - media: fix: media: pci: meye: validate offset to avoid arbitrary access - media: dvb: fix compat ioctl translation - net: bcmgenet: Fix speed selection for reverse MII - [arm64] dts: meson: libretech: update board model - [arm64] dts: meson-axg: use the proper compatible for ethmac - [x86] ALSA: intel8x0m: Register irq handler after register initializations - [arm64] dts: renesas: salvator-common: adv748x: Override secondary addresses - [arm64] dts: renesas: r8a77965: Attach the SYS-DMAC to the IPMMU - [arm64] dts: renesas: r8a77965: Fix HS-USB compatible - [arm64] dts: renesas: r8a77965: Fix clock/reset for usb2_phy1 - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() - llc: avoid blocking in llc_sap_close() - [armhf] dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value - [arm64] soc: qcom: wcnss_ctrl: Avoid string overflow - [arm64] dts: broadcom: Fix I2C and SPI bus warnings - [armhf] dts: bcm: Fix SPI bus warnings - [armhf] dts: aspeed: Fix I2C bus warnings - [ppc64el,powerpc*] powerpc/vdso: Correct call frame information - [armhf] dts: socfpga: Fix I2C bus unit-address error - [armhf] dts: sunxi: Fix I2C bus warnings - [armhf] dts: sun9i: Fix I2C bus warnings - android: binder: no outgoing transaction when thread todo has transaction - cxgb4: Fix endianness issue in t4_fwcache() - [arm64] fix for bad_mode() handler to always result in panic - block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash - blok, bfq: do not plug I/O if all queues are weight-raised - [arm64] dts: meson: Fix erroneous SPI bus warnings - power: supply: ab8500_fg: silence uninitialized variable warnings - component: fix loop condition to call unbind() if bind() fails - kernfs: Fix range checks in kernfs_get_target_path - ip_gre: fix parsing gre header in ipgre_err - scsi: ufshcd: Fix NULL pointer dereference for in ufshcd_init - [armhf] dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 - [arm64] dts: rockchip: Fix I2C bus unit-address error on rk3399-puma-haikou - [x86] ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask - netfilter: nf_tables: avoid BUG_ON usage - ath9k: Fix a locking bug in ath9k_add_interface() - [s390x] qeth: uninstall IRQ handler on device removal - [s390x] qeth: invoke softirqs after napi_schedule() - media: vsp1: Fix vsp1_regs.h license header - media: vsp1: Fix YCbCr planar formats pitch calculation - media: ov2680: don't register the v4l2 subdevice before checking chip ID - PCI/ACPI: Correct error message for ASPM disabling - net: socionext: Fix two sleep-in-atomic-context bugs in ave_rxfifo_reset() - PCI: mediatek: Fix unchecked return value - [armhf] dts: xilinx: Fix I2C and SPI bus warnings - serial: uartps: Fix suspend functionality - serial: samsung: Enable baud clock for UART reset procedure in resume - serial: mxs-auart: Fix potential infinite loop - tty: serial: qcom_geni_serial: Fix serial when not used as console - [arm64] dts: ti: k3-am65: Change #address-cells and #size-cells of interconnect to 2 - samples/bpf: fix a compilation failure - spi: mediatek: Don't modify spi_transfer when transfer. - ASoC: rt5682: Fix the boost volume at the begining of playback - ipmi_si_pci: fix NULL device in ipmi_si error message - ipmi_si: fix potential integer overflow on large shift - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address - ipmi: fix return value of ipmi_set_my_LUN - net: hns3: fix return type of ndo_start_xmit function - net: cavium: fix return type of ndo_start_xmit function - net: ibm: fix return type of ndo_start_xmit function - [ppc64el,powerpc*] iommu: Avoid derefence before pointer check - [ppc64el,powerpc*] selftests: Do not fail with reschedule - [ppc64el,powerpc64] hash: Fix stab_rr off by one initialization - [ppc64el,powerpc64] pseries/memory-hotplug: Only update DT once per memory DLPAR request - [ppc64el,powerpc64] pseries: Disable CPU hotplug across migrations - [ppc64el,powerpc*] Fix duplicate const clang warning in user access code - RDMA/i40iw: Fix incorrect iterator type - OPP: Protect dev_list with opp_table lock - of/unittest: Fix I2C bus unit-address error - libfdt: Ensure INT_MAX is defined in libfdt_env.h - power: supply: twl4030_charger: fix charging current out-of-bounds - power: supply: twl4030_charger: disable eoc interrupt on linear charge - net: mvpp2: fix the number of queues per cpu for PPv2.2 - net: marvell: fix return type of ndo_start_xmit function - net: toshiba: fix return type of ndo_start_xmit function - net: xilinx: fix return type of ndo_start_xmit function - net: broadcom: fix return type of ndo_start_xmit function - net: amd: fix return type of ndo_start_xmit function - net: sun: fix return type of ndo_start_xmit function - net: hns3: Fix for setting speed for phy failed problem - net: hns3: Fix cmdq registers initialization issue for vf - net: hns3: Clear client pointer when initialize client failed or unintialize finished - net: hns3: Fix client initialize state issue when roce client initialize failed - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() - nfp: provide a better warning when ring allocation fails - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started - usb: chipidea: Fix otg event handler - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT - [s390x] zcrypt: enable AP bus scan without a valid default domain - [s390x] vdso: avoid 64-bit vdso mapping for compat tasks - [s390x] vdso: correct CFI annotations of vDSO functions - brcmfmac: increase buffer for obtaining firmware capabilities - brcmsmac: Use kvmalloc() for ucode allocations - mlxsw: spectrum: Init shaper for TCs 8..15 - PCI: portdrv: Initialize service drivers directly - [armhf] dts: am335x-evm: fix number of cpsw - [armhf] dts: ti: Fix SPI and I2C bus warnings - f2fs: avoid infinite loop in f2fs_alloc_nid - f2fs: fix to recover inode's uid/gid during POR - [armhf] dts: ux500: Correct SCU unit address - [armhf] dts: ux500: Fix LCDA clock line muxing - [armhf] dts: ste: Fix SPI controller node names - spi: pic32: Use proper enum in dmaengine_prep_slave_rg - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) - cpufeature: avoid warning when compiling with clang - [armhf] crypto: crc32 - avoid warning when compiling with Clang - [armel] dts: marvell: Fix SPI and I2C bus warnings - [x86] mce-inject: Reset injection struct after injection - [armhf,arm64] dts: clearfog: fix sdhci supply property name - bnx2x: Ignore bandwidth attention in single function mode - PCI/AER: Take reference on error devices - PCI/AER: Don't read upstream ports below fatal errors - PCI/ERR: Use slot reset if available - samples/bpf: fix compilation failure - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider - net: micrel: fix return type of ndo_start_xmit function - net: freescale: fix return type of ndo_start_xmit function - [x86] CPU: Use correct macros for Cyrix calls - [x86] CPU: Change query logic so CPUID is enabled before testing - EDAC: Correct DIMM capacity unit symbol - [mips*] kexec: Relax memory restriction - [arm64] dts: rockchip: Fix microSD in rk3399 sapphire board - mlxsw: Make MLXSW_SP1_FWREV_MINOR a hard requirement - media: imx: work around false-positive warning, again - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() - media: au0828: Fix incorrect error messages - media: davinci: Fix implicit enum conversion warning - [armhf] dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock - usb: gadget: uvc: configfs: Drop leaked references to config items - usb: gadget: uvc: configfs: Prevent format changes after linking header - usb: gadget: uvc: configfs: Sort frame intervals upon writing - [armhf] dts: exynos: Correct audio subsystem parent clock on Peach Chromebooks - i2c: aspeed: fix invalid clock parameters for very large divisors - gpiolib: Fix gpio_direction_* for single direction GPIOs - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs - phy: phy-twl4030-usb: fix denied runtime access - [armhf] dts: imx6ull: update vdd_soc voltage for 900MHz operating point - usb: gadget: uvc: Factor out video USB request queueing - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode - coresight: Use ERR_CAST instead of ERR_PTR - coresight: Fix handling of sinks - coresight: perf: Fix per cpu path management - coresight: perf: Disable trace path upon source error - coresight: tmc-etr: Handle driver mode specific ETR buffers - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP - coresight: tmc: Fix byte-address alignment for RRP - coresight: dynamic-replicator: Handle multiple connections - slimbus: ngd: register ngd driver only once. - slimbus: ngd: return proper error code instead of zero - silmbus: ngd: register controller after power up. - misc: kgdbts: Fix restrict error - misc: genwqe: should return proper error value. - vmbus: keep pointer to ring buffer page - vfio/pci: Fix potential memory leak in vfio_msi_cap_len - vfio/pci: Mask buggy SR-IOV VF INTx support - iw_cxgb4: Use proper enumerated type in c4iw_bar2_addrs - scsi: libsas: always unregister the old device if going to discover new - f2fs: fix remount problem of option io_bits - phy: lantiq: Fix compile warning - [arm64] dts: fsl: Fix I2C and SPI bus warnings - [armhf] dts: imx51-zii-rdu1: Fix the rtc compatible string - [arm64] tegra: I2C on Tegra194 is not compatible with Tegra114 - [armhf] dts: tegra30: fix xcvr-setup-use-fuses - [armhf] dts: tegra20: restore address order - [armhf] tegra: apalis_t30: fix mmc1 cmd pull-up - [armhf] tegra: apalis_t30: fix mcp2515 can controller interrupt polarity - [armhf] tegra: colibri_t30: fix mcp2515 can controller interrupt polarity - [armhf] dts: paz00: fix wakeup gpio keycode - net: smsc: fix return type of ndo_start_xmit function - net: faraday: fix return type of ndo_start_xmit function - PCI/ERR: Run error recovery callbacks for all affected devices - f2fs: update i_size after DIO completion - f2fs: fix to recover inode's project id during POR - f2fs: mark inode dirty explicitly in recover_inode() - RDMA: Fix dependencies for rdma_user_mmap_io - EDAC: Raise the maximum number of memory controllers - firmware: dell_rbu: Make payload memory uncachable - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS - Bluetooth: btrsi: fix bt tx timeout issue - [x86] hyperv: Suppress "PCI: Fatal: No config space access function found" - crypto: s5p-sss: Fix race in error handling - crypto: s5p-sss: Fix Fix argument list alignment - crypto: fix a memory leak in rsa-kcs1pad's encryption mode - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump - iwlwifi: fix non_shared_ant for 22000 devices - iwlwifi: pcie: read correct prph address for newer devices - iwlwifi: api: annotate compressed BA notif array sizes - iwlwifi: pcie: gen2: build A-MSDU only for GSO - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN - iwlwifi: mvm: use correct FIFO length - iwlwifi: mvm: Allow TKIP for AP mode - scsi: NCR5380: Clear all unissued commands on host reset - scsi: NCR5380: Have NCR5380_select() return a bool - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data - scsi: NCR5380: Check for invalid reselection target - scsi: NCR5380: Don't clear busy flag when abort fails - scsi: NCR5380: Don't call dsprintk() following reselection interrupt - scsi: NCR5380: Handle BUS FREE during reselection - scsi: NCR5380: Check for bus reset - [arm64] dts: amd: Fix SPI bus warnings - [arm64] dts: lg: Fix SPI controller node names - rtc: isl1208: avoid possible sysfs race - rtc: tx4939: fixup nvmem name and register size - rtc: armada38x: fix possible race condition - netfilter: masquerade: don't flush all conntracks if only one address deleted on device - usb: xhci-mtk: fix ISOC error when interval is zero - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear - fuse: use READ_ONCE on congestion_threshold and max_background - IB/iser: Fix possible NULL deref at iser_inv_desc() - media: ov2680: fix null dereference at power on - [s390x] vdso: correct vdso mapping for compat tasks - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused - memfd: Use radix_tree_deref_slot_protected to avoid the warning. - slcan: Fix memory leak in error path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.86 - spi: mediatek: use correct mata->xfer_len when in fifo transfer - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() - tee: optee: add missing of_node_put after of_device_is_available - Revert "OPP: Protect dev_list with opp_table lock" - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - idr: Fix idr_get_next race with idr_remove - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - [i386] bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 - [i386] bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} - net: ovs: fix return type of ndo_start_xmit function - net: xen-netback: fix return type of ndo_start_xmit function - [armhf] dts: dra7: Enable workaround for errata i870 in PCIe host mode - [armhf] dts: omap5: enable OTG role for DWC3 controller - [arm64] net: hns3: Fix for netdev not up problem when setting mtu - [arm64] net: hns3: Fix loss of coal configuration while doing reset - f2fs: return correct errno in f2fs_gc - [armhf] dts: sun8i: h3-h5: ir register size should be the whole memory block - [armhf] dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet PHY - tcp: up initial rmem to 128KB and SYN rwin to around 64KB - SUNRPC: Fix priority queue fairness - ACPI / LPSS: Make acpi_lpss_find_device() also find PCI devices - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq - f2fs: keep lazytime on remount - IB/hfi1: Error path MAD response size is incorrect - IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds - mt76x2: fix tx power configuration for VHT mcs 9 - mt76x2: disable WLAN core before probe - mt76: fix handling ps-poll frames - [arm64,armhf] iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() - [arm64,armhf] iommu/arm-smmu-v3: Fix unexpected CMD_SYNC timeout - [arm64,armhf] kvm: Fix stage2_flush_memslot for 4 level page table - [arm64] numa: Report correct memblock range for the dummy node - ath10k: fix vdev-start timeout on error - rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface - ata: ahci_brcm: Allow using driver or DSL SoCs - PM / devfreq: Fix devfreq_add_device() when drivers are built as modules. - PM / devfreq: Fix handling of min/max_freq == 0 - PM / devfreq: stopping the governor before device_unregister() - ath9k: fix reporting calculated new FFT upper max - selftests/tls: Fix recv(MSG_PEEK) & splice() test cases - usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() - usb: dwc3: gadget: Check ENBLSLPM before sending ep command - nl80211: Fix a GET_KEY reply attribute - [arm64,armhf] irqchip/irq-mvebu-icu: Fix wrong private data retrieval - watchdog: core: fix null pointer dereference when releasing cdev - watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D - [ppc64el,powerpc64] Inform the userspace about TCE update failures - printk: Do not miss new messages when replaying the log - printk: CON_PRINTBUFFER console registration is a bit racy - dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction - dmaengine: timb_dma: Use proper enum in td_prep_slave_sg - [x86] ALSA: hda: Fix mismatch for register mask and value in ext controller. - ext4: fix build error when DX_DEBUG is defined - clk: keystone: Enable TISCI clocks if K3_ARCH - sunrpc: Fix connect metrics - [x86] PCI: Apply VMD's AERSID fixup generically - mei: samples: fix a signedness bug in amt_host_if_call() - cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update - cxgb4: Use proper enum in IEEE_FAUX_SYNC - [ppc64el,powerpc*] Fix DTL buffer registration - [ppc64el,powerpc*] Fix how we iterate over the DTL entries - [ppc64el,powerpc*] xive: Move a dereference below a NULL test - mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer - PM / hibernate: Check the success of generating md5 digest before hibernation - tools: PCI: Fix compilation warnings - ice: Fix forward to queue group logic - md: allow metadata updates while suspending an array - fix - ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit - i40e: Use proper enum in i40e_ndo_set_vf_link_state - ixgbe: Fix crash with VFs and flow director on interface flap - IB/mthca: Fix error return code in __mthca_init_one() - IB/rxe: avoid srq memory leak - RDMA/hns: Bugfix for reserved qp number - RDMA/hns: Submit bad wr when post send wr exception - RDMA/hns: Bugfix for CM test - RDMA/hns: Limit the size of extend sge of sq - IB/mlx4: Avoid implicit enumerated type conversion - rpmsg: glink: smem: Support rx peak for size less than 4 bytes - msm/gpu/a6xx: Force of_dma_configure to setup DMA for GMU - OPP: Return error on error from dev_pm_opp_get_opp_count() - ACPICA: Never run _REG on system_memory and system_IO - cpuidle: menu: Fix wakeup statistics updates for polling state - ASoC: qdsp6: q6asm-dai: checking NULL vs IS_ERR() - [ppc64el,powerpc*] time: Use clockevents_register_device(), fixing an issue with large decrementer - [ppc64el,powerpc64] radix: Explicitly flush ERAT with local LPID invalidation - ata: ep93xx: Use proper enums for directions - qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers - media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote - media: pxa_camera: Fix check for pdev->dev.of_node - media: rcar-vin: fix redeclaration of symbol - media: i2c: adv748x: Support probing a single output - [x86] ALSA: hda/sigmatel - Disable automute for Elo VuPoint - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED - [ppc64el,powerpc64] Book3S PR: Exiting split hack mode needs to fixup both PC and LR - USB: serial: cypress_m8: fix interrupt-out transfer length - usb: dwc2: disable power_down on rockchip devices - mtd: physmap_of: Release resources on error - cpu/SMT: State SMT is disabled even with nosmt and without "=force" - brcmfmac: reduce timeout for action frame scan - brcmfmac: fix full timeout waiting for action frame on-channel tx - qtnfmac: request userspace to do OBSS scanning if FW can not - qtnfmac: pass sgi rate info flag to wireless core - qtnfmac: inform wireless core about supported extended capabilities - qtnfmac: drop error reports for out-of-bounds key indexes - [armhf] clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume - [armhf] clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420 - [armhf] clk: samsung: Use clk_hw API for calling clk framework from clk notifiers - printk: Correct wrong casting - NFSv4.x: fix lock recovery during delegation recall - dmaengine: ioat: fix prototype of ioat_enumerate_channels - media: ov5640: fix framerate update - media: cec-gpio: select correct Signal Free Time - gfs2: slow the deluge of io error messages - i2c: omap: use core to detect 'no zero length' quirk - i2c: qup: use core to detect 'no zero length' quirk - i2c: tegra: use core to detect 'no zero length' quirk - i2c: zx2967: use core to detect 'no zero length' quirk - Input: st1232 - set INPUT_PROP_DIRECT property - Input: silead - try firmware reload after unsuccessful resume - soc: fsl: bman_portals: defer probe after bman's probe - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware - tc-testing: fix build of eBPF programs - remoteproc: Check for NULL firmwares in sysfs interface - remoteproc: qcom: q6v5: Fix a race condition on fatal crash - kexec: Allocate decrypted control pages for kdump if SME is enabled - [x86] olpc: Fix build error with CONFIG_MFD_CS5535=m - dmaengine: rcar-dmac: set scatter/gather max segment size - xfrm: use correct size to initialise sp->ovec - ACPI / SBS: Fix rare oops when removing modules - iwlwifi: mvm: don't send keys when entering D3 - xsk: proper AF_XDP socket teardown ordering - [amd64] fsgsbase: Fix ptrace() to read the FS/GS base accurately - mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1 - mmc: tmio: Fix SCC error detection - mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size - fbdev: sbuslib: use checked version of put_user() - fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() - fbdev: fix broken menu dependencies - reset: Fix potential use-after-free in __of_reset_control_get() - bcache: account size of buckets used in uuid write to ca->meta_sectors_written - bcache: recal cached_dev_sectors on detach - [x86] platform: mlx-platform: Properly use mlxplat_mlxcpld_msn201x_items - media: dw9714: Fix error handling in probe function - media: dw9807-vcm: Fix probe error handling - media: cx18: Don't check for address of video_dev - mtd: spi-nor: cadence-quadspi: Use proper enum for dma_[un]map_single - mtd: devices: m25p80: Make sure WRITE_EN is issued before each write - [x86] intel_rdt: Introduce utility to obtain CDP peer - [x86] intel_rdt: CBM overlap should also check for overlap with CDP peer - mmc: mmci: expand startbiterr to irqmask and error check - [s390x] kasan: avoid vdso instrumentation - [s390x] kasan: avoid instrumentation of early C code - [s390x] kasan: avoid user access code instrumentation - [i386] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() - backlight: lm3639: Unconditionally call led_classdev_unregister - mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable - printk: Give error on attempt to set log buffer length to over 2G - media: isif: fix a NULL pointer dereference bug - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads - media: cx231xx: fix potential sign-extension overflow on large shift - media: venus: vdec: fix decoded data size - [x86] ALSA: hda/ca0132 - Fix input effect controls for desktop cards - lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync - lightnvm: pblk: fix incorrect min_write_pgs - lightnvm: pblk: guarantee emeta on line close - lightnvm: pblk: fix write amplificiation calculation - lightnvm: pblk: guarantee mw_cunits on read buffer - lightnvm: do no update csecs and sos on 1.2 - lightnvm: pblk: fix error handling of pblk_lines_init() - lightnvm: pblk: consider max hw sectors supported for max_write_pgs - [x86] kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error - bpf: btf: Fix a missing check bug - net: fix generic XDP to handle if eth header was mangled - gpio: syscon: Fix possible NULL ptr usage - spi: fsl-lpspi: Prevent FIFO under/overrun by default - pinctrl: gemini: Mask and set properly - spi: spidev: Fix OF tree warning logic - [armel,armhf] 8802/1: Call syscall_trace_exit even when system call skipped - [x86] mm: Do not warn about PCI BIOS W+X mappings - orangefs: rate limit the client not running info message - pinctrl: gemini: Fix up TVC clock group - scsi: arcmsr: clean up clang warning on extraneous parentheses - [x86] hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors - hwmon: (nct6775) Fix names of DIMM temperature sources - hwmon: (pwm-fan) Silence error on probe deferral - hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros - hwmon: (npcm-750-pwm-fan) Change initial pwm target to 255 - selftests: forwarding: Have lldpad_app_wait_set() wait for unknown, too - net: sched: avoid writing on noop_qdisc - netfilter: nft_compat: do not dump private area - misc: cxl: Fix possible null pointer dereference - mac80211: minstrel: fix using short preamble CCK rates on HT clients - mac80211: minstrel: fix CCK rate group streams value - mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode - spi: rockchip: initialize dma_slave_config properly - mlxsw: spectrum_switchdev: Check notification relevance based on upper device - [armhf] dts: omap5: Fix dual-role mode on Super-Speed port - tcp: start receiver buffer autotuning sooner - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate - PM / devfreq: Fix static checker warning in try_then_request_governor - tools: PCI: Fix broken pcitest compilation - [ppc64el,powerpc*] time: Fix clockevent_decrementer initalisation for PR KVM - mmc: tmio: fix SCC error handling to avoid false positive CRC error - [x86] resctrl: Fix rdt_find_domain() return value and checks https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.87 - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel - net/mlx4_en: fix mlx4 ethtool -N insertion - net/mlx4_en: Fix wrong limitation for number of TX rings - net: rtnetlink: prevent underflows in do_setvfinfo() - net/sched: act_pedit: fix WARN() in the traffic path - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key - sfc: Only cancel the PPS workqueue if it exists - net/mlx5e: Fix set vf link state error flow - net/mlxfw: Verify FSM error code translation doesn't exceed array size - net/mlx5: Fix auto group size calculation - vhost/vsock: split packets to send using multiple buffers - gpio: max77620: Fixup debounce delays - tools: gpio: Correctly add make dependencies for gpio_utils - nbd:fix memory leak in nbd_get_socket() - virtio_console: allocate inbufs in add_port() only if it is needed - Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()" - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() - [x86] drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles - [x86] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() - mwifiex: Fix NL80211_TX_POWER_LIMITED - ALSA: isight: fix leak of reference to firewire unit in error path of .probe callback - crypto: testmgr - fix sizeof() on COMP_BUF_SIZE - printk: lock/unlock console only for new logbuf entries - printk: fix integer overflow in setup_log_buf() - pinctrl: madera: Fix uninitialized variable bug in madera_mux_set_mux - PCI: cadence: Write MSI data with 32bits - gfs2: Fix marking bitmaps non-full - pty: fix compat ioctls - synclink_gt(): fix compat_ioctl() - [ppc64] Fix signedness bug in update_flash_db() - [powerpc] boot: Fix opal console in boot wrapper - [ppc64*,powerpc] boot: Disable vector instructions - [ppc64*,powerpc] eeh: Fix null deref for devices removed during EEH - [ppc64*,powerpc] eeh: Fix use of EEH_PE_KEEP on wrong field - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr() - mt76: do not store aggregation sequence number for null-data frames - mt76x0: phy: fix restore phase in mt76x0_phy_recalibrate_after_assoc - brcmsmac: AP mode: update beacon when TIM changes - ath10k: set probe request oui during driver start - ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem - skd: fixup usage of legacy IO API - cdrom: don't attempt to fiddle with cdo->capability - spi: sh-msiof: fix deferred probing - mmc: mediatek: fill the actual clock for mmc debugfs - mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail - PCI: mediatek: Fix class type for MT7622 to PCI_CLASS_BRIDGE_PCI - btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag - btrfs: handle error of get_old_root - gsmi: Fix bug in append_to_eventlog sysfs handler - misc: mic: fix a DMA pool free failure - w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for unsigned, count for max size). - [m68k] fix command-line parsing when passed from u-boot - RDMA/bnxt_re: Avoid NULL check after accessing the pointer - RDMA/bnxt_re: Fix qp async event reporting - RDMA/bnxt_re: Avoid resource leak in case the NQ registration fails - pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' - pwm: lpss: Only set update bit if we are actually changing the settings - amiflop: clean up on errors during setup - qed: Align local and global PTT to propagate through the APIs. - scsi: ips: fix missing break in switch - nfp: bpf: protect against mis-initializing atomic counters - [x86] KVM: nVMX: reset cache/shadows when switching loaded VMCS - [x86] KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode() - [x86] KVM: Fix invvpid and invept register operand size in 64-bit mode - clk: tegra: Fixes for MBIST work around - scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler - scsi: isci: Change sci_controller_start_task's return type to sci_status - scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event - scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param - nvmet: avoid integer overflow in the discard code - nvmet-fcloop: suppress a compiler warning - nvme-pci: fix hot removal during error handling - PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks - clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk - ASoC: tegra_sgtl5000: fix device_node refcounting - scsi: dc395x: fix dma API usage in srb_done - scsi: dc395x: fix DMA API usage in sg_update_list - scsi: zorro_esp: Limit DMA transfers to 65535 bytes - net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed - net: fix warning in af_unix - xfs: fix use-after-free race in xfs_buf_rele - xfs: clear ail delwri queued bufs on unmount of shutdown fs - kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack - ACPI / scan: Create platform device for INT33FE ACPI nodes - PM / Domains: Deal with multiple states but no governor in genpd - ALSA: i2c/cs8427: Fix int to char conversion - macintosh/windfarm_smu_sat: Fix debug output - PCI: vmd: Detach resources after stopping root bus - USB: misc: appledisplay: fix backlight update_status return code - usbip: tools: fix atoi() on non-null terminated string - sctp: use sk_wmem_queued to check for writable space - dm raid: avoid bitmap with raid4/5/6 journal device - selftests/bpf: fix file resource leak in load_kallsyms - SUNRPC: Fix a compile warning for cmpxchg64() - sunrpc: safely reallow resvport min/max inversion - atm: zatm: Fix empty body Clang warnings - [s390x] perf: Return error when debug_register fails - swiotlb: do not panic on mapping failures - spi: omap2-mcspi: Set FIFO DMA trigger level to word length - [x86] intel_rdt: Prevent pseudo-locking from using stale pointers - sparc: Fix parport build warnings. - [ppc64*,powerpc] pseries: Export raw per-CPU VPA data via debugfs - [ppc64*,powerpc] mm/radix: Fix off-by-one in split mapping logic - [ppc64*,powerpc] mm/radix: Fix overuse of small pages in splitting logic - [ppc64*,powerpc] mm/radix: Fix small page at boundary when splitting - [ppc64*] radix: Fix radix__flush_tlb_collapsed_pmd double flushing pmd - selftests/bpf: fix return value comparison for tests in test_libbpf.sh - tools: bpftool: fix completion for "bpftool map update" - ceph: fix dentry leak in ceph_readdir_prepopulate - ceph: only allow punch hole mode in fallocate - thermal: armada: fix a test in probe() - f2fs: fix to spread clear_cold_data() - f2fs: spread f2fs_set_inode_flags() - mISDN: Fix type of switch control variable in ctrl_teimanager - qlcnic: fix a return in qlcnic_dcb_get_capability() - net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode - mfd: arizona: Correct calling of runtime_put_sync - mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values - [x86] mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well - mfd: max8997: Enale irq-wakeup unconditionally - net: socionext: Stop PHY before resetting netsec - fs/cifs: fix uninitialised variable warnings - spi: uniphier: fix incorrect property items - selftests/ftrace: Fix to test kprobe $comm arg only if available - selftests: watchdog: fix message when /dev/watchdog open fails - selftests: watchdog: Fix error message. - selftests: kvm: Fix -Wformat warnings - selftests: fix warning: "_GNU_SOURCE" redefined - net: ethernet: cadence: fix socket buffer corruption problem - bpf: devmap: fix wrong interface selection in notifier_call - bpf, btf: fix a missing check bug in btf_parse - [sparc64] Rework xchg() definition to avoid warnings. - [arm64] lib: use C string functions with KASAN enabled - fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle() - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock - tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage - mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition - macsec: update operstate when lower device changes - macsec: let the administrator set UP state even if lowerdev is down - block: fix the DISCARD request merge - i2c: uniphier-f: make driver robust against concurrency - i2c: uniphier-f: fix occasional timeout error - i2c: uniphier-f: fix race condition when IRQ is cleared - um: Make line/tty semantics use true write IRQ - vfs: avoid problematic remapping requests into partial EOF block - ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12 - [ppc64*,powerpc] xmon: Relax frame size for clang - [ppc64*,powerpc] selftests/ptrace: Fix out-of-tree build - [ppc64*,powerpc] selftests/signal: Fix out-of-tree build - [ppc64*,powerpc] selftests/switch_endian: Fix out-of-tree build - [ppc64*,powerpc] selftests/cache_shape: Fix out-of-tree build - block: call rq_qos_exit() after queue is frozen - mm/gup_benchmark.c: prevent integer overflow in ioctl - linux/bitmap.h: handle constant zero-size bitmaps correctly - linux/bitmap.h: fix type of nbits in bitmap_shift_right() - lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf - hfsplus: fix BUG on bnode parent update - hfs: fix BUG on bnode parent update - hfsplus: prevent btree data loss on ENOSPC - hfs: prevent btree data loss on ENOSPC - hfsplus: fix return value of hfsplus_get_block() - hfs: fix return value of hfs_get_block() - hfsplus: update timestamps on truncate() - hfs: update timestamp on truncate() - fs/hfs/extent.c: fix array out of bounds read of array extent - kernel/panic.c: do not append newline to the stack protector panic string - mm/memory_hotplug: make add_memory() take the device_hotplug_lock - mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock - [ppc64*,powerprc] powerpc/powernv: hold device_hotplug_lock when calling device_online() - igb: shorten maximum PHC timecounter update interval - fm10k: ensure completer aborts are marked as non-fatal after a resume - [arm64] net: hns3: bugfix for buffer not free problem during resetting - [arm64] net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem - [arm64] net: hns3: bugfix for is_valid_csq_clean_head() - [arm64] net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read - ntb_netdev: fix sleep time mismatch - [x86] ntb: intel: fix return value for ndev_vec_mask() - irq/matrix: Fix memory overallocation - nvme-pci: fix conflicting p2p resource adds - [arm64] makefile fix build of .i file in external module case - [x86] tools/power turbosat: fix AMD APIC-id output - mm: handle no memcg case in memcg_kmem_charge() properly - ocfs2: without quota support, avoid calling quota recovery - ocfs2: don't use iocb when EIOCBQUEUED returns - ocfs2: don't put and assigning null to bh allocated outside - ocfs2: fix clusters leak in ocfs2_defrag_extent() - net: do not abort bulk send on BQL status - sched/topology: Fix off by one bug - sched/fair: Don't increase sd->balance_interval on newidle balance - openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS - [armhf] dts: imx6sx-sdb: Fix enet phy regulator - [arm64] sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock - soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL - audit: print empty EXECVE args - sock_diag: fix autoloading of the raw_diag module - net: bpfilter: fix iptables failure if bpfilter_umh is disabled - nds32: Fix bug in bitfield.h - media: ov13858: Check for possible null pointer - btrfs: avoid link error with CONFIG_NO_AUTO_INLINE - wil6210: fix debugfs memory access alignment - wil6210: fix L2 RX status handling - wil6210: fix RGF_CAF_ICR address for Talyn-MB - wil6210: fix locking in wmi_call - ath10k: snoc: fix unbalanced clock error handling - wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()' - rtl8xxxu: Fix missing break in switch - brcmsmac: never log "tid x is not agg'able" by default - wireless: airo: potential buffer overflow in sprintf() - rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information - net: dsa: bcm_sf2: Turn on PHY to allow successful registration - scsi: mpt3sas: Fix Sync cache command failure during driver unload - scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices - scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11 - scsi: megaraid_sas: Fix msleep granularity - scsi: megaraid_sas: Fix goto labels in error handling - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point - scsi: lpfc: Correct loss of fc4 type on remote port address change - usb: typec: tcpm: charge current handling for sink during hard reset - dlm: fix invalid free - dlm: don't leak kernel pointer to userspace - vrf: mark skb for multicast or link-local as enslaved to VRF - clk: tegra20: Turn EMC clock gate into divider - ACPICA: Use %d for signed int print formatting instead of %u - net: bcmgenet: return correct value 'ret' from bcmgenet_power_down - of: unittest: allow base devicetree to have symbol metadata - of: unittest: initialize args before calling of_*parse_*() - tools: bpftool: pass an argument to silence open_obj_pinned() - cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces - pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues - pinctrl: bcm2835: Use define directive for BCM2835_PINCONF_PARAM_PULL - pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT - pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD - PCI: keystone: Use quirk to limit MRRS for K2G - nvme-pci: fix surprise removal - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch - i2c: uniphier-f: fix timeout error after reading 8 bytes - mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock - ipv6: Fix handling of LLA with VRF and sockets bound to VRF - cfg80211: call disconnect_wk when AP stops - mm/page_io.c: do not free shared swap slots - Bluetooth: Fix invalid-free in bcsp_close() - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe - ath9k_hw: fix uninitialized variable data - md/raid10: prevent access of uninitialized resync_pages offset - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() - net: phy: dp83867: fix speed 10 in sgmii mode - net: phy: dp83867: increase SGMII autoneg timer duration - ocfs2: remove ocfs2_is_o2cb_active() - [arm*] 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary - ARC: perf: Accommodate big-endian CPU - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - y2038: futex: Move compat implementation into futex.c - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - nfc: port100: handle command failure cleanly - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - virtio_ring: fix return code on DMA mapping fails - USBIP: add config dependency for SGL_ALLOC - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [ppc64*] support nospectre_v2 cmdline option - [ppc64*] book3s: Fix link stack flush on context switch (CVE-2019-18660) - [ppc64*, powerpc] PPC: Book3S HV: Flush link stack on guest exit to host kernel - PM / devfreq: Fix kernel oops on governor module load . [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) * [armhf, arm64] Backport devicetree for enabling support for the Raspberry PI 3 A+ . [ Salvatore Bonaccorso ] * ixgbe: Fix secpath usage for IPsec TX offload (Closes: #930443) * ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (Closes: #945023) * [x86] KVM: x86: introduce is_pae_paging (Regression in 4.19.77) * [rt] Refresh 0011-sched-fair-Robustify-CFS-bandwidth-timer-locking.patch (context changes in 4.19.84) . [ Bastian Blank ] * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341) . [ Noah Meyerhans ] * drivers/net/ethernet/amazon: Backport driver fixes from Linux 5.4 (Closes: #941291) * Bump ABI to 7 . [ Ben Hutchings ] * debian/bin/genpatch-rt: Fix series generation from git * [rt] Update to 4.19.82-rt30: - Drop changes in "fs/dcache: disable preemption on i_dir_seq's write side" that conflict with "Fix the locking in dcache_readdir() and friends" - Rewrite "fs/aio: simple simple work" using kthread_work - Rewrite "thermal: Defer thermal wakups to threads" using kthread_work - Rewrite "block: blk-mq: move blk_queue_usage_counter_release() into process context" using kthread_work - workqueue: rework . [ Benjamin Poirier ] * tools/perf: Add python3 support to scripts (Closes: #944641) . [ Aurelien Jarno ] * [rt] Refresh 0025-NFSv4-replace-seqcount_t-with-a-seqlock_t.patch (context changes in 4.19.86) * [rt] Refresh 0202-net-Qdisc-use-a-seqlock-instead-seqcount.patch (context changes in 4.19.86) * [rt] Refresh 0057-printk-Add-a-printk-kill-switch.patch (context changes in 4.19.87) * [rt] Refresh 0207-printk-Make-rt-aware.patch (context changes in 4.19.87) linux-signed-amd64 (4.19.67+2+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u2 . * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - KVM: x86: use Intel speculation bugs and features as derived in generic x86 code - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: Convert kvm_lock to a mutex - kvm: x86: Do not release the page inside mmu_set_spte() - KVM: x86: make FNAME(fetch) and __direct_map more similar - KVM: x86: remove now unneeded hugepage gfn adjustment - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON - KVM: x86: add tracepoints around __direct_map and FNAME(fetch) - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA linux-signed-amd64 (4.19.67+2+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-arm64 (4.19.98+1) buster; urgency=medium . * Sign kernel from linux 4.19.98-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.88 - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate - ASoC: compress: fix unsigned integer overflow check - reset: Fix memory leak in reset_control_array_put() - [armhf] clk: samsung: exynos5433: Fix error paths - [armel/marvell,armhf] ASoC: kirkwood: fix external clock probe defer - [armel/marvell,armhf] ASoC: kirkwood: fix device remove ordering - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic - [armhf] dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts - reset: fix reset_control_ops kerneldoc comment - [armhf,arm64] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend - [ppc64el] bpf: Fix tail call implementation - idr: Fix integer overflow in idr_for_each_entry - idr: Fix idr_alloc_u32 on 32-bit systems - [x86] resctrl: Prevent NULL pointer dereference when reading mondata - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay timeout - bridge: ebtables: don't crash when using dnat target in output chains - can: peak_usb: report bus recovery as well - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error - [armhf] can: flexcan: increase error counters if skb enqueueing via can_rx_offload_queue_sorted() fails - [arm64] watchdog: meson: Fix the wrong value of left time - ceph: return -EINVAL if given fsc mount option on kernel w/o support - net/fq_impl: Switch to kvmalloc() for memory allocation - mac80211: fix station inactive_time shortly after boot - block: drbd: remove a stray unlock in __drbd_send_protocol() - scsi: target/tcmu: Fix queue_cmd_ring() declaration - scsi: lpfc: Fix kernel Oops due to null pring pointers - scsi: lpfc: Fix dif and first burst use in write commands - tracing: Lock event_mutex before synth_event_mutex - [armhf] dts: imx*: Fix memory node duplication - [armhf] dts: Fix hsi gdd range for omap4 - [arm64] mm: Prevent mismatched 52-bit VA support - [arm64] smp: Handle errors reported by the firmware - [armhf] bus: ti-sysc: Check for no-reset and no-idle flags at the child level - [arm64] RDMA/hns: Fix the bug while use multi-hop of pbl - [x86] RDMA/vmw_pvrdma: Use atomic memory allocation in create AH - [armhf] PM / AVS: SmartReflex: NULL check before some freeing functions is not needed - xfs: zero length symlinks are not valid - ACPI / LPSS: Ignore acpi_device_fix_up_power() return value - scsi: lpfc: Enable Management features for IF_TYPE=6 - scsi: qla2xxx: Fix NPIV handling for FC-NVMe - scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port - nvme: provide fallback for discard alloc failure - [s390x] zcrypt: make sysfs reset attribute trigger queue reset - crypto: user - support incremental algorithm dumps - mwifiex: fix potential NULL dereference and use after free - mwifiex: debugfs: correct histogram spacing, formatting - brcmfmac: set F2 watermark to 256 for 4373 - brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 - rtl818x: fix potential use after free - bcache: do not check if debug dentry is ERR or NULL explicitly on remove - bcache: do not mark writeback_running too early - xfs: require both realtime inodes to mount - nvme: fix kernel paging oops - ubifs: Fix default compression selection in ubifs - ubi: Put MTD device after it is not used - ubi: Do not drop UBI device reference before using - iwlwifi: move iwl_nvm_check_version() into dvm - iwlwifi: mvm: force TCM re-evaluation on TCM resume - iwlwifi: pcie: fix erroneous print - iwlwifi: pcie: set cmd_len in the correct place - [armhf,arm64] gpio: pca953x: Fix AI overflow on PCAL6524 - gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB - [x86] kvm: vmx: Set IA32_TSC_AUX for legacy mode guests - [x86] Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" - [x86] Revert "KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode()" - VSOCK: bind to random port for VMADDR_PORT_ANY - [amd64] mmc: meson-gx: make sure the descriptor is stopped on errors - [armhf] mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET - [armhf] usb: ehci-omap: Fix deferred probe for phy handling - btrfs: Check for missing device before bio submission in btrfs_map_bio - btrfs: fix ncopies raid_attr for RAID56 - btrfs: dev-replace: set result code of cancel by status of scrub - Btrfs: allow clear_extent_dirty() to receive a cached extent state record - btrfs: only track ref_heads in delayed_ref_updates - [x86] HID: intel-ish-hid: fixes incorrect error handling - serial: 8250: Rate limit serial port rx interrupts during input overruns - [x86] kprobes/xen: blacklist non-attachable xen interrupt functions - xen/pciback: Check dev_data before using it - kprobes: Blacklist symbols in arch-defined prohibited area - [amd64] kprobes: Show x86-64 specific blacklisted symbols correctly - [armhf] memory: omap-gpmc: Get the header of the enum - net/mlx5: Continue driver initialization despite debugfs failure - netfilter: nf_nat_sip: fix RTP/RTCP source port translations - exofs_mount(): fix leaks on failure exits - bnxt_en: Return linux standard errors in bnxt_ethtool.c - bnxt_en: Save ring statistics before reset. - bnxt_en: query force speeds before disabling autoneg mode. - [s390x] KVM: unregister debug feature on failing arch init - dm flakey: Properly corrupt multi-page bios. - gfs2: take jdata unstuff into account in do_grow - dm raid: fix false -EBUSY when handling check/repair message - xfs: Align compat attrlist_by_handle with native implementation. - xfs: Fix bulkstat compat ioctls on x32 userspace. - IB/qib: Fix an error code in qib_sdma_verbs_send() - vxlan: Fix error path in __vxlan_dev_create() - [ppc64el] xmon: fix dump_segments() - drivers/regulator: fix a missing check of return value - Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer - scsi: qla2xxx: deadlock by configfs_depend_item - scsi: csiostor: fix incorrect dma device in case of vport - brcmfmac: Fix access point mode - ath6kl: Only use match sets when firmware supports it - ath6kl: Fix off by one error in scan completion - [ppc64el] perf: Fix unit_sel/cache_sel checks - [ppc64el] prom: fix early DEBUG messages - [ppc64el] mm: Make NULL pointer deferences explicit on bad page faults. - [ppc64el] vfio/spapr_tce: Get rid of possible infinite loop - [ppc64el] powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status - drbd: ignore "all zero" peer volume sizes in handshake - drbd: reject attach of unsuitable uuids even if connected - drbd: do not block when adjusting "disk-options" while IO is frozen - drbd: fix print_st_err()'s prototype to match the definition - IB/rxe: Make counters thread safe - bpf/cpumap: make sure frame_size for build_skb is aligned if headroom isn't - [armhf] regulator: tps65910: fix a missing check of return value - [ppc64el] powerpc/pseries: Fix node leak in update_lmb_associativity_index() - net/netlink_compat: Fix a missing check of nla_parse_nested - net/net_namespace: Check the return value of register_pernet_subsys() - f2fs: fix block address for __check_sit_bitmap - f2fs: fix to dirty inode synchronously - [armhf] net: dsa: bcm_sf2: Propagate error value from mdio_write - atl1e: checking the status of atl1e_write_phy_reg - tipc: fix a missing check of genlmsg_put - net: marvell: fix a missing check of acpi_match_device - ocfs2: clear journal dirty flag after shutdown journal - vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n - mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() - mm/page_alloc.c: use a single function to free page - mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() - netfilter: nf_tables: fix a missing check of nla_put_failure - xprtrdma: Prevent leak of rpcrdma_rep objects - infiniband/qedr: Potential null ptr dereference of qp - lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk - lib/genalloc.c: use vzalloc_node() to allocate the bitmap - drivers/base/platform.c: kmemleak ignore a known leak - lib/genalloc.c: include vmalloc.h - mtd: Check add_mtd_device() ret code - tipc: fix memory leak in tipc_nl_compat_publ_dump - net/core/neighbour: tell kmemleak about hash tables - [armhf,arm64] ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs - PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() - net/core/neighbour: fix kmemleak minimal reference count for hash tables - serial: 8250: Fix serial8250 initialization crash - [armhf] gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change - sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe - ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel - decnet: fix DN_IFREQ_SIZE - net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() - net/smc: don't wait for send buffer space when data was already sent - mm/hotplug: invalid PFNs from pfn_to_online_page() - xfs: end sync buffer I/O properly on shutdown error - net/smc: fix sender_free computation - blktrace: Show requests without sector - net/smc: fix byte_order for rx_curs_confirmed - tipc: fix skb may be leaky in tipc_link_input - sfc: initialise found bitmap in efx_ef10_mtd_probe - geneve: change NET_UDP_TUNNEL dependency to select - net: fix possible overflow in __sk_mem_raise_allocated() - net: ip_gre: do not report erspan_ver for gre or gretap - net: ip6_gre: do not report erspan_ver for ip6gre or ip6gretap - sctp: don't compare hb_timer expire date before starting it - bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() - mmc: core: align max segment size with logical block size - net: dev: Use unsigned integer as an argument to left-shift - kvm: properly check debugfs dentry before using it - bpf: drop refcount if bpf_map_new_fd() fails in map_create() - [arm64] net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED - [arm64] net: hns3: fix PFC not setting problem for DCB module - [arm64] net: hns3: fix an issue for hclgevf_ae_get_hdev - [arm64] net: hns3: fix an issue for hns3_update_new_int_gl - [x86] iommu/amd: Fix NULL dereference bug in match_hid_uid - apparmor: delete the dentry in aafs_remove() to avoid a leak - scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing - ACPI / APEI: Switch estatus pool to use vmalloc memory - [arm64] scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned - scsi: libsas: Check SMP PHY control function result - [arm64] RDMA/hns: Fix the bug with updating rq head pointer when flush cqe - [arm64] RDMA/hns: Bugfix for the scene without receiver queue - [arm64] RDMA/hns: Fix the state of rereg mr - [arm64] RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp - ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board - [ppc64el] pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (CVE-2019-12614) - xdp: fix cpumap redirect SKB creation bug - mtd: Remove a debug trace in mtdpart.c - [s390x] mm, gup: add missing refcount overflow checks on s390 - [armhf,arm64] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - thunderbolt: Power cycle the router if NVM authentication fails - xfrm: Fix memleak on xfrm state destroy - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE - [arm64] net: macb: fix error format in dev_err() - pwm: Clear chip_data in pwm_put() - macvlan: schedule bc_work even if error - net: psample: fix skb_over_panic - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - tipc: fix link name length check - sctp: cache netns in sctp_ep_common - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - [arm64] net: macb: add missed tasklet_kill - ext4: add more paranoia checking in ext4_expand_extra_isize handling (CVE-2019-19767) - [arm64] net: macb: Fix SUBNS increment and increase resolution - [arm64] net: macb driver, check for SKBTX_HW_TSTAMP - mtd: spi-nor: cast to u64 to avoid uint overflows - tcp: exit if nothing to retransmit on RTO timeout - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform: hp-wmi: Fix ACPI errors caused by passing 0 as input size https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89 - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071) - [arm64] tegra: Fix 'active-low' warning for Jetson TX1 regulator - usb: gadget: u_serial: add missing port entry locking - [arm64] tty: serial: msm_serial: Fix flow control - [armhf,arm64] serial: pl011: Fix DMA ->flush_buffer() - serial: serial_core: Perform NULL checks for break_ctl ops - autofs: fix a leak in autofs_expire_indirect() - [arm64] RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN - iwlwifi: pcie: don't consider IV len in A-MSDU - exportfs_decode_fh(): negative pinned may become positive without the parent locked - audit_get_nd(): don't unlock parent too early - xfrm: release device reference for invalid state - sched/core: Avoid spurious lock dependencies - perf/core: Consistently fail fork on allocation failures - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() - [armhf,arm64] drm/sun4i: tcon: Set min division of TCON0_DCLK to 1. - rsxx: add missed destroy_workqueue calls in remove - i2c: core: fix use after free in of_i2c_notify - serial: core: Allow processing sysrq at port unlock time - cxgb4vf: fix memleak in mac_hlist initialization - iwlwifi: mvm: synchronize TID queue removal - iwlwifi: trans: Clear persistence bit when starting the FW - iwlwifi: mvm: Send non offchannel traffic via AP sta - [armhf] 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+ - audit: Embed key into chunk - netfilter: nf_tables: don't use position attribute on rule replacement - net/mlx5: Release resource on error flow - [arm64] clk: sunxi-ng: a64: Fix gate bit of DSI DPHY - ice: Fix NVM mask defines - dlm: fix possible call to kfree() for non-initialized pointer - [armhf] dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1 - [armhf,arm64] rtc: max77686: Fix the returned value in case of error in 'max77686_rtc_read_time()' - i40e: don't restart nway if autoneg not supported - virtchnl: Fix off by one error - [armhf] clk: rockchip: fix rk3188 sclk_smc gate data - [armhf] clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering - [armhf] dts: rockchip: Fix rk3288-rock2 vcc_flash name - dlm: fix missing idr_destroy for recover_idr - [armhf,arm64] net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2 - [s390x] scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the CDB - [s390x] scsi: zfcp: drop default switch case which might paper over missing case - [armhf] bus: ti-sysc: Fix getting optional clocks in clock_roles - [armhf] dts: imx6: RDU2: fix eGalax touchscreen node - crypto: ecc - check for invalid values in the key verification test - crypto: bcm - fix normal/non key hash algorithm failure - [arm64] dts: zynqmp: Fix node names which contain "_" - [arm64] pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues - [arm*] firmware: raspberrypi: Fix firmware calls with large buffers - mm/vmstat.c: fix NUMA statistics updates - [arm64] clk: rockchip: fix I2S1 clock gate register for rk3328 - [arm64] clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 - sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit - regulator: Fix return value of _set_load() stub - USB: serial: f81534: fix reading old/new IC config - xfs: extent shifting doesn't fully invalidate page cache - net-next/hinic:fix a bug in set mac address - net-next/hinic: fix a bug in rx data flow - ice: Fix return value from NAPI poll - ice: Fix possible NULL pointer de-reference - iomap: FUA is wrong for DIO O_DSYNC writes into unwritten extents - iomap: sub-block dio needs to zeroout beyond EOF - iomap: dio data corruption and spurious errors when pipes fill - iomap: readpages doesn't zero page tail beyond EOF - iw_cxgb4: only reconnect with MPAv1 if the peer aborts - [mips*/octeon] octeon-platform: fix typing - net/smc: use after free fix in smc_wr_tx_put_slot() - [armhf] dts: exynos: Use Samsung SoC specific compatible for DWC2 module - media: pulse8-cec: return 0 when invalidating the logical address - media: cec: report Vendor ID after initialization - iwlwifi: fix cfg structs for 22000 with different RF modules - net/ipv6: re-do dad when interface has IFF_NOARP flag change - [x86] dmaengine: dw-dmac: implement dma protection control setting - [armhf,arm64] usb: dwc3: debugfs: Properly print/set link state for HS - [armhf,arm64] usb: dwc3: don't log probe deferrals; but do log other error codes - ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() - f2fs: fix to account preflush command for noflush_merge mode - f2fs: fix count of seg_freed to make sec_freed correct - f2fs: change segment to section in f2fs_ioc_gc_range - [armhf] dts: rockchip: Fix the PMU interrupt number for rv1108 - [armhf] dts: rockchip: Assign the proper GPIO clocks for rv1108 - f2fs: fix to allow node segment for GC by ioctl path - nvme: Free ctrl device name on init failure - dma-mapping: fix return type of dma_set_max_seg_size() - [armhf] serial: imx: fix error handling in console_setup - [armhf] i2c: imx: don't print error message on probe defer - [arm64] clk: meson: Fix GXL HDMI PLL fractional bits width - [armhf,arm64] gpu: host1x: Fix syncpoint ID field size on Tegra186 - lockd: fix decoding of TEST results - sctp: increase sk_wmem_alloc when head->truesize is increased - [x86] iommu/amd: Fix line-break in error log reporting - [armhf] dts: sun8i: a23/a33: Fix OPP DTC warnings - [armhf] dts: sun8i: v3s: Change pinctrl nodes to avoid warning - nfsd: fix a warning in __cld_pipe_upcall() - bpf: btf: implement btf_name_valid_identifier() - bpf: btf: check name validity for various types - [armhf] OMAP1/2: fix SoC name printing - [arm64] dts: meson-gxl-libretech-cc: fix GPIO lines names - [arm64] dts: meson-gxbb-nanopi-k2: fix GPIO lines names - [arm64] dts: meson-gxbb-odroidc2: fix GPIO lines names - [arm64] dts: meson-gxl-khadas-vim: fix GPIO lines names - net/x25: fix called/calling length calculation in x25_parse_address_block - net/x25: fix null_x25_address handling - tcp: make tcp_space() aware of socket backlog - tcp: fix off-by-one bug on aborting window-probing socket - tcp: fix SNMP under-estimation on failed retransmission - tcp: fix SNMP TCP timeout under-estimation - kbuild: fix single target build for external module - mtd: fix mtd_oobavail() incoherent returned value - [arm64] clk: meson: meson8b: fix the offset of vid_pll_dco's N value - [armhf,arm64] clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent - [arm64] clk: qcom: Fix MSM8998 resets - dlm: fix invalid cluster name warning - net/mlx4_core: Fix return codes of unsupported operations - pstore/ram: Avoid NULL deref in ftrace merging failure path - [mips*/octeon] cvmx_pko_mem_debug8: use oldest forward compatible definition - nfsd: Return EPERM, not EACCES, in some SETATTR cases - media: uvcvideo: Abstract streaming object lifetime - [armhf] dts: sun8i: h3: Fix the system-control register range - tty: Don't block on IO when ldisc change is pending - media: stkwebcam: Bugfix for wrong return values - sctp: frag_point sanity check - IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state - IB/hfi1: Close VNIC sdma_progress sleep window - mlx4: Use snprintf instead of complicated strcpy - [armhf] dts: sunxi: Fix PMU compatible strings - [armhf] dts: am335x-pdu001: Fix polarity of card detection input - net: aquantia: fix RSS table and key sizes - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - fuse: verify nlink - fuse: verify attributes - [x86] ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - [x86] ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - ALSA: pcm: oss: Avoid potential buffer overflows - [x86] ALSA: hda - Add mute led support for HP ProBook 645 G4 - [x86] Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus - [x86] Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers - [x86] Input: goodix - add upside-down quirk for Teclast X89 tablet - Input: Fix memory leak in psxpad_spi_probe - [i386] mm: Sync only to VMALLOC_END in vmalloc_sync_all() - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect - xfrm interface: fix memory leak on creation - xfrm interface: avoid corruption on changelink - xfrm interface: fix list corruption for x-netns - xfrm interface: fix management of phydev - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks - CIFS: Fix SMB2 oplock break processing - tty: vt: keyboard: reject invalid keycodes - can: slcan: Fix use-after-free Read in slcan_open - kernfs: fix ino wrap-around detection - jbd2: Fix possible overflow in jbd2_log_space_left() - [arm64] drm/msm: fix memleak on release - [i386] drm/i810: Prevent underflow in ioctl - [armhf,arm64] KVM: vgic: Don't rely on the wrong pending table - [x86] KVM: do not modify masked bits of shared MSRs - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES - [x86] KVM: Grab KVM's srcu lock when setting nested state - crypto: af_alg - cast ki_complete ternary op to int - [x86] crypto: ccp - fix uninitialized list head - crypto: ecdh - fix big endian bug in ECC library - crypto: user - fix memory leak in crypto_report (CVE-2019-19062) - mwifiex: update set_mac_address logic - can: ucan: fix non-atomic allocation in completion handler - RDMA/qib: Validate ->show()/store() callbacks before calling them - iomap: Fix pipe page leakage during splicing - thermal: Fix deadlock in thermal thermal_zone_device_check - vcs: prevent write access to vcsu devices (CVE-2019-19252) - binder: Fix race between mmap() and binder_alloc_print_pages() - binder: Handle start==NULL in binder_update_page_range() - ALSA: hda - Fix pending unsol events at shutdown - perf script: Fix invalid LBR/binary mismatch error - splice: don't read more than available pipe space - iomap: partially revert 4721a601099 (simulated directio short read on EFAULT) - xfs: add missing error check in xfs_prepare_shift() - ASoC: rsnd: fixup MIX kctrl registration - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) - net: qrtr: fix memort leak in qrtr_tun_write_iter (CVE-2019-19079) - appletalk: Fix potential NULL pointer dereference in unregister_snap_client (CVE-2019-19227) - appletalk: Set error code if register_snap_client failed https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.90 - usb: gadget: configfs: Fix missing spin_lock_init() - [x86] usb: gadget: pch_udc: fix use after free - scsi: qla2xxx: Fix driver unload hang - [arm64] media: venus: remove invalid compat_ioctl32 handler - USB: uas: honor flag to avoid CAPACITY16 - USB: uas: heed CAPACITY_HEURISTICS - usb: Allow USB device to be warm reset in suspended state - staging: rtl8188eu: fix interface sanity check - staging: rtl8712: fix interface sanity check - staging: gigaset: fix general protection fault on probe - staging: gigaset: fix illegal free on probe errors - staging: gigaset: add endpoint-type sanity check - usb: xhci: only set D3hot for pci device - xhci: Fix memory leak in xhci_add_in_port() - xhci: Increase STS_HALT timeout in xhci_suspend() - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. - [armhf] dts: pandora-common: define wl1251 as child node of mmc3 - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit - USB: atm: ueagle-atm: add missing endpoint check - USB: idmouse: fix interface sanity checks - USB: serial: io_edgeport: fix epic endpoint lookup - usb: roles: fix a potential use after free - USB: adutux: fix interface sanity check - usb: core: urb: fix URB structure initialization function - usb: mon: Fix a deadlock in usbmon between mmap and read - tpm: add check after commands attribs tab allocation - virtio-balloon: fix managed page counts when migrating pages between zones - [armhf,arm64] usb: dwc3: gadget: Fix logical condition - [armhf,arm64] usb: dwc3: ep0: Clear started flag on completion - btrfs: check page->mapping when loading free space cache - btrfs: use refcount_inc_not_zero in kill_all_nodes - Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc - Btrfs: fix negative subv_writers counter and data space leak after buffered write - btrfs: Avoid getting stuck during cyclic writebacks - btrfs: Remove btrfs_bio::flags member - Btrfs: send, skip backreference walking for extents with many references - btrfs: record all roots for rename exchange on a subvol - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer - rtlwifi: rtl8192de: Fix missing enable interrupt flag - ovl: fix corner case of non-unique st_dev;st_ino - ovl: relax WARN_ON() on rename to self - [armhf] hwrng: omap - Fix RNG wait loop timeout - dm writecache: handle REQ_FUA - dm zoned: reduce overhead of backing device checks - workqueue: Fix spurious sanity check failures in destroy_workqueue() - workqueue: Fix pwq ref leak in rescuer_thread() - ASoC: rt5645: Fixed buddy jack support. - ASoC: rt5645: Fixed typo for buddy jack support. - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report - md: improve handling of bio with REQ_PREFLUSH in md_flush_request() - blk-mq: avoid sysfs buffer overflow with too many CPU cores - cgroup: pids: use atomic64_t for pids->limit - ar5523: check NULL before memcpy() in ar5523_cmd() - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported - media: cec.h: CEC_OP_REC_FLAG_ values were swapped - cpuidle: Do not unset the driver if it is there already - erofs: zero out when listxattr is called with no xattr - [x86] intel_th: Fix a double put_device() in error path - [x86] intel_th: pci: Add Ice Lake CPU support - [x86] intel_th: pci: Add Tiger Lake CPU support - PM / devfreq: Lock devfreq in trans_stat_show - [ppc64el] cpufreq: powernv: fix stack bloat and hard limit on number of CPUs - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge - ACPI: OSL: only free map once in osl.c - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() - ACPI: PM: Avoid attaching ACPI PM domain to certain devices - [arm64] pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() - [armhf] pinctrl: samsung: Add of_node_put() before return in error path - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card - [armhf] dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity - ppdev: fix PPGETTIME/PPSETTIME ioctls - [ppc64el] Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB - [ppc64el] xive: Prevent page fault issues in the machine crash handler - [ppc64el] Allow flush_icache_range to work across ranges >4GB - [ppc64el] xive: Skip ioremap() of ESB pages for LSI interrupts - video/hdmi: Fix AVI bar unpack - quota: Check that quota is not dirty before release - ext2: check err when partial != NULL - quota: fix livelock in dquot_writeback_dquots - ext4: Fix credit estimate for final inode freeing - reiserfs: fix extended attributes on the root directory - block: fix single range discard merge - [s390x] scsi: zfcp: trace channel log even for FCP command responses - scsi: qla2xxx: Fix DMA unmap leak - scsi: qla2xxx: Fix hang in fcport delete path - scsi: qla2xxx: Fix session lookup in qlt_abort_work() - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value - scsi: qla2xxx: Fix message indicating vectors used by driver - scsi: qla2xxx: Fix SRB leak on switch command timeout - xhci: make sure interrupts are restored to correct state - usb: typec: fix use after free in typec_register_port() - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 - scsi: lpfc: Cap NPIV vports to 256 - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE - scsi: lpfc: Correct topology type reporting on G7 adapters - sch_cake: Correctly update parent qlen when splitting GSO packets - net/smc: do not wait under send_lock - [arm64] net: hns3: clear pci private data when unload hns3 driver - [arm64] net: hns3: change hnae3_register_ae_dev() to int - [arm64] net: hns3: Check variable is valid before assigning it to another - [arm64] scsi: hisi_sas: send primitive NOTIFY to SSP situation only - [arm64] scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G - [x86] MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models - [x86] MCE/AMD: Carve out the MC4_MISC thresholding quirk - ath10k: fix fw crash by moving chip reset after napi disabled - [ppc64el] Fix vDSO clock_getres() - ext4: work around deleting a file with i_nlink == 0 safely (CVE-2019-19447) - mm/shmem.c: cast the type of unmap_start to u64 - rtc: disable uie before setting time and enable after - splice: only read in as much information as there is pipe buffer space - ext4: fix a bug in ext4_wait_for_tail_page_commit - [armhf,arm64] mfd: rk808: Fix RK818 ID template - mm, thp, proc: report THP eligibility for each vma - [s390x] smp,vdso: fix ASCE handling - blk-mq: make sure that line break can be printed - workqueue: Fix missing kfree(rescuer) in destroy_workqueue() - perf callchain: Fix segfault in thread__resolve_callchain_sample() - gre: refetch erspan header from skb->data after pskb_may_pull() - sunrpc: fix crash when cache_head become valid before update - net/mlx5e: Fix SFF 8472 eeprom length - leds: trigger: netdev: fix handling on interface rename - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - of: overlay: add_changeset_property() memory leak - kernel/module.c: wakeup processes in module_wq on module unload - cifs: Fix potential softlockups while refreshing DFS cache - [x86] gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist - raid5: need to set STRIPE_HANDLE for batch head - scsi: qla2xxx: Change discovery state before PLOGI - [x86] iio: imu: mpu6050: add missing available scan masks - idr: Fix idr_get_next_ul race with idr_remove - of: unittest: fix memory leak in attach_node_and_children https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91 - inet: protect against too small mtu values. - mqprio: Fix out-of-bounds access in mqprio_dump - net: bridge: deny dev_set_mac_address() when unregistering - net: dsa: fix flow dissection on Tx path - net: ethernet: ti: cpsw: fix extra rx interrupt - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues - [arm64] net: thunderx: start phy before starting autonegotiation - openvswitch: support asymmetric conntrack - tcp: md5: fix potential overestimation of TCP option space - tipc: fix ordering of tipc module init and exit routine - net/mlx5e: Query global pause state before setting prio2buffer - tcp: fix rejected syncookies due to stale timestamps - tcp: tighten acceptance of ACKs not matching a child socket - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() - [arm64] Revert "arm64: preempt: Fix big-endian when checking preempt count in assembly" - mmc: block: Make card_busy_detect() a bit more generic - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response - PCI/PM: Always return devices to D0 when thawing - PCI: pciehp: Avoid returning prematurely from sysfs requests - [x86] PCI: Fix Intel ACS quirk UPDCR register address - PCI/MSI: Fix incorrect MSI-X masking on resume - [arm64] PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 - [arm64] rpmsg: glink: Set tail pointer to 0 at end of FIFO - [arm64] rpmsg: glink: Fix reuse intents memory leak issue - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case - [arm64] rpmsg: glink: Put an extra reference during cleanup - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling - [arm64] rpmsg: glink: Don't send pending rx_done during remove - [arm64] rpmsg: glink: Free pending deferred work on remove - cifs: smbd: Return -EAGAIN when transport is reconnecting - cifs: smbd: Add messages on RDMA session destroy and reconnection - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE - cifs: Don't display RDMA transport on reconnect - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect - CIFS: Close open handle after interrupted close - [armhf] tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() - vfio/pci: call irq_bypass_unregister_producer() before freeing irq - dma-buf: Fix memory leak in sync_file_merge() - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching - dm mpath: remove harmful bio-based optimization - dm btree: increase rebalance threshold in __rebalance2() - scsi: iscsi: Fix a potential deadlock in the timeout handler - scsi: qla2xxx: Change discovery state before PLOGI - drm/radeon: fix r1xx/r2xx register checker for POT textures - xhci: fix USB3 device initiated resume race with roothub autosuspend https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.92 - af_packet: set defaule value for tmo - [amd64] fjes: fix missed check in fjes_acpi_add - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl - net: qlogic: Fix error paths in ql_alloc_large_buffers() - net: usb: lan78xx: Fix suspend/resume PHY register access error - qede: Disable hardware gro when xdp prog is installed - qede: Fix multicast mac configuration - sctp: fully initialize v4 addr in some functions - btrfs: don't double lock the subvol_sem for rename exchange - btrfs: do not call synchronize_srcu() in inode_tree_del - Btrfs: fix missing data checksums after replaying a log tree - btrfs: send: remove WARN_ON for readonly mount - btrfs: abort transaction after failed inode updates in create_subvol - btrfs: skip log replay on orphaned roots - btrfs: do not leak reloc root if we fail to read the fs root - btrfs: handle ENOENT in btrfs_uuid_tree_iterate - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues - ALSA: pcm: Avoid possible info leaks from PCM stream buffers - ALSA: hda/ca0132 - Keep power on during processing DSP response - ALSA: hda/ca0132 - Avoid endless loop - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers - drm/amdgpu: grab the id mgr lock while accessing passid_mapping - spi: Add call to spi_slave_abort() function when spidev driver is released - [x86] staging: rtl8192u: fix multiple memory leaks on error path - staging: rtl8188eu: fix possible null dereference - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063) - libertas: fix a potential NULL pointer dereference - ath10k: fix backtrace on coredump - IB/iser: bound protection_sg size by data_sg size - [arm64] media: venus: core: Fix msm8996 frequency table - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq - pinctrl: devicetree: Avoid taking direct reference to device name string - [amd64] drm/amdkfd: fix a potential NULL pointer dereference - [arm64] media: venus: Fix occasionally failures to suspend - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller - block: Fix writeback throttling W=1 compiler warnings - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (CVE-2019-19057) - drm/drm_vblank: Change EINVAL by the correct errno - media: cx88: Fix some error handling path in 'cx8800_initdev()' - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0 - [x86] mm: Use the correct function type for native_set_fixmap() - ath10k: Correct error handling of dma_map_single() - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode - perf report: Add warning when libunwind not compiled in - usb: usbfs: Suppress problematic bind and unbind uevents. - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req - Bluetooth: Workaround directed advertising bug in Broadcom controllers - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL - [x86] mce: Lower throttling MCE messages' priority to warning - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot - ipmi: Don't allow device module unload when in use - [x86] ioapic: Prevent inconsistent state when moving an interrupt - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill() - i40e: initialize ITRN registers with correct values - net: phy: dp83867: enable robust auto-mdix - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210 - ACPI: button: Add DMI quirk for Medion Akoya E2215T - RDMA/qedr: Fix memory leak in user qp and mr - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle - [s390x] time: ensure get_clock_monotonic() returns monotonic values - [s390x] mm: add mm_pxd_folded() checks to pxd_free() - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout - libata: Ensure ata_port probe has completed before detach - loop: fix no-unmap write-zeroes request behavior - Bluetooth: Fix advertising duplicated flags - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() - ixgbe: protect TX timestamping from API misuse - media: rcar_drif: fix a memory disclosure (CVE-2019-18786) - media: v4l2-core: fix touch support in v4l_g_fmt - rfkill: allocate static minor - bnx2x: Fix PF-VF communication over multi-cos queues. - ALSA: timer: Limit max amount of slave instances - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() - perf probe: Fix to find range-only function instance - perf probe: Fix to list probe event with correct line number - perf jevents: Fix resource leak in process_mapfile() and main() - perf probe: Walk function lines in lexical blocks - perf probe: Fix to probe an inline function which has no entry pc - perf probe: Fix to show ranges of variables in functions without entry_pc - perf probe: Fix to show inlined function callsite without entry_pc - perf probe: Fix to probe a function which has no entry pc - perf tools: Splice events onto evlist even on error - perf parse: If pmu configuration fails free terms - perf probe: Skip overlapped location on searching variables - perf probe: Return a better scope DIE if there is no best scope - perf probe: Fix to show calling lines of inlined functions - perf probe: Skip end-of-sequence and non statement lines - perf probe: Filter out instances except for inlined subroutine and subprogram - ath10k: fix get invalid tx rate for Mesh metric - media: pvrusb2: Fix oops on tear-down when radio support is not present - ice: delay less - [amd64] spi: pxa2xx: Add missed security checks - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile - iio: dac: ad5446: Add support for new AD5600 DAC - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint - [s390x] disassembler: don't hide instruction addresses - nvme: Discard workaround for non-conformant devices - parport: load lowlevel driver if ports not found - bcache: fix static checker warning in bcache_device_free() - cpufreq: Register drivers only after CPU devices have been registered - tracing: use kvcalloc for tgid_map array allocation - tracing/kprobe: Check whether the non-suffixed symbol is notrace - bcache: fix deadlock in bcache_allocator - iwlwifi: mvm: fix unaligned read of rx_pkt_status - [arm64] spi: tegra20-slink: add missed clk_unprepare - tun: fix data-race in gro_normal_list() - crypto: virtio - deal with unsupported input sizes - btrfs: don't prematurely free work in end_workqueue_fn() - btrfs: don't prematurely free work in run_ordered_work() - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1 - [x86] insn: Add some Intel instructions to the opcode map - brcmfmac: remove monitor interface when detaching - iwlwifi: check kasprintf() return value - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED - net: phy: initialise phydev speed and duplex sanely - btrfs: don't prematurely free work in reada_start_machine_worker() - btrfs: don't prematurely free work in scrub_missing_raid56_worker() - Revert "mmc: sdhci: Fix incorrect switch to HS mode" - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (CVE-2019-19947) - usb: xhci: Fix build warning seen with CONFIG_PM=n - [s390x] ftrace: fix endless recursion in function_graph tracer - btrfs: return error pointer from alloc_test_extent_buffer - usbip: Fix receive error in vhci-hcd when using scatter-gather - usbip: Fix error path of vhci_recv_ret_submit() - cpufreq: Avoid leaving stale IRQ work items during CPU offline - [x86] intel_th: pci: Add Comet Lake PCH-V support - [x86] intel_th: pci: Add Elkhart Lake SOC support - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037) - ext4: check for directory entries too close to block end - ext4: unlock on error in ext4_expand_extra_isize() - [arm64] KVM: Ensure 'params' is initialised when looking up sys register - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] - [powerpc*] irq: fix stack overflow verification - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register - mmc: sdhci: Update the tuning failed messages to pr_debug level - mmc: sdhci: Workaround broken command queuing on Intel GLK - mmc: sdhci: Add a quirk for broken command queuing - nbd: fix shutdown and recv work deadlock - perf probe: Fix to show function entry line as probe-able https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.93 - scsi: lpfc: Fix discovery failures when target device connectivity bounces - scsi: mpt3sas: Fix clear pending bit in ioctl status - scsi: lpfc: Fix locking on mailbox command completion - Input: atmel_mxt_ts - disable IRQ across suspend - f2fs: fix to update time in lazytime mode - [arm64,armhf] iommu: rockchip: Free domain on .domain_free - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory - scsi: target: compare full CHAP_A Algorithm strings - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices - scsi: csiostor: Don't enable IRQs too early - [arm64] scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec() - [ppc64el] pseries: Mark accumulate_stolen_time() as notrace - [ppc64el] pseries: Don't fail hash page table insert for bolted mapping - clocksource/drivers/timer-of: Use unique device name instead of timer - [ppc64el] security/book3s64: Report L1TF status in sysfs - [ppc64el] book3s64/hash: Add cond_resched to avoid soft lockup warning - ext4: update direct I/O read lock pattern for IOCB_NOWAIT - ext4: iomap that extends beyond EOF should be marked dirty - jbd2: Fix statistics for the number of logged blocks - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow - f2fs: fix to update dir's i_pino during cross_rename - [arm64] clk: qcom: Allow constant ratio freq tables for rcg - clk: clk-gpio: propagate rate change to parent - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences - [ppc64el] PCI: rpaphp: Fix up pointer to first drc-info entry - scsi: ufs: fix potential bug which ends in system hang - [ppc64el] PCI: rpaphp: Don't rely on firmware feature to imply drc-info support - [ppc64el] PCI: rpaphp: Annotate and correctly byte swap DRC properties - [ppc64el] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info - [ppc64el] powerpc/security: Fix wrong message when RFI Flush is disable - bcache: at least try to shrink 1 node in bch_mca_scan() - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening - libnvdimm/btt: fix variable 'rc' set but not used - HID: Improve Windows Precision Touchpad detection. - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device - watchdog: Fix the race between the release of watchdog_core_data and cdev - scsi: pm80xx: Fix for SATA device discovery - scsi: ufs: Fix error handing during hibern8 enter - scsi: scsi_debug: num_tgts must be >= 0 - scsi: iscsi: Don't send data to unbound connection - scsi: target: iscsi: Wait for all commands to finish before freeing a session - apparmor: fix unsigned len comparison with less than zero - scripts/kallsyms: fix definitely-lost memory leak - cdrom: respect device capabilities during opening action - perf script: Fix brstackinsn for AUXTRACE - perf regs: Make perf_reg_name() return "unknown" instead of NULL - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR - [s390x] cpum_sf: Check for SDBT and SDB consistency - ocfs2: fix passing zero to 'PTR_ERR' warning - kernel: sysctl: make drop_caches write-only - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK - [x86] mce: Fix possibly incorrect severity calculation on AMD - net, sysctl: Fix compiler warning when only cBPF is present - netfilter: nf_queue: enqueue skbs with NULL dst - ALSA: hda - Downgrade error message for single-cmd fallback - bonding: fix active-backup transition after link failure - perf strbuf: Remove redundant va_end() in strbuf_addv() - Make filldir[64]() verify the directory entry filename is valid (CVE-2019-10220) - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (CVE-2019-10220) - netfilter: ebtables: compat: reject all padding in matches/watchers - 6pack,mkiss: fix possible deadlock - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() - inetpeer: fix data-race in inet_putpeer / inet_putpeer - net: add a READ_ONCE() in skb_peek_tail() - net: icmp: fix data-race in cmp_global_allow() - hrtimer: Annotate lockless access to timer->state - net: ena: fix napi handler misbehavior when the napi budget is zero - net/mlxfw: Fix out-of-memory error in mfa2 flash burning - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs - ptp: fix the race between the release of ptp_clock and cdev - tcp: Fix highest_sack and highest_sack_seq - udp: fix integer overflow while computing available space in sk_rcvbuf - vhost/vsock: accept only packets with the right dst_cid - net: add bool confirm_neigh parameter for dst_ops.update_pmtu - ip6_gre: do not confirm neighbor when do pmtu update - gtp: do not confirm neighbor when do pmtu update - net/dst: add new function skb_dst_update_pmtu_no_confirm - tunnel: do not confirm neighbor when do pmtu update - vti: do not confirm neighbor when do pmtu update - sit: do not confirm neighbor when do pmtu update - net/dst: do not confirm neighbor for vxlan and geneve pmtu update - gtp: do not allow adding duplicate tid and ms_addr pdp context - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt - tcp/dccp: fix possible race __inet_lookup_established() - tcp: do not send empty skb from tcp_write_xmit() - gtp: fix wrong condition in gtp_genl_dump_pdp() - gtp: fix an use-after-free in ipv4_pdp_find() - gtp: avoid zero size hashtable - [arm64,armhf] pinctrl: baytrail: Really serialize all register accesses https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.94 - nvme_fc: add module to ops template to allow module references - nvme-fc: fix double-free scenarios on hw queues - drm/amdgpu: add check before enabling/disabling broadcast mode - drm/amdgpu: add cache flush workaround to gfx8 emit_fence - PM / devfreq: Fix devfreq_notifier_call returning errno - PM / devfreq: Set scaling_max_freq to max on OPP notifier error - PM / devfreq: Don't fail devfreq_dev_release if not in list - afs: Fix afs_find_server lookups for ipv4 peers - afs: Fix SELinux setting security label on /afs - RDMA/cma: add missed unregister_pernet_subsys in init failure - rxe: correctly calculate iCRC for unaligned payloads - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work - scsi: qla2xxx: Don't call qlt_async_event twice - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length - scsi: qla2xxx: Configure local loop for N2N target - scsi: qla2xxx: Send Notify ACK after N2N PLOGI - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI - scsi: iscsi: qla4xxx: fix double free in probe - scsi: libsas: stop discovering if oob mode is disconnected (CVE-2019-19965) - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit - usb: gadget: fix wrong endpoint desc - net: make socket read/write_iter() honor IOCB_NOWAIT - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP - md: raid1: check rdev before reference in raid1_sync_request func - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler - IB/mlx4: Follow mirror sequence of device add during device removal - IB/mlx5: Fix steering rule of drop and count - xen-blkback: prevent premature module unload - xen/balloon: fix ballooned page accounting without hotplug enabled - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen - xfs: fix mount failure crash on invalid iclog memory access - taskstats: fix data-race - drm: limit to INT_MAX in create_blob ioctl - netfilter: nft_tproxy: Fix port selector on Big Endian - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code - ALSA: usb-audio: fix set_format altsetting sanity check - ALSA: usb-audio: set the interface format after resume on Dell WD19 - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls - [mips*] Avoid VDSO ABI breakage due to global register variable - media: pulse8-cec: fix lost cec_transmit_attempt_done() call - media: cec: CEC 2.0-only bcast messages were ignored - media: cec: avoid decrementing transmit_queue_sz if it is 0 - media: cec: check 'transmit_in_progress', not 'transmitting' - mm/zsmalloc.c: fix the migrated zspage statistics. - memcg: account security cred as well to kmemcg - mm: move_pages: return valid node id in status if the page is already on the target node - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones - locks: print unsigned ino in /proc/locks - compat_ioctl: block: handle Persistent Reservations - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE - ata: libahci_platform: Export again ahci_platform_able_phys() - libata: Fix retrieving of active qcs - gpiolib: fix up emulated open drain outputs - tracing: Fix lock inversion in trace_event_enable_tgid_record() - tracing: Avoid memory leak in process_system_preds() - tracing: Have the histogram compare functions convert to u64 first - tracing: Fix endianness bug in histogram trigger - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer - ALSA: firewire-motu: Correct a typo in the clock proc string - exit: panic before exit_mm() on global init exit - [arm64] Revert support for execute-only user mappings - ftrace: Avoid potential division by zero in function profiler - [arm64] drm/msm: include linux/sched/task.h - PM / devfreq: Check NULL governor in available_governors_show - nfsd4: fix up replay_matches_cache() - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 - xfs: don't check for AG deadlock for realtime files in bunmapi - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table - Bluetooth: btusb: fix PM leak in error case of setup - Bluetooth: delete a stray unlock - Bluetooth: Fix memory leak in hci_connect_le_scan - media: flexcop-usb: ensure -EIO is returned on error condition - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809) - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP - bdev: Factor out bdev revalidation into a common helper - bdev: Refresh bdev size for disks without partitioning - scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails - drm/mst: Fix MST sideband up-reply failure handling - [ppc64el] pseries/hvconsole: Fix stack overread via udbg - [ppc64el] KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag - rxrpc: Fix possible NULL pointer access in ICMP handling - tcp: annotate tp->rcv_nxt lockless reads - net: core: limit nested device depth - ath9k_htc: Modify byte order for an error message - ath9k_htc: Discard undersized packets - xfs: periodically yield scrub threads to the scheduler - net: add annotations on hh->hh_len lockless accesses - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps - [s390x] smp: fix physical to logical CPU map for SMT - xen/blkback: Avoid unmapping unmapped grant pages - [x86] perf/x86/intel/bts: Fix the use of page_private() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.95 - bpf: Fix passing modified ctx to ld/abs/ind instruction - regulator: fix use after free issue - ASoC: max98090: fix possible race conditions - netfilter: ctnetlink: netns exit must wait for callbacks - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (CVE-2019-14901) - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec breakage - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89 - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs - efi/gop: Return EFI_SUCCESS if a usable GOP was found - efi/gop: Fix memory leak in __gop_query32/64() - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init() - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions() - ASoC: topology: Check return value for soc_tplg_pcm_create() - bnxt_en: Return error if FW returns more data than dump length - [mips*] bpf, mips: Limit to 33 tail calls - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS - [powerpc*] Ensure that swiotlb buffer is allocated from low memory - btrfs: Fix error messages in qgroup_rescan_init - bpf: Clear skb->tstamp in bpf_redirect when necessary - bnx2x: Do not handle requests from VFs after parity - bnx2x: Fix logic to get total no. of PFs per engine - cxgb4: Fix kernel panic while accessing sge_info - net: usb: lan78xx: Fix error message format specifier - rfkill: Fix incorrect check to avoid NULL pointer dereference - iommu/iova: Init the struct iova to fix the possible memleak - [x86] perf/x86/intel: Fix PT PMI handling - fs: avoid softlockups in s_inodes iterators - [arm64,armhf] net: stmmac: Do not accept invalid MTU values - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission start - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly - [s390x] dasd: fix memleak in path handling error case - block: fix memleak when __blk_rq_map_user_iov() is failed - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) - [x86] hv_netvsc: Fix unwanted rx_table reset - [powerpc*] vcpu: Assume dedicated processors as non-preempt - [powerpc*] spinlocks: Include correct header for static key - [armhf] cpufreq: imx6q: read OCOTP through nvmem for imx6ul/imx6ull - gtp: fix bad unlock balance in gtp_encap_enable_socket - macvlan: do not assume mac_header is set in macvlan_broadcast() - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU port. - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes - net: usb: lan78xx: fix possible skb leak - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM - sch_cake: avoid possible divide by zero in cake_enqueue() - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK - vxlan: fix tos value before xmit - vlan: fix memory leak in vlan_dev_set_egress_priority - vlan: vlan_changelink() should propagate errors - net: sch_prio: When ungrafting, replace with FIFO - [arm64,armhf] usb: dwc3: gadget: Fix request complete check - USB: core: fix check for duplicate endpoints - USB: serial: option: add Telit ME910G1 0x110a composition - usb: missing parentheses in USE_NEW_SCHEME https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96 - chardev: Avoid potential use-after-free in 'chrdev_open()' - i2c: fix bus recovery stop mode timing - [arm64,armhf] usb: chipidea: host: Disable port power only if previously enabled - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 - ALSA: hda/realtek - Add new codec supported for ALCS1200A - ALSA: hda/realtek - Set EAPD control to default for ALC222 - [x86] ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined - tracing: Change offset type to s32 in preempt/irq tracepoints - HID: Fix slab-out-of-bounds read in hid_field_extract - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll - HID: hid-input: clear unmapped usages - Input: add safety guards to input_set_keycode() - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model - drm/fb-helper: Round up bits_per_pixel if possible - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ - can: kvaser_usb: fix interface sanity check - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism - [x86] staging: vt6656: set usb_set_intfdata on driver fail. - USB: serial: option: add ZLP support for 0x1bc7/0x9010 - [arm64,armhf] usb: musb: fix idling for suspend after disconnect interrupt - [arm64,armhf] usb: musb: Disable pullup at init - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 - serdev: Don't claim unsupported ACPI serial devices - tty: link tty and port before configuring it as console - tty: always relink the port - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (CVE-2019-14895) - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (CVE-2019-19056) - scsi: bfa: release allocated memory in case of error (CVE-2019-19066) - rtl8xxxu: prevent leaking urb (CVE-2019-19068) - ath10k: fix memory leak (CVE-2019-19078) - HID: hiddev: fix mess in hiddev_open() - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct - netfilter: conntrack: dccp, sctp: handle null timeout argument - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present - [x86] drm/i915/gen9: Clear residual context state on context switch (CVE-2019-14615) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.97 - hidraw: Return EPOLLOUT from hidraw_poll - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll - HID: hidraw, uhid: Always report EPOLLOUT - cfg80211/mac80211: make ieee80211_send_layer2_update a public function - mac80211: Do not send Layer 2 Update frame before authorization (CVE-2019-5108) - f2fs: Move err variable to function scope in f2fs_fill_dentries() - f2fs: check memory boundary by insane namelen - f2fs: check if file namelen exceeds max value (CVE-2019-9445) - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (CVE-2019-15217) - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (CVE-2019-19058) - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (CVE-2019-19059) - RDMA: Fix goto target to release the allocated memory (CVE-2019-19077) - dccp: Fix memleak in __feat_register_sp (CVE-2019-20096) - [x86] drm/i915: Fix use-after-free when destroying GEM context - ASoC: soc-core: Set dpcm_playback / dpcm_capture - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API - iommu: Remove device link to group on failure - gpio: Fix error message on out-of-range GPIO in lookup table - [s390x] qeth: fix false reporting of VNIC CHAR config failure - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set - cifs: Adjust indentation in smb2_open_file - afs: Fix missing cell comparison in afs_test_super() - drm/ttm: fix start page for huge page check in ttm_put_pages() (CVE-2019-19927) - drm/ttm: fix incrementing the page pointer for huge pages (CVE-2019-19927) - btrfs: simplify inode locking for RWF_NOWAIT - RDMA/mlx5: Return proper error value - RDMA/srpt: Report the SCSI residual to the initiator - scsi: enclosure: Fix stale device oops with hot replug - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 - [x86] platform/x86: GPD pocket fan: Use default values when wrong modparams are given - xprtrdma: Fix completion wait during device removal - crypto: virtio - implement missing support for output IVs - NFSv2: Fix a typo in encode_sattr() - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn - mei: fix modalias documentation - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume - [armhf] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6 - scsi: sd: enable compat ioctls for sed-opal - af_unix: add compat_ioctl support - compat_ioctl: handle SIOCOUTQNSD - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage - PCI/PTM: Remove spurious "d" from granularity message - [powerpc*] powernv: Disable native PCIe port management - [armhf] tty: serial: imx: use the sg count from dma_map_sg - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg - mtd: spi-nor: fix silent truncation in spi_nor_read() - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() - rtlwifi: Remove unnecessary NULL check in rtl_regd_init - f2fs: fix potential overflow - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() - [mips*] cacheinfo: report shared CPU map - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static - [arm64] dmaengine: k3dma: Avoid null pointer traversal - [amd64] ioat: ioat_alloc_ring() failure handling. - ocfs2: call journal flush to mark journal as empty after journal recovery when mount https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.98 - clk: Don't try to enable critical clocks if prepare failed - iio: buffer: align the size of scan bytes to size of the largest element - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx - USB: serial: option: Add support for Quectel RM500Q - USB: serial: opticon: fix control-message timeouts - USB: serial: option: add support for Quectel RM500Q in QDL mode - USB: serial: suppress driver bind attributes - USB: serial: ch341: handle unbound port at reset_resume - USB: serial: io_edgeport: handle unbound ports on URB completion - USB: serial: io_edgeport: add missing active-port sanity check - USB: serial: keyspan: handle unbound ports - USB: serial: quatech2: handle unbound ports - [x86] scsi: fnic: fix invalid stack access - scsi: mptfusion: Fix double fetch bug in ioctl - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection - ALSA: dice: fix fallback from protocol extension into limited functionality - ALSA: seq: Fix racy access for queue timer in proc read - ALSA: usb-audio: fix sync-ep altsetting sanity check - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator - block: fix an integer overflow in logical block size - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio number - LSM: generalize flag passing to security_capable - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() - usb: core: hub: Improved device recognition on remote wakeup - [x86] resctrl: Fix an imbalance in domain_remove_cpu() - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained - [amd64] x86/efistub: Disable paging at mixed mode entry - [x86] resctrl: Fix potential memory leak - perf hists: Fix variable name's inconsistency in hists__for_each() macro - perf report: Fix incorrectly added dimensions as switch perf data file - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid - btrfs: rework arguments of btrfs_unlink_subvol - btrfs: fix invalid removal of root ref - btrfs: do not delete mismatched root refs - btrfs: fix memory leak in qgroup accounting - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() - [armhf] dts: imx6qdl: Add Engicam i.Core 1.5 MX6 - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned - [arm64,armhf] net: stmmac: Enable 16KB buffer size - mm/huge_memory.c: make __thp_get_unmapped_area static - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment - bpf: Fix incorrect verifier simulation of ARSH under ALU32 - cfg80211: fix deadlocks in autodisconnect work - cfg80211: fix memory leak in cfg80211_cqm_rssi_update - cfg80211: fix page refcount issue in A-MSDU decap - netfilter: fix a use-after-free in mtype_destroy() - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct - netfilter: nft_tunnel: fix null-attribute check - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits - netfilter: nf_tables: store transaction list locally while requesting module - netfilter: nf_tables: fix flowtable list del corruption - NFC: pn533: fix bulk-message timeout - batman-adv: Fix DAT candidate selection on little endian systems - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() - [x86] hv_netvsc: Fix memory leak when removing rndis device - [arm64] net: hns: fix soft lockup when there is not enough memory - net: usb: lan78xx: limit size of local TSO packets - ptp: free ptp device pin descriptors properly - r8152: add missing endpoint sanity check - tcp: fix marked lost packets not being retransmitted - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk - tcp: refine rule to allow EPOLLOUT generation under mem pressure - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node - cfg80211: check for set_wiphy_params - tick/sched: Annotate lockless access to last_jiffies_update - drm/nouveau/bar/nv50: check bar1 vmm return value - drm/nouveau/bar/gf100: ensure BAR is mapped - drm/nouveau/mmu: qualify vmm during dtor - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr - scsi: esas2r: unlock on error in esas2r_nvram_read_direct() - scsi: qla4xxx: fix double free bug - scsi: bnx2i: fix potential use after free - scsi: target: core: Fix a pr_debug() argument - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan - scsi: core: scsi_trace: Use get_unaligned_be*() - perf probe: Fix wrong address verification . [ Joe Richey ] * [cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237) . [ Salvatore Bonaccorso ] * Refresh powerpc-fix-mcpu-options-for-spe-only-compiler.patch (Context changes in 4.19.88) * Drop 0027-RDMA-hns-Fix-the-bug-with-updating-rq-head-pointer-w.patch * Drop 0028-RDMA-hns-Bugfix-for-the-scene-without-receiver-queue.patch * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.88) * [rt] Update to 4.19.90-rt35: - Update "workqueue: rework" for workqueue changes in 4.19.90 * [rt] Drop 0245-Revert-arm64-preempt-Fix-big-endian-when-checking-pr.patch * Refresh 0013-scsi-hisi_sas-Relocate-some-codes-to-avoid-an-unused.patch for context changes in 4.19.93. * [rt] Refresh 0253-watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch (Context changes in 4.19.93) * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.97) . [ Ben Hutchings ] * [rt] Update to 4.19.94-rt38: - Refresh "x86/ioapic: Don't let setaffinity unmask threaded EOI interrupt too early" which was partly included in 4.19.92 * aufs: Update support patchset to aufs4.19.63+ 20200113; no functional changes * Bump ABI to 8 * libertas: Fix two buffer overflows at parsing bss descriptor (CVE-2019-14896, CVE-2019-14897) * wimax: i2400: fix memory leak (CVE-2019-19051) * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (CVE-2019-19051) * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511) . [ Noah Meyerhans ] * random: try to actively add entropy rather than passively wait for it (Closes: #948519) . [ Aurelien Jarno ] * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF. linux-signed-arm64 (4.19.87+1) buster; urgency=medium . * Sign kernel from linux 4.19.87-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - Revert "pwm: Set class for exported channels in sysfs" - cpufreq: schedutil: Don't skip freq update when limits change - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify - ALSA: hda - Let all conexant codec enter D3 when rebooting - HID: holtek: test for sanity of intfdata - HID: hiddev: avoid opening a disconnected device - HID: hiddev: do cleanup in failure of opening a device - Input: kbtab - sanity check for endpoint type - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - netfilter: ebtables: also count base chain policies - xen/pciback: remove set but not used variable 'old_state' - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules - [arm64] efi: fix variable 'si' set but not used - [arm64] unwind: Prohibit probing on return_address() - [arm64] mm: fix variable 'pud' set but not used - IB/core: Add mitigation for Spectre V1 - IB/mlx5: Fix MR registration flow to use UMR properly - IB/mad: Fix use-after-free in ib mad completion handling - [arm64] drm: msm: Fix add_gpu_components - [armhf] drm/exynos: fix missing decrement of retry counter - ocfs2: remove set but not used variable 'last_hash' - asm-generic: fix -Wtype-limits compiler warnings - [arm64] KVM: regmap: Fix unexpected switch fall-through - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - [x86] drm/i915/cfl: Add a new CFL PCI ID. - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - Input: psmouse - fix build error of multiple definition - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - net: dsa: Check existence of .port_mdb_add callback before calling it - net/mlx4_en: fix a memory leak bug - net/packet: fix race in tpacket_snd() - sctp: fix memleak in sctp_send_reset_streams - sctp: fix the transport error_count check - team: Add vlan tx offload to hw_enc_features - tipc: initialise addr_trail_end when setting node addresses - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - net/mlx5e: Use flow keys dissector to parse packets for ARFS - [arm64] mmc: sdhci-of-arasan: Do now show error message in case of deffered probe https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.69 - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - [mips*] kernel: only use i8253 clocksource with periodic clockevent - [mips*] fix cacheinfo - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - bonding: Force slave speed check after link state recovery for 802.3ad - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - can: dev: call netif_carrier_off() in register_candev() - can: gw: Fix error path of cgw_module_init - [armhf,arm64] ASoC: rockchip: Fix mono capture - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - net/ethernet/qlogic/qed: force the string buffer NULL-terminated - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - [x86] lib/cpu: Address missing prototypes warning - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - [arm64] KVM: Don't write junk to sysregs on reset - [armhf] KVM: Don't write junk to CP15 registers on reset - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - Revert "dm bufio: fix deadlock with loop device" (regression in 4.19.61) - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX - gpiolib: never report open-drain/source lines as 'input' to user-space - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - [x86] apic: Handle missing global clockevent gracefully - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - [x86] boot: Save fields explicitly, zero out everything else - [x86] boot: Fix boot regression caused by bootparam sanitizing - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() - dm raid: add missing cleanup in raid_ctr() - dm space map metadata: fix missing store of apply_bops() return value - dm table: fix invalid memory accesses with too high sector number - dm zoned: improve error handling in reclaim - dm zoned: improve error handling in i/o map code - dm zoned: properly handle backing device failure - genirq: Properly pair kobject_del() with kobject_add() - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - xfs: don't trip over uninitialized buffer on extent read of corrupted inode - xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h - xfs: Add helper function xfs_attr_try_sf_addname - xfs: Add attibute set and helper functions - xfs: Add attibute remove and helper functions - xfs: always rejoin held resources during defer roll - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - [ppc64el] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.70 - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Only update d_fsdata if different in afs_d_revalidate() - nvmet-loop: Flush nvme_delete_wq when removing the port - nvme: fix a possible deadlock when passthru commands sent to a multipath device - nvme-pci: Fix async probe remove race - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - [arm64] cpufeature: Don't treat granule sizes as strict - drm/ast: Fixed reboot test may cause system hanged - [x86] tools: hv: fix KVP and VSS daemons exit code - [x86] drm/i915: fix broadwell EU computation - [arm*] watchdog: bcm2835_wdt: Fix module autoload - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value - [armhf] drm/tilcdc: Register cpufreq notifier after we have initialized crtc - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Default fib6_type to RTN_UNICAST when not set - net/smc: make sure EPOLLOUT is raised - tcp: make sure EPOLLOUT wont be missed - ipv4/icmp: fix rt dst dev null pointer dereference - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n - ALSA: usb-audio: Check mixer unit bitmap yet more strictly - ALSA: line6: Fix memory leak at line6_init_pcm() error path - ALSA: hda - Fixes inverted Conexant GPIO mic mute led - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - [x86] kvm: skip populating logical dest map if apic is not sw enabled - [x86] KVM: Don't update RIP or do single-step on faulting emulation - [amd64] uprobes: Fix detection of 32-bit user mode - [x86] apic: Do not initialize LDR and DFR for bigsmp - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has stopped - usb: host: ohci: fix a race condition between shutdown and irq - usb: host: xhci: rcar: Fix typo in compatible string matching - USB: storage: ums-realtek: Update module parameter description for auto_delink_en - USB: storage: ums-realtek: Whitelist auto-delink support - [x86] mei: me: add Tiger Lake point LP device ID - mmc: core: Fix init of SD cards reporting an invalid VDD range - stm class: Fix a double free of stm_source_device - [x86] intel_th: pci: Add support for another Lewisburg PCH - [x86] intel_th: pci: Add Tiger Lake support - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - [x86] drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash - [x86] VMCI: Release resource if the work is already queued - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - Revert "cfg80211: fix processing world regdomain when non modular" - mac80211: fix possible sta leak - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - [ppc64el] KVM: Book3S: Fix incorrect guest-to-user-translation error handling - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - NFS: Clean up list moves of struct nfs_page - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Pass error information to the pgio error cleanup routine - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - [x86] i2c: piix4: Fix port selection for AMD Family 16h Model 30h - mt76: mt76x0u: do not reset radio on resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.71 - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 4.19.67) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.72 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - [armhf,arm64] net: stmmac: dwmac-rk: Don't fail if phy regulator is absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) - [x86] boot: Preserve boot_params.secure_boot from sanitizing - [arm*] spi: bcm2835aux: unifying code between polling and interrupt driven code - [arm*] spi: bcm2835aux: remove dangerous uncontrolled read of fifo - [arm*] spi: bcm2835aux: fix corruptions for longer spi transfers - netfilter: nf_tables: use-after-free in failing rule with bound set - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - Bluetooth: btqca: Add a short delay before downloading the NVM - [ppc64el] ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug - liquidio: add cleanup in octeon_setup_iq() - net: myri10ge: fix memory leaks - lan78xx: Fix memory leaks - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - kprobes: Fix potential deadlock in kprobe_optimizer() - HID: cp2112: prevent sleeping function called from invalid context - [amd64] boot/compressed: Fix boot on machines with broken E820 table - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel callback - [x86] Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - IB/mlx4: Fix memory leaks - infiniband: hfi1: fix a memory leak bug - infiniband: hfi1: fix memory leaks - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - [armhf,arm64] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - [armhf,arm64] KVM: VGIC: Properly initialise private IRQ affinity - [amd64] boot/compressed: Fix missing initialization in find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.73 - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - [x86] ALSA: hda/realtek - Add quirk for HP Pavilion 15 - [x86] ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - [x86] ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() - [ppc64el] tm: Fix FP/VMX unavailable exceptions inside a transaction (CVE-2019-15030) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - [x86] hv_sock: Fix hang when a connection is closed - Blk-iolatency: warn on negative inflight IO counter - blk-iolatency: fix STS_AGAIN handling - {nl,mac}80211: fix interface combinations on crypto controlled devices - timekeeping: Use proper ktime_add when adding nsecs in coarse offset - selftests: fib_rule_tests: use pre-defined DEV_ADDR - [x86] ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() - [ppc64el] mark start_here_multiplatform as __ref - [arm64] dts: rockchip: enable usb-host regulators at boot on rk3328-rock64 - nvme-fc: use separate work queue to avoid warning - [armhf] clk: s2mps11: Add used attribute to s2mps11_dt_match - [arm64] remoteproc: qcom: q6v5: shore up resource probe handling - modules: always page-align module section allocations - kernel/module: Fix mem leak in module_add_modinfo_attrs - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" - scsi: qla2xxx: Move log messages before issuing command to firmware - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h - [x86] Drivers: hv: kvp: Fix two "this statement may fall through" warnings - [x86] hibernate: Fix nosave_regions setup for hibernation - [arm64] remoteproc: qcom: q6v5-mss: add SCM probe dependency - drm/amdgpu/gfx9: Update gfx9 golden settings. - drm/amdgpu: Update gc_9_0 golden settings. - [x86] KVM: hyperv: enforce vp_index < KVM_MAX_VCPUS - [x86] KVM: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' variables - [x86] KVM: hyperv: keep track of mismatched VP indexes - [x86] KVM: hyperv: define VP assist page helpers - [x86] kvm/lapic: preserve gfn_to_hva_cache len on cache reinit - [x86] drm/i915: Fix intel_dp_mst_best_encoder() - [x86] drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE - [x86] drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/atomic_helper: Disallow new modesets on unregistered connectors - [x86] Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up - powerplay: Respect units on max dcfclk watermark - drm/amd/pp: Fix truncated clock value when set watermark - drm/amd/dm: Understand why attaching path/tile properties are needed - [s390x] zcrypt: reinit ap queue state machine during device probe - [x86] drm/i915: Restore sane defaults for KMS on GEM error load - [x86] drm/i915: Cleanup gt powerstate from gem - [ppc64el] KVM: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch - Btrfs: clean up scrub is_dev_replace parameter - Btrfs: fix deadlock with memory reclaim during scrub - btrfs: Remove extent_io_ops::fill_delalloc - btrfs: Fix error handling in btrfs_cleanup_ordered_extents - scsi: megaraid_sas: Fix combined reply queue mode detection - scsi: megaraid_sas: Add check for reset adapter bit - scsi: megaraid_sas: Use 63-bit DMA addressing - [ppc64el] pkeys: Fix handling of pkey state across fork() - btrfs: volumes: Make sure no dev extent is beyond device boundary - btrfs: Use real device structure to verify dev extent - IB/uverbs: Fix OOPs upon device disassociation - drm/vblank: Allow dynamic per-crtc max_vblank_count - [x86] drm/i915/ilk: Fix warning when reading emon_status with no output - tpm: Fix some name collisions with drivers/char/tpm.h - bcache: replace hard coded number with BUCKET_GC_GEN_MAX - bcache: treat stale && dirty keys as bad keys - [x86] KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run - [armhf] iio: adc: exynos-adc: Add S5PV210 variant - [armhf] iio: adc: exynos-adc: Use proper number of channels for Exynos4x12 - mt76: fix corrupted software generated tx CCMP PN - drm/nouveau: Don't WARN_ON VCPI allocation failures - iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules - iwlwifi: add new card for 9260 series - spi: spi-gpio: fix SPI_CS_HIGH capability - [ppc64el] kvm: Save and restore host AMR/IAMR/UAMOR - btrfs: scrub: pass fs_info to scrub_setup_ctx - btrfs: scrub: move scrub_setup_ctx allocation out of device_list_mutex - btrfs: scrub: fix circular locking dependency warning - btrfs: init csum_list before possible free - [arm64] PCI: qcom: Fix error handling in runtime PM support - [arm64] PCI: qcom: Don't deassert reset GPIO during probe - CIFS: Fix error paths in writeback code - CIFS: Fix leaking locked VFS cache pages in writeback retry - [x86] drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set - [x86] drm/i915: Sanity check mmap length against object size - [x86] usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps - IB/mlx5: Reset access mask when looping inside page fault handler - kvm: mmu: Fix overflow on kvm mmu page limit calculation - [x86] kvm: move kvm_load/put_guest_xcr0 into atomic context - [x86] KVM: Always use 32-bit SMRAM save state for 32-bit kernels - cifs: Fix lease buffer length error (CVE-2019-15918) - ext4: protect journal inode's blocks using block_validity - [x86] PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary - dm mpath: fix missing call of path selector type->end_io - blk-mq: free hw queue's resource in hctx's release handler - mmc: sdhci-pci: Add support for Intel CML - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code - cifs: smbd: take an array of reqeusts when sending upper layer data - dm crypt: move detailed message into debug level - [x86] drm/amdkfd: Add missing Polaris10 ID - kvm: Check irqchip mode before assign irqfd - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc - Btrfs: fix race between block group removal and block group allocation - cifs: add spinlock for the openFileList to cifsInodeInfo - [arm64] clk: tegra: Fix maximum audio sync clock for Tegra124/210 - [arm64] clk: tegra210: Fix default rates for HDA clocks - IB/hfi1: Avoid hardlockup with flushlist_lock - apparmor: reset pos on failure to unpack for various functions - scsi: target/core: Use the SECTOR_SHIFT constant - scsi: target/iblock: Fix overrun in WRITE SAME emulation - [s390x] scsi: zfcp: fix request object use-after-free in send path causing wrong traces - cifs: Properly handle auto disabling of serverino option - [x86] ALSA: hda - Don't resume forcibly i915 HDMI/DP codec - [x86] KVM: optimize check for valid PAT value - [x86] KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value - [x86] KVM: VMX: Fix handling of #MC that occurs during VM-Entry - [x86] KVM: VMX: check CPUID before allowing read/write of IA32_XSS - [ppc64el] KVM: Use ccr field in pt_regs struct embedded in vcpu struct - [ppc64el] KVM: Book3S HV: Fix CR0 setting in TM emulation - RDMA/srp: Document srp_parse_in() arguments - RDMA/srp: Accept again source addresses that do not have a port number - btrfs: correctly validate compression type - resource: Include resource end in walk_*() interfaces - resource: Fix find_next_iomem_res() iteration issue - resource: fix locking in find_next_iomem_res() - pstore: Fix double-free in pstore_mkfile() failure path - dm thin metadata: check if in fail_io mode when setting needs_check - [armhf,arm64] drm/panel: Add support for Armadeus ST0700 Adapt - [x86] ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips - [ppc64el] mm: Limit rma_size to 1TB when running without HV mode - iommu/iova: Remove stale cached32_node - gpio: don't WARN() on NULL descs if gpiolib is disabled - mm/migrate.c: initialize pud_entry in migrate_vma() - NFSv4: Fix delegation state recovery - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - [s390x] virtio: fix race on airq_areas[] - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors - ext4: don't perform block validity checks on the journal inode - ext4: fix block validity checks for journal inodes using indirect blocks - ext4: unsigned int compared against zero - [x86] PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround - [ppc64el] tm: Remove msr_tm_active() - [ppc64el] tm: Fix restoring FP/VMX facility incorrectly on interrupts (CVE-2019-15031) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.74 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - net: Fix null de-reference of device refcount - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist - gpio: fix line flag validation in linehandle_create - Btrfs: fix assertion failure during fsync and use of stale transaction - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - genirq: Prevent NULL pointer dereference in resend_irqs() - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - [x86] KVM: work around leak of uninitialized stack contents - [x86] KVM: nVMX: handle page fault in vmread - [x86] purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - [ppc64el] Add barrier_nospec to raw_copy_in_user() - [arm64] drm/meson: Add support for XBGR8888 & ABGR8888 formats - [armhf,arm64] clk: rockchip: Don't yell about bad mmc phases when getting - PCI: Always allow probing with driver_override - gpio: fix line flag validation in lineevent_create - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - firmware: ti_sci: Always request response from firmware - [x86] drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - modules: fix BUG when load module with rodata=n - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) - nvmem: Use the same permissions for eeprom as for nvmem https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.75 - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - RDMA/restrack: Release task struct which was hold by CM_ID object - [x86] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - [ppc64el] mm/radix: Use the right page size for vmemmap mapping - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net_sched: let qdisc_put() accept NULL pointer - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - [armhf] dts: am57xx: Disable voltage switching for SD card - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - [armhf] bus: ti-sysc: Fix using configured sysc mask value - [s390x] bpf: fix lcgr instruction encoding - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 - [armhf] bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - [s390x] bpf: use 32-bit index for tail calls - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - xdp: unpin xdp umem pages in error path - qed: Add cleanup in qed_slowpath_start() - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - [x86] apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - [armhf,arm64] usb: host: xhci-tegra: Set DMA mask correctly - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - [x86] perf/intel: Restrict period on Nehalem - [x86] perf/amd/ibs: Fix sample bias for dispatched micro-ops - amd-xgbe: Fix error path in xgbe_mod_init() - [x86] tools/power x86_energy_perf_policy: Fix argument parsing - [x86] tools/power turbostat: fix buffer overrun - net: aquantia: fix out of memory condition on rx side - [armhf] dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - [x86] uaccess: Don't leak the AC flags into __get_user() argument evaluation - [x86] hyper-v: Fix overflow bug in fill_gva_list() - keys: Fix missing null pointer check in request_key_auth_describe() - [x86] iommu/amd: Flush old domains in kdump kernel - [x86] iommu/amd: Fix race in increase_address_space() - [arm64] PCI: kirin: Fix section mismatch warning - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - binfmt_elf: move brk out of mmap when doing direct loader exec - [arm64] kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field - media: technisat-usb2: break out of loop at end of buffer (CVE-2019-15505) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.76 - Revert "Bluetooth: validate BLE connection interval updates" - RDMA/restrack: Protect from reentry to resource return path - [ppc64el] xive: Fix bogus error code returned by OPAL - IB/core: Add an unbound WQ type to the new CQ API - HID: prodikeys: Fix general protection fault during probe - HID: sony: Fix memory corruption issue on cleanup. - HID: logitech: Fix general protection fault caused by Logitech driver - HID: hidraw: Fix invalid read in hidraw_ioctl - HID: Add quirk for HP X500 PIXART OEM mouse - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() - CIFS: fix deadlock in cached root handling - net/mlx5e: Set ECN for received packets using CQE indication - net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets - mlx5: fix get_ip_proto() - net/mlx5e: Allow reporting of checksum unnecessary - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding - net/mlx5e: Rx, Check ip headers sanity - iwlwifi: mvm: send BCAST management frames to the right station - iwlwifi: mvm: always init rs_fw with 20MHz bandwidth rates - media: tvp5150: fix switch exit in set control handler - [x86] ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it enabled - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support - ALSA: usb-audio: Add DSD support for EVGA NU Audio - ALSA: dice: fix wrong packet parameter for Alesis iO26 - [x86] ALSA: hda - Add laptop imic fixup for ASUS M9V laptop - [x86] ALSA: hda - Apply AMD controller workaround for Raven platform - objtool: Clobber user CFLAGS variable - power: supply: sysfs: ratelimit property read error message - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion - scsi: qla2xxx: Remove all rports if fabric scan retry fails - scsi: qla2xxx: Return switch command on a timeout - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" - bpf: libbpf: retry loading program on EAGAIN - [armhf,arm64] irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices - f2fs: check all the data segments against all node ones - [x86] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it - bcache: remove redundant LIST_HEAD(journal) from run_cache_set() - initramfs: don't free a non-existent initrd - blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - Revert "f2fs: avoid out-of-range memory access" - dm zoned: fix invalid memory access - f2fs: fix to do sanity check on segment bitmap of LFS curseg - drm: Flush output polling on shutdown - net: don't warn in inet diag when IPV6 is disabled - Bluetooth: btrtl: HCI reset on close for Realtek BT chip - [x86] ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling - xfs: don't crash on null attr fork xfs_bmapi_read - netfilter: nft_socket: fix erroneous socket assignment - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices - net_sched: check cops->tcf_block in tc_bind_tclass() - net/rds: An rds_sock is added too early to the hash table - net/rds: Check laddr_check before calling it - f2fs: use generic EFSBADCRC/EFSCORRUPTED https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.77 - arcnet: provide a buffer big enough to actually receive packets - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize - macsec: drop skb sk before calling gro_cells_receive - net/phy: fix DP83865 10 Mbps HDX loopback disable function - net/sched: act_sample: don't push mac header on ip6gre ingress - net_sched: add max len check for TCA_KIND - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (CVE-2019-19081) - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC - ppp: Fix memory leak in ppp_write - sch_netem: fix a divide by zero in tabledist() - skge: fix checksum byte order - usbnet: ignore endpoints with invalid wMaxPacketSize - usbnet: sanity checking of packet sizes and device mtu - net: sched: fix possible crash in tcf_action_destroy() - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state - net/mlx5: Add device ID of upcoming BlueField-2 - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (CVE-2019-19080) - ALSA: hda: Flush interrupts on disabling - [armhf] ASoC: sgtl5000: Fix of unmute outputs on probe - [armhf] ASoC: sgtl5000: Fix charge pump source assignment - [arm*] dmaengine: bcm2835: Print error in case setting DMA mask fails - media: dib0700: fix link error for dibx000_i2c_set_speed - media: hdpvr: Add device num check and handling - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint - sched/fair: Fix imbalance due to CPU affinity - sched/core: Fix CPU controller for !RT_GROUP_SCHED - [x86] apic: Make apic_pending_intr_clear() more robust - sched/deadline: Fix bandwidth accounting at all levels after offline migration - [x86] reboot: Always use NMI fallback when shutdown via reboot vector IPI fails - [x86] apic: Soft disable APIC before initializing it - ALSA: hda - Show the fatal CORB/RIRB error more clearly - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() - EDAC/mc: Fix grain_bits calculation - media: iguanair: add sanity checks - base: soc: Export soc_device_register/unregister APIs - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid - [arm64] prefetch: fix a -Wtype-limits warning - md/raid1: end bio when the device faulty - md: don't call spare_active in md_reap_sync_thread if all member devices can't work - md: don't set In_sync if array is frozen - ACPI / processor: don't print errors for processorIDs == 0xff - loop: Add LOOP_SET_DIRECT_IO to compat ioctl - [x86] EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() - efi: cper: print AER info of PCIe fatal error - sched/fair: Use rq_lock/unlock in online_fair_sched_group - idle: Prevent late-arriving interrupts from disrupting offline - media: gspca: zero usb_buf on error - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig - perf test vfs_getname: Disable ~/.perfconfig to get default output - media: em28xx: modules workqueue not inited for 2nd device - media: rc: imon: Allow iMON RC protocol for ffdc 7e device - [arm64] perf record: Support aarch64 random socket_id assignment - [armhf] media: omap3isp: Don't set streaming state on random subdevs - media: radio/si470x: kill urb on error - media: hdpvr: add terminating 0 at end of string - led: triggers: Fix a memory leak bug - nbd: add missing config put - media: mceusb: fix (eliminate) TX IR signal length limit - media: dvb-frontends: use ida for pll number - posix-cpu-timers: Sanitize bogus WARNONS - media: dvb-core: fix a memory leak bug - libperf: Fix alignment trap with xyarray contents in 'perf stat' - [amd64] EDAC/amd64: Recognize DRAM device type ECC capability - [amd64] EDAC/amd64: Decode syndrome before translating address - PM / devfreq: passive: Use non-devm notifiers - PM / devfreq: exynos-bus: Correct clock enable sequence - media: cec-notifier: clear cec_adap in cec_notifier_unregister - media: saa7146: add cleanup in hexium_attach() - media: cpia2_usb: fix memory leaks - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() - perf trace beauty ioctl: Fix off-by-one error in cmd->string table - [x86] ASoC: es8316: fix headphone mixer volume table - ACPI / CPPC: do not require the _PSD method - sched/cpufreq: Align trace event behavior of fast switching - [x86] apic/vector: Warn when vector space exhaustion breaks affinity - [arm64] kpti: ensure patched kernel text is fetched from PoU - [x86] mm/pti: Do not invoke PTI functions when PTI is disabled - [x86] mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() - nvmet: fix data units read and written counters in SMART log - nvme-multipath: fix ana log nsid lookup when nsid is not found - ALSA: firewire-motu: add support for MOTU 4pre - iommu/amd: Silence warnings under memory pressure - libata/ahci: Drop PCS quirk for Denverton and beyond - iommu/iova: Avoid false sharing on fq_timer_on - libtraceevent: Change users plugin directory - [armhf] dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks - ACPI: custom_method: fix memory leaks - ACPI / PCI: fix acpi_pci_irq_enable() memory leak - closures: fix a race on wakeup from closure_sync - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' - md/raid1: fail run raid1 array when active disk less than one - dmaengine: ti: edma: Do not reset reserved paRAM slots - kprobes: Prohibit probing on BUG() and WARN() address - [s390x] crypto: xts-aes-s390 fix extra run-time crypto self tests finding - [x86] cpu: Add Tiger Lake to Intel family - [x86] platform: intel_pmc_core: Do not ioremap RAM - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set - raid5: don't set STRIPE_HANDLE to stripe which is in batch list - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD - mmc: sdhci: Fix incorrect switch to HS mode - mmc: core: Add helper function to indicate if SDIO IRQs is enabled - [armhf,arm64] mmc: dw_mmc: Re-store SDIO IRQs mask at system resume - raid5: don't increment read_errors on EILSEQ return - libertas: Add missing sentinel at end of if_usb.c fw_table - e1000e: add workaround for possible stalled packet - ALSA: hda - Drop unsol event handler for Intel HDMI codecs - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() - [x86] ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 - [x86] iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type - [armhf] media: omap3isp: Set device on omap3isp subdevs - PM / devfreq: passive: fix compiler warning - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 - ALSA: firewire-tascam: handle error code when getting current source of clock - ALSA: firewire-tascam: check intermediate state of clock status and retry - scsi: scsi_dh_rdac: zero cdb in send_mode_select() - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag - printk: Do not lose last line in kmsg buffer dump - IB/mlx5: Free mpi in mp_slave mode - IB/hfi1: Define variables as unsigned long to fix KASAN warning - randstruct: Check member structs in is_pure_ops_struct() - ceph: use ceph_evict_inode to cleanup inode's resource - [x86] ALSA: hda/realtek - PCI quirk for Medion E4254 - blk-mq: add callback of .cleanup_rq - scsi: implement .cleanup_rq callback - [ppc64el] imc: Dont create debugfs files for cpu-less nodes - fuse: fix missing unlock_page in fuse_writepage() - [x86] KVM: always stop emulation on page fault - [x86] KVM: set ctxt->have_exception in x86_decode_insn() - [x86] KVM: Manually calculate reserved bits when loading PDPTRS - [x86] media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table - media: don't drop front-end reference count for ->detach - binfmt_elf: Do not move brk for INTERP-less ET_EXEC - [x86] ASoC: Intel: NHLT: Fix debug print format - [x86] ASoC: Intel: Skylake: Use correct function to access iomem space - [x86] ASoC: Intel: Fix use of potentially uninitialized variable - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - [arm64] tlb: Ensure we execute an ISB following walk cache invalidation - [arm64] dts: rockchip: limit clock rate of MMC controllers for RK3328 - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP - regulator: Defer init completion for a while after late_initcall - efifb: BGRT: Improve efifb_bgrt_sanity_check - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer - memcg, kmem: do not fail __GFP_NOFAIL charges - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask - block: fix null pointer dereference in blk_mq_rq_timed_out() - smb3: allow disabling requesting leases - ovl: Fix dereferencing possible ERR_PTR() - ovl: filter of trusted xattr results in audit - btrfs: fix allocation of free space cache v1 bitmap pages - Btrfs: fix use-after-free when using the tree modification log - btrfs: Relinquish CPUs in btrfs_compare_trees - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls - Btrfs: fix race setting up and completing qgroup rescan workers - md/raid6: Set R5_ReadError when there is read failure on parity disk - md: don't report active array_state until after revalidate_disk() completes. - md: only call set_in_sync() when it is expected to succeed. - cfg80211: Purge frame registrations on iftype change - /dev/mem: Bail out upon SIGKILL. - ext4: fix warning inside ext4_convert_unwritten_extents_endio - ext4: fix punch hole for inline_data file systems - quota: fix wrong condition in is_quota_modification() - hwrng: core - don't wait on add_early_randomness() - CIFS: fix max ea value size - CIFS: Fix oplock handling for SMB 2.1+ protocols - md/raid0: avoid RAID0 data corruption due to layout confusion. - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone - drm/amd/display: Restore backlight brightness after system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.78 - tpm: use tpm_try_get_ops() in tpm-sysfs.c. - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations - [armhf,arm64] drm/panel: simple: fix AUO g185han01 horizontal blanking - [armhf,arm64] drm/panel: check failure cases in the probe func - [armhf,arm64] drm/rockchip: Check for fast link training before enabling psr - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() - [ppc64el] PCI: rpaphp: Avoid a sometimes-uninitialized warning - ipmi_si: Only schedule continuously in the thread in maintenance mode - [armhf,arm64] clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks - drm/amd/display: fix issue where 252-255 values are clipped - drm/amd/display: reprogram VM config when system resume - [ppc64el] powernv/ioda2: Allocate TCE table levels on demand for default DMA window - [ppc64el] xmon: Check for HV mode when dumping XIVE info from OPAL - [ppc64el] rtas: use device model APIs and serialization during LPM - [ppc64el] futex: Fix warning: 'oldval' may be used uninitialized in this function - [ppc64el] pseries/mobility: use cond_resched when updating device tree - [armhf,arm64] pinctrl: tegra: Fix write barrier placement in pmx_writel - [ppc64el] eeh: Clear stale EEH_DEV_NO_HANDLER flag - vfio_pci: Restore original state on release - drm/nouveau/volt: Fix for some cards having 0 maximum voltage - [x86] pinctrl: amd: disable spurious-firing GPIO IRQs - drm/amd/display: support spdif - drm/amdgpu/si: fix ASIC tests - [ppc64el] exception: machine check use correct cfar for late handler - pstore: fs superblock limits - [ppc64el] pseries: correctly track irq state in default idle - [arm64] pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c - [ppc64el] dump kernel log before carrying out fadump or kdump - [arm64] mbox: qcom: add APCS child device for QCS404 - scsi: core: Reduce memory required for SCSI logging - dma-buf/sw_sync: Synchronize signal vs syncpt free - ext4: fix potential use after free after remounting with noblock_validity - [mips*] tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean - [x86] i2c-cht-wc: Fix lockdep warning - [x86] mfd: intel-lpss: Remove D3cold delay - HID: wacom: Fix several minor compiler warnings - [armel,armhf] 8898/1: mm: Don't treat faults reported from cache maintenance as writes - [armhf] rtc: snvs: fix possible race condition - HID: apple: Fix stuck function keys when using FN - [arm64] PCI: rockchip: Propagate errors for optional regulators - [armhf] PCI: imx6: Propagate errors for optional regulators - [armel,armhf] 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address - fat: work around race with userspace's read via blockdev while mounting - pktcdvd: remove warning on attempting to register non-passthrough dev - [s390x] hypfs: Fix error number left in struct pointer member - ocfs2: wait for recovering done after direct unlock request - [arm64] consider stack randomization for mmap base only when necessary - [mips*] properly account for stack randomization and stack guard gap - [armel,armhf] properly account for stack randomization and stack guard gap - [armel,armhf] use STACK_TOP when computing mmap base address - block: mq-deadline: Fix queue restart handling - bpf: fix use after free in prog symbol exposure - cxgb4:Fix out-of-bounds MSI-X info array access - erspan: remove the incorrect mtu limit for erspan - hso: fix NULL-deref on tty open - ipv6: drop incoming packets having a v4mapped source address - ipv6: Handle missing host route in __ipv6_ifa_notify - net: ipv4: avoid mixed n_redirects and rate_tokens usage - net: qlogic: Fix memory leak in ql_alloc_large_buffers - net: Unpublish sk from sk_reuseport_cb before call_rcu - nfc: fix memory leak in llcp_sock_bind() - qmi_wwan: add support for Cinterion CLS8 devices - rxrpc: Fix rxrpc_recvmsg tracepoint - sch_dsmark: fix potential NULL deref in dsmark_init() - udp: fix gso_segs calculations - vsock: Fix a lockdep warning in __vsock_release() - udp: only do GSO if # of segs > 1 - net/rds: Fix error handling in rds_ib_add_one() - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() - tipc: fix unlimited bundling of small messages - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash - NFC: fix attrs checks in netlink interface - kexec: bail out upon SIGKILL when allocating memory. - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.79 - [s390x] process: avoid potential reading of freed stack - [s390x] KVM: Test for bad access register and size at the start of S390_MEM_OP - [s390x] topology: avoid firing events before kobjs are created - [s390x] cio: exclude subchannels with no parent from pseudo check - [ppc64el] KVM: Book3S HV: Fix race in re-enabling XIVE escalation interrupts - [ppc64el] KVM: Book3S HV: Check for MMU ready on piggybacked virtual cores - [ppc64el] KVM: Book3S HV: Don't lose pending doorbell request on migration on P9 - [x86] KVM: Fix userspace set invalid CR4 - [x86] KVM: nVMX: handle page fault in vmread fix - nbd: fix max number of supported devs - PM / devfreq: tegra: Fix kHz to Hz conversion - ASoC: Define a set of DAPM pre/post-up events - [armhf] ASoC: sgtl5000: Improve VAG power and mute control - [ppc64el] mce: Fix MCE handling for huge pages - [ppc64el] mce: Schedule work from irq_work - [ppc64el] powernv: Restrict OPAL symbol map to only be readable by root - [ppc64el] powernv/ioda: Fix race in TCE level allocation - [ppc64el] book3s64/mm: Don't do tlbie fixup for some hardware revisions - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file - [x86] crypto: qat - Silence smp_processor_id() warning - crypto: skcipher - Unmap pages after an external error - [mips*el/loongson-3] Treat Loongson Extensions as ASEs - power: supply: sbs-battery: use correct flags field - power: supply: sbs-battery: only return health when battery present - tracing: Make sure variable reference alias has correct var_ref_idx - usercopy: Avoid HIGHMEM pfn warning - timer: Read jiffies once when forwarding base clk - [x86] PCI: vmd: Fix shadow offsets to reflect spec changes - PCI: Restore Resizable BAR size bits correctly for 1MB BARs - [armhf] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout - perf stat: Fix a segmentation fault when using repeat forever - [armhf] drm/omap: fix max fclk divider for omap36xx - [arm64] drm/msm/dsi: Fix return value check for clk_get_parent - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors - [x86] drm/i915/gvt: update vgpu workload head pointer correctly - mmc: sdhci: improve ADMA error reporting - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" - xen/xenbus: fix self-deadlock after killing user process - ieee802154: atusb: fix use-after-free at disconnect - [s390x] cio: avoid calling strlen on null pointer - cfg80211: initialize on-stack chandefs - [arm64] cpufeature: Detect SSBS and advertise to userspace - ima: always return negative code for error - ima: fix freeing ongoing ahash_request - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() - 9p: Transport error uninitialized - 9p: avoid attaching writeback_fid on mmap with type PRIVATE - xen/pci: reserve MCFG areas earlier - ceph: fix directories inode i_blkbits initialization - ceph: reconnect connection if session hang in opening state - watchdog: aspeed: Add support for AST2600 - netfilter: nf_tables: allow lookups in dynamic sets - drm/amdgpu: Fix KFD-related kernel oops on Hawaii - drm/amdgpu: Check for valid number of registers to read - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors - [x86] purgatory: Disable the stackleak GCC plugin for the purgatory - ntb: point to right memory window index - thermal: Fix use-after-free when unregistering thermal zone device - thermal_hwmon: Sanitize thermal_zone type - libnvdimm/region: Initialize bad block for volatile namespaces - fuse: fix memleak in cuse_channel_open - libnvdimm/nfit_test: Fix acpi_handle redefinition - sched/membarrier: Call sync_core only before usermode for same mm - sched/membarrier: Fix private expedited registration check - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() - kernel/elfcore.c: include proper prototypes - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed - [ppc64el] KVM: HV: XIVE: Free escalation interrupts before disabling the VP - [x86] KVM: nVMX: Fix consistency check on injected exception error code - nbd: fix crash when the blksize is zero - [ppc64el] pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() - [ppc64el] radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure - tick: broadcast-hrtimer: Fix a race in bc_set_next - perf tools: Fix segfault in cpu_cache_level__read() - perf stat: Reset previous counts on repeat with interval - [arm64] ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 - [arm64] KVM: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe - [arm64] docs: Document SSBS HWCAP - [arm64] fix SSBS sanitization - [arm64] Add sysfs vulnerability show for spectre-v1 - [arm64] add sysfs vulnerability show for meltdown - [arm64] enable generic CPU vulnerabilites support - [arm64] Always enable ssb vulnerability detection - [arm64] Provide a command line to disable spectre_v2 mitigation - [arm64] Advertise mitigation of Spectre-v2, or lack thereof - [arm64] Always enable spectre-v2 vulnerability detection - [arm64] add sysfs vulnerability show for spectre-v2 - [arm64] add sysfs vulnerability show for speculative store bypass - [arm64] ssbs: Don't treat CPUs with SSBS as unaffected by SSB - [arm64] Force SSBS on context switch - [arm64] Use firmware to detect CPUs that are not affected by Spectre-v2 - [arm64] speculation: Support 'mitigations=' cmdline option - vfs: Fix EOVERFLOW testing in put_compat_statfs64 - cfg80211: add and use strongly typed element iteration macros - cfg80211: Use const more consistently in for_each_element macros - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.80 - panic: ensure preemption is disabled during panic() - f2fs: use EINVAL for superblock with invalid magic - USB: rio500: Remove Rio 500 kernel driver - USB: yurex: Don't retry on unexpected errors - USB: yurex: fix NULL-derefs on disconnect - USB: usb-skeleton: fix runtime PM after driver unbind - USB: usb-skeleton: fix NULL-deref on disconnect - xhci: Fix false warning message about wrong bounce buffer write length - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long - xhci: Check all endpoints for LPM timeout - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts - usb: xhci: wait for CNR controller not ready bit in xhci resume - xhci: Prevent deadlock when xhci adapter breaks during init - xhci: Increase STS_SAVE timeout in xhci_suspend() - USB: adutux: fix use-after-free on disconnect - USB: adutux: fix NULL-derefs on disconnect - USB: adutux: fix use-after-free on release - USB: iowarrior: fix use-after-free on disconnect - USB: iowarrior: fix use-after-free on release - USB: iowarrior: fix use-after-free after driver unbind - USB: usblp: fix runtime PM after driver unbind - USB: chaoskey: fix use-after-free on release - USB: ldusb: fix NULL-derefs on driver unbind - serial: uartlite: fix exit path null pointer - USB: serial: keyspan: fix NULL-derefs on open() and write() - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 - USB: serial: option: add Telit FN980 compositions - USB: serial: option: add support for Cinterion CLS8 devices - USB: serial: fix runtime PM after driver unbind - USB: usblcd: fix I/O after disconnect - USB: microtek: fix info-leak at probe - USB: dummy-hcd: fix power budget for SuperSpeed mode - USB: legousbtower: fix slab info leak at probe - USB: legousbtower: fix deadlock on disconnect - USB: legousbtower: fix potential NULL-deref on disconnect - USB: legousbtower: fix open after failed reset request - USB: legousbtower: fix use-after-free on release - [x86] mei: me: add comet point (lake) LP device ids - [x86] mei: avoid FW version request on Ibex Peak and earlier - [armhf,arm64] iio: adc: axp288: Override TS pin bias current for some models - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified - perf llvm: Don't access out-of-scope array - perf inject jit: Fix JIT_CODE_MOVE filename - blk-wbt: fix performance regression in wbt scale_up/scale_down - CIFS: Gracefully handle QueryInfo errors during open - CIFS: Force revalidate inode when dentry is stale - CIFS: Force reval dentry if LOOKUP_REVAL flag is set - kernel/sysctl.c: do not override max_threads provided by userspace - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic - btrfs: fix incorrect updating of log root tree - btrfs: fix uninitialized ret in ref-verify - NFS: Fix O_DIRECT accounting of number of bytes read/written - [mips*] elf_hwcap: Export userspace ASEs - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags - ACPI/PPTT: Add support for ACPI 6.3 thread flag - [arm64] topology: Use PPTT to determine if PE is a thread - vfs: Fix the locking in dcache_readdir() and friends - media: stkwebcam: fix runtime PM after driver unbind - [arm64] sve: Fix wrong free for task->thread.sve_state - [rt] tracing/hwlat: Report total time spent in all NMIs during the sample - [rt] tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency - ftrace: Get a reference counter for the trace_array on filter files - tracing: Get trace_array reference for available_tracers files - hwmon: Fix HWMON_P_MIN_ALARM mask - [x86] asm: Fix MWAITX C-state hint value - [x86] PCI: vmd: Fix config addressing when using bus offsets - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.81 - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - [mips*el/loongson-3] Fix the link time qualifier of 'serial_exit()' - [arm64] net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - r8152: Set macpassthru in reset_resume callback - libata/ahci: Fix PCS quirk application - md/raid0: fix warning message for parameter default_layout - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - net: avoid potential infinite loop in tc_ctl_action() - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - sctp: change sctp_prot .no_autobind with true - memfd: Fix locking when tagging pins - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Input: synaptics-rmi4 - avoid processing unknown IRQs - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - [x86] drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - EDAC/ghes: Fix Use after free in ghes_edac remove path - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up - [arm64] pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.82 - zram: fix race between backing_dev_show and backing_dev_store - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - Btrfs: fix memory leak due to concurrent append writes with fiemap - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - btrfs: tracepoints: Fix wrong parameter order for qgroup events - wil6210: fix freeing of rx buffers in EDMA mode - f2fs: flush quota blocks after turnning it off - scsi: lpfc: Fix a duplicate 0711 log message number. - f2fs: fix to recover inode's i_gc_failures during POR - f2fs: fix to recover inode->i_flags of inode block during POR - [x86] HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override - [arm64,armel,armhf] usb: dwc2: fix unbalanced use of external vbus-supply - [x86] tools/power turbostat: fix goldmont C-state limit decoding - [x86] cpu: Add Atom Tremont (Jacobsville) - [arm64] drm/msm/dpu: handle failures while initializing displays - bcache: fix input overflow to writeback_rate_minimum - PCI: Fix Switchtec DMA aliasing quirk dmesg noise - Btrfs: fix deadlock on tree root leaf when finding free extent - netfilter: ipset: Make invalid MAC address checks consistent - HID: i2c-hid: Disable runtime PM for LG touchscreen - HID: i2c-hid: Ignore input report if there's no data present on Elan touchpanels - HID: i2c-hid: Add Odys Winbook 13 to descriptor override - [x86] platform/x86: Add the VLV ISP PCI ID to atomisp2_pm - [x86] platform/x86: Fix config space access for intel_atomisp2_pm - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 - HID: Add ASUS T100CHI keyboard dock battery quirks - NFSv4: Ensure that the state manager exits the loop on SIGKILL - HID: steam: fix boot loop with bluetooth firmware - HID: steam: fix deadlock with input devices. - [arm64,armhf] usb: dwc3: gadget: early giveback if End Transfer already completed - [arm64,armhf] usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete - ALSA: usb-audio: Cleanup DSD whitelist - usb: handle warm-reset port requests on hub resume - [armhf] rtc: pcf8523: set xtal load capacitance from DT - [arm64] Add MIDR encoding for HiSilicon Taishan CPUs - [arm64] kpti: Whitelist HiSilicon Taishan v110 CPUs - scsi: lpfc: Correct localport timeout duration error - CIFS: Respect SMB2 hdr preamble size in read responses - cifs: add credits from unmatched responses/messages - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT - exec: load_script: Do not exec truncated interpreter path - [arm64,armhf] net: dsa: mv88e6xxx: Release lock while requesting IRQ - PCI/PME: Fix possible use-after-free on remove - [arm64,armhf] iio: adc: meson_saradc: Fix memory allocation order - [x86] iio: fix center temperature of bmc150-accel-core - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Return appropriate error code for allocation failures - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init (CVE-2019-19065) - RDMA/iwcm: Fix a lock inversion issue - [x86] HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 - [arm64] gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - [armhf] serial: mctrl_gpio: Check for NULL pointer - efi/cper: Fix endianness of PCIe class code - [x86] efi/x86: Do not clean dummy variable in kexec path - [x86] xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - [arm64] armv8_deprecated: Checking return value for memory allocation - [x86] cpu: Add Comet Lake to the Intel CPU models header - sched/vtime: Fix guest/system mis-accounting on task switch - [x86] perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - iio: imu: adis16400: release allocated memory on failure (CVE-2019-19060) - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (CVE-2019-19048) - NFSv4: Fix leak of clp->cl_acceptor string - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 - iwlwifi: exclude GEO SAR support for 3168 - nbd: verify socket is supported during setup - USB: legousbtower: fix a signedness bug in tower_probe() - [x86] thunderbolt: Use 32-bit writes when writing ring producer/consumer - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe() (CVE-2019-15098) - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 - ALSA: hda/realtek - Add support for ALC623 - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix __le32/__le64 accessors in debugfs code - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - nl80211: fix validation of mesh path nexthop - [s390x] cmm: fix information leak in cmm_timeout_handler() - [s390x] idle: fix cpu idle time calculation - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default - rtlwifi: Fix potential overflow on P2P code (CVE-2019-17666) - [arm64] dmaengine: qcom: bam_dma: Fix resource leak - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - ALSA: timer: Simplify error path in snd_timer_open() - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - [ppc64el] powerpc/powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.83 - regulator: of: fix suspend-min/max-voltage parsing - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay - [arm64] arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - [armhf] regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - [x86] ASoC: rt5682: add NULL handler to set_jack function - [armhf] regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - [arm64,armhf] ASoc: rockchip: i2s: Fix RPM imbalance - [armel,armhf] mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - drm/amdgpu: fix potential VM faults - scsi: target: core: Do not overwrite CDB byte 1 - tracing: Fix "gfp_t" format for synthetic events - of: unittest: fix memory leak in unittest_data_add (CVE-2019-19049) - [arm64,armhf] irqchip/gic-v3-its: Use the exact ITSList for VMOVP - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: fix sk_page_frag() recursion from memory reclaim - [arm64] net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - [armhf] net: dsa: b53: Do not clear existing mirrored port mask - [armhf] net: phy: bcm7xxx: define soft_reset for 40nm EPHY - net: usb: lan78xx: Connect PHY before registering MAC - [arm64,armhf] net: dsa: fix switch tree list - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net/flow_dissector: switch to siphash - wireless: Skip directory when generating certificates - [x86] platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - [ppc64el] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.84 - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - [mips*] net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: usb: qmi_wwan: add support for DW5821e with eSIM support - nfc: netlink: fix double device reference drop - qede: fix NULL pointer deref in __qede_remove() - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - [arm64] Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - [armhf] sunxi: Fix CPU powerdown on A83T - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - [x86] intel_th: pci: Add Comet Lake PCH support - [x86] intel_th: pci: Add Jasper Lake PCH support - [x86] apic/32: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - [armhf] can: flexcan: disable completely the ECC mechanism - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052) - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - sched/fair: Fix -Wunused-but-set-variable warnings - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - [arm64,armhf] PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - [amd64] HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/qedr: Fix reported firmware version - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (CVE-2019-19045) - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - netfilter: nf_flow_table: set timeout before insertion into hashes - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: gadget: composite: Fix possible double free memory bug - [arm64] usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813) - usb: gadget: configfs: fix concurrent issue between composite APIs - [arm64,armhf] usb: dwc3: remove the call trace of USBx_GFLADJ - [x86] perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - [x86] perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - [x86] perf/x86/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - nvme-multipath: fix possible io hang after ctrl reconnect - [amd64] fjes: Handle workqueue allocation failure - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ" - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - [x86] hv_netvsc: Fix error handling in netvsc_attach() - [arm64,armhf] usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - NFSv4: Don't allow a cached open with a revoked delegation - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation - blkcg: make blkcg_print_stat() print stats only for online blkgs - [x86] iio: imu: mpu6050: Add support for the ICM 20602 IMU - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050 - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - net: prevent load/store tearing on sk->sk_stamp - [x86] iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/cpu: Add Tremont to the cpu vulnerability whitelist https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.85 - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - ipmr: Fix skb headroom in ipmr_get_route(). - net: gemini: add missed free_netdev - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - [armhf] net: ethernet: dwmac-sun8i: Use the correct function in exit path - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - iio: adc: max9611: explicitly cast gain_selectors - tee: optee: take DT status property into account - ath10k: fix kernel panic by moving pci flush after napi_disable - clk: sunxi-ng: h6: fix PWM gate/reset offset - soundwire: Initialize completion for defer messages - [x86] soundwire: intel: Fix uninitialized adev deref - [arm64] dts: allwinner: a64: Orange Pi Win: Fix SD card node - [arm64] dts: allwinner: a64: Olinuxino: fix DRAM voltage - [arm64] dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() - [arm64] soc/tegra: pmc: Fix pad voltage configuration for Tegra186 - [arm64] dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply - y2038: make do_gettimeofday() and get_seconds() inline - rtc: sysfs: fix NULL check in rtc_add_groups() - remoteproc/davinci: Use %zx for formating size_t - extcon: cht-wc: Return from default case to avoid warnings - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set - ALSA: seq: Do error checks at creating system ports - ath10k: skip resetting rx filter for WCN3990 - ath9k: fix tx99 with monitor mode interface - wil6210: drop Rx multicast packets that are looped-back to STA - wil6210: set edma variables only for Talyn-MB devices - wil6210: prevent usage of tx ring 0 for eDMA - wil6210: fix invalid memory access for rx_buff_mgmt debugfs - ath10k: limit available channels via DT ieee80211-freq-limit - ice: Update request resource command to latest specification - ice: Prevent control queue operations during reset - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated - ice: Fix and update driver version string - ASoC: dapm: Don't fail creating new DAPM control on NULL pinctrl - ASoC: dpcm: Properly initialise hw->rate_max - ASoC: meson: axg-fifo: report interrupt request failure - ASoC: AMD: Change MCLK to 48Mhz - pinctrl: ingenic: Probe driver at subsys_initcall - [armhf] dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale - [armhf] dts: exynos: Fix HDMI-HPD line handling on Arndale - [armhf] dts: exynos: Fix sound in Snow-rev5 Chromebook - liquidio: fix race condition in instruction completion processing - [arm64] dts: stratix10: i2c clock running out of spec - [armhf] dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks - i40evf: Validate the number of queues a PF sends - i40e: use correct length for strncpy - i40evf: set IFF_UNICAST_FLT flag for the VF - i40e: Check and correct speed values for link on open - i40evf: Don't enable vlan stripping when rx offload is turned on - i40e: hold the rtnl lock on clearing interrupt scheme - i40evf: cancel workqueue sync for adminq when a VF is removed - i40e: Prevent deleting MAC address from VF when set by PF - IB/rxe: avoid back-to-back retries - IB/rxe: fixes for rdma read retry - iwlwifi: drop packets with bad status in CD - iwlwifi: don't WARN on trying to dump dead firmware - iwlwifi: mvm: avoid sending too many BARs - media: vicodec: fix out-of-range values when decoding - media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers - media: ov772x: Disable clk on error path - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument - mwifiex: do no submit URB in suspended state - mwifex: free rx_cmd skb in suspended state - brcmfmac: fix wrong strnchr usage - mt76: Fix comparisons with invalid hardware key index - soc: imx: gpc: fix PDN delay - ASoC: rsnd: ssi: Fix issue in dma data address assignment - net: hns3: Fix for multicast failure - net: hns3: Fix error of checking used vlan id - net: hns3: Fix for loopback selftest failed problem - net: hns3: Change the dst mac addr of loopback packet - net/mlx5: Fix atomic_mode enum values - net: phy: mscc: read 'vsc8531,vddmac' as an u32 - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 - [armhf] dts: meson8: fix the clock controller register size - [armhf] dts: meson8b: fix the clock controller register size - mtd: rawnand: marvell: use regmap_update_bits() for syscon access - mtd: rawnand: fsl_ifc: check result of SRAM initialization - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions - mtd: rawnand: qcom: don't include dma-direct.h - IB/mlx5: Change TX affinity assignment in RoCE LAG mode - qxl: fix null-pointer crash during suspend - mac80211: fix saving a few HE values - cfg80211: validate wmm rule when setting - f2fs: avoid wrong decrypted data from disk - net: lan78xx: Bail out if lan78xx_get_endpoints fails - rtnetlink: move type calculation out of loop - ASoC: sgtl5000: avoid division by zero if lo_vag is zero - ath10k: avoid possible memory access violation - [armhf] dts: exynos: Disable pull control for S5M8767 PMIC - ath10k: wmi: disable softirq's while calling ieee80211_rx - i2c: mediatek: Use DMA safe buffers for i2c transactions - IB/mlx5: Don't hold spin lock while checking device state - IB/ipoib: Ensure that MTU isn't less than minimum permitted - RDMA/core: Rate limit MAD error messages - RDMA/core: Follow correct unregister order between sysfs and cgroup - udf: Fix crash during mount - ASoC: dapm: Avoid uninitialised variable warning - [x86] ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation - ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA - [powerpc] make PowerMac cache node search conditional on CONFIG_PPC_PMAC - [armhf] dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files - [armhf] dts: omap3-gta04: fixes for tvout / venc - [armhf] dts: omap3-gta04: tvout: enable as display1 alias - [armhf] dts: omap3-gta04: fix touchscreen tsc2007 - [armhf] dts: omap3-gta04: make NAND partitions compatible with recent U-Boot - [armhf] dts: omap3-gta04: keep vpll2 always on - f2fs: submit bio after shutdown - failover: Fix error return code in net_failover_create - sched/debug: Explicitly cast sched_feat() to bool - sched/debug: Use symbolic names for task state constants - firmware: arm_scmi: use strlcpy to ensure NULL-terminated strings - [arm64] dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire - [armhf] dts: exynos: Disable pull control for PMIC IRQ line on Artik5 board - usb: mtu3: disable vbus rise/fall interrupts of ltssm - EDAC, sb_edac: Return early on ADDRV bit and address type test - [armhf] rtc: pl030: fix possible race condition - ath9k: add back support for using active monitor interfaces for tx99 - dmaengine: at_xdmac: remove a stray bottom half unlock - RDMA/hns: Fix an error code in hns_roce_v2_init_eq_table() - IB/hfi1: Missing return value in error path for user sdma - signal: Always ignore SIGKILL and SIGSTOP sent to the global init - signal: Properly deliver SIGILL from uprobes - signal: Properly deliver SIGSEGV from x86 uprobes - f2fs: fix memory leak of write_io in fill_super() - f2fs: fix memory leak of percpu counter in fill_super() - f2fs: fix setattr project check upon fssetxattr ioctl - scsi: qla2xxx: Use correct qpair for ABTS/CMD - scsi: qla2xxx: Fix iIDMA error - scsi: qla2xxx: Defer chip reset until target mode is enabled - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 - scsi: qla2xxx: Fix deadlock between ATIO and HW lock - scsi: qla2xxx: Increase abort timeout value - scsi: qla2xxx: Check for Register disconnect - scsi: qla2xxx: Fix port speed display on chip reset - scsi: qla2xxx: Fix dropped srb resource. - scsi: qla2xxx: Fix duplicate switch's Nport ID entries - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 - scsi: lpfc: Fix errors in log messages. - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() - [armhf] imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set - scsi: pm80xx: Corrected dma_unmap_sg() parameter - scsi: pm80xx: Fixed system hang issue during kexec boot - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list - net: aquantia: fix hw_atl_utils_fw_upload_dwords - Drivers: hv: vmbus: Fix synic per-cpu context initialization - nvmem: core: return error code instead of NULL from nvmem_device_get - media: dt-bindings: adv748x: Fix decimal unit addresses - [x86] ALSA: hda: Fix implicit definition of pci_iomap() on SH - media: fix: media: pci: meye: validate offset to avoid arbitrary access - media: dvb: fix compat ioctl translation - net: bcmgenet: Fix speed selection for reverse MII - [arm64] dts: meson: libretech: update board model - [arm64] dts: meson-axg: use the proper compatible for ethmac - [x86] ALSA: intel8x0m: Register irq handler after register initializations - [arm64] dts: renesas: salvator-common: adv748x: Override secondary addresses - [arm64] dts: renesas: r8a77965: Attach the SYS-DMAC to the IPMMU - [arm64] dts: renesas: r8a77965: Fix HS-USB compatible - [arm64] dts: renesas: r8a77965: Fix clock/reset for usb2_phy1 - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() - llc: avoid blocking in llc_sap_close() - [armhf] dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value - [arm64] soc: qcom: wcnss_ctrl: Avoid string overflow - [arm64] dts: broadcom: Fix I2C and SPI bus warnings - [armhf] dts: bcm: Fix SPI bus warnings - [armhf] dts: aspeed: Fix I2C bus warnings - [ppc64el,powerpc*] powerpc/vdso: Correct call frame information - [armhf] dts: socfpga: Fix I2C bus unit-address error - [armhf] dts: sunxi: Fix I2C bus warnings - [armhf] dts: sun9i: Fix I2C bus warnings - android: binder: no outgoing transaction when thread todo has transaction - cxgb4: Fix endianness issue in t4_fwcache() - [arm64] fix for bad_mode() handler to always result in panic - block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash - blok, bfq: do not plug I/O if all queues are weight-raised - [arm64] dts: meson: Fix erroneous SPI bus warnings - power: supply: ab8500_fg: silence uninitialized variable warnings - component: fix loop condition to call unbind() if bind() fails - kernfs: Fix range checks in kernfs_get_target_path - ip_gre: fix parsing gre header in ipgre_err - scsi: ufshcd: Fix NULL pointer dereference for in ufshcd_init - [armhf] dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 - [arm64] dts: rockchip: Fix I2C bus unit-address error on rk3399-puma-haikou - [x86] ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask - netfilter: nf_tables: avoid BUG_ON usage - ath9k: Fix a locking bug in ath9k_add_interface() - [s390x] qeth: uninstall IRQ handler on device removal - [s390x] qeth: invoke softirqs after napi_schedule() - media: vsp1: Fix vsp1_regs.h license header - media: vsp1: Fix YCbCr planar formats pitch calculation - media: ov2680: don't register the v4l2 subdevice before checking chip ID - PCI/ACPI: Correct error message for ASPM disabling - net: socionext: Fix two sleep-in-atomic-context bugs in ave_rxfifo_reset() - PCI: mediatek: Fix unchecked return value - [armhf] dts: xilinx: Fix I2C and SPI bus warnings - serial: uartps: Fix suspend functionality - serial: samsung: Enable baud clock for UART reset procedure in resume - serial: mxs-auart: Fix potential infinite loop - tty: serial: qcom_geni_serial: Fix serial when not used as console - [arm64] dts: ti: k3-am65: Change #address-cells and #size-cells of interconnect to 2 - samples/bpf: fix a compilation failure - spi: mediatek: Don't modify spi_transfer when transfer. - ASoC: rt5682: Fix the boost volume at the begining of playback - ipmi_si_pci: fix NULL device in ipmi_si error message - ipmi_si: fix potential integer overflow on large shift - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address - ipmi: fix return value of ipmi_set_my_LUN - net: hns3: fix return type of ndo_start_xmit function - net: cavium: fix return type of ndo_start_xmit function - net: ibm: fix return type of ndo_start_xmit function - [ppc64el,powerpc*] iommu: Avoid derefence before pointer check - [ppc64el,powerpc*] selftests: Do not fail with reschedule - [ppc64el,powerpc64] hash: Fix stab_rr off by one initialization - [ppc64el,powerpc64] pseries/memory-hotplug: Only update DT once per memory DLPAR request - [ppc64el,powerpc64] pseries: Disable CPU hotplug across migrations - [ppc64el,powerpc*] Fix duplicate const clang warning in user access code - RDMA/i40iw: Fix incorrect iterator type - OPP: Protect dev_list with opp_table lock - of/unittest: Fix I2C bus unit-address error - libfdt: Ensure INT_MAX is defined in libfdt_env.h - power: supply: twl4030_charger: fix charging current out-of-bounds - power: supply: twl4030_charger: disable eoc interrupt on linear charge - net: mvpp2: fix the number of queues per cpu for PPv2.2 - net: marvell: fix return type of ndo_start_xmit function - net: toshiba: fix return type of ndo_start_xmit function - net: xilinx: fix return type of ndo_start_xmit function - net: broadcom: fix return type of ndo_start_xmit function - net: amd: fix return type of ndo_start_xmit function - net: sun: fix return type of ndo_start_xmit function - net: hns3: Fix for setting speed for phy failed problem - net: hns3: Fix cmdq registers initialization issue for vf - net: hns3: Clear client pointer when initialize client failed or unintialize finished - net: hns3: Fix client initialize state issue when roce client initialize failed - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() - nfp: provide a better warning when ring allocation fails - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started - usb: chipidea: Fix otg event handler - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT - [s390x] zcrypt: enable AP bus scan without a valid default domain - [s390x] vdso: avoid 64-bit vdso mapping for compat tasks - [s390x] vdso: correct CFI annotations of vDSO functions - brcmfmac: increase buffer for obtaining firmware capabilities - brcmsmac: Use kvmalloc() for ucode allocations - mlxsw: spectrum: Init shaper for TCs 8..15 - PCI: portdrv: Initialize service drivers directly - [armhf] dts: am335x-evm: fix number of cpsw - [armhf] dts: ti: Fix SPI and I2C bus warnings - f2fs: avoid infinite loop in f2fs_alloc_nid - f2fs: fix to recover inode's uid/gid during POR - [armhf] dts: ux500: Correct SCU unit address - [armhf] dts: ux500: Fix LCDA clock line muxing - [armhf] dts: ste: Fix SPI controller node names - spi: pic32: Use proper enum in dmaengine_prep_slave_rg - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) - cpufeature: avoid warning when compiling with clang - [armhf] crypto: crc32 - avoid warning when compiling with Clang - [armel] dts: marvell: Fix SPI and I2C bus warnings - [x86] mce-inject: Reset injection struct after injection - [armhf,arm64] dts: clearfog: fix sdhci supply property name - bnx2x: Ignore bandwidth attention in single function mode - PCI/AER: Take reference on error devices - PCI/AER: Don't read upstream ports below fatal errors - PCI/ERR: Use slot reset if available - samples/bpf: fix compilation failure - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider - net: micrel: fix return type of ndo_start_xmit function - net: freescale: fix return type of ndo_start_xmit function - [x86] CPU: Use correct macros for Cyrix calls - [x86] CPU: Change query logic so CPUID is enabled before testing - EDAC: Correct DIMM capacity unit symbol - [mips*] kexec: Relax memory restriction - [arm64] dts: rockchip: Fix microSD in rk3399 sapphire board - mlxsw: Make MLXSW_SP1_FWREV_MINOR a hard requirement - media: imx: work around false-positive warning, again - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() - media: au0828: Fix incorrect error messages - media: davinci: Fix implicit enum conversion warning - [armhf] dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock - usb: gadget: uvc: configfs: Drop leaked references to config items - usb: gadget: uvc: configfs: Prevent format changes after linking header - usb: gadget: uvc: configfs: Sort frame intervals upon writing - [armhf] dts: exynos: Correct audio subsystem parent clock on Peach Chromebooks - i2c: aspeed: fix invalid clock parameters for very large divisors - gpiolib: Fix gpio_direction_* for single direction GPIOs - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs - phy: phy-twl4030-usb: fix denied runtime access - [armhf] dts: imx6ull: update vdd_soc voltage for 900MHz operating point - usb: gadget: uvc: Factor out video USB request queueing - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode - coresight: Use ERR_CAST instead of ERR_PTR - coresight: Fix handling of sinks - coresight: perf: Fix per cpu path management - coresight: perf: Disable trace path upon source error - coresight: tmc-etr: Handle driver mode specific ETR buffers - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP - coresight: tmc: Fix byte-address alignment for RRP - coresight: dynamic-replicator: Handle multiple connections - slimbus: ngd: register ngd driver only once. - slimbus: ngd: return proper error code instead of zero - silmbus: ngd: register controller after power up. - misc: kgdbts: Fix restrict error - misc: genwqe: should return proper error value. - vmbus: keep pointer to ring buffer page - vfio/pci: Fix potential memory leak in vfio_msi_cap_len - vfio/pci: Mask buggy SR-IOV VF INTx support - iw_cxgb4: Use proper enumerated type in c4iw_bar2_addrs - scsi: libsas: always unregister the old device if going to discover new - f2fs: fix remount problem of option io_bits - phy: lantiq: Fix compile warning - [arm64] dts: fsl: Fix I2C and SPI bus warnings - [armhf] dts: imx51-zii-rdu1: Fix the rtc compatible string - [arm64] tegra: I2C on Tegra194 is not compatible with Tegra114 - [armhf] dts: tegra30: fix xcvr-setup-use-fuses - [armhf] dts: tegra20: restore address order - [armhf] tegra: apalis_t30: fix mmc1 cmd pull-up - [armhf] tegra: apalis_t30: fix mcp2515 can controller interrupt polarity - [armhf] tegra: colibri_t30: fix mcp2515 can controller interrupt polarity - [armhf] dts: paz00: fix wakeup gpio keycode - net: smsc: fix return type of ndo_start_xmit function - net: faraday: fix return type of ndo_start_xmit function - PCI/ERR: Run error recovery callbacks for all affected devices - f2fs: update i_size after DIO completion - f2fs: fix to recover inode's project id during POR - f2fs: mark inode dirty explicitly in recover_inode() - RDMA: Fix dependencies for rdma_user_mmap_io - EDAC: Raise the maximum number of memory controllers - firmware: dell_rbu: Make payload memory uncachable - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS - Bluetooth: btrsi: fix bt tx timeout issue - [x86] hyperv: Suppress "PCI: Fatal: No config space access function found" - crypto: s5p-sss: Fix race in error handling - crypto: s5p-sss: Fix Fix argument list alignment - crypto: fix a memory leak in rsa-kcs1pad's encryption mode - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump - iwlwifi: fix non_shared_ant for 22000 devices - iwlwifi: pcie: read correct prph address for newer devices - iwlwifi: api: annotate compressed BA notif array sizes - iwlwifi: pcie: gen2: build A-MSDU only for GSO - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN - iwlwifi: mvm: use correct FIFO length - iwlwifi: mvm: Allow TKIP for AP mode - scsi: NCR5380: Clear all unissued commands on host reset - scsi: NCR5380: Have NCR5380_select() return a bool - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data - scsi: NCR5380: Check for invalid reselection target - scsi: NCR5380: Don't clear busy flag when abort fails - scsi: NCR5380: Don't call dsprintk() following reselection interrupt - scsi: NCR5380: Handle BUS FREE during reselection - scsi: NCR5380: Check for bus reset - [arm64] dts: amd: Fix SPI bus warnings - [arm64] dts: lg: Fix SPI controller node names - rtc: isl1208: avoid possible sysfs race - rtc: tx4939: fixup nvmem name and register size - rtc: armada38x: fix possible race condition - netfilter: masquerade: don't flush all conntracks if only one address deleted on device - usb: xhci-mtk: fix ISOC error when interval is zero - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear - fuse: use READ_ONCE on congestion_threshold and max_background - IB/iser: Fix possible NULL deref at iser_inv_desc() - media: ov2680: fix null dereference at power on - [s390x] vdso: correct vdso mapping for compat tasks - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused - memfd: Use radix_tree_deref_slot_protected to avoid the warning. - slcan: Fix memory leak in error path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.86 - spi: mediatek: use correct mata->xfer_len when in fifo transfer - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() - tee: optee: add missing of_node_put after of_device_is_available - Revert "OPP: Protect dev_list with opp_table lock" - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - idr: Fix idr_get_next race with idr_remove - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - [i386] bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 - [i386] bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} - net: ovs: fix return type of ndo_start_xmit function - net: xen-netback: fix return type of ndo_start_xmit function - [armhf] dts: dra7: Enable workaround for errata i870 in PCIe host mode - [armhf] dts: omap5: enable OTG role for DWC3 controller - [arm64] net: hns3: Fix for netdev not up problem when setting mtu - [arm64] net: hns3: Fix loss of coal configuration while doing reset - f2fs: return correct errno in f2fs_gc - [armhf] dts: sun8i: h3-h5: ir register size should be the whole memory block - [armhf] dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet PHY - tcp: up initial rmem to 128KB and SYN rwin to around 64KB - SUNRPC: Fix priority queue fairness - ACPI / LPSS: Make acpi_lpss_find_device() also find PCI devices - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq - f2fs: keep lazytime on remount - IB/hfi1: Error path MAD response size is incorrect - IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds - mt76x2: fix tx power configuration for VHT mcs 9 - mt76x2: disable WLAN core before probe - mt76: fix handling ps-poll frames - [arm64,armhf] iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() - [arm64,armhf] iommu/arm-smmu-v3: Fix unexpected CMD_SYNC timeout - [arm64,armhf] kvm: Fix stage2_flush_memslot for 4 level page table - [arm64] numa: Report correct memblock range for the dummy node - ath10k: fix vdev-start timeout on error - rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface - ata: ahci_brcm: Allow using driver or DSL SoCs - PM / devfreq: Fix devfreq_add_device() when drivers are built as modules. - PM / devfreq: Fix handling of min/max_freq == 0 - PM / devfreq: stopping the governor before device_unregister() - ath9k: fix reporting calculated new FFT upper max - selftests/tls: Fix recv(MSG_PEEK) & splice() test cases - usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() - usb: dwc3: gadget: Check ENBLSLPM before sending ep command - nl80211: Fix a GET_KEY reply attribute - [arm64,armhf] irqchip/irq-mvebu-icu: Fix wrong private data retrieval - watchdog: core: fix null pointer dereference when releasing cdev - watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D - [ppc64el,powerpc64] Inform the userspace about TCE update failures - printk: Do not miss new messages when replaying the log - printk: CON_PRINTBUFFER console registration is a bit racy - dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction - dmaengine: timb_dma: Use proper enum in td_prep_slave_sg - [x86] ALSA: hda: Fix mismatch for register mask and value in ext controller. - ext4: fix build error when DX_DEBUG is defined - clk: keystone: Enable TISCI clocks if K3_ARCH - sunrpc: Fix connect metrics - [x86] PCI: Apply VMD's AERSID fixup generically - mei: samples: fix a signedness bug in amt_host_if_call() - cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update - cxgb4: Use proper enum in IEEE_FAUX_SYNC - [ppc64el,powerpc*] Fix DTL buffer registration - [ppc64el,powerpc*] Fix how we iterate over the DTL entries - [ppc64el,powerpc*] xive: Move a dereference below a NULL test - mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer - PM / hibernate: Check the success of generating md5 digest before hibernation - tools: PCI: Fix compilation warnings - ice: Fix forward to queue group logic - md: allow metadata updates while suspending an array - fix - ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit - i40e: Use proper enum in i40e_ndo_set_vf_link_state - ixgbe: Fix crash with VFs and flow director on interface flap - IB/mthca: Fix error return code in __mthca_init_one() - IB/rxe: avoid srq memory leak - RDMA/hns: Bugfix for reserved qp number - RDMA/hns: Submit bad wr when post send wr exception - RDMA/hns: Bugfix for CM test - RDMA/hns: Limit the size of extend sge of sq - IB/mlx4: Avoid implicit enumerated type conversion - rpmsg: glink: smem: Support rx peak for size less than 4 bytes - msm/gpu/a6xx: Force of_dma_configure to setup DMA for GMU - OPP: Return error on error from dev_pm_opp_get_opp_count() - ACPICA: Never run _REG on system_memory and system_IO - cpuidle: menu: Fix wakeup statistics updates for polling state - ASoC: qdsp6: q6asm-dai: checking NULL vs IS_ERR() - [ppc64el,powerpc*] time: Use clockevents_register_device(), fixing an issue with large decrementer - [ppc64el,powerpc64] radix: Explicitly flush ERAT with local LPID invalidation - ata: ep93xx: Use proper enums for directions - qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers - media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote - media: pxa_camera: Fix check for pdev->dev.of_node - media: rcar-vin: fix redeclaration of symbol - media: i2c: adv748x: Support probing a single output - [x86] ALSA: hda/sigmatel - Disable automute for Elo VuPoint - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED - [ppc64el,powerpc64] Book3S PR: Exiting split hack mode needs to fixup both PC and LR - USB: serial: cypress_m8: fix interrupt-out transfer length - usb: dwc2: disable power_down on rockchip devices - mtd: physmap_of: Release resources on error - cpu/SMT: State SMT is disabled even with nosmt and without "=force" - brcmfmac: reduce timeout for action frame scan - brcmfmac: fix full timeout waiting for action frame on-channel tx - qtnfmac: request userspace to do OBSS scanning if FW can not - qtnfmac: pass sgi rate info flag to wireless core - qtnfmac: inform wireless core about supported extended capabilities - qtnfmac: drop error reports for out-of-bounds key indexes - [armhf] clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume - [armhf] clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420 - [armhf] clk: samsung: Use clk_hw API for calling clk framework from clk notifiers - printk: Correct wrong casting - NFSv4.x: fix lock recovery during delegation recall - dmaengine: ioat: fix prototype of ioat_enumerate_channels - media: ov5640: fix framerate update - media: cec-gpio: select correct Signal Free Time - gfs2: slow the deluge of io error messages - i2c: omap: use core to detect 'no zero length' quirk - i2c: qup: use core to detect 'no zero length' quirk - i2c: tegra: use core to detect 'no zero length' quirk - i2c: zx2967: use core to detect 'no zero length' quirk - Input: st1232 - set INPUT_PROP_DIRECT property - Input: silead - try firmware reload after unsuccessful resume - soc: fsl: bman_portals: defer probe after bman's probe - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware - tc-testing: fix build of eBPF programs - remoteproc: Check for NULL firmwares in sysfs interface - remoteproc: qcom: q6v5: Fix a race condition on fatal crash - kexec: Allocate decrypted control pages for kdump if SME is enabled - [x86] olpc: Fix build error with CONFIG_MFD_CS5535=m - dmaengine: rcar-dmac: set scatter/gather max segment size - xfrm: use correct size to initialise sp->ovec - ACPI / SBS: Fix rare oops when removing modules - iwlwifi: mvm: don't send keys when entering D3 - xsk: proper AF_XDP socket teardown ordering - [amd64] fsgsbase: Fix ptrace() to read the FS/GS base accurately - mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1 - mmc: tmio: Fix SCC error detection - mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size - fbdev: sbuslib: use checked version of put_user() - fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() - fbdev: fix broken menu dependencies - reset: Fix potential use-after-free in __of_reset_control_get() - bcache: account size of buckets used in uuid write to ca->meta_sectors_written - bcache: recal cached_dev_sectors on detach - [x86] platform: mlx-platform: Properly use mlxplat_mlxcpld_msn201x_items - media: dw9714: Fix error handling in probe function - media: dw9807-vcm: Fix probe error handling - media: cx18: Don't check for address of video_dev - mtd: spi-nor: cadence-quadspi: Use proper enum for dma_[un]map_single - mtd: devices: m25p80: Make sure WRITE_EN is issued before each write - [x86] intel_rdt: Introduce utility to obtain CDP peer - [x86] intel_rdt: CBM overlap should also check for overlap with CDP peer - mmc: mmci: expand startbiterr to irqmask and error check - [s390x] kasan: avoid vdso instrumentation - [s390x] kasan: avoid instrumentation of early C code - [s390x] kasan: avoid user access code instrumentation - [i386] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() - backlight: lm3639: Unconditionally call led_classdev_unregister - mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable - printk: Give error on attempt to set log buffer length to over 2G - media: isif: fix a NULL pointer dereference bug - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads - media: cx231xx: fix potential sign-extension overflow on large shift - media: venus: vdec: fix decoded data size - [x86] ALSA: hda/ca0132 - Fix input effect controls for desktop cards - lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync - lightnvm: pblk: fix incorrect min_write_pgs - lightnvm: pblk: guarantee emeta on line close - lightnvm: pblk: fix write amplificiation calculation - lightnvm: pblk: guarantee mw_cunits on read buffer - lightnvm: do no update csecs and sos on 1.2 - lightnvm: pblk: fix error handling of pblk_lines_init() - lightnvm: pblk: consider max hw sectors supported for max_write_pgs - [x86] kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error - bpf: btf: Fix a missing check bug - net: fix generic XDP to handle if eth header was mangled - gpio: syscon: Fix possible NULL ptr usage - spi: fsl-lpspi: Prevent FIFO under/overrun by default - pinctrl: gemini: Mask and set properly - spi: spidev: Fix OF tree warning logic - [armel,armhf] 8802/1: Call syscall_trace_exit even when system call skipped - [x86] mm: Do not warn about PCI BIOS W+X mappings - orangefs: rate limit the client not running info message - pinctrl: gemini: Fix up TVC clock group - scsi: arcmsr: clean up clang warning on extraneous parentheses - [x86] hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors - hwmon: (nct6775) Fix names of DIMM temperature sources - hwmon: (pwm-fan) Silence error on probe deferral - hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros - hwmon: (npcm-750-pwm-fan) Change initial pwm target to 255 - selftests: forwarding: Have lldpad_app_wait_set() wait for unknown, too - net: sched: avoid writing on noop_qdisc - netfilter: nft_compat: do not dump private area - misc: cxl: Fix possible null pointer dereference - mac80211: minstrel: fix using short preamble CCK rates on HT clients - mac80211: minstrel: fix CCK rate group streams value - mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode - spi: rockchip: initialize dma_slave_config properly - mlxsw: spectrum_switchdev: Check notification relevance based on upper device - [armhf] dts: omap5: Fix dual-role mode on Super-Speed port - tcp: start receiver buffer autotuning sooner - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate - PM / devfreq: Fix static checker warning in try_then_request_governor - tools: PCI: Fix broken pcitest compilation - [ppc64el,powerpc*] time: Fix clockevent_decrementer initalisation for PR KVM - mmc: tmio: fix SCC error handling to avoid false positive CRC error - [x86] resctrl: Fix rdt_find_domain() return value and checks https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.87 - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel - net/mlx4_en: fix mlx4 ethtool -N insertion - net/mlx4_en: Fix wrong limitation for number of TX rings - net: rtnetlink: prevent underflows in do_setvfinfo() - net/sched: act_pedit: fix WARN() in the traffic path - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key - sfc: Only cancel the PPS workqueue if it exists - net/mlx5e: Fix set vf link state error flow - net/mlxfw: Verify FSM error code translation doesn't exceed array size - net/mlx5: Fix auto group size calculation - vhost/vsock: split packets to send using multiple buffers - gpio: max77620: Fixup debounce delays - tools: gpio: Correctly add make dependencies for gpio_utils - nbd:fix memory leak in nbd_get_socket() - virtio_console: allocate inbufs in add_port() only if it is needed - Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()" - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() - [x86] drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles - [x86] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() - mwifiex: Fix NL80211_TX_POWER_LIMITED - ALSA: isight: fix leak of reference to firewire unit in error path of .probe callback - crypto: testmgr - fix sizeof() on COMP_BUF_SIZE - printk: lock/unlock console only for new logbuf entries - printk: fix integer overflow in setup_log_buf() - pinctrl: madera: Fix uninitialized variable bug in madera_mux_set_mux - PCI: cadence: Write MSI data with 32bits - gfs2: Fix marking bitmaps non-full - pty: fix compat ioctls - synclink_gt(): fix compat_ioctl() - [ppc64] Fix signedness bug in update_flash_db() - [powerpc] boot: Fix opal console in boot wrapper - [ppc64*,powerpc] boot: Disable vector instructions - [ppc64*,powerpc] eeh: Fix null deref for devices removed during EEH - [ppc64*,powerpc] eeh: Fix use of EEH_PE_KEEP on wrong field - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr() - mt76: do not store aggregation sequence number for null-data frames - mt76x0: phy: fix restore phase in mt76x0_phy_recalibrate_after_assoc - brcmsmac: AP mode: update beacon when TIM changes - ath10k: set probe request oui during driver start - ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem - skd: fixup usage of legacy IO API - cdrom: don't attempt to fiddle with cdo->capability - spi: sh-msiof: fix deferred probing - mmc: mediatek: fill the actual clock for mmc debugfs - mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail - PCI: mediatek: Fix class type for MT7622 to PCI_CLASS_BRIDGE_PCI - btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag - btrfs: handle error of get_old_root - gsmi: Fix bug in append_to_eventlog sysfs handler - misc: mic: fix a DMA pool free failure - w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for unsigned, count for max size). - [m68k] fix command-line parsing when passed from u-boot - RDMA/bnxt_re: Avoid NULL check after accessing the pointer - RDMA/bnxt_re: Fix qp async event reporting - RDMA/bnxt_re: Avoid resource leak in case the NQ registration fails - pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' - pwm: lpss: Only set update bit if we are actually changing the settings - amiflop: clean up on errors during setup - qed: Align local and global PTT to propagate through the APIs. - scsi: ips: fix missing break in switch - nfp: bpf: protect against mis-initializing atomic counters - [x86] KVM: nVMX: reset cache/shadows when switching loaded VMCS - [x86] KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode() - [x86] KVM: Fix invvpid and invept register operand size in 64-bit mode - clk: tegra: Fixes for MBIST work around - scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler - scsi: isci: Change sci_controller_start_task's return type to sci_status - scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event - scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param - nvmet: avoid integer overflow in the discard code - nvmet-fcloop: suppress a compiler warning - nvme-pci: fix hot removal during error handling - PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks - clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk - ASoC: tegra_sgtl5000: fix device_node refcounting - scsi: dc395x: fix dma API usage in srb_done - scsi: dc395x: fix DMA API usage in sg_update_list - scsi: zorro_esp: Limit DMA transfers to 65535 bytes - net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed - net: fix warning in af_unix - xfs: fix use-after-free race in xfs_buf_rele - xfs: clear ail delwri queued bufs on unmount of shutdown fs - kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack - ACPI / scan: Create platform device for INT33FE ACPI nodes - PM / Domains: Deal with multiple states but no governor in genpd - ALSA: i2c/cs8427: Fix int to char conversion - macintosh/windfarm_smu_sat: Fix debug output - PCI: vmd: Detach resources after stopping root bus - USB: misc: appledisplay: fix backlight update_status return code - usbip: tools: fix atoi() on non-null terminated string - sctp: use sk_wmem_queued to check for writable space - dm raid: avoid bitmap with raid4/5/6 journal device - selftests/bpf: fix file resource leak in load_kallsyms - SUNRPC: Fix a compile warning for cmpxchg64() - sunrpc: safely reallow resvport min/max inversion - atm: zatm: Fix empty body Clang warnings - [s390x] perf: Return error when debug_register fails - swiotlb: do not panic on mapping failures - spi: omap2-mcspi: Set FIFO DMA trigger level to word length - [x86] intel_rdt: Prevent pseudo-locking from using stale pointers - sparc: Fix parport build warnings. - [ppc64*,powerpc] pseries: Export raw per-CPU VPA data via debugfs - [ppc64*,powerpc] mm/radix: Fix off-by-one in split mapping logic - [ppc64*,powerpc] mm/radix: Fix overuse of small pages in splitting logic - [ppc64*,powerpc] mm/radix: Fix small page at boundary when splitting - [ppc64*] radix: Fix radix__flush_tlb_collapsed_pmd double flushing pmd - selftests/bpf: fix return value comparison for tests in test_libbpf.sh - tools: bpftool: fix completion for "bpftool map update" - ceph: fix dentry leak in ceph_readdir_prepopulate - ceph: only allow punch hole mode in fallocate - thermal: armada: fix a test in probe() - f2fs: fix to spread clear_cold_data() - f2fs: spread f2fs_set_inode_flags() - mISDN: Fix type of switch control variable in ctrl_teimanager - qlcnic: fix a return in qlcnic_dcb_get_capability() - net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode - mfd: arizona: Correct calling of runtime_put_sync - mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values - [x86] mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well - mfd: max8997: Enale irq-wakeup unconditionally - net: socionext: Stop PHY before resetting netsec - fs/cifs: fix uninitialised variable warnings - spi: uniphier: fix incorrect property items - selftests/ftrace: Fix to test kprobe $comm arg only if available - selftests: watchdog: fix message when /dev/watchdog open fails - selftests: watchdog: Fix error message. - selftests: kvm: Fix -Wformat warnings - selftests: fix warning: "_GNU_SOURCE" redefined - net: ethernet: cadence: fix socket buffer corruption problem - bpf: devmap: fix wrong interface selection in notifier_call - bpf, btf: fix a missing check bug in btf_parse - [sparc64] Rework xchg() definition to avoid warnings. - [arm64] lib: use C string functions with KASAN enabled - fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle() - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock - tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage - mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition - macsec: update operstate when lower device changes - macsec: let the administrator set UP state even if lowerdev is down - block: fix the DISCARD request merge - i2c: uniphier-f: make driver robust against concurrency - i2c: uniphier-f: fix occasional timeout error - i2c: uniphier-f: fix race condition when IRQ is cleared - um: Make line/tty semantics use true write IRQ - vfs: avoid problematic remapping requests into partial EOF block - ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12 - [ppc64*,powerpc] xmon: Relax frame size for clang - [ppc64*,powerpc] selftests/ptrace: Fix out-of-tree build - [ppc64*,powerpc] selftests/signal: Fix out-of-tree build - [ppc64*,powerpc] selftests/switch_endian: Fix out-of-tree build - [ppc64*,powerpc] selftests/cache_shape: Fix out-of-tree build - block: call rq_qos_exit() after queue is frozen - mm/gup_benchmark.c: prevent integer overflow in ioctl - linux/bitmap.h: handle constant zero-size bitmaps correctly - linux/bitmap.h: fix type of nbits in bitmap_shift_right() - lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf - hfsplus: fix BUG on bnode parent update - hfs: fix BUG on bnode parent update - hfsplus: prevent btree data loss on ENOSPC - hfs: prevent btree data loss on ENOSPC - hfsplus: fix return value of hfsplus_get_block() - hfs: fix return value of hfs_get_block() - hfsplus: update timestamps on truncate() - hfs: update timestamp on truncate() - fs/hfs/extent.c: fix array out of bounds read of array extent - kernel/panic.c: do not append newline to the stack protector panic string - mm/memory_hotplug: make add_memory() take the device_hotplug_lock - mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock - [ppc64*,powerprc] powerpc/powernv: hold device_hotplug_lock when calling device_online() - igb: shorten maximum PHC timecounter update interval - fm10k: ensure completer aborts are marked as non-fatal after a resume - [arm64] net: hns3: bugfix for buffer not free problem during resetting - [arm64] net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem - [arm64] net: hns3: bugfix for is_valid_csq_clean_head() - [arm64] net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read - ntb_netdev: fix sleep time mismatch - [x86] ntb: intel: fix return value for ndev_vec_mask() - irq/matrix: Fix memory overallocation - nvme-pci: fix conflicting p2p resource adds - [arm64] makefile fix build of .i file in external module case - [x86] tools/power turbosat: fix AMD APIC-id output - mm: handle no memcg case in memcg_kmem_charge() properly - ocfs2: without quota support, avoid calling quota recovery - ocfs2: don't use iocb when EIOCBQUEUED returns - ocfs2: don't put and assigning null to bh allocated outside - ocfs2: fix clusters leak in ocfs2_defrag_extent() - net: do not abort bulk send on BQL status - sched/topology: Fix off by one bug - sched/fair: Don't increase sd->balance_interval on newidle balance - openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS - [armhf] dts: imx6sx-sdb: Fix enet phy regulator - [arm64] sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock - soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL - audit: print empty EXECVE args - sock_diag: fix autoloading of the raw_diag module - net: bpfilter: fix iptables failure if bpfilter_umh is disabled - nds32: Fix bug in bitfield.h - media: ov13858: Check for possible null pointer - btrfs: avoid link error with CONFIG_NO_AUTO_INLINE - wil6210: fix debugfs memory access alignment - wil6210: fix L2 RX status handling - wil6210: fix RGF_CAF_ICR address for Talyn-MB - wil6210: fix locking in wmi_call - ath10k: snoc: fix unbalanced clock error handling - wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()' - rtl8xxxu: Fix missing break in switch - brcmsmac: never log "tid x is not agg'able" by default - wireless: airo: potential buffer overflow in sprintf() - rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information - net: dsa: bcm_sf2: Turn on PHY to allow successful registration - scsi: mpt3sas: Fix Sync cache command failure during driver unload - scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices - scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11 - scsi: megaraid_sas: Fix msleep granularity - scsi: megaraid_sas: Fix goto labels in error handling - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point - scsi: lpfc: Correct loss of fc4 type on remote port address change - usb: typec: tcpm: charge current handling for sink during hard reset - dlm: fix invalid free - dlm: don't leak kernel pointer to userspace - vrf: mark skb for multicast or link-local as enslaved to VRF - clk: tegra20: Turn EMC clock gate into divider - ACPICA: Use %d for signed int print formatting instead of %u - net: bcmgenet: return correct value 'ret' from bcmgenet_power_down - of: unittest: allow base devicetree to have symbol metadata - of: unittest: initialize args before calling of_*parse_*() - tools: bpftool: pass an argument to silence open_obj_pinned() - cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces - pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues - pinctrl: bcm2835: Use define directive for BCM2835_PINCONF_PARAM_PULL - pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT - pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD - PCI: keystone: Use quirk to limit MRRS for K2G - nvme-pci: fix surprise removal - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch - i2c: uniphier-f: fix timeout error after reading 8 bytes - mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock - ipv6: Fix handling of LLA with VRF and sockets bound to VRF - cfg80211: call disconnect_wk when AP stops - mm/page_io.c: do not free shared swap slots - Bluetooth: Fix invalid-free in bcsp_close() - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe - ath9k_hw: fix uninitialized variable data - md/raid10: prevent access of uninitialized resync_pages offset - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() - net: phy: dp83867: fix speed 10 in sgmii mode - net: phy: dp83867: increase SGMII autoneg timer duration - ocfs2: remove ocfs2_is_o2cb_active() - [arm*] 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary - ARC: perf: Accommodate big-endian CPU - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - y2038: futex: Move compat implementation into futex.c - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - nfc: port100: handle command failure cleanly - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - virtio_ring: fix return code on DMA mapping fails - USBIP: add config dependency for SGL_ALLOC - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [ppc64*] support nospectre_v2 cmdline option - [ppc64*] book3s: Fix link stack flush on context switch (CVE-2019-18660) - [ppc64*, powerpc] PPC: Book3S HV: Flush link stack on guest exit to host kernel - PM / devfreq: Fix kernel oops on governor module load . [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) * [armhf, arm64] Backport devicetree for enabling support for the Raspberry PI 3 A+ . [ Salvatore Bonaccorso ] * ixgbe: Fix secpath usage for IPsec TX offload (Closes: #930443) * ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (Closes: #945023) * [x86] KVM: x86: introduce is_pae_paging (Regression in 4.19.77) * [rt] Refresh 0011-sched-fair-Robustify-CFS-bandwidth-timer-locking.patch (context changes in 4.19.84) . [ Bastian Blank ] * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341) . [ Noah Meyerhans ] * drivers/net/ethernet/amazon: Backport driver fixes from Linux 5.4 (Closes: #941291) * Bump ABI to 7 . [ Ben Hutchings ] * debian/bin/genpatch-rt: Fix series generation from git * [rt] Update to 4.19.82-rt30: - Drop changes in "fs/dcache: disable preemption on i_dir_seq's write side" that conflict with "Fix the locking in dcache_readdir() and friends" - Rewrite "fs/aio: simple simple work" using kthread_work - Rewrite "thermal: Defer thermal wakups to threads" using kthread_work - Rewrite "block: blk-mq: move blk_queue_usage_counter_release() into process context" using kthread_work - workqueue: rework . [ Benjamin Poirier ] * tools/perf: Add python3 support to scripts (Closes: #944641) . [ Aurelien Jarno ] * [rt] Refresh 0025-NFSv4-replace-seqcount_t-with-a-seqlock_t.patch (context changes in 4.19.86) * [rt] Refresh 0202-net-Qdisc-use-a-seqlock-instead-seqcount.patch (context changes in 4.19.86) * [rt] Refresh 0057-printk-Add-a-printk-kill-switch.patch (context changes in 4.19.87) * [rt] Refresh 0207-printk-Make-rt-aware.patch (context changes in 4.19.87) linux-signed-arm64 (4.19.67+2+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u2 . * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - KVM: x86: use Intel speculation bugs and features as derived in generic x86 code - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: Convert kvm_lock to a mutex - kvm: x86: Do not release the page inside mmu_set_spte() - KVM: x86: make FNAME(fetch) and __direct_map more similar - KVM: x86: remove now unneeded hugepage gfn adjustment - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON - KVM: x86: add tracepoints around __direct_map and FNAME(fetch) - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA linux-signed-arm64 (4.19.67+2+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-i386 (4.19.98+1) buster; urgency=medium . * Sign kernel from linux 4.19.98-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.88 - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate - ASoC: compress: fix unsigned integer overflow check - reset: Fix memory leak in reset_control_array_put() - [armhf] clk: samsung: exynos5433: Fix error paths - [armel/marvell,armhf] ASoC: kirkwood: fix external clock probe defer - [armel/marvell,armhf] ASoC: kirkwood: fix device remove ordering - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic - [armhf] dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts - reset: fix reset_control_ops kerneldoc comment - [armhf,arm64] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend - [ppc64el] bpf: Fix tail call implementation - idr: Fix integer overflow in idr_for_each_entry - idr: Fix idr_alloc_u32 on 32-bit systems - [x86] resctrl: Prevent NULL pointer dereference when reading mondata - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay timeout - bridge: ebtables: don't crash when using dnat target in output chains - can: peak_usb: report bus recovery as well - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error - [armhf] can: flexcan: increase error counters if skb enqueueing via can_rx_offload_queue_sorted() fails - [arm64] watchdog: meson: Fix the wrong value of left time - ceph: return -EINVAL if given fsc mount option on kernel w/o support - net/fq_impl: Switch to kvmalloc() for memory allocation - mac80211: fix station inactive_time shortly after boot - block: drbd: remove a stray unlock in __drbd_send_protocol() - scsi: target/tcmu: Fix queue_cmd_ring() declaration - scsi: lpfc: Fix kernel Oops due to null pring pointers - scsi: lpfc: Fix dif and first burst use in write commands - tracing: Lock event_mutex before synth_event_mutex - [armhf] dts: imx*: Fix memory node duplication - [armhf] dts: Fix hsi gdd range for omap4 - [arm64] mm: Prevent mismatched 52-bit VA support - [arm64] smp: Handle errors reported by the firmware - [armhf] bus: ti-sysc: Check for no-reset and no-idle flags at the child level - [arm64] RDMA/hns: Fix the bug while use multi-hop of pbl - [x86] RDMA/vmw_pvrdma: Use atomic memory allocation in create AH - [armhf] PM / AVS: SmartReflex: NULL check before some freeing functions is not needed - xfs: zero length symlinks are not valid - ACPI / LPSS: Ignore acpi_device_fix_up_power() return value - scsi: lpfc: Enable Management features for IF_TYPE=6 - scsi: qla2xxx: Fix NPIV handling for FC-NVMe - scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port - nvme: provide fallback for discard alloc failure - [s390x] zcrypt: make sysfs reset attribute trigger queue reset - crypto: user - support incremental algorithm dumps - mwifiex: fix potential NULL dereference and use after free - mwifiex: debugfs: correct histogram spacing, formatting - brcmfmac: set F2 watermark to 256 for 4373 - brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 - rtl818x: fix potential use after free - bcache: do not check if debug dentry is ERR or NULL explicitly on remove - bcache: do not mark writeback_running too early - xfs: require both realtime inodes to mount - nvme: fix kernel paging oops - ubifs: Fix default compression selection in ubifs - ubi: Put MTD device after it is not used - ubi: Do not drop UBI device reference before using - iwlwifi: move iwl_nvm_check_version() into dvm - iwlwifi: mvm: force TCM re-evaluation on TCM resume - iwlwifi: pcie: fix erroneous print - iwlwifi: pcie: set cmd_len in the correct place - [armhf,arm64] gpio: pca953x: Fix AI overflow on PCAL6524 - gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB - [x86] kvm: vmx: Set IA32_TSC_AUX for legacy mode guests - [x86] Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" - [x86] Revert "KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode()" - VSOCK: bind to random port for VMADDR_PORT_ANY - [amd64] mmc: meson-gx: make sure the descriptor is stopped on errors - [armhf] mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET - [armhf] usb: ehci-omap: Fix deferred probe for phy handling - btrfs: Check for missing device before bio submission in btrfs_map_bio - btrfs: fix ncopies raid_attr for RAID56 - btrfs: dev-replace: set result code of cancel by status of scrub - Btrfs: allow clear_extent_dirty() to receive a cached extent state record - btrfs: only track ref_heads in delayed_ref_updates - [x86] HID: intel-ish-hid: fixes incorrect error handling - serial: 8250: Rate limit serial port rx interrupts during input overruns - [x86] kprobes/xen: blacklist non-attachable xen interrupt functions - xen/pciback: Check dev_data before using it - kprobes: Blacklist symbols in arch-defined prohibited area - [amd64] kprobes: Show x86-64 specific blacklisted symbols correctly - [armhf] memory: omap-gpmc: Get the header of the enum - net/mlx5: Continue driver initialization despite debugfs failure - netfilter: nf_nat_sip: fix RTP/RTCP source port translations - exofs_mount(): fix leaks on failure exits - bnxt_en: Return linux standard errors in bnxt_ethtool.c - bnxt_en: Save ring statistics before reset. - bnxt_en: query force speeds before disabling autoneg mode. - [s390x] KVM: unregister debug feature on failing arch init - dm flakey: Properly corrupt multi-page bios. - gfs2: take jdata unstuff into account in do_grow - dm raid: fix false -EBUSY when handling check/repair message - xfs: Align compat attrlist_by_handle with native implementation. - xfs: Fix bulkstat compat ioctls on x32 userspace. - IB/qib: Fix an error code in qib_sdma_verbs_send() - vxlan: Fix error path in __vxlan_dev_create() - [ppc64el] xmon: fix dump_segments() - drivers/regulator: fix a missing check of return value - Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer - scsi: qla2xxx: deadlock by configfs_depend_item - scsi: csiostor: fix incorrect dma device in case of vport - brcmfmac: Fix access point mode - ath6kl: Only use match sets when firmware supports it - ath6kl: Fix off by one error in scan completion - [ppc64el] perf: Fix unit_sel/cache_sel checks - [ppc64el] prom: fix early DEBUG messages - [ppc64el] mm: Make NULL pointer deferences explicit on bad page faults. - [ppc64el] vfio/spapr_tce: Get rid of possible infinite loop - [ppc64el] powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status - drbd: ignore "all zero" peer volume sizes in handshake - drbd: reject attach of unsuitable uuids even if connected - drbd: do not block when adjusting "disk-options" while IO is frozen - drbd: fix print_st_err()'s prototype to match the definition - IB/rxe: Make counters thread safe - bpf/cpumap: make sure frame_size for build_skb is aligned if headroom isn't - [armhf] regulator: tps65910: fix a missing check of return value - [ppc64el] powerpc/pseries: Fix node leak in update_lmb_associativity_index() - net/netlink_compat: Fix a missing check of nla_parse_nested - net/net_namespace: Check the return value of register_pernet_subsys() - f2fs: fix block address for __check_sit_bitmap - f2fs: fix to dirty inode synchronously - [armhf] net: dsa: bcm_sf2: Propagate error value from mdio_write - atl1e: checking the status of atl1e_write_phy_reg - tipc: fix a missing check of genlmsg_put - net: marvell: fix a missing check of acpi_match_device - ocfs2: clear journal dirty flag after shutdown journal - vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n - mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() - mm/page_alloc.c: use a single function to free page - mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() - netfilter: nf_tables: fix a missing check of nla_put_failure - xprtrdma: Prevent leak of rpcrdma_rep objects - infiniband/qedr: Potential null ptr dereference of qp - lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk - lib/genalloc.c: use vzalloc_node() to allocate the bitmap - drivers/base/platform.c: kmemleak ignore a known leak - lib/genalloc.c: include vmalloc.h - mtd: Check add_mtd_device() ret code - tipc: fix memory leak in tipc_nl_compat_publ_dump - net/core/neighbour: tell kmemleak about hash tables - [armhf,arm64] ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs - PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() - net/core/neighbour: fix kmemleak minimal reference count for hash tables - serial: 8250: Fix serial8250 initialization crash - [armhf] gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change - sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe - ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel - decnet: fix DN_IFREQ_SIZE - net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() - net/smc: don't wait for send buffer space when data was already sent - mm/hotplug: invalid PFNs from pfn_to_online_page() - xfs: end sync buffer I/O properly on shutdown error - net/smc: fix sender_free computation - blktrace: Show requests without sector - net/smc: fix byte_order for rx_curs_confirmed - tipc: fix skb may be leaky in tipc_link_input - sfc: initialise found bitmap in efx_ef10_mtd_probe - geneve: change NET_UDP_TUNNEL dependency to select - net: fix possible overflow in __sk_mem_raise_allocated() - net: ip_gre: do not report erspan_ver for gre or gretap - net: ip6_gre: do not report erspan_ver for ip6gre or ip6gretap - sctp: don't compare hb_timer expire date before starting it - bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() - mmc: core: align max segment size with logical block size - net: dev: Use unsigned integer as an argument to left-shift - kvm: properly check debugfs dentry before using it - bpf: drop refcount if bpf_map_new_fd() fails in map_create() - [arm64] net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED - [arm64] net: hns3: fix PFC not setting problem for DCB module - [arm64] net: hns3: fix an issue for hclgevf_ae_get_hdev - [arm64] net: hns3: fix an issue for hns3_update_new_int_gl - [x86] iommu/amd: Fix NULL dereference bug in match_hid_uid - apparmor: delete the dentry in aafs_remove() to avoid a leak - scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing - ACPI / APEI: Switch estatus pool to use vmalloc memory - [arm64] scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned - scsi: libsas: Check SMP PHY control function result - [arm64] RDMA/hns: Fix the bug with updating rq head pointer when flush cqe - [arm64] RDMA/hns: Bugfix for the scene without receiver queue - [arm64] RDMA/hns: Fix the state of rereg mr - [arm64] RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp - ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board - [ppc64el] pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (CVE-2019-12614) - xdp: fix cpumap redirect SKB creation bug - mtd: Remove a debug trace in mtdpart.c - [s390x] mm, gup: add missing refcount overflow checks on s390 - [armhf,arm64] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - thunderbolt: Power cycle the router if NVM authentication fails - xfrm: Fix memleak on xfrm state destroy - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE - [arm64] net: macb: fix error format in dev_err() - pwm: Clear chip_data in pwm_put() - macvlan: schedule bc_work even if error - net: psample: fix skb_over_panic - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - tipc: fix link name length check - sctp: cache netns in sctp_ep_common - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - [arm64] net: macb: add missed tasklet_kill - ext4: add more paranoia checking in ext4_expand_extra_isize handling (CVE-2019-19767) - [arm64] net: macb: Fix SUBNS increment and increase resolution - [arm64] net: macb driver, check for SKBTX_HW_TSTAMP - mtd: spi-nor: cast to u64 to avoid uint overflows - tcp: exit if nothing to retransmit on RTO timeout - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform: hp-wmi: Fix ACPI errors caused by passing 0 as input size https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89 - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071) - [arm64] tegra: Fix 'active-low' warning for Jetson TX1 regulator - usb: gadget: u_serial: add missing port entry locking - [arm64] tty: serial: msm_serial: Fix flow control - [armhf,arm64] serial: pl011: Fix DMA ->flush_buffer() - serial: serial_core: Perform NULL checks for break_ctl ops - autofs: fix a leak in autofs_expire_indirect() - [arm64] RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN - iwlwifi: pcie: don't consider IV len in A-MSDU - exportfs_decode_fh(): negative pinned may become positive without the parent locked - audit_get_nd(): don't unlock parent too early - xfrm: release device reference for invalid state - sched/core: Avoid spurious lock dependencies - perf/core: Consistently fail fork on allocation failures - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() - [armhf,arm64] drm/sun4i: tcon: Set min division of TCON0_DCLK to 1. - rsxx: add missed destroy_workqueue calls in remove - i2c: core: fix use after free in of_i2c_notify - serial: core: Allow processing sysrq at port unlock time - cxgb4vf: fix memleak in mac_hlist initialization - iwlwifi: mvm: synchronize TID queue removal - iwlwifi: trans: Clear persistence bit when starting the FW - iwlwifi: mvm: Send non offchannel traffic via AP sta - [armhf] 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+ - audit: Embed key into chunk - netfilter: nf_tables: don't use position attribute on rule replacement - net/mlx5: Release resource on error flow - [arm64] clk: sunxi-ng: a64: Fix gate bit of DSI DPHY - ice: Fix NVM mask defines - dlm: fix possible call to kfree() for non-initialized pointer - [armhf] dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1 - [armhf,arm64] rtc: max77686: Fix the returned value in case of error in 'max77686_rtc_read_time()' - i40e: don't restart nway if autoneg not supported - virtchnl: Fix off by one error - [armhf] clk: rockchip: fix rk3188 sclk_smc gate data - [armhf] clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering - [armhf] dts: rockchip: Fix rk3288-rock2 vcc_flash name - dlm: fix missing idr_destroy for recover_idr - [armhf,arm64] net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2 - [s390x] scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the CDB - [s390x] scsi: zfcp: drop default switch case which might paper over missing case - [armhf] bus: ti-sysc: Fix getting optional clocks in clock_roles - [armhf] dts: imx6: RDU2: fix eGalax touchscreen node - crypto: ecc - check for invalid values in the key verification test - crypto: bcm - fix normal/non key hash algorithm failure - [arm64] dts: zynqmp: Fix node names which contain "_" - [arm64] pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues - [arm*] firmware: raspberrypi: Fix firmware calls with large buffers - mm/vmstat.c: fix NUMA statistics updates - [arm64] clk: rockchip: fix I2S1 clock gate register for rk3328 - [arm64] clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 - sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit - regulator: Fix return value of _set_load() stub - USB: serial: f81534: fix reading old/new IC config - xfs: extent shifting doesn't fully invalidate page cache - net-next/hinic:fix a bug in set mac address - net-next/hinic: fix a bug in rx data flow - ice: Fix return value from NAPI poll - ice: Fix possible NULL pointer de-reference - iomap: FUA is wrong for DIO O_DSYNC writes into unwritten extents - iomap: sub-block dio needs to zeroout beyond EOF - iomap: dio data corruption and spurious errors when pipes fill - iomap: readpages doesn't zero page tail beyond EOF - iw_cxgb4: only reconnect with MPAv1 if the peer aborts - [mips*/octeon] octeon-platform: fix typing - net/smc: use after free fix in smc_wr_tx_put_slot() - [armhf] dts: exynos: Use Samsung SoC specific compatible for DWC2 module - media: pulse8-cec: return 0 when invalidating the logical address - media: cec: report Vendor ID after initialization - iwlwifi: fix cfg structs for 22000 with different RF modules - net/ipv6: re-do dad when interface has IFF_NOARP flag change - [x86] dmaengine: dw-dmac: implement dma protection control setting - [armhf,arm64] usb: dwc3: debugfs: Properly print/set link state for HS - [armhf,arm64] usb: dwc3: don't log probe deferrals; but do log other error codes - ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() - f2fs: fix to account preflush command for noflush_merge mode - f2fs: fix count of seg_freed to make sec_freed correct - f2fs: change segment to section in f2fs_ioc_gc_range - [armhf] dts: rockchip: Fix the PMU interrupt number for rv1108 - [armhf] dts: rockchip: Assign the proper GPIO clocks for rv1108 - f2fs: fix to allow node segment for GC by ioctl path - nvme: Free ctrl device name on init failure - dma-mapping: fix return type of dma_set_max_seg_size() - [armhf] serial: imx: fix error handling in console_setup - [armhf] i2c: imx: don't print error message on probe defer - [arm64] clk: meson: Fix GXL HDMI PLL fractional bits width - [armhf,arm64] gpu: host1x: Fix syncpoint ID field size on Tegra186 - lockd: fix decoding of TEST results - sctp: increase sk_wmem_alloc when head->truesize is increased - [x86] iommu/amd: Fix line-break in error log reporting - [armhf] dts: sun8i: a23/a33: Fix OPP DTC warnings - [armhf] dts: sun8i: v3s: Change pinctrl nodes to avoid warning - nfsd: fix a warning in __cld_pipe_upcall() - bpf: btf: implement btf_name_valid_identifier() - bpf: btf: check name validity for various types - [armhf] OMAP1/2: fix SoC name printing - [arm64] dts: meson-gxl-libretech-cc: fix GPIO lines names - [arm64] dts: meson-gxbb-nanopi-k2: fix GPIO lines names - [arm64] dts: meson-gxbb-odroidc2: fix GPIO lines names - [arm64] dts: meson-gxl-khadas-vim: fix GPIO lines names - net/x25: fix called/calling length calculation in x25_parse_address_block - net/x25: fix null_x25_address handling - tcp: make tcp_space() aware of socket backlog - tcp: fix off-by-one bug on aborting window-probing socket - tcp: fix SNMP under-estimation on failed retransmission - tcp: fix SNMP TCP timeout under-estimation - kbuild: fix single target build for external module - mtd: fix mtd_oobavail() incoherent returned value - [arm64] clk: meson: meson8b: fix the offset of vid_pll_dco's N value - [armhf,arm64] clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent - [arm64] clk: qcom: Fix MSM8998 resets - dlm: fix invalid cluster name warning - net/mlx4_core: Fix return codes of unsupported operations - pstore/ram: Avoid NULL deref in ftrace merging failure path - [mips*/octeon] cvmx_pko_mem_debug8: use oldest forward compatible definition - nfsd: Return EPERM, not EACCES, in some SETATTR cases - media: uvcvideo: Abstract streaming object lifetime - [armhf] dts: sun8i: h3: Fix the system-control register range - tty: Don't block on IO when ldisc change is pending - media: stkwebcam: Bugfix for wrong return values - sctp: frag_point sanity check - IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state - IB/hfi1: Close VNIC sdma_progress sleep window - mlx4: Use snprintf instead of complicated strcpy - [armhf] dts: sunxi: Fix PMU compatible strings - [armhf] dts: am335x-pdu001: Fix polarity of card detection input - net: aquantia: fix RSS table and key sizes - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - fuse: verify nlink - fuse: verify attributes - [x86] ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - [x86] ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - ALSA: pcm: oss: Avoid potential buffer overflows - [x86] ALSA: hda - Add mute led support for HP ProBook 645 G4 - [x86] Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus - [x86] Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers - [x86] Input: goodix - add upside-down quirk for Teclast X89 tablet - Input: Fix memory leak in psxpad_spi_probe - [i386] mm: Sync only to VMALLOC_END in vmalloc_sync_all() - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect - xfrm interface: fix memory leak on creation - xfrm interface: avoid corruption on changelink - xfrm interface: fix list corruption for x-netns - xfrm interface: fix management of phydev - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks - CIFS: Fix SMB2 oplock break processing - tty: vt: keyboard: reject invalid keycodes - can: slcan: Fix use-after-free Read in slcan_open - kernfs: fix ino wrap-around detection - jbd2: Fix possible overflow in jbd2_log_space_left() - [arm64] drm/msm: fix memleak on release - [i386] drm/i810: Prevent underflow in ioctl - [armhf,arm64] KVM: vgic: Don't rely on the wrong pending table - [x86] KVM: do not modify masked bits of shared MSRs - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES - [x86] KVM: Grab KVM's srcu lock when setting nested state - crypto: af_alg - cast ki_complete ternary op to int - [x86] crypto: ccp - fix uninitialized list head - crypto: ecdh - fix big endian bug in ECC library - crypto: user - fix memory leak in crypto_report (CVE-2019-19062) - mwifiex: update set_mac_address logic - can: ucan: fix non-atomic allocation in completion handler - RDMA/qib: Validate ->show()/store() callbacks before calling them - iomap: Fix pipe page leakage during splicing - thermal: Fix deadlock in thermal thermal_zone_device_check - vcs: prevent write access to vcsu devices (CVE-2019-19252) - binder: Fix race between mmap() and binder_alloc_print_pages() - binder: Handle start==NULL in binder_update_page_range() - ALSA: hda - Fix pending unsol events at shutdown - perf script: Fix invalid LBR/binary mismatch error - splice: don't read more than available pipe space - iomap: partially revert 4721a601099 (simulated directio short read on EFAULT) - xfs: add missing error check in xfs_prepare_shift() - ASoC: rsnd: fixup MIX kctrl registration - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) - net: qrtr: fix memort leak in qrtr_tun_write_iter (CVE-2019-19079) - appletalk: Fix potential NULL pointer dereference in unregister_snap_client (CVE-2019-19227) - appletalk: Set error code if register_snap_client failed https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.90 - usb: gadget: configfs: Fix missing spin_lock_init() - [x86] usb: gadget: pch_udc: fix use after free - scsi: qla2xxx: Fix driver unload hang - [arm64] media: venus: remove invalid compat_ioctl32 handler - USB: uas: honor flag to avoid CAPACITY16 - USB: uas: heed CAPACITY_HEURISTICS - usb: Allow USB device to be warm reset in suspended state - staging: rtl8188eu: fix interface sanity check - staging: rtl8712: fix interface sanity check - staging: gigaset: fix general protection fault on probe - staging: gigaset: fix illegal free on probe errors - staging: gigaset: add endpoint-type sanity check - usb: xhci: only set D3hot for pci device - xhci: Fix memory leak in xhci_add_in_port() - xhci: Increase STS_HALT timeout in xhci_suspend() - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. - [armhf] dts: pandora-common: define wl1251 as child node of mmc3 - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit - USB: atm: ueagle-atm: add missing endpoint check - USB: idmouse: fix interface sanity checks - USB: serial: io_edgeport: fix epic endpoint lookup - usb: roles: fix a potential use after free - USB: adutux: fix interface sanity check - usb: core: urb: fix URB structure initialization function - usb: mon: Fix a deadlock in usbmon between mmap and read - tpm: add check after commands attribs tab allocation - virtio-balloon: fix managed page counts when migrating pages between zones - [armhf,arm64] usb: dwc3: gadget: Fix logical condition - [armhf,arm64] usb: dwc3: ep0: Clear started flag on completion - btrfs: check page->mapping when loading free space cache - btrfs: use refcount_inc_not_zero in kill_all_nodes - Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc - Btrfs: fix negative subv_writers counter and data space leak after buffered write - btrfs: Avoid getting stuck during cyclic writebacks - btrfs: Remove btrfs_bio::flags member - Btrfs: send, skip backreference walking for extents with many references - btrfs: record all roots for rename exchange on a subvol - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer - rtlwifi: rtl8192de: Fix missing enable interrupt flag - ovl: fix corner case of non-unique st_dev;st_ino - ovl: relax WARN_ON() on rename to self - [armhf] hwrng: omap - Fix RNG wait loop timeout - dm writecache: handle REQ_FUA - dm zoned: reduce overhead of backing device checks - workqueue: Fix spurious sanity check failures in destroy_workqueue() - workqueue: Fix pwq ref leak in rescuer_thread() - ASoC: rt5645: Fixed buddy jack support. - ASoC: rt5645: Fixed typo for buddy jack support. - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report - md: improve handling of bio with REQ_PREFLUSH in md_flush_request() - blk-mq: avoid sysfs buffer overflow with too many CPU cores - cgroup: pids: use atomic64_t for pids->limit - ar5523: check NULL before memcpy() in ar5523_cmd() - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported - media: cec.h: CEC_OP_REC_FLAG_ values were swapped - cpuidle: Do not unset the driver if it is there already - erofs: zero out when listxattr is called with no xattr - [x86] intel_th: Fix a double put_device() in error path - [x86] intel_th: pci: Add Ice Lake CPU support - [x86] intel_th: pci: Add Tiger Lake CPU support - PM / devfreq: Lock devfreq in trans_stat_show - [ppc64el] cpufreq: powernv: fix stack bloat and hard limit on number of CPUs - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge - ACPI: OSL: only free map once in osl.c - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() - ACPI: PM: Avoid attaching ACPI PM domain to certain devices - [arm64] pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() - [armhf] pinctrl: samsung: Add of_node_put() before return in error path - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card - [armhf] dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity - ppdev: fix PPGETTIME/PPSETTIME ioctls - [ppc64el] Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB - [ppc64el] xive: Prevent page fault issues in the machine crash handler - [ppc64el] Allow flush_icache_range to work across ranges >4GB - [ppc64el] xive: Skip ioremap() of ESB pages for LSI interrupts - video/hdmi: Fix AVI bar unpack - quota: Check that quota is not dirty before release - ext2: check err when partial != NULL - quota: fix livelock in dquot_writeback_dquots - ext4: Fix credit estimate for final inode freeing - reiserfs: fix extended attributes on the root directory - block: fix single range discard merge - [s390x] scsi: zfcp: trace channel log even for FCP command responses - scsi: qla2xxx: Fix DMA unmap leak - scsi: qla2xxx: Fix hang in fcport delete path - scsi: qla2xxx: Fix session lookup in qlt_abort_work() - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value - scsi: qla2xxx: Fix message indicating vectors used by driver - scsi: qla2xxx: Fix SRB leak on switch command timeout - xhci: make sure interrupts are restored to correct state - usb: typec: fix use after free in typec_register_port() - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 - scsi: lpfc: Cap NPIV vports to 256 - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE - scsi: lpfc: Correct topology type reporting on G7 adapters - sch_cake: Correctly update parent qlen when splitting GSO packets - net/smc: do not wait under send_lock - [arm64] net: hns3: clear pci private data when unload hns3 driver - [arm64] net: hns3: change hnae3_register_ae_dev() to int - [arm64] net: hns3: Check variable is valid before assigning it to another - [arm64] scsi: hisi_sas: send primitive NOTIFY to SSP situation only - [arm64] scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G - [x86] MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models - [x86] MCE/AMD: Carve out the MC4_MISC thresholding quirk - ath10k: fix fw crash by moving chip reset after napi disabled - [ppc64el] Fix vDSO clock_getres() - ext4: work around deleting a file with i_nlink == 0 safely (CVE-2019-19447) - mm/shmem.c: cast the type of unmap_start to u64 - rtc: disable uie before setting time and enable after - splice: only read in as much information as there is pipe buffer space - ext4: fix a bug in ext4_wait_for_tail_page_commit - [armhf,arm64] mfd: rk808: Fix RK818 ID template - mm, thp, proc: report THP eligibility for each vma - [s390x] smp,vdso: fix ASCE handling - blk-mq: make sure that line break can be printed - workqueue: Fix missing kfree(rescuer) in destroy_workqueue() - perf callchain: Fix segfault in thread__resolve_callchain_sample() - gre: refetch erspan header from skb->data after pskb_may_pull() - sunrpc: fix crash when cache_head become valid before update - net/mlx5e: Fix SFF 8472 eeprom length - leds: trigger: netdev: fix handling on interface rename - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - of: overlay: add_changeset_property() memory leak - kernel/module.c: wakeup processes in module_wq on module unload - cifs: Fix potential softlockups while refreshing DFS cache - [x86] gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist - raid5: need to set STRIPE_HANDLE for batch head - scsi: qla2xxx: Change discovery state before PLOGI - [x86] iio: imu: mpu6050: add missing available scan masks - idr: Fix idr_get_next_ul race with idr_remove - of: unittest: fix memory leak in attach_node_and_children https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91 - inet: protect against too small mtu values. - mqprio: Fix out-of-bounds access in mqprio_dump - net: bridge: deny dev_set_mac_address() when unregistering - net: dsa: fix flow dissection on Tx path - net: ethernet: ti: cpsw: fix extra rx interrupt - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues - [arm64] net: thunderx: start phy before starting autonegotiation - openvswitch: support asymmetric conntrack - tcp: md5: fix potential overestimation of TCP option space - tipc: fix ordering of tipc module init and exit routine - net/mlx5e: Query global pause state before setting prio2buffer - tcp: fix rejected syncookies due to stale timestamps - tcp: tighten acceptance of ACKs not matching a child socket - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() - [arm64] Revert "arm64: preempt: Fix big-endian when checking preempt count in assembly" - mmc: block: Make card_busy_detect() a bit more generic - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response - PCI/PM: Always return devices to D0 when thawing - PCI: pciehp: Avoid returning prematurely from sysfs requests - [x86] PCI: Fix Intel ACS quirk UPDCR register address - PCI/MSI: Fix incorrect MSI-X masking on resume - [arm64] PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 - [arm64] rpmsg: glink: Set tail pointer to 0 at end of FIFO - [arm64] rpmsg: glink: Fix reuse intents memory leak issue - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case - [arm64] rpmsg: glink: Put an extra reference during cleanup - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling - [arm64] rpmsg: glink: Don't send pending rx_done during remove - [arm64] rpmsg: glink: Free pending deferred work on remove - cifs: smbd: Return -EAGAIN when transport is reconnecting - cifs: smbd: Add messages on RDMA session destroy and reconnection - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE - cifs: Don't display RDMA transport on reconnect - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect - CIFS: Close open handle after interrupted close - [armhf] tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() - vfio/pci: call irq_bypass_unregister_producer() before freeing irq - dma-buf: Fix memory leak in sync_file_merge() - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching - dm mpath: remove harmful bio-based optimization - dm btree: increase rebalance threshold in __rebalance2() - scsi: iscsi: Fix a potential deadlock in the timeout handler - scsi: qla2xxx: Change discovery state before PLOGI - drm/radeon: fix r1xx/r2xx register checker for POT textures - xhci: fix USB3 device initiated resume race with roothub autosuspend https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.92 - af_packet: set defaule value for tmo - [amd64] fjes: fix missed check in fjes_acpi_add - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl - net: qlogic: Fix error paths in ql_alloc_large_buffers() - net: usb: lan78xx: Fix suspend/resume PHY register access error - qede: Disable hardware gro when xdp prog is installed - qede: Fix multicast mac configuration - sctp: fully initialize v4 addr in some functions - btrfs: don't double lock the subvol_sem for rename exchange - btrfs: do not call synchronize_srcu() in inode_tree_del - Btrfs: fix missing data checksums after replaying a log tree - btrfs: send: remove WARN_ON for readonly mount - btrfs: abort transaction after failed inode updates in create_subvol - btrfs: skip log replay on orphaned roots - btrfs: do not leak reloc root if we fail to read the fs root - btrfs: handle ENOENT in btrfs_uuid_tree_iterate - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues - ALSA: pcm: Avoid possible info leaks from PCM stream buffers - ALSA: hda/ca0132 - Keep power on during processing DSP response - ALSA: hda/ca0132 - Avoid endless loop - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers - drm/amdgpu: grab the id mgr lock while accessing passid_mapping - spi: Add call to spi_slave_abort() function when spidev driver is released - [x86] staging: rtl8192u: fix multiple memory leaks on error path - staging: rtl8188eu: fix possible null dereference - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063) - libertas: fix a potential NULL pointer dereference - ath10k: fix backtrace on coredump - IB/iser: bound protection_sg size by data_sg size - [arm64] media: venus: core: Fix msm8996 frequency table - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq - pinctrl: devicetree: Avoid taking direct reference to device name string - [amd64] drm/amdkfd: fix a potential NULL pointer dereference - [arm64] media: venus: Fix occasionally failures to suspend - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller - block: Fix writeback throttling W=1 compiler warnings - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (CVE-2019-19057) - drm/drm_vblank: Change EINVAL by the correct errno - media: cx88: Fix some error handling path in 'cx8800_initdev()' - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0 - [x86] mm: Use the correct function type for native_set_fixmap() - ath10k: Correct error handling of dma_map_single() - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode - perf report: Add warning when libunwind not compiled in - usb: usbfs: Suppress problematic bind and unbind uevents. - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req - Bluetooth: Workaround directed advertising bug in Broadcom controllers - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL - [x86] mce: Lower throttling MCE messages' priority to warning - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot - ipmi: Don't allow device module unload when in use - [x86] ioapic: Prevent inconsistent state when moving an interrupt - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill() - i40e: initialize ITRN registers with correct values - net: phy: dp83867: enable robust auto-mdix - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210 - ACPI: button: Add DMI quirk for Medion Akoya E2215T - RDMA/qedr: Fix memory leak in user qp and mr - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle - [s390x] time: ensure get_clock_monotonic() returns monotonic values - [s390x] mm: add mm_pxd_folded() checks to pxd_free() - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout - libata: Ensure ata_port probe has completed before detach - loop: fix no-unmap write-zeroes request behavior - Bluetooth: Fix advertising duplicated flags - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() - ixgbe: protect TX timestamping from API misuse - media: rcar_drif: fix a memory disclosure (CVE-2019-18786) - media: v4l2-core: fix touch support in v4l_g_fmt - rfkill: allocate static minor - bnx2x: Fix PF-VF communication over multi-cos queues. - ALSA: timer: Limit max amount of slave instances - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() - perf probe: Fix to find range-only function instance - perf probe: Fix to list probe event with correct line number - perf jevents: Fix resource leak in process_mapfile() and main() - perf probe: Walk function lines in lexical blocks - perf probe: Fix to probe an inline function which has no entry pc - perf probe: Fix to show ranges of variables in functions without entry_pc - perf probe: Fix to show inlined function callsite without entry_pc - perf probe: Fix to probe a function which has no entry pc - perf tools: Splice events onto evlist even on error - perf parse: If pmu configuration fails free terms - perf probe: Skip overlapped location on searching variables - perf probe: Return a better scope DIE if there is no best scope - perf probe: Fix to show calling lines of inlined functions - perf probe: Skip end-of-sequence and non statement lines - perf probe: Filter out instances except for inlined subroutine and subprogram - ath10k: fix get invalid tx rate for Mesh metric - media: pvrusb2: Fix oops on tear-down when radio support is not present - ice: delay less - [amd64] spi: pxa2xx: Add missed security checks - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile - iio: dac: ad5446: Add support for new AD5600 DAC - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint - [s390x] disassembler: don't hide instruction addresses - nvme: Discard workaround for non-conformant devices - parport: load lowlevel driver if ports not found - bcache: fix static checker warning in bcache_device_free() - cpufreq: Register drivers only after CPU devices have been registered - tracing: use kvcalloc for tgid_map array allocation - tracing/kprobe: Check whether the non-suffixed symbol is notrace - bcache: fix deadlock in bcache_allocator - iwlwifi: mvm: fix unaligned read of rx_pkt_status - [arm64] spi: tegra20-slink: add missed clk_unprepare - tun: fix data-race in gro_normal_list() - crypto: virtio - deal with unsupported input sizes - btrfs: don't prematurely free work in end_workqueue_fn() - btrfs: don't prematurely free work in run_ordered_work() - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1 - [x86] insn: Add some Intel instructions to the opcode map - brcmfmac: remove monitor interface when detaching - iwlwifi: check kasprintf() return value - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED - net: phy: initialise phydev speed and duplex sanely - btrfs: don't prematurely free work in reada_start_machine_worker() - btrfs: don't prematurely free work in scrub_missing_raid56_worker() - Revert "mmc: sdhci: Fix incorrect switch to HS mode" - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (CVE-2019-19947) - usb: xhci: Fix build warning seen with CONFIG_PM=n - [s390x] ftrace: fix endless recursion in function_graph tracer - btrfs: return error pointer from alloc_test_extent_buffer - usbip: Fix receive error in vhci-hcd when using scatter-gather - usbip: Fix error path of vhci_recv_ret_submit() - cpufreq: Avoid leaving stale IRQ work items during CPU offline - [x86] intel_th: pci: Add Comet Lake PCH-V support - [x86] intel_th: pci: Add Elkhart Lake SOC support - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037) - ext4: check for directory entries too close to block end - ext4: unlock on error in ext4_expand_extra_isize() - [arm64] KVM: Ensure 'params' is initialised when looking up sys register - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] - [powerpc*] irq: fix stack overflow verification - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register - mmc: sdhci: Update the tuning failed messages to pr_debug level - mmc: sdhci: Workaround broken command queuing on Intel GLK - mmc: sdhci: Add a quirk for broken command queuing - nbd: fix shutdown and recv work deadlock - perf probe: Fix to show function entry line as probe-able https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.93 - scsi: lpfc: Fix discovery failures when target device connectivity bounces - scsi: mpt3sas: Fix clear pending bit in ioctl status - scsi: lpfc: Fix locking on mailbox command completion - Input: atmel_mxt_ts - disable IRQ across suspend - f2fs: fix to update time in lazytime mode - [arm64,armhf] iommu: rockchip: Free domain on .domain_free - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory - scsi: target: compare full CHAP_A Algorithm strings - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices - scsi: csiostor: Don't enable IRQs too early - [arm64] scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec() - [ppc64el] pseries: Mark accumulate_stolen_time() as notrace - [ppc64el] pseries: Don't fail hash page table insert for bolted mapping - clocksource/drivers/timer-of: Use unique device name instead of timer - [ppc64el] security/book3s64: Report L1TF status in sysfs - [ppc64el] book3s64/hash: Add cond_resched to avoid soft lockup warning - ext4: update direct I/O read lock pattern for IOCB_NOWAIT - ext4: iomap that extends beyond EOF should be marked dirty - jbd2: Fix statistics for the number of logged blocks - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow - f2fs: fix to update dir's i_pino during cross_rename - [arm64] clk: qcom: Allow constant ratio freq tables for rcg - clk: clk-gpio: propagate rate change to parent - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences - [ppc64el] PCI: rpaphp: Fix up pointer to first drc-info entry - scsi: ufs: fix potential bug which ends in system hang - [ppc64el] PCI: rpaphp: Don't rely on firmware feature to imply drc-info support - [ppc64el] PCI: rpaphp: Annotate and correctly byte swap DRC properties - [ppc64el] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info - [ppc64el] powerpc/security: Fix wrong message when RFI Flush is disable - bcache: at least try to shrink 1 node in bch_mca_scan() - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening - libnvdimm/btt: fix variable 'rc' set but not used - HID: Improve Windows Precision Touchpad detection. - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device - watchdog: Fix the race between the release of watchdog_core_data and cdev - scsi: pm80xx: Fix for SATA device discovery - scsi: ufs: Fix error handing during hibern8 enter - scsi: scsi_debug: num_tgts must be >= 0 - scsi: iscsi: Don't send data to unbound connection - scsi: target: iscsi: Wait for all commands to finish before freeing a session - apparmor: fix unsigned len comparison with less than zero - scripts/kallsyms: fix definitely-lost memory leak - cdrom: respect device capabilities during opening action - perf script: Fix brstackinsn for AUXTRACE - perf regs: Make perf_reg_name() return "unknown" instead of NULL - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR - [s390x] cpum_sf: Check for SDBT and SDB consistency - ocfs2: fix passing zero to 'PTR_ERR' warning - kernel: sysctl: make drop_caches write-only - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK - [x86] mce: Fix possibly incorrect severity calculation on AMD - net, sysctl: Fix compiler warning when only cBPF is present - netfilter: nf_queue: enqueue skbs with NULL dst - ALSA: hda - Downgrade error message for single-cmd fallback - bonding: fix active-backup transition after link failure - perf strbuf: Remove redundant va_end() in strbuf_addv() - Make filldir[64]() verify the directory entry filename is valid (CVE-2019-10220) - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (CVE-2019-10220) - netfilter: ebtables: compat: reject all padding in matches/watchers - 6pack,mkiss: fix possible deadlock - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() - inetpeer: fix data-race in inet_putpeer / inet_putpeer - net: add a READ_ONCE() in skb_peek_tail() - net: icmp: fix data-race in cmp_global_allow() - hrtimer: Annotate lockless access to timer->state - net: ena: fix napi handler misbehavior when the napi budget is zero - net/mlxfw: Fix out-of-memory error in mfa2 flash burning - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs - ptp: fix the race between the release of ptp_clock and cdev - tcp: Fix highest_sack and highest_sack_seq - udp: fix integer overflow while computing available space in sk_rcvbuf - vhost/vsock: accept only packets with the right dst_cid - net: add bool confirm_neigh parameter for dst_ops.update_pmtu - ip6_gre: do not confirm neighbor when do pmtu update - gtp: do not confirm neighbor when do pmtu update - net/dst: add new function skb_dst_update_pmtu_no_confirm - tunnel: do not confirm neighbor when do pmtu update - vti: do not confirm neighbor when do pmtu update - sit: do not confirm neighbor when do pmtu update - net/dst: do not confirm neighbor for vxlan and geneve pmtu update - gtp: do not allow adding duplicate tid and ms_addr pdp context - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt - tcp/dccp: fix possible race __inet_lookup_established() - tcp: do not send empty skb from tcp_write_xmit() - gtp: fix wrong condition in gtp_genl_dump_pdp() - gtp: fix an use-after-free in ipv4_pdp_find() - gtp: avoid zero size hashtable - [arm64,armhf] pinctrl: baytrail: Really serialize all register accesses https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.94 - nvme_fc: add module to ops template to allow module references - nvme-fc: fix double-free scenarios on hw queues - drm/amdgpu: add check before enabling/disabling broadcast mode - drm/amdgpu: add cache flush workaround to gfx8 emit_fence - PM / devfreq: Fix devfreq_notifier_call returning errno - PM / devfreq: Set scaling_max_freq to max on OPP notifier error - PM / devfreq: Don't fail devfreq_dev_release if not in list - afs: Fix afs_find_server lookups for ipv4 peers - afs: Fix SELinux setting security label on /afs - RDMA/cma: add missed unregister_pernet_subsys in init failure - rxe: correctly calculate iCRC for unaligned payloads - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work - scsi: qla2xxx: Don't call qlt_async_event twice - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length - scsi: qla2xxx: Configure local loop for N2N target - scsi: qla2xxx: Send Notify ACK after N2N PLOGI - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI - scsi: iscsi: qla4xxx: fix double free in probe - scsi: libsas: stop discovering if oob mode is disconnected (CVE-2019-19965) - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit - usb: gadget: fix wrong endpoint desc - net: make socket read/write_iter() honor IOCB_NOWAIT - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP - md: raid1: check rdev before reference in raid1_sync_request func - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler - IB/mlx4: Follow mirror sequence of device add during device removal - IB/mlx5: Fix steering rule of drop and count - xen-blkback: prevent premature module unload - xen/balloon: fix ballooned page accounting without hotplug enabled - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen - xfs: fix mount failure crash on invalid iclog memory access - taskstats: fix data-race - drm: limit to INT_MAX in create_blob ioctl - netfilter: nft_tproxy: Fix port selector on Big Endian - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code - ALSA: usb-audio: fix set_format altsetting sanity check - ALSA: usb-audio: set the interface format after resume on Dell WD19 - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls - [mips*] Avoid VDSO ABI breakage due to global register variable - media: pulse8-cec: fix lost cec_transmit_attempt_done() call - media: cec: CEC 2.0-only bcast messages were ignored - media: cec: avoid decrementing transmit_queue_sz if it is 0 - media: cec: check 'transmit_in_progress', not 'transmitting' - mm/zsmalloc.c: fix the migrated zspage statistics. - memcg: account security cred as well to kmemcg - mm: move_pages: return valid node id in status if the page is already on the target node - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones - locks: print unsigned ino in /proc/locks - compat_ioctl: block: handle Persistent Reservations - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE - ata: libahci_platform: Export again ahci_platform_able_phys() - libata: Fix retrieving of active qcs - gpiolib: fix up emulated open drain outputs - tracing: Fix lock inversion in trace_event_enable_tgid_record() - tracing: Avoid memory leak in process_system_preds() - tracing: Have the histogram compare functions convert to u64 first - tracing: Fix endianness bug in histogram trigger - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer - ALSA: firewire-motu: Correct a typo in the clock proc string - exit: panic before exit_mm() on global init exit - [arm64] Revert support for execute-only user mappings - ftrace: Avoid potential division by zero in function profiler - [arm64] drm/msm: include linux/sched/task.h - PM / devfreq: Check NULL governor in available_governors_show - nfsd4: fix up replay_matches_cache() - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 - xfs: don't check for AG deadlock for realtime files in bunmapi - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table - Bluetooth: btusb: fix PM leak in error case of setup - Bluetooth: delete a stray unlock - Bluetooth: Fix memory leak in hci_connect_le_scan - media: flexcop-usb: ensure -EIO is returned on error condition - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809) - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP - bdev: Factor out bdev revalidation into a common helper - bdev: Refresh bdev size for disks without partitioning - scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails - drm/mst: Fix MST sideband up-reply failure handling - [ppc64el] pseries/hvconsole: Fix stack overread via udbg - [ppc64el] KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag - rxrpc: Fix possible NULL pointer access in ICMP handling - tcp: annotate tp->rcv_nxt lockless reads - net: core: limit nested device depth - ath9k_htc: Modify byte order for an error message - ath9k_htc: Discard undersized packets - xfs: periodically yield scrub threads to the scheduler - net: add annotations on hh->hh_len lockless accesses - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps - [s390x] smp: fix physical to logical CPU map for SMT - xen/blkback: Avoid unmapping unmapped grant pages - [x86] perf/x86/intel/bts: Fix the use of page_private() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.95 - bpf: Fix passing modified ctx to ld/abs/ind instruction - regulator: fix use after free issue - ASoC: max98090: fix possible race conditions - netfilter: ctnetlink: netns exit must wait for callbacks - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (CVE-2019-14901) - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec breakage - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89 - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs - efi/gop: Return EFI_SUCCESS if a usable GOP was found - efi/gop: Fix memory leak in __gop_query32/64() - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init() - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions() - ASoC: topology: Check return value for soc_tplg_pcm_create() - bnxt_en: Return error if FW returns more data than dump length - [mips*] bpf, mips: Limit to 33 tail calls - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS - [powerpc*] Ensure that swiotlb buffer is allocated from low memory - btrfs: Fix error messages in qgroup_rescan_init - bpf: Clear skb->tstamp in bpf_redirect when necessary - bnx2x: Do not handle requests from VFs after parity - bnx2x: Fix logic to get total no. of PFs per engine - cxgb4: Fix kernel panic while accessing sge_info - net: usb: lan78xx: Fix error message format specifier - rfkill: Fix incorrect check to avoid NULL pointer dereference - iommu/iova: Init the struct iova to fix the possible memleak - [x86] perf/x86/intel: Fix PT PMI handling - fs: avoid softlockups in s_inodes iterators - [arm64,armhf] net: stmmac: Do not accept invalid MTU values - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission start - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly - [s390x] dasd: fix memleak in path handling error case - block: fix memleak when __blk_rq_map_user_iov() is failed - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) - [x86] hv_netvsc: Fix unwanted rx_table reset - [powerpc*] vcpu: Assume dedicated processors as non-preempt - [powerpc*] spinlocks: Include correct header for static key - [armhf] cpufreq: imx6q: read OCOTP through nvmem for imx6ul/imx6ull - gtp: fix bad unlock balance in gtp_encap_enable_socket - macvlan: do not assume mac_header is set in macvlan_broadcast() - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU port. - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes - net: usb: lan78xx: fix possible skb leak - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM - sch_cake: avoid possible divide by zero in cake_enqueue() - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK - vxlan: fix tos value before xmit - vlan: fix memory leak in vlan_dev_set_egress_priority - vlan: vlan_changelink() should propagate errors - net: sch_prio: When ungrafting, replace with FIFO - [arm64,armhf] usb: dwc3: gadget: Fix request complete check - USB: core: fix check for duplicate endpoints - USB: serial: option: add Telit ME910G1 0x110a composition - usb: missing parentheses in USE_NEW_SCHEME https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96 - chardev: Avoid potential use-after-free in 'chrdev_open()' - i2c: fix bus recovery stop mode timing - [arm64,armhf] usb: chipidea: host: Disable port power only if previously enabled - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 - ALSA: hda/realtek - Add new codec supported for ALCS1200A - ALSA: hda/realtek - Set EAPD control to default for ALC222 - [x86] ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined - tracing: Change offset type to s32 in preempt/irq tracepoints - HID: Fix slab-out-of-bounds read in hid_field_extract - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll - HID: hid-input: clear unmapped usages - Input: add safety guards to input_set_keycode() - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model - drm/fb-helper: Round up bits_per_pixel if possible - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ - can: kvaser_usb: fix interface sanity check - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism - [x86] staging: vt6656: set usb_set_intfdata on driver fail. - USB: serial: option: add ZLP support for 0x1bc7/0x9010 - [arm64,armhf] usb: musb: fix idling for suspend after disconnect interrupt - [arm64,armhf] usb: musb: Disable pullup at init - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 - serdev: Don't claim unsupported ACPI serial devices - tty: link tty and port before configuring it as console - tty: always relink the port - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (CVE-2019-14895) - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (CVE-2019-19056) - scsi: bfa: release allocated memory in case of error (CVE-2019-19066) - rtl8xxxu: prevent leaking urb (CVE-2019-19068) - ath10k: fix memory leak (CVE-2019-19078) - HID: hiddev: fix mess in hiddev_open() - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct - netfilter: conntrack: dccp, sctp: handle null timeout argument - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present - [x86] drm/i915/gen9: Clear residual context state on context switch (CVE-2019-14615) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.97 - hidraw: Return EPOLLOUT from hidraw_poll - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll - HID: hidraw, uhid: Always report EPOLLOUT - cfg80211/mac80211: make ieee80211_send_layer2_update a public function - mac80211: Do not send Layer 2 Update frame before authorization (CVE-2019-5108) - f2fs: Move err variable to function scope in f2fs_fill_dentries() - f2fs: check memory boundary by insane namelen - f2fs: check if file namelen exceeds max value (CVE-2019-9445) - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (CVE-2019-15217) - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (CVE-2019-19058) - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (CVE-2019-19059) - RDMA: Fix goto target to release the allocated memory (CVE-2019-19077) - dccp: Fix memleak in __feat_register_sp (CVE-2019-20096) - [x86] drm/i915: Fix use-after-free when destroying GEM context - ASoC: soc-core: Set dpcm_playback / dpcm_capture - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API - iommu: Remove device link to group on failure - gpio: Fix error message on out-of-range GPIO in lookup table - [s390x] qeth: fix false reporting of VNIC CHAR config failure - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set - cifs: Adjust indentation in smb2_open_file - afs: Fix missing cell comparison in afs_test_super() - drm/ttm: fix start page for huge page check in ttm_put_pages() (CVE-2019-19927) - drm/ttm: fix incrementing the page pointer for huge pages (CVE-2019-19927) - btrfs: simplify inode locking for RWF_NOWAIT - RDMA/mlx5: Return proper error value - RDMA/srpt: Report the SCSI residual to the initiator - scsi: enclosure: Fix stale device oops with hot replug - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 - [x86] platform/x86: GPD pocket fan: Use default values when wrong modparams are given - xprtrdma: Fix completion wait during device removal - crypto: virtio - implement missing support for output IVs - NFSv2: Fix a typo in encode_sattr() - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn - mei: fix modalias documentation - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume - [armhf] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6 - scsi: sd: enable compat ioctls for sed-opal - af_unix: add compat_ioctl support - compat_ioctl: handle SIOCOUTQNSD - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage - PCI/PTM: Remove spurious "d" from granularity message - [powerpc*] powernv: Disable native PCIe port management - [armhf] tty: serial: imx: use the sg count from dma_map_sg - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg - mtd: spi-nor: fix silent truncation in spi_nor_read() - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() - rtlwifi: Remove unnecessary NULL check in rtl_regd_init - f2fs: fix potential overflow - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() - [mips*] cacheinfo: report shared CPU map - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static - [arm64] dmaengine: k3dma: Avoid null pointer traversal - [amd64] ioat: ioat_alloc_ring() failure handling. - ocfs2: call journal flush to mark journal as empty after journal recovery when mount https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.98 - clk: Don't try to enable critical clocks if prepare failed - iio: buffer: align the size of scan bytes to size of the largest element - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx - USB: serial: option: Add support for Quectel RM500Q - USB: serial: opticon: fix control-message timeouts - USB: serial: option: add support for Quectel RM500Q in QDL mode - USB: serial: suppress driver bind attributes - USB: serial: ch341: handle unbound port at reset_resume - USB: serial: io_edgeport: handle unbound ports on URB completion - USB: serial: io_edgeport: add missing active-port sanity check - USB: serial: keyspan: handle unbound ports - USB: serial: quatech2: handle unbound ports - [x86] scsi: fnic: fix invalid stack access - scsi: mptfusion: Fix double fetch bug in ioctl - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection - ALSA: dice: fix fallback from protocol extension into limited functionality - ALSA: seq: Fix racy access for queue timer in proc read - ALSA: usb-audio: fix sync-ep altsetting sanity check - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator - block: fix an integer overflow in logical block size - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio number - LSM: generalize flag passing to security_capable - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() - usb: core: hub: Improved device recognition on remote wakeup - [x86] resctrl: Fix an imbalance in domain_remove_cpu() - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained - [amd64] x86/efistub: Disable paging at mixed mode entry - [x86] resctrl: Fix potential memory leak - perf hists: Fix variable name's inconsistency in hists__for_each() macro - perf report: Fix incorrectly added dimensions as switch perf data file - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid - btrfs: rework arguments of btrfs_unlink_subvol - btrfs: fix invalid removal of root ref - btrfs: do not delete mismatched root refs - btrfs: fix memory leak in qgroup accounting - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() - [armhf] dts: imx6qdl: Add Engicam i.Core 1.5 MX6 - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned - [arm64,armhf] net: stmmac: Enable 16KB buffer size - mm/huge_memory.c: make __thp_get_unmapped_area static - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment - bpf: Fix incorrect verifier simulation of ARSH under ALU32 - cfg80211: fix deadlocks in autodisconnect work - cfg80211: fix memory leak in cfg80211_cqm_rssi_update - cfg80211: fix page refcount issue in A-MSDU decap - netfilter: fix a use-after-free in mtype_destroy() - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct - netfilter: nft_tunnel: fix null-attribute check - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits - netfilter: nf_tables: store transaction list locally while requesting module - netfilter: nf_tables: fix flowtable list del corruption - NFC: pn533: fix bulk-message timeout - batman-adv: Fix DAT candidate selection on little endian systems - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() - [x86] hv_netvsc: Fix memory leak when removing rndis device - [arm64] net: hns: fix soft lockup when there is not enough memory - net: usb: lan78xx: limit size of local TSO packets - ptp: free ptp device pin descriptors properly - r8152: add missing endpoint sanity check - tcp: fix marked lost packets not being retransmitted - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk - tcp: refine rule to allow EPOLLOUT generation under mem pressure - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node - cfg80211: check for set_wiphy_params - tick/sched: Annotate lockless access to last_jiffies_update - drm/nouveau/bar/nv50: check bar1 vmm return value - drm/nouveau/bar/gf100: ensure BAR is mapped - drm/nouveau/mmu: qualify vmm during dtor - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr - scsi: esas2r: unlock on error in esas2r_nvram_read_direct() - scsi: qla4xxx: fix double free bug - scsi: bnx2i: fix potential use after free - scsi: target: core: Fix a pr_debug() argument - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan - scsi: core: scsi_trace: Use get_unaligned_be*() - perf probe: Fix wrong address verification . [ Joe Richey ] * [cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237) . [ Salvatore Bonaccorso ] * Refresh powerpc-fix-mcpu-options-for-spe-only-compiler.patch (Context changes in 4.19.88) * Drop 0027-RDMA-hns-Fix-the-bug-with-updating-rq-head-pointer-w.patch * Drop 0028-RDMA-hns-Bugfix-for-the-scene-without-receiver-queue.patch * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.88) * [rt] Update to 4.19.90-rt35: - Update "workqueue: rework" for workqueue changes in 4.19.90 * [rt] Drop 0245-Revert-arm64-preempt-Fix-big-endian-when-checking-pr.patch * Refresh 0013-scsi-hisi_sas-Relocate-some-codes-to-avoid-an-unused.patch for context changes in 4.19.93. * [rt] Refresh 0253-watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch (Context changes in 4.19.93) * [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch (Context changes in 4.19.97) . [ Ben Hutchings ] * [rt] Update to 4.19.94-rt38: - Refresh "x86/ioapic: Don't let setaffinity unmask threaded EOI interrupt too early" which was partly included in 4.19.92 * aufs: Update support patchset to aufs4.19.63+ 20200113; no functional changes * Bump ABI to 8 * libertas: Fix two buffer overflows at parsing bss descriptor (CVE-2019-14896, CVE-2019-14897) * wimax: i2400: fix memory leak (CVE-2019-19051) * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (CVE-2019-19051) * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511) . [ Noah Meyerhans ] * random: try to actively add entropy rather than passively wait for it (Closes: #948519) . [ Aurelien Jarno ] * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF. linux-signed-i386 (4.19.87+1) buster; urgency=medium . * Sign kernel from linux 4.19.87-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - Revert "pwm: Set class for exported channels in sysfs" - cpufreq: schedutil: Don't skip freq update when limits change - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify - ALSA: hda - Let all conexant codec enter D3 when rebooting - HID: holtek: test for sanity of intfdata - HID: hiddev: avoid opening a disconnected device - HID: hiddev: do cleanup in failure of opening a device - Input: kbtab - sanity check for endpoint type - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - netfilter: ebtables: also count base chain policies - xen/pciback: remove set but not used variable 'old_state' - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules - [arm64] efi: fix variable 'si' set but not used - [arm64] unwind: Prohibit probing on return_address() - [arm64] mm: fix variable 'pud' set but not used - IB/core: Add mitigation for Spectre V1 - IB/mlx5: Fix MR registration flow to use UMR properly - IB/mad: Fix use-after-free in ib mad completion handling - [arm64] drm: msm: Fix add_gpu_components - [armhf] drm/exynos: fix missing decrement of retry counter - ocfs2: remove set but not used variable 'last_hash' - asm-generic: fix -Wtype-limits compiler warnings - [arm64] KVM: regmap: Fix unexpected switch fall-through - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - [x86] drm/i915/cfl: Add a new CFL PCI ID. - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - Input: psmouse - fix build error of multiple definition - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - net: dsa: Check existence of .port_mdb_add callback before calling it - net/mlx4_en: fix a memory leak bug - net/packet: fix race in tpacket_snd() - sctp: fix memleak in sctp_send_reset_streams - sctp: fix the transport error_count check - team: Add vlan tx offload to hw_enc_features - tipc: initialise addr_trail_end when setting node addresses - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - net/mlx5e: Use flow keys dissector to parse packets for ARFS - [arm64] mmc: sdhci-of-arasan: Do now show error message in case of deffered probe https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.69 - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - [mips*] kernel: only use i8253 clocksource with periodic clockevent - [mips*] fix cacheinfo - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - bonding: Force slave speed check after link state recovery for 802.3ad - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - can: dev: call netif_carrier_off() in register_candev() - can: gw: Fix error path of cgw_module_init - [armhf,arm64] ASoC: rockchip: Fix mono capture - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - net/ethernet/qlogic/qed: force the string buffer NULL-terminated - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - [x86] lib/cpu: Address missing prototypes warning - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - [arm64] KVM: Don't write junk to sysregs on reset - [armhf] KVM: Don't write junk to CP15 registers on reset - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - Revert "dm bufio: fix deadlock with loop device" (regression in 4.19.61) - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX - gpiolib: never report open-drain/source lines as 'input' to user-space - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - [x86] apic: Handle missing global clockevent gracefully - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - [x86] boot: Save fields explicitly, zero out everything else - [x86] boot: Fix boot regression caused by bootparam sanitizing - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() - dm raid: add missing cleanup in raid_ctr() - dm space map metadata: fix missing store of apply_bops() return value - dm table: fix invalid memory accesses with too high sector number - dm zoned: improve error handling in reclaim - dm zoned: improve error handling in i/o map code - dm zoned: properly handle backing device failure - genirq: Properly pair kobject_del() with kobject_add() - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - xfs: don't trip over uninitialized buffer on extent read of corrupted inode - xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h - xfs: Add helper function xfs_attr_try_sf_addname - xfs: Add attibute set and helper functions - xfs: Add attibute remove and helper functions - xfs: always rejoin held resources during defer roll - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - [ppc64el] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.70 - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Only update d_fsdata if different in afs_d_revalidate() - nvmet-loop: Flush nvme_delete_wq when removing the port - nvme: fix a possible deadlock when passthru commands sent to a multipath device - nvme-pci: Fix async probe remove race - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - [arm64] cpufeature: Don't treat granule sizes as strict - drm/ast: Fixed reboot test may cause system hanged - [x86] tools: hv: fix KVP and VSS daemons exit code - [x86] drm/i915: fix broadwell EU computation - [arm*] watchdog: bcm2835_wdt: Fix module autoload - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value - [armhf] drm/tilcdc: Register cpufreq notifier after we have initialized crtc - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Default fib6_type to RTN_UNICAST when not set - net/smc: make sure EPOLLOUT is raised - tcp: make sure EPOLLOUT wont be missed - ipv4/icmp: fix rt dst dev null pointer dereference - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n - ALSA: usb-audio: Check mixer unit bitmap yet more strictly - ALSA: line6: Fix memory leak at line6_init_pcm() error path - ALSA: hda - Fixes inverted Conexant GPIO mic mute led - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - [x86] kvm: skip populating logical dest map if apic is not sw enabled - [x86] KVM: Don't update RIP or do single-step on faulting emulation - [amd64] uprobes: Fix detection of 32-bit user mode - [x86] apic: Do not initialize LDR and DFR for bigsmp - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has stopped - usb: host: ohci: fix a race condition between shutdown and irq - usb: host: xhci: rcar: Fix typo in compatible string matching - USB: storage: ums-realtek: Update module parameter description for auto_delink_en - USB: storage: ums-realtek: Whitelist auto-delink support - [x86] mei: me: add Tiger Lake point LP device ID - mmc: core: Fix init of SD cards reporting an invalid VDD range - stm class: Fix a double free of stm_source_device - [x86] intel_th: pci: Add support for another Lewisburg PCH - [x86] intel_th: pci: Add Tiger Lake support - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - [x86] drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash - [x86] VMCI: Release resource if the work is already queued - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - Revert "cfg80211: fix processing world regdomain when non modular" - mac80211: fix possible sta leak - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - [ppc64el] KVM: Book3S: Fix incorrect guest-to-user-translation error handling - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - NFS: Clean up list moves of struct nfs_page - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Pass error information to the pgio error cleanup routine - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - [x86] i2c: piix4: Fix port selection for AMD Family 16h Model 30h - mt76: mt76x0u: do not reset radio on resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.71 - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 4.19.67) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.72 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - [armhf,arm64] net: stmmac: dwmac-rk: Don't fail if phy regulator is absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) - [x86] boot: Preserve boot_params.secure_boot from sanitizing - [arm*] spi: bcm2835aux: unifying code between polling and interrupt driven code - [arm*] spi: bcm2835aux: remove dangerous uncontrolled read of fifo - [arm*] spi: bcm2835aux: fix corruptions for longer spi transfers - netfilter: nf_tables: use-after-free in failing rule with bound set - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - Bluetooth: btqca: Add a short delay before downloading the NVM - [ppc64el] ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug - liquidio: add cleanup in octeon_setup_iq() - net: myri10ge: fix memory leaks - lan78xx: Fix memory leaks - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - kprobes: Fix potential deadlock in kprobe_optimizer() - HID: cp2112: prevent sleeping function called from invalid context - [amd64] boot/compressed: Fix boot on machines with broken E820 table - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel callback - [x86] Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - IB/mlx4: Fix memory leaks - infiniband: hfi1: fix a memory leak bug - infiniband: hfi1: fix memory leaks - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - [armhf,arm64] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - [armhf,arm64] KVM: VGIC: Properly initialise private IRQ affinity - [amd64] boot/compressed: Fix missing initialization in find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.73 - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - [x86] ALSA: hda/realtek - Add quirk for HP Pavilion 15 - [x86] ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - [x86] ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() - [ppc64el] tm: Fix FP/VMX unavailable exceptions inside a transaction (CVE-2019-15030) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - [x86] hv_sock: Fix hang when a connection is closed - Blk-iolatency: warn on negative inflight IO counter - blk-iolatency: fix STS_AGAIN handling - {nl,mac}80211: fix interface combinations on crypto controlled devices - timekeeping: Use proper ktime_add when adding nsecs in coarse offset - selftests: fib_rule_tests: use pre-defined DEV_ADDR - [x86] ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() - [ppc64el] mark start_here_multiplatform as __ref - [arm64] dts: rockchip: enable usb-host regulators at boot on rk3328-rock64 - nvme-fc: use separate work queue to avoid warning - [armhf] clk: s2mps11: Add used attribute to s2mps11_dt_match - [arm64] remoteproc: qcom: q6v5: shore up resource probe handling - modules: always page-align module section allocations - kernel/module: Fix mem leak in module_add_modinfo_attrs - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" - scsi: qla2xxx: Move log messages before issuing command to firmware - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h - [x86] Drivers: hv: kvp: Fix two "this statement may fall through" warnings - [x86] hibernate: Fix nosave_regions setup for hibernation - [arm64] remoteproc: qcom: q6v5-mss: add SCM probe dependency - drm/amdgpu/gfx9: Update gfx9 golden settings. - drm/amdgpu: Update gc_9_0 golden settings. - [x86] KVM: hyperv: enforce vp_index < KVM_MAX_VCPUS - [x86] KVM: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' variables - [x86] KVM: hyperv: keep track of mismatched VP indexes - [x86] KVM: hyperv: define VP assist page helpers - [x86] kvm/lapic: preserve gfn_to_hva_cache len on cache reinit - [x86] drm/i915: Fix intel_dp_mst_best_encoder() - [x86] drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE - [x86] drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/atomic_helper: Disallow new modesets on unregistered connectors - [x86] Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up - powerplay: Respect units on max dcfclk watermark - drm/amd/pp: Fix truncated clock value when set watermark - drm/amd/dm: Understand why attaching path/tile properties are needed - [s390x] zcrypt: reinit ap queue state machine during device probe - [x86] drm/i915: Restore sane defaults for KMS on GEM error load - [x86] drm/i915: Cleanup gt powerstate from gem - [ppc64el] KVM: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch - Btrfs: clean up scrub is_dev_replace parameter - Btrfs: fix deadlock with memory reclaim during scrub - btrfs: Remove extent_io_ops::fill_delalloc - btrfs: Fix error handling in btrfs_cleanup_ordered_extents - scsi: megaraid_sas: Fix combined reply queue mode detection - scsi: megaraid_sas: Add check for reset adapter bit - scsi: megaraid_sas: Use 63-bit DMA addressing - [ppc64el] pkeys: Fix handling of pkey state across fork() - btrfs: volumes: Make sure no dev extent is beyond device boundary - btrfs: Use real device structure to verify dev extent - IB/uverbs: Fix OOPs upon device disassociation - drm/vblank: Allow dynamic per-crtc max_vblank_count - [x86] drm/i915/ilk: Fix warning when reading emon_status with no output - tpm: Fix some name collisions with drivers/char/tpm.h - bcache: replace hard coded number with BUCKET_GC_GEN_MAX - bcache: treat stale && dirty keys as bad keys - [x86] KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run - [armhf] iio: adc: exynos-adc: Add S5PV210 variant - [armhf] iio: adc: exynos-adc: Use proper number of channels for Exynos4x12 - mt76: fix corrupted software generated tx CCMP PN - drm/nouveau: Don't WARN_ON VCPI allocation failures - iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules - iwlwifi: add new card for 9260 series - spi: spi-gpio: fix SPI_CS_HIGH capability - [ppc64el] kvm: Save and restore host AMR/IAMR/UAMOR - btrfs: scrub: pass fs_info to scrub_setup_ctx - btrfs: scrub: move scrub_setup_ctx allocation out of device_list_mutex - btrfs: scrub: fix circular locking dependency warning - btrfs: init csum_list before possible free - [arm64] PCI: qcom: Fix error handling in runtime PM support - [arm64] PCI: qcom: Don't deassert reset GPIO during probe - CIFS: Fix error paths in writeback code - CIFS: Fix leaking locked VFS cache pages in writeback retry - [x86] drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set - [x86] drm/i915: Sanity check mmap length against object size - [x86] usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps - IB/mlx5: Reset access mask when looping inside page fault handler - kvm: mmu: Fix overflow on kvm mmu page limit calculation - [x86] kvm: move kvm_load/put_guest_xcr0 into atomic context - [x86] KVM: Always use 32-bit SMRAM save state for 32-bit kernels - cifs: Fix lease buffer length error (CVE-2019-15918) - ext4: protect journal inode's blocks using block_validity - [x86] PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary - dm mpath: fix missing call of path selector type->end_io - blk-mq: free hw queue's resource in hctx's release handler - mmc: sdhci-pci: Add support for Intel CML - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code - cifs: smbd: take an array of reqeusts when sending upper layer data - dm crypt: move detailed message into debug level - [x86] drm/amdkfd: Add missing Polaris10 ID - kvm: Check irqchip mode before assign irqfd - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc - Btrfs: fix race between block group removal and block group allocation - cifs: add spinlock for the openFileList to cifsInodeInfo - [arm64] clk: tegra: Fix maximum audio sync clock for Tegra124/210 - [arm64] clk: tegra210: Fix default rates for HDA clocks - IB/hfi1: Avoid hardlockup with flushlist_lock - apparmor: reset pos on failure to unpack for various functions - scsi: target/core: Use the SECTOR_SHIFT constant - scsi: target/iblock: Fix overrun in WRITE SAME emulation - [s390x] scsi: zfcp: fix request object use-after-free in send path causing wrong traces - cifs: Properly handle auto disabling of serverino option - [x86] ALSA: hda - Don't resume forcibly i915 HDMI/DP codec - [x86] KVM: optimize check for valid PAT value - [x86] KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value - [x86] KVM: VMX: Fix handling of #MC that occurs during VM-Entry - [x86] KVM: VMX: check CPUID before allowing read/write of IA32_XSS - [ppc64el] KVM: Use ccr field in pt_regs struct embedded in vcpu struct - [ppc64el] KVM: Book3S HV: Fix CR0 setting in TM emulation - RDMA/srp: Document srp_parse_in() arguments - RDMA/srp: Accept again source addresses that do not have a port number - btrfs: correctly validate compression type - resource: Include resource end in walk_*() interfaces - resource: Fix find_next_iomem_res() iteration issue - resource: fix locking in find_next_iomem_res() - pstore: Fix double-free in pstore_mkfile() failure path - dm thin metadata: check if in fail_io mode when setting needs_check - [armhf,arm64] drm/panel: Add support for Armadeus ST0700 Adapt - [x86] ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips - [ppc64el] mm: Limit rma_size to 1TB when running without HV mode - iommu/iova: Remove stale cached32_node - gpio: don't WARN() on NULL descs if gpiolib is disabled - mm/migrate.c: initialize pud_entry in migrate_vma() - NFSv4: Fix delegation state recovery - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - [s390x] virtio: fix race on airq_areas[] - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors - ext4: don't perform block validity checks on the journal inode - ext4: fix block validity checks for journal inodes using indirect blocks - ext4: unsigned int compared against zero - [x86] PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround - [ppc64el] tm: Remove msr_tm_active() - [ppc64el] tm: Fix restoring FP/VMX facility incorrectly on interrupts (CVE-2019-15031) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.74 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - net: Fix null de-reference of device refcount - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist - gpio: fix line flag validation in linehandle_create - Btrfs: fix assertion failure during fsync and use of stale transaction - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - genirq: Prevent NULL pointer dereference in resend_irqs() - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - [x86] KVM: work around leak of uninitialized stack contents - [x86] KVM: nVMX: handle page fault in vmread - [x86] purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - [ppc64el] Add barrier_nospec to raw_copy_in_user() - [arm64] drm/meson: Add support for XBGR8888 & ABGR8888 formats - [armhf,arm64] clk: rockchip: Don't yell about bad mmc phases when getting - PCI: Always allow probing with driver_override - gpio: fix line flag validation in lineevent_create - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - firmware: ti_sci: Always request response from firmware - [x86] drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - modules: fix BUG when load module with rodata=n - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) - nvmem: Use the same permissions for eeprom as for nvmem https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.75 - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - RDMA/restrack: Release task struct which was hold by CM_ID object - [x86] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - [ppc64el] mm/radix: Use the right page size for vmemmap mapping - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net_sched: let qdisc_put() accept NULL pointer - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - [armhf] dts: am57xx: Disable voltage switching for SD card - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - [armhf] bus: ti-sysc: Fix using configured sysc mask value - [s390x] bpf: fix lcgr instruction encoding - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 - [armhf] bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - [s390x] bpf: use 32-bit index for tail calls - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - xdp: unpin xdp umem pages in error path - qed: Add cleanup in qed_slowpath_start() - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - [x86] apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - [armhf,arm64] usb: host: xhci-tegra: Set DMA mask correctly - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - [x86] perf/intel: Restrict period on Nehalem - [x86] perf/amd/ibs: Fix sample bias for dispatched micro-ops - amd-xgbe: Fix error path in xgbe_mod_init() - [x86] tools/power x86_energy_perf_policy: Fix argument parsing - [x86] tools/power turbostat: fix buffer overrun - net: aquantia: fix out of memory condition on rx side - [armhf] dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - [x86] uaccess: Don't leak the AC flags into __get_user() argument evaluation - [x86] hyper-v: Fix overflow bug in fill_gva_list() - keys: Fix missing null pointer check in request_key_auth_describe() - [x86] iommu/amd: Flush old domains in kdump kernel - [x86] iommu/amd: Fix race in increase_address_space() - [arm64] PCI: kirin: Fix section mismatch warning - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - binfmt_elf: move brk out of mmap when doing direct loader exec - [arm64] kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field - media: technisat-usb2: break out of loop at end of buffer (CVE-2019-15505) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.76 - Revert "Bluetooth: validate BLE connection interval updates" - RDMA/restrack: Protect from reentry to resource return path - [ppc64el] xive: Fix bogus error code returned by OPAL - IB/core: Add an unbound WQ type to the new CQ API - HID: prodikeys: Fix general protection fault during probe - HID: sony: Fix memory corruption issue on cleanup. - HID: logitech: Fix general protection fault caused by Logitech driver - HID: hidraw: Fix invalid read in hidraw_ioctl - HID: Add quirk for HP X500 PIXART OEM mouse - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() - CIFS: fix deadlock in cached root handling - net/mlx5e: Set ECN for received packets using CQE indication - net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets - mlx5: fix get_ip_proto() - net/mlx5e: Allow reporting of checksum unnecessary - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding - net/mlx5e: Rx, Check ip headers sanity - iwlwifi: mvm: send BCAST management frames to the right station - iwlwifi: mvm: always init rs_fw with 20MHz bandwidth rates - media: tvp5150: fix switch exit in set control handler - [x86] ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it enabled - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support - ALSA: usb-audio: Add DSD support for EVGA NU Audio - ALSA: dice: fix wrong packet parameter for Alesis iO26 - [x86] ALSA: hda - Add laptop imic fixup for ASUS M9V laptop - [x86] ALSA: hda - Apply AMD controller workaround for Raven platform - objtool: Clobber user CFLAGS variable - power: supply: sysfs: ratelimit property read error message - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion - scsi: qla2xxx: Remove all rports if fabric scan retry fails - scsi: qla2xxx: Return switch command on a timeout - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" - bpf: libbpf: retry loading program on EAGAIN - [armhf,arm64] irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices - f2fs: check all the data segments against all node ones - [x86] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it - bcache: remove redundant LIST_HEAD(journal) from run_cache_set() - initramfs: don't free a non-existent initrd - blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - Revert "f2fs: avoid out-of-range memory access" - dm zoned: fix invalid memory access - f2fs: fix to do sanity check on segment bitmap of LFS curseg - drm: Flush output polling on shutdown - net: don't warn in inet diag when IPV6 is disabled - Bluetooth: btrtl: HCI reset on close for Realtek BT chip - [x86] ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling - xfs: don't crash on null attr fork xfs_bmapi_read - netfilter: nft_socket: fix erroneous socket assignment - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices - net_sched: check cops->tcf_block in tc_bind_tclass() - net/rds: An rds_sock is added too early to the hash table - net/rds: Check laddr_check before calling it - f2fs: use generic EFSBADCRC/EFSCORRUPTED https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.77 - arcnet: provide a buffer big enough to actually receive packets - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize - macsec: drop skb sk before calling gro_cells_receive - net/phy: fix DP83865 10 Mbps HDX loopback disable function - net/sched: act_sample: don't push mac header on ip6gre ingress - net_sched: add max len check for TCA_KIND - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (CVE-2019-19081) - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC - ppp: Fix memory leak in ppp_write - sch_netem: fix a divide by zero in tabledist() - skge: fix checksum byte order - usbnet: ignore endpoints with invalid wMaxPacketSize - usbnet: sanity checking of packet sizes and device mtu - net: sched: fix possible crash in tcf_action_destroy() - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state - net/mlx5: Add device ID of upcoming BlueField-2 - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (CVE-2019-19080) - ALSA: hda: Flush interrupts on disabling - [armhf] ASoC: sgtl5000: Fix of unmute outputs on probe - [armhf] ASoC: sgtl5000: Fix charge pump source assignment - [arm*] dmaengine: bcm2835: Print error in case setting DMA mask fails - media: dib0700: fix link error for dibx000_i2c_set_speed - media: hdpvr: Add device num check and handling - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint - sched/fair: Fix imbalance due to CPU affinity - sched/core: Fix CPU controller for !RT_GROUP_SCHED - [x86] apic: Make apic_pending_intr_clear() more robust - sched/deadline: Fix bandwidth accounting at all levels after offline migration - [x86] reboot: Always use NMI fallback when shutdown via reboot vector IPI fails - [x86] apic: Soft disable APIC before initializing it - ALSA: hda - Show the fatal CORB/RIRB error more clearly - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() - EDAC/mc: Fix grain_bits calculation - media: iguanair: add sanity checks - base: soc: Export soc_device_register/unregister APIs - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid - [arm64] prefetch: fix a -Wtype-limits warning - md/raid1: end bio when the device faulty - md: don't call spare_active in md_reap_sync_thread if all member devices can't work - md: don't set In_sync if array is frozen - ACPI / processor: don't print errors for processorIDs == 0xff - loop: Add LOOP_SET_DIRECT_IO to compat ioctl - [x86] EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() - efi: cper: print AER info of PCIe fatal error - sched/fair: Use rq_lock/unlock in online_fair_sched_group - idle: Prevent late-arriving interrupts from disrupting offline - media: gspca: zero usb_buf on error - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig - perf test vfs_getname: Disable ~/.perfconfig to get default output - media: em28xx: modules workqueue not inited for 2nd device - media: rc: imon: Allow iMON RC protocol for ffdc 7e device - [arm64] perf record: Support aarch64 random socket_id assignment - [armhf] media: omap3isp: Don't set streaming state on random subdevs - media: radio/si470x: kill urb on error - media: hdpvr: add terminating 0 at end of string - led: triggers: Fix a memory leak bug - nbd: add missing config put - media: mceusb: fix (eliminate) TX IR signal length limit - media: dvb-frontends: use ida for pll number - posix-cpu-timers: Sanitize bogus WARNONS - media: dvb-core: fix a memory leak bug - libperf: Fix alignment trap with xyarray contents in 'perf stat' - [amd64] EDAC/amd64: Recognize DRAM device type ECC capability - [amd64] EDAC/amd64: Decode syndrome before translating address - PM / devfreq: passive: Use non-devm notifiers - PM / devfreq: exynos-bus: Correct clock enable sequence - media: cec-notifier: clear cec_adap in cec_notifier_unregister - media: saa7146: add cleanup in hexium_attach() - media: cpia2_usb: fix memory leaks - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() - perf trace beauty ioctl: Fix off-by-one error in cmd->string table - [x86] ASoC: es8316: fix headphone mixer volume table - ACPI / CPPC: do not require the _PSD method - sched/cpufreq: Align trace event behavior of fast switching - [x86] apic/vector: Warn when vector space exhaustion breaks affinity - [arm64] kpti: ensure patched kernel text is fetched from PoU - [x86] mm/pti: Do not invoke PTI functions when PTI is disabled - [x86] mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() - nvmet: fix data units read and written counters in SMART log - nvme-multipath: fix ana log nsid lookup when nsid is not found - ALSA: firewire-motu: add support for MOTU 4pre - iommu/amd: Silence warnings under memory pressure - libata/ahci: Drop PCS quirk for Denverton and beyond - iommu/iova: Avoid false sharing on fq_timer_on - libtraceevent: Change users plugin directory - [armhf] dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks - ACPI: custom_method: fix memory leaks - ACPI / PCI: fix acpi_pci_irq_enable() memory leak - closures: fix a race on wakeup from closure_sync - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' - md/raid1: fail run raid1 array when active disk less than one - dmaengine: ti: edma: Do not reset reserved paRAM slots - kprobes: Prohibit probing on BUG() and WARN() address - [s390x] crypto: xts-aes-s390 fix extra run-time crypto self tests finding - [x86] cpu: Add Tiger Lake to Intel family - [x86] platform: intel_pmc_core: Do not ioremap RAM - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set - raid5: don't set STRIPE_HANDLE to stripe which is in batch list - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD - mmc: sdhci: Fix incorrect switch to HS mode - mmc: core: Add helper function to indicate if SDIO IRQs is enabled - [armhf,arm64] mmc: dw_mmc: Re-store SDIO IRQs mask at system resume - raid5: don't increment read_errors on EILSEQ return - libertas: Add missing sentinel at end of if_usb.c fw_table - e1000e: add workaround for possible stalled packet - ALSA: hda - Drop unsol event handler for Intel HDMI codecs - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() - [x86] ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 - [x86] iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type - [armhf] media: omap3isp: Set device on omap3isp subdevs - PM / devfreq: passive: fix compiler warning - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 - ALSA: firewire-tascam: handle error code when getting current source of clock - ALSA: firewire-tascam: check intermediate state of clock status and retry - scsi: scsi_dh_rdac: zero cdb in send_mode_select() - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag - printk: Do not lose last line in kmsg buffer dump - IB/mlx5: Free mpi in mp_slave mode - IB/hfi1: Define variables as unsigned long to fix KASAN warning - randstruct: Check member structs in is_pure_ops_struct() - ceph: use ceph_evict_inode to cleanup inode's resource - [x86] ALSA: hda/realtek - PCI quirk for Medion E4254 - blk-mq: add callback of .cleanup_rq - scsi: implement .cleanup_rq callback - [ppc64el] imc: Dont create debugfs files for cpu-less nodes - fuse: fix missing unlock_page in fuse_writepage() - [x86] KVM: always stop emulation on page fault - [x86] KVM: set ctxt->have_exception in x86_decode_insn() - [x86] KVM: Manually calculate reserved bits when loading PDPTRS - [x86] media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table - media: don't drop front-end reference count for ->detach - binfmt_elf: Do not move brk for INTERP-less ET_EXEC - [x86] ASoC: Intel: NHLT: Fix debug print format - [x86] ASoC: Intel: Skylake: Use correct function to access iomem space - [x86] ASoC: Intel: Fix use of potentially uninitialized variable - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - [arm64] tlb: Ensure we execute an ISB following walk cache invalidation - [arm64] dts: rockchip: limit clock rate of MMC controllers for RK3328 - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP - regulator: Defer init completion for a while after late_initcall - efifb: BGRT: Improve efifb_bgrt_sanity_check - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer - memcg, kmem: do not fail __GFP_NOFAIL charges - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask - block: fix null pointer dereference in blk_mq_rq_timed_out() - smb3: allow disabling requesting leases - ovl: Fix dereferencing possible ERR_PTR() - ovl: filter of trusted xattr results in audit - btrfs: fix allocation of free space cache v1 bitmap pages - Btrfs: fix use-after-free when using the tree modification log - btrfs: Relinquish CPUs in btrfs_compare_trees - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls - Btrfs: fix race setting up and completing qgroup rescan workers - md/raid6: Set R5_ReadError when there is read failure on parity disk - md: don't report active array_state until after revalidate_disk() completes. - md: only call set_in_sync() when it is expected to succeed. - cfg80211: Purge frame registrations on iftype change - /dev/mem: Bail out upon SIGKILL. - ext4: fix warning inside ext4_convert_unwritten_extents_endio - ext4: fix punch hole for inline_data file systems - quota: fix wrong condition in is_quota_modification() - hwrng: core - don't wait on add_early_randomness() - CIFS: fix max ea value size - CIFS: Fix oplock handling for SMB 2.1+ protocols - md/raid0: avoid RAID0 data corruption due to layout confusion. - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone - drm/amd/display: Restore backlight brightness after system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.78 - tpm: use tpm_try_get_ops() in tpm-sysfs.c. - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations - [armhf,arm64] drm/panel: simple: fix AUO g185han01 horizontal blanking - [armhf,arm64] drm/panel: check failure cases in the probe func - [armhf,arm64] drm/rockchip: Check for fast link training before enabling psr - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() - [ppc64el] PCI: rpaphp: Avoid a sometimes-uninitialized warning - ipmi_si: Only schedule continuously in the thread in maintenance mode - [armhf,arm64] clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks - drm/amd/display: fix issue where 252-255 values are clipped - drm/amd/display: reprogram VM config when system resume - [ppc64el] powernv/ioda2: Allocate TCE table levels on demand for default DMA window - [ppc64el] xmon: Check for HV mode when dumping XIVE info from OPAL - [ppc64el] rtas: use device model APIs and serialization during LPM - [ppc64el] futex: Fix warning: 'oldval' may be used uninitialized in this function - [ppc64el] pseries/mobility: use cond_resched when updating device tree - [armhf,arm64] pinctrl: tegra: Fix write barrier placement in pmx_writel - [ppc64el] eeh: Clear stale EEH_DEV_NO_HANDLER flag - vfio_pci: Restore original state on release - drm/nouveau/volt: Fix for some cards having 0 maximum voltage - [x86] pinctrl: amd: disable spurious-firing GPIO IRQs - drm/amd/display: support spdif - drm/amdgpu/si: fix ASIC tests - [ppc64el] exception: machine check use correct cfar for late handler - pstore: fs superblock limits - [ppc64el] pseries: correctly track irq state in default idle - [arm64] pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c - [ppc64el] dump kernel log before carrying out fadump or kdump - [arm64] mbox: qcom: add APCS child device for QCS404 - scsi: core: Reduce memory required for SCSI logging - dma-buf/sw_sync: Synchronize signal vs syncpt free - ext4: fix potential use after free after remounting with noblock_validity - [mips*] tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean - [x86] i2c-cht-wc: Fix lockdep warning - [x86] mfd: intel-lpss: Remove D3cold delay - HID: wacom: Fix several minor compiler warnings - [armel,armhf] 8898/1: mm: Don't treat faults reported from cache maintenance as writes - [armhf] rtc: snvs: fix possible race condition - HID: apple: Fix stuck function keys when using FN - [arm64] PCI: rockchip: Propagate errors for optional regulators - [armhf] PCI: imx6: Propagate errors for optional regulators - [armel,armhf] 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address - fat: work around race with userspace's read via blockdev while mounting - pktcdvd: remove warning on attempting to register non-passthrough dev - [s390x] hypfs: Fix error number left in struct pointer member - ocfs2: wait for recovering done after direct unlock request - [arm64] consider stack randomization for mmap base only when necessary - [mips*] properly account for stack randomization and stack guard gap - [armel,armhf] properly account for stack randomization and stack guard gap - [armel,armhf] use STACK_TOP when computing mmap base address - block: mq-deadline: Fix queue restart handling - bpf: fix use after free in prog symbol exposure - cxgb4:Fix out-of-bounds MSI-X info array access - erspan: remove the incorrect mtu limit for erspan - hso: fix NULL-deref on tty open - ipv6: drop incoming packets having a v4mapped source address - ipv6: Handle missing host route in __ipv6_ifa_notify - net: ipv4: avoid mixed n_redirects and rate_tokens usage - net: qlogic: Fix memory leak in ql_alloc_large_buffers - net: Unpublish sk from sk_reuseport_cb before call_rcu - nfc: fix memory leak in llcp_sock_bind() - qmi_wwan: add support for Cinterion CLS8 devices - rxrpc: Fix rxrpc_recvmsg tracepoint - sch_dsmark: fix potential NULL deref in dsmark_init() - udp: fix gso_segs calculations - vsock: Fix a lockdep warning in __vsock_release() - udp: only do GSO if # of segs > 1 - net/rds: Fix error handling in rds_ib_add_one() - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() - tipc: fix unlimited bundling of small messages - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash - NFC: fix attrs checks in netlink interface - kexec: bail out upon SIGKILL when allocating memory. - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.79 - [s390x] process: avoid potential reading of freed stack - [s390x] KVM: Test for bad access register and size at the start of S390_MEM_OP - [s390x] topology: avoid firing events before kobjs are created - [s390x] cio: exclude subchannels with no parent from pseudo check - [ppc64el] KVM: Book3S HV: Fix race in re-enabling XIVE escalation interrupts - [ppc64el] KVM: Book3S HV: Check for MMU ready on piggybacked virtual cores - [ppc64el] KVM: Book3S HV: Don't lose pending doorbell request on migration on P9 - [x86] KVM: Fix userspace set invalid CR4 - [x86] KVM: nVMX: handle page fault in vmread fix - nbd: fix max number of supported devs - PM / devfreq: tegra: Fix kHz to Hz conversion - ASoC: Define a set of DAPM pre/post-up events - [armhf] ASoC: sgtl5000: Improve VAG power and mute control - [ppc64el] mce: Fix MCE handling for huge pages - [ppc64el] mce: Schedule work from irq_work - [ppc64el] powernv: Restrict OPAL symbol map to only be readable by root - [ppc64el] powernv/ioda: Fix race in TCE level allocation - [ppc64el] book3s64/mm: Don't do tlbie fixup for some hardware revisions - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file - [x86] crypto: qat - Silence smp_processor_id() warning - crypto: skcipher - Unmap pages after an external error - [mips*el/loongson-3] Treat Loongson Extensions as ASEs - power: supply: sbs-battery: use correct flags field - power: supply: sbs-battery: only return health when battery present - tracing: Make sure variable reference alias has correct var_ref_idx - usercopy: Avoid HIGHMEM pfn warning - timer: Read jiffies once when forwarding base clk - [x86] PCI: vmd: Fix shadow offsets to reflect spec changes - PCI: Restore Resizable BAR size bits correctly for 1MB BARs - [armhf] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout - perf stat: Fix a segmentation fault when using repeat forever - [armhf] drm/omap: fix max fclk divider for omap36xx - [arm64] drm/msm/dsi: Fix return value check for clk_get_parent - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors - [x86] drm/i915/gvt: update vgpu workload head pointer correctly - mmc: sdhci: improve ADMA error reporting - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" - xen/xenbus: fix self-deadlock after killing user process - ieee802154: atusb: fix use-after-free at disconnect - [s390x] cio: avoid calling strlen on null pointer - cfg80211: initialize on-stack chandefs - [arm64] cpufeature: Detect SSBS and advertise to userspace - ima: always return negative code for error - ima: fix freeing ongoing ahash_request - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() - 9p: Transport error uninitialized - 9p: avoid attaching writeback_fid on mmap with type PRIVATE - xen/pci: reserve MCFG areas earlier - ceph: fix directories inode i_blkbits initialization - ceph: reconnect connection if session hang in opening state - watchdog: aspeed: Add support for AST2600 - netfilter: nf_tables: allow lookups in dynamic sets - drm/amdgpu: Fix KFD-related kernel oops on Hawaii - drm/amdgpu: Check for valid number of registers to read - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors - [x86] purgatory: Disable the stackleak GCC plugin for the purgatory - ntb: point to right memory window index - thermal: Fix use-after-free when unregistering thermal zone device - thermal_hwmon: Sanitize thermal_zone type - libnvdimm/region: Initialize bad block for volatile namespaces - fuse: fix memleak in cuse_channel_open - libnvdimm/nfit_test: Fix acpi_handle redefinition - sched/membarrier: Call sync_core only before usermode for same mm - sched/membarrier: Fix private expedited registration check - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() - kernel/elfcore.c: include proper prototypes - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed - [ppc64el] KVM: HV: XIVE: Free escalation interrupts before disabling the VP - [x86] KVM: nVMX: Fix consistency check on injected exception error code - nbd: fix crash when the blksize is zero - [ppc64el] pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() - [ppc64el] radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure - tick: broadcast-hrtimer: Fix a race in bc_set_next - perf tools: Fix segfault in cpu_cache_level__read() - perf stat: Reset previous counts on repeat with interval - [arm64] ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 - [arm64] KVM: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe - [arm64] docs: Document SSBS HWCAP - [arm64] fix SSBS sanitization - [arm64] Add sysfs vulnerability show for spectre-v1 - [arm64] add sysfs vulnerability show for meltdown - [arm64] enable generic CPU vulnerabilites support - [arm64] Always enable ssb vulnerability detection - [arm64] Provide a command line to disable spectre_v2 mitigation - [arm64] Advertise mitigation of Spectre-v2, or lack thereof - [arm64] Always enable spectre-v2 vulnerability detection - [arm64] add sysfs vulnerability show for spectre-v2 - [arm64] add sysfs vulnerability show for speculative store bypass - [arm64] ssbs: Don't treat CPUs with SSBS as unaffected by SSB - [arm64] Force SSBS on context switch - [arm64] Use firmware to detect CPUs that are not affected by Spectre-v2 - [arm64] speculation: Support 'mitigations=' cmdline option - vfs: Fix EOVERFLOW testing in put_compat_statfs64 - cfg80211: add and use strongly typed element iteration macros - cfg80211: Use const more consistently in for_each_element macros - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.80 - panic: ensure preemption is disabled during panic() - f2fs: use EINVAL for superblock with invalid magic - USB: rio500: Remove Rio 500 kernel driver - USB: yurex: Don't retry on unexpected errors - USB: yurex: fix NULL-derefs on disconnect - USB: usb-skeleton: fix runtime PM after driver unbind - USB: usb-skeleton: fix NULL-deref on disconnect - xhci: Fix false warning message about wrong bounce buffer write length - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long - xhci: Check all endpoints for LPM timeout - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts - usb: xhci: wait for CNR controller not ready bit in xhci resume - xhci: Prevent deadlock when xhci adapter breaks during init - xhci: Increase STS_SAVE timeout in xhci_suspend() - USB: adutux: fix use-after-free on disconnect - USB: adutux: fix NULL-derefs on disconnect - USB: adutux: fix use-after-free on release - USB: iowarrior: fix use-after-free on disconnect - USB: iowarrior: fix use-after-free on release - USB: iowarrior: fix use-after-free after driver unbind - USB: usblp: fix runtime PM after driver unbind - USB: chaoskey: fix use-after-free on release - USB: ldusb: fix NULL-derefs on driver unbind - serial: uartlite: fix exit path null pointer - USB: serial: keyspan: fix NULL-derefs on open() and write() - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 - USB: serial: option: add Telit FN980 compositions - USB: serial: option: add support for Cinterion CLS8 devices - USB: serial: fix runtime PM after driver unbind - USB: usblcd: fix I/O after disconnect - USB: microtek: fix info-leak at probe - USB: dummy-hcd: fix power budget for SuperSpeed mode - USB: legousbtower: fix slab info leak at probe - USB: legousbtower: fix deadlock on disconnect - USB: legousbtower: fix potential NULL-deref on disconnect - USB: legousbtower: fix open after failed reset request - USB: legousbtower: fix use-after-free on release - [x86] mei: me: add comet point (lake) LP device ids - [x86] mei: avoid FW version request on Ibex Peak and earlier - [armhf,arm64] iio: adc: axp288: Override TS pin bias current for some models - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified - perf llvm: Don't access out-of-scope array - perf inject jit: Fix JIT_CODE_MOVE filename - blk-wbt: fix performance regression in wbt scale_up/scale_down - CIFS: Gracefully handle QueryInfo errors during open - CIFS: Force revalidate inode when dentry is stale - CIFS: Force reval dentry if LOOKUP_REVAL flag is set - kernel/sysctl.c: do not override max_threads provided by userspace - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic - btrfs: fix incorrect updating of log root tree - btrfs: fix uninitialized ret in ref-verify - NFS: Fix O_DIRECT accounting of number of bytes read/written - [mips*] elf_hwcap: Export userspace ASEs - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags - ACPI/PPTT: Add support for ACPI 6.3 thread flag - [arm64] topology: Use PPTT to determine if PE is a thread - vfs: Fix the locking in dcache_readdir() and friends - media: stkwebcam: fix runtime PM after driver unbind - [arm64] sve: Fix wrong free for task->thread.sve_state - [rt] tracing/hwlat: Report total time spent in all NMIs during the sample - [rt] tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency - ftrace: Get a reference counter for the trace_array on filter files - tracing: Get trace_array reference for available_tracers files - hwmon: Fix HWMON_P_MIN_ALARM mask - [x86] asm: Fix MWAITX C-state hint value - [x86] PCI: vmd: Fix config addressing when using bus offsets - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.81 - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - [mips*el/loongson-3] Fix the link time qualifier of 'serial_exit()' - [arm64] net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - r8152: Set macpassthru in reset_resume callback - libata/ahci: Fix PCS quirk application - md/raid0: fix warning message for parameter default_layout - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - net: avoid potential infinite loop in tc_ctl_action() - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - sctp: change sctp_prot .no_autobind with true - memfd: Fix locking when tagging pins - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Input: synaptics-rmi4 - avoid processing unknown IRQs - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - [x86] drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - EDAC/ghes: Fix Use after free in ghes_edac remove path - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up - [arm64] pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.82 - zram: fix race between backing_dev_show and backing_dev_store - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - Btrfs: fix memory leak due to concurrent append writes with fiemap - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - btrfs: tracepoints: Fix wrong parameter order for qgroup events - wil6210: fix freeing of rx buffers in EDMA mode - f2fs: flush quota blocks after turnning it off - scsi: lpfc: Fix a duplicate 0711 log message number. - f2fs: fix to recover inode's i_gc_failures during POR - f2fs: fix to recover inode->i_flags of inode block during POR - [x86] HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override - [arm64,armel,armhf] usb: dwc2: fix unbalanced use of external vbus-supply - [x86] tools/power turbostat: fix goldmont C-state limit decoding - [x86] cpu: Add Atom Tremont (Jacobsville) - [arm64] drm/msm/dpu: handle failures while initializing displays - bcache: fix input overflow to writeback_rate_minimum - PCI: Fix Switchtec DMA aliasing quirk dmesg noise - Btrfs: fix deadlock on tree root leaf when finding free extent - netfilter: ipset: Make invalid MAC address checks consistent - HID: i2c-hid: Disable runtime PM for LG touchscreen - HID: i2c-hid: Ignore input report if there's no data present on Elan touchpanels - HID: i2c-hid: Add Odys Winbook 13 to descriptor override - [x86] platform/x86: Add the VLV ISP PCI ID to atomisp2_pm - [x86] platform/x86: Fix config space access for intel_atomisp2_pm - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 - HID: Add ASUS T100CHI keyboard dock battery quirks - NFSv4: Ensure that the state manager exits the loop on SIGKILL - HID: steam: fix boot loop with bluetooth firmware - HID: steam: fix deadlock with input devices. - [arm64,armhf] usb: dwc3: gadget: early giveback if End Transfer already completed - [arm64,armhf] usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete - ALSA: usb-audio: Cleanup DSD whitelist - usb: handle warm-reset port requests on hub resume - [armhf] rtc: pcf8523: set xtal load capacitance from DT - [arm64] Add MIDR encoding for HiSilicon Taishan CPUs - [arm64] kpti: Whitelist HiSilicon Taishan v110 CPUs - scsi: lpfc: Correct localport timeout duration error - CIFS: Respect SMB2 hdr preamble size in read responses - cifs: add credits from unmatched responses/messages - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT - exec: load_script: Do not exec truncated interpreter path - [arm64,armhf] net: dsa: mv88e6xxx: Release lock while requesting IRQ - PCI/PME: Fix possible use-after-free on remove - [arm64,armhf] iio: adc: meson_saradc: Fix memory allocation order - [x86] iio: fix center temperature of bmc150-accel-core - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Return appropriate error code for allocation failures - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init (CVE-2019-19065) - RDMA/iwcm: Fix a lock inversion issue - [x86] HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 - [arm64] gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - [armhf] serial: mctrl_gpio: Check for NULL pointer - efi/cper: Fix endianness of PCIe class code - [x86] efi/x86: Do not clean dummy variable in kexec path - [x86] xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - [arm64] armv8_deprecated: Checking return value for memory allocation - [x86] cpu: Add Comet Lake to the Intel CPU models header - sched/vtime: Fix guest/system mis-accounting on task switch - [x86] perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - iio: imu: adis16400: release allocated memory on failure (CVE-2019-19060) - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (CVE-2019-19048) - NFSv4: Fix leak of clp->cl_acceptor string - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 - iwlwifi: exclude GEO SAR support for 3168 - nbd: verify socket is supported during setup - USB: legousbtower: fix a signedness bug in tower_probe() - [x86] thunderbolt: Use 32-bit writes when writing ring producer/consumer - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe() (CVE-2019-15098) - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 - ALSA: hda/realtek - Add support for ALC623 - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix __le32/__le64 accessors in debugfs code - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - nl80211: fix validation of mesh path nexthop - [s390x] cmm: fix information leak in cmm_timeout_handler() - [s390x] idle: fix cpu idle time calculation - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default - rtlwifi: Fix potential overflow on P2P code (CVE-2019-17666) - [arm64] dmaengine: qcom: bam_dma: Fix resource leak - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - ALSA: timer: Simplify error path in snd_timer_open() - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - [ppc64el] powerpc/powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.83 - regulator: of: fix suspend-min/max-voltage parsing - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay - [arm64] arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - [armhf] regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - [x86] ASoC: rt5682: add NULL handler to set_jack function - [armhf] regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - [arm64,armhf] ASoc: rockchip: i2s: Fix RPM imbalance - [armel,armhf] mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - drm/amdgpu: fix potential VM faults - scsi: target: core: Do not overwrite CDB byte 1 - tracing: Fix "gfp_t" format for synthetic events - of: unittest: fix memory leak in unittest_data_add (CVE-2019-19049) - [arm64,armhf] irqchip/gic-v3-its: Use the exact ITSList for VMOVP - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: fix sk_page_frag() recursion from memory reclaim - [arm64] net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - [armhf] net: dsa: b53: Do not clear existing mirrored port mask - [armhf] net: phy: bcm7xxx: define soft_reset for 40nm EPHY - net: usb: lan78xx: Connect PHY before registering MAC - [arm64,armhf] net: dsa: fix switch tree list - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net/flow_dissector: switch to siphash - wireless: Skip directory when generating certificates - [x86] platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - [ppc64el] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.84 - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - [mips*] net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: usb: qmi_wwan: add support for DW5821e with eSIM support - nfc: netlink: fix double device reference drop - qede: fix NULL pointer deref in __qede_remove() - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - [arm64] Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - [armhf] sunxi: Fix CPU powerdown on A83T - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - [x86] intel_th: pci: Add Comet Lake PCH support - [x86] intel_th: pci: Add Jasper Lake PCH support - [x86] apic/32: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - [armhf] can: flexcan: disable completely the ECC mechanism - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052) - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - sched/fair: Fix -Wunused-but-set-variable warnings - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - [arm64,armhf] PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - [amd64] HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/qedr: Fix reported firmware version - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (CVE-2019-19045) - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - netfilter: nf_flow_table: set timeout before insertion into hashes - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: gadget: composite: Fix possible double free memory bug - [arm64] usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813) - usb: gadget: configfs: fix concurrent issue between composite APIs - [arm64,armhf] usb: dwc3: remove the call trace of USBx_GFLADJ - [x86] perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - [x86] perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - [x86] perf/x86/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - nvme-multipath: fix possible io hang after ctrl reconnect - [amd64] fjes: Handle workqueue allocation failure - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ" - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - [x86] hv_netvsc: Fix error handling in netvsc_attach() - [arm64,armhf] usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - NFSv4: Don't allow a cached open with a revoked delegation - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation - blkcg: make blkcg_print_stat() print stats only for online blkgs - [x86] iio: imu: mpu6050: Add support for the ICM 20602 IMU - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050 - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - net: prevent load/store tearing on sk->sk_stamp - [x86] iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/cpu: Add Tremont to the cpu vulnerability whitelist https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.85 - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - ipmr: Fix skb headroom in ipmr_get_route(). - net: gemini: add missed free_netdev - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - [armhf] net: ethernet: dwmac-sun8i: Use the correct function in exit path - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - iio: adc: max9611: explicitly cast gain_selectors - tee: optee: take DT status property into account - ath10k: fix kernel panic by moving pci flush after napi_disable - clk: sunxi-ng: h6: fix PWM gate/reset offset - soundwire: Initialize completion for defer messages - [x86] soundwire: intel: Fix uninitialized adev deref - [arm64] dts: allwinner: a64: Orange Pi Win: Fix SD card node - [arm64] dts: allwinner: a64: Olinuxino: fix DRAM voltage - [arm64] dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() - [arm64] soc/tegra: pmc: Fix pad voltage configuration for Tegra186 - [arm64] dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply - y2038: make do_gettimeofday() and get_seconds() inline - rtc: sysfs: fix NULL check in rtc_add_groups() - remoteproc/davinci: Use %zx for formating size_t - extcon: cht-wc: Return from default case to avoid warnings - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set - ALSA: seq: Do error checks at creating system ports - ath10k: skip resetting rx filter for WCN3990 - ath9k: fix tx99 with monitor mode interface - wil6210: drop Rx multicast packets that are looped-back to STA - wil6210: set edma variables only for Talyn-MB devices - wil6210: prevent usage of tx ring 0 for eDMA - wil6210: fix invalid memory access for rx_buff_mgmt debugfs - ath10k: limit available channels via DT ieee80211-freq-limit - ice: Update request resource command to latest specification - ice: Prevent control queue operations during reset - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated - ice: Fix and update driver version string - ASoC: dapm: Don't fail creating new DAPM control on NULL pinctrl - ASoC: dpcm: Properly initialise hw->rate_max - ASoC: meson: axg-fifo: report interrupt request failure - ASoC: AMD: Change MCLK to 48Mhz - pinctrl: ingenic: Probe driver at subsys_initcall - [armhf] dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale - [armhf] dts: exynos: Fix HDMI-HPD line handling on Arndale - [armhf] dts: exynos: Fix sound in Snow-rev5 Chromebook - liquidio: fix race condition in instruction completion processing - [arm64] dts: stratix10: i2c clock running out of spec - [armhf] dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks - i40evf: Validate the number of queues a PF sends - i40e: use correct length for strncpy - i40evf: set IFF_UNICAST_FLT flag for the VF - i40e: Check and correct speed values for link on open - i40evf: Don't enable vlan stripping when rx offload is turned on - i40e: hold the rtnl lock on clearing interrupt scheme - i40evf: cancel workqueue sync for adminq when a VF is removed - i40e: Prevent deleting MAC address from VF when set by PF - IB/rxe: avoid back-to-back retries - IB/rxe: fixes for rdma read retry - iwlwifi: drop packets with bad status in CD - iwlwifi: don't WARN on trying to dump dead firmware - iwlwifi: mvm: avoid sending too many BARs - media: vicodec: fix out-of-range values when decoding - media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers - media: ov772x: Disable clk on error path - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument - mwifiex: do no submit URB in suspended state - mwifex: free rx_cmd skb in suspended state - brcmfmac: fix wrong strnchr usage - mt76: Fix comparisons with invalid hardware key index - soc: imx: gpc: fix PDN delay - ASoC: rsnd: ssi: Fix issue in dma data address assignment - net: hns3: Fix for multicast failure - net: hns3: Fix error of checking used vlan id - net: hns3: Fix for loopback selftest failed problem - net: hns3: Change the dst mac addr of loopback packet - net/mlx5: Fix atomic_mode enum values - net: phy: mscc: read 'vsc8531,vddmac' as an u32 - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 - [armhf] dts: meson8: fix the clock controller register size - [armhf] dts: meson8b: fix the clock controller register size - mtd: rawnand: marvell: use regmap_update_bits() for syscon access - mtd: rawnand: fsl_ifc: check result of SRAM initialization - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions - mtd: rawnand: qcom: don't include dma-direct.h - IB/mlx5: Change TX affinity assignment in RoCE LAG mode - qxl: fix null-pointer crash during suspend - mac80211: fix saving a few HE values - cfg80211: validate wmm rule when setting - f2fs: avoid wrong decrypted data from disk - net: lan78xx: Bail out if lan78xx_get_endpoints fails - rtnetlink: move type calculation out of loop - ASoC: sgtl5000: avoid division by zero if lo_vag is zero - ath10k: avoid possible memory access violation - [armhf] dts: exynos: Disable pull control for S5M8767 PMIC - ath10k: wmi: disable softirq's while calling ieee80211_rx - i2c: mediatek: Use DMA safe buffers for i2c transactions - IB/mlx5: Don't hold spin lock while checking device state - IB/ipoib: Ensure that MTU isn't less than minimum permitted - RDMA/core: Rate limit MAD error messages - RDMA/core: Follow correct unregister order between sysfs and cgroup - udf: Fix crash during mount - ASoC: dapm: Avoid uninitialised variable warning - [x86] ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation - ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA - [powerpc] make PowerMac cache node search conditional on CONFIG_PPC_PMAC - [armhf] dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files - [armhf] dts: omap3-gta04: fixes for tvout / venc - [armhf] dts: omap3-gta04: tvout: enable as display1 alias - [armhf] dts: omap3-gta04: fix touchscreen tsc2007 - [armhf] dts: omap3-gta04: make NAND partitions compatible with recent U-Boot - [armhf] dts: omap3-gta04: keep vpll2 always on - f2fs: submit bio after shutdown - failover: Fix error return code in net_failover_create - sched/debug: Explicitly cast sched_feat() to bool - sched/debug: Use symbolic names for task state constants - firmware: arm_scmi: use strlcpy to ensure NULL-terminated strings - [arm64] dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire - [armhf] dts: exynos: Disable pull control for PMIC IRQ line on Artik5 board - usb: mtu3: disable vbus rise/fall interrupts of ltssm - EDAC, sb_edac: Return early on ADDRV bit and address type test - [armhf] rtc: pl030: fix possible race condition - ath9k: add back support for using active monitor interfaces for tx99 - dmaengine: at_xdmac: remove a stray bottom half unlock - RDMA/hns: Fix an error code in hns_roce_v2_init_eq_table() - IB/hfi1: Missing return value in error path for user sdma - signal: Always ignore SIGKILL and SIGSTOP sent to the global init - signal: Properly deliver SIGILL from uprobes - signal: Properly deliver SIGSEGV from x86 uprobes - f2fs: fix memory leak of write_io in fill_super() - f2fs: fix memory leak of percpu counter in fill_super() - f2fs: fix setattr project check upon fssetxattr ioctl - scsi: qla2xxx: Use correct qpair for ABTS/CMD - scsi: qla2xxx: Fix iIDMA error - scsi: qla2xxx: Defer chip reset until target mode is enabled - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 - scsi: qla2xxx: Fix deadlock between ATIO and HW lock - scsi: qla2xxx: Increase abort timeout value - scsi: qla2xxx: Check for Register disconnect - scsi: qla2xxx: Fix port speed display on chip reset - scsi: qla2xxx: Fix dropped srb resource. - scsi: qla2xxx: Fix duplicate switch's Nport ID entries - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 - scsi: lpfc: Fix errors in log messages. - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() - [armhf] imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set - scsi: pm80xx: Corrected dma_unmap_sg() parameter - scsi: pm80xx: Fixed system hang issue during kexec boot - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list - net: aquantia: fix hw_atl_utils_fw_upload_dwords - Drivers: hv: vmbus: Fix synic per-cpu context initialization - nvmem: core: return error code instead of NULL from nvmem_device_get - media: dt-bindings: adv748x: Fix decimal unit addresses - [x86] ALSA: hda: Fix implicit definition of pci_iomap() on SH - media: fix: media: pci: meye: validate offset to avoid arbitrary access - media: dvb: fix compat ioctl translation - net: bcmgenet: Fix speed selection for reverse MII - [arm64] dts: meson: libretech: update board model - [arm64] dts: meson-axg: use the proper compatible for ethmac - [x86] ALSA: intel8x0m: Register irq handler after register initializations - [arm64] dts: renesas: salvator-common: adv748x: Override secondary addresses - [arm64] dts: renesas: r8a77965: Attach the SYS-DMAC to the IPMMU - [arm64] dts: renesas: r8a77965: Fix HS-USB compatible - [arm64] dts: renesas: r8a77965: Fix clock/reset for usb2_phy1 - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() - llc: avoid blocking in llc_sap_close() - [armhf] dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value - [arm64] soc: qcom: wcnss_ctrl: Avoid string overflow - [arm64] dts: broadcom: Fix I2C and SPI bus warnings - [armhf] dts: bcm: Fix SPI bus warnings - [armhf] dts: aspeed: Fix I2C bus warnings - [ppc64el,powerpc*] powerpc/vdso: Correct call frame information - [armhf] dts: socfpga: Fix I2C bus unit-address error - [armhf] dts: sunxi: Fix I2C bus warnings - [armhf] dts: sun9i: Fix I2C bus warnings - android: binder: no outgoing transaction when thread todo has transaction - cxgb4: Fix endianness issue in t4_fwcache() - [arm64] fix for bad_mode() handler to always result in panic - block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash - blok, bfq: do not plug I/O if all queues are weight-raised - [arm64] dts: meson: Fix erroneous SPI bus warnings - power: supply: ab8500_fg: silence uninitialized variable warnings - component: fix loop condition to call unbind() if bind() fails - kernfs: Fix range checks in kernfs_get_target_path - ip_gre: fix parsing gre header in ipgre_err - scsi: ufshcd: Fix NULL pointer dereference for in ufshcd_init - [armhf] dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 - [arm64] dts: rockchip: Fix I2C bus unit-address error on rk3399-puma-haikou - [x86] ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask - netfilter: nf_tables: avoid BUG_ON usage - ath9k: Fix a locking bug in ath9k_add_interface() - [s390x] qeth: uninstall IRQ handler on device removal - [s390x] qeth: invoke softirqs after napi_schedule() - media: vsp1: Fix vsp1_regs.h license header - media: vsp1: Fix YCbCr planar formats pitch calculation - media: ov2680: don't register the v4l2 subdevice before checking chip ID - PCI/ACPI: Correct error message for ASPM disabling - net: socionext: Fix two sleep-in-atomic-context bugs in ave_rxfifo_reset() - PCI: mediatek: Fix unchecked return value - [armhf] dts: xilinx: Fix I2C and SPI bus warnings - serial: uartps: Fix suspend functionality - serial: samsung: Enable baud clock for UART reset procedure in resume - serial: mxs-auart: Fix potential infinite loop - tty: serial: qcom_geni_serial: Fix serial when not used as console - [arm64] dts: ti: k3-am65: Change #address-cells and #size-cells of interconnect to 2 - samples/bpf: fix a compilation failure - spi: mediatek: Don't modify spi_transfer when transfer. - ASoC: rt5682: Fix the boost volume at the begining of playback - ipmi_si_pci: fix NULL device in ipmi_si error message - ipmi_si: fix potential integer overflow on large shift - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address - ipmi: fix return value of ipmi_set_my_LUN - net: hns3: fix return type of ndo_start_xmit function - net: cavium: fix return type of ndo_start_xmit function - net: ibm: fix return type of ndo_start_xmit function - [ppc64el,powerpc*] iommu: Avoid derefence before pointer check - [ppc64el,powerpc*] selftests: Do not fail with reschedule - [ppc64el,powerpc64] hash: Fix stab_rr off by one initialization - [ppc64el,powerpc64] pseries/memory-hotplug: Only update DT once per memory DLPAR request - [ppc64el,powerpc64] pseries: Disable CPU hotplug across migrations - [ppc64el,powerpc*] Fix duplicate const clang warning in user access code - RDMA/i40iw: Fix incorrect iterator type - OPP: Protect dev_list with opp_table lock - of/unittest: Fix I2C bus unit-address error - libfdt: Ensure INT_MAX is defined in libfdt_env.h - power: supply: twl4030_charger: fix charging current out-of-bounds - power: supply: twl4030_charger: disable eoc interrupt on linear charge - net: mvpp2: fix the number of queues per cpu for PPv2.2 - net: marvell: fix return type of ndo_start_xmit function - net: toshiba: fix return type of ndo_start_xmit function - net: xilinx: fix return type of ndo_start_xmit function - net: broadcom: fix return type of ndo_start_xmit function - net: amd: fix return type of ndo_start_xmit function - net: sun: fix return type of ndo_start_xmit function - net: hns3: Fix for setting speed for phy failed problem - net: hns3: Fix cmdq registers initialization issue for vf - net: hns3: Clear client pointer when initialize client failed or unintialize finished - net: hns3: Fix client initialize state issue when roce client initialize failed - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() - nfp: provide a better warning when ring allocation fails - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started - usb: chipidea: Fix otg event handler - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT - [s390x] zcrypt: enable AP bus scan without a valid default domain - [s390x] vdso: avoid 64-bit vdso mapping for compat tasks - [s390x] vdso: correct CFI annotations of vDSO functions - brcmfmac: increase buffer for obtaining firmware capabilities - brcmsmac: Use kvmalloc() for ucode allocations - mlxsw: spectrum: Init shaper for TCs 8..15 - PCI: portdrv: Initialize service drivers directly - [armhf] dts: am335x-evm: fix number of cpsw - [armhf] dts: ti: Fix SPI and I2C bus warnings - f2fs: avoid infinite loop in f2fs_alloc_nid - f2fs: fix to recover inode's uid/gid during POR - [armhf] dts: ux500: Correct SCU unit address - [armhf] dts: ux500: Fix LCDA clock line muxing - [armhf] dts: ste: Fix SPI controller node names - spi: pic32: Use proper enum in dmaengine_prep_slave_rg - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) - cpufeature: avoid warning when compiling with clang - [armhf] crypto: crc32 - avoid warning when compiling with Clang - [armel] dts: marvell: Fix SPI and I2C bus warnings - [x86] mce-inject: Reset injection struct after injection - [armhf,arm64] dts: clearfog: fix sdhci supply property name - bnx2x: Ignore bandwidth attention in single function mode - PCI/AER: Take reference on error devices - PCI/AER: Don't read upstream ports below fatal errors - PCI/ERR: Use slot reset if available - samples/bpf: fix compilation failure - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider - net: micrel: fix return type of ndo_start_xmit function - net: freescale: fix return type of ndo_start_xmit function - [x86] CPU: Use correct macros for Cyrix calls - [x86] CPU: Change query logic so CPUID is enabled before testing - EDAC: Correct DIMM capacity unit symbol - [mips*] kexec: Relax memory restriction - [arm64] dts: rockchip: Fix microSD in rk3399 sapphire board - mlxsw: Make MLXSW_SP1_FWREV_MINOR a hard requirement - media: imx: work around false-positive warning, again - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() - media: au0828: Fix incorrect error messages - media: davinci: Fix implicit enum conversion warning - [armhf] dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock - usb: gadget: uvc: configfs: Drop leaked references to config items - usb: gadget: uvc: configfs: Prevent format changes after linking header - usb: gadget: uvc: configfs: Sort frame intervals upon writing - [armhf] dts: exynos: Correct audio subsystem parent clock on Peach Chromebooks - i2c: aspeed: fix invalid clock parameters for very large divisors - gpiolib: Fix gpio_direction_* for single direction GPIOs - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs - phy: phy-twl4030-usb: fix denied runtime access - [armhf] dts: imx6ull: update vdd_soc voltage for 900MHz operating point - usb: gadget: uvc: Factor out video USB request queueing - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode - coresight: Use ERR_CAST instead of ERR_PTR - coresight: Fix handling of sinks - coresight: perf: Fix per cpu path management - coresight: perf: Disable trace path upon source error - coresight: tmc-etr: Handle driver mode specific ETR buffers - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP - coresight: tmc: Fix byte-address alignment for RRP - coresight: dynamic-replicator: Handle multiple connections - slimbus: ngd: register ngd driver only once. - slimbus: ngd: return proper error code instead of zero - silmbus: ngd: register controller after power up. - misc: kgdbts: Fix restrict error - misc: genwqe: should return proper error value. - vmbus: keep pointer to ring buffer page - vfio/pci: Fix potential memory leak in vfio_msi_cap_len - vfio/pci: Mask buggy SR-IOV VF INTx support - iw_cxgb4: Use proper enumerated type in c4iw_bar2_addrs - scsi: libsas: always unregister the old device if going to discover new - f2fs: fix remount problem of option io_bits - phy: lantiq: Fix compile warning - [arm64] dts: fsl: Fix I2C and SPI bus warnings - [armhf] dts: imx51-zii-rdu1: Fix the rtc compatible string - [arm64] tegra: I2C on Tegra194 is not compatible with Tegra114 - [armhf] dts: tegra30: fix xcvr-setup-use-fuses - [armhf] dts: tegra20: restore address order - [armhf] tegra: apalis_t30: fix mmc1 cmd pull-up - [armhf] tegra: apalis_t30: fix mcp2515 can controller interrupt polarity - [armhf] tegra: colibri_t30: fix mcp2515 can controller interrupt polarity - [armhf] dts: paz00: fix wakeup gpio keycode - net: smsc: fix return type of ndo_start_xmit function - net: faraday: fix return type of ndo_start_xmit function - PCI/ERR: Run error recovery callbacks for all affected devices - f2fs: update i_size after DIO completion - f2fs: fix to recover inode's project id during POR - f2fs: mark inode dirty explicitly in recover_inode() - RDMA: Fix dependencies for rdma_user_mmap_io - EDAC: Raise the maximum number of memory controllers - firmware: dell_rbu: Make payload memory uncachable - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS - Bluetooth: btrsi: fix bt tx timeout issue - [x86] hyperv: Suppress "PCI: Fatal: No config space access function found" - crypto: s5p-sss: Fix race in error handling - crypto: s5p-sss: Fix Fix argument list alignment - crypto: fix a memory leak in rsa-kcs1pad's encryption mode - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump - iwlwifi: fix non_shared_ant for 22000 devices - iwlwifi: pcie: read correct prph address for newer devices - iwlwifi: api: annotate compressed BA notif array sizes - iwlwifi: pcie: gen2: build A-MSDU only for GSO - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN - iwlwifi: mvm: use correct FIFO length - iwlwifi: mvm: Allow TKIP for AP mode - scsi: NCR5380: Clear all unissued commands on host reset - scsi: NCR5380: Have NCR5380_select() return a bool - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data - scsi: NCR5380: Check for invalid reselection target - scsi: NCR5380: Don't clear busy flag when abort fails - scsi: NCR5380: Don't call dsprintk() following reselection interrupt - scsi: NCR5380: Handle BUS FREE during reselection - scsi: NCR5380: Check for bus reset - [arm64] dts: amd: Fix SPI bus warnings - [arm64] dts: lg: Fix SPI controller node names - rtc: isl1208: avoid possible sysfs race - rtc: tx4939: fixup nvmem name and register size - rtc: armada38x: fix possible race condition - netfilter: masquerade: don't flush all conntracks if only one address deleted on device - usb: xhci-mtk: fix ISOC error when interval is zero - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear - fuse: use READ_ONCE on congestion_threshold and max_background - IB/iser: Fix possible NULL deref at iser_inv_desc() - media: ov2680: fix null dereference at power on - [s390x] vdso: correct vdso mapping for compat tasks - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused - memfd: Use radix_tree_deref_slot_protected to avoid the warning. - slcan: Fix memory leak in error path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.86 - spi: mediatek: use correct mata->xfer_len when in fifo transfer - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() - tee: optee: add missing of_node_put after of_device_is_available - Revert "OPP: Protect dev_list with opp_table lock" - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - idr: Fix idr_get_next race with idr_remove - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - [i386] bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 - [i386] bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 - [i386] bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} - net: ovs: fix return type of ndo_start_xmit function - net: xen-netback: fix return type of ndo_start_xmit function - [armhf] dts: dra7: Enable workaround for errata i870 in PCIe host mode - [armhf] dts: omap5: enable OTG role for DWC3 controller - [arm64] net: hns3: Fix for netdev not up problem when setting mtu - [arm64] net: hns3: Fix loss of coal configuration while doing reset - f2fs: return correct errno in f2fs_gc - [armhf] dts: sun8i: h3-h5: ir register size should be the whole memory block - [armhf] dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet PHY - tcp: up initial rmem to 128KB and SYN rwin to around 64KB - SUNRPC: Fix priority queue fairness - ACPI / LPSS: Make acpi_lpss_find_device() also find PCI devices - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq - f2fs: keep lazytime on remount - IB/hfi1: Error path MAD response size is incorrect - IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds - mt76x2: fix tx power configuration for VHT mcs 9 - mt76x2: disable WLAN core before probe - mt76: fix handling ps-poll frames - [arm64,armhf] iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() - [arm64,armhf] iommu/arm-smmu-v3: Fix unexpected CMD_SYNC timeout - [arm64,armhf] kvm: Fix stage2_flush_memslot for 4 level page table - [arm64] numa: Report correct memblock range for the dummy node - ath10k: fix vdev-start timeout on error - rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface - ata: ahci_brcm: Allow using driver or DSL SoCs - PM / devfreq: Fix devfreq_add_device() when drivers are built as modules. - PM / devfreq: Fix handling of min/max_freq == 0 - PM / devfreq: stopping the governor before device_unregister() - ath9k: fix reporting calculated new FFT upper max - selftests/tls: Fix recv(MSG_PEEK) & splice() test cases - usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() - usb: dwc3: gadget: Check ENBLSLPM before sending ep command - nl80211: Fix a GET_KEY reply attribute - [arm64,armhf] irqchip/irq-mvebu-icu: Fix wrong private data retrieval - watchdog: core: fix null pointer dereference when releasing cdev - watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D - [ppc64el,powerpc64] Inform the userspace about TCE update failures - printk: Do not miss new messages when replaying the log - printk: CON_PRINTBUFFER console registration is a bit racy - dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction - dmaengine: timb_dma: Use proper enum in td_prep_slave_sg - [x86] ALSA: hda: Fix mismatch for register mask and value in ext controller. - ext4: fix build error when DX_DEBUG is defined - clk: keystone: Enable TISCI clocks if K3_ARCH - sunrpc: Fix connect metrics - [x86] PCI: Apply VMD's AERSID fixup generically - mei: samples: fix a signedness bug in amt_host_if_call() - cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update - cxgb4: Use proper enum in IEEE_FAUX_SYNC - [ppc64el,powerpc*] Fix DTL buffer registration - [ppc64el,powerpc*] Fix how we iterate over the DTL entries - [ppc64el,powerpc*] xive: Move a dereference below a NULL test - mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer - PM / hibernate: Check the success of generating md5 digest before hibernation - tools: PCI: Fix compilation warnings - ice: Fix forward to queue group logic - md: allow metadata updates while suspending an array - fix - ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit - i40e: Use proper enum in i40e_ndo_set_vf_link_state - ixgbe: Fix crash with VFs and flow director on interface flap - IB/mthca: Fix error return code in __mthca_init_one() - IB/rxe: avoid srq memory leak - RDMA/hns: Bugfix for reserved qp number - RDMA/hns: Submit bad wr when post send wr exception - RDMA/hns: Bugfix for CM test - RDMA/hns: Limit the size of extend sge of sq - IB/mlx4: Avoid implicit enumerated type conversion - rpmsg: glink: smem: Support rx peak for size less than 4 bytes - msm/gpu/a6xx: Force of_dma_configure to setup DMA for GMU - OPP: Return error on error from dev_pm_opp_get_opp_count() - ACPICA: Never run _REG on system_memory and system_IO - cpuidle: menu: Fix wakeup statistics updates for polling state - ASoC: qdsp6: q6asm-dai: checking NULL vs IS_ERR() - [ppc64el,powerpc*] time: Use clockevents_register_device(), fixing an issue with large decrementer - [ppc64el,powerpc64] radix: Explicitly flush ERAT with local LPID invalidation - ata: ep93xx: Use proper enums for directions - qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers - media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote - media: pxa_camera: Fix check for pdev->dev.of_node - media: rcar-vin: fix redeclaration of symbol - media: i2c: adv748x: Support probing a single output - [x86] ALSA: hda/sigmatel - Disable automute for Elo VuPoint - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED - [ppc64el,powerpc64] Book3S PR: Exiting split hack mode needs to fixup both PC and LR - USB: serial: cypress_m8: fix interrupt-out transfer length - usb: dwc2: disable power_down on rockchip devices - mtd: physmap_of: Release resources on error - cpu/SMT: State SMT is disabled even with nosmt and without "=force" - brcmfmac: reduce timeout for action frame scan - brcmfmac: fix full timeout waiting for action frame on-channel tx - qtnfmac: request userspace to do OBSS scanning if FW can not - qtnfmac: pass sgi rate info flag to wireless core - qtnfmac: inform wireless core about supported extended capabilities - qtnfmac: drop error reports for out-of-bounds key indexes - [armhf] clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume - [armhf] clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420 - [armhf] clk: samsung: Use clk_hw API for calling clk framework from clk notifiers - printk: Correct wrong casting - NFSv4.x: fix lock recovery during delegation recall - dmaengine: ioat: fix prototype of ioat_enumerate_channels - media: ov5640: fix framerate update - media: cec-gpio: select correct Signal Free Time - gfs2: slow the deluge of io error messages - i2c: omap: use core to detect 'no zero length' quirk - i2c: qup: use core to detect 'no zero length' quirk - i2c: tegra: use core to detect 'no zero length' quirk - i2c: zx2967: use core to detect 'no zero length' quirk - Input: st1232 - set INPUT_PROP_DIRECT property - Input: silead - try firmware reload after unsuccessful resume - soc: fsl: bman_portals: defer probe after bman's probe - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware - tc-testing: fix build of eBPF programs - remoteproc: Check for NULL firmwares in sysfs interface - remoteproc: qcom: q6v5: Fix a race condition on fatal crash - kexec: Allocate decrypted control pages for kdump if SME is enabled - [x86] olpc: Fix build error with CONFIG_MFD_CS5535=m - dmaengine: rcar-dmac: set scatter/gather max segment size - xfrm: use correct size to initialise sp->ovec - ACPI / SBS: Fix rare oops when removing modules - iwlwifi: mvm: don't send keys when entering D3 - xsk: proper AF_XDP socket teardown ordering - [amd64] fsgsbase: Fix ptrace() to read the FS/GS base accurately - mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1 - mmc: tmio: Fix SCC error detection - mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size - fbdev: sbuslib: use checked version of put_user() - fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() - fbdev: fix broken menu dependencies - reset: Fix potential use-after-free in __of_reset_control_get() - bcache: account size of buckets used in uuid write to ca->meta_sectors_written - bcache: recal cached_dev_sectors on detach - [x86] platform: mlx-platform: Properly use mlxplat_mlxcpld_msn201x_items - media: dw9714: Fix error handling in probe function - media: dw9807-vcm: Fix probe error handling - media: cx18: Don't check for address of video_dev - mtd: spi-nor: cadence-quadspi: Use proper enum for dma_[un]map_single - mtd: devices: m25p80: Make sure WRITE_EN is issued before each write - [x86] intel_rdt: Introduce utility to obtain CDP peer - [x86] intel_rdt: CBM overlap should also check for overlap with CDP peer - mmc: mmci: expand startbiterr to irqmask and error check - [s390x] kasan: avoid vdso instrumentation - [s390x] kasan: avoid instrumentation of early C code - [s390x] kasan: avoid user access code instrumentation - [i386] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() - backlight: lm3639: Unconditionally call led_classdev_unregister - mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable - printk: Give error on attempt to set log buffer length to over 2G - media: isif: fix a NULL pointer dereference bug - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads - media: cx231xx: fix potential sign-extension overflow on large shift - media: venus: vdec: fix decoded data size - [x86] ALSA: hda/ca0132 - Fix input effect controls for desktop cards - lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync - lightnvm: pblk: fix incorrect min_write_pgs - lightnvm: pblk: guarantee emeta on line close - lightnvm: pblk: fix write amplificiation calculation - lightnvm: pblk: guarantee mw_cunits on read buffer - lightnvm: do no update csecs and sos on 1.2 - lightnvm: pblk: fix error handling of pblk_lines_init() - lightnvm: pblk: consider max hw sectors supported for max_write_pgs - [x86] kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error - bpf: btf: Fix a missing check bug - net: fix generic XDP to handle if eth header was mangled - gpio: syscon: Fix possible NULL ptr usage - spi: fsl-lpspi: Prevent FIFO under/overrun by default - pinctrl: gemini: Mask and set properly - spi: spidev: Fix OF tree warning logic - [armel,armhf] 8802/1: Call syscall_trace_exit even when system call skipped - [x86] mm: Do not warn about PCI BIOS W+X mappings - orangefs: rate limit the client not running info message - pinctrl: gemini: Fix up TVC clock group - scsi: arcmsr: clean up clang warning on extraneous parentheses - [x86] hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors - hwmon: (nct6775) Fix names of DIMM temperature sources - hwmon: (pwm-fan) Silence error on probe deferral - hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros - hwmon: (npcm-750-pwm-fan) Change initial pwm target to 255 - selftests: forwarding: Have lldpad_app_wait_set() wait for unknown, too - net: sched: avoid writing on noop_qdisc - netfilter: nft_compat: do not dump private area - misc: cxl: Fix possible null pointer dereference - mac80211: minstrel: fix using short preamble CCK rates on HT clients - mac80211: minstrel: fix CCK rate group streams value - mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode - spi: rockchip: initialize dma_slave_config properly - mlxsw: spectrum_switchdev: Check notification relevance based on upper device - [armhf] dts: omap5: Fix dual-role mode on Super-Speed port - tcp: start receiver buffer autotuning sooner - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate - PM / devfreq: Fix static checker warning in try_then_request_governor - tools: PCI: Fix broken pcitest compilation - [ppc64el,powerpc*] time: Fix clockevent_decrementer initalisation for PR KVM - mmc: tmio: fix SCC error handling to avoid false positive CRC error - [x86] resctrl: Fix rdt_find_domain() return value and checks https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.87 - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel - net/mlx4_en: fix mlx4 ethtool -N insertion - net/mlx4_en: Fix wrong limitation for number of TX rings - net: rtnetlink: prevent underflows in do_setvfinfo() - net/sched: act_pedit: fix WARN() in the traffic path - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key - sfc: Only cancel the PPS workqueue if it exists - net/mlx5e: Fix set vf link state error flow - net/mlxfw: Verify FSM error code translation doesn't exceed array size - net/mlx5: Fix auto group size calculation - vhost/vsock: split packets to send using multiple buffers - gpio: max77620: Fixup debounce delays - tools: gpio: Correctly add make dependencies for gpio_utils - nbd:fix memory leak in nbd_get_socket() - virtio_console: allocate inbufs in add_port() only if it is needed - Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()" - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() - [x86] drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles - [x86] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() - mwifiex: Fix NL80211_TX_POWER_LIMITED - ALSA: isight: fix leak of reference to firewire unit in error path of .probe callback - crypto: testmgr - fix sizeof() on COMP_BUF_SIZE - printk: lock/unlock console only for new logbuf entries - printk: fix integer overflow in setup_log_buf() - pinctrl: madera: Fix uninitialized variable bug in madera_mux_set_mux - PCI: cadence: Write MSI data with 32bits - gfs2: Fix marking bitmaps non-full - pty: fix compat ioctls - synclink_gt(): fix compat_ioctl() - [ppc64] Fix signedness bug in update_flash_db() - [powerpc] boot: Fix opal console in boot wrapper - [ppc64*,powerpc] boot: Disable vector instructions - [ppc64*,powerpc] eeh: Fix null deref for devices removed during EEH - [ppc64*,powerpc] eeh: Fix use of EEH_PE_KEEP on wrong field - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr() - mt76: do not store aggregation sequence number for null-data frames - mt76x0: phy: fix restore phase in mt76x0_phy_recalibrate_after_assoc - brcmsmac: AP mode: update beacon when TIM changes - ath10k: set probe request oui during driver start - ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem - skd: fixup usage of legacy IO API - cdrom: don't attempt to fiddle with cdo->capability - spi: sh-msiof: fix deferred probing - mmc: mediatek: fill the actual clock for mmc debugfs - mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail - PCI: mediatek: Fix class type for MT7622 to PCI_CLASS_BRIDGE_PCI - btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag - btrfs: handle error of get_old_root - gsmi: Fix bug in append_to_eventlog sysfs handler - misc: mic: fix a DMA pool free failure - w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for unsigned, count for max size). - [m68k] fix command-line parsing when passed from u-boot - RDMA/bnxt_re: Avoid NULL check after accessing the pointer - RDMA/bnxt_re: Fix qp async event reporting - RDMA/bnxt_re: Avoid resource leak in case the NQ registration fails - pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' - pwm: lpss: Only set update bit if we are actually changing the settings - amiflop: clean up on errors during setup - qed: Align local and global PTT to propagate through the APIs. - scsi: ips: fix missing break in switch - nfp: bpf: protect against mis-initializing atomic counters - [x86] KVM: nVMX: reset cache/shadows when switching loaded VMCS - [x86] KVM: nVMX: move check_vmentry_postreqs() call to nested_vmx_enter_non_root_mode() - [x86] KVM: Fix invvpid and invept register operand size in 64-bit mode - clk: tegra: Fixes for MBIST work around - scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler - scsi: isci: Change sci_controller_start_task's return type to sci_status - scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event - scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param - nvmet: avoid integer overflow in the discard code - nvmet-fcloop: suppress a compiler warning - nvme-pci: fix hot removal during error handling - PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks - clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk - ASoC: tegra_sgtl5000: fix device_node refcounting - scsi: dc395x: fix dma API usage in srb_done - scsi: dc395x: fix DMA API usage in sg_update_list - scsi: zorro_esp: Limit DMA transfers to 65535 bytes - net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed - net: fix warning in af_unix - xfs: fix use-after-free race in xfs_buf_rele - xfs: clear ail delwri queued bufs on unmount of shutdown fs - kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack - ACPI / scan: Create platform device for INT33FE ACPI nodes - PM / Domains: Deal with multiple states but no governor in genpd - ALSA: i2c/cs8427: Fix int to char conversion - macintosh/windfarm_smu_sat: Fix debug output - PCI: vmd: Detach resources after stopping root bus - USB: misc: appledisplay: fix backlight update_status return code - usbip: tools: fix atoi() on non-null terminated string - sctp: use sk_wmem_queued to check for writable space - dm raid: avoid bitmap with raid4/5/6 journal device - selftests/bpf: fix file resource leak in load_kallsyms - SUNRPC: Fix a compile warning for cmpxchg64() - sunrpc: safely reallow resvport min/max inversion - atm: zatm: Fix empty body Clang warnings - [s390x] perf: Return error when debug_register fails - swiotlb: do not panic on mapping failures - spi: omap2-mcspi: Set FIFO DMA trigger level to word length - [x86] intel_rdt: Prevent pseudo-locking from using stale pointers - sparc: Fix parport build warnings. - [ppc64*,powerpc] pseries: Export raw per-CPU VPA data via debugfs - [ppc64*,powerpc] mm/radix: Fix off-by-one in split mapping logic - [ppc64*,powerpc] mm/radix: Fix overuse of small pages in splitting logic - [ppc64*,powerpc] mm/radix: Fix small page at boundary when splitting - [ppc64*] radix: Fix radix__flush_tlb_collapsed_pmd double flushing pmd - selftests/bpf: fix return value comparison for tests in test_libbpf.sh - tools: bpftool: fix completion for "bpftool map update" - ceph: fix dentry leak in ceph_readdir_prepopulate - ceph: only allow punch hole mode in fallocate - thermal: armada: fix a test in probe() - f2fs: fix to spread clear_cold_data() - f2fs: spread f2fs_set_inode_flags() - mISDN: Fix type of switch control variable in ctrl_teimanager - qlcnic: fix a return in qlcnic_dcb_get_capability() - net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode - mfd: arizona: Correct calling of runtime_put_sync - mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values - [x86] mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well - mfd: max8997: Enale irq-wakeup unconditionally - net: socionext: Stop PHY before resetting netsec - fs/cifs: fix uninitialised variable warnings - spi: uniphier: fix incorrect property items - selftests/ftrace: Fix to test kprobe $comm arg only if available - selftests: watchdog: fix message when /dev/watchdog open fails - selftests: watchdog: Fix error message. - selftests: kvm: Fix -Wformat warnings - selftests: fix warning: "_GNU_SOURCE" redefined - net: ethernet: cadence: fix socket buffer corruption problem - bpf: devmap: fix wrong interface selection in notifier_call - bpf, btf: fix a missing check bug in btf_parse - [sparc64] Rework xchg() definition to avoid warnings. - [arm64] lib: use C string functions with KASAN enabled - fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle() - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock - tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage - mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition - macsec: update operstate when lower device changes - macsec: let the administrator set UP state even if lowerdev is down - block: fix the DISCARD request merge - i2c: uniphier-f: make driver robust against concurrency - i2c: uniphier-f: fix occasional timeout error - i2c: uniphier-f: fix race condition when IRQ is cleared - um: Make line/tty semantics use true write IRQ - vfs: avoid problematic remapping requests into partial EOF block - ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12 - [ppc64*,powerpc] xmon: Relax frame size for clang - [ppc64*,powerpc] selftests/ptrace: Fix out-of-tree build - [ppc64*,powerpc] selftests/signal: Fix out-of-tree build - [ppc64*,powerpc] selftests/switch_endian: Fix out-of-tree build - [ppc64*,powerpc] selftests/cache_shape: Fix out-of-tree build - block: call rq_qos_exit() after queue is frozen - mm/gup_benchmark.c: prevent integer overflow in ioctl - linux/bitmap.h: handle constant zero-size bitmaps correctly - linux/bitmap.h: fix type of nbits in bitmap_shift_right() - lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf - hfsplus: fix BUG on bnode parent update - hfs: fix BUG on bnode parent update - hfsplus: prevent btree data loss on ENOSPC - hfs: prevent btree data loss on ENOSPC - hfsplus: fix return value of hfsplus_get_block() - hfs: fix return value of hfs_get_block() - hfsplus: update timestamps on truncate() - hfs: update timestamp on truncate() - fs/hfs/extent.c: fix array out of bounds read of array extent - kernel/panic.c: do not append newline to the stack protector panic string - mm/memory_hotplug: make add_memory() take the device_hotplug_lock - mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock - [ppc64*,powerprc] powerpc/powernv: hold device_hotplug_lock when calling device_online() - igb: shorten maximum PHC timecounter update interval - fm10k: ensure completer aborts are marked as non-fatal after a resume - [arm64] net: hns3: bugfix for buffer not free problem during resetting - [arm64] net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem - [arm64] net: hns3: bugfix for is_valid_csq_clean_head() - [arm64] net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read - ntb_netdev: fix sleep time mismatch - [x86] ntb: intel: fix return value for ndev_vec_mask() - irq/matrix: Fix memory overallocation - nvme-pci: fix conflicting p2p resource adds - [arm64] makefile fix build of .i file in external module case - [x86] tools/power turbosat: fix AMD APIC-id output - mm: handle no memcg case in memcg_kmem_charge() properly - ocfs2: without quota support, avoid calling quota recovery - ocfs2: don't use iocb when EIOCBQUEUED returns - ocfs2: don't put and assigning null to bh allocated outside - ocfs2: fix clusters leak in ocfs2_defrag_extent() - net: do not abort bulk send on BQL status - sched/topology: Fix off by one bug - sched/fair: Don't increase sd->balance_interval on newidle balance - openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS - [armhf] dts: imx6sx-sdb: Fix enet phy regulator - [arm64] sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock - soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL - audit: print empty EXECVE args - sock_diag: fix autoloading of the raw_diag module - net: bpfilter: fix iptables failure if bpfilter_umh is disabled - nds32: Fix bug in bitfield.h - media: ov13858: Check for possible null pointer - btrfs: avoid link error with CONFIG_NO_AUTO_INLINE - wil6210: fix debugfs memory access alignment - wil6210: fix L2 RX status handling - wil6210: fix RGF_CAF_ICR address for Talyn-MB - wil6210: fix locking in wmi_call - ath10k: snoc: fix unbalanced clock error handling - wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()' - rtl8xxxu: Fix missing break in switch - brcmsmac: never log "tid x is not agg'able" by default - wireless: airo: potential buffer overflow in sprintf() - rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information - net: dsa: bcm_sf2: Turn on PHY to allow successful registration - scsi: mpt3sas: Fix Sync cache command failure during driver unload - scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices - scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11 - scsi: megaraid_sas: Fix msleep granularity - scsi: megaraid_sas: Fix goto labels in error handling - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point - scsi: lpfc: Correct loss of fc4 type on remote port address change - usb: typec: tcpm: charge current handling for sink during hard reset - dlm: fix invalid free - dlm: don't leak kernel pointer to userspace - vrf: mark skb for multicast or link-local as enslaved to VRF - clk: tegra20: Turn EMC clock gate into divider - ACPICA: Use %d for signed int print formatting instead of %u - net: bcmgenet: return correct value 'ret' from bcmgenet_power_down - of: unittest: allow base devicetree to have symbol metadata - of: unittest: initialize args before calling of_*parse_*() - tools: bpftool: pass an argument to silence open_obj_pinned() - cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces - pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues - pinctrl: bcm2835: Use define directive for BCM2835_PINCONF_PARAM_PULL - pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT - pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD - PCI: keystone: Use quirk to limit MRRS for K2G - nvme-pci: fix surprise removal - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch - i2c: uniphier-f: fix timeout error after reading 8 bytes - mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock - ipv6: Fix handling of LLA with VRF and sockets bound to VRF - cfg80211: call disconnect_wk when AP stops - mm/page_io.c: do not free shared swap slots - Bluetooth: Fix invalid-free in bcsp_close() - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe - ath9k_hw: fix uninitialized variable data - md/raid10: prevent access of uninitialized resync_pages offset - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() - net: phy: dp83867: fix speed 10 in sgmii mode - net: phy: dp83867: increase SGMII autoneg timer duration - ocfs2: remove ocfs2_is_o2cb_active() - [arm*] 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary - ARC: perf: Accommodate big-endian CPU - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - y2038: futex: Move compat implementation into futex.c - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - nfc: port100: handle command failure cleanly - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - virtio_ring: fix return code on DMA mapping fails - USBIP: add config dependency for SGL_ALLOC - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [ppc64*] support nospectre_v2 cmdline option - [ppc64*] book3s: Fix link stack flush on context switch (CVE-2019-18660) - [ppc64*, powerpc] PPC: Book3S HV: Flush link stack on guest exit to host kernel - PM / devfreq: Fix kernel oops on governor module load . [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) * [armhf, arm64] Backport devicetree for enabling support for the Raspberry PI 3 A+ . [ Salvatore Bonaccorso ] * ixgbe: Fix secpath usage for IPsec TX offload (Closes: #930443) * ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (Closes: #945023) * [x86] KVM: x86: introduce is_pae_paging (Regression in 4.19.77) * [rt] Refresh 0011-sched-fair-Robustify-CFS-bandwidth-timer-locking.patch (context changes in 4.19.84) . [ Bastian Blank ] * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341) . [ Noah Meyerhans ] * drivers/net/ethernet/amazon: Backport driver fixes from Linux 5.4 (Closes: #941291) * Bump ABI to 7 . [ Ben Hutchings ] * debian/bin/genpatch-rt: Fix series generation from git * [rt] Update to 4.19.82-rt30: - Drop changes in "fs/dcache: disable preemption on i_dir_seq's write side" that conflict with "Fix the locking in dcache_readdir() and friends" - Rewrite "fs/aio: simple simple work" using kthread_work - Rewrite "thermal: Defer thermal wakups to threads" using kthread_work - Rewrite "block: blk-mq: move blk_queue_usage_counter_release() into process context" using kthread_work - workqueue: rework . [ Benjamin Poirier ] * tools/perf: Add python3 support to scripts (Closes: #944641) . [ Aurelien Jarno ] * [rt] Refresh 0025-NFSv4-replace-seqcount_t-with-a-seqlock_t.patch (context changes in 4.19.86) * [rt] Refresh 0202-net-Qdisc-use-a-seqlock-instead-seqcount.patch (context changes in 4.19.86) * [rt] Refresh 0057-printk-Add-a-printk-kill-switch.patch (context changes in 4.19.87) * [rt] Refresh 0207-printk-Make-rt-aware.patch (context changes in 4.19.87) linux-signed-i386 (4.19.67+2+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u2 . * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - KVM: x86: use Intel speculation bugs and features as derived in generic x86 code - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: Convert kvm_lock to a mutex - kvm: x86: Do not release the page inside mmu_set_spte() - KVM: x86: make FNAME(fetch) and __direct_map more similar - KVM: x86: remove now unneeded hugepage gfn adjustment - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON - KVM: x86: add tracepoints around __direct_map and FNAME(fetch) - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA linux-signed-i386 (4.19.67+2+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required mariadb-10.3 (1:10.3.22-0+deb10u1) buster; urgency=high . * SECURITY UPDATE: New upstream version 10.3.22. Includes fixes for the following security vulnerabilities: - CVE-2020-2574 * Includes new upstream version 10.3.21 - Drop systemd service patch applied upstream - Update symbols to match latest libmariadb_3 * Previous release 10.3.20 includes fix for the regression introduced in the 10.3.19 release: - MDEV-20987: InnoDB fails to start when FTS table has FK relation * Previous release 10.3.19 includes fixes for the following security vulnerabilities: - CVE-2019-2938 - CVE-2019-2974 * Prefer salsa-ci.yml naming over gitlab-ci.yml since we inherit Salsa-CI mariadb-10.3 (1:10.3.21-2) unstable; urgency=medium . [ Otto Kekäläinen ] * Update Python dependencies and recommends to Python 3 (Closes: #945697) * Remove deprecated basedir config from debian.cnf (Closes: #947553) . [ James Clarke ] * Fix RocksDB on GNU/kFreeBSD (Closes: #920994) * Use versioned symbols on GNU/kFreeBSD mariadb-10.3 (1:10.3.21-1) unstable; urgency=low . [ Faustin Lammler ] * Remove no more needed lintian overrides . [ Otto Kekäläinen ] * New upstream version 10.3.21 mariadb-10.3 (1:10.3.20-1) unstable; urgency=high . * New upstream version 10.3.20. Includes fix for regression: - MDEV-20987: InnoDB fails to start when FTS table has FK relation * Remove obsolete fields Name, Contact from debian/upstream/metadata * Gitlab-CI: Print artifact sizes to ensure it stays under 100 MB * Gitlab-CI: Adapt CI jobs for Debian Sid work * Update README.Maintainer with current Debian and Ubuntu release statuses mariadb-10.3 (1:10.3.19-1) unstable; urgency=high . [ Otto Kekäläinen ] * New upstream version 10.3.17. Includes security fixes for: - CVE-2019-2938 - CVE-2019-2974 * Update symbols to match latest libmariadb_3 * Drop systemd service patch applied upstream . [ Faustin Lammler ] * Fix typo in Readme mariadb-10.3 (1:10.3.18-1) unstable; urgency=medium . * New upstream version 10.3.18. Fixes regression introduced in 10.3.17 (MDEV-20247: Replication hangs with "preparing" and never starts) (Closes: #939819) * Minort Gitlab-CI improvements mediawiki (1:1.31.6-1~deb10u1) buster-security; urgency=medium . * New upstream version 1.31.6 (security release), fixing CVE-2019-19709. mediawiki (1:1.31.5-3) unstable; urgency=medium . * In autopkgtests, skip testing against mysql-server if it isn't available, such as in Debian testing * Move packaging git repository to Salsa and update relevant documentation * Set up and configure Salsa CI * Sync d/upstream/signing-key.asc with upstream mediawiki (1:1.31.5-2) unstable; urgency=medium . * Add extra debugging information to autopkgtests * Backport patches from upstream for Postgresql 12 compatibility (Closes: #944650) mediawiki (1:1.31.5-1) unstable; urgency=medium . * New upstream version 1.31.5 * Incorporate MySQL autopkgtest improvements from Lars Tangvald and Robie Basak from Ubuntu: * Use a different method besides MySQL 8.0's default authentication because PHP doesn't currently support it. * Explicitly test MySQL and MariaDB regardless of which one is the default. * Standards-Version: 4.4.1, no changes needed mediawiki (1:1.31.4-1) unstable; urgency=medium . * New upstream version 1.31.4 (security release), fixing CVE-2019-16738. mesa (18.3.6-2+deb10u1) buster; urgency=medium . * Call shmget() with permission 0600 instead of 0777 (CVE-2019-5068) (Closes: #944298) mnemosyne (2.6.1+ds-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Julien Puydt ] * Add depends on PIL (Closes: #947032). modsecurity (3.0.3-1+deb10u1) buster; urgency=medium . * Fixes CVE-2019-19886 (Closes: #949682) mosquitto (1.5.7-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Restrict topic hierarchy to 200 levels to prevent possible stack overflow (CVE-2019-11779) (Closes: #940654) netty (1:4.1.33-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Correctly handle whitespaces in HTTP header names as defined by RFC7230#section-3.2.4 (CVE-2019-16869) (Closes: #941266) node-kind-of (6.0.2+dfsg-1+deb10u1) buster; urgency=medium . * Team upload * fix type checking vul in ctorName (Closes: #948095, CVE-2019-20149) nss (2:3.42.1-1+deb10u2) buster-security; urgency=medium . * CVE-2019-11745 CVE-2019-17007 ntpsec (1.1.3+dfsg1-2+deb10u1) buster; urgency=medium . * Backport fix for slow DNS retries (Closes: 924192) * ntpdate.8: Remove duplicated -o option * ntpdate.8: Remove -p option (Closes: 926877) * ntpdate.8: Remove -e option * ntpdate.8: Remove inaccurate BUGS section * Update ntpdate-debian.8 to match ntpdate.8 * Fix ntpdate -s (syslog) to fix the if-up hook (Closes: 931414) numix-gtk-theme (2.6.7-4+deb10u1) buster; urgency=medium . * debian/control: + Revert Jeremy Bicha's work-around ("Add Breaks: murrine-themes") for to-be-finally resolved Debian bug #838994 (in gtk2-engines-murrine). (Closes: #891493). nvidia-graphics-drivers-legacy-340xx (340.108-3~deb10u1) buster; urgency=medium . * Rebuild for buster. . nvidia-graphics-drivers-legacy-340xx (340.108-3) unstable; urgency=medium . * Bump Standards-Version to 4.5.0. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.108-2) unstable; urgency=medium . * Restore kmem_cache_create_usercopy.patch. (Closes: #948032, #948195) * Add NEWS entry w.r.t. EoL state. * Use substitution to keep Standards-Version in sync (430.64-5). . nvidia-graphics-drivers-legacy-340xx (340.108-1) unstable; urgency=medium . * The 340.xx legacy driver series has been declared as End-of-Life by NVIDIA. No further updates fixing security issues, critical bugs, or adding support for new Xorg or Linux releases will be issued. https://nvidia.custhelp.com/app/answers/detail/a_id/3142 . * New upstream legacy 340xx branch release 340.108 (2019-12-23). - Updated the nvidia-drm kernel module for compatibility with the removal of the DRIVER_PRIME flag in recent Linux kernel versions. - Updated nvidia-bug-report.sh to search the systemd journal for gdm-x-session logs. - Fixed a build failure, "too many arguments to function 'get_user_pages'", when building the NVIDIA kernel module for Linux kernel v4.4.168. - Fixed a build failure, "implicit declaration of function do_gettimeofday", when building the NVIDIA kernel module for Linux kernel 5.0 release candidates. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch) and (parts of) buildfix_kernel_5.2.patch from Ubuntu to fix more vm-fault issues during kernel module build for Linux 5.2+. * Refresh patches. * Allow alternative libnvidia-{tesla,legacy-*}-cuda1 packages to substitute libcuda1 in third-party packages (430.64-3). - Add Provides: libcuda.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libcuda.so.1 through the symbols file. . nvidia-graphics-drivers-legacy-340xx (340.107-8) unstable; urgency=medium . * Create and commit tarball symlinks for legacy branches (430.64-1). * Allow alternative libnvidia-{tesla,legacy-*}-ml1 packages to substitute libnvidia-ml1 (430.64-2). - Add Provides: libnvidia-ml.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libnvidia-ml.so.1 through the symbols file. * Add buildfix_kernel_5.4.patch from Ubuntu to fix kernel module build for Linux 5.4. (Closes: #946137) . nvidia-graphics-drivers-legacy-340xx (340.107-7) unstable; urgency=medium . * Add buildfix_kernel_5.3.patch from Ubuntu to fix kernel module build for Linux 5.3. (Closes: #941788) * Bump Standards-Version to 4.4.1. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.107-6) unstable; urgency=medium . * Add conftest-include-guard.patch to restore compatibility with older kernels. . nvidia-graphics-drivers-legacy-340xx (340.107-5) unstable; urgency=medium . * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch), buildfix_kernel_5.0.patch, buildfix_kernel_5.2.patch from Ubuntu to fix kernel module build for Linux 5.2. (Closes: #934295, #923815) * Bump Standards-Version to 4.4.0. No changes needed. nvidia-graphics-drivers-legacy-340xx (340.108-3~deb9u1) stretch; urgency=medium . * Rebuild for stretch. . nvidia-graphics-drivers-legacy-340xx (340.108-3~deb10u1) buster; urgency=medium . * Rebuild for buster. . nvidia-graphics-drivers-legacy-340xx (340.108-3) unstable; urgency=medium . * Bump Standards-Version to 4.5.0. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.108-2) unstable; urgency=medium . * Restore kmem_cache_create_usercopy.patch. (Closes: #948032, #948195) * Add NEWS entry w.r.t. EoL state. * Use substitution to keep Standards-Version in sync (430.64-5). . nvidia-graphics-drivers-legacy-340xx (340.108-1) unstable; urgency=medium . * The 340.xx legacy driver series has been declared as End-of-Life by NVIDIA. No further updates fixing security issues, critical bugs, or adding support for new Xorg or Linux releases will be issued. https://nvidia.custhelp.com/app/answers/detail/a_id/3142 . * New upstream legacy 340xx branch release 340.108 (2019-12-23). - Updated the nvidia-drm kernel module for compatibility with the removal of the DRIVER_PRIME flag in recent Linux kernel versions. - Updated nvidia-bug-report.sh to search the systemd journal for gdm-x-session logs. - Fixed a build failure, "too many arguments to function 'get_user_pages'", when building the NVIDIA kernel module for Linux kernel v4.4.168. - Fixed a build failure, "implicit declaration of function do_gettimeofday", when building the NVIDIA kernel module for Linux kernel 5.0 release candidates. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch) and (parts of) buildfix_kernel_5.2.patch from Ubuntu to fix more vm-fault issues during kernel module build for Linux 5.2+. * Refresh patches. * Allow alternative libnvidia-{tesla,legacy-*}-cuda1 packages to substitute libcuda1 in third-party packages (430.64-3). - Add Provides: libcuda.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libcuda.so.1 through the symbols file. . nvidia-graphics-drivers-legacy-340xx (340.107-8) unstable; urgency=medium . * Create and commit tarball symlinks for legacy branches (430.64-1). * Allow alternative libnvidia-{tesla,legacy-*}-ml1 packages to substitute libnvidia-ml1 (430.64-2). - Add Provides: libnvidia-ml.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libnvidia-ml.so.1 through the symbols file. * Add buildfix_kernel_5.4.patch from Ubuntu to fix kernel module build for Linux 5.4. (Closes: #946137) . nvidia-graphics-drivers-legacy-340xx (340.107-7) unstable; urgency=medium . * Add buildfix_kernel_5.3.patch from Ubuntu to fix kernel module build for Linux 5.3. (Closes: #941788) * Bump Standards-Version to 4.4.1. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.107-6) unstable; urgency=medium . * Add conftest-include-guard.patch to restore compatibility with older kernels. . nvidia-graphics-drivers-legacy-340xx (340.107-5) unstable; urgency=medium . * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch), buildfix_kernel_5.0.patch, buildfix_kernel_5.2.patch from Ubuntu to fix kernel module build for Linux 5.2. (Closes: #934295, #923815) * Bump Standards-Version to 4.4.0. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.107-4) unstable; urgency=medium . * use-nv-kernel-ARCH.o_shipped.patch: Simplify for better kernel compatibility. (Closes: #922479) * Drop versioned constraints that are satisfied in wheezy (390.87-7). * Bump Standards-Version to 4.3.0. No changes needed. . nvidia-graphics-drivers-legacy-340xx (340.107-3) unstable; urgency=medium . * Synchronize the module build debhelper sequence with debhelper 10 (390.87-1). * Pass the private library directory to dh_shlibdeps using the -l option instead of LD_LIBRARY_PATH, fixing FTBFS with dpkg 1.19.1 (390.87-3). * Add Build-Depends-Package to symbols files where appropriate and override symbols-file-missing-build-depends-package-field elsewhere (390.87-3). * Clean up and unify rule style in debian/rules (390.87-3). * Bump Standards-Version to 4.2.1. No changes needed. * Add debian/rules targets for archiving the tarballs in a separate repository using sparse checkouts and git-lfs as storage backend (390.87-3). * Refresh patches. . nvidia-graphics-drivers-legacy-340xx (340.107-2) unstable; urgency=high . * Backport kmem_cache_create_usercopy.patch from 390.67-2 for the 340.xx series, fixing "Bad or missing usercopy whitelist? Kernel memory exposure attempt detected from SLUB object 'nvidia_stack_cache'" on Linux kernels that have disabled CONFIG_HARDENED_USERCOPY_FALLBACK (i.e. linux-image-4.16.0-2-* or newer). (Closes: #899998) . nvidia-graphics-drivers-legacy-340xx (340.107-1) unstable; urgency=medium . * New upstream legacy 340xx branch release 340.107 (2018-06-06). - Added support for X.Org xserver ABI 24 (xorg-server 1.20). - Improved nvidia-bug-report.sh to check for kern.log which is the default kernel log-file location for many Debian-based Linux distributions. - Fixed a bug which could cause X servers that export a Video Driver ABI earlier than 0.8 to crash when running X11 applications which call XRenderAddTraps(). * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Convert packaging repository from SVN to GIT. * Bump Standards-Version to 4.1.4. No changes needed. * Add xorg-video-abi-24 (xserver 1.20) as alternative dependency. (Closes: #900789, #900338) * nvidia-drm-outputclass.conf: Prepend (in a backwards-compatible way) ModulePath "/usr/lib/xorg/modules/linux" since xserver 1.20 no longer does that (390.67-1). nvidia-graphics-drivers-legacy-340xx (340.108-2) unstable; urgency=medium . * Restore kmem_cache_create_usercopy.patch. (Closes: #948032, #948195) * Add NEWS entry w.r.t. EoL state. * Use substitution to keep Standards-Version in sync (430.64-5). nvidia-graphics-drivers-legacy-340xx (340.108-2~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. nvidia-graphics-drivers-legacy-340xx (340.108-1) unstable; urgency=medium . * New upstream legacy 340xx branch release 340.108 (2019-12-23). - Updated the nvidia-drm kernel module for compatibility with the removal of the DRIVER_PRIME flag in recent Linux kernel versions. - Updated nvidia-bug-report.sh to search the systemd journal for gdm-x-session logs. - Fixed a build failure, "too many arguments to function 'get_user_pages'", when building the NVIDIA kernel module for Linux kernel v4.4.168. - Fixed a build failure, "implicit declaration of function do_gettimeofday", when building the NVIDIA kernel module for Linux kernel 5.0 release candidates. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch) and (parts of) buildfix_kernel_5.2.patch from Ubuntu to fix more vm-fault issues during kernel module build for Linux 5.2+. * Refresh patches. * Allow alternative libnvidia-{tesla,legacy-*}-cuda1 packages to substitute libcuda1 in third-party packages (430.64-3). - Add Provides: libcuda.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libcuda.so.1 through the symbols file. nvidia-graphics-drivers-legacy-340xx (340.107-8) unstable; urgency=medium . * Create and commit tarball symlinks for legacy branches (430.64-1). * Allow alternative libnvidia-{tesla,legacy-*}-ml1 packages to substitute libnvidia-ml1 (430.64-2). - Add Provides: libnvidia-ml.so.1 (= ${nvidia:Version}). - Generate alternative versioned dependency on libnvidia-ml.so.1 through the symbols file. * Add buildfix_kernel_5.4.patch from Ubuntu to fix kernel module build for Linux 5.4. (Closes: #946137) nvidia-graphics-drivers-legacy-340xx (340.107-7) unstable; urgency=medium . * Add buildfix_kernel_5.3.patch from Ubuntu to fix kernel module build for Linux 5.3. (Closes: #941788) * Bump Standards-Version to 4.4.1. No changes needed. nvidia-graphics-drivers-legacy-340xx (340.107-6) unstable; urgency=medium . * Add conftest-include-guard.patch to restore compatibility with older kernels. nvidia-graphics-drivers-legacy-340xx (340.107-5) unstable; urgency=medium . * Add buildfix_kernel_4.11.patch (replacing vm-fault.patch), buildfix_kernel_5.0.patch, buildfix_kernel_5.2.patch from Ubuntu to fix kernel module build for Linux 5.2. (Closes: #934295) * Bump Standards-Version to 4.4.0. No changes needed. nyancat (1.5.1-1+build1~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. . nyancat (1.5.1-1+build1) unstable; urgency=medium . * Non-maintainer upload. * No-change rebuild in a clean environment to add the systemd unit for nyancat-server. (Closes: #947292) nyancat (1.5.1-1+build1~deb9u1) stretch; urgency=medium . * Non-maintainer upload. * Rebuild for stretch. . nyancat (1.5.1-1+build1) unstable; urgency=medium . * Non-maintainer upload. * No-change rebuild in a clean environment to add the systemd unit for nyancat-server. (Closes: #947292) openconnect (8.02-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Close HTTPS connection on failure returns from process_http_response() * Fix buffer overflow with chunked HTTP handling (CVE-2019-16239) (Closes: #940871) openjdk-11 (11.0.6+10-1~deb10u1) buster-security; urgency=medium . * Rebuild for Buster openjdk-11 (11.0.6+10-1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. openjdk-11 (11.0.6+7-1) unstable; urgency=medium . * OpenJDK 11.0.5+7 build (early access). openjdk-11 (11.0.5+10-2) unstable; urgency=medium . * Fix the jtreg consistency check when building without jtreg. * Don't call dh_strip_nondeterminism when building for older releases. * Fix disabling the zero build on arm64 on trusty. openjdk-11 (11.0.5+10-1) unstable; urgency=high . * OpenJDK 11.0.5+10 build (release). - S8209901: Canonical file handling. - S8213429, CVE-2019-2933: Windows file handling redux. - S8218573, CVE-2019-2945: Better socket support. - S8218877: Help transform transformers. - S8219914: Change the environment variable for Java Access Bridge logging to have a directory. - S8220186: Improve use of font temporary files. - S8220302, CVE-2019-2949: Better Kerberos ccache handling. - S8221497: Optional Panes in Swing. - S8221858, CVE-2019-2958: Build Better Processes. - S8222684, CVE-2019-2964: Better support for patterns. - S8222690, CVE-2019-2962: Better Glyph Images. - S8223163: Better pattern recognition. - S8223505, CVE-2019-2973: Better pattern compilation. - S8223518, CVE-2019-2975: Unexpected exception in jjs. - S8223886: Add in font table referene. - S8223892, CVE-2019-2978: Improved handling of jar files. - S8224025: Fix for JDK-8220302 is not complete. - S8224062, CVE-2019-2977: Improve String index handling. - S8224532, CVE-2019-2981: Better Path supports. - S8224915, CVE-2019-2983: Better serial attributes. - S8225286, CVE-2019-2987: Better rendering of native glyphs. - S8225292, CVE-2019-2988: Better Graphics2D drawing. - S8225298, CVE-2019-2989: Improve TLS connection support. - S8225597, CVE-2019-2992: Enhance font glyph mapping. - S8226765, CVE-2019-2999: Commentary on Javadoc comments. - S8227601: Better collection of references. - S8228825, CVE-2019-2894: Enhance ECDSA operations. openjdk-11 (11.0.5+10-1~deb10u1) buster-security; urgency=medium . * Rebuild for buster-security openjdk-11 (11.0.5+10-1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. openjdk-11 (11.0.5+9-1) unstable; urgency=medium . * OpenJDK 11.0.5+9 build (early access). * Bump standards version. * Use dh_strip_nondeterminism (Emmanuel Bourg). Closes: #933389. * Fix 8230708, server build on sparc64 (Adrian Glaubitz). Closes: #939565. * Fix FTBFS with DEB_BUILD_PROFILES=nocheck (Helmut Grohne). Closes: #939521. * Add more breaks to the openjdk-11-jre-headless package. Closes: #935624. * Fix debug and src symlinks. Closes: #893134, #910694, #910696. openjdk-11 (11.0.5+6-2) unstable; urgency=medium . * Fix 8230708, build failure on sparc64 (Adrian Glaubitz). * Disable the zero build on armhf. openjdk-11 (11.0.5+6-1) unstable; urgency=medium . * OpenJDK 11.0.5+6 build (early access). . [ Matthias Klose ] * Tighten dependency on jtreg. * Build using GCC 9 on recent development releases. * Refresh patches. . [ Tiago Stürmer Daitx ] * Properly generate Breaks: rules for bionic (fix typo). * Remove libgtk-3-dev from build-deps: libgtk-3-dev is not actually required, package builds fine without it; libgtk2.0-0 or libgtk-3-0 should be explicitly declared instead in bdeps and tests; libxrandr-dev should be explicitly added as it is required and was being included due to libgtk-3-dev dependency. * Set minimum dependency on jtreg based on testsuite requirements. * Fail during pre-build if installed jtreg version is lower then the minimum required version. * Improve and fix build tests and autopkgtests: - Depend on default-jre-headless so jtreg will use the JRE from /usr/default-java; remove JT_JAVA exports as it no longer needs to be set. - Update debian/tests/hotspot,jdk,langtools to ignore jtreg-autopkgtest.sh return code. - Create debian/tests/jtdiff-autopkgtest.in as it depends on debian/rules variables. - debian/tests/jtreg-autopkgtest.sh: + Enable retry of failed tests to trim out flaky tests. + Fix unbound variable. + Keep .jtr files from failed tests only. - debian/tests/jtdiff-autopkgtest.sh: + Fail only if an actual regression is detected. + Add the super-diff comparison from jtdiff. - debian/rules: + Preserve all JTreport directories in the test output directory. + Use JDK_DIR instead of JDK_TO_TEST for autopkgtest generation. + Package all .jtr files from JTwork as jtreg-autopkgtest.sh makes sure it contains only failing tests. openjdk-11 (11.0.4+11-1) unstable; urgency=high . * OpenJDK 11.0.4+11 build (release). - S8212328, CVE-2019-2762: Exceptional throw cases. - S8213431, CVE-2019-2766: Improve file protocol handling. - S8213432, CVE-2019-2769: Better copies of CopiesList. - S8216381, CVE-2019-2786: More limited privilege usage. - S8217563: Improve realm maintenance. - S8218863: Better endpoint checks. - S8218873: Improve JSSE endpoint checking. - S8218876, CVE-2019-7317: Improve PNG support options. - S8219775: Certificate validation improvements. - S8220517: Enhanced GIF support. - S8221345, CVE-2019-2818: Better Poly1305 support. - S8221518, CVE-2019-2816: Normalize normalization. - S8222678, CVE-2019-2821: Improve TLS negotiation. * Fix more build issues for Ubuntu precise builds. * Bump standards version. openjpeg2 (2.3.0-2+deb10u1) buster; urgency=high . * Backport security fixes: * CVE-2018-21010: heap buffer overflow in color_apply_icc_profile (Closes: #939553). * CVE-2018-20847: improper computation of values in the function opj_get_encoding_parameters, leading to an integer overflow (Closes: #931294). opensmtpd (6.0.3p1-5+deb10u3) buster-security; urgency=high . * Fix two major security bugs (Closes: #950121) (CVE-2020-7247) 1. smtpd can crash on opportunistic TLS downgrade, causing a denial of service. OpenBSD 6.6 errata 018: https://ftp.openbsd.org/pub/OpenBSD/patches/6.6/common/018_smtpd_tls.patch.sig 2. Fix privilege escalation vulnerability: An incorrect check allows an attacker to trick mbox delivery into executing arbitrary commands as root and lmtp delivery into executing arbitrary commands as an unprivileged user. OpenBSD 6.6 errata 019: https://ftp.openbsd.org/pub/OpenBSD/patches/6.6/common/019_smtpd_exec.patch.sig opensmtpd (6.0.3p1-5+deb10u2) buster; urgency=medium . * Handle non-zero exit code from hostname during config phase (Closes: #948824) opensmtpd (6.0.3p1-5+deb10u1) buster; urgency=medium . * Warn users of change of smtpd.conf syntax (Closes: #944268) * Install smtpctl setgid opensmtpq (Closes: #945910) openssh (1:7.9p1-10+deb10u2) buster; urgency=medium . * Apply upstream patch to deny (non-fatally) ipc in the seccomp sandbox, fixing failures with OpenSSL 1.1.1d and Linux < 3.19 on some architectures (closes: #946242). Note that this also drops the previous change to allow ipc on s390, since upstream has security concerns with that and it doesn't currently seem to be needed. php-horde (5.2.20+debian0-1+deb10u1) buster; urgency=high . * Fix CVE-2019-12095: Stored XSS vuln in the Horde Cloud Block. php-horde-text-filter (2.3.5-3+deb10u1) buster; urgency=medium . * QA upload. * Mark package as orphaned (See #942282) . [ IOhannes m zmölnig ] * Fixed regular-expressions (used e.g. for displaying plain-text mails) (Closes: #931255, #935816) * Switched upstream branch in the packaging git on salsa to 'debian-buster' postfix (3.4.8-0+10debu1) buster; urgency=medium . [Scott Kitterman] . * Refactor running status detection in sysv init based on upstream postfix-script so it works in docker. Closes: #941293 . [Wietse Venema] . * 3.4.8 - Bugfix (introduced: Postfix 2.8): don't gratuitously enable all after-220 tests when only one such test is enabled. This made selective tests impossible with 'good' clients. File: postscreen/postscreen_smtpd.c. . - Bugfix: the 20180903 postscreen fix for a misleading "PIPELINING after BDAT" warning looked at the wrong variable. The warning now says "BDAT without valid RCPT", and the error is no longer treated as a command PIPELINING error (but sending BDAT is still a client error, because postscreen rejects all RCPT commands and does not announce PIPELINING support). File: postscreen/postscreen_smtpd.c. . - Usability: the parser for key/certificate chain files rejected inputs that contain an EC PARAMETERS object. While this is technically correct (the documentation says what types are allowed) this is surprising behavior because the legacy cert/key parameters will accept such inputs. For now, the parser skips object types that it does not know about for usability, and logs a warning because ignoring inputs is not kosher. Viktor and Wietse. File: tls/tls_certkey.c. postfix (3.4.7-2) unstable; urgency=medium . [Andreas Hasenack] . * Update autopkgtest to use python3. Closes: #943212 LP: #1845334 . [Scott Kitterman] . * Update smtp_tls_CApath to /etc/ssl/certs so it actually works. Closes: #923083 * Refactor running status detection in sysv init based on upstream postfix-script so it works in docker. Closes: #941293 postfix (3.4.7-1) unstable; urgency=medium . [Andreas Hasenack] . * * d/p/80_glibc2.30-ftbfs.diff: fix build with glibc 2.30 (LP: #1842923) . [Scott Kitterman] . * Refresh patches * Modernize default TLS setup: - Drop addition of smtpd_tls_session_cache_database to TLS parameters (no longer needed since TLS session tickets are used now). Closes: #934803 - Replace use of obsolescent smtpd_use_tls=yes with smtpd_tls_security_level=may in default TLS setting. Closes: #520936 - Add smtp_tls_security_level=may to default TLS settings so that both client and server TLS are now enabled be default for new installations. Closes: #163144 - Stop copying smtp_tls_CAfile into chroot, not needed per postfix docs - Also copy smtpd_tls_CApath files into chroot. Closes: #579248 - Add smtp_tls_CApath using /usr/share/ca-certificates/ to default TLS configuration so postfix smtp client can use the system certificate store to verify smtp server certificates, add ca-certificates to postfix Recommends. Closes: #923083 * Bump standards version to 4.4.0 without further change * Fix spelling errors in Debian provided man pages . [Christian Göttsche] . * Fix debian/rules so build flags are applied Closes: #879668 . [Wietse Venema] . * 3.4.6 * 3.4.7 postgresql-11 (11.6-0+deb10u1) buster; urgency=medium . * New upstream version. postgresql-11 (11.5-3sid2) unstable; urgency=medium . * Fix arch-only build. postgresql-11 (11.5-3sid1) unstable; urgency=medium . * Stop building lib packages, postgresql-12 is already in unstable. (Closes: #941845) . postgresql-11 (11.5-3) unstable; urgency=medium . * Use llvm 9. (Closes: #940261) * debian/tests/installcheck: Disable llvm bitcode compilation, not needed. postgresql-11 (11.5-2) unstable; urgency=medium . * Disable building plpython2 by default. (Closes: #937310) postgresql-common (200+deb10u3) buster-security; urgency=medium . * pg_ctlcluster: Drop privileges before creating socket and stats temp directories outside /var/run/postgresql. The default configuration is not affected by this change. Users with directories on volatile storage (tmpfs) in other locations have to make sure the parent directory is writable for the cluster owner. (CVE-2019-3466, discovered by Rich Mirch) print-manager (4:18.12.1-2+deb10u1) buster; urgency=medium . * Team upload. * Backport fix_crash_when_cups_returns_jobs_with_duplicate_id.patch. This fixes a longstanding bug when multiple print job IDs are given the same ID, and so it was not easy to reproduce (Closes: #910879). proftpd-dfsg (1.3.6-4+deb10u3) buster; urgency=medium . * Cherry pick patch from upstream: - for upstream 861 (CVE-2019-19269) (Closes: #946345) - for upstream 859 (CVE-2019-19270) (Closes: #946346) upstream_pull_859_861_CVE-2019-19270_CVE-2019-19269 prosody-modules (0.0~hg20190203.b54e98d5c4a1+dfsg-1+deb10u1) buster-security; urgency=high . * fix for CVE-2020-8086 pykaraoke (0.7.5-1.2+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Fix path to fonts. (Closes: #948385) pykaraoke (0.7.5-1.2+deb9u1) stretch; urgency=medium . * Non-maintainer upload. * Fix path to fonts. (Closes: #948385) python-apt (1.8.4.1) buster-security; urgency=high . * SECURITY UPDATE: Check that repository is trusted before downloading files from it (LP: #1858973) - apt/cache.py: Add checks to fetch_archives() and commit() - apt/package.py: Add checks to fetch_binary() and fetch_source() - CVE-2019-15796 * SECURITY UPDATE: Do not use MD5 for verifying downloadeds (Closes: #944696) (#LP: #1858972) - apt/package.py: Use all hashes when fetching packages, and check that we have trusted hashes when downloading - CVE-2019-15795 * To work around the new checks, the parameter allow_unauthenticated=True can be passed to the functions. It defaults to the value of the APT::Get::AllowUnauthenticated option. * Automatic changes and fixes for external regressions: - Adjustments to test suite and CI to fix CI regressions - testcommon: Avoid reading host apt.conf files - Automatic mirror list update python-django (1:1.11.27-1~deb10u1) buster-security; urgency=high . * New upstream security release. (Closes: #946937) . - CVE-2019-19844: Potential account hijack via password reset form. . By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account. . In order to avoid this vulnerability, password reset requests now compare the submitted email using the stricter, recommended algorithm for case-insensitive comparison of two identifiers from Unicode Technical Report 36, section 2.11.2(B)(2). Upon a match, the email containing the reset token will be sent to the email address on record rather than the submitted address. python-ecdsa (0.13-3+deb10u1) buster-security; urgency=high . * Add patch for strict error checking in DER decoding integers. Fix: - CVE-2019-14853 - CVE-2019-14859 * Add python{3}-pytest as Build Dependency python-evtx (0.6.1-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Hilko Bengen ] * Fix hexdump import (Closes: #942353) python-internetarchive (1.8.1-1+deb10u1) buster; urgency=medium . * hotfix: close file after getting md5 (Closes: #950289) python3.7 (3.7.3-2+deb10u1) buster; urgency=medium . * CVE-2019-9740 * CVE-2019-9947 * CVE-2019-9948 * CVE-2019-10160 * CVE-2019-16056 * CVE-2019-16935 qemu (1:3.1+dfsg-8+deb10u3) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * target/i386: add PSCHANGE_MC_NO feature qtbase-opensource-src (5.11.3+dfsg1-1+deb10u2) buster; urgency=medium . [ Dmitry Shachnev ] * Backport upstream patch to add support for non-PPD printers and avoid silent fallback to a printer supporting PPD (closes: #911702, #911844). * Backport upstream patch to fix crash in QStyleSheetStyle::repolish() when using QLabels with rich text (closes: #935909). . [ Melvin Vermeeren ] * Backport upstream patch to fix graphics tablet hover events (closes: #935627). qtwebengine-opensource-src (5.11.3+dfsg-2+deb10u1) buster; urgency=medium . * Fix PDF parsing by adding the missing non-const overrides for CPDF_Dictionary::GetDict() and CPDF_Reference::GetDict(). This also fixes QWebEnginePage::print() method (closes: #919504). * Use ui/webui/resources/js/jstemplate_compiled.js provided by upstream instead of an empty file (closes: #882805). * Backport upstream patch to disable executable stack (closes: #887875). quassel (1:0.13.1-1+deb10u2) buster; urgency=medium . * Actually delete quassel-core.NEWS as intended . quassel (1:0.13.1-1+deb10u1) buster; urgency=medium . [ Felix Geyer ] * Fix quasselcore AppArmor denials when the config is saved. (Closes: #940482) . [ Scott Kitterman ] * Correct default channel for Debian quassel (1:0.13.1-1+deb10u1) buster; urgency=medium . [ Felix Geyer ] * Fix quasselcore AppArmor denials when the config is saved. (Closes: #940482) . [ Scott Kitterman ] * Correct default channel for Debian qwinff (0.2.1-1+deb10u1) buster; urgency=medium . * debian/rules: Export DATA_PATH to fix crashing caused by incorrect file detection. (Closes: #945602) raspi3-firmware (1.20190215-1+deb10u2) buster; urgency=medium . * Fix serial console output sent to bluetooth port with kernel 5.x. Thanks to Thorsten Glaser (Closes: #941974) ros-ros-comm (1.14.3+ds1-5+deb10u1) stable; urgency=high . * Add https://github.com/ros/ros_comm/pull/1771 (Fix CVE-2019-13566, CVE-2019-13465) * Add https://github.com/ros/ros_comm/pull/1741 (Fix CVE-2019-13445) roundcube (1.3.10+dfsg.1-1~deb10u1) buster; urgency=medium . * d/control: revert bump of Standards-Version, as we want to release to stable. * d/upstream/signing-key.asc: revert Minimize OpenPGP certificate. * Add patch to Fix "Retry to connect to IMAP server" (Closes: #947320) ruby2.5 (2.5.5-3+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix for wrong fnmatch patttern (CVE-2019-15845) * Loop with String#scan without creating substrings (CVE-2019-16201) * WEBrick: prevent response splitting and header injection (CVE-2019-16254) * lib/shell/command-processor.rb (Shell#[]): prevent unknown command (CVE-2019-16255) schleuder (3.4.0-2+deb10u2) buster; urgency=medium . * debian/patches: - Pull in upstream patch to add missing List-Id header to notification mails sent to admins. (Closes: #948980) - Pull in upstream patch to handle decryption problems gracefully: Handle incoming mails encrypted to an absent key, using symmetric encryption or containing PGP-garbage in a more graceful manner: Don't throw an exception, don't notify (and annoy) the admins, instead inform the sender of the mail how to do better. (Closes: #948981) - Pull in upstream patch to default to ASCII-8BIT encoding. This should ensure Schleuder is able to handle mails with different charsets. (Closes: #948982) schleuder (3.4.0-2+deb10u1) buster; urgency=medium . * debian/patches: - Extend existing patch which fixes problems related to the use of "protected headers": Fix recognizing keywords in mails with "protected headers" and empty subject. Previously, if the subject was unset, keywords were not recognized and the original "protected headers" could leak. This approach, extending the existing patch, instead of adding a new one, reduces noise and keeps the diff small, as the same part of the code is targeted. (Closes: #940524) - Add patch to strip non-self-signatures when refreshing or fetching keys. (Closes: #940526) - Add patch to error out if the argument provided to `refresh_keys` is not an existing list. (Closes: #940527) simplesamlphp (1.16.3-1+deb10u2) buster; urgency=medium . * Fix incompatibility with PHP 7.3 (closes: #944820). slurm-llnl (18.08.5.2-1+deb10u1) buster-security; urgency=high . * FIX CVE-2019-12838 by escaping strings in archive files in accounting_storage/mysql sogo-connector (68.0.1-2~deb10u1) buster; urgency=medium . * Rebuild for Buster * [a92f899] d/gbp.conf: adjust to debian/buster sogo-connector (68.0.1-1) unstable; urgency=medium . * [0e43d2d] d/control: move Maintainer to Debian Mozilla Extension Maintainers sogo-connector (68.0.1-1~exp1) unstable; urgency=medium . * [74a8e5f] New upstream version 68.0.1 * [5c78ff2] d/control: add new package webext-sogo-connector - The source of the package is now web-extension based only, no old transitional xul stuff is included. So make this visible by moving the main binary package over to webext-* syntax. * [b292c29] d/control: remove B-D on make and mozilla-devscripts - Drop Build-Depends on make and mozilla-devscripts, they are not needed any more. * [1dadf9c] d/control: adding Rules-Requires-Root: no * [1d3e119] d/rules: updating build targets - Clean up all non needed xul-* helpers, makes the mostly needed target reduced to the quite the minimum. * [ec0863d] webext-sogo-connector adding install sequencer file * [366a931] webext-sogo-connector: adding linking sequencer file * [1c7252f] webext-sogo-connector: adding docs sequencer file * [48e8b6a] d/xul-ext-sogo-connector.lintian-overrides: drop file - xul-ext-sogo-connector is now a transitional package, we don't need this lintian file any more. sogo-connector (68.0.0-1) unstable; urgency=medium . * [63605f6] New upstream version 68.0.0 (Closes: #945061) * [f021239] d/control: bump Standards-Version to 4.4.1 * [cece803] d/control: drop B-D on python-ply (Closes: #939479) * [86ab883] rebuild patch queue from patch-queue branch - removed patches: removing-the-COPYING-file.patch sogo-connector.xpt-prepare-option-for-rebuild-the-.x.patch * [00917e3] remove now obsolete *.idl files - The package build isn't depending on some old files from the non existing package thunderbird-dev any more. The build doesn't uses *.idl files now. * [4b96f9a] d/copyright: update date information * [3efbfa0] d/watch: switch over to git mode * [324d0b8] d/rules: rewrite targets due modified source for TB 68 - Rewrite the control of the package build. There is no local run of some Make targets needed any more. spamassassin (3.4.2-1+deb10u2) buster-security; urgency=medium . * Security update to address - CVE-2020-1930. Arbitrary code execution via malicious rule files. - CVE-2020-1931. Arbitrary code execution via malicious rule files. (Closes: #950258) spamassassin (3.4.2-1+deb10u1) buster-security; urgency=high . * Security update to address CVE-2018-11805. Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. (Closes: 946652) * Security update to address CVE-2019-12420. Messages can be crafted in a way to use excessive resources, resulting in a denial of service. (Closes: 946653) spf-engine (2.9.2-0+deb10u1) buster; urgency=medium . * New upstream bugfix release: * Improve documentation based on user feedbacK: Add mention in policyd-spf.conf (5) in the TestOnly entry that to get both TestOnly behavior and no header field appended, Header_Type = None also needs to be set (LP: #1849994) * Fix priviledge managment at startup so Unix sockets work: Milter: Move drop_privileges before Milter.runmilter and delete own_socketfile so that the milter interface runs as the correct user without race conditions about changing ownership of the socket file when it hasn't been created yet (When the milter is started, it will create the socket based on uMask, so we don't need to manually change it) spf-engine (2.9.1-1) unstable; urgency=medium . [ Ondřej Nový ] * Bump Standards-Version to 4.4.0. . [ Scott Kitterman ] * New upstream release * Put upstream provided init file where dh_installinit expects to find it so it is properly registered on install * Update debian/patches/0001-install-conf-fix.patch for missed change needed in sysv init spip (3.2.4-1+deb10u2) buster-security; urgency=medium . * Backport security fix from 3.2.7 - Critical security fix, allowing identified authors to inject content into database - Update security screen to 1.3.13 * Fix PHP 7.3 compatibility issue. The regex were wrong, and started failing with PHP 7.3, causing plugins to be disabled and impossible to be enable back on upgrade. sudo (1.8.27-1+deb10u2) buster; urgency=medium . * Non-maintainer upload. * Fix a buffer overflow when pwfeedback is enabled and input is a not a tty (CVE-2019-18634) (Closes: #950371) symfony (3.4.22+dfsg-2+deb10u1) buster-security; urgency=medium . * Drop failing tests with recent PHP (Closes: #930003) * Backport security fixes from 3.4.35 - [HttpKernel] Use constant time comparison in UriSigner [CVE-2019-18887] - [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances [CVE-2019-18889] - [HttpFoundation] fix guessing mime-types of files with leading dash [CVE-2019-18888] systemd (241-7~deb10u3) buster; urgency=medium . * core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX. Since kernel 5.2 (but also stable kernels like 4.19.53) the kernel thankfully returns proper errors when we write a value out of range to the sysctl. Which however breaks writing ULONG_MAX to request the maximum value. Hence let's write the new maximum value instead, LONG_MAX. (Closes: #945018) * core: change ownership/mode of the execution directories also for static users. This ensures that execution directories like CacheDirectory and StateDirectory are properly chowned to the user specified in User= before launching the service. (Closes: #919231) thunderbird (1:68.4.1-1~deb10u1) stable-security; urgency=medium . * Rebuild for buster-security thunderbird (1:68.4.1-1~deb9u1) stretch-security; urgency=medium . * Rebuild for stretch-security thunderbird (1:68.3.1-1) unstable; urgency=medium . [ Emilio Pozuelo Monfort ] * [6f59313] Fix MOZ_BUILD_DATE to have the expected format . [ Carsten Schoenert ] * [5d0f4b1] d/rules: don't use SOURCE_DATE_EPOCH for MOZ_BUILD_DATE (Closes: #946588) * [1467af5] New upstream version 68.3.1 thunderbird (1:68.3.0-2) unstable; urgency=medium . * [0625d30] rebuild patch queue from patch-queue branch added patches: fixes/Bug-1531309-Don-t-use-__PRETTY_FUNCTION__-or-__FUNCTION__.patch fixes/Update-bindgen-in-ESR68.-r-glandium-a-RyanVM.patch * [ea8d98c] Breaks: add versioned birdtray package thunderbird (1:68.3.0-2~deb10u1) stable-security; urgency=medium . * Rebuild for buster-security [ Emilio Pozuelo Monfort ] * [de88895] Fix MOZ_BUILD_DATE to have the expected format (cherry-picked from debian/sid) . [ Carsten Schoenert ] * [a077b71] d/rules: don't use SOURCE_DATE_EPOCH for MOZ_BUILD_DATE (cherry-picked from debian/sid) (Closes: #946588) thunderbird (1:68.3.0-2~deb9u1) stretch-security; urgency=medium . * Rebuild for stretch-security thunderbird (1:68.3.0-1) unstable; urgency=medium . * [fe289ec] /u/b/thunderbird: export variable DICPATH before start (Closes: #944295) * [a9a48c6] New upstream version 68.3.0 Fixed CVE issues in upstream version 68.3 (MFSA 2019-38): CVE-2019-17008: Use-after-free in worker destruction CVE-2019-13722: Stack corruption due to incorrect number of arguments in WebRTC code CVE-2019-11745: Out of bounds write in NSS when encrypting with a block cipher CVE-2019-17009: Updater temporary files accessible to unprivileged processes CVE-2019-17010: Use-after-free when performing device orientation checks CVE-2019-17005: Buffer overflow in plain text serializer CVE-2019-17011: Use-after-free when retrieving a document in antitracking CVE-2019-17012: Memory safety bugs fixed in Firefox 71, Firefox ESR 68.3, and Thunderbird 68.3 * [fb23473] d/control: increase B-D version on NSS to 3.44.3 * [6f59938] Breaks: adding more non compatible packaged AddOns thunderbird (1:68.2.2-1) unstable; urgency=medium . * [198d539] xul-ext-compactheader: allow also version << 3.0.0 * [0e93753] d/control: add incompatibility with jsunit << 0.2.2 * [87c84cb] New upstream version 68.2.2 This upstream version has removed the source for calendar-google-provider, thus we can't provide the related binary package any more. * [a3cea2a] rebuild patch queue from patch-queue branch rebuild patch queue from patch-queue branch . removed patches (included upstream): debian/patches/fixes/Bug-1470701-Use-run-time-page-size-when-changing-map.patch debian/patches/fixes/Bug-1505608-Try-to-ensure-the-bss-section-of-the-elf.patch debian/patches/fixes/Bug-1526744-find-dupes.py-Calculate-md5-by-chunk.patch debian/patches/fixes/Build-also-gdata-provider-as-xpi-file.patch debian/patches/fixes/rust-ignore-not-available-documentation.patch debian/patches/porting-kfreebsd-hurd/Fix-GNU-non-Linux-failure-to-build-because-of-ipc-ch.patch debian/patches/porting-mips/Bug-1444303-MIPS-Fix-build-failures-after-Bug-1425580-par.patch debian/patches/porting-mips/Bug-1444834-MIPS-Stubout-MacroAssembler-speculationBarrie.patch debian/patches/porting-powerpc/powerpc-Don-t-use-static-page-sizes-on-powerpc.patch debian/patches/porting-sparc64/Bug-1434726-Early-startup-crash-on-Linux-sparc64-in-HashI.patch * [1730f5f] d/control: remove references to calendar-google-provider Don't build calendar-google-provider any more and remove any references from other binary packages. * [1b0bbb8] d/rules: remove any calendar-google-provider stuff * [92f681c] thunderbird.NEWS: Adding hint about removal of gdata Give out an announcement about the removal of a possible previously installed package calendar-google-provider. thunderbird (1:68.2.2-1~deb10u1) stable-security; urgency=medium . * Rebuild for buster-security * [2c1bd00] d/mozconfig.default: use internal version of nspr, nss, sqlite and icu * [94d6ae4] d/control: remove lib{nspr4,nss3,sqlite3}-dev from B-D thunderbird (1:68.2.2-1~deb9u1) stretch-security; urgency=medium . [ Carsten Schoenert ] * Rebuild for stretch-security * [038dcd9] use nodejs-mozilla within stretch-security The package nodejs isn't available for stretch, but nodejs-mozilla is usable. Thanks for backporting! * [4bdcd39] d/mozconfig.default: remove option for hunspell Thunderbird 68 isn't using external (or internal) hunspell features any more. This requires the usage of external dictionaries provided by AddOns. * [e368b15] d/mozconfig.default: remove doubled sqlite option Removed a doubled disabled option for libsqlite3, the merge from buster was bringing already this option as a disabled option. * [8ddc95c] use internal libvpx library within stretch-security Also libvpx is to old on stretch and we switch to the internal version from the Thunderbird source. thunderbird (1:68.2.1-1) unstable; urgency=medium . [ intrigeri ] * [c48e2cb] AppArmor: update profile from upstream at commit a27a1a5 (Closes: #941290) . [ Carsten Schoenert ] * [98497ae] New upstream version 68.2.0 Fixed CVE issues in upstream version 68.2 (MFSA 2019-35): CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber CVE-2019-11757: Use-after-free when creating index updates in IndexedDB CVE-2019-11758: Potentially exploitable crash due to 360 Total Security CVE-2019-11759: Stack buffer overflow in HKDF output CVE-2019-11760: Stack buffer overflow in WebRTC networking CVE-2019-11761: Unintended access to a privileged JSONView object CVE-2019-11762: document.domain-based origin isolation has same-origin-property violation CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique CVE-2019-11764: Memory safety bugs fixed in Thunderbird 68.2 (Closes: #925841) * [a104c51] d/control: increase Standards-Version to 4.4.1 * [6c9d012] xul-ext-dispmua: set current min usable version * [b3bf16f] New upstream version 68.2.1 * [8f89b90] d/control: decrease build architecture list Decreasing the current list of build architectures. Not meant to keep this forever, removed RC architectures needing support and volunteering to get them back. (Closes: #921258) thunderbird (1:68.1.2-1~exp1) experimental; urgency=medium . * [81f4144] xul-ext-compactheader: increase minimal usable version * [a815589] Update the global information about TB in Debian * [bb5f5f7] rebuild patch queue from patch-queue branch * [6fe7d3f] xul-ext-sogo-connector: increase minimal usable version * [2e29af5] New upstream version 68.1.2 thunderbird (1:68.1.1-1~exp1) experimental; urgency=medium . [ intrigeri ] * [3f49653] AppArmor: update profile from upstream at commit ed52e4a . [ Carsten Schoenert ] * [348f476] New upstream version 68.0~b5 * [2a2f101] New upstream version 68.1.1 Fixed CVE issues in upstream version 68.1 (MFSA 2019-20): CVE-2019-11711: Script injection within domain through inner window reuse CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects CVE-2019-11713: Use-after-free with HTTP/2 cached stream CVE-2019-11714: NeckoChild can trigger crash when accessed off of main thread CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault CVE-2019-11715: HTML parsing error can contribute to content XSS CVE-2019-11716: globalThis not enumerable until accessed CVE-2019-11717: Caret character improperly escaped in origins CVE-2019-11719: Out-of-bounds read when importing curve25519 private key CVE-2019-11720: Character encoding XSS vulnerability CVE-2019-11721: Domain spoofing through unicode latin 'kra' character CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin CVE-2019-11723: Cookie leakage during add-on fetching across private browsing boundaries CVE-2019-11724: Retired site input.mozilla.org has remote troubleshooting permissions CVE-2019-11725: Websocket resources bypass safebrowsing protections CVE-2019-11727: PKCS#1 v1.5 signatures can be used for TLS 1.3 CVE-2019-11728: Port scanning through Alt-Svc header CVE-2019-11710: Memory safety bugs fixed in Firefox 68 and Thunderbird 68 CVE-2019-11709: Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 68 . Fixed CVE issues in upstream version 68.1 (MFSA 2019-20): CVE-2019-11739: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message CVE-2019-11746: Use-after-free while manipulating video CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML CVE-2019-11742: Same-origin policy violation with SVG filters and canvas to steal cross-origin images CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB CVE-2019-11743: Cross-origin access to unload event attributes CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 . Fixed CVE issues in upstream version 68.1.1 (MFSA 2019-32): CVE-2019-11755: Spoofing a message author via a crafted S/MIME message . * [9342624] rebuild patch queue from patch-queue branch added patches: debian-hacks/Set-program-name-from-the-remoting-name.patch debian-hacks/Use-remoting-name-for-call-to-gdk_set_program_class.patch debian-hacks/Work-around-Debian-bug-844357.patch fixes/Allow-.js-preference-files-to-set-locked-prefs-with-lockP.patch fixes/Bug-1556197-amend-Bug-1544631-for-fixing-mips32.patch fixes/Bug-1560340-Only-add-confvars.sh-as-a-dependency-to-confi.patch porting-armhf/Bug-1526653-Include-struct-definitions-for-user_vfp-and-u.patch . removed patch (fixed upstream): porting-mips/Fix-CPU_ARCH-test-for-libjpeg-on-mips.patch porting/Work-around-GCC-ICE-on-mips-i386-and-s390x.patch . * [25cb500] d/control: increase various versions in B-D * [ee5b713] d/control: remove B-D on librust-cbindgen-dev Use librust-toml-dev instead, we only need some files from this package, librust-cbindgen-dev is a metapackage which is broken while packaging. * [442a6b1] d/rules: work around cargo needs a HOME dir * [4894a4c] d/control: increase Standards-Version to 4.4.0 No further changes needed. * [bb47b68] d/control: update upstream homepage for Thunderbird Since some time Mozilla Thunderbird has a new homepage placed on URI https://www.thunderbird.net/ * [a3b680e] d/source.filter: update the filter sequences New Thunderbird upstream versions bringing some new unwanted files within the source. * [7290ff4] d/control: remove transitional lightning l10n packages The Lightning l10n packages moved into transitional packages before Buster was released, now after the Buster release removing these transitional packages. All required l10n files are available in the packages thunderbird-$(locale) even for Lightning. * [3d1d27d] enigmail: increase minimal usable version Thunderbird 68.x needs at least Enigmal in version 2.1, but increase the version on Enigmail to the most recent version which is released while packaging. * [66069d9] calendar-exchange-provider: removed from Breaks This package isn't alive in unstable and testing. * [3b9f936] d/control: remove Xb-Xul-AppId field Thunderbird don't has any Xul based AddOns since version 68.0 * [7d8cd7d] lintian-overrides: remove not needed overrides thunderbird (1:68.0~b1-1) experimental; urgency=medium . * [0eabe70] New upstream version 68.0~b1 * [2febf67] rebuild patch queue from patch-queue branch added patch: debian-hacks/Downgrade-SQlite-version-to-3.27.2.patch * [cfa5973] d/s/lintian-overrides: adjust overrides for needed files * [46077e2] d/copyright: update after upstream changes thunderbird (1:67.0~b3-1) experimental; urgency=medium . [ intrigeri ] * [9ad75ad] d/rules: drop useless usage of dpkg-parsechangelog . [ Carsten Schoenert ] * [d6f6747] New upstream version 67.0~b3 * [90f73be] rebuild patch queue from patch-queue branch removed patch: fixes/Bug-1515641-Turn-enable-av1-around.-r-nalexander.patch * [7dd5c54] d/control: increase various B-D versions Increasing the version for the build depending packages of cargo, cbindgen, libnspr4-dev, libnss3-dev, libsqlite3-dev and rustc. thunderbird (1:66.0~b1-1) experimental; urgency=medium . [ Carsten Schoenert ] * [afe31d9] New upstream version 66.0~b1 * [4ec53cc] apparmor: update profile from upstream (commit 7ace41b1) (cherry-picked from debian/sid) * [b3657a0] d/rules: make dh_clean more robust Remove some regenerated files in dh_clean to the build will not fail in case the build needs to be started twice within the same build environment. (cherry-picked from debian/sid) * [dceb027] d/rules: move disable debug option into configure step Adding the option '--disable-debug-symbols' to the file mozconfig.default in case the build is running on a 32bit architecture instead of expanding the variable 'CONFIGURE_FLAGS'. The configuration approach for this option taken from firefox-esr was not working for the thunderbird package. (cherry-picked from debian/sid) * [f7f02a9] d/rules: reorder LDFLAGS for better readability Make the used additional options for LDFLAGS better readable by reordering the various used options. Also adding the option '-Wl, --as-needed' to the list of used options here. (cherry-picked from debian/sid) * [79801fb] d/rules: use 'compress-debug-sections' only on 64bit Do not set 'LDFLAGS += -Wl,--compress-debug-sections=zlib' globally, lets use this option only if we are on a 64bit architecture as otherwise the build is failing on 32bit architectures again. We don't want to build any debug information on 32bit anyway so we don't need this option on these platforms. (cherry-picked from debian/sid) * [11f9e14] d/mozconfig.default: adding option for mipsel We don't have set up any options for the mipsel platform before, but the build needs some additional options too on this platform to succeed. (cherry-picked from debian/sid) * [e46e178] d/mozconfig.default: disable ion on mips and mipsel The build will fail on mips{,el} if we have enabled ION, the JavaScript JIT compiler on these platforms will loose some performance by this. (cherry-picked from debian/sid) . [ Alexander Nitsch ] * [31b87e9] Make the logo SVG square The original SVG source isn't completely square, modifying the SVG file so all generated other files from the input are also exactly square. * [c0f19a3] Add script for generating PNGs from logo SVG * [c153c5f] Update icon PNGs to be properly scaled . [ Carsten Schoenert ] * [c372e1f] d/source.filter: add some configure scripts Filter out some files that are named 'configure', they are rebuild later anyway. The filtering of these files is moved from gbp.conf to source.filter. (cherry-picked from debian/sid) * [a40c5df] d/c-lightning-l10n-t.sh: drop version checking Remove an old check for a version string within the file install.rdf. It's not created any more by upstream since > 60.0. * [05b325e] d/source.filter: don't ignore files in root folder Try to not ignore files which are in the top root folder of the upstream source tarball. * [d2ca267] rebuild patch queue from patch-queue branch added patch: fixes/Bug-1515641-Turn-enable-av1-around.-r-nalexander.patch . modified (refreshed) patches: porting-armel/Avoid-using-vmrs-vmsr-on-armel.patch porting-armel/Bug-1463035-Remove-MOZ_SIGNAL_TRAMPOLINE.-r-darchons.patch porting-kfreebsd-hurd/Allow-ipc-code-to-build-on-GNU-hurd.patch porting-kfreebsd-hurd/Allow-ipc-code-to-build-on-GNU-kfreebsd.patch porting-kfreebsd-hurd/FTBFS-hurd-fixing-unsupported-platform-Hurd.patch porting-kfreebsd-hurd/Fix-GNU-non-Linux-failure-to-build-because-of-ipc-ch.patch porting-kfreebsd-hurd/adding-missed-HURD-adoptions.patch porting-kfreebsd-hurd/ipc-chromium-fix-if-define-for-kFreeBSD-and-Hurd.patch porting-m68k/Add-m68k-support-to-Thunderbird.patch . removed patches (applied upstream): fixes/Fix-big-endian-build-for-SKIA.patch porting-kfreebsd-hurd/Fix-GNU-non-Linux-failure-to-build-because-of-ipc-ch.patch porting-s390x/FTBFS-s390x-Use-jit-none-AtomicOperations-sparc.h-on-s390.patch * [cb1dde9] d/control: increase version in B-D for libsqlite3-dev * [54e8890] d/mozconfig.default: add new configure option We need to disable the usage of libav1 for an successful build. The used configure option was added by the new added patch to the patch queue. * [ecd3ade] d/copyright: update after upstream changes * [af58ed8] d/source.filter: add extra content to ignore thunderbird (1:65.0~b1-1) experimental; urgency=medium . * [e5956ef] Merge tag 'debian/1%60.4.0-1' into debian/experimental * [389748b] d/source.filter: adjust files to filter while repack Rework of the file filter list due new upstream version but also to no filter out files we obviously need later, e.g. for the omni.jar archive. * [4b86a78] New upstream version 65.0~b1 * [3db29ed] rebuild patch queue from patch-queue branch removed patches (fixed upstream): debian-hacks/icu-use-locale.h-instead-of-xlocale.h.patch debian-hacks/shellutil.py-ignore-tilde-as-special-character.patch fixes/Build-also-gdata-provider-as-xpi-file.patch fixes/Use-msse-2-fpmath-C-CXXFLAGS-only-on-x86_64-platforms.patch porting-mips/Bug-1444303-MIPS-Fix-build-failures-after-Bug-1425580-par.patch porting-mips/Bug-1444834-MIPS-Stubout-MacroAssembler-speculationBarrie.patch porting-sparc64/Bug-1434726-Early-startup-crash-on-Linux-sparc64-in-HashI.patch . removed patches (dropped for Debian specific build): debian-hacks/Don-t-build-testing-suites-and-stuff.patch debian-hacks/Don-t-build-testing-suites-and-stuff-part-2.patch adjusted patches: . debian-hacks/Add-another-preferences-directory-for-applications-p.patch debian-hacks/stop-configure-if-with-system-bz2-was-passed-but-no-.patch patches/fixes/Fix-big-endian-build-for-SKIA.patch (but currently disabled) porting-kfreebsd-hurd/FTBFS-hurd-fixing-unsupported-platform-Hurd.patch porting-kfreebsd-hurd/adding-missed-HURD-adoptions.patch porting-kfreebsd-hurd/ipc-chromium-fix-if-define-for-kFreeBSD-and-Hurd.patch porting-s390x/FTBFS-s390x-Use-jit-none-AtomicOperations-sparc.h-on-s390.patch * [e918c6c] d/control: increase versions in B-D New Thunderbirds version typically need other packages available with higher versions like NSS, NSPR, rust ... Also adding cbindgen and nodejs()!!). * [b6c63bf] d/mozconfig.default: remove dead options More old configure option are now not available anymore and we need to drop them. * [0f959ad] remove GCC specific options LLVM's clang is now widely used, and clang isn't knowing the GCC options '-fno-schedule-insns2' and '-fno-lifetime-dse', removing these options from CFLAGS and CXXFLAGS. * [d0b1f4b] d/rules: work around about strong quotings in .mk files After the configuration of the source some Makefiles in the build folder 'obj-thunderbird' have a strong qouting on some entries. This will later provoke a build failure if we don't remove the single quotes before in the Makefiles. * [093053e] copyright: update after upstream changes * [95eaacf] d/s/lintian-overrides: adjust overrides for needed files thunderbird (1:60.9.0-1) unstable; urgency=medium . * [5f7ba31] New upstream version 60.9.0 Fixed CVE issues in upstream version 60.8.0 (MFSA 2019-29) CVE-2019-11746: Use-after-free while manipulating video CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML CVE-2019-11742: Same-origin policy violation with SVG filters and canvas to steal cross-origin images CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB CVE-2019-11743: Cross-origin access to unload event attributes CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, and Thunderbird 60.9 tiff (4.1.0+git191117-2~deb10u1) buster-security; urgency=high . * Security backport for Buster. * Relax Standards-Version to 4.3.0 . . tiff (4.1.0+git191117-2) unstable; urgency=medium . * Backport upstream fix for rowsperstrip parse regression in OJPEGReadHeaderInfo() (closes: #945402). . tiff (4.1.0+git191117-1) unstable; urgency=medium . * Git snapshot, fixing the following issues: - missing TIFFClose in rgb2ycbcr tool, - missing checks on TIFFGetField in tiffcrop tool, - broken sanity check in OJPEG, - missing generated .sh files for tests. . tiff (4.1.0-1) unstable; urgency=medium . * New upstream release. * Update Standards-Version to 4.4.1 . . tiff (4.0.10+git191003-1) unstable; urgency=high . * Git snapshot, fixing the following security issue: - TIFFReadAndRealloc(): avoid too large memory allocation attempts. . tiff (4.0.10+git190903-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - setByteArray(): avoid potential signed integer overflow, - EstimateStripByteCounts(): avoid several unsigned integer overflows, - tif_ojpeg: avoid two unsigned integer overflows, - OJPEGWriteHeaderInfo(): avoid unsigned integer overflow on strile dimensions close to UINT32_MAX, - _TIFFPartialReadStripArray(): avoid unsigned integer overflow, - JPEG: avoid use of uninitialized memory on corrupted files, - TIFFFetchDirectory(): fix invalid cast from uint64 to tmsize_t, - allocChoppedUpStripArrays(): avoid unsigned integer overflow, - tif_ojpeg: avoid use of uninitialized memory on edge/broken file, - ByteCountLooksBad and EstimateStripByteCounts: avoid unsigned integer overflows. . tiff (4.0.10+git190818-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - RGBA interface: fix integer overflow potentially causing write heap buffer overflow, - setByteArray(): avoid potential signed integer overflow. . tiff (4.0.10+git190814-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - TryChopUpUncompressedBigTiff(): avoid potential division by zero, - fix vulnerability introduced by defer strile loading, - fix vulnerability in 'D' (DeferStrileLoad) mode, - return infinite distance when denominator is zero, - OJPEG: avoid use of uninitialized memory on corrupted files, - OJPEG: fix integer division by zero on corrupted subsampling factors, - OJPEGReadBufferFill(): avoid very long processing time on corrupted files, - TIFFClientOpen(): fix memory leak if one of the required callbacks is not provided, - CVE-2019-14973, fix integer overflow in _TIFFCheckMalloc() and other implementation-defined behaviour (closes: #934780). * Update libtiff5 symbols. * Update Standards-Version to 4.4.0 . tiff (4.1.0+git191117-1) unstable; urgency=medium . * Git snapshot, fixing the following issues: - missing TIFFClose in rgb2ycbcr tool, - missing checks on TIFFGetField in tiffcrop tool, - broken sanity check in OJPEG, - missing generated .sh files for tests. tiff (4.1.0-1) unstable; urgency=medium . * New upstream release. * Update Standards-Version to 4.4.1 . tiff (4.0.10+git191003-1) unstable; urgency=high . * Git snapshot, fixing the following security issue: - TIFFReadAndRealloc(): avoid too large memory allocation attempts. tiff (4.0.10+git190903-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - setByteArray(): avoid potential signed integer overflow, - EstimateStripByteCounts(): avoid several unsigned integer overflows, - tif_ojpeg: avoid two unsigned integer overflows, - OJPEGWriteHeaderInfo(): avoid unsigned integer overflow on strile dimensions close to UINT32_MAX, - _TIFFPartialReadStripArray(): avoid unsigned integer overflow, - JPEG: avoid use of uninitialized memory on corrupted files, - TIFFFetchDirectory(): fix invalid cast from uint64 to tmsize_t, - allocChoppedUpStripArrays(): avoid unsigned integer overflow, - tif_ojpeg: avoid use of uninitialized memory on edge/broken file, - ByteCountLooksBad and EstimateStripByteCounts: avoid unsigned integer overflows. tiff (4.0.10+git190818-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - RGBA interface: fix integer overflow potentially causing write heap buffer overflow, - setByteArray(): avoid potential signed integer overflow. tiff (4.0.10+git190814-1) unstable; urgency=high . * Git snapshot, fixing the following security issues: - TryChopUpUncompressedBigTiff(): avoid potential division by zero, - fix vulnerability introduced by defer strile loading, - fix vulnerability in 'D' (DeferStrileLoad) mode, - return infinite distance when denominator is zero, - OJPEG: avoid use of uninitialized memory on corrupted files, - OJPEG: fix integer division by zero on corrupted subsampling factors, - OJPEGReadBufferFill(): avoid very long processing time on corrupted files, - TIFFClientOpen(): fix memory leak if one of the required callbacks is not provided, - CVE-2019-14973, fix integer overflow in _TIFFCheckMalloc() and other implementation-defined behaviour (closes: #934780). * Update libtiff5 symbols. * Update Standards-Version to 4.4.0 . tifffile (20181128-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. . [ Andreas Tille ] * Fix wrapper script Closes: #939511, #938668 tigervnc (1.9.0+dfsg-3+deb10u1) buster; urgency=high . [ Joachim Falk ] * Fix CVE-2019-15691, CVE-2019-15692, CVE-2019-15693, CVE-2019-15694, and CVE-2019-15695 (Closes: #947428) tightvnc (1:1.3.9-9+deb10u1) buster; urgency=medium . * Security upload. (Closes: #945364). * CVE-2014-6053: Check malloc() return value on client->server ClientCutText message. * CVE-2018-20020: Fix heap out-of-bound write vulnerability inside structure in VNC client code. * CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code. * CVE-2018-20022: CWE-665: Improper Initialization vulnerability. * CVE-2018-7225: Uninitialized and potentially sensitive data could be accessed by remote attackers because the msg.cct.length in rfbserver.c was not sanitized. * CVE-2019-15678: LibVNCClient: ignore server-sent cut text longer than 1MB. * Extra patch similar to the fix for CVE-2019-15678: LibVNCClient: ignore server-sent reason strings longer than 1MB (see CVE-2018-20748/ libvncserver). * CVE-2019-15679: rfbproto.c/InitialiseRFBConnection: Check desktop name length received before allocating memory for it and limit it to 1MB. * CVE-2019-15680: Fix null-pointer-deref issue in vncviewer/zlib.c. * CVE-2019-15681: rfbserver: don't leak stack memory to the remote. tightvnc (1:1.3.9-9+deb9u1) stretch; urgency=medium . * Security upload. (Closes: #945364). * CVE-2014-6053: Check malloc() return value on client->server ClientCutText message. * CVE-2019-8287 (aka CVE-2018-20020): Fix heap out-of-bound write vulnerability inside structure in VNC client code. * CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code. * CVE-2018-20022: CWE-665: Improper Initialization vulnerability. * CVE-2018-7225: Uninitialized and potentially sensitive data could be accessed by remote attackers because the msg.cct.length in rfbserver.c was not sanitized. * CVE-2019-15678: LibVNCClient: ignore server-sent cut text longer than 1MB. * Extra patch similar to the fix for CVE-2019-15678: LibVNCClient: ignore server-sent reason strings longer than 1MB (see CVE-2018-20748/ libvncserver). * CVE-2019-15679: rfbproto.c/InitialiseRFBConnection: Check desktop name length received before allocating memory for it and limit it to 1MB. * CVE-2019-15680: Fix null-pointer-deref issue in vncviewer/zlib.c. * CVE-2019-15681: rfbserver: don't leak stack memory to the remote. uif (1.1.9-1+deb10u1) buster; urgency=medium . * debian/patches: + Add 1001_use-iptables-legacy.patch. Work-around iptables->nftables switch in Debian. Full nftables support is being worked on on the upstream side. (Closes: #932265). unhide (20130526-3+deb10u1) buster; urgency=medium . * Team Upload. * debian/patch/allocate-pid-arrays-from-heap.patch: Added to fix a stack exhausting. Thanks to Bernhard Übelacker . (Closes: #945864) webkit2gtk (2.26.3-1~deb10u1) buster-security; urgency=medium . * Rebuild for buster-security. + This fixes CVE-2019-8835, CVE-2019-8844 and CVE-2019-8846. See https://webkitgtk.org/security/WSA-2020-0001.html. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Remove Breaks for Evolution < 3.34.1. + Remove build dependency on libwpebackend-fdo-1.0-dev. + Switch build dependency from libenchant-2-dev to libenchant-dev. webkit2gtk (2.26.3-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Remove Breaks for Evolution < 3.34.1. + Remove build dependency on libwpebackend-fdo-1.0-dev. + Switch build dependency from libenchant-2-dev to libenchant-dev. webkit2gtk (2.26.3-1~bpo9+1) stretch-backports-sloppy; urgency=medium . * Rebuild for stretch-backports-sloppy. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependencies on libwoff-dev and libopenjp2-7-dev. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Build depend on clang-7. + Remove Breaks for Evolution < 3.34.1. + Remove build dependency on libwpebackend-fdo-1.0-dev. + Switch build dependency from libenchant-2-dev to libenchant-dev. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. + Pass CC and CXX to dh_auto_configure so it uses clang instead of gcc. * debian/patches/is-same-v.patch: + Define std::is_same_v and std::is_pod_v. * debian/patches/fix-gtkdoc-generation.patch: + Fix gtk-doc generation. * debian/patches/safe-multiply.patch: + Fix link errors in 32-bit CPUs with clang * debian/libwebkit2gtk-4.0-37.symbols: + Mark webkit_emoji_chooser_get_type as optional, this requires a more recent version of GTK. * debian/patches/fix-atomics-build.patch: + Use libatomic in libWTF. This fixes the armel build. webkit2gtk (2.26.2-1) unstable; urgency=medium . * New upstream release. * debian/rules: + Stop building with -O1 for armhf and friends, the build seems to work just fine with -O2 now. * debian/control: + Require bubblewrap >= 0.3.1. * debian/patches/force-single-process.patch: + Remove this patch, the fixed version of Geary (3.34.1) is now in unstable. * The WebKitGTK security advisory WSA-2019-0005 lists the following security fixes in the latest versions of WebKitGTK: + CVE-2019-8768 (fixed in 2.24.0). + CVE-2019-8735 (fixed in 2.24.2). + CVE-2019-8726 (fixed in 2.24.3). + CVE-2019-8674, CVE-2019-8707, CVE-2019-8719, CVE-2019-8733 and CVE-2019-8763 (fixed in 2.24.4). + CVE-2019-8625, CVE-2019-8720, CVE-2019-8769 and CVE-2019-8771 (fixed in 2.26.0). webkit2gtk (2.26.2-1~deb10+1) buster-security; urgency=high . * Rebuild for buster-security. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Remove Breaks for Evolution < 3.34.1. * The WebKitGTK security advisory WSA-2019-0006 lists the following security fixes in the latest versions of WebKitGTK: + CVE-2019-8765, CVE-2019-8821, CVE-2019-8822 (fixed in 2.24.4) + CVE-2019-8710, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815 (fixed in 2.26.0) + CVE-2019-8783, CVE-2019-8811, CVE-2019-8813, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823 (fixed in 2.26.1) + CVE-2019-8812, CVE-2019-8814 (fixed in 2.26.2) webkit2gtk (2.26.2-1~bpo9+1) stretch-backports-sloppy; urgency=medium . * Rebuild for stretch-backports-sloppy. * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependency on libwoff-dev, this is not available in this Debian release. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Don't depend on libopenjp2-7-dev. + Build depend on clang-7. + Remove Breaks for Evolution < 3.34.1. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. + Pass CC and CXX to dh_auto_configure so it uses clang instead of gcc. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/patches/is-same-v.patch: + Define std::is_same_v * debian/patches/fix-gtkdoc-generation.patch: + Fix gtk-doc generation. * debian/patches/safe-multiply.patch: + Fix link errors in 32-bit CPUs with clang * debian/libwebkit2gtk-4.0-37.symbols: + Mark webkit_emoji_chooser_get_type as optional, this requires a more recent version of GTK. * debian/patches/is-same-v.patch: + Define also std::is_pod_v * debian/patches/fix-atomics-build.patch: + Use libatomic in libWTF. This fixes the armel build. * The WebKitGTK security advisory WSA-2019-0006 lists the following security fixes in the latest versions of WebKitGTK: + CVE-2019-8765, CVE-2019-8821, CVE-2019-8822 (fixed in 2.24.4) + CVE-2019-8710, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815 (fixed in 2.26.0) + CVE-2019-8783, CVE-2019-8811, CVE-2019-8813, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823 (fixed in 2.26.1) + CVE-2019-8812, CVE-2019-8814 (fixed in 2.26.2) webkit2gtk (2.26.1-3) unstable; urgency=medium . * debian/rules: + Use -DWTF_CPU_ARM64_CORTEXA53=OFF to fix the arm64 build. * debian/patches/force-single-process.patch: + Don't use this workaround for Evolution anymore, the fixed version is now in unstable. * debian/control: + Add Breaks for Evolution < 3.34.1. + Update Standards-Version to 4.4.1 (no changes). wordpress (5.0.4+dfsg1-1+deb10u1) buster-security; urgency=medium . * Backport of the 5.3.1 security release Closes: #946905 - CVE-2019-20043 an unprivileged user could make a post sticky via the REST API. - CVE-2019-20042 cross-site scripting (XSS) could be stored in well-crafted links - CVE-2019-20041 hardening wp_kses_bad_protocol() to ensure that it is aware of the named colon attribute. - CVE-2019-16780 and CVE-2019-16781 stored XSS vulnerability using block editor content. * Backport of the 5.2.4 security release Closes: #942459 - CVE-2019-17674 Stored XSS in the Customizer - CVE-2019-17671 Viewing unauthenticated posts - CVE-2019-17672 Stored XSS to inject javascript into style tags - CVE-2019-17673 Poisoning JSON GET requests - CVE-2019-17669 SSRF in URL vaidation - CVE-2019-17675 Referer validation in admin screens * Backport of 5.2.3 security release, Closes: #939543 - CVE-2019-16223 XSS in post previews - CVE-2019-16218 XSS in stored comments - CVE-2019-16220 Open redirect due to validation and sanitization - CVE-2019-16217 XSS in media uploads - CVE-2019-16219 XSS in shortcode previews - CVE-2019-16221 XSS in dashboard - CVE-2019-16222 XSS in URL sanitization x2goclient (4.1.2.1-2+deb10u1) buster; urgency=medium . * debian/patches: + Add libssh-regression-fix-CVE-2019-14889.patch. In src/sshprocess.cpp: strip ~/, ~user{,/}, ${HOME}{,/} and $HOME{,/} from destination paths in scp mode. Fixes: #1428. This was already necessary for pascp (PuTTY- based Windows solution for Kerberos support), but newer libssh versions with the CVE-2019-14889 also interpret paths as literal strings. (Closes: #947129). xen (4.11.3+24-g14b62ab3e5-1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security xmltooling (3.0.4-1+deb10u1) buster; urgency=medium . * [7c6eb12] This branch is for buster updates * [97e580e] New patch: CPPXT-145 - DataSealer is sharing non-thread safe keys. Thanks to Scott Cantor (Closes: #950135) ====================================== Sat, 16 Nov 2019 - Debian 10.2 released ====================================== ========================================================================= [Date: Sat, 16 Nov 2019 08:47:52 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: firefox-esr | 60.8.0esr-1~deb10u1 | armel firefox-esr | 60.9.0esr-1~deb10u1 | armel Closed bugs: 944637 ------------------- Reason ------------------- RoQA; no longer supportable ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 16 Nov 2019 08:56:22 +0000] [ftpmaster: Archive Administrator] Removed the following packages from stable: firefox-esr-l10n-as | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-bn-bd | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-bn-in | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-en-za | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-mai | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-ml | 60.9.0esr-1~deb10u1 | all firefox-esr-l10n-or | 60.9.0esr-1~deb10u1 | all ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by firefox-esr - based on source metadata) ---------------------------------------------- ========================================================================= aegisub (3.2.2+dfsg-4+deb10u1) buster; urgency=medium . * Add libhunspell-dev to Build-Depends: fixes SEGV when right-clicking in the subtitles text box. * Apply patch provided in #935724: fixes crash when selecting a language from the bottom of the "Spell checker language" list by defining a maximum languages constant. * Closes: #935724. akonadi (4:18.08.3-7~deb10u1) buster; urgency=medium . * Rebuild for buster. akonadi (4:18.08.3-6) unstable; urgency=medium . * Team upload. . [ Sandro Knauß ] * Fix "Akonadi don't anwser any requests and ends in deadlock" (Closes: #935981) by adding upstream patches. - Akonadi-fix-dangling-transaction-after-itemsync-fail.patch - ItemSync-skip-handling-remote-items-if-local-changes.patch apache2 (2.4.38-3+deb10u3) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Annoatate patch for CVE-2019-10092: Add missing APLOGNO's in modules/proxy/mod_proxy.c and modules/proxy/mod_proxy_ftp.c apache2 (2.4.38-3+deb10u2) buster-security; urgency=medium . * Fix CVE-2019-10092 patch (Closes: #941202) base-files (10.3+deb10u2) buster; urgency=medium . * Change /etc/debian_version to 10.2, for Debian 10.2 point release. bird (1.6.6-1+deb10u1) buster-security; urgency=medium . * [CVE-2019-16159]: Fix stack-based buffer overflow (Closes: #939990) capistrano (3.11.0-3+deb10u1) buster; urgency=medium . * Add upstream patch to fix failure on removal of old releases (when too many old releases). More information at: https://github.com/capistrano/capistrano/pull/2027 . For this patch to be applied, another one also had to be applied, although with very low impact: https://github.com/capistrano/capistrano/pull/1995 . They are, respectively, batch-rm-part2.patch and batch-rm-part1.patch. . This has been fixed upstream on the release 3.11.1 using the same patches. chromium (78.0.3904.97-1~deb10u1) buster-security; urgency=medium . * New upstream stable release. - CVE-2019-5869: Use-after-free in Blink. Reported by Zhe Jin - CVE-2019-5870: Use-after-free in media. Reported by Guang Gong - CVE-2019-5871: Heap overflow in Skia. Reported by Anonymous - CVE-2019-5872: Use-after-free in Mojo. Reported by Zhe Jin - CVE-2019-5874: External URIs may trigger other browsers. Reported by James Lee - CVE-2019-5875: URL bar spoof. Reported by Khalil Zhani - CVE-2019-5876: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-5877: Out-of-bounds access in V8. Reported by Guang Gong - CVE-2019-5878: Use-after-free in V8. Reported by Guang Gong - CVE-2019-5879: Extensions can read some local files. Reported by Jinseo Kim - CVE-2019-5880: SameSite cookie bypass. Reported by Jun Kokatsu - CVE-2019-13659: URL spoof. Reported by Lnyas Zhang - CVE-2019-13660: Full screen notification overlap. Reported by Wenxu Wu - CVE-2019-13661: Full screen notification spoof. Reported by Wenxu Wu - CVE-2019-13662: CSP bypass. Reported by David Erceg - CVE-2019-13663: IDN spoof. Reported by Lnyas Zhang - CVE-2019-13664: CSRF bypass. Reported by thomas "zemnmez" shadwell - CVE-2019-13665: Multiple file download protection bypass. Reported by Jun Kokatsu - CVE-2019-13666: Side channel using storage size estimate. Reported by Tom Van Goethem - CVE-2019-13667: URI bar spoof when using external app URIs. Reported by Khalil Zhani - CVE-2019-13668: Global window leak via console. Reported by David Erceg - CVE-2019-13669: HTTP authentication spoof. Reported by Khalil Zhani - CVE-2019-13670: V8 memory corruption in regex. Reported by Guang Gong - CVE-2019-13671: Dialog box fails to show origin. Reported by xisigr - CVE-2019-13673: Cross-origin information leak using devtools. Reported by David Erceg - CVE-2019-13674: IDN spoofing. Reported by Khalil Zhani - CVE-2019-13675: Extensions can be disabled by trailing slash. Reported by Jun Kokatsu - CVE-2019-13676: Google URI shown for certificate warning. Reported by Wenxu Wu - CVE-2019-13677: Chrome web store origin needs to be isolated. Reported by Jun Kokatsu - CVE-2019-13678: Download dialog spoofing. Reported by Ronni Skansing - CVE-2019-13679: User gesture needed for printing. Reported by Conrad Irwin - CVE-2019-13680: IP address spoofing to servers. Reported by Thijs Alkemade - CVE-2019-13681: Bypass on download restrictions. Reported by David Erceg - CVE-2019-13682: Site isolation bypass. Reported by Jun Kokatsu - CVE-2019-13683: Exceptions leaked by devtools. Reported by David Erceg - CVE-2019-13685: Use-after-free in UI. Reported by Khalil Zhani - CVE-2019-13686: Use-after-free in offline pages. Reported by Brendon - CVE-2019-13687: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-13688: Use-after-free in media. Reported by Man Yue Mo Tiszka - CVE-2019-13691: Omnibox spoof. Reported by David Erceg - CVE-2019-13692: SOP bypass. Reported by Jun Kokatsu - CVE-2019-13693: Use-after-free in IndexedDB. Reported by Guang Gong - CVE-2019-13694: Use-after-free in WebRTC. Reported by banananapenguin - CVE-2019-13695: Use-after-free in audio. Reported by Man Yue Mo - CVE-2019-13696: Use-after-free in V8. Reported by Guang Gong - CVE-2019-13697: Cross-origin size leak. Reported by Luan Herrera - CVE-2019-13699: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-13700: Buffer overrun in Blink. Reported by Man Yue Mo - CVE-2019-13701: URL spoof in navigation. Reported by David Erceg - CVE-2019-13702: Privilege elevation in Installer. Reported by Phillip Langlois and Edward Torkington - CVE-2019-13703: URL bar spoofing. Reported by Khalil Zhani - CVE-2019-13704: CSP bypass. Reported by Jun Kokatsu - CVE-2019-13705: Extension permission bypass. Reported by Luan Herrera - CVE-2019-13706: Out-of-bounds read in PDFium. Reported by pdknsk - CVE-2019-13707: File storage disclosure. Reported by Andrea Palazzo - CVE-2019-13708: HTTP authentication spoof. Reported by Khalil Zhani - CVE-2019-13709: File download protection bypass. Reported by Zhong Zhaochen - CVE-2019-13710: File download protection bypass. Reported by bernardo.mrod - CVE-2019-13711: Cross-context information leak. Reported by David Erceg - CVE-2019-13713: Cross-origin data leak. Reported by David Erceg - CVE-2019-13714: CSS injection. Reported by Jun Kokatsu - CVE-2019-13715: Address bar spoofing. Reported by xisigr - CVE-2019-13716: Service worker state error. Reported by Barron Hagerman - CVE-2019-13717: Notification obscured. Reported by xisigr - CVE-2019-13718: IDN spoof. Reported by Khalil Zhani - CVE-2019-13719: Notification obscured. Reported by Khalil Zhani - CVE-2019-13720: Use-after-free in audio. Reported by Anton Ivanov and Alexey Kulaev - CVE-2019-13721: Use-after-free in PDFium. Reported by banananapenguin chromium (78.0.3904.87-1) unstable; urgency=medium . * New upstream stable release. - CVE-2019-5869: Use-after-free in Blink. Reported by Zhe Jin - CVE-2019-5870: Use-after-free in media. Reported by Guang Gong - CVE-2019-5871: Heap overflow in Skia. Reported by Anonymous - CVE-2019-5872: Use-after-free in Mojo. Reported by Zhe Jin - CVE-2019-5874: External URIs may trigger other browsers. Reported by James Lee - CVE-2019-5875: URL bar spoof. Reported by Khalil Zhani - CVE-2019-5876: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-5877: Out-of-bounds access in V8. Reported by Guang Gong - CVE-2019-5878: Use-after-free in V8. Reported by Guang Gong - CVE-2019-5879: Extensions can read some local files. Reported by Jinseo Kim - CVE-2019-5880: SameSite cookie bypass. Reported by Jun Kokatsu - CVE-2019-13659: URL spoof. Reported by Lnyas Zhang - CVE-2019-13660: Full screen notification overlap. Reported by Wenxu Wu - CVE-2019-13661: Full screen notification spoof. Reported by Wenxu Wu - CVE-2019-13662: CSP bypass. Reported by David Erceg - CVE-2019-13663: IDN spoof. Reported by Lnyas Zhang - CVE-2019-13664: CSRF bypass. Reported by thomas "zemnmez" shadwell - CVE-2019-13665: Multiple file download protection bypass. Reported by Jun Kokatsu - CVE-2019-13666: Side channel using storage size estimate. Reported by Tom Van Goethem - CVE-2019-13667: URI bar spoof when using external app URIs. Reported by Khalil Zhani - CVE-2019-13668: Global window leak via console. Reported by David Erceg - CVE-2019-13669: HTTP authentication spoof. Reported by Khalil Zhani - CVE-2019-13670: V8 memory corruption in regex. Reported by Guang Gong - CVE-2019-13671: Dialog box fails to show origin. Reported by xisigr - CVE-2019-13673: Cross-origin information leak using devtools. Reported by David Erceg - CVE-2019-13674: IDN spoofing. Reported by Khalil Zhani - CVE-2019-13675: Extensions can be disabled by trailing slash. Reported by Jun Kokatsu - CVE-2019-13676: Google URI shown for certificate warning. Reported by Wenxu Wu - CVE-2019-13677: Chrome web store origin needs to be isolated. Reported by Jun Kokatsu - CVE-2019-13678: Download dialog spoofing. Reported by Ronni Skansing - CVE-2019-13679: User gesture needed for printing. Reported by Conrad Irwin - CVE-2019-13680: IP address spoofing to servers. Reported by Thijs Alkemade - CVE-2019-13681: Bypass on download restrictions. Reported by David Erceg - CVE-2019-13682: Site isolation bypass. Reported by Jun Kokatsu - CVE-2019-13683: Exceptions leaked by devtools. Reported by David Erceg - CVE-2019-13685: Use-after-free in UI. Reported by Khalil Zhani - CVE-2019-13686: Use-after-free in offline pages. Reported by Brendon - CVE-2019-13687: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-13688: Use-after-free in media. Reported by Man Yue Mo Tiszka - CVE-2019-13691: Omnibox spoof. Reported by David Erceg - CVE-2019-13692: SOP bypass. Reported by Jun Kokatsu - CVE-2019-13693: Use-after-free in IndexedDB. Reported by Guang Gong - CVE-2019-13694: Use-after-free in WebRTC. Reported by banananapenguin - CVE-2019-13695: Use-after-free in audio. Reported by Man Yue Mo - CVE-2019-13696: Use-after-free in V8. Reported by Guang Gong - CVE-2019-13697: Cross-origin size leak. Reported by Luan Herrera - CVE-2019-13699: Use-after-free in media. Reported by Man Yue Mo - CVE-2019-13700: Buffer overrun in Blink. Reported by Man Yue Mo - CVE-2019-13701: URL spoof in navigation. Reported by David Erceg - CVE-2019-13702: Privilege elevation in Installer. Reported by Phillip Langlois and Edward Torkington - CVE-2019-13703: URL bar spoofing. Reported by Khalil Zhani - CVE-2019-13704: CSP bypass. Reported by Jun Kokatsu - CVE-2019-13705: Extension permission bypass. Reported by Luan Herrera - CVE-2019-13706: Out-of-bounds read in PDFium. Reported by pdknsk - CVE-2019-13707: File storage disclosure. Reported by Andrea Palazzo - CVE-2019-13708: HTTP authentication spoof. Reported by Khalil Zhani - CVE-2019-13709: File download protection bypass. Reported by Zhong Zhaochen - CVE-2019-13710: File download protection bypass. Reported by bernardo.mrod - CVE-2019-13711: Cross-context information leak. Reported by David Erceg - CVE-2019-13713: Cross-origin data leak. Reported by David Erceg - CVE-2019-13714: CSS injection. Reported by Jun Kokatsu - CVE-2019-13715: Address bar spoofing. Reported by xisigr - CVE-2019-13716: Service worker state error. Reported by Barron Hagerman - CVE-2019-13717: Notification obscured. Reported by xisigr - CVE-2019-13718: IDN spoof. Reported by Khalil Zhani - CVE-2019-13719: Notification obscured. Reported by Khalil Zhani - CVE-2019-13720: Use-after-free in audio. Reported by Anton Ivanov and Alexey Kulaev - CVE-2019-13721: Use-after-free in PDFium. Reported by banananapenguin * Drop support for building with gcc 6 and gtk 2. chromium (76.0.3809.100-1) unstable; urgency=medium . * New upstream security release. - CVE-2019-5867: Out-of-bounds read in V8. Reported by Lucas Pinheiro - CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction. Reported by banananapenguin chromium (76.0.3809.87-2) unstable; urgency=medium . * Fix inverted logic in enum comparison (closes: #933598). chromium (76.0.3809.87-1) unstable; urgency=medium . * New upstream stable release. - CVE-2019-5847: V8 sealed/frozen elements cause crash. Reported by m3plex - CVE-2019-5848: Font sizes may expose sensitive information. Reported by Mark Amery - CVE-2019-5850: Use-after-free in offline page fetcher. Reported by Brendon Tiszka - CVE-2019-5851: Use-after-poison in offline audio context. Reported by Zhe Jin - CVE-2019-5852: Object leak of utility functions. Reported by David Erceg - CVE-2019-5853: Memory corruption in regexp length check. Reported by yngwei and sakura - CVE-2019-5854: Integer overflow in PDFium text rendering. Reported by Zhen Zhou - CVE-2019-5855: Integer overflow in PDFium. Reported by Zhen Zhou - CVE-2019-5856: Insufficient checks on filesystem: URI permissions. Reported by Yongke Wang - CVE-2019-5857: Comparison of -0 and null yields crash. Reported by cloudfuzzer - CVE-2019-5858: Insufficient filtering of Open URL service parameters. Reported by evi1m0 - CVE-2019-5859: res: URIs can load alternative browsers. Reported by James Lee - CVE-2019-5860: Use-after-free in PDFium. Reported by Anonymous - CVE-2019-5861: Click location incorrectly checked. Reported by Robin Linus - CVE-2019-5862: AppCache not robust to compromised renderers. Reported by Jun Kokatsu - CVE-2019-5864: Insufficient port filtering in CORS for extensions. Reported by Devin Grindle - CVE-2019-5865: Site isolation bypass from compromised renderer. Reported by Ivan Fratric * Use legacy call to avoid error in icu 6.3 (closes: #932049). chromium (76.0.3809.71-1) unstable; urgency=medium . * New upstream beta release. * Recommend system-config-printer (closes: #929106). * Add -fno-delete-null-pointer-checks back into the build flags. chromium (76.0.3809.62-1) unstable; urgency=medium . * New upstream beta release. - Fixes error restoring multiple profiles on startup (closes: #930469). * Update standards version to 4.4.0. chromium (75.0.3770.90-1) unstable; urgency=medium . [ Riku Voipio ] * Fix build on armhf (closes: #930348). . [ Michael Gilbert ] * New upstream security release. - CVE-2019-5842: Use-after-free in Blink. Reported by BUGFENSE * Disable hardware accelerated video (closes: #926032). * Fix signedness error when built with gcc (closes: #914886). - Thanks to Maciej S. Szmigiero. chromium (75.0.3770.80-1) unstable; urgency=medium . * New upstream stable release. - CVE-2019-5824: Parameter passing error in media player. Reported by leecraso and Guang Gong - CVE-2019-5825: Out-of-bounds write in V8. Reported by Gengming Liu, Jianyu Chen, Zhen Feng, and Jessica Liu - CVE-2019-5826: Use-after-free in IndexedDB. Reported by Gengming Liu, Jianyu Chen, Zhen Feng, and Jessica Liu - CVE-2019-5827: Out-of-bounds access issue in SQLite. Reported by mlfbrown - CVE-2019-5828: Use after free in ServiceWorker. Reported by leecraso and Guang Gong - CVE-2019-5829: Use after free in Download Manager. Reported by Lucas Pinheiro - CVE-2019-5830: Incorrectly credentialed requests in CORS. Reported by Andrew Krasichkov - CVE-2019-5831: Incorrect map processing in V8. Reported by yngwei - CVE-2019-5832: Incorrect CORS handling in XHR. Reported by Sergey Shekyan - CVE-2019-5833: Inconsistent security UI placement. Reported by Khalil Zhani - CVE-2019-5834: URL spoof in Omnibox on iOS. Reported by Khalil Zhani - CVE-2019-5835: Out of bounds read in Swiftshader. Reported by Wenxiang Qian - CVE-2019-5836: Heap buffer overflow in Angle. Reported by Omair - CVE-2019-5837: Cross-origin resources size disclosure in Appcache. Reported by Adam Iwaniuk - CVE-2019-5838: Overly permissive tab access in Extensions. Reported by David Erceg - CVE-2019-5839: Incorrect handling of certain code points in Blink. Reported by Masato Kinugawa - CVE-2019-5840: Popup blocker bypass. Reported by Eliya Stein and Jerome Dangu chromium (75.0.3770.10-1) experimental; urgency=medium . * New upstream development release. - Fixes crash when launching chromium a second time (closes: #927913). * Document how to use widevine in README.debian (closes: #929026). * Apply vaapi update from the Fedora chromium 73 package (closes: #926032). chromium (74.0.3729.108-1) unstable; urgency=medium . * New upstream stable release. - Eliminates flood of vsync error messages (closes: #901831). - Correctly shuts down when SIGTERM is recieved (closes: #924901). - Fixes regression in hardware accelerated video (closes: #926032). - CVE-2019-5805: Use after free in PDFium. Reported by Anonymous - CVE-2019-5806: Integer overflow in Angle. Reported by Wen Xu - CVE-2019-5807: Memory corruption in V8. Reported by TimGMichaud - CVE-2019-5808: Use after free in Blink. Reported by cloudfuzzer - CVE-2019-5809: Use after free in Blink. Reported by Mark Brand - CVE-2019-5810: User information disclosure in Autofill. Reported by Mark Amery - CVE-2019-5811: CORS bypass in Blink. Reported by Jun Kokatsu - CVE-2019-5813: Out of bounds read in V8. Reported by Aleksandar Nikolic - CVE-2019-5814: CORS bypass in Blink. Reported by @AaylaSecura1138 - CVE-2019-5815: Heap buffer overflow in Blink. Reported by Nicolas Grégoire - CVE-2019-5818: Uninitialized value in media reader. Reported by Adrian Tolbaru - CVE-2019-5819: Incorrect escaping in developer tools. Reported by Svyat Mitin - CVE-2019-5820: Integer overflow in PDFium. Reported by pdknsk - CVE-2019-5821: Integer overflow in PDFium. Reported by pdknsk - CVE-2019-5822: CORS bypass in download manager. Reported by Jun Kokatsu - CVE-2019-5823: Forced navigation from service worker. Reported by David Erceg cron (3.0pl1-134+deb10u1) buster; urgency=medium . [ Laurent Bigonville ] * Stop using obsolete SELinux API (Closes: #924716) cyrus-imapd (3.0.8-6+deb10u1) buster; urgency=medium . * Add patch to fix data loss on upgrade from versions ≤ 3.0.0 (Closes: #933163) debian-edu-config (2.10.65+deb10u2) buster; urgency=medium . [ Wolfgang Schweer ] * Adjust share/debian-edu-config/d-i/finish-install: (Closes: #941574) - Use 'dpkg-reconfigure -u --no-reload debian-edu-config' to add post-up stanza to /etc/network/interfaces eth0 entry conditionally. * Cope with Firefox-ESR ini files that need to be different (as of version 68.2.0esr) to further allow centralized configuration: (Closes: #944013) - Add share/debian-edu-config/profiles.ini.ff (Firefox-ESR profiles.ini). - Add share/debian-edu-config/installs.ini (now needed in addition for users that don't have a Firefox-ESR profile, i.e. new users). - Adjust share/debian-edu-config/tools/gosa-create which is used to copy the related Firefox-ESR ini files. - Ajust Makefile. - Adjust ldap-tools/ldap-debian-edu-install (fix for the first user). debian-installer (20190702+deb10u2) buster; urgency=medium . [ Samuel Thibault ] * build/util/grub-gencfg: Set gfxpayload=keep in submenus too, to fix unreadable fonts on hidpi displays in netboot images booted with EFI. (See: #935546) debian-installer-netboot-images (20190702+deb10u2) buster; urgency=medium . * Update to 20190702+deb10u2, from buster-proposed-updates. dino-im (0.0.git20181129-1+deb10u1) buster-security; urgency=high . * Fix check of source of a carbons message (CVE-2019-16235) * Check roster push authorization (CVE-2019-16236) * Fix check of source of MAM message (CVE-2019-16237) distro-info-data (0.41+deb10u1) buster; urgency=medium . [ Stefano Rivera ] * Add Ubuntu 20.04 LTS, Focal Fossa. dkimpy-milter (1.0.2-1) buster; urgency=medium . * New upstream release * Put upstream init file where dh_installinit expects to find it so it is properly registered * Update debian/watch to point to 1.0 version for stable updates * Update and rename d/p/0001-update-upstream-unit-and-init-file-paths.patch so sysv init paths are correct too docker.io (18.09.1+dfsg1-7.1+deb10u1) buster-security; urgency=medium . [ Arnaud Rebillout ] * Add upstream patch for CVE-2019-13139 (Closes: #933002). * Add upstream patches for CVE-2019-13509 (Closes: #932673). . [ Felix Geyer ] * Add upstream patch for CVE-2019-14271 * Cherry-pick upstream commits to fix test failures with golang >= 1.11.6-1+deb10u1 e2fsprogs (1.44.5-1+deb10u2) buster-security; urgency=high . * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) emacs (1:26.1+1-3.2+deb10u1) buster; urgency=high . * Update the EPLA packaging key (previous key expires 2019-09-23) via the upstream commit f16785d361097df9fddfcc0b60ae6f0d92e7e911. Add the old and new keyrings to debian/ and debian/source/include-binaries since debian/patches/ can't handle git binary diffs. Thanks to Stefan Monnier for reporting the problem and providing the patch. exim4 (4.92-8+deb10u3) buster-security; urgency=high . * 78_02-Fix-buffer-overflow-in-string_vformat.-Bug-2449.patch: Fix buffer overflow in string_vformat. exim4 (4.92-8+deb10u3~bpo9+1) stretch-backports; urgency=high . * Rebuild for stretch-backports. . exim4 (4.92-8+deb10u3) buster-security; urgency=high . * 78_02-Fix-buffer-overflow-in-string_vformat.-Bug-2449.patch: Fix buffer overflow in string_vformat. exim4 (4.92-8+deb10u2) buster-security; urgency=high . * 78_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch Fix SNI related buffer overflow. CVE-2019-15846 exim4 (4.92-8+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. . exim4 (4.92-8+deb10u2) buster-security; urgency=high . * 78_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch Fix SNI related buffer overflow. CVE-2019-15846 expat (2.2.6-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) fence-agents (4.3.3-2+deb10u1) buster; urgency=medium . * Update patch for removing fence_amt_ws (Closes: #934519) file (1:5.35-4+deb10u1) buster-security; urgency=high . * Cherry-pick commit to restrict the number of CDF_VECTOR elements. Closes: #942830 [CVE-2019-18218] firefox-esr (68.2.0esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-33, also known as: CVE-2019-15903, CVE-2019-11757, CVE-2019-11758, CVE-2019-11759, CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764. . firefox-esr (68.1.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-26, also known as CVE-2019-11746, CVE-2019-11744, CVE-2019-11742, CVE-2019-11752, CVE-2019-9812, CVE-2019-11743, CVE-2019-11748, CVE-2019-11749, CVE-2019-11750, CVE-2019-11738, CVE-2019-11747, CVE-2019-11735, CVE-2019-11740. . * debian/upstream.mk: Read source repo and revision from json when getting upstream info. Instead of the .txt file that doesn't exist as of 69. * debian/control*: - Remove unused build dependency against python-ply. - Remove python-minimal build dependency. All supported versions of Debian have a new enough version. * debian/l10n/gen, debian/latest_nightly.py, debian/rules, debian/symbols.mk, debian/upstream.mk, debian/watch: Use explicit python2.7 instead of python. . firefox-esr (68.0.2esr-1) unstable; urgency=medium . * New upstream ESR release. . firefox (68.0.2-3) unstable; urgency=medium . * debian/control.in: Take source package name from preprocessing. . * build/moz.configure/old.configure: Avoid race condition creating old-configure. bz#1574761. * dom/media/systemservices/CamerasChild.cpp, dom/media/systemservices/CamerasParent.cpp, dom/media/systemservices/VideoEngine.cpp, dom/media/webrtc/MediaEngineRemoteVideoSource.cpp: Don't use __PRETTY_FUNCTION__ or __FUNCTION__ as format strings. bz#1531309. Closes: #925680. . firefox (68.0.2-2) unstable; urgency=medium . * debian/rules: Fix MOZ_APP_REMOTINGNAME. Upstream build system changes made the config.status editing trick stop working. Export the variable for configure to pick it instead. Closes: #932256 . firefox (68.0.2-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-24, also known as CVE-2019-11733. . * debian/control*, debian/rules: Don't build against system vpx >= 1.8.0. It has API changes that cause FTBFS. . firefox (68.0.1-2) unstable; urgency=medium . * debian/rules: Work around https://github.com/rust-lang/cargo/issues/7147. . firefox (68.0.1-1) unstable; urgency=medium . * New upstream release. . * debian/rules: - Hook stamps/dh_install-l10n to override_dh_install-indep rather than binary-indep. - Pass make job server down through dh_auto_build. * debian/rules, debian/dh: Wrap dh to ensure debian/rules is invoked with parallelism. . firefox (68.0-3) unstable; urgency=medium . * debian/browser.README.Debian.in: Fix a reference to iceweasel in README.Debian. Thanks Edward Betts. * debian/rules: - Only exclude "-g" from dpkg-buildflags output. All the other flags that used to be excluded either already match upstream or add reproducibility. - Don't unexpectedly reset LDFLAGS. - [firefox-esr] Remove iceweasel transitional packages on bullseye. - Disable dh_strip_nondeterminism. Upstream build system already avoids non-determinism it would strip, so there is no need for it further modifying files. - Avoid arch:all builds building arch:any stuff. - Move AUTOCONF_DIRS cleanup after dh_clean. - Add rust flags to improve reproducibility. - Only touch or remove configure when it wasn't there to begin with. - Call configure using its full path. - Factor common configure arguments. - Build langpacks with --disable-compile-environment, and pass less configure arguments. - Build each langpack from a separate build directory. This means time wasted running configure more times, but all locales can now be built in parallel. * debian/symbols.mk, debian/symbols.apt.conf, debian/symbols.sources.list: Miscellaneous changes to symbols download script. * debian/make.mk: Exclude symbols.mk variables from dump output. * debian/browser.mozconfig.in: Remove redundant --prefix=/usr. * debian/control.in, debian/rules, debian/symbols.mk, debian/upstream.mk: Remove packaging scripts compatibility with Wheezy. . * moz.configure: Only add confvars.sh as a dependency to config.status when it exists. bz#1560340. . firefox (68.0-2) unstable; urgency=medium . * debian/rules, debian/upstream.mk: Account for next Debian release. * debian/rules, debian/control: Build against system sqlite again. . * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around GCC ICE on mips*, i386 and s390x. Closes: #931757 * python/mozbuild/mozbuild/action/langpack_manifest.py: Use build id as langpack version for reproducibility. bz#1565504. . firefox (68.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-21, also known as: CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11714, CVE-2019-11715, CVE-2019-11716, CVE-2019-11717, CVE-2019-11718, CVE-2019-11720, CVE-2019-11721, CVE-2019-11730, CVE-2019-11723, CVE-2019-11724, CVE-2019-11725, CVE-2019-11727, CVE-2019-11728, CVE-2019-11710, CVE-2019-11709. . * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build dependencies. Remove Build-Conflicts with nss 3.44-1, since we now build-depend on a more recent version. * debian/rules, debian/control: Don't build against system sqlite, as Debian doesn't have the required version yet. * [firefox-esr] debian/l10n/browser-l10n.control*, debian/l10n/gen: Don't generate iceweasel l10n transition packages for locales that were never offered with iceweasel. * debian/control, debian/l10n/browser-l10n.control.in: Add transition dependencies for Bengali l10n. There is now only one Bengali l10n package instead of two. * debian/rules: Disable JIT at build time on mips because it fails to build. . * build/gyp.mozbuild: Revert patch that disables libyuv assembly on mips64. It apparently compiles, now. . firefox (67.0.4-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-19, also known as CVE-2019-11708. . firefox (67.0.3-2) unstable; urgency=medium . * python/mozbuild/mozbuild/action/node.py: Attempt to work around make issue happening on arch: all buildd. . firefox (67.0.3-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-18, also known as CVE-2019-11707. . firefox (67.0.2-1) unstable; urgency=medium . * New upstream release. . firefox (67.0.1-1) unstable; urgency=medium . * New upstream release. . firefox (67.0-4) unstable; urgency=medium . * debian/rules: Work around FTBFS on mips* by disabling webrtc Build fails because of missing configurations for mips*. * debian/control*: Build-Conflicts with libnss3-dev 2:3.44-1. Closes: #929846. . * js/src/jit/mips32/MacroAssembler-mips32-inl.h: Fix FTBFS on mips/mipsel. bz#1556197. . firefox (67.0-3) unstable; urgency=medium . * media/webrtc/trunk/webrtc/system_wrappers/source/cpu_features.cc: Remove WebRtc_GetCPUFeaturesARM from cpu_features.cc. It is already in cpu_features_linux.c (and is not in cpu_features.cc in webrtc upstream). Fixes FTBFS on armhf. bz#1523162. . firefox (67.0-2) unstable; urgency=medium . * debian/extra-stuff/addonsInfo.jsm: - Avoid running -dumps-addons-info without a running Firefox counting as a crash. - Support addons in resource:// locations in -dump-addons-info . * js/src/wasm/WasmSignalHandlers.cpp: Include struct definitions for user_vfp and user_vfp_exc. Fixes FTBFS on armhf. bz#1526653. * js/src/jit/mips*/MacroAssembler-mips*-inl.h, js/src/jit/mips*/Trampoline-mips*.cpp: Fix functions: branchTestBigInt, negPtr, generateVMWrapper on MIPS. bz#1544631. * toolkit/modules/sessionstore/PrivacyFilter.jsm: Update and harden form data filtering for privacy to account for no data being passed in. bz#1553413. . firefox (67.0-1) experimental; urgency=medium . * New upstream release. * Fixes for mfsa2019-13, also known as: CVE-2019-9816, CVE-2019-9817, CVE-2019-9819, CVE-2019-9820, CVE-2019-9821, CVE-2019-11691, CVE-2019-11692, CVE-2019-11693, CVE-2019-7317, CVE-2019-11695, CVE-2019-11696, CVE-2019-11697, CVE-2019-11698, CVE-2019-11699, CVE-2019-11701, CVE-2019-9814, CVE-2019-9800. * Upload to experimental because the required cbindgen is not available in unstable. . * debian/control*: Bump nspr, sqlite, rustc, cargo and cbindgen build dependencies. * debian/extra-stuff/addonsInfo.*, debian/extra-stuff/moz.build, debian/installer/package-manifest.browser, debian/rules: Modernize addonsInfo per bz#1431533, bz#1432992, bz#1514594, bz#1524688, etc. . firefox (66.0.5-1) unstable; urgency=medium . * New upstream release. - Additional fixes for addon signature validation. . firefox (66.0.4-1) unstable; urgency=medium . * New upstream release. - Fixes issues with addon signature validation. Closes: #928417. Note: this didn't affect addons installed via Debian packages. . firefox (66.0.1-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-09, also known as: CVE-2019-9810, CVE-2019-9813. . * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build dependencies. . firefox (66.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-07, also known as: CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796, CVE-2019-9797, CVE-2019-9799, CVE-2019-9802, CVE-2019-9803, CVE-2019-9805, CVE-2019-9806, CVE-2019-9807, CVE-2019-9809, CVE-2019-9808, CVE-2019-9789, CVE-2019-9788. . * debian/browser.mozconfig.in: Adjust to the upstream change wrt Google API key configure options. * debian/control*: Add nasm build dependency on amd64 and i386. . firefox (65.0.1-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-04, also known as: CVE-2018-18356, CVE-2019-5795, CVE-2018-18511. . * debian/rules, debian/upstream.mk: Manually set the update channel. Closes: #921381, #921121, #921654. * debian/rules: Build with -mfp32 on mips and mipsel. This should fix the FTBFS. . firefox (65.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-01, also known as: CVE-2018-18500, CVE-2018-18503, CVE-2018-18504, CVE-2018-18505, CVE-2018-18506, CVE-2018-18502, CVE-2018-18501. . * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build dependencies. * debian/browser.install.in: Install libmozwayland.so. . firefox (64.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-29, also known as: CVE-2018-12407, CVE-2018-17466, CVE-2018-18492, CVE-2018-18493, CVE-2018-18494, CVE-2018-18495, CVE-2018-18496, CVE-2018-18497, CVE-2018-18498, CVE-2018-12406, CVE-2018-12405. . * debian/rules, debian/browser.install.in: Properly copy the watermark to /usr/share/icons/hicolor/symbolic/apps. * debian/rules: Disable debug symbols on 32-bits architectures, that requires too much memory. * debian/browser.mozconfig.in: - Remove --enable-pie option, it's the default, now. - Remove --disable-nodejs now that it's required. * debian/control*: - Bump rustc, cargo, cbindgen, nss and sqlite dependencies. - Add nodejs build dependency. * debian/browser-symbolic.svg.in: Import the watermark used for the symbolic icon in the debian/ directory. . firefox (63.0.3-1) unstable; urgency=medium . * New upstream release. . * debian/control*: Build depend on unversioned clang/llvm. Closes: #912802. * debian/rules: Use embedded libevent in backports. Closes: #910397. * debian/rules: Use GNU gold linker on i386 because BFD ld fails to link libxul.so (memory exhausted). . * build/unix/elfhack/test.c: Try to ensure the bss section of the elfhack testcase stays large enough. bz#1505608. * memory/build/mozjemalloc.cpp: Fix run sizes for size classes >= 16KB on systems with large pages. bz#1507035. Closes: #911898. * media/libaom/moz.build: Use NEON_FLAGS instead of VPX_ASFLAGS for libaom neon code. * gfx/cairo/libpixman/src/pixman-vmx.c: Protect #include in pixman-vmx.c like in other pixman-*.c files . firefox (63.0.1-1) unstable; urgency=medium . * New upstream release. * debian/google.key: Use new Google API key, courtesy of Francois Marier. . firefox (63.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-26, also known as: CVE-2018-12392, CVE-2018-12393, CVE-2018-12395, CVE-2018-12396, CVE-2018-12397, CVE-2018-12398, CVE-2018-12399, CVE-2018-12401, CVE-2018-12402, CVE-2018-12403, CVE-2018-12388, CVE-2018-12390. . * debian/control*: - Bump nss dependency. - Add build dependency on cbindgen. * debian/browser.mozconfig.in: Disable nodejs until it's actually necessary. * debian/rules: Add -Wl,--compress-debug-sections=zlib to LDFLAGS to work around elfhack failing with unstripped binaries larger than 2GiB. . firefox (62.0.3-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-24, also known as: CVE-2018-12386, CVE-2018-12387. . * debian/extra-stuff/addonsInfo.js: Fixes to work with recent versions of Firefox. Closes: #909056. * debian/control*, debian/browser.mozconfig.in: Build ALSA support. Closes: #864987, #900062, #908349 . firefox (62.0.2-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-22, also known as CVE-2018-12385. * Ignore locale change events for the search service on shutdown. bz#1489820. Closes: #908932. . * debian/control*: - Remove the sqlite and nss dependencies when not building against the system libraries. - Enforce nss, nspr and sqlite dependencies to the same versions as build dependencies. There are subtle non-ABI differences between versions that Firefox might be relying on (be it features, behavior changes/fixes, etc.) and can cause subtle problems when older versions are used. Closes: #908225, #908520. - Add a suggestion for pulseaudio. * debian/rules, debian/control: Add libavcodec-extra* packages to the list of recommends. Closes: #909130 . * js/src/jit/BaselineJIT.h: Disable baseline JIT when SSE2 is not supported at runtime. bz#1492064. Closes: #908396, #908449. * gfx/2d/Swizzle.cpp: Use Swizzle fallback when SSE2 is not supported. bz#1492065. Closes: #877445. . firefox (62.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-20, also known as: CVE-2018-12377, CVE-2018-12378, CVE-2018-12383, CVE-2018-12375, CVE-2018-12376. . * debian/control*: - Bump nss and sqlite build dependencies. - Build depend on llvm/clang 6.0 for buster. Closes: #906175. * debian/browser.mozconfig.in, debian/control*, debian/rules: Remove build dependency on libbz2-dev. It's not used anymore. * debian/noinstall.in: Remove the dictionaries directory, not part of the packaged Firefox anymore. * debian/l10n/gen: Use iso-codes json data instead of XML when present. Closes: #907611. . * widget/gtk/nsAppShell.cpp: Use remoting name for call to gdk_set_program_class. Closes: #907574. . firefox (61.0.1-1) unstable; urgency=medium . * New upstream release. . firefox (61.0-2) unstable; urgency=medium . * debian/browser.mozconfig.in, debian/control*, debian/rules: Remove build dependency on system libhunspell. Using system hunspell lacks features required by Firefox. Next version of Firefox doesn't allow to build against system hunspell anyways. Closes: #900469. * debian/browser.links.in, debian/rules, debian/vendor.js: Use the spellchecker.dictionary_path pref to set the hunspell directory. * debian/browser.mozconfig.in: Allow unsigned addons in app and system scopes. * debian/rules: Work around the effect the above has on the --{enable,with}-system-* check. * debian/control*: Remove old conflicts. Thanks Sylvestre Ledru. Closes: #882956. * debian/l10n/recommends, debian/l10n/browser-l10n.control, debian/control: Update dictionary recommendations, following these rules: - Transitional myspell packages are not listed except when stable doesn't have the corresponding hunspell package. - Both hunspell and myspell packages are listed if they are different. Closes: #813832, #825843 * debian/copyright, debian/rules: Refer to /usr/share/common-licenses/MPL* instead of installing our own copy. Closes: #704303. * debian/make.mk: Use the same code as dump target for the dump-% target. * debian/control*, debian/rules: Add Recommends on all supported libavcodec libraries for h264 playback. Closes: #901600. . * toolkit/modules/AppConstants.jsm, toolkit/modules/moz.build, toolkit/moz.configure, toolkit/mozapps/extensions/internal/XPIInstall.jsm, toolkit/mozapps/extensions/content/extensions.js, toolkit/mozapps/extensions/internal/XPIDatabase.jsm: Change how addon signature requirement relaxation is done. Closes: #899390. . firefox (61.0-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2018-15, also known as: CVE-2018-12359, CVE-2018-12360, CVE-2018-12361, CVE-2018-12358, CVE-2018-12362, CVE-2018-5156, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12371, CVE-2018-12366, CVE-2018-12367, CVE-2018-12369, CVE-2018-12370, CVE-2018-5186, CVE-2018-5187, CVE-2018-5188. . * debian/control*: - Bump nss and sqlite build dependencies. - Add a build dependency on python3. * debian/browser.install.in: Adjust to upstream changes. * debian/vendor.js: Relax the addon signature requirements. . * toolkit/mozapps/extensions/content/extensions.js, toolkit/mozapps/extensions/internal/XPIDatabase.jsm: Allow to relax the addon signature requirements. firefox-esr (68.2.0esr-1~deb9u2) stretch-security; urgency=medium . * Don't set the NASM make variable on architectures without nasm, fixes FTBFS on !x86. * Output icu build log to stdout rather than to a file. firefox-esr (68.2.0esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-33, also known as: CVE-2019-15903, CVE-2019-11757, CVE-2019-11758, CVE-2019-11759, CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764. firefox-esr (68.1.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-26, also known as CVE-2019-11746, CVE-2019-11744, CVE-2019-11742, CVE-2019-11752, CVE-2019-9812, CVE-2019-11743, CVE-2019-11748, CVE-2019-11749, CVE-2019-11750, CVE-2019-11738, CVE-2019-11747, CVE-2019-11735, CVE-2019-11740. . * debian/upstream.mk: Read source repo and revision from json when getting upstream info. Instead of the .txt file that doesn't exist as of 69. * debian/control*: - Remove unused build dependency against python-ply. - Remove python-minimal build dependency. All supported versions of Debian have a new enough version. * debian/l10n/gen, debian/latest_nightly.py, debian/rules, debian/symbols.mk, debian/upstream.mk, debian/watch: Use explicit python2.7 instead of python. firefox-esr (68.0.2esr-1) unstable; urgency=medium . * New upstream ESR release. firefox-esr (60.9.0esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. Fixes for mfsa2019-27, also known as: CVE-2019-11746, CVE-2019-11744, CVE-2019-11742, CVE-2019-11752, CVE-2019-9812, CVE-2019-11743, CVE-2019-11740. firefox-esr (60.9.0esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. Fixes for mfsa2019-27, also known as: CVE-2019-11746, CVE-2019-11744, CVE-2019-11742, CVE-2019-11752, CVE-2019-9812, CVE-2019-11743, CVE-2019-11740. firefox-esr (60.8.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2019-22, also known as: CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11729, CVE-2019-11715, CVE-2019-11717, CVE-2019-11719, CVE-2019-11730, CVE-2019-11709. flatpak (1.2.5-0+deb10u1) buster; urgency=medium . * New upstream stable release - Allow runtimes (not just apps) to use extra_data, which is required by the new org.freedesktop.Platform.openh264 extension - Support apps that specify several required Flatpak versions, such as 1.4.2;1.2.5; for runtimes that require the above feature - Backport some crash bug fixes from 1.4.x - Fix installation of bundles - Set looser permissions on the /run/host/monitor directory, to work better with tools like Fedora Toolbox on the host system - Do not wrongly remove extensions as "unused" if they are referenced by the 'versions' extension key rather than by 'version' * d/gbp.conf: Use debian/buster packaging branch * d/watch: Only look for 1.2.x releases flightcrew (0.7.2+dfsg-13+deb10u1) buster; urgency=high . * Fix CVE-2019-13241 for Buster. * Fix CVE-2019-13032 for Buster. Closes: #931246 fonts-noto-cjk (1:20170601+repack1-3+deb10u1) buster; urgency=medium . * Team upload. * debian/70-fonts-noto-cjk.conf: Use "prepend" instead of "prepend_first". This fixes over-aggressive font selection of Noto CJK fonts in modern web browsers under Chinese locale. (Closes: #907999) fonts-noto-cjk (1:20170601+repack1-3+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. freetype (2.9.1-3+deb10u1) buster; urgency=medium . * debian/control: - Demote Recommends: freetype2-doc to Suggests (Closes: #919284). * debian/patches: - Add an upstream patch to properly handle phantom points for variable hinted fonts (Closes: #932303). fribidi (1.0.5-3.1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL (CVE-2019-18397) ghostscript (9.27~dfsg-2+deb10u2) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * make .forceput inaccessible (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813) * PDF interpreter - review .forceput security (CVE-2019-14817) glib2.0 (2.58.3-2+deb10u2) buster; urgency=medium . * Team upload * d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch, d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch: Ensure libdbus clients can authenticate with a GDBusServer like the one in ibus, backported from upstream 2.62.x branch (Closes: #941018) * d/p/Add-a-test-for-GDBusServer-authentication.patch, d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch, d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch: Backport regression test for #941018 * Build-depend on libdbus-1-dev for better test coverage * d/control.in: Set branch to debian/buster in Vcs-Git gnome-shell (3.30.2-11~deb10u1) buster; urgency=medium . * Team upload * Recompile for Debian 10 * d/gbp.conf: Change packaging branch to debian/buster . gnome-shell (3.30.2-11) unstable; urgency=medium . * Team upload * d/gnome-shell.bug-control: Include related packages in bug reports . gnome-shell (3.30.2-10) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch, commit 3.30.2-22-gd41669189 - d/p/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch: Fix truncation of long messages in Shell-modal dialogs (LP: #1809788) - d/p/osk-layouts-Fix-French-layout.patch: Update metadata to reflect upstream backport (no functional changes) - d/p/boxpointer-Unset-the-sourceActor-on-destruction.patch: Avoid crash on reallocation of dead actors (LP: #1831555) gnome-shell (3.30.2-10) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch, commit 3.30.2-22-gd41669189 - d/p/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch: Fix truncation of long messages in Shell-modal dialogs (LP: #1809788) - d/p/osk-layouts-Fix-French-layout.patch: Update metadata to reflect upstream backport (no functional changes) - d/p/boxpointer-Unset-the-sourceActor-on-destruction.patch: Avoid crash on reallocation of dead actors (LP: #1831555) gnome-sound-recorder (3.28.2-2~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 - d/gbp.conf: Set packaging branch to debian/buster gnustep-base (1.26.0-4+deb10u1) buster; urgency=medium . * debian/gnustep-base-runtime.preinst: New file; handle the poor upgrade from stretch to buster which left the gdomap daemon enabled (Closes: #939119). Thanks to Alan Jenkins. * debian/NEWS: Document that the gdomap daemon is disabled forcefully. * debian/patches/gdomap-udp-amplification.patch: New; fix UDP amplification vulnerability. Patch by Alan Jenkins. * debian/patches/series: Update. * debian/gbp.conf: Set debian-branch to buster. golang-1.11 (1.11.6-1+deb10u3) buster-security; urgency=high . * crypto/dsa: prevent bad public keys from causing panic https://github.com/golang/go/issues/34960 CVE-2019-17596 golang-1.11 (1.11.6-1+deb10u2) buster-security; urgency=high . * Fix normalization of headers with spaces before the colon. https://github.com/golang/go/issues/34541 CVE-2019-16276 * Refresh patches * Adapt gbp.conf for security branch graphite-web (1.1.4-3+deb10u1) buster; urgency=high . [ Utkarsh Gupta ] * Add patch to remove the 'send_email' function to avoid SSRF attack. This was insecure, not used in the code, and was undocumented as well. (Fixes: CVE-2017-18638) . [ Thomas Goirand ] * Avoid hourly error in cron with no whisper db (Closes: #940554). Thanks to Alexandre Rossi for the patch. ibus (1.5.19-4+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * bus: Implement GDBusAuthObserver callback (CVE-2019-14822) inn2 (2.6.3-1+deb10u2) buster; urgency=medium . * Backported upstream changeset 10344 to fix negotiation of DHE ciphersuites. (See #931256.) * Backported upstream changeset 10348 to fix upstream changeset 10344. inn2 (2.6.3-1+deb10u1) buster; urgency=medium . * Backported upstream changeset 10344 to fix negotiation of DHE ciphersuites. (See #931256.) jackson-databind (2.9.8-3+deb10u1) buster-security; urgency=high . * Fix CVE-2019-12384, CVE-2019-14439, CVE-2019-14540, CVE-2019-16335, CVE-2019-16942 and CVE-2019-16943. Several deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform code execution. The issue was resolved by extending the blacklist and blocking more classes from polymorphic deserialization. lemonldap-ng (2.0.2+ds-7+deb10u2) buster-security; urgency=high . * Add patch to fix OIDC vulnerabilities (Closes: CVE-2019-15941) libapache-mod-auth-kerb (5.4-2.4~deb10u1) buster; urgency=medium . * Rebuild for buster . libapache-mod-auth-kerb (5.4-2.4) unstable; urgency=medium . * Non-maintainer upload. * Apply patch from upstream issue tracker to fix crash (Closes: #934043) libapreq2 (2.13-7~deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Rebuild for buster-security . libapreq2 (2.13-7) unstable; urgency=high . * Source-only upload. . libapreq2 (2.13-6) unstable; urgency=high . * 05-nested-multipart-null-dereference.patch: New patch by Max Kellermann, fixes a NULL pointer dereference bug with nested multipart form submission. (Closes: #939937) libapreq2 (2.13-7~deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Rebuild for stretch-security . libapreq2 (2.13-7) unstable; urgency=high . * Source-only upload. . libapreq2 (2.13-6) unstable; urgency=high . * 05-nested-multipart-null-dereference.patch: New patch by Max Kellermann, fixes a NULL pointer dereference bug with nested multipart form submission. (Closes: #939937) libapreq2 (2.13-6) unstable; urgency=high . * 05-nested-multipart-null-dereference.patch: New patch by Max Kellermann, fixes a NULL pointer dereference bug with nested multipart form submission. (Closes: #939937) libarchive (3.3.3-4+deb10u1) buster-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2019-18408 Fix use after free in case parts of the archive are corrupt but the archive contains several headers. libdate-holidays-de-perl (2.00-2+deb10u1) buster; urgency=medium . * Mark International Childrens Day (Sep 20th) as a holiday in Thuringia from 2019 on libdatetime-timezone-perl (1:2.23-1+2019c) buster; urgency=medium . * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. libofx (1:0.9.14-1+deb10u1) buster; urgency=medium . * Add upstream patch to fix CVE-2019-9656 (Closes: #924350). libreoffice (1:6.1.5-3+deb10u5) buster; urgency=medium . * debian/patches/Postgresql-12-no-adsrc.diff: add from libreoffice-6-3 branch; fix the postgresql driver with PostgreSQL 12 (closes: #943873) libreoffice (1:6.1.5-3+deb10u4) buster-security; urgency=medium . * debian/patches/expand-pyuno-path-separators.diff. debian/patches/construct-final-url-from-parsed-output.diff, debian/patches/an-absolute-uri-is-invalid-input.diff, debian/patches/Improve-check-for-absolute-URI.diff, debian/patches/Improve-check.diff: add from libreoffice-6-3(-0,-1) branch - more fixes... (CVE-2019-9854/CVE-2019-9855) * debian/patches/allow-link-updates-in-an-intermediate-linked-document.diff: add from libreoffice-6-2 branch - fix regression from CVE-2018-6871 libreoffice (1:6.1.5-3+deb10u4~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. . * debian/patches/apparmor-{cleanups,mesa,opencl}.diff, debian/patches/series, debian/rules: revert this and apparmor >= 2.13.1 recommends; stretch doesn't have apparmor on per default but let's go sure * debian/control.in, debian/patches/series, debian/libreoffice-base-drivers.NEWS, debian/patches/use-mariadb-java-instead-of-mysql-java.diff: revert for stretch-backports... * debian/patches/disableClassPathURLCheck.diff: revert configure check for stretch-backports . * tarballs/*, debian/source/include-binaries: include needed internal stuff . libreoffice (1:6.1.5-3+deb10u4) buster-security; urgency=medium . * debian/patches/expand-pyuno-path-separators.diff. debian/patches/construct-final-url-from-parsed-output.diff, debian/patches/an-absolute-uri-is-invalid-input.diff, debian/patches/Improve-check-for-absolute-URI.diff, debian/patches/Improve-check.diff: add from libreoffice-6-3(-0,-1) branch - more fixes... (CVE-2019-9854/CVE-2019-9855) * debian/patches/allow-link-updates-in-an-intermediate-linked-document.diff: add from libreoffice-6-2 branch - fix regression from CVE-2018-6871 . libreoffice (1:6.1.5-3+deb10u3) buster-security; urgency=high . * debian/patches/expand-LibreLogo-checks-to-global-events.diff, debian/patches/decode-url-escape-codes-and-check-each-path-segment.diff: debian/patches/keep-name-percent-encoded.diff debian/patches/Properly-obtain-location.diff: backport from libreoffice-6-3-0 branch - more fixes for CVE-2019-9848 and CVE-2018-16858 (CVE-2019-9850/CVE-2019-9851/CVE-2019-9852/CVE-2019-9853) libsixel (1.8.2-1+deb10u1) buster; urgency=high . * d/patches/0001-Add-malloc-size-check.patch: fix CVE-2018-19756 * d/patches/0002-assign-default-error-message.patch: fix CVE-2018-19757 * d/patches/0003-add-limitation-to-width-and-height.patch: fix CVE-2018-19759 * d/patches/0004-position-error-check.patch: fix CVE-2018-19761 * d/patches/0005-size-check.patch: fix CVE-2018-19762 * d/patches/0006-prevent-to-access-heap-overflow.patch: fix CVE-2018-19763 * d/patches/0007-check-error-for-jpeg_read_scanlines.patch: fix CVE-2019-3573 * d/patches/0008-check-number-of-repeat_count.patch: fix CVE-2019-3574 * security fix, closes: #931311 libxslt (1.1.32-2.2~deb10u1) buster; urgency=medium . * Rebuild for buster . libxslt (1.1.32-2.2) unstable; urgency=medium . * Non-maintainer upload. * Fix dangling pointer in xsltCopyText (CVE-2019-18197) (Closes: #942646) libxslt (1.1.32-2.1) unstable; urgency=medium . * Non-maintainer upload. * Fix security framework bypass (CVE-2019-11068) (Closes: #926895, #933743) * Fix uninitialized read of xsl:number token (CVE-2019-13117) (Closes: #931321, #933743) * Fix uninitialized read with UTF-8 grouping chars (CVE-2019-13118) (Closes: #931320, #933743) linux (4.19.67-2+deb10u1) buster-security; urgency=high . [ Romain Perier ] * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) . [ Salvatore Bonaccorso ] * vhost: make sure log_num < in_num (CVE-2019-14835) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) linux (4.19.67-2+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports; no further changes required . linux (4.19.67-2+deb10u1) buster-security; urgency=high . [ Romain Perier ] * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) . [ Salvatore Bonaccorso ] * vhost: make sure log_num < in_num (CVE-2019-14835) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) linux-signed-amd64 (4.19.67+2+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u1 . [ Romain Perier ] * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) . [ Salvatore Bonaccorso ] * vhost: make sure log_num < in_num (CVE-2019-14835) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) linux-signed-amd64 (4.19.67+2+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u1~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-arm64 (4.19.67+2+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u1 . [ Romain Perier ] * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) . [ Salvatore Bonaccorso ] * vhost: make sure log_num < in_num (CVE-2019-14835) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) linux-signed-arm64 (4.19.67+2+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u1~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-i386 (4.19.67+2+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.67-2+deb10u1 . [ Romain Perier ] * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) . [ Salvatore Bonaccorso ] * vhost: make sure log_num < in_num (CVE-2019-14835) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) linux-signed-i386 (4.19.67+2+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.67-2+deb10u1~bpo9+1 . * Rebuild for stretch-backports; no further changes required lucene-solr (3.6.2+dfsg-20+deb10u1) buster; urgency=medium . * Team upload. * Disable obsolete call to ContextHandler in solr-jetty9.xml. Install solr-permissions.conf into /etc/systemd/system/jetty9.service.d/ and override read-only permissions of Jetty9 which will allow the service to start out-of-the-box again. Thanks to Stephan Beirer for the report. (Closes: #933854, #933857) mariadb-10.3 (1:10.3.18-0+deb10u1) buster; urgency=high . * New upstream version 10.3.18. Fixes regression introduced in 10.3.17 (MDEV-20247: Replication hangs with "preparing" and never starts) (Closes: #939819) mariadb-10.3 (1:10.3.17-1) unstable; urgency=high . * New upstream version 10.3.17. Includes security fixes for: - CVE-2019-2737 - CVE-2019-2739 - CVE-2019-2740 - CVE-2019-2758 - CVE-2019-2805 * Multiple Gitlab-CI/Salsa-CI improvements * Dependency in resolveip is still included (Closes: #910902) * Update libmariadb3 symbols to match MariaDB Connector C 3.1 API * Add Lintian override for new test binary wsrep_check_version * Gitlab-CI: Clean away one excess comment left from b9d633b38 mediawiki (1:1.31.4-1~deb10u1) buster-security; urgency=medium . * New upstream version 1.31.4 (security release), fixing CVE-2019-16738. Add an additional patch, already merged upstream, to fix a fatal error caused by the upstream security patch. modsecurity-crs (3.1.0-1+deb10u1) buster; urgency=medium . * Add upstream patch to fix php script upload rules. CVE-2019-13464 (Closes: #943773) mutter (3.30.2-9~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 * d/gbp.conf: Set packaging branch to debian/buster . mutter (3.30.2-9) unstable; urgency=medium . * Team upload * d/libmutter-3-0.bug-control: Include GL drivers in bug reports * d/p/renderer-native-Fix-EGLSurface-destruction-order.patch: Fix attribution * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch: Add bug references for #932428, #932767 and #932781, and retroactively mark them as closed by this patch in the previous changelog entry, based on feedback from bug reporters . mutter (3.30.2-8) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch at 3.30.2-42-g2a81dc45e - d/p/clutter-x11-Consider-remapped-keys-when-guessing-the-keyc.patch: Fix repeated inputs from extended characters (long-press) in on-screen keyboard - d/p/compositor-Destroy-window-actors-list-on-destruction.patch, d/p/window-actor-Set-actor-as-compositor-private-in-window-be.patch, d/p/surface-actor-x11-Assign-X11-Display-only-if-we-have-reso.patch, d/p/surface-actor-x11-Bind-the-surface-actor-resources-to-win.patch, Fix intermittent crashes on exit/reload - d/p/compositor-Disconnect-from-stage-signals-on-destruction.patch: Fix stuck windows if an application stops responding and one of its windows gets unmanaged - d/p/clutter-x11-Implement-keycode-remap-to-keysyms-on-virtual.patch: Fix missing inputs from extended characters (long-press) in on-screen keyboard - d/p/cursor-renderer-native-Free-MetaCursorNativePrivate-struc.patch: Fix a small memory leak - d/p/wayland-seat-Use-g_free-to-cleanup-MetaWaylandSeat.patch: Fix an incorrect free-function that could lead to memory corruption - d/p/cogl-pipeline-Don-t-try-to-access-to-free-d-pointer-data.patch: Fix use-after-free - d/p/renderer-native-add-missing-eglTerminate-in-EGLDevice-err.patch: Avoid reusing an amdgpu display connection if EGL is missing the desired extensions - d/p/workspace-Focus-only-ancestors-that-are-focusable.patch, d/p/window-x11-Focus-the-default-window-with-delay-while-wait.patch, d/p/window-x11-Add-lost-definition-for-TAKE_FOCUS_FALLBACK_DE.patch, d/p/window-x11-Focus-a-window-in-the-active-workspace-as-take.patch, d/p/window-x11-Remove-double-definition-of-MetaStack.patch: Fix crashes involving window focus with some applications, notably JetBrains IDE - d/p/window-Emit-an-error-and-return-when-trying-to-activate-a.patch: Fix crashes when an unmanaged window is activated - d/p/window-x11-Don-t-double-check-for-unmanaging-windows.patch, d/p/window-x11-Accept-any-focusable-window-as-fallback-focus.patch, d/p/stack-Add-a-function-to-get-a-sorted-list-of-focus-candid.patch, d/p/window-x11-Use-any-focusable-window-as-fallback-delayed-f.patch: Fix hang when windows take focus but do not accept input - d/p/Updated-Spanish-translation.patch: Update translations - d/p/tests-Add-accept_focus-command-to-runner-and-client.patch, d/p/tests-Add-can_take_focus-command-to-runner-and-client.patch, d/p/tests-stacking-Add-tests-with-no-input-and-no-take-focus-.patch, d/p/test-runner-Add-assert_focused-command.patch, d/p/tests-Verify-focused-window-in-closed-transient-tests.patch, d/p/test-runner-Add-sleep-command.patch, d/p/test-runner-Add-dispatch-command.patch, d/p/Makefile-tests-Fix-paths-for-stacking-metatests.patch, d/p/test-client-Add-x11-events-GSource-handler.patch, d/p/tests-Add-accept_take_focus-command.patch: Improve test coverage related to the above bug fixes * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch: Backport patch from 3.32.1 to fix use-after-free in Wayland monitor management (Closes: #932428, #932767, #932781) * d/libmutter-3-0.symbols: Add meta_stack_get_default_focus_candidates(), which is added by a patch * d/gbp.conf: Set branch to debian/unstable * d/p/renderer-native-Use-g_set_error-instead-of-_cogl_set_erro.patch, d/p/renderer-native-Make-sure-we-re-not-destroying-an-active-.patch, d/p/renderer-native-Fix-EGLSurface-destruction-order.patch: Backport patches from upstream gnome-3-32 branch to fix another use-after-free crash that can be triggered by suspend/resume mutter (3.30.2-8) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch at 3.30.2-42-g2a81dc45e - d/p/clutter-x11-Consider-remapped-keys-when-guessing-the-keyc.patch: Fix repeated inputs from extended characters (long-press) in on-screen keyboard - d/p/compositor-Destroy-window-actors-list-on-destruction.patch, d/p/window-actor-Set-actor-as-compositor-private-in-window-be.patch, d/p/surface-actor-x11-Assign-X11-Display-only-if-we-have-reso.patch, d/p/surface-actor-x11-Bind-the-surface-actor-resources-to-win.patch, Fix intermittent crashes on exit/reload - d/p/compositor-Disconnect-from-stage-signals-on-destruction.patch: Fix stuck windows if an application stops responding and one of its windows gets unmanaged - d/p/clutter-x11-Implement-keycode-remap-to-keysyms-on-virtual.patch: Fix missing inputs from extended characters (long-press) in on-screen keyboard - d/p/cursor-renderer-native-Free-MetaCursorNativePrivate-struc.patch: Fix a small memory leak - d/p/wayland-seat-Use-g_free-to-cleanup-MetaWaylandSeat.patch: Fix an incorrect free-function that could lead to memory corruption - d/p/cogl-pipeline-Don-t-try-to-access-to-free-d-pointer-data.patch: Fix use-after-free - d/p/renderer-native-add-missing-eglTerminate-in-EGLDevice-err.patch: Avoid reusing an amdgpu display connection if EGL is missing the desired extensions - d/p/workspace-Focus-only-ancestors-that-are-focusable.patch, d/p/window-x11-Focus-the-default-window-with-delay-while-wait.patch, d/p/window-x11-Add-lost-definition-for-TAKE_FOCUS_FALLBACK_DE.patch, d/p/window-x11-Focus-a-window-in-the-active-workspace-as-take.patch, d/p/window-x11-Remove-double-definition-of-MetaStack.patch: Fix crashes involving window focus with some applications, notably JetBrains IDE - d/p/window-Emit-an-error-and-return-when-trying-to-activate-a.patch: Fix crashes when an unmanaged window is activated - d/p/window-x11-Don-t-double-check-for-unmanaging-windows.patch, d/p/window-x11-Accept-any-focusable-window-as-fallback-focus.patch, d/p/stack-Add-a-function-to-get-a-sorted-list-of-focus-candid.patch, d/p/window-x11-Use-any-focusable-window-as-fallback-delayed-f.patch: Fix hang when windows take focus but do not accept input - d/p/Updated-Spanish-translation.patch: Update translations - d/p/tests-Add-accept_focus-command-to-runner-and-client.patch, d/p/tests-Add-can_take_focus-command-to-runner-and-client.patch, d/p/tests-stacking-Add-tests-with-no-input-and-no-take-focus-.patch, d/p/test-runner-Add-assert_focused-command.patch, d/p/tests-Verify-focused-window-in-closed-transient-tests.patch, d/p/test-runner-Add-sleep-command.patch, d/p/test-runner-Add-dispatch-command.patch, d/p/Makefile-tests-Fix-paths-for-stacking-metatests.patch, d/p/test-client-Add-x11-events-GSource-handler.patch, d/p/tests-Add-accept_take_focus-command.patch: Improve test coverage related to the above bug fixes * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch: Backport patch from 3.32.1 to fix use-after-free in Wayland monitor management (potentially fixes #932428, #932767, #932781) * d/libmutter-3-0.symbols: Add meta_stack_get_default_focus_candidates(), which is added by a patch * d/gbp.conf: Set branch to debian/unstable * d/p/renderer-native-Use-g_set_error-instead-of-_cogl_set_erro.patch, d/p/renderer-native-Make-sure-we-re-not-destroying-an-active-.patch, d/p/renderer-native-Fix-EGLSurface-destruction-order.patch: Backport patches from upstream gnome-3-32 branch to fix another use-after-free crash that can be triggered by suspend/resume ncurses (6.1+20181013-2+deb10u2) buster; urgency=medium . * Cherry-pick tic fixes from upstream patchlevels 20191012, 20191015 and 20191019 (Closes: #942401). - Check for invalid hashcode in _nc_find_type_entry and nc_find_entry (CVE-2019-17594). - Check for missing character after backslash in fmt_entry (CVE-2019-17595). - Check for acsc with odd length in dump_entry in check for one-one mapping. - Check for missing character after backslash in write_it. - Modify tic to exit if it cannot remove a conflicting name, because treating that as a partial success can cause an infinite loop in use-resolution. ndppd (0.2.5-4+deb10u1) buster; urgency=medium . * Patch to avoid word writable pid file, that was breaking daemon init scripts. (Closes: #942117) * postinst script fixing pid file permissions for pre 0.2.5-4+deb10u1 running daemons. network-manager (1.14.6-2+deb10u1) stable; urgency=medium . * core: fix file permissions for "/var/lib/NetworkManager/secret_key" Patch cherry-picked from upstream. * Fix permissions of /var/lib/NetworkManager/secret_key on upgrades. The file mode is supposed to be 0600. (Closes: #941609) * Install directories as created by upstream build system. Drop network-manager.dirs and instead use the directories created by the upstream build system. Fix permissions of /var/lib/NetworkManager to be 0700 as it contains possibly sensitive data and should not be world-readable. * d/gbp.conf: Set debian-branch to buster nghttp2 (1.36.0-2+deb10u1) buster-security; urgency=high . * Fix CVE-2019-9511 and CVE-2019-9513. node-fstream (1.0.10-1+deb10u1) buster; urgency=medium . * Team upload * Clobber a Link if it's in the way of a File (Closes: #931408, CVE-2019-13173) node-set-value (0.4.0-1+deb10u1) buster; urgency=medium . * Team upload * Fix prototype pollution (Closes: #941189, CVE-2019-10747) * Add test for CVE-2019-10747 node-yarnpkg (1.13.0-1+deb10u1) buster; urgency=medium . * Team upload * Add patch to force using https for the regular registries (Closes: #941354, CVE-2019-5448) nx-libs (2:3.5.99.19-3+deb10u2) buster; urgency=medium . * debian/patches: + Fix 0033_Screen.c-fix-two-memleaks.patch. Was not fully cherry-picked. Fixes double free issue. (Closes: #940103). + Add 0051-Screen.c-initialize-RandR-only-on-startup.patch. Regression fix introduced with +deb10u1 upload (by patch 0014). open-vm-tools (2:10.3.10-1+deb10u2) buster; urgency=medium . * [d512626] Fix memory leaks and error handling. From the upstream stable-10.3.10-vix-memory-leaks branch: commit 26b9edbeb79d1c67b9ae73a0c97c48999c1fb503 Fix leaks in ListAliases and ListMappedAliases commit 7b874f37f970aab2adddb063a8363594f47abf70 End VGAuth impersonation in the case of error. commit 015db4c06a8be65eb96cf62421e8b5366993452f Fix memory leaks in 'vix' tools plugin. Thanks to Oliver Kurth (Closes: #941955) opendmarc (1.3.2-6+deb10u1) buster-security; urgency=high . * CVE-2019-16378: https://github.com/trusteddomainproject/OpenDMARC/pull/48 to address incorrect DMARC pass results with multi-from mail (Closes: #940081) openssh (1:7.9p1-10+deb10u1) buster-security; urgency=high . * Apply upstream patch to deny (non-fatally) shmget/shmat/shmdt in preauth privsep child, coping with changes in OpenSSL 1.1.1d that broke OpenSSH on Linux kernels before 3.19 (closes: #941663). openssl (1.1.1d-0+deb10u2) buster-security; urgency=medium . * Reenable AES-CBC-HMAC-SHA ciphers (Closes: #941987). openssl (1.1.1d-0+deb10u1) buster-security; urgency=medium . * New upstream version - CVE-2019-1549 (Fixed a fork protection issue). - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP construction). - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey). * Update symbol list openvswitch (2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u1) buster; urgency=medium . * Some fixups in debian/ifupdown.sh to allow setting-up the MTU. * Document how to do Bond + Bridge + VLAN + MTU. * Correct dependency on python3-six instead of python-six (Closes: #931104). pam-python (1.0.6-1.1+deb10u1) buster-security; urgency=high . * Backport fix CVE-2019-16729 backport from 1.0.7. pam-python (1.0.6-1.1+deb9u1) stretch-security; urgency=high . * Backport fix CVE-2019-16729 backport from 1.0.7. php7.3 (7.3.11-1~deb10u1) buster-security; urgency=medium . * New upstream version 7.3.11 php7.3 (7.3.10-1) unstable; urgency=medium . * New upstream version 7.3.10 php7.3 (7.3.9-1) unstable; urgency=medium . * New upstream version 7.3.9 php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high . * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) php7.3 (7.3.8-1) unstable; urgency=medium . * New upstream version 7.3.8 * Rebase patches for PHP 7.3.8 php7.3 (7.3.6-1) unstable; urgency=medium . [ Ondřej Surý ] * New upstream version 7.3.6 . [ Andreas Beckmann ] * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) picard (2.1.2-1+deb10u1) buster; urgency=medium . * debian/gbp.conf: Work in buster branch * debian/patches: Update translations to fix crash with Spanish locale (Closes: #941464) plasma-applet-redshift-control (1.0.18-2+deb10u1) buster; urgency=medium . * Import upstream-submitted patch to fix manual mode for redshift >= 1.12 (Closes: #910901) postfix (3.4.7-0+deb10u1) buster; urgency=medium . [Wietse Venema] . * 3.4.6 - Documentation: tlsext_padding is not a tls_ssl_options feature. File: proto/postconf.proto. - Portability: added "#undef sun" to util/unix_dgram_connect.c (documented for completeness - no impact on Debian) - Bugfix (introduced: Postfix 2.3): a censoring filter broke multiline Milter responses for header/body events. Problem report by Andreas Thienemann. Files: util/printable.c, util/stringops.h, smtpd/smtpd.c - Bugfix (introduced: Postfix 3.3): "smtp_mx_address_limit = 0" no longer meant 'unlimited'. Problem report by Luc Pardon. File: smtp/smtp_addr.c. - Documentation: updated the BUGS section in the smtp(8) manpage about TLS connection reuse. File: smtp/smtp.c. - Workaround for implementations that hang Postfix while shutting down a TLS session, until Postfix times out. With "tls_fast_shutdown_enable = yes" (the default), Postfix no longer waits for the TLS peer to respond to a TLS 'close' request. This is recommended with TLSv1.0 and later. Files: global/mail_params.h, tls/tls_session.c, and documentation. - Bugfix (introduced: Postfix 3.0): the code to reset Postfix SMTP server command counts was not called after a HaProxy handshake failure, causing stale numbers to be reported. The command counts are now reset in the function that reports the counts. File: smtpd/smtpd.c. * 3.4.7 - Bugfix: the documentation said tls_fast_shutdown_enable, but the code said tls_fast_shutdown. Viktor Dukhovni. Changed the code because no-one is expected to override the default. File: global/mail_params.h. - Workaround for poor TCP loopback performance on LINUX, where getsockopt(..., TCP_MAXSEG, ..) reports a TCP maximal segment size that is 1/2 to 1/3 of the MTU. For example, with kernel 5.1.16-300.fc30.x86_64 the TCP client and server announce an mss of 65495 in the TCP handshake, but getsockopt() returns 32741 (less than half). As a matter of principle, Postfix won't turn on client-side TCP_NODELAY because that hides application performance bugs, and because that still suffers from server-side delayed ACKs. Instead, Postfix avoids sending "small" writes back-to-back, by choosing a VSTREAM buffer size that is a multiple of the reported MSS. This workaround bumps the multiplier from 2x to 4x. File: util/vstream_tweak.c. - Bugfix (introduced: 20051222): the Dovecot client could segfault (null pointer read) or cause an SMTP server assertion to fail when talking to a fake Dovecot server. The client now logs a proper error instead. Problem reported by Tim Düsterhus. File: xsasl/xsasl_dovecot_server.c. - Bugfix (introduced: Postfix 3.4): don't whitewash OpenSSL error results after a plaintext output error. The code could loop, and with some OpenSSL error results could flood the log with error messages (see below for a specific case). Problem reported by Andreas Schulze. File: tlsproxy/tlsproxy.c. - Bitrot: don't invoke SSL_shutdown() when the SSL engine thinks it is processing a TLS handshake. The commit at https://github.com/openssl/openssl/commit/64193c8218540499984cd63cda41f3cd491f3f59 changed the error status, incompatibly, from SSL_ERROR_NONE into SSL_ERROR_SSL. File: tlsproxy/tlsproxxy.c. proftpd-dfsg (1.3.6-4+deb10u2) buster-security; urgency=medium . * Add patch from upstream to address CVE-2019-18217. (Closes: #942831) python-cryptography (2.6.1-3+deb10u2) buster; urgency=medium . * Cherrypick 92241410b5b0591d849443b3023992334a4be0a2 and 9a22851fab924fd58482fdad3f8dd23dc3987f91 from upstream which addresses a memory leak triggerable when parsing x509 certificate extensions like AIA, thanks to Valentin Gutierrez for the report (Closes: #941413) python-cryptography (2.6.1-3+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Backport two patches to fix the testsute with newer openssl. * Ignore test_load_ecdsa_no_named_curve in the testsuite because it known to break with newer openssl (Closes: #940547). python-flask-rdf (0.2.1-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Add Depends on python{3,}-rdflib. (Closes: #896358, #896385) python-oslo.messaging (8.1.4-1+deb10u1) buster; urgency=medium . * New upstream point release, with an important fix: - Fix switch connection destination when a rabbitmq cluster node disappear. python-werkzeug (0.14.1+dfsg1-4+deb10u1) buster; urgency=medium . * Unique debugger PIN in Docker containers (Closes: #940935, CVE-2019-14806) python2.7 (2.7.16-2+deb10u1) buster; urgency=medium . * CVE-2018-20852 * CVE-2019-10160 * CVE-2019-16056 (Closes: #940901) * CVE-2019-16935 * CVE-2019-9740 * CVE-2019-9947 qemu (1:3.1+dfsg-8+deb10u2) buster-security; urgency=medium . * slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input-CVE-2019-14378.patch Closes: #933741, CVE-2019-14378 (slirp heap buffer overflow) * qemu-bridge-helper-restrict-interface-name-to-IFNAMSIZ-CVE-2019-13164.patch Closes: #931351, CVE-2019-13164 (qemu-bridge-helper ifname overflow) * linux-user-sanitize-interp_info-for-mips-only.patch Closes: #933650 (some mips binaries fails to start) qemu (1:3.1+dfsg-8) unstable; urgency=high . * sun4u-add-power_mem_read-routine-CVE-2019-5008.patch fixes a null-pointer dereference in sparc/sun4u emulated hw Closes: #927439, CVE-2019-5008 * enable-md-no.patch & enable-md-clear.patch mitigation for MDS (Microarchitectural Data Sampling) issues Closes: #929067, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 * qxl-check-release-info-object-CVE-2019-12155.patch fixes null-pointer deref in qxl cleanup code Closes: #929353, CVE-2019-12155 * aarch32-exception-return-to-switch-from-hyp-mon.patch fixes booting U-Boot in UEFI mode on aarch32 Closes: #927763 * stop qemu-system-common pre-depending on adduser Closes: #929261 qtbase-opensource-src (5.11.3+dfsg1-1+deb10u1) buster-security; urgency=high . * Fix crash when text contains too many directional chars (CVE-2019-18281). quota (4.04-2+deb10u1) buster; urgency=medium . * With permission of maintainer, backport fix to stable to prevent rpc.rquotad spinning at 100% CPU. Closes: #931855. rpcbind (1.2.5-0.3+deb10u1) buster; urgency=medium . * Add 00-rmt-calls.patch (Closes: #939877): + Add command line option to enable remote calls at runtime + Refresh debian/patches * debian/control: Update maintainer information * Add debian/README.debian explaining remote calls activation for Debian systems * Add debian/NEWS ruby-loofah (2.2.3-1+deb10u1) stable-security; urgency=high . * Team upload . * debian/patches - add 0002-Fix-CVE-2019-15587.patch (Closes: #942894) (CVE-2019-15587) shelldap (1.4.0-4+deb10u1) buster; urgency=medium . * Repair SASL authentications, add a 'sasluser' option (Closes: #941411) + Don't provide a password for sasl authentication + Fix sasl for DIGEST-MD5, PLAIN, and LOGIN mechanisms simplesamlphp (1.16.3-1+deb10u1) buster-security; urgency=high . * Fix security issue CVE-2019-3465. sogo (4.0.7-1+deb10u1) buster; urgency=medium . * Omit signedViewer altogether when not using openssl. Thanks Hanno Stock for the patch. (Closes: #889994) * Set debian-branch to buster in gbp.conf. spf-engine (2.9.1-0+deb10u1) buster; urgency=medium . * New upstream bugfix release * Put upstream provided init file where dh_installinit expects to find it so it is properly registered on install * Update debian/watch so limit itself to version 2.9.x updates for buster * Update debian/patches/0001-install-conf-fix.patch for missed change needed in sysv init spip (3.2.4-1+deb10u1) buster-security; urgency=medium . * Backport security fixes from 3.2.5 - Critical security fix, allowing unidentified visitor to modify any published content and execute other modifications in database [CVE-2019-16391] - Other security fixes: + better sanitization on redirections [CVE-2019-16393] + don’t disclose if user exists when resetting password [CVE-2019-16394] + better error message sanitization on login page [CVE-2019-16392] - Update security screen to 1.3.12 * Add d/gbp.conf for buster * Add CVE ID to previous changelog entry * Refresh patch headers standardskriver (0.0.3-2+deb10u1) buster; urgency=medium . * debian/patches: + Add 0001_RawConfigParser-use-new-method-read_file-instead-of-.patch. Fix deprecation warning by config.RawConfigParser. + Add 0002_standardskriver-Use-ip-command-rather-than-deprecate.patch. Use external "ip" command rather than deprecated "ifconfig" command. This fixes (essential) local system's IPv4 detection. (Closes: #944244). sudo (1.8.27-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Treat an ID of -1 as invalid since that means "no change" (CVE-2019-14287) * Fix test failure in plugins/sudoers/regress/testsudoers/test5.sh swi-prolog (8.0.2+dfsg-3+deb10u1) buster; urgency=medium . * Add patch to fix pack-server. SWI-Prolog upstream servers were switched from http to https, so pack_install stopped working. This patch changes pack_install to use https. (Closes: #939257) systemd (241-7~deb10u2) buster; urgency=medium . * core: never propagate reload failure to service result. Fixes a regression introduced in v239 where the main process of a service unit gets killed on reload if ExecReload fails. (Closes: #936032) * shared/seccomp: add sync_file_range2. Some architectures need the arguments to be reordered because of alignment issues. Otherwise, it's the same as sync_file_range. Fixes sync_file_range failures in nspawn containers on arm, ppc. (Closes: #935091) * core: factor root_directory application out of apply_working_directory. Fixes RootDirectory not working when used in combination with User. (Closes: #939408) * shared/bus-util: drop trusted annotation from bus_open_system_watch_bind_with_description(). This ensures that access controls on systemd-resolved's D-Bus interface are enforced properly. (CVE-2019-15718, Closes: #939353) * login: add a missing error check for session_set_leader() Fixes assertion due to insufficient function return check. (Closes: #939998) * d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices (Closes: #934589) * d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by user-space * namespace: make MountFlags=shared work again (Closes: #939551) * mount/generators: do not make unit wanted by its device unit. Among other things, this fixes StopWhenUnneeded=true being broken for mount units. (Closes: #941758) tcpdump (4.9.3-1~deb10u1) buster-security; urgency=high . * New upstream release, with fixes for 24 different CVEs (closes: #941698). This is an upstream update on top of the 4.9.2-3 package and does not include other changes from the 4.9.3 package in bullseye. * Disable tests that require a newer libpcap version. tcpdump (4.9.3-1~deb9u1) stretch-security; urgency=high . * New upstream release, with fixes for 24 different CVEs (closes: #941698). This is an upstream update on top of the 4.9.2-1~deb9u1 package. * Disable tests that require a newer libpcap version. tcpdump (4.9.3~git20190901-2) unstable; urgency=medium . * Disable failing IKEv2 test again to fix build on ppc64el. tcpdump (4.9.3~git20190901-1) unstable; urgency=low . * New upstream snapshot from the tcpdump-4.9 branch: + Includes fix for CVE-2017-16808 (closes: #881862). + Fixes ESP decryption on ppc64el (and others), re-enable tests. * Drop root privileges by default (closes: #935112): + debian/rules: Configure --with-user=tcpdump. + debian/tcpdump.post{inst,rm}: Create/delete a 'tcpdump' system group and user. + debian/control: Add dependency on adduser. + debian/patches/drop-privs-after-opening-savefile.diff: New patch (from Fedora) to drop root privileges *after* opening the savefile when possible, to alleviate possible inconvenience if the target directory is not writable by user tcpdump. + debian/patches/drop-privs-silently.diff: New patch (from Fedora) to drop root privileges silently. + debian/usr.sbin.tcpdump: Add chown capability, and update rules about device discovery. + debian/NEWS: Mention how to run tcpdump as root. * Bump Standards-Version to 4.4.0. thunderbird (1:60.9.0-1~deb10u1) buster-security; urgency=medium . * Rebuild for buster-security * [9802e1d] Revert "Use gcc-8 and g++-8 due broken build with GCC-9" thunderbird (1:60.9.0-1~deb9u1) stretch-security; urgency=medium . [ Carsten Schoenert ] * Rebuild for stretch-security thunderbird (1:60.8.0-2) unstable; urgency=medium . * [41e9047] d/rules: work around carge needs a HOME dir * [c67707c] Use gcc-8 and g++-8 due broken build with GCC-9 thunderbird (1:60.8.0-1) unstable; urgency=medium . * [49f4e91] New upstream version 60.8.0 Fixed CVE issues in upstream version 60.8.0 (MFSA 2019-23) CVE-2019-9811: Sandbox escape via installation of malicious language pack CVE-2019-11711: Script injection within domain through inner window reuse CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects CVE-2019-11713: Use-after-free with HTTP/2 cached stream CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault CVE-2019-11715: HTML parsing error can contribute to content XSS CVE-2019-11717: Caret character improperly escaped in origins CVE-2019-11719: Out-of-bounds read when importing curve25519 private key CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin CVE-2019-11709: Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 60.8 tmpreaper (1.6.14+deb10u1) buster; urgency=medium . * Non-maintainer upload with maintainer approval. * Add `--protect '/tmp/systemd-private*/*'` to cron job to prevent breaking systemd services that have PrivateTmp=true (closes: #881725). trafficserver (8.0.2+ds-1+deb10u1) buster-security; urgency=high . * Add patch for security backport from 8.0.4 for CVE-2019-9512, CVE-2019-9514, and CVE-2019-9515. (Closes: #934887) * Add patch for security backport from 8.0.5 for fixes CVE-2019-9518 (Closes: #935314) trapperkeeper-webserver-jetty9-clojure (1.7.0-2+deb10u1) buster; urgency=medium . [ Manfred Stock ] * Add patch for SSL compatibility with newer Jetty (closes: #930562). tzdata (2019c-0+deb10u1) buster; urgency=medium . * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. tzdata (2019c-0+deb9u1) stretch; urgency=medium . * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. tzdata (2019b-2) unstable; urgency=medium . * Change provides to tzdata-bullseye from tzdata-buster. tzdata (2019b-1) unstable; urgency=medium . * New upstream version, affecting the following past and future timestamps: - Brazil has canceled DST and will stay on standard time indefinitely. - Predictions for Morocco now go through 2087 instead of 2037. - Palestine's 2019 spring transition was 03-29 at 00:00, not 03-30 at 01:00. Guess future transitions to be March's last Friday at 00:00. - Many corrections to historical Hong Kong transitions from 1941 to 1947. ublock-origin (1.22.2+dfsg-1~deb10u1) buster; urgency=medium . * Backport of 1.22.2+dfsg-1 to Buster. (Closes: #943470, #925337) ublock-origin (1.22.2+dfsg-1~deb9u1) stretch; urgency=medium . * Backport of 1.22.2+dfsg-1 to Stretch. (Closes: #943470, #925337) ublock-origin (1.19.0+dfsg-2) unstable; urgency=medium . * Upload to unstable. * Declare compliance with Debian Policy 4.4.0. ublock-origin (1.19.0+dfsg-1) experimental; urgency=medium . [ Michael Meskes ] * Change package layout to allow for different file for each browser while at the same time keeping firefox working despite its dislike for symlinks. (Closes: #926586) . [ Markus Koschany ] * New upstream version 1.19.0+dfsg. ublock-origin (1.18.10+dfsg-1) experimental; urgency=medium . * New upstream version 1.18.10+dfsg. * Fix ublock-origin being disabled with Firefox 66. (Closes: #925337) * Switch to compat level 12. uim (1:1.8.8-4+deb10u2) buster; urgency=medium . [ HIGUCHI Daisuke (VDR dai) ] * resurrect libuim-data as a transitional package (Closes: #939588). After upgrading from stretch to buster, if purging libuim-data, its postrm script deletes /var/lib/uim/*.scm files required by uim. This libuim-data transitional package can be removed safely. . [ NOKUBI Takatsugu ] * d/control: uim-data depends libuim-data dummy package, change the description. * d/libuim-data.postint: re-register all modules, fix #939588 unbound (1.9.0-2+deb10u1) buster-security; urgency=high . * Apply NLnet Labs patch for CVE-2019-16866 (Closes: #941692) vanguards (0.3.1-2~deb10u1) buster; urgency=medium . * Rebuild for buster stable updates * Includes important security fix to prevent a reload of tor's configuration via SIGHUP causing a denial-of-service for vanguards protections. Details on this issue can be seen at: - https://github.com/mikeperry-tor/vanguards/issues/40 vanguards (0.3.1-2~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. vanguards (0.3.1-1) unstable; urgency=medium . * New upstream version 0.3.1 varnish (6.1.1-1+deb10u1) buster-security; urgency=medium . * CVE-2019-15892, thanks to sesse for the backport webkit2gtk (2.26.1-3~deb10u1) buster-security; urgency=high . * Rebuild for buster-security. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Remove Breaks for Evolution < 3.34.1. * The WebKitGTK security advisory WSA-2019-0005 lists the following security fixes in the latest versions of WebKitGTK: + CVE-2019-8768 (fixed in 2.24.0). + CVE-2019-8735 (fixed in 2.24.2). + CVE-2019-8726 (fixed in 2.24.3). + CVE-2019-8674, CVE-2019-8707, CVE-2019-8719, CVE-2019-8733 and CVE-2019-8763 (fixed in 2.24.4). + CVE-2019-8625, CVE-2019-8720, CVE-2019-8769 and CVE-2019-8771 (fixed in 2.26.0). webkit2gtk (2.26.1-3~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/control: + Remove Breaks for Evolution < 3.34.1. webkit2gtk (2.26.1-3~bpo9+2) stretch-backports-sloppy; urgency=medium . * debian/patches/is-same-v.patch: + Define also std::is_pod_v * debian/patches/fix-atomics-build.patch: + Use libatomic in libWTF. This fixes the armel build. webkit2gtk (2.26.1-3~bpo9+1) stretch-backports-sloppy; urgency=medium . * Rebuild for stretch-backports-sloppy. * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependency on libwoff-dev, this is not available in this Debian release. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Don't depend on libopenjp2-7-dev. + Build depend on clang-7. + Remove Breaks for Evolution < 3.34.1. + Require Bubblewrap 0.3.1. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. + Pass CC and CXX to dh_auto_configure so it uses clang instead of gcc. * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary * debian/patches/is-same-v.patch: + Define std::is_same_v * debian/patches/fix-gtkdoc-generation.patch: + Fix gtk-doc generation. * debian/patches/safe-multiply.patch: + Fix link errors in 32-bit CPUs with clang * debian/libwebkit2gtk-4.0-37.symbols: + Mark webkit_emoji_chooser_get_type as optional, this requires a more recent version of GTK. webkit2gtk (2.26.1-2) unstable; urgency=medium . * debian/patches/force-single-process.patch: + Force the single-process mode in Evolution and Geary. * debian/gbp.conf: + Update upstream branch name. webkit2gtk (2.26.1-1) experimental; urgency=medium . [ Jeremy Bicha ] * Suggest instead of Recommend gstreamer1.0-libav on Ubuntu . [ Alberto Garcia ] * New upstream release. webkit2gtk (2.26.0-1) experimental; urgency=medium . * New upstream release. * debian/watch: + Scan stable releases only. * debian/copyright: + Remove nonexistent files. * Add a dummy libwebkit2gtk-4.0-37-gtk2 with a transition plan for people who still need to use Flash. + debian/control: - Add the package, suggest browser-plugin-freshplayer-pepperflash. + debian/libwebkit2gtk-4.0-37-gtk2.NEWS: - Add news item about the Flash transition plan. webkit2gtk (2.25.92-1) experimental; urgency=medium . * New upstream development release. * Refresh all patches. * debian/source/lintian-overrides: + Update source-is-missing override. * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. webkit2gtk (2.25.4-1) experimental; urgency=medium . * New upstream development release. * Refresh all patches. * debian/source/lintian-overrides: + Update source-is-missing override. * Use the CLoop Javascript interpreter in i386 and stop telling gcc to use SSE2 instructions (Closes: #930935). + debian/rules: - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using -msse2 -mfpmath=sse. + debian/patches/dont-detect-sse2.patch: - Don't check for SSE2 support. + debian/NEWS: - Remove item about the requirement to have an SSE2-capable CPU. * WebKitGTK 2.25.3 no longer ships the GTK 2 plugin process: + debian/control: - Drop build dependency on libgtk2.0-dev. - Remove the libwebkit2gtk-4.0-37-gtk2 package. + debian/NEWS: - Add item explaining the removal of the GTK 2 plugin process. + debian/libwebkit2gtk-4.0-37-gtk2.install: - Drop this file. * debian/control: + Recommend gstreamer1.0-libav. This package allows the user to play most internet videos (Closes: #870814). + Update Standards-Version to 4.4.0 (no changes). * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. webkit2gtk (2.25.2-1) experimental; urgency=medium . * New upstream development release. * debian/patches/webdriver-path.patch, debian/patches/fix-ftbfs-hurd.patch: + Remove. * debian/patches/detect-woff.patch + Refresh. * debian/rules: + Build with -DUSE_WPE_RENDERER=OFF. webkit2gtk (2.25.1-1) experimental; urgency=medium . * New upstream development release. * Refresh all patches. * debian/rules: + Don't add -msse2 manually to CFLAGS, WebKitGTK does this automatically now. * debian/control: + Add build and runtime dependencies on bubblewrap, xdg-dbus-proxy and libseccomp-dev (ENABLE_BUBBLEWRAP_SANDBOX is now on by default). * debian/patches/webdriver-path.patch: + Fix name of the WebKitWebDriver executable. * debian/watch, debian/gbp.conf: + Update for 2.25.x packages in experimental. * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. webkit2gtk (2.24.4-1) unstable; urgency=medium . * New upstream release (Closes: #931807). * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. webkit2gtk (2.24.4-1~deb10u1) buster-security; urgency=high . * Rebuild for buster-security. * The WebKitGTK security advisory WSA-2019-0004 lists the following security fixes in the latest versions of WebKitGTK: + CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679 and CVE-2019-8686 (fixed in 2.24.2) + CVE-2019-8666, CVE-2019-8673, CVE-2019-8676, CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, and CVE-2019-8690 (fixed in 2.24.3) + CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684 and CVE-2019-8688 (fixed in 2.24.4) . webkit2gtk (2.24.4-1) unstable; urgency=medium . * New upstream release (Closes: #931807). * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. webkit2gtk (2.24.4-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. webkit2gtk (2.24.4-1~bpo9+1) stretch-backports-sloppy; urgency=medium . * Rebuild for stretch-backports-sloppy. * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependency on libwoff-dev, this is not available in this Debian release. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Don't depend on libopenjp2-7-dev. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. webkit2gtk (2.24.3-1) unstable; urgency=medium . * New upstream release (Closes: #929749). * debian/control: + Recommend gstreamer1.0-libav. This package allows the user to play most internet videos (Closes: #870814). wpa (2:2.7+git20190128+0c1e29f-6+deb10u1) buster-security; urgency=medium . * SECURITY UPDATE: - AP mode PMF disconnection protection bypass. More details: + https://w1.fi/security/2019-7/ Closes: #940080 (CVE-2019-16275) - Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves. More details: + https://w1.fi/security/2019-6/ + https://wpa3.mathyvanhoef.com/ Closes: #934180 (CVE-2019-13377) ====================================== Sat, 07 Sep 2019 - Debian 10.1 released ====================================== ========================================================================= [Date: Sat 7 Sep 07:51:55 UTC 2019] [ftpmaster: Stable point release] Removed the following packages from stable: pump | 0.8.24-7.1 | source, amd64, arm64, armel, armhf, i386, mips, mipsel, ppc64el, s390x pump | 0.8.24-7.1+b1 | mips64el ------------------- Reason ------------------- RoST; unmaintained; security issues ---------------------------------------------- ========================================================================= [Date: Sat 7 Sep 07:51:55 UTC 2019] [ftpmaster: Stable point release] Removed the following packages from stable: All binary and D-I packages related to linux-4.19.0-5 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= acme-tiny (1:4.0.4-1+deb10u1) buster; urgency=medium . * Add upstream patch to fix ACME protocol change effective on November 1st 2019, https://github.com/diafygi/acme-tiny/issues/226 android-sdk-meta (25.0.0+11+deb10u1) buster; urgency=medium . * fix version: this adds on top of package from sid android-sdk-meta (25.0.0+11) unstable; urgency=medium . [ Jeff Muizelaar ] * Add some more Amazon devices . [ Hans-Christoph Steiner ] * fix DEB_REVISION parsing to work with more than one digit * remove broken screenshot2 symlink (Closes: #924175) * Suggests: proguard-gui for symlinks (Closes: #923935) * document udev rule for providing device access to the console user * update udev rules to latest upstream version (Closes: #931215) * sync new devices in 51-android.rules from upstream * Standards-Version 4.3.0 no changes * sync whitespace in 51-android.rules with upstream * sync comments in 51-android.rules with upstream * sync manufacturer order in 51-android.rules from upstream android-sdk-meta (25.0.0+11~deb10u2) buster; urgency=medium . * fix regex for adding Debian version to binary packages (Closes: #935938) android-sdk-meta (25.0.0+11~deb10u1) buster; urgency=medium . [ Jeff Muizelaar ] * Add some more Amazon devices . [ Hans-Christoph Steiner ] * fix DEB_REVISION parsing to work with more than one digit * remove broken screenshot2 symlink (Closes: #924175) * Suggests: proguard-gui for symlinks (Closes: #923935) * document udev rule for providing device access to the console user * update udev rules to latest upstream version (Closes: #931215) * sync new devices in 51-android.rules from upstream * Standards-Version 4.3.0 no changes * sync whitespace in 51-android.rules with upstream * sync comments in 51-android.rules with upstream * sync manufacturer order in 51-android.rules from upstream apache2 (2.4.38-3+deb10u1) buster-security; urgency=high . * Add patch to limit cross-site scripting in mod_proxy (Closes: CVE-2019-10092) * Add patch to fix stack buffer overflow and NULL pointer dereference in mod_remoteip (Closes: CVE-2019-10097) * Import http2 modules from 2.4.41 (Closes: CVE-2019-9517, CVE-2019-10082 and CVE-2019-10081 * Add patch to set PCRE_DOTALL by default (Closes: CVE-2019-10098) apt-setup (1:0.151~deb10u1) buster; urgency=medium . * Rebuild for buster. asterisk (1:16.2.1~dfsg-1+deb10u1) buster; urgency=medium . * AST-2019-002 / CVE-2019-12827 Buffer overflow in res_pjsip_messaging (Closes: #931980) * AST-2019-003 / CVE-2019-13161 Remote Crash Vulnerability in chan_sip (Closes: #931981) * d/gbp.conf: Update for Buster branch babeltrace (1.5.6-2+deb10u1) buster; urgency=medium . [ Andreas Beckmann ] * Non-maintainer upload. * Backport symbols fix from 1.5.7-1. . [ Michael Jeanson ] * Bump ctf symbols depends to post merge version (Closes: #931147) backup-manager (0.7.14-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Fix purging of remote archives via FTP or SSH. Thanks to Thomas Parmelan (Closes: #895901) base-files (10.3+deb10u1) buster; urgency=medium . * Change /etc/debian_version to 10.1, for Debian 10.1 point release. basez (1.6-3+deb10u1) buster; urgency=medium . * Properly decode base64url encoded strings (closes: #931041) basez (1.6-3+deb9u1) stretch; urgency=medium . * Properly decode base64url encoded strings (closes: #931041) bro (2.5.5-1+deb10u1) buster-security; urgency=medium . * Add patches for CVE-2018-16807, CVE-2018-17019 (Closes: #908614, #908779) bzip2 (1.0.6-9.2~deb10u1) buster; urgency=medium . * Rebuild for buster . bzip2 (1.0.6-9.2) unstable; urgency=medium . * Non-maintainer upload. * Accept as many selectors as the file format allows (Closes: #931278) cacti (1.2.2+ds1-2+deb10u1) buster; urgency=medium . * Depends i.s.o. Recommends on php-gmp as this is now a requirement of the upstream code (Closes: #930252) * Fix reading of snmp gauges (0001-Resolving-issue-2474.patch) (Closes: #930254) * Fix upgrade from stretch (0001-Resolving-issue-2482.patch); the upgrade code attempted to drop a non-existing primary key (Closes: #931702) calamares-settings-debian (10.0.20-1+deb10u1) buster; urgency=medium . * Fix permissions for initramfs image when full-desk encryption is enabled. (CVE-2019-13179) (Closes: #931373) clamav (0.101.4+dfsg-0+deb10u1) buster; urgency=medium . * Import 0.101.4 - CVE-2019-12625 (Add scan time limit to limit the processing zip-bombs) (Closes:934359) - CVE-2019-12900 (An out of bounds write was possible within ClamAV's NSIS bzip) - update symbols file (bump to 101.4 and drop unused cli_strnstr). clamav (0.101.4+dfsg-0+deb9u1) stretch; urgency=medium . * Import 0.101.4 (Closes: 921190) - CVE-2019-12625 (Add scan time limit to limit the processing zip-bombs) (Closes:934359) - CVE-2019-12900 (An out of bounds write was possible within ClamAV's NSIS bzip) - update symbols file (bump to 101.4 and drop unused cli_strnstr). clamav (0.101.2+dfsg-3) unstable; urgency=medium . * Cherry-pick a fix from 0.101.3 to address a vulnerability to non-recursive zip bombs. clamav (0.101.2+dfsg-2) unstable; urgency=medium . * Remove python from build-depends: - Only needed for llvm, which is currently (and probably permanently) disabled - Support python2 removal, if this comes back, it will need to be python3 clamav (0.101.2+dfsg-1+deb10u1) buster; urgency=medium . * Cherry-pick a fix from 0.101.3 to address a vulnerability to non-recursive zip bombs. cloudkitty (8.0.0-4+deb10u1) buster; urgency=medium . * Add upstream patch to fix FTBFS after we updated SQLAlchemy to fix CVE-2019-7164 CVE-2019-7548 (SQL injection) (see debian bug 922669 and 929321 for more info) (Closes: #930996). console-setup (1.193~deb10u1) buster; urgency=medium . * Rebuild for buster. console-setup (1.192) unstable; urgency=medium . * Remove Christian Perrier from Uploaders, with many thanks for all his contributions over the years! (Closes: #927511) * Merge patch by Iain Lane to fix internationalization issues when switching locales with Perl >= 5.28 (Closes: #924657, LP: #1817453). cryptsetup (2:2.1.0-5+deb10u2) buster; urgency=medium . * Cherry pick upstream commit 8f8f0b32: Fix mapped segments overflow on 32bit architectures. Regression since 2:2.1.0-1. (Closes: #935702) cryptsetup (2:2.1.0-5+deb10u1) buster; urgency=high . * Backport upstream commits c03e3fe8, 725720df and fe4e1de5 to fix support for LUKS2 headers without any bound keyslot. Adding a new key slot using the volume key was failing, both via the crypt_keyslot_add_by_volume_key() API call and with `luksAddKey --master-key`. The former in particular might yield data loss if, in order to change a passphrase, an application destroys the keyslot before adding a new one (using the volume key), cf. #928893. Note that doing so is *unsafe*: applications should instead use crypt_keyslot_change_by_passphrase() from libcryptsetup >=1.6.0. Trying to open LUKS2 volume by supplying the volume key on the command line was also failing if there were no bound keyslot on the header. (Closes: #934715) cups (2.2.10-6+deb10u1) buster; urgency=medium . * Fix multiple security/disclosure issues (Closes: #934957) - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows - Fixed IPP buffer overflow - Fixed memory disclosure issue in the scheduler - Fixed DoS issues in the scheduler dbconfig-common (2.0.11+deb10u1) buster; urgency=medium . [ Marius Burkard ] * Fix regression with /bin/sh pointing to bash due to changes in its POSIX behaviour (Closes: #934027) . [ Paul Gevers ] * tests: use sh instead of hardcoded *sh to catch issues like the above debian-edu-config (2.10.65+deb10u1) buster; urgency=medium . [ Wolfgang Schweer ] * Adjust ltsp-build-client/Debian-custom/001-ltsp-setting. (Closes: #928756) - Use PXE option 'ipappend 2' for LTSP client boot. This option makes sure that all DHCP server information is getting through to LTSP clients. (LTSP used this option before, but switched to 'ipappend 3' during the Buster development cycle to ease setups with ProxyDHCP.) * Adjust share/debian-edu-config/sudo-ldap.conf. (Closes: #929964) - Fix sudo-ldap configuration. (The LDAP URI is needed on LDAP clients.) * Set environment variable to deal with Firefox profile. (Closes: #930122) This is a workaround for bug #930125, preventing firefox-esr startup issues if the mozilla profile is on an NFS share). - Ship share/debian-edu-config/edu-firefox-nfs with NSS_SDB_USE_CACHE="yes" as content. Thanks to Mike Gabriel for spotting the issue and providing this information. - Add instructions to cf3/cf.workarounds to link the 'edu-firefox-nfs' file to appropriate files below '/etc/X11/Xsession.d' and '/etc/profile.d'. * Adjust cf3/cf.homes: Set correct LTSP chroot path. (Closes: #931680) - While the reported arch is i686, LTSP uses i386. Set arch accordingly. * Adjust share/debian-edu-config/tools/kerberos-kdc-init. (Closes: #931366) - Remove outdated (and now wrong) logging section. * Fix loss of dynamically allocated v4 IP address. (Closes: #933580) - Drop etc/network/if-up.d/hostname. This script doesn't work anymore due to changed behaviour of the ifupdown/dhclient/systemd combination and now also causes the loss of a dynamically allocated ipv4 IP address after 20 to 30 minutes after booting. - Add code to d/debian-edu-config.postinstall to implement the intended hostname update just after rebooting the system after a change. - Adjust Makefile. * Provide Debian Edu RootCA certificate for download. (Closes: #933183) - Adjust share/debian-edu-config/tools/create-debian-edu-certs to copy the rootCA file to the web server directory at certificate generation time. - Adjust cf3/cf.finalize to care for the rootCA file as well. - Adjust cf3/cf.workarounds to copy the rootCA file to the web server directory upon main server upgrade. * Add LDAP server certificate to the initial LTSP NBD image. (Closes: #932828) - etc/ltsp/ltsp-build-client.conf: Don't create the image by default. - cf3/edu.cf: Define new class 'ltspimages'. - cf3/cf.finalize: Add code to include the LDAP server certificate for all possible use cases, to generate the image and to adjust various rights. * Changes to debian-edu-config.fetch-ldap-cert from 2.10.67). - Use independent conditions to make sure that the LDAP server certificate is only downloaded once for both host and LTSP chroot. (Closes: #934380) - Add code to validate the LDAP server certificate in case the Debian Edu RootCA certificate is available for download. . [ Mike Gabriel ] * Changes to debian-edu-config.fetch-ldap-cert (from 2.10.66): - Make the script (and with it Debian Edu buster workstations) work in a Debian Edu environment where the main server (TJENER) is still on Debian Edu 8 or 9. (Closes: #926933) - Retrieve TJENER's PKI server certificate only once per host to improve security. This re-introduces the behaviour of fetch-ldap-cert in stretch and earlier. (Closes: #931413). * Changes to debian-edu-config.fetch-ldap-cert (from 2.10.67): - White-space-only change: Fix broken and inconsistent indentations. - Fully inline-document fetch-ldap-cert script. - Add "-f" option to all curl calls that don't have it set so far. This assures that curl bails out with a non-zero exit code, if anything goes wrong while retrieving certificate files. - Also report a successful certificate verification if we verified the LDAP server certificate using the Debian Edu RootCA. - Really check that the LDAP server uses a certificate issued by the "Debian Edu RootCA", not just by (some) "RootCA". - Add 2x FIXME about BUNDLECRT file removal from host and from LTSP chroots. - LTSP chroot certificate copying: only log those actions, if they are actually about to happen.. - Silence curl stderr and gnutls-cli stdout+stderr. - Certificate retrieval: Fix upgrade path for RootCA deployment. Re-run CERTFILE (and ROOTCACRT retrieval) until we have both on the client. This will lead to repetitive downloads of the CERTFILE on system boot. To get rid of this, people must upgrade their TJENERs from Debian Edu 10.0 to 10.1. Then it will stop. This hack is necessary to assure distribution of the RootCA to all clients that don't have it, yet. - Detach dependency of ROOTCACRT chroot copying and BUNDLECRT chroot copying from chroot copying of the CERTFILE. The chroot may have the CERTFILE, but not the ROOTCACRT, yet. This assures a smooth upgrade path from Debian Edu 10.0 to Debian Edu 10.1. - Do a simple validity check if a directory under /opt/ltsp really is a chroot (and e.g. not the SquashFS images' directory). debian-edu-doc (2.10.19~deb10u1) buster; urgency=medium . * Upload to buster. . debian-edu-doc (2.10.19) unstable; urgency=medium . * Update Debian Edu Buster manual from the wiki. * Update Debian Edu ITIL manual from the wiki. * Bump standards version to 4.4.0, no changes needed. . [ Translation updates ] * Buster manual: - Japanese: hoxp18 - German: Wolfgang Schweer - Italian: Claudio Carboncini - Chinese (Simplified): Ma Yong - French: Jean-Pierre Giraud debian-installer (20190702+deb10u1) buster; urgency=medium . [ Samuel Thibault ] * build/boot/x86: Restore 'd' shortcut for the dark theme. 'c' can obviously not work in grub (Closes: #935545). . [ Cyril Brulebois ] * Enable proposed-updates for the buster stable branch. . [ Julien Cristau ] * Bump linux ABI to 4.19.0-6. debian-installer-netboot-images (20190702+deb10u1) buster; urgency=medium . * Update to 20190702+deb10u1 images, from buster-proposed-updates * Set DISTRIBUTION_FALLBACK to buster in debian/rules, and attempt a build against this distribution instead of buster-proposed-updates if the first build against the latter doesn't succeed. This should fix the FTBFS within buster once the point release has happened, as d-i disappears from s-p-u (Closes: #902226). With thanks to Santiago Vila for the initial report. * Make get-images.sh clean up temporary files on error and not only on exit, to make sure they don't interfere with a later attempt against a different distribution (see above). dehydrated (0.6.2-2+deb10u1) buster; urgency=medium . * Add three more patches from upstream. Fixing the following bug: + Fixed fetching of account information. + Followup fixes for account ID handling, and APIv1 compatibility. devscripts (2.19.5+deb10u1) buster; urgency=medium . [ Thomas Goirand ] * debchange: + Target buster-backports with --bpo. Closes: #931614 devscripts (2.19.5+deb10u1~bpo9+2) stretch-backports; urgency=medium . * Source only upload for stretch-backports. devscripts (2.19.5+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. dma (0.11-1+deb10u1) buster; urgency=medium . * d/p/0002-crypto-Don-t-limit-to-TLSv1-only.patch: Do not limit SSL connection to TLSv1 (Closes: #871429) * d/p/0003-properly-deal-with-SSL_connect-return-value.patch: Properly check the return code of SSL_connect() dosbox (0.74-2-3+deb10u1) buster-security; urgency=medium . * Apply upstream fixes for two security issues: - CVE-2019-7165: long lines in batch files would overflow the parsing buffer; - CVE-2019-12594: programs running inside DOSBox could access /proc. along with a number of buffer overrun fixes. Closes: #931222. dovecot (1:2.3.4.1-5+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2019-11500 - lib-imap: Don't accept strings with NULs - lib-imap: Make sure str_unescape() won't be writing past allocated memory - lib-managesieve: Don't accept strings with NULs - lib-managesieve: Make sure str_unescape() won't be writing past allocated memory dovecot (1:2.3.4.1-5+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. . dovecot (1:2.3.4.1-5+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2019-11500 - lib-imap: Don't accept strings with NULs - lib-imap: Make sure str_unescape() won't be writing past allocated memory - lib-managesieve: Don't accept strings with NULs - lib-managesieve: Make sure str_unescape() won't be writing past allocated memory . dovecot (1:2.3.4.1-5) unstable; urgency=medium . * [bd00402] Fix CVE-2019-11494 and CVE-2019-11499 (Closes: #928235) - submission-login: fix null pointer dereference when client disconnects during authentication (CVE-2019-11494) - submission-login: fix assert-crash when receiving an invalid authentication message over TLS (CVE-2019-11499) dpdk (18.11.2-2+deb10u1) buster; urgency=medium . * Rebuild for buster. . dpdk (18.11.2-2) unstable; urgency=medium . [ Christian Ehrhardt ] * d/control: set VCS to be Salsa based * d/README.source: add info about salsa git usage . dpdk (18.11.2-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.2; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#id1 - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.2 - drop changes upstream in 18.11.2 0002-build-use-generic-march-on-arm64-when-using-default.patch lp-1827102-kni-fix-build-with-Linux-5.1.patch . [ Santiago Ruano Rincón ] * debian/rules: clean doc files . dpdk (18.11.1-3) experimental; urgency=medium . * d/control: add dependencies to libdpdk-dev: libelf-dev and libjansson-dev to avoid pkg-config issues * d/control: drop unused build dependency to libcap-dev . dpdk (18.11.1-2) experimental; urgency=medium . [ Christian Ehrhardt ] * d/control: drop shlibs:Depends from dpdk as it has no binaries anymore * d/p/lp-1827102-kni-fix-build-with-Linux-5.1.patch fix kni DKMS build with Linux 5.1 kernels (LP: #1827102) . [ Luca Boccassi ] * Bump Standards-Version to 4.3.0, no changes. . dpdk (18.11.1-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.1; For a list of changes see https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.1 - drop changes upstream in 18.11.1 0001-doc-fix-garbage-text-in-generated-HTML-guides.patch 0003-build-mention-march-in-pkg-config-description.patch 0001-kni-fix-build-for-dev_open-in-Linux-5.0.patch 0002-kni-fix-build-for-igb_ndo_bridge_setlink-in-Linux-5..patch * d/control: fix usability issue with mlx PMDs which might need rdma-core to be installed. In most cases users will want this, to be able to drop rdma-core if unwanted in some cases this is only a recommends added to librte-pmd-mlx4-18.11 and librte-pmd-mlx5-18.11 (Closes: #925141) dpdk (18.11.2-2) unstable; urgency=medium . [ Christian Ehrhardt ] * d/control: set VCS to be Salsa based * d/README.source: add info about salsa git usage . dpdk (18.11.2-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.2; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#id1 - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.2 - drop changes upstream in 18.11.2 0002-build-use-generic-march-on-arm64-when-using-default.patch lp-1827102-kni-fix-build-with-Linux-5.1.patch . [ Santiago Ruano Rincón ] * debian/rules: clean doc files . dpdk (18.11.1-3) experimental; urgency=medium . * d/control: add dependencies to libdpdk-dev: libelf-dev and libjansson-dev to avoid pkg-config issues * d/control: drop unused build dependency to libcap-dev . dpdk (18.11.1-2) experimental; urgency=medium . [ Christian Ehrhardt ] * d/control: drop shlibs:Depends from dpdk as it has no binaries anymore * d/p/lp-1827102-kni-fix-build-with-Linux-5.1.patch fix kni DKMS build with Linux 5.1 kernels (LP: #1827102) . [ Luca Boccassi ] * Bump Standards-Version to 4.3.0, no changes. . dpdk (18.11.1-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.1; For a list of changes see https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.1 - drop changes upstream in 18.11.1 0001-doc-fix-garbage-text-in-generated-HTML-guides.patch 0003-build-mention-march-in-pkg-config-description.patch 0001-kni-fix-build-for-dev_open-in-Linux-5.0.patch 0002-kni-fix-build-for-igb_ndo_bridge_setlink-in-Linux-5..patch * d/control: fix usability issue with mlx PMDs which might need rdma-core to be installed. In most cases users will want this, to be able to drop rdma-core if unwanted in some cases this is only a recommends added to librte-pmd-mlx4-18.11 and librte-pmd-mlx5-18.11 (Closes: #925141) dpdk (18.11.2-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.2; For a list of changes see http://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#id1 - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.2 - drop changes upstream in 18.11.2 0002-build-use-generic-march-on-arm64-when-using-default.patch lp-1827102-kni-fix-build-with-Linux-5.1.patch . [ Santiago Ruano Rincón ] * debian/rules: clean doc files dpdk (18.11.1-3) experimental; urgency=medium . * d/control: add dependencies to libdpdk-dev: libelf-dev and libjansson-dev to avoid pkg-config issues * d/control: drop unused build dependency to libcap-dev dpdk (18.11.1-2) experimental; urgency=medium . [ Christian Ehrhardt ] * d/control: drop shlibs:Depends from dpdk as it has no binaries anymore * d/p/lp-1827102-kni-fix-build-with-Linux-5.1.patch fix kni DKMS build with Linux 5.1 kernels (LP: #1827102) . [ Luca Boccassi ] * Bump Standards-Version to 4.3.0, no changes. dpdk (18.11.1-1) experimental; urgency=medium . [ Christian Ehrhardt ] * Merge stable update to 18.11.1; For a list of changes see https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html - refresh 0004-build-bump-minimum-Meson-version-to-0.47.1.patch for 18.11.1 - drop changes upstream in 18.11.1 0001-doc-fix-garbage-text-in-generated-HTML-guides.patch 0003-build-mention-march-in-pkg-config-description.patch 0001-kni-fix-build-for-dev_open-in-Linux-5.0.patch 0002-kni-fix-build-for-igb_ndo_bridge_setlink-in-Linux-5..patch * d/control: fix usability issue with mlx PMDs which might need rdma-core to be installed. In most cases users will want this, to be able to drop rdma-core if unwanted in some cases this is only a recommends added to librte-pmd-mlx4-18.11 and librte-pmd-mlx5-18.11 (Closes: #925141) . [ Luca Boccassi ] * Bump Standards-Version to 4.3.0, no changes. dput-ng (1.25+deb10u1) buster; urgency=medium . [ Kunal Mehta ] * Add buster-backports and stretch-backports-sloppy codenames. MR: !7 . [ Mattia Rizzolo ] * autopkgtest: add missing test dependencies and restrictions. e2fsprogs (1.44.5-1+deb10u1) buster; urgency=medium . * Fix e4defrag crashes on 32-bit architectures (Closes: #920767) enigmail (2:2.0.12+ds1-1~deb10u1) buster; urgency=medium . * upload upstream version to Debian stable - addresses CVE-2019-12269 (Closes: #929363) - uses "advanced" version of WKD - switches to using keys.openpgp.org as the default keyserver - avoid decrypting/verifying quoted inline-PGP - un-mangling MS Exchange: ensure that message structure is as expected to avoid data loss - only include Subject: line in legacy-display part for protected headers * move Vcs-Git fields to DEP-14 branch debian/buster * refresh patches enigmail (2:2.0.11+ds1-2) unstable; urgency=medium . * minimize legacy-display protected headers for encrypted mails enigmail (2:2.0.11+ds1-1) unstable; urgency=medium . * new upstream release * refresh patches * use the older import-show with --dry-run instead of show-only epiphany-browser (3.32.1.2-3~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 - d/gbp.conf: Set packaging branch to debian/buster . epiphany-browser (3.32.1.2-3) unstable; urgency=medium . * Team upload * d/gbp.conf: Set packaging branch to debian/unstable and upstream branch to upstream/3.32.x * d/p/lib-Give-libephymisc-a-RUNPATH-pointing-for-our-private-l.patch: Ensure that the web extension loads our bundled copy of libdazzle, even though it only depends on libdazzle transitively via libephymisc. Thanks to Carlos Alberto Lopez Perez for clarifying precisely which component was failing to load. (Closes: #927731) erlang-p1-pkix (1.0.0-3+deb10u1) buster; urgency=medium . * Added upstream patch to fix handling of GnuTLS certificates (Closes: #933040) exim4 (4.92-8+deb10u1) buster-security; urgency=high . * Fix remote command execution vulnerability related to "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006 exim4 (4.92-8+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. . exim4 (4.92-8+deb10u1) buster-security; urgency=high . * Fix remote command execution vulnerability related to "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006 facter (3.11.0-2+deb10u1) buster; urgency=medium . * Fix parsing of Linux route non-kv flags (e.g. onlink) (Closes: #918250) fdroidserver (1.1.4-1~deb10u1) buster; urgency=medium . * New upstream release targeted for Debian/buster * remove upstreamed patches fdroidserver (1.1.4-1~deb10u1~bpo9+1) stretch-backports; urgency=medium . * rebuild for stretch-backports fdroidserver (1.1.3-3) unstable; urgency=medium . * conditionally disable tests that can't work with apksigner fdroidserver (1.1.3-2) unstable; urgency=medium . * fix Recommends test, MD5 test fails with apksigner present fdroidserver (1.1.3-1) unstable; urgency=medium . * New upstream version 1.1.3 to fix test suite fdroidserver (1.1.2-1) unstable; urgency=medium . * New upstream version 1.1.2 (Closes: #929905) ffmpeg (7:4.1.4-1~deb10u1) buster-security; urgency=medium . * New upstream release fig2dev (1:3.2.7a-5+deb10u1) buster; urgency=medium . * 40_circle_arrowhead: Do not segfault on circle/half circle arrowheads with a magnification larger 42. This fixes CVE-2019-14275. (Closes: #933075). * Adapt salsa CI pipeline to buster release. firefox-esr (60.8.0esr-1~deb10u1) buster-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-22, also known as: CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11729, CVE-2019-11715, CVE-2019-11717, CVE-2019-11719, CVE-2019-11730, CVE-2019-11709. firefox-esr (60.8.0esr-1~deb9u1) stretch-security; urgency=medium . * New upstream release. * Fixes for mfsa2019-22, also known as: CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11729, CVE-2019-11715, CVE-2019-11717, CVE-2019-11719, CVE-2019-11730, CVE-2019-11709. firmware-nonfree (20190114-2) buster; urgency=medium . [ Ben Hutchings ] * Update to linux-support 4.19.0-5 * amd-graphics: Trigger update-initramfs when installed (Closes: #928510) * cavium, netronome: Trigger update-initramfs when installed * atheros: Add Qualcomm Atheros QCA9377 rev 1.0 firmware version WLAN.TF.2.1-00021-QCARMSWP-1 (Closes: #903437, #919632, #927917) * realtek: Add Realtek RTL8822CU Bluetooth firmware * atheros: Revert change of QCA9377 rev 1.0 firmware in 20180518-1 (Closes: #919632) . [ Raphaël Hertzog ] * misc-nonfree: Add firmware for MediaTek MT76x0/MT76x2u wireless chips (Closes: #919452) * misc-nonfree: Add firmware for MediaTek MT7622/MT7668 bluetooth chips . [ Romain Perier ] * misc-nonfree: Add GV100 signed firmware (Closes: #928672) freeorion (0.4.8-1+deb10u1) buster; urgency=medium . * Backport "Fix save or load game crash" patch to Buster. fuse-emulator (1.5.7+dfsg1-2~deb10u1) buster; urgency=medium . * Rebuild for buster. . fuse-emulator (1.5.7+dfsg1-2) unstable; urgency=medium . * debian/patches/prefer-x11-over-wayland.patch: - Prefer the X11 GDK backend over the Wayland one, as the latter is known to have problems (see upstream bug #367) (Closes: #872994). * debian/patches/show-fuse-icon.patch: - Show the Fuse icon on the GTK window and About dialog. fusiondirectory (1.2.3-4+deb10u1) buster; urgency=medium . * debian/patches: + Add 0001_CVE-2019-11187_stricter-ldap-error-check.patch. Perform stricter check on LDAP success/failure (CVE-2019-11187). * debian/control: + Add to D (fusiondirectory): php-xml. (Closes: #931959). gcab (1.2-3~deb10u1) buster; urgency=medium . * Rebuild for Buster. ghostscript (9.27~dfsg-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * protect use of .forceput with executeonly (CVE-2019-10216) glib2.0 (2.58.3-2+deb10u1) buster; urgency=medium . * Team upload * d/p/keyfile-settings-Use-tighter-permissions.patch: Backport patch from upstream 2.60.0 so that the GKeyFile settings backend creates ~/.config and configuration files with restrictive permissions (Closes: #931234, CVE-2019-13012) * d/gbp.conf: Swap branch to debian/buster gnome-bluetooth (3.28.2-4~deb10u1) buster; urgency=medium . * Team upload * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch: Mark as applied upstream for 3.33.91 * d/gbp.conf: Set packaging branch to debian/buster * Rebuild for buster . gnome-bluetooth (3.28.2-4) unstable; urgency=medium . * Team upload * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch: Add proposed patch to avoid GNOME Shell crashes when gnome-shell-extension-bluetooth-quick-connect is used (Closes: #932405) * d/gbp.conf: Set Debian branch to debian/unstable gnome-control-center (1:3.30.3-2~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 * d/gbp.conf: Set packaging branch to debian/buster . gnome-control-center (1:3.30.3-2) unstable; urgency=medium . * Team upload * d/patches: Mark more patches as forwarded upstream * d/patches: Sort non-upstreamable patches to end of patch series * d/patches: Update to upstream gnome-3-30 commit 3.30.3-7-gf41ae4269 - d/p/info-Fix-crashes-when-retrieving-disk-size.patch: Fix crash when the Details -> Overview (info-overview) panel is selected (Closes: #933529) - d/p/universal-access-Fix-duplicate-settings-call.patch, d/p/universal-access-Fix-leaks-checking-settings.patch: Fix memory leaks in Universal Access panel - d/p/universal-access-Don-t-use-widget-names-for-GSettings-key.patch: Fix a regression that caused the Universal Access -> Zoom mouse tracking options to have no effect - Update translations: is, ja * d/gbp.conf: Set branch to debian/unstable gnupg2 (2.2.12-1+deb10u1) buster; urgency=medium . * drop unneeded patch for printing revocation certificates * backport bugfix and stability patches from upstream 2.2.13 * backport bugfix and stability patches from upstream 2.2.14 * backport documentation, stability, ssh, and WKD patches from upstream 2.2.15 * backport documentation and bugfix patches from upstream 2.2.16 * import bugfixes and cleanup around secret key handling from 2.2.14 * backport bugfixes, documentation, WKD, and keyserver fixes from 2.2.17 * import efficiency and security fixes from upstream STABLE-BRANCH-2-2 * avoid using SKS pool CA unless the keyserver is hkps.pool.sks-keyservers.net * drop import-clean from default keyserver options, to avoid data loss * use keys.openpgp.org as the default keyserver * enable merging certificate updates even if update has no user ID * update Vcs-Git: to point to debian/buster branch * Adopt migrate-pubring-from-classic-gpg robustness fixes (Closes: #931385) * add new CI test: debian/tests/simple-tests * debian/tests/gpgv-win32: make arch-specific (Closes: #905563) gnupg2 (2.2.12-1+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. * debian/control: - Update Build-Depends: libgpg-error-dev (>= 1.35), due to the following patches depends on it, which introduces gpgrt.h: debian/patches/from-2.2.13/Silence-compiler-warnings-new-with-gcc-8.patch gnuplot (5.2.6+dfsg1-1+deb10u1) buster; urgency=medium . * [7b7626a] Fix incomplete/unsafe initialization of ARGV array. (Closes: #926658) golang-1.11 (1.11.6-1+deb10u1) buster-security; urgency=high . * Fix Denial of Service vulnerabilities in the HTTP/2 implementation. https://github.com/golang/go/issues/33631 CVE-2019-9512, CVE-2019-9514 * Fix multiple Parsing Issues in URL.Parse https://github.com/golang/go/issues/29098 CVE-2019-14809 gosa (2.7.4+reloaded3-8+deb10u1) buster; urgency=medium . * debian/changelog: + post-upload fix of patch-1045 explanation... * debian/patches: + Add 1046_CVE-2019-11187_stricter-ldap-error-check.patch. Perform stricter check on LDAP success/failure (CVE-2019-11187). h2o (2.2.5+dfsg2-2+deb10u1) buster-security; urgency=high . * [d9b7843] Fix HTTP/2 DoS attack vulnerabilities. CVE-2019-9512 CVE-2019-9514 CVE-2019-9515. (Closes: #934886) hfst (3.15.0-1.1~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. . hfst (3.15.0-1.1) unstable; urgency=medium . * Non-maintainer upload. * hfst: Add Breaks: libhfst45-dev for smoother upgrades from stretch. (Closes: #931169) initramfs-tools (0.133+deb10u1) buster; urgency=medium . [ Ben Hutchings ] * [998371a] hooks/resume: Disable resume when there are no suitable swap devices. Thanks to Trek (Closes: #916696) * [d653197] hook-functions: Include all keyboard driver modules when MODULES=most. Thanks to Alper Nebi Yasak * [5681ccb] hook-functions: Include cros_ec_spi and SPI drivers when MODULES=most. Thanks to Alper Nebi Yasak * [8d62542] resume: Set plymouth status only if there is a suspend image (Closes: #928736) * [073586a] hook-functions: Fix copy_file with target of "/bin" (Closes: #928689) * [a78d9a5] unmkinitramfs: Work around lz4cat filename check. Thanks to Dimitri John Ledkov (Closes: #930366) * [48a35de] update-initramfs(8): Update description of "-k all" option . [ Alper Nebi Yasak ] * [1abb6f6] hook-functions: Include extcon-usbc-cros-ec when MODULES=most * [db6d4e2] hook-functions: Include extcon drivers when MODULES=dep . [ Uwe Kleine-König ] * [360fb48] mkinitramfs: suppress warning when using bzip2 or lzma (Closes: #930754) jython (2.7.1+repack1-4~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. . jython (2.7.1+repack1-4) unstable; urgency=medium . * Team upload. * Preserve the backward compatibility with Java 7 (Closes: #934111) * Adjusted the Vcs-* fields kconfig (5.54.0-1+deb10u1) buster-security; urgency=medium . * CVE-2019-14744 lacme (0.5-1+deb10u1) buster; urgency=medium . * Link to RFC 8555 instead of the ACME I-D URL. * Issue GET and POST-as-GET requests (RFC 8555 sec. 6.3) for the authorizations, order and certificate URLs. Let's Encrypt will remove support of unauthenticated GETs from the V2 API on 01 Nov 2019. Closes: #935799. libblockdev (2.20-7+deb10u1) buster; urgency=medium . [ intrigeri ] * Use existing cryptsetup API for changing keyslot passphrase. Cherry-pick upstream fix to use existing cryptsetup API for atomically changing a keyslot passphrase, instead of deleting the old keyslot before adding the new one. This avoids data loss when attempting to change the passphrase of a LUKS2 device via udisks2, e.g. from GNOME Disks. Deleting a keyslot and then adding one is risky: if anything goes wrong before the new keyslot is successfully added, no usable keyslot is left and the device cannot be unlocked anymore. There's little chances this causes actual problems with LUKS1, but LUKS2 defaults to the memory-hard Argon2 key derivation algorithm, which is implemented in cryptsetup with the assumption that it runs as root with no MEMLOCK ulimit; this assumption is wrong when run by udisks2.service under LimitMEMLOCK=65536, which breaks adding the new keyslot, and makes us hit the problematic situation (user data loss) every time. With this change, changing a LUKS2 passphrase via udisks2 will still fail in some cases, until the MEMLOCK ulimit problem is solved in cryptsetup or workaround'ed in udisks2. But at least, if it fails, it will fail _atomically_ and the original passphrase will still work. (Closes: #928893) libdatetime-timezone-perl (1:2.23-1+2019b) buster; urgency=medium . * Update to Olson database version 2019b. This update contains contemporary changes for Brazil and Palestine. libjavascript-beautifier-perl (0.25-1+deb10u1) buster; urgency=medium . * Team upload * Add missing "=>" operator (ES6) (Closes: #931379) libreoffice (1:6.1.5-3+deb10u3) buster-security; urgency=high . * debian/patches/expand-LibreLogo-checks-to-global-events.diff, debian/patches/decode-url-escape-codes-and-check-each-path-segment.diff: debian/patches/keep-name-percent-encoded.diff debian/patches/Properly-obtain-location.diff: backport from libreoffice-6-3-0 branch - more fixes for CVE-2019-9848 and CVE-2018-16858 (CVE-2019-9850/CVE-2019-9851) libreoffice (1:6.1.5-3+deb10u2) buster-security; urgency=high . * debian/patches/More-uses-of-referer-URL-with-SvxBrushItem.diff: add patch from libreoffice-6-2 branch to fix CVE-2019-9849 libreoffice (1:6.1.5-3+deb10u2~bpo9+1) stretch-backports; urgency=high . * Rebuild for stretch-backports. . * debian/patches/apparmor-{cleanups,mesa,opencl}.diff, debian/patches/series, debian/rules: revert this and apparmor >= 2.13.1 recommends; stretch doesn't have apparmor on per default but let's go sure * debian/control.in, debian/patches/series, debian/libreoffice-base-drivers.NEWS, debian/patches/use-mariadb-java-instead-of-mysql-java.diff: revert for stretch-backports... * debian/patches/disableClassPathURLCheck.diff: revert configure check for stretch-backports . * tarballs/*, debian/source/include-binaries: include needed internal stuff . libreoffice (1:6.1.5-3+deb10u2) buster-security; urgency=high . * debian/patches/More-uses-of-referer-URL-with-SvxBrushItem.diff: add patch from libreoffice-6-2 branch to fix CVE-2019-9849 . libreoffice (1:6.1.5-3+deb10u1) buster-security; urgency=high . * debian/patches/sanitize-LibreLogo-calls.diff, debian/patches/explictly-exclude-LibreLogo-from-XScript-usage.diff: add from git; fixing CVE-2019-9848 libreoffice (1:6.1.5-3+deb10u1) buster-security; urgency=high . * debian/patches/sanitize-LibreLogo-calls.diff, debian/patches/explictly-exclude-LibreLogo-from-XScript-usage.diff: add from git; fixing CVE-2019-9848 libsdl2-image (2.0.4+dfsg1-1+deb10u1) buster; urgency=medium . * Non-maintainer upload. * Multiple security issues (Closes: #932754): - CVE-2019-5058: buffer overflow in do_layer_surface (IMG_xcf.c). - CVE-2019-5052: integer overflow and subsequent buffer overflow in IMG_pcx.c. - CVE-2019-7635: heap buffer overflow in Blit1to4 (IMG_bmp.c). - CVE-2019-12216, CVE-2019-12217, CVE-2019-12218, CVE-2019-12219, CVE-2019-12220, CVE-2019-12221, CVE-2019-12222, CVE-2019-5051: OOB R/W in IMG_LoadPCX_RW (IMG_pcx.c). libtk-img (1:1.4.8+dfsg-1+deb10u1) buster; urgency=medium . * Switch from the internal copies of Jpeg, Zlib and PixarLog codecs to the libtiff ones (closes: #931422). libxslt (1.1.32-2.1~deb10u1) buster; urgency=medium . * Rebuild for buster . libxslt (1.1.32-2.1) unstable; urgency=medium . * Non-maintainer upload. * Fix security framework bypass (CVE-2019-11068) (Closes: #926895, #933743) * Fix uninitialized read of xsl:number token (CVE-2019-13117) (Closes: #931321, #933743) * Fix uninitialized read with UTF-8 grouping chars (CVE-2019-13118) (Closes: #931320, #933743) linux (4.19.67-2) buster; urgency=medium . [ Salvatore Bonaccorso ] * dm: disable DISCARD if the underlying storage no longer supports it (Closes: #934331) * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (CVE-2019-15538) . [ Ben Hutchings ] * KVM: Ignore ABI changes * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) * [ppc64el] Avoid ABI change for disabling TM * netfilter: conntrack: Use consistent ct id hash calculation (fixes regression in 4.19.44) . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux (4.19.67-1) buster; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38 - netfilter: nft_compat: use refcnt_t type for nft_xt reference count - netfilter: nft_compat: make lists per netns - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nft_compat: destroy function must not have side effects - netfilter: nf_tables: warn when expr implements only one of activate/deactivate - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nft_compat: don't use refcount_inc on newly allocated entry - netfilter: nft_compat: use .release_ops and remove list of extension - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - net/ibmvnic: Fix RTNL deadlock during device reset - net: mvpp2: fix validate for PPv2.1 - ext4: fix some error pointer dereferences - tipc: handle the err returned from cmd header function - loop: do not print warn message if partition scan is successful - [armhf,arm64] drm/rockchip: fix for mailbox read validation. - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock - ipvs: fix warning on unused variable - [ppc64el] vdso32: fix CLOCK_MONOTONIC on PPC64 - [armhf,arm64] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new DSA framework - cifs: fix memory leak in SMB2_read - cifs: do not attempt cifs operation on smb2+ rename error - tracing: Fix a memory leak by early error exit in trace_pid_write() - zram: pass down the bvec we need to read into in the work struct - trace: Fix preempt_enable_no_resched() abuse - IB/rdmavt: Fix frwr memory registration - RDMA/mlx5: Do not allow the user to write to the clock page - sched/numa: Fix a possible divide-by-zero - ceph: only use d_name directly when parent is locked - ceph: ensure d_name stability in ceph_dentry_hash() - ceph: fix ci->i_head_snapc leak - nfsd: Don't release the callback slot unless it was actually held - sunrpc: don't mark uninitialised items as VALID. - [x86] perf/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters - Input: synaptics-rmi4 - write config register values to the right offset - [armhf] 8857/1: efi: enable CP15 DMB instructions before cleaning the cache - [ppc64el] mm/radix: Make Radix require HUGETLB_PAGE - [arm*] drm/vc4: Fix memory leak during gpu reset. - [x86] Revert "drm/i915/fbdev: Actually configure untiled displays" - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice - slip: make slhc_free() silently accept an error pointer - [x86] intel_th: gth: Fix an off-by-one in output unassigning - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference - workqueue: Try to catch flush_work() without INIT_WORK(). - sched/deadline: Correctly handle active 0-lag timers - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON - fm10k: Fix a potential NULL pointer dereference - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable - tipc: check link name with right length in tipc_nl_compat_link_set - net: netrom: Fix error cleanup path of nr_proto_init - net/rds: Check address length before reading address family - rxrpc: fix race condition in rxrpc_input_packet() - [x86] retpolines: Raise limit for generating indirect calls from switch-case - [x86] retpolines: Disable switch jump tables when retpolines are enabled - mm: Fix warning in insert_pfn() - [x86] fpu: Don't export __kernel_fpu_{begin,end}() - ipv4: add sanity checks in ipv4_link_failure() - ipv4: set the tcp_min_rtt_wlen range from 0 to one day - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: exchange of 8K and 1M pool - net/rose: fix unbound loop in rose_loopback_timer() - [armhf,arm64] net: stmmac: move stmmac_check_ether_addr() to driver probe - team: fix possible recursive locking when add slaves - [arm64] net: hns: Fix WARNING when hns modules installed - net/mlx5e: Fix the max MTU check in case of XDP - net/mlx5e: Fix use-after-free after xdp_return_frame https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.39 - selinux: use kernel linux/socket.h for genheaders and mdp - Revert "ACPICA: Clear status of GPEs before enabling them" - [arm*] dts: bcm283x: Fix hdmi hpd gpio pull - [s390x] limit brk randomization to 32MB - net: ieee802154: fix a potential NULL pointer dereference - ieee802154: hwsim: propagate genlmsg_reply return code - [armhf,arm64] net: stmmac: don't set own bit too early for jumbo frames - qlcnic: Avoid potential NULL pointer dereference - xsk: fix umem memory leak on cleanup - netfilter: nft_set_rbtree: check for inactive element after flag mismatch - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies - netfilter: ip6t_srh: fix NULL pointer dereferences - [s390x] qeth: fix race when initializing the IP address table - [armhf] imx51: fix a leaked reference by adding missing of_node_put - [arm64] KVM: Reset the PMU in preemptible context - [armhf,arm64] KVM: vgic-its: Take the srcu lock when writing to guest memory - [armhf,arm64] KVM: vgic-its: Take the srcu lock when parsing the memslots - [x86] usb: dwc3: pci: add support for Comet Lake PCH ID - usb: gadget: net2280: Fix overrun of OUT messages - usb: gadget: net2280: Fix net2280_dequeue() - [x86] i2c: i801: Add support for Intel Comet Lake - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference - staging: rtl8712: uninitialized memory in read_bbreg_hdl() - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc - [arm64] net: macb: Add null check for PCLK and HCLK - net/sched: don't dereference a->goto_chain to read the chain index - [armhf] dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi - [armhf,arm64] drm/tegra: hub: Fix dereference before check - NFS: Fix a typo in nfs_init_timeout_values() - drm: Fix drm_release() and device unplug - [arm64] drm/meson: Fix invalid pointer in meson_drv_unbind() - [arm64] drm/meson: Uninstall IRQ handler - scsi: mpt3sas: Fix kernel panic during expander reset - scsi: aacraid: Insure we don't access PCIe space during AER/EEH - scsi: qla4xxx: fix a potential NULL pointer dereference - leds: trigger: netdev: fix refcnt leak on interface rename - [x86] realmode: Don't leak the trampoline kernel address - usb: u132-hcd: fix resource leak - ceph: fix use-after-free on symlink traversal - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi- element RSCN - [x86] mm: Don't exceed the valid physical address space - libata: fix using DMA buffers on stack - gpio: of: Fix of_gpiochip_add() error path - nvme-multipath: relax ANA state check - perf machine: Update kernel map address and re-order properly - [x86] iommu/amd: Reserve exclusion range in iova-domain - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK - leds: trigger: netdev: use memcpy in device_name_store https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.40 - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation - ipv6: A few fixes on dereferencing rt->from - ipv6: fix races in ip6_dst_destroy() - ipv6/flowlabel: wait rcu grace period before put_pid() - ipv6: invert flowlabel sharing check in process and user mode - l2ip: fix possible use-after-free - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() - [armhf] net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc - net: phy: marvell: Fix buffer overrun with stats counters - rxrpc: Fix net namespace cleanup - sctp: avoid running the sctp state machine recursively - packet: validate msg_namelen in send directly - bnxt_en: Improve multicast address setup logic. - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). - [x86] KVM: Whitelist port 0x7e for pre-incrementing %rip - [x86] KVM: nVMX: Fix size checks in vmx_set_nested_state - ALSA: line6: use dynamic buffers - ath10k: Drop WARN_ON()s that always trigger during system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.41 - iwlwifi: fix driver operation for 5350 - mwifiex: Make resume actually do something useful again on SDIO cards - mac80211: don't attempt to rename ERR_PTR() debugfs dirs - [armhf] i2c: imx: correct the method of getting private data in notifier_call - i2c: Remove unnecessary call to irq_find_mapping - i2c: Clear client->irq in i2c_device_remove - i2c: Allow recovery of the initial IRQ by an I2C client device. - i2c: Prevent runtime suspend of adapter when Host Notify is required - [x86] ALSA: hda/realtek - Add new Dell platform for headset mode - [x86] ALSA: hda/realtek - Fixed Dell AIO speaker noise - [x86] ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR - USB: yurex: Fix protection fault after device removal - USB: w1 ds2490: Fix bug caused by improper use of altsetting array - USB: dummy-hcd: Fix failure to give back unlinked URBs - usb: usbip: fix isoc packet num validation in get_pipe - USB: core: Fix unterminated string returned by usb_string() - USB: core: Fix bug caused by duplicate interface PM usage counter - nvme-loop: init nvmet_ctrl fatal_err_work when allocate - [arm64] dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay - HID: logitech: check the return value of create_singlethread_workqueue - HID: debug: fix race condition with between rdesc_show() and device removal - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured - batman-adv: Reduce claim hash refcnt only for removed entry - batman-adv: Reduce tt_local hash refcnt only for removed entry - batman-adv: Reduce tt_global hash refcnt only for removed entry - batman-adv: fix warning in function batadv_v_elp_get_throughput - [armhf] dts: rockchip: Fix gpu opp node names for rk3288 - [arm64] reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev - igb: Fix WARN_ONCE on runtime suspend - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands - bonding: show full hw address in sysfs for slave entries - [armhf,arm64] net: stmmac: use correct DMA buffer size in the RX descriptor - [armhf,arm64] net: stmmac: ratelimit RX error logs - [armhf,arm64] net: stmmac: don't stop NAPI processing when dropping a packet - [armhf,arm64] net: stmmac: don't overwrite discard_frame status - [armhf,arm64] net: stmmac: fix dropping of multi-descriptor RX frames - [armhf,arm64] net: stmmac: don't log oversized frames - jffs2: fix use-after-free on symlink traversal - debugfs: fix use-after-free on symlink traversal - [armhf] mfd: twl-core: Disable IRQ while suspended - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx - HID: input: add mapping for Assistant key - vfio/pci: use correct format characters - scsi: core: add new RDAC LENOVO/DE_Series device - [x86] scsi: storvsc: Fix calculation of sub-channel count - [arm64] fix wrong check of on_sdei_stack in nmi context - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver - [arm64] net: hns: Fix probabilistic memory overwrite when HNS driver initialized - [arm64] net: hns: fix ICMP6 neighbor solicitation messages discard problem - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled - libcxgb: fix incorrect ppmax calculation - [x86] KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow - hugetlbfs: fix memory leak for resv_map - fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock - [armel] orion: don't use using 64-bit DMA masks - block: pass no-op callback to INIT_WORK(). - [x86] perf/amd: Update generic hardware cache events for Family 17h - Bluetooth: btusb: request wake pin with NOAUTOEN - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state - [arm64] clk: qcom: Add missing freq for usb30_master_clk on 8998 - scsi: RDMA/srpt: Fix a credit leak for aborted commands - [x86] ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" - [x86] platform: intel_pmc_core: Fix PCH IP name - [x86] platform: intel_pmc_core: Handle CFL regmap properly - IB/core: Unregister notifier before freeing MAD security - IB/core: Fix potential memory leak while creating MAD agents - IB/core: Destroy QP if XRC QP fails - selinux: avoid silent denials in permissive mode under RCU walk - selinux: never allow relabeling on context mounts - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode - [ppc64el] mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search - [x86] mce: Improve error message when kernel cannot recover, p2 - [x86] clk: Add system specific quirk to mark clocks as critical - [x86] mm/KASLR: Fix the size of the direct mapping section - [x86] mm: Fix a crash with kmemleak_scan() - [x86] mm/tlb: Revert "x86/mm: Align TLB invalidation info" - media: v4l2: i2c: ov7670: Fix PLL bypass register values https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.42 - [armhf,arm64] net: stmmac: Use bfsize1 in ndesc_init_rx_desc - [x86] Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() - ASoC: hdmi-codec: fix S/PDIF DAI - ASoC:soc-pcm:fix a codec fixup issue in TDM case - [x86] ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform - [arm64] clk: meson-gxbb: round the vdec dividers to closest - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol - [armhf] drm/omap: hdmi4_cec: Fix CEC clock handling for PM - IB/hfi1: Eliminate opcode tests on mr deref - IB/hfi1: Fix the allocation of RSM table - [x86] perf/intel: Fix handling of wakeup_events for multi-entry PEBS - [x86] perf/intel: Initialize TFA MSR - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() - drm/amd/display: fix cursor black issue - objtool: Add rewind_stack_do_exit() to the noreturn list - slab: fix a crash by reading /proc/slab_allocators - [armhf,arm64] drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind - virtio_pci: fix a NULL pointer reference in vp_del_vqs - [x86] RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove - [arm64] RDMA/hns: Fix bug that caused srq creation to fail - scsi: csiostor: fix missing data copy in csio_scsi_err_handler() - [x86] ASoC: Intel: kbl: fix wrong number of channels - virtio-blk: limit number of hw queues by nr_cpu_ids - nvme-fc: correct csn initialization and increments on error - [x86] platform: pmc_atom: Drop __initconst on dmi table - perf/core: Fix perf_event_disable_inatomic() race - [x86] iommu/amd: Set exclusion range correctly - genirq: Prevent use-after-free and work list corruption - usb: dwc3: Fix default lpm_nyet_threshold value - USB: serial: f81232: fix interrupt worker not stop - USB: cdc-acm: fix unthrottle races - usb-storage: Set virt_boundary_mask to avoid SG overflows - [x86] intel_th: pci: Add Comet Lake support - [arm64] cpufreq: armada-37xx: fix frequency calculation for opp - scsi: lpfc: change snprintf to scnprintf for possible overflow - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines - scsi: qla2xxx: Fix device staying in blocked state - UAS: fix alignment of scatter/gather segments - [x86] ASoC: Intel: avoid Oops if DMA setup fails - locking/futex: Allow low-level atomic operations to return -EAGAIN - [arm64] futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.43 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44 - bfq: update internal depth state when queue depth changes - [x86] platform: sony-laptop: Fix unintentional fall-through - [x86] platform: thinkpad_acpi: Disable Bluetooth for some machines - [x86] platform: dell-laptop: fix rfkill functionality - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails - kernfs: fix barrier usage in __kernfs_new_node() - [x86] virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace - USB: serial: fix unthrottle races - acpi/nfit: Always dump _DSM output payload - libnvdimm/namespace: Fix a potential NULL pointer dereference - HID: input: add mapping for Expose/Overview key - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys - HID: input: add mapping for "Toggle Display" key - libnvdimm/btt: Fix a kmemdup failure check - [s390x] dasd: Fix capacity calculation for large volumes - mac80211: fix unaligned access in mesh table hash function - mac80211: Increase MAX_MSG_LEN - cfg80211: Handle WMM rules in regulatory domain intersection - mac80211: fix memory accounting with A-MSDU aggregation - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands - libnvdimm/pmem: fix a possible OOB access when read and write pmem - [s390x] 3270: fix lockdep false positive on view->lock - drm/amd/display: extending AUX SW Timeout - mISDN: Check address length before reading address family - vxge: fix return of a free'd memblock on a failed dma mapping - qede: fix write to free'd pointer error and double free of ptp - afs: Unlock pages for __pagevec_release() - drm/amd/display: If one stream full updates, full update all planes - [s390x] pkey: add one more argument space for debug feature entry - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T - [x86] KVM: fix spectrev1 gadgets - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in tracing - tools lib traceevent: Fix missing equality check for strcmp - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash - scsi: aic7xxx: fix EISA support - mm: fix inactive list balancing between NUMA nodes and cgroups - init: initialize jump labels before command line option parsing - ipvs: do not schedule icmp errors from tunnels - netfilter: ctnetlink: don't use conntrack/expect object addresses as id - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook() - [s390x] ctcm: fix ctcm_new_device error return code - [armhf,arm64] drm/sun4i: Set device driver data at bind time for use in unbind - [armhf,arm64] drm/sun4i: Fix component unbinding and component master deletion - netfilter: fix nf_l4proto_log_invalid to log invalid packets - [armhf] gpu: ipu-v3: dp: fix CSC handling - [armhf] drm/imx: don't skip DP channel disable for background plane - [armhf,arm64] drm/sun4i: Unbind components before releasing DRM and memory - Input: synaptics-rmi4 - fix possible double free - [arm64] RDMA/hns: Bugfix for mapping user db - mm/memory_hotplug.c: drop memory device reference after find_memory_block() - [ppc64el] smp: Fix NMI IPI timeout - [ppc64el] smp: Fix NMI IPI xmon timeout - [armhf,arm64] net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode - mm/memory.c: fix modifying of page protection by insert_pfn() - usb: typec: Fix unchecked return value - netfilter: nf_tables: use-after-free in dynamic operations - netfilter: nf_tables: add missing ->release_ops() in error path of newrule() (Closes: #934168) - net: fec: manage ahb clock in runtime pm - net: strparser: partially revert "strparser: Call skb_unclone conditionally" - NFC: nci: Add some bounds checking in nci_hci_cmd_received() - nfc: nci: Potential off by one in ->pipes[] array - [x86] kprobes: Avoid kretprobe recursion bug - mwl8k: Fix rate_idx underflow - rtlwifi: rtl8723ae: Fix missing break in switch statement - bonding: fix arp_validate toggling in active-backup mode - bridge: Fix error path for kobject_init_and_add() - ipv4: Fix raw socket lookup for local traffic - net: dsa: Fix error cleanup path in dsa_init_module - [armhf] net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering - [arm64] net: macb: Change interrupt and napi enable order in open - packet: Fix error path in packet_init - selinux: do not report error on connect(AF_UNSPEC) - vlan: disable SIOCSHWTSTAMP in container - vrf: sit mtu should not be updated when vrf netdev is the link - tuntap: fix dividing by zero in ebpf queue selection - tuntap: synchronize through tfiles array instead of tun->numqueues - isdn: bas_gigaset: use usb_fill_int_urb() properly - tipc: fix hanging clients using poll with EPOLLOUT flag - [ppc64el] book3s/64: check for NULL pointer in pgd_alloc() - [ppc64el] powernv/idle: Restore IAMR after idle - [x86] PCI: hv: Fix a memory leak in hv_eject_device_work() - [x86] PCI: hv: Add hv_pci_remove_slots() when we unload the driver - [x86] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.45 - locking/rwsem: Prevent decrement of reader count before increment - [x86] speculation/mds: Revert CPU buffer clear on double fault exit - [x86] speculation/mds: Improve CPU buffer clear documentation - objtool: Fix function fallthrough detection - [arm64] dts: rockchip: Disable DCMDs on RK3399's eMMC controller. - [armhf] dts: exynos: Fix interrupt for shared EINTs on Exynos5260 - [armhf] dts: exynos: Fix audio (microphone) routing on Odroid XU3 - [arm64] mmc: sdhci-of-arasan: Add DTS property to disable DCMDs. - [armhf] exynos: Fix a leaked reference by adding missing of_node_put - [armhf] power: supply: axp288_charger: Fix unchecked return value - [armhf,arm64] power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the blacklist - [arm64] mmap: Ensure file offset is treated as unsigned - [arm64] arch_timer: Ensure counter register reads occur with seqlock held - [arm64] compat: Reduce address limit - [arm64] Clear OSDLR_EL1 on CPU boot - [arm64] Save and restore OSDLR_EL1 across suspend/resume - [x96] sched: Save [ER]FLAGS on context switch - crypto: salsa20 - don't access already-freed walk.iv - crypto: chacha20poly1305 - set cra_name correctly - [x86] crypto: ccp - Do not free psp_master when PLATFORM_INIT fails - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode - crypto: skcipher - don't WARN on unprocessed data after slow walk step - crypto: crct10dif-generic - fix use via crypto_shash_digest() - [x86] crypto: crct10dif-pcl - fix use via crypto_shash_digest() - [arm64] crypto: gcm-aes-ce - fix no-NEON fallback code - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" - [armhf,arm64] crypto: aes-neonbs - don't access already-freed walk.iv - mmc: core: Fix tag set memory leak - ALSA: line6: toneport: Fix broken usage of timer for delayed execution - ALSA: usb-audio: Fix a memory leak bug - ALSA: hda/hdmi - Read the pin sense from register when repolling - ALSA: hda/hdmi - Consider eld_valid when reporting jack event - ALSA: hda/realtek - EAPD turn on later - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) - [armhf,arm64] ASoC: max98090: Fix restore of DAPM Muxes - ASoC: codec: hdac_hdmi add device_link to card device - [arm64] bpf: remove prefetch insn in xadd mapping - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses - mm/hugetlb.c: don't put_page in lock of hugetlb_lock - hugetlb: use same fault hash key for shared and private mappings - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget - userfaultfd: use RCU to free the task struct when fork fails - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler - jbd2: check superblock mapped prior to committing - ext4: make sanity check in mballoc more strict - ext4: ignore e_value_offs for xattrs with value-in-ea-inode - ext4: avoid drop reference to iloc.bh twice - ext4: fix use-after-free race with debug_want_extra_isize - ext4: actually request zeroing of inode table after grow - ext4: fix ext4_show_options for file systems w/o journal - btrfs: Check the first key and level for cached extent buffer - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages fails - Btrfs: send, flush dellaloc in order to avoid data loss - Btrfs: do not start a transaction during fiemap - Btrfs: do not start a transaction at iterate_extent_inodes() - bcache: fix a race between cache register and cacheset unregister - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() - ipmi:ssif: compare block number correctly for multi-part return messages - crypto: ccm - fix incompatibility between "ccm" and "ccm_base" - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount - ext4: fix data corruption caused by overlapping unaligned and aligned IO - ext4: fix use-after-free in dx_release() - ext4: avoid panic during forced reboot due to aborted journal - [x86] ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) - ALSA: hda/realtek - Fixup headphone noise via runtime suspend - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug - jbd2: fix potential double free - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes - [x86] KVM: lapic: Busy wait for timer to expire when using hv_timer - xen/pvh: set xen_domain_type to HVM in xen_pvh_init - libnvdimm/namespace: Fix label tracking error - iov_iter: optimize page_copy_sane() - pstore: Centralize init/exit routines - pstore: Allocate compression during late_initcall() - pstore: Refactor compression initialization - ext4: don't update s_rev_level if not required https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.46 - ipv6: fix src addr routing with the exception table - ipv6: prevent possible fib6 leaks - net: Always descend into dsa/ - net: avoid weird emergency message - net/mlx4_core: Change the error print to info print - net: test nouarg before dereferencing zerocopy pointers - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions - nfp: flower: add rcu locks when accessing netdev for tunnels - ppp: deflate: Fix possible crash in deflate_init - rtnetlink: always put IFLA_LINK for links with a link-netnsid - tipc: switch order of device registration to fix a crash - vsock/virtio: free packets during the socket release - vsock/virtio: Initialize core virtio vsock before registering the driver - net/mlx5: Imply MLXFW in mlx5_core - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled - stm class: Fix channel free in stm output free path - stm class: Fix channel bitmap on 32-bit systems - brd: re-enable __GFP_HIGHMEM in brd_insert_page() - proc: prevent changes to overridden credentials - Revert "MD: fix lock contention for flush bios" - md: batch flush requests. - md: add mddev->pers to avoid potential NULL pointer dereference - dcache: sort the freeing-without-RCU-delay mess for good. - [x86] intel_th: msu: Fix single mode with IOMMU - p54: drop device reference count if fails to enable device - of: fix clang -Wunsequenced for be32_to_cpu() - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - [armhf] phy: ti-pipe3: fix missing bit-wise or operator when assigning val - NFS4: Fix v4.0 client state corruption when mount - PNFS fallback to MDS if no deviceid found - [arm64] clk: hi3660: Mark clk_gate_ufs_subsys as critical - [armhf,arm64] clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider - [arm64] clk: rockchip: fix wrong clock definitions for rk3328 - udlfb: delete the unused parameter for dlfb_handle_damage - udlfb: fix sleeping inside spinlock - udlfb: introduce a rendering mutex - fuse: fix writepages on 32bit - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate - ovl: fix missing upper fs freeze protection on copy up for ioctl - [armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 - ceph: flush dirty inodes before proceeding with remount - [amd64] Add gap to int3 to allow for call emulation - [amd64] Allow breakpoints to emulate call instructions - [amd64] ftrace: Emulate call function while updating in breakpoint handler - tracing: Fix partial reading of trace event's id file - [armhf,arm64] memory: tegra: Fix integer overflow on tick value calculation - [x86] perf intel-pt: Fix instructions sampling rate - [x86] perf intel-pt: Fix improved sample timestamp - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken - PCI: Mark Atheros AR9462 to avoid bus reset - PCI: Init PCIe feature bits for managed host bridge alloc - PCI/AER: Change pci_aer_init() stub to return void - PCI: Factor out pcie_retrain_link() function - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum - dm cache metadata: Fix loading discard bitset - dm zoned: Fix zone report handling - dm delay: fix a crash when invalid device is specified - dm integrity: correctly calculate the size of metadata area - dm mpath: always free attached_handler_name in parse_path() - fuse: Add FOPEN_STREAM to use stream_open() - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module - vti4: ipip tunnel deregistration fixes. - xfrm: clean up xfrm protocol checks - esp4: add length check for UDP encapsulation - xfrm: Honor original L3 slave device in xfrmi policy lookup - xfrm4: Fix uninitialized memory read in _decode_session4 - [armhf,arm64] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0) - securityfs: fix use-after-free on symlink traversal - apparmorfs: fix use-after-free on symlink traversal - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored - [x86] kvm: hyper-v: deal with buggy TLB flush requests from WS2012 - mac80211: Fix kernel panic due to use of txq after free - net: ieee802154: fix missing checks for regmap_update_bits - [armhf,arm64] KVM: Ensure vcpu target is unset on reset failure - bpf: Fix preempt_enable_no_resched() abuse - qmi_wwan: new Wistron, ZTE and D-Link devices - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb() - sched/cpufreq: Fix kobject memleak - [x86] mm/mem_encrypt: Disable all instrumentation for early SME setup - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour - perf bench numa: Add define for RUSAGE_THREAD if not present - [x86] perf/intel: Fix race in intel_pmu_disable_event() - md/raid: raid5 preserve the writeback action after the parity check - driver core: Postpone DMA tear-down until after devres release for probe failure - bpf: relax inode permission check for retrieving bpf program - bpf: add map_lookup_elem_sys_only for lookups from syscall side - bpf, lru: avoid messing with eviction heuristics upon syscall lookup https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.47 - [x86] Hide the int3_emulate_call/jmp functions from UML - ext4: do not delete unlinked inode from orphan list on failed truncate - ext4: wait for outstanding dio during truncate in nojournal mode - f2fs: Fix use of number of devices - [x86] KVM: fix return value for reserved EFER - bio: fix improper use of smp_mb__before_atomic() - sbitmap: fix improper use of smp_mb__before_atomic() - Revert "scsi: sd: Keep disk read-only when re-reading partition" - [ppc64el] crypto: vmx - CTR: always increment IV as quadword - [arm*] mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem - [arm*] mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead - [arm64] kernel: kaslr: reduce module randomization range to 2 GB - [arm64] iommu: handle non-remapped addresses in ->mmap and ->get_sgtable - gfs2: Fix sign extension bug in gfs2_update_stats - btrfs: don't double unlock on error in btrfs_punch_hole - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path - Btrfs: avoid fallback to transaction commit during fsync of files with holes - Btrfs: fix race between ranged fsync and writeback of adjacent ranges - btrfs: sysfs: Fix error path kobject memory leak - btrfs: sysfs: don't leak memory when failing add fsid - udlfb: fix some inconsistent NULL checking - fbdev: fix divide error in fb_var_to_videomode - NFSv4.2 fix unnecessary retry in nfs4_copy_file_range - NFSv4.1 fix incorrect return value in copy_file_range - bpf: add bpf_jit_limit knob to restrict unpriv allocations - [arm64] errata: Add workaround for Cortex-A76 erratum #1463225 - btrfs: honor path->skip_locking in backref code - ovl: relax WARN_ON() for overlapping layers use case - fbdev: fix WARNING in __alloc_pages_nodemask bug - media: cpia2: Fix use-after-free in cpia2_exit - media: serial_ir: Fix use-after-free in serial_ir_init_module - media: vb2: add waiting_in_dqbuf flag - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit - bpf: devmap: fix use-after-free Read in __dev_map_entry_free - batman-adv: mcast: fix multicast tt/tvlv worker locking - at76c50x-usb: Don't register led_trigger if usb_register_driver failed - acct_on(): don't mess with freeze protection - gfs2: Fix lru_count going negative - cxgb4: Fix error path in cxgb4_init_module - NFS: make nfs_match_client killable - IB/hfi1: Fix WQ_MEM_RECLAIM warning - gfs2: Fix occasional glock use-after-free - mmc: core: Verify SD bus width - [arm64] dmaengine: tegra210-dma: free dma controller in remove() - net: ena: gcc 8: fix compilation warning - [x86] hv_netvsc: fix race that may miss tx queue wakeup - Bluetooth: Ignore CC events not matching the last HCI command - [x86] ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE - [armhf,arm64] usb: dwc2: gadget: Increase descriptors count for ISOC's - [armhf,arm64] usb: dwc3: move synchronize_irq() out of the spinlock protected block - ASoC: hdmi-codec: unlock the device on startup errors - [ppc64el] perf: Return accordingly on invalid chip-id in - [ppc64el] boot: Fix missing check of lseek() return value - [ppc64el] perf: Fix loop exit condition in nest_imc_event_init - [armhf] ASoC: imx: fix fiq dependencies - [amd64] spi: pxa2xx: fix SCR (divisor) calculation - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() - drm/nouveau/bar/nv50: ensure BAR is mapped - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals - [ppc64el] watchdog: Use hrtimers for per-CPU heartbeat - sched/cpufreq: Fix kobject memleak - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() - scsi: qla2xxx: Fix hardirq-unsafe locking - [x86] modules: Avoid breaking W^X while loading modules - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve - btrfs: fix panic during relocation after ENOSPC before writeback happens - btrfs: Don't panic when we can't find a root key - iwlwifi: pcie: don't crash on invalid RX interrupt - scsi: qedi: Abort ep termination if offload not scheduled - [s390x] kexec_file: Fix detection of text segment in ELF loader - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs - w1: fix the resume command API - [s390x] qeth: address type mismatch warning - [armhf,arm64] dmaengine: pl330: _stop: clear interrupt status - mac80211/cfg80211: update bss channel on channel switch - mwifiex: prevent an array overflow - rsi: Fix NULL pointer dereference in kmalloc - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE - nvme-rdma: fix a NULL deref when an admin connect times out - [armhf,arm64] crypto: sun4i-ss - Fix invalid calculation of hash end - bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set - bcache: return error immediately in bch_journal_replay() - bcache: fix failure in journal relplay - bcache: add failure check to run_cache_set() for journal replay - bcache: avoid clang -Wunintialized warning - RDMA/cma: Consider scope_id while binding to ipv6 ll address - vfio-ccw: Do not call flush_workqueue while holding the spinlock - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev - [x86] mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions - Bluetooth: hci_qca: Give enough time to ROME controller to bootup. - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version - [armhf] pinctrl: samsung: fix leaked of_node references - [armhf] clk: rockchip: undo several noc and special clocks as critical on rk3288 - [arm64] perf/arm-cci: Remove broken race mitigation - media: au0828: stop video streaming only when last user stops - audit: fix a memory leak bug - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() - media: pvrusb2: Prevent a buffer overflow - block: fix use-after-free on gendisk - [ppc64el] numa: improve control of topology updates - [ppc64el] Fix booting large kernels with STRICT_KERNEL_RWX - random: fix CRNG initialization when random.trust_cpu=1 - random: add a spinlock_t to struct batched_entropy - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock - sched/core: Check quota and period overflow at usec to nsec conversion - sched/rt: Check integer overflow at usec to nsec conversion - sched/core: Handle overflow in cpu_shares_write_u64 - [arm*] staging: vc04_services: handle kzalloc failure - [arm64] drm/msm: a5xx: fix possible object reference leak - irq_work: Do not raise an IPI when queueing work on the local CPU - [x86] thunderbolt: Take domain lock in switch sysfs attribute callbacks - [s390x] qeth: handle error from qeth_update_from_chp_desc() - USB: core: Don't unbind interfaces following device reset failure - [amd64] irq: Limit IST stack overflow check to #DB stack - [armhf] drm: etnaviv: avoid DMA API warning when importing buffers - [armhf,arm64] phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode - i40e: Able to add up to 16 MAC filters on an untrusted VF - i40e: don't allow changes to HW VLAN stripping on active port VLANs - ACPI/IORT: Reject platform device creation on NUMA node mapping failure - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure - [x86] perf/msr: Add Icelake support - [x86] perf/intel/rapl: Add Icelake support - [x86] perf/intel/cstate: Add Icelake support - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses - scsi: libsas: Do discovery on empty PHY to update PHY info - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers - [armhf,arm64] mmc_spi: add a status check for spi_sync_locked - drm/amdgpu: fix old fence check in amdgpu_fence_emit - PM / core: Propagate dev->power.wakeup_path when no callbacks - [armhf] clk: rockchip: Fix video codec clocks on rk3288 - [armhf] clk: rockchip: Make rkpwm a critical clock on rk3288 - [s390x] zcrypt: initialize variables before_use - [x86] microcode: Fix the ancient deprecated microcode loading method - [s390x] mm: silence compiler warning when compiling without CONFIG_PGSTE - [s390x] cio: fix cio_irb declaration - qmi_wwan: Add quirk for Quectel dynamic config - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR - rtlwifi: fix a potential NULL pointer dereference - mwifiex: Fix mem leak in mwifiex_tm_cmd - brcmfmac: fix missing checks for kmemdup - b43: shut up clang -Wuninitialized variable warning - brcmfmac: convert dev_init_lock mutex to completion - brcmfmac: fix WARNING during USB disconnect in case of unempty psq - brcmfmac: fix race during disconnect when USB completion is in progress - brcmfmac: fix Oops when bringing up interface during USB disconnect - [arm64] rtc: xgene: fix possible race condition - rtlwifi: fix potential NULL pointer dereference - scsi: ufs: Fix regulator load and icc-level configuration - scsi: ufs: Avoid configuring regulator with undefined voltage range - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext - [x86] uaccess, signal: Fix AC=1 bloat - [amd64] ia32: Fix ia32_restore_sigcontext() AC leak - [x86] uaccess: Fix up the fixup - chardev: add additional check for minor range overlap - [arm64] RDMA/hns: Fix bad endianess of port_pd variable - HID: core: move Usage Page concatenation to Main item - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put - cxgb3/l2t: Fix undefined behaviour - HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent - [armhf] spi: tegra114: reset controller on probe - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. - [armhf] media: wl128x: prevent two potential buffer overflows - media: gspca: Kill URBs on USB device disconnect - efifb: Omit memory map check on legacy boot - [x86] thunderbolt: property: Fix a missing check of kzalloc - [x86] thunderbolt: Fix to check the return value of kmemdup - timekeeping: Force upper bound for setting CLOCK_REALTIME - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check - virtio_console: initialize vtermno value for ports - tty: ipwireless: fix missing checks for ioremap - overflow: Fix -Wtype-limits compilation warnings - [x86] mce: Fix machine_check_poll() tests for error types - rcutorture: Fix cleanup path for invalid torture_type strings - [x86] mce: Handle varying MCA bank counts - rcuperf: Fix cleanup path for invalid perf_type strings - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown - scsi: qla4xxx: avoid freeing unallocated dma memory - scsi: lpfc: avoid uninitialized variable warning - selinux: avoid uninitialized variable warning - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies - dmaengine: tegra210-adma: use devm_clk_*() helpers - [armhf] hwrng: omap - Set default quality - [x86] thunderbolt: Fix to check return value of ida_simple_get - [x86] thunderbolt: Fix to check for kmemdup failure - drm/amd/display: fix releasing planes when exiting odm - [x86] thunderbolt: property: Fix a NULL pointer dereference - e1000e: Disable runtime PM on CNP+ - igb: Exclude device from suspend direct complete optimization - media: dvbsky: Avoid leaking dvb frontend - drm/amd/display: Fix Divide by 0 in memory calculations - drm/amd/display: Set stream->mode_changed when connectors change - scsi: ufs: fix a missing check of devm_reset_control_get - media: gspca: do not resubmit URBs when streaming has stopped - media: go7007: avoid clang frame overflow warning with KASAN - scsi: lpfc: Fix FDMI manufacturer attribute value - scsi: lpfc: Fix fc4type information for FDMI - media: saa7146: avoid high stack usage with clang - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers - [armhf] drm/omap: dsi: Fix PM for display blank with paired dss_pll calls - [armhf] spi: imx: stop buffer overflow in RX FIFO flush - spi: Fix zero length xfer bug - [armhf] ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM - drm/drv: Hold ref on parent device during drm_device lifetime - drm: Wake up next in drm_read() chain if we are forced to putback the event - [s390x] vfio-ccw: Prevent quiesce function going into an infinite loop - NFS: Fix a double unlock from nfs_match,get_client https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.48 - bonding/802.3ad: fix slave link initialization transition states - cxgb4: offload VLAN flows regardless of VLAN ethtype - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address - ipv6: Fix redirect with VRF - llc: fix skb leak in llc_build_and_send_ui_pkt() - [armhf,arm64] net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT - net-gro: fix use-after-free read in napi_gro_frags() - [armhf,arm64] net: mvneta: Fix err code path of probe - [armhf,arm64] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value - net: phy: marvell10g: report if the PHY fails to boot firmware - net: sched: don't use tc_action->order during action dump - [armhf,arm64] net: stmmac: fix reset gpio free missing - usbnet: fix kernel crash after disconnect - net/mlx5: Avoid double free in fs init error unwinding path - tipc: Avoid copying bytes beyond the supplied data - net/mlx5: Allocate root ns memory using kzalloc to match kfree - net/mlx5e: Disable rxhash when CQE compress is enabled - [armhf,arm64] net: stmmac: dma channel control register need to be init first - bnxt_en: Fix aggregation buffer leak under OOM condition. - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually - include/linux/compiler*.h: define asm_volatile_goto - compiler.h: give up __compiletime_assert_fallback() - jump_label: move 'asm goto' support test to Kconfig - tipc: fix modprobe tipc failed after switch order of device registration https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.49 - include/linux/bitops.h: sanitize rotate primitives - xhci: update bounce buffer with correct sg num - xhci: Use %zu for printing size_t type - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() - usb: xhci: avoid null pointer deref when bos field is NULL - usbip: usbip_host: fix BUG: sleeping function called from invalid context - usbip: usbip_host: fix stub_dev lock context imbalance regression - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor - USB: sisusbvga: fix oops in error path of sisusb_probe - USB: Add LPM quirk for Surface Dock GigE adapter - USB: rio500: refuse more than one device at a time - USB: rio500: fix memory leak in close after disconnect - media: usb: siano: Fix general protection fault in smsusb - media: usb: siano: Fix false-positive "uninitialized variable" warning - media: smsusb: better handle optional alignment - brcmfmac: fix NULL pointer derefence during USB disconnect - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) - tracing: Avoid memory leak in predicate_parse() - Btrfs: fix wrong ctime and mtime of a directory after log replay - Btrfs: fix race updating log root item during fsync - Btrfs: fix fsync not persisting changed attributes of a directory - Btrfs: incremental send, fix file corruption when no-holes feature is enabled - [s390x] crypto: fix gcm-aes-s390 selftest failures - [s390x] crypto: fix possible sleep during spinlock aquired - [ppc64el] KVM: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts - [ppc64el] perf: Fix MMCRA corruption by bhrb_filter - ALSA: line6: Assure canceling delayed work at disconnection - ALSA: hda/realtek - Set default power save node to 0 - [s390x] KVM: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID - drm/nouveau/i2c: Disable i2c bus access after ->fini() - [arm64] tty: serial: msm_serial: Fix XON/XOFF - memcg: make it work on sparse non-0-node systems - kernel/signal.c: trace_signal_deliver when signal_group_exit - [arm64] Fix the arm64_personality() syscall wrapper redirection - vt/fbcon: deinitialize resources in visual_init() after failed memory allocation - [arm*] staging: vc04_services: prevent integer overflow in create_pagelist() - [x86] staging: wlan-ng: fix adapter initialization failure - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM - Revert "lockd: Show pid of lockd for remote locks" - [armhf,arm64] drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY clock initialization - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz - [armhf,arm64] drm/rockchip: shutdown drm subsystem on shutdown - drm/lease: Make sure implicit planes are leased - [x86] ftrace: Do not call function graph from dynamic trampolines - [x86] ftrace: Set trampoline pages as executable - [x86] kprobes: Set instruction page as executable - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized variable warning") - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.50 - ethtool: fix potential userspace buffer overflow - Fix memory leak in sctp_process_init - ipv4: not do cache for local delivery if bc_forwarding is enabled - ipv6: fix the check before getting the cookie in rt6_get_cookie - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit - [armhf] net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query - [armhf,arm64] net: mvpp2: Use strscpy to handle stat strings - net: rds: fix memory leak in rds_ib_flush_mr_pool - net: sfp: read eeprom in maximum 16 byte increments - packet: unconditionally free po->rollover - pktgen: do not sleep with the thread lock held. - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl - rcu: locking and unlocking need to always be at least barriers - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled - fuse: fallocate: fix return with locked inode - pstore: Remove needless lock during console writes - pstore: Convert buf_lock to semaphore - pstore: Set tfm to NULL on free_buf_for_compression - pstore/ram: Run without kernel crash dump region - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume - [s390x] mm: fix address space detection in exception handling - xen-blkfront: switch kcalloc to kvcalloc for large array allocation - [ppc64el] genwqe: Prevent an integer overflow in the ioctl - test_firmware: Use correct snprintf() limit - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels - [arm64] drm/msm: fix fb references in async update - drm: add non-desktop quirk for Valve HMDs - drm: add non-desktop quirks to Sensics and OSVR headsets. - drm/amdgpu/psp: move psp version specific function pointers to early_init - drm/radeon: prefer lower reference dividers - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in - [x86] drm/i915: Fix I915_EXEC_RING_MASK - [x86] drm/i915/fbc: disable framebuffer compression on GeminiLake - [x86] drm/i915: Maintain consistent documentation subsection ordering - drm: don't block fb changes for async plane updates - [x86] drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack - TTY: serial_core, add ->install - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled - ethtool: check the return value of get_regs_len https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.51 - fs/fat/file.c: issue flush after the writeback of FAT - sysctl: return -EINVAL if val violates minmax - ipc: prevent lockup on alloc_msg and free_msg - [armhf] prevent tracing IPI_CPU_BACKTRACE - hugetlbfs: on restore reserve error path retain subpool reservation - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails - initramfs: free initrd memory if opening /initrd.image fails - mm/cma.c: fix the bitmap status to show failed allocation reason - mm: page_mkclean vs MADV_DONTNEED race - mm/cma_debug.c: fix the break condition in cma_maxchunk_get() - mm/slab.c: fix an infinite loop in leaks_show() - kernel/sys.c: prctl: fix false positive in validate_prctl_map() - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER - [x86] mfd: intel-lpss: Set the device in reset state when init - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration - [armhf] mfd: twl6040: Fix device init errors for ACCCTL register - [x86] perf/intel: Allow PEBS multi-entry in watermark mode - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change - [arm64] drm/bridge: adv7511: Fix low refresh rate selection - objtool: Don't use ignore flag for fake jumps - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks - bpf: fix undefined behavior in narrow load handling - [arm64] pwm: meson: Use the spin-lock only to protect register modifications - ntp: Allow TAI-UTC offset to be set to zero - f2fs: fix to avoid panic in do_recover_data() - f2fs: fix to avoid panic in f2fs_inplace_write_data() - f2fs: fix to avoid panic in f2fs_remove_inode_page() - f2fs: fix to do sanity check on free nid - f2fs: fix to clear dirty inode in error path of f2fs_iget() - f2fs: fix to avoid panic in dec_valid_block_count() - f2fs: fix to use inline space only if inline_xattr is enable - f2fs: fix to do sanity check on valid block count of segment - f2fs: fix to do checksum even if inode page is uptodate - percpu: remove spurious lock dependency between percpu and sched - configfs: fix possible use-after-free in configfs_register_group - [armhf,arm64] PCI: dwc: Free MSI in dw_pcie_host_init() error path - [armhf,arm64] PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi() - ovl: do not generate duplicate fsnotify events for "fake" path - mmc: mmci: Prevent polling for busy detection in IRQ context - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast - netfilter: nf_conntrack_h323: restore boundary check correctness - [mips*] Make sure dt memory regions are valid - netfilter: nf_tables: fix base chain stat rcu_dereference usage - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values - watchdog: fix compile time error of pretimeout governors - blk-mq: move cancel of requeue_work into blk_mq_release - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly - nvme-pci: unquiesce admin queue on shutdown - nvme-pci: shutdown on timeout during deletion - netfilter: nf_flow_table: check ttl value in flow offload data path - netfilter: nf_flow_table: fix netdev refcnt leak - ALSA: hda - Register irq handler after the chip initialization - nvmem: core: fix read buffer in place - [armhf,arm64] nvmem: sunxi_sid: Support SID on A83T and H5 - fuse: retrieve: cap requested size to negotiated max_write - nfsd: allow fh_want_write to be called twice - nfsd: avoid uninitialized variable warning - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING" - [armhf,arm64] iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel - [x86] net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending - [x86] PCI: Fix PCI IRQ routing table memory leak - i40e: Queues are reserved despite "Invalid argument" error - platform/chrome: cros_ec_proto: check for NULL transfer function - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 - [armhf] soc: rockchip: Set the proper PWM for rk3288 - [armhf] dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove paths - drm/amd/display: Use plane->color_space for dpp if specified - [armhf] OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it - [x86] platform: intel_pmc_ipc: adding error handling - [arm64] net: hns3: return 0 and print warning when hit duplicate MAC - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags - [x86] video: hgafb: fix potential NULL pointer dereference - block, bfq: increase idling for weight-raised queues - [arm64] PCI: xilinx: Check for __get_free_pages() failure - ice: Add missing case in print_link_msg for printing flow control - [x86] dmaengine: idma64: Use actual device for DMA transfers - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa - pwm: Fix deadlock warning when removing PWM device - [armhf] exynos: Fix undefined instruction during Exynos5422 resume - [x86] usb: typec: fusb302: Check vconn is off when we start toggling - soc: renesas: Identify R-Car M3-W ES1.3 - percpu: do not search past bitmap when allocating an area - ovl: check the capability before cred overridden - ovl: support stacked SEEK_HOLE/SEEK_DATA - [arm*] drm/vc4: fix fb references in async update - ALSA: seq: Cover unsubscribe_port() in list_mutex https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.52 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.53 - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled - HID: multitouch: handle faulty Elo touch device - HID: wacom: Don't set tool type until we're in range - HID: wacom: Don't report anything prior to the tool entering range - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary - ALSA: oxfw: allow PCM capture for Stanton SCS.1m - ALSA: hda/realtek - Update headset mode for ALC256 - ALSA: firewire-motu: fix destruction of data for isochronous resources - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() - mm/vmscan.c: fix trying to reclaim unevictable LRU page - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO - ptrace: restore smp_rmb() in __ptrace_may_access() - [armhf,arm64] iommu/arm-smmu: Avoid constant zero in TLBI writes - bcache: fix stack corruption by PRECEDING_KEY() - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() - [x86] drm/i915/sdvo: Implement proper HDMI audio support for SDVO - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var - f2fs: fix to avoid accessing xattr across the boundary - scsi: qedi: remove memset/memcpy to nfunc and use func instead (CVE-2019-15090) - scsi: qedi: remove set but not used variables 'cdev' and 'udev' - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show - scsi: lpfc: add check for loss of ndlp when sending RRQ - [arm64] mm: Inhibit huge-vmap with ptdump - nvme: fix srcu locking on error return in nvme_get_ns_from_disk - nvme: remove the ifdef around nvme_nvm_ioctl - nvme: merge nvme_ns_ioctl into nvme_ioctl - nvme: release namespace SRCU protection before performing controller ioctls - nvme: fix memory leak for power latency tolerance - [x86] platform: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table - [x86] platform: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table - scsi: bnx2fc: fix incorrect cast to u64 on shift operation - libnvdimm: Fix compilation warnings with W=1 - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts - usbnet: ipheth: fix racing condition - [armhf,arm64] KVM: Move cc/it checks under hyp's Makefile to avoid instrumentation - [x86] KVM: pmu: mask the result of rdpmc according to the width of the counters - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() - [armhf,arm64] usb: dwc2: Fix DMA cache alignment issues - [armhf,arm64] usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. - USB: usb-storage: Add new ID to ums-realtek - USB: serial: pl2303: add Allied Telesis VT-Kit3 - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode - USB: serial: option: add Telit 0x1260 and 0x1261 compositions - timekeeping: Repair ktime_get_coarse*() granularity - [x86] microcode, cpuhotplug: Add a microcode loader CPU hotplug callback - [x86] mm/KASLR: Compute the size of the vmemmap section properly - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled - drm/edid: abstract override/firmware EDID retrieval - drm: add fallback override/firmware EDID modes workaround - [armhf] rtc: pcf8523: don't return invalid date when battery is low https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.54 - ax25: fix inconsistent lock state in ax25_destroy_timer - be2net: Fix number of Rx queues used for flow hashing - [x86] hv_netvsc: Set probe mode to sync - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero - lapb: fixed leak of control-blocks. - neigh: fix use-after-free read in pneigh_get_next - net: openvswitch: do not free vport if register_netdevice() is failed. - sctp: Free cookie before we memdup a new one - tipc: purge deferredq list for each grp member in tipc_group_delete - vsock/virtio: set SOCK_DONE on peer shutdown - net/mlx5: Avoid reloading already removed devices - [armhf,arm64] net: mvpp2: prs: Fix parser range for VID filtering - [armhf,arm64] net: mvpp2: prs: Use the correct helpers when removing all VID filters - [arm*] Staging: vc04_services: Fix a couple error codes - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints - netfilter: nf_queue: fix reinject verdict handling - ipvs: Fix use-after-free in ip_vs_in - [armhf] clk: ti: clkctrl: Fix clkdm_clk handling - [ppc64el] powernv: Return for invalid IMC domain - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() - mISDN: make sure device name is NUL terminated - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor - perf/ring_buffer: Fix exposing a temporarily decreased data_head - perf/ring_buffer: Add ordering to rb->nest increment - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data - [armhf,arm64] net: stmmac: update rx tail pointer register to fix rx dma hang issue. - ACPI/PCI: PM: Add missing wakeup.flags.valid checks - [armhf] drm/etnaviv: lock MMU while dumping core - net: aquantia: tx clean budget logic error - net: aquantia: fix LRO with FCS error - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr - ALSA: hda - Force polling mode on CNL for fixing codec communication - configfs: Fix use-after-free when accessing sd->s_dentry - perf data: Fix 'strncat may truncate' build failure with recent gcc - perf namespace: Protect reading thread's namespace - [s390x] perf record: Fix s390 missing module symbol and warning for non-root users - xenbus: Avoid deadlock during suspend due to open transactions - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token list - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu - [arm64] fix syscall_fn_t type - [arm64] use the correct function type in SYSCALL_DEFINE0 - [arm64] use the correct function type for __arm64_sys_ni_syscall - net: phylink: ensure consistent phy interface mode - net: phy: dp83867: Set up RGMII TX delay - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask - scsi: scsi_dh_alua: Fix possible null-ptr-deref - scsi: libsas: delete sas port if expander discover failed - ocfs2: fix error path kobject memory leak - coredump: fix race condition between collapse_huge_page() and core dumping - Abort file_remove_privs() for non-reg. files https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.55 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.56 - tracing: Silence GCC 9 array bounds warning - objtool: Support per-function rodata sections - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls - ovl: make i_ino consistent with st_ino in more cases - ovl: detect overlapping layers - ovl: don't fail with disconnected lower NFS - ovl: fix bogus -Wmaybe-unitialized warning - [s390x] jump_label: Use "jdd" constraint on gcc9 - [s390x] ap: rework assembler functions to use unions for in/out register variables - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning - mmc: core: API to temporarily disable retuning for SDIO CRC errors - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() - mmc: core: Prevent processing SDIO IRQs when the card is suspended - scsi: ufs: Avoid runtime suspend possibly being blocked forever - [armhf,arm64] usb: chipidea: udc: workaround for endpoint conflict issue - xhci: detect USB 3.2 capable host controllers correctly - usb: xhci: Don't try to recover an endpoint if port is in error state. - IB/hfi1: Validate fault injection opcode user input - IB/hfi1: Silence txreq allocation warnings - [x86] Input: synaptics - enable SMBus on ThinkPad E480 and E580 - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD - [x86] Input: silead - add MSSL0017 to acpi_device_id - apparmor: fix PROFILE_MEDIATES for untrusted input - apparmor: enforce nullbyte at end of tag string - brcmfmac: sdio: Disable auto-tuning around commands expected to fail - brcmfmac: sdio: Don't tune while the card is off - parport: Fix mem leak in parport_register_dev_model - IB/rdmavt: Fix alloc_qpn() WARN_ON() - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value - IB/hfi1: Validate page aligned for a given virtual address - [mips*] uprobes: remove set but not used variable 'epc' - [armhf,arm64] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 - [arm64] net: hns: Fix loopback test failed at copper ports - mdesc: fix a missing-check bug in get_vdev_port_node_info() - [arm64] drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times - [arm64] drm/arm/hdlcd: Actually validate CRTC modes - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance - nvmet: fix data_len to 0 for bdev-backed write_zeroes - scsi: ufs: Check that space was properly alloced in copy_query_response - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event - hwmon: (core) add thermal sensors only if dev->of_node is present - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages - nvme: Fix u32 overflow in the number of namespace list calculation - btrfs: start readahead also in seed devices - [armhf] can: flexcan: fix timeout when set small bitrate - can: purge socket error queue on sock destruct - [ppc64el] bpf: use unsigned division instruction for 64-bit operations - [armhf] imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX - [armhf] dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values - [armhf] dts: am57xx-idk: Remove support for voltage switching for SD card - [arm64] sve: should not depend on - [arm64] ssbd: explicitly depend on - [x86] drm/vmwgfx: Use the backdoor port if the HB port is not available - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (CVE-2019-9506) - Bluetooth: Fix regression with minimum encryption key size alignment - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write - cfg80211: fix memory leak of wiphy device name - mac80211: drop robust management frames from unknown TA - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices - mac80211: handle deauthentication/disassociation from TDLS peer - nl80211: fix station_info pertid memory leak - mac80211: Do not use stack memory with scatterlist for GMAC - [x86] resctrl: Don't stop walking closids when a locksetup group is found https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.57 - perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul - perf help: Remove needless use of strncpy() - perf header: Fix unchecked usage of strncpy() - [arm64] Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS - IB/hfi1: Close PSM sdma_progress sleep window - 9p/xen: fix check for xenbus_read error in front_probe - 9p: Use a slab for allocating requests - 9p: embed fcall in req to round down buffer allocs - 9p: add a per-client fcall kmem_cache - 9p: rename p9_free_req() function - 9p: Add refcount to p9_req_t - 9p/rdma: do not disconnect on down_interruptible EAGAIN - 9p: Rename req to rreq in trans_fd - 9p: acl: fix uninitialized iattr access - 9p/rdma: remove useless check in cm_event_handler - 9p: p9dirent_read: check network-provided name length - 9p: potential NULL dereference - 9p/trans_fd: abort p9_read_work if req status changed - 9p/trans_fd: put worker reqs on destroy - net/9p: include trans_common.h to fix missing prototype warning. - qmi_wwan: Fix out-of-bounds read - [armhf,arm64] Revert "usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup" - [armhf,arm64] usb: dwc3: gadget: combine unaligned and zero flags - [armhf,arm64] usb: dwc3: gadget: track number of TRBs per request - [armhf,arm64] usb: dwc3: gadget: use num_trbs when skipping TRBs on ->dequeue() - [armhf,arm64] usb: dwc3: gadget: extract dwc3_gadget_ep_skip_trbs() - [armhf,arm64] usb: dwc3: gadget: introduce cancelled_list - [armhf,arm64] usb: dwc3: gadget: move requests to cancelled_list - [armhf,arm64] usb: dwc3: gadget: remove wait_end_transfer - [armhf,arm64] usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup - fs/proc/array.c: allow reporting eip/esp for all coredumping threads - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask - fs/binfmt_flat.c: make load_flat_shared_library() work - [armhf] clk: socfpga: stratix10: fix divider entry for the emac clocks - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn - dm log writes: make sure super sector log updates are written in order - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() - [x86] speculation: Allow guests to use SSBD even if host does not - [x86] microcode: Fix the microcode load on CPU hotplug for real - [x86] resctrl: Prevent possible overrun during bitmap operations - [x86] KVM: mmu: Allocate PAE root array when using SVM's 32-bit NPT - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O - cpu/speculation: Warn on unsupported mitigations= parameter - SUNRPC: Clean up initialisation of the struct rpc_rqst - [mips*] irqchip/mips-gic: Use the correct local interrupt map registers - eeprom: at24: fix unexpected timeout under high load - af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET - bonding: Always enable vlan tx offload - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop - net/packet: fix memory leak in packet_set_ring() - net: remove duplicate fetch in sock_getsockopt - [armhf,arm64] net: stmmac: fixed new system time seconds value calculation - [armhf,arm64] net: stmmac: set IC bit when transmitting frames with HW timestamp - sctp: change to hold sk after auth shkey is created successfully - team: Always enable vlan tx offload - tipc: change to use register_pernet_device - tipc: check msg->req data len in tipc_nl_compat_bearer_disable - tun: wake up waitqueues after IFF_UP is set - bpf: simplify definition of BPF_FIB_LOOKUP related flags - bpf: lpm_trie: check left child of last leftmost node for NULL - bpf: fix nested bpf tracepoints with per-cpu data - bpf: fix unconnected udp hooks - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err - [arm64] futex: Avoid copying out uninitialised stack in failed cmpxchg() - [arm64] bpf: use more scalable stadd over ldxr / stxr loop in xadd - futex: Update comments and docs about return values of arch futex code - RDMA: Directly cast the sockaddr union to sockaddr - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb - [armhf,arm64] usb: dwc3: Reset num_trbs after skipping - [arm64] insn: Fix ldadd instruction encoding https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.58 - Bluetooth: Fix faulty expression for minimum encryption key size check - block: Fix a NULL pointer dereference in generic_make_request() - md/raid0: Do not bypass blocking queue entered for raid0 bios - netfilter: nf_flow_table: ignore DF bit setting - netfilter: nft_flow_offload: set liberal tracking mode for tcp - netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family - ASoC: soc-pcm: BE dai needs prepare when pause release after resume - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master - [armhf,arm64] ASoC: max98090: remove 24-bit format support if RJ is 0 - [x86] CPU: Add more Icelake model numbers - ALSA: hdac: fix memory release for SST and SOF drivers - scsi: hpsa: correct ioaccel2 chaining - [x86] drm: panel-orientation-quirks: Add quirk for GPD pocket2 - [x86] drm: panel-orientation-quirks: Add quirk for GPD MicroPC - [x86] platform: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi - [x86] platform: intel-vbtn: Report switch events when event wakes device - [x86] platform: mlx-platform: Fix parent device in i2c-mux-reg device registration - i2c: pca-platform: Fix GPIO lookup code - cpuset: restore sanity to cpuset_cpus_allowed_fallback() - mm/mlock.c: change count_mm_mlocked_page_nr return type - tracing: avoid build warning with HAVE_NOP_MCOUNT - module: Fix livepatch/ftrace module text permissions race - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper() - [x86] drm/i915/dmc: protect against reading random memory - crypto: user - prevent operating on larval algorithms - crypto: cryptd - Fix skcipher instance memory leak - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages - ALSA: line6: Fix write on zero-sized buffer - ALSA: usb-audio: fix sign unintended sign extension on left shifts - [x86] ALSA: hda/realtek: Add quirks for several Clevo notebook barebones - [x86] ALSA: hda/realtek - Change front mic location for Lenovo M710q - lib/mpi: Fix karactx leak in mpi_powm - fs/userfaultfd.c: disable irqs for fault_pending and event locks - tracing/snapshot: Resize spare buffer if size changed - [armhf] dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node - drm/amd/powerplay: use hardware fan control if no powerplay fan table - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE - [armhf] drm/etnaviv: add missing failure path to destroy suballoc - [armhf] drm/imx: notify drm core before sending event during crtc disable - drm/imx: only send event on crtc disable if kept disabled - [x86] ftrace: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() - mm/vmscan.c: prevent useless kswapd loops - btrfs: Ensure replaced device doesn't have pending chunk allocation - tty: rocket: fix incorrect forward declaration of 'rp_init()' - net/smc: move unhash before release of clcsock - drm/fb-helper: generic: Don't take module ref for fbcon - f2fs: don't access node/meta inode mapping after iput - mac80211: mesh: fix missing unlock on error in table_path_del() - scsi: tcmu: fix use after free - [amd64] boot/compressed: Do not corrupt EDX on EFER.LME=1 setting - [arm64] net: hns: Fixes the missing put_device in positive leg for roce reset - ALSA: hda: Initialize power_state field properly - rds: Fix warning. - ip6: fix skb leak in ip6frag_expire_frag_queue() - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments - [arm64] net: hns: fix unsigned comparison to less than zero - bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K - netfilter: ipv6: nf_defrag: accept duplicate fragments again - [x86] KVM: degrade WARN to pr_warn_ratelimited - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC - nfsd: Fix overflow causing non-working mounts on 1 TB machines - svcrdma: Ignore source port when computing DRC hash - [mips*] Fix bounds check virt_addr_valid - [mips*] Add missing EHB in mtc0 -> mfc0 sequence. - [arm64] dmaengine: qcom: bam_dma: Fix completed descriptors count - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.59 - [x86] Input: elantech - enable middle button support on 2 ThinkPads - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() - bpf: sockmap, fix use after free from sleep in psock backlog workqueue - mac80211: mesh: fix RCU warning - mac80211: free peer keys before vif down in mesh - iwlwifi: Fix double-free problems in iwl_req_fw_callback() - can: af_can: Fix error path of can_init() - net: phy: rename Asix Electronics PHY driver - [armhf] dts: am335x phytec boards: Fix cd-gpios active level - [s390x] boot: disable address-of-packed-member warning - [x86] drm/vmwgfx: Honor the sg list segment size limitation - [x86] drm/vmwgfx: fix a warning due to missing dma_parms - [armhf] Input: imx_keypad - make sure keyboard can always wake up system - [armhf,arm64] KVM: vgic: Fix kvm_device leak in vgic_its_destroy - mac80211: only warn once on chanctx_conf being NULL - mac80211: do not start any work during reconfigure flow - bpf, devmap: Fix premature entry free on destroying map - bpf, devmap: Add missing bulk queue free - bpf, devmap: Add missing RCU read lock on flush - [amd64] bpf: fix stack layout of JITed bpf code - qmi_wwan: add support for QMAP padding in the RX path - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode - qmi_wwan: extend permitted QMAP mux_id value range - mmc: core: complete HS400 before checking status - md: fix for divide error in status_resync - bnx2x: Check if transceiver implements DDM before access - drm: return -EFAULT if copy_to_user() fails - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL - net: lio_core: fix potential sign-extension overflow on large shift - scsi: qedi: Check targetname while finding boot target information - quota: fix a problem about transfer quota - [armhf,arm64] net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() - NFS4: Only set creation opendata if O_CREAT - net :sunrpc :clnt :Fix xps refcount imbalance on the error path - fscrypt: don't set policy for a dead directory - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length - media: stv0297: fix frequency range limit - ALSA: usb-audio: Fix parse of UAC2 Extension Units - ALSA: hda/realtek - Headphone Mic can't record after S3 - block, bfq: NULL out the bic when it's no longer valid - [arm64] perf pmu: Fix uncore PMU alias list for ARM64 - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() - [x86] tls: Fix possible spectre-v1 in do_get_thread_area() - USB: serial: ftdi_sio: add ID for isodebug v1 - USB: serial: option: add support for GosunCn ME3630 RNDIS mode - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" - p54usb: Fix race between disconnect and firmware loading - usb: gadget: ether: Fix race between gether_disconnect and rx_submit - [armhf,arm64] usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() - [x86] drivers/usb/typec/tps6598x.c: fix portinfo width - [x86] drivers/usb/typec/tps6598x.c: fix 4CC cmd write - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt - HID: Add another Primax PIXART OEM mouse quirk - binder: fix memory leak in error path - carl9170: fix misuse of device driver API - [x86] VMCI: Fix integer overflow in VMCI handle arrays - staging: rtl8712: reduce stack usage, again https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.60 - Revert "e1000e: fix cyclic resets at link up with active tx" - e1000e: start network tx queue only when link is up - [x86] Input: synaptics - enable SMBUS on T480 thinkpad trackpad - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT - firmware: improve LSM/IMA security behaviour - [armhf,arm64] irqchip/gic-v3-its: Fix command queue pointer comparison bug - [armhf] clk: ti: clkctrl: Fix returning uninitialized data - [amd64,arm64] efi/bgrt: Drop BGRT status field reserved bits check - perf/core: Fix perf_sample_regs_user() mm check - [armhf] omap2: remove incorrect __init annotation - afs: Fix uninitialised spinlock afs_volume::cb_break_lock - [x86] apic: Fix integer overflow on 10 bit left shift of cpu_khz - be2net: fix link failure after ethtool offline test - ppp: mppe: Add softdep to arc4 - sis900: fix TX completion - [armhf] dts: imx6ul: fix PWM[1-4] interrupts - [armhf] pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order - dm table: don't copy from a NULL pointer in realloc_argv() - dm verity: use message limit for data block corruption message - [amd64] boot: Fix crash if kernel image crosses page table boundary - [amd64] boot: Add missing fixup_pointer() for next_early_pgt access - HID: chicony: add another quirk for PixArt mouse - HID: multitouch: Add pointstick support for ALPS Touchpad - cpu/hotplug: Fix out-of-bounds read when setting fail state - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL - genirq: Delay deactivation in free_irq() - genirq: Fix misleading synchronize_irq() documentation - genirq: Add optional hardware synchronization for shutdown - [x86] ioapic: Implement irq_get_irqchip_state() callback - [x86] irq: Handle spurious interrupt after shutdown gracefully - [x86] irq: Seperate unused system vectors from spurious entry again - [s390x] fix stfle zero padding - [s390x] qdio: (re-)initialize tiqdio list entries - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues() - regmap-irq: do not write mask register if mask_base is zero - drm/udl: introduce a macro to convert dev to udl. - drm/udl: Replace drm_dev_unref with drm_dev_put - drm/udl: move to embedding drm device inside udl device. - [i386] entry: Fix ENDPROC of common_spurious https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.61 - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path - wil6210: fix potential out-of-bounds read - ath10k: Do not send probe response template for mesh - ath9k: Check for errors when reading SREV register - ath6kl: add some bounds checking - ath10k: add peer id check in ath10k_peer_find_by_id - wil6210: fix spurious interrupts in 3-msi - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection - regmap: debugfs: Fix memory leak in regmap_debugfs_init - batman-adv: fix for leaked TVLV handler. - media: dvb: usb: fix use after free in dvb_usb_device_exit - media: marvell-ccic: fix DMA s/g desc number calculation - media: media_device_enum_links32: clean a reserved field - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries - qed: Set the doorbell address correctly - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig - af_key: fix leaks in key_pol_get_resp and dump_sp. - xfrm: Fix xfrm sel prefix length validation - fscrypt: clean up some BUG_ON()s in block encryption/decryption - perf annotate TUI browser: Do not use member from variable within its own initialization - media: mc-device.c: don't memset __user pointer contents - media: saa7164: fix remove_proc_entry warning - net: phy: Check against net_device being NULL - tua6100: Avoid build warnings. - batman-adv: Fix duplicated OGMs on NETDEV_UP - [armhf] media: wl128x: Fix some error handling in fm_v4l2_init_video_device() - [arm64] net: hns3: set ops to null when unregister ad_dev - cpupower : frequency-set -r option misses the last cpu in related cpu list - [armhf,arm64] net: stmmac: dwmac4: fix flow control issue - [armhf,arm64] net: stmmac: modify default value of tx-frames - [arm64] crypto: inside-secure - do not rely on the hardware last bit for result descriptors - [s390x] qdio: handle PENDING state for QEBSM devices - net: sfp: add mutex to prevent concurrent state checks - ipset: Fix memory accounting for hash types on resize - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode - [s390x] perf report: Fix OOM error in TUI mode on s390 - [arm64] irqchip/meson-gpio: Add support for Meson-G12A SoC - media: uvcvideo: Fix access to uninitialized fields on probe error - iommu: Fix a leak in iommu_insert_resv_region - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4 - [armhf] gpio: omap: ensure irq is enabled before wakeup - regmap: fix bulk writes on paged registers - bpf: silence warning messages in core - selinux: fix empty write to keycreate file - [x86] cpu: Add Ice Lake NNPI to Intel family - [arm64] ASoC: meson: axg-tdm: fix sample clock inversion - rcu: Force inlining of rcu_read_lock() - [x86] cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS - qed: iWARP - Fix tc for MPA ll2 connection - [arm64] net: hns3: fix for skb leak when doing selftest - block: null_blk: fix race condition for null_del_dev - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration - xfrm: fix sa selector validation - sched/core: Add __sched tag for io_schedule() - sched/fair: Fix "runnable_avg_yN_inv" not used warnings - [x86] perf/intel/uncore: Handle invalid event coding for free-running counter - [x86] atomic: Fix smp_mb__{before,after}_atomic() - perf evsel: Make perf_evsel__name() accept a NULL argument - vhost_net: disable zerocopy by default - ipoib: correcly show a VF hardware address - [x86] cacheinfo: Fix a -Wtype-limits warning - blk-iolatency: only account submitted bios - ACPICA: Clear status of GPEs on first direct enable - EDAC/sysfs: Fix memory leak when creating a csrow object - nvme: fix possible io failures when removing multipathed ns - nvme-pci: properly report state change failure in nvme_reset_work - nvme-pci: set the errno on ctrl state change error - lightnvm: pblk: fix freeing of merged pages - [arm64] Do not enable IRQs for ct_user_exit - ipsec: select crypto ciphers for xfrm_algo - ipvs: defer hook registration to avoid leaks - media: i2c: fix warning same module names - ntp: Limit TAI-UTC offset - timer_list: Guard procfs specific code - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0 - media: hdpvr: fix locking and a missing msleep - [armhf] net: stmmac: sun8i: force select external PHY when no internal one - rtlwifi: rtl8192cu: fix error handle when usb probe failed - mt7601u: do not schedule rx_tasklet when the device has been disconnected - mt7601u: fix possible memory leak when the device is disconnected - ipvs: fix tinfo memory leak in start_sync_thread - ath10k: add missing error handling - ath10k: fix PCIE device wake up failed - perf tools: Increase MAX_NR_CPUS and MAX_CACHES - [x86] ASoC: Intel: hdac_hdmi: Set ops to NULL on remove - libata: don't request sense data on !ZAC ATA devices - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch timer - xsk: Properly terminate assignment in xskq_produce_flush_desc - rslib: Fix decoding of shortened codes - rslib: Fix handling of of caller provided syndrome - ixgbe: Check DDM existence in transceiver before access - crypto: serpent - mark __serpent_setkey_sbox noinline - wil6210: drop old event after wmi_call timeout - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec - bcache: check CACHE_SET_IO_DISABLE in allocator code - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() - bcache: acquire bch_register_lock later in cached_dev_free() - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() - bcache: fix potential deadlock in cached_def_free() - [arm64] net: hns3: fix a -Wformat-nonliteral compile warning - [arm64] net: hns3: add some error checking in hclge_tm module - ath10k: destroy sdio workqueue while remove sdio module - [armhf,arm64] net: mvpp2: prs: Don't override the sign bit in SRAM parser shift - igb: clear out skb->tstamp after reading the txtime - iwlwifi: mvm: Drop large non sta frames - perf stat: Make metric event lookup more robust - perf stat: Fix group lookup for metric group - bnx2x: Prevent ptp_task to be rescheduled indefinitely - net: usb: asix: init MAC address buffers - rxrpc: Fix oops in tracepoint - bpf, libbpf, smatch: Fix potential NULL pointer dereference - bonding: validate ip header before check IPPROTO_IGMP - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants - [ppc64el] tools: bpftool: Fix json dump crash on powerpc - Bluetooth: hci_bcsp: Fix memory leak in rx_skb - Bluetooth: Add new 13d3:3491 QCA_ROME device - Bluetooth: Add new 13d3:3501 QCA_ROME device - Bluetooth: 6lowpan: search for destination address in all peers - [ppc64el] perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 - Bluetooth: Check state in l2cap_disconnect_rsp - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() - Bluetooth: validate BLE connection interval updates - gtp: fix suspicious RCU usage - gtp: fix Illegal context switch in RCU read-side critical section. - gtp: fix use-after-free in gtp_encap_destroy() - gtp: fix use-after-free in gtp_newlink() - [armel/marvell,armhf] net: mvmdio: defer probe of orion-mdio if a clock is not ready - iavf: fix dereference of null rx_buffer pointer - floppy: fix out-of-bounds read in next_valid_format - floppy: fix invalid pointer dereference in drive_name - xen: let alloc_xenballooned_pages() fail if not enough memory free - scsi: core: Fix race on creating sense cache - scsi: megaraid_sas: Fix calculation of target ID - crypto: ghash - fix unaligned memory access in ghash_setkey() - [x86] crypto: ccp - Validate the the error value used to index error messages - [arm64] crypto: sha1-ce - correct digest for empty data in finup - [arm64] crypto: sha2-ce - correct digest for empty data in finup - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm - [x86] crypto: ccp - memset structure fields to zero before reuse - [x86] crypto: ccp/gcm - use const time tag comparison. - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" - bcache: Revert "bcache: fix high CPU occupancy during journal" - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" - bcache: ignore read-ahead request failure on backing device - bcache: fix mistaken sysfs entry for io_error counter - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread - Input: alps - don't handle ALPS cs19 trackpoint-only device - [x86] Input: synaptics - whitelist Lenovo T580 SMBus intertouch - Input: alps - fix a mismatch between a condition check and its comment - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages - [arm64] tegra: Update Jetson TX1 GPU regulator timings - iwlwifi: pcie: don't service an interrupt that was masked - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices - NFSv4: Handle the special Linux file open access mode - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error - pNFS: Fix a typo in pnfs_update_layout - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE - ASoC: dapm: Adapt for debugfs API change - raid5-cache: Need to do start() part job after adding journal device - ALSA: seq: Break too long mutex context in the write loop - [x86] ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 - media: videobuf2-dma-sg: Prevent size from overflowing - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed - [arm64] tegra: Fix AGIC register range - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes. - kconfig: fix missing choice values in auto.conf - drm/nouveau/i2c: Enable i2c pads & busses during preinit - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs - dm zoned: fix zone state management race - xen/events: fix binding user event channels to cpus - 9p/xen: Add cleanup path in p9_trans_xen_init - 9p/virtio: Add cleanup path in p9_virtio_init - [x86] boot: Fix memory leak in default_get_smp_config() - [x86] perf/intel: Fix spurious NMI on fixed counter - [x86] perf/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs - [x86] perf/amd/uncore: Set the thread mask for F17h L3 PMCs - drm/edid: parse CEA blocks embedded in DisplayID - [x86] intel_th: pci: Add Ice Lake NNPI support - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() - PCI: Do not poll for PME if the device is in D3cold - [arm64] PCI: qcom: Ensure that PERST is asserted for at least 100 ms - Btrfs: fix data loss after inode eviction, renaming it, and fsync it - Btrfs: fix fsync not persisting dentry deletions due to inode evictions - Btrfs: add missing inode version, ctime and mtime updates when punching hole - IB/mlx5: Report correctly tag matching rendezvous capability - HID: wacom: generic: only switch the mode on devices with LEDs - HID: wacom: generic: Correct pad syncing - HID: wacom: correct touch resolution x/y typo - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields - coda: pass the host file in vma->vm_file on mmap - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures - xfs: fix pagecache truncation prior to reflink - xfs: flush removing page cache in xfs_reflink_remap_prep - xfs: don't overflow xattr listent buffer - xfs: rename m_inotbt_nores to m_finobt_nores - xfs: don't ever put nlink > 0 inodes on the unlinked list - xfs: reserve blocks for ifree transaction during log recovery - xfs: fix reporting supported extra file attributes for statx() - xfs: serialize unaligned dio writes against all other dio writes - xfs: abort unaligned nowait directio early - [ppc64el] watchpoint: Restore NV GPRs while returning from exception - [ppc64el] powernv/npu: Fix reference leak - [ppc64el] pseries: Fix oops in hotplug memory notifier - [arm64] mmc: sdhci-msm: fix mutex while in spinlock - eCryptfs: fix a couple type promotion bugs - [x86] intel_th: msu: Fix single mode with disabled IOMMU - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug - usb: Handle USB3 remote wakeup for LPM enabled devices correctly - blk-throttle: fix zero wait time for iops throttled group - blk-iolatency: clear use_delay when io.latency is set to zero - blkcg: update blkcg_print_stat() to handle larger outputs - [armel/marvell,armhf] net: mvmdio: allow up to four clocks to be specified for orion-mdio - dm bufio: fix deadlock with loop device https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.62 - bnx2x: Prevent load reordering in tx completion processing - [x86] hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() - igmp: fix memory leak in igmpv3_del_delrec() - ipv4: don't set IPv6 only flags to IPv4 addresses - ipv6: rt6_check should return NULL if 'from' is NULL - ipv6: Unlink sibling route in case of failure - [armhf,arm64] net: dsa: mv88e6xxx: wait after reset deactivation - net: make skb_dst_force return true when dst is refcounted - net: neigh: fix multiple neigh timer scheduling - net: openvswitch: fix csum updates for MPLS actions - net: phy: sfp: hwmon: Fix scaling of RX power - [armhf,arm64] net: stmmac: Re-work the queue selection for TSO packets - nfc: fix potential illegal memory access - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b - rxrpc: Fix send on a connected, but unbound socket - sctp: fix error handling on stream scheduler initialization - [x86] sky2: Disable MSI on ASUS P6T - tcp: be more careful in tcp_fragment() - tcp: fix tcp_set_congestion_control() use from bpf hook - tcp: Reset bytes_acked and bytes_received when disconnecting - vrf: make sure skb->data contains ip header to make routing - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn - macsec: fix use-after-free of skb during RX - macsec: fix checksumming after decryption - netrom: fix a memory leak in nr_rx_frame() - netrom: hold sock when setting skb->destructor - net_sched: unset TCQ_F_CAN_BYPASS when adding filters - sctp: not bind the socket in sctp_connect - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query - net: bridge: don't cache ether dest pointer on input - net: bridge: stp: don't cache eth dest pointer before skb pull - dma-buf: balance refcount inbalance - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc - perf/core: Fix exclusive events' grouping - perf/core: Fix race between close() and fork() - ext4: don't allow any modifications to an immutable file - ext4: enforce the immutable flag on open files - mm: add filemap_fdatawait_range_keep_errors() - jbd2: introduce jbd2_inode dirty range scoping - ext4: use jbd2_inode dirty range scoping - ext4: allow directory holes - [x86] KVM: nVMX: do not use dangling shadow VMCS after guest reset - [x86] KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested - mm: vmscan: scan anonymous pages on file refaults - net: sched: verify that q!=NULL before setting q->flags https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.63 - [x86] hvsock: fix epollout hang from race condition - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe - [x86] staging: vt6656: use meaningful error code during buffer allocation - usb: core: hub: Disable hub-initiated U1/U2 - [armhf,arm64] pinctrl: rockchip: fix leaked of_node references - drm/amd/display: Fill prescale_params->scale for RGB565 - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE - drm/amd/display: Disable ABM before destroy ABM struct - drm/amdkfd: Fix a potential memory leak - drm/amdkfd: Fix sdma queue map issue - drm/edid: Fix a missing-check bug in drm_load_edid_firmware() - PCI: Return error if cannot probe VF - [armhf,arm64] gpu: host1x: Increase maximum DMA segment size - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry - drm/crc-debugfs: Also sprinkle irqrestore over early exits - memstick: Fix error cleanup path of memstick_init - [arm64] tty: serial: msm_serial: avoid system lockup condition - serial: 8250: Fix TX interrupt handling condition - drm/amd/display: Always allocate initial connector state state - drm/virtio: Add memory barriers for capset cache. - drm/amd/display: fix compilation error - [ppc64el] pseries/mobility: prevent cpu hotplug during DT update - [armhf,arm64] drm/rockchip: Properly adjust to a true clock in adjusted_mode - [armhf] serial: imx: fix locking in set_termios() - tty: serial_core: Set port active bit in uart_port_activate - usb: gadget: Zero ffs_io_data - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs - [arm64] drm/msm: Depopulate platform on probe failure - [arm64] PCI: xilinx-nwl: Fix Multi MSI data programming - iio: iio-utils: Fix possible incorrect mask calculation - [ppc64el] cacheflush: fix variable set but not used - [ppc64el] xmon: Fix disabling tracing while in xmon - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc - mfd: core: Set fwnode for created devices - [arm64] mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk - mm/swap: fix release_pages() when releasing devmap pages - RDMA/i40iw: Set queue pair state when being queried - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE - [ppc64el] mm: Handle page table allocation failures - IB/ipoib: Add child to parent list only if device initialized - [arm64] assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS - perf stat: Fix use-after-freed pointer detected by the smatch tool - perf top: Fix potential NULL pointer dereference detected by the smatch tool - perf session: Fix potential NULL pointer dereference found by the smatch tool - perf annotate: Fix dereferencing freed memory found by the smatch tool - perf hists browser: Fix potential NULL pointer dereference found by the smatch tool - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM - [armhf] PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h - block: init flush rq ref count to 1 - f2fs: avoid out-of-range memory access - mailbox: handle failed named mailbox channel request - dlm: check if workqueues are NULL before flushing/destroying - [ppc64el] eeh: Handle hugepages in ioremap space - block/bio-integrity: fix a memory leak bug - 9p: pass the correct prototype to read_cache_page - mm/gup.c: mark undo_dev_pagemap as __maybe_unused - mm/gup.c: remove some BUG_ONs from get_gate_page() - memcg, fsnotify: no oom-kill for remote memcg charging - mm/mmu_notifier: use hlist_add_head_rcu() - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup - proc: use down_read_killable mmap_sem for /proc/pid/pagemap - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs - proc: use down_read_killable mmap_sem for /proc/pid/map_files - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() - proc: use down_read_killable mmap_sem for /proc/pid/maps - locking/lockdep: Fix lock used or unused stats error - mm: use down_read_killable for locking mmap_sem in access_remote_vm - locking/lockdep: Hide unused 'class' variable - usb: wusbcore: fix unbalanced get/put cluster_id - [x86] usb: pci-quirks: Correct AMD PLL quirk detection - btrfs: inode: Don't compress if NODATASUM or NODATACOW set - [x86] sysfb_efi: Add quirks for some devices with swapped width and height - [x86] speculation/mds: Apply more accurate check on hypervisor platform - binder: prevent transactions to context manager from its own process. - fpga-manager: altera-ps-spi: Fix build error - [x86] mei: me: add mule creek canyon (EHL) device ids - [x86] hpet: Fix division by zero in hpet_time_div() - ALSA: ac97: Fix double free of ac97_codec_device - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 - ALSA: hda - Add a conexant codec entry to let mute led work - [ppc64el] xive: Fix loop exit-condition in xive_find_target_in_mask() - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() - access: avoid the RCU grace period for the temporary subjective credentials https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.64 - [x86] hv_sock: Add support for delayed close - vsock: correct removal of socket from the list - NFS: Fix dentry revalidation on NFSv4 lookup - NFS: Refactor nfs_lookup_revalidate() - NFSv4: Fix lookup revalidate of regular files - [armhf,arm64] usb: dwc2: Disable all EP's on disconnect - [armhf,arm64] usb: dwc2: Fix disable all EP's on disconnect - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ (Closes: #904385). - binder: fix possible UAF when freeing buffer - ISDN: hfcsusb: checking idx of ep configuration - media: au0828: fix null dereference in error path - ath10k: Change the warning message string - media: cpia2_usb: first wake up, then free in disconnect - media: pvrusb2: use a different format for warnings - NFS: Cleanup if nfs_match_client is interrupted - media: radio-raremono: change devm_k*alloc to k*alloc - [x86] iommu/vt-d: Don't queue_iova() if there is no flush queue - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop (CVE-2019-3900) - vhost: vsock: add weight support - vhost: scsi: add weight support (CVE-2019-3900) - sched/fair: Don't free p->numa_faults with concurrent readers - sched/fair: Use RCU accessors consistently for ->numa_group - /proc//cmdline: remove all the special cases - /proc//cmdline: add back the setproctitle() special case - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl - Fix allyesconfig output. - ceph: hold i_ceph_lock when removing caps for freeing inode - block, scsi: Change the preempt-only flag into a counter - scsi: core: Avoid that a kernel warning appears during system resume - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.65 - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200 - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend - ftrace: Enable trampoline when rec count returns back to one - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset - [arm64] dts: rockchip: fix isp iommu clocks and power domain - kernel/module.c: Only return -EEXIST for modules that have finished loading - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1 - fs/adfs: super: fix use-after-free bug - btrfs: fix minimum number of chunk errors for DUP - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit() - cifs: Fix a race condition with cifs_echo_request - ceph: fix improper use of smp_mb__before_atomic() - ceph: return -ERANGE if virtual xattr value didn't fit in buffer - ACPI: blacklist: fix clang warning for unused DMI table - [s390x] scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized - perf version: Fix segfault due to missing OPT_END() - [x86] kvm: avoid constant-conversion warning - ACPI: fix false-positive -Wuninitialized warning - be2net: Signal that the device cannot transmit during reconfiguration - [x86] apic: Silence -Wtype-limits compiler warnings - mm/cma.c: fail if fixed declaration can't be honored - lib/test_overflow.c: avoid tainting the kernel and fix wrap size - lib/test_string.c: avoid masking memset16/32/64 failures - coda: add error handling for fget - coda: fix build using bare-metal toolchain - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings - ipc/mqueue.c: only perform resource calculation if user valid - [x86] xen/pv: Fix a boot up hang revealed by int3 self test - [x86] kvm: Don't call kvm_spurious_fault() from .fixup - [x86] paravirt: Fix callee-saved function ELF sizes - [x86] boot: Remove multiple copy of static function sanitize_boot_params() - drm/nouveau: fix memory leak in nouveau_conn_reset() - kconfig: Clear "written" flag to avoid data loss - Btrfs: fix incremental send failure after deduplication - Btrfs: fix race leading to fs corruption after transaction abort - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC - [arm64] mmc: meson-mx-sdio: Fix misuse of GENMASK macro - gpiolib: fix incorrect IRQ requesting of an active-low lineevent - IB/hfi1: Fix Spectre v1 vulnerability - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly - selinux: fix memory leak in policydb_init() - ALSA: hda: Fix 1-minute detection delay when i915 module is not available (Closes: #931507) - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker - [s390x] dasd: fix endless loop after read unit address configuration - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier - [arm64] compat: Allow single-byte watchpoints on all addresses - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} - nbd: replace kill_bdev() with __invalidate_device() again - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() - IB/mlx5: Fix unreg_umr to ignore the mkey state - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache - IB/mlx5: Fix clean_mr() to work in the expected order - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification - IB/hfi1: Check for error on call to alloc_rsm_map_table - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping - eeprom: at24: make spd world-readable again - objtool: Support GCC 9 cold subfunction naming scheme - gcc-9: properly declare the {pv,hv}clock_page storage - [x86] vdso: Prevent segfaults due to hoisted vclock reads - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.66 - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure - gcc-9: don't warn about uninitialized variable - driver core: Establish order of operations for device_add and device_del via bitflag - drivers/base: Introduce kill_device() - libnvdimm/bus: Prevent duplicate device_unregister() calls - libnvdimm/region: Register badblocks before namespaces - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock - HID: wacom: fix bit shift for Cintiq Companion 2 - HID: Add quirk for HP X1200 PIXART OEM mouse - IB: directly cast the sockaddr union to aockaddr - atm: iphase: Fix Spectre v1 vulnerability - bnx2x: Disable multi-cos feature. - ife: error out when nla attributes are empty - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 - ip6_tunnel: fix possible use-after-free on xmit - ipip: validate header length in ipip_tunnel_xmit - [armhf,arm64] mvpp2: fix panic on module removal - [armhf,arm64] mvpp2: refactor MTU change code - net: bridge: delete local fdb on device init failure - net: bridge: mcast: don't delete permanent entries when fast leave is enabled - net: fix ifindex collision during namespace removal - net/mlx5e: always initialize frag->last_in_page - net/mlx5: Use reversed order when unregister devices - net: phylink: Fix flow control for fixed-link - net: sched: Fix a possible null-pointer dereference in dequeue_func() - net sched: update vlan action for batched events operations - net: sched: use temporary variable for actions indexes - net/smc: do not schedule tx_work in SMC_CLOSED state - tipc: compat: allow tipc commands without arguments - tun: mark small packets as owned by the tap sock - net/mlx5: Fix modify_cq_in alignment - net/mlx5e: Prevent encap flow counter update async to user query - r8169: don't use MSI before RTL8168d - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling - cgroup: Call cgroup_release() before __exit_signal() - cgroup: Implement css_task_iter_skip() - cgroup: Include dying leaders with live threads in PROCS iterations - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed - cgroup: Fix css_task_iter_advance_css_set() cset skip condition - [arm*] spi: bcm2835: Fix 3-wire mode if DMA is enabled https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.67 - [x86] crypto: ccp - Fix oops by properly managing allocated structures - [x86] crypto: ccp - Add support for valid authsize values less than 16 - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext - usb: usbfs: fix double-free of usb memory upon submiturb error - usb: iowarrior: fix deadlock on disconnect - sound: fix a memory leak bug - [arm64,mips*/octeon] mmc: cavium: Set the correct dma max segment size for mmc_host - [arm64,mips*/octeon] mmc: cavium: Add the missing dma unmap when the dma has finished. - loop: set PF_MEMALLOC_NOIO for the worker thread - Input: usbtouchscreen - initialize PM mutex before using it - [x86] Input: elantech - enable SMBus on new (2018+) systems - [x86] Input: synaptics - enable RMI mode for HP Spectre X360 - [x86] mm: Check for pfn instead of page in vmalloc_sync_one() - [x86] mm: Sync also unmappings in vmalloc_sync_all() - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() - [s390x] perf annotate: Fix s390 gap between kernel end and module start - perf db-export: Fix thread__exec_comm() - [s390x] perf record: Fix module size on s390 - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS - gfs2: gfs2_walk_metadata fix - usb: yurex: Fix use-after-free in yurex_delete - [x86] usb: typec: tcpm: free log buf memory when remove debug file - [x86] usb: typec: tcpm: remove tcpm dir if no children - [x86] usb: typec: tcpm: Add NULL check before dereferencing config - [x86] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests - can: peak_usb: fix potential double kfree_skb() - netfilter: nfnetlink: avoid deadlock due to synchronous request_module - [s390x] vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn - netfilter: Fix rpfilter dropping vrf packets by mistake - netfilter: conntrack: always store window size un-scaled - netfilter: nft_hash: fix symhash with modulus one - drm/amd/display: Wait for backlight programming completion in set backlight level - drm/amd/display: use encoder's engine id to find matched free audio device - drm/amd/display: Fix dc_create failure handling and 666 color depths - drm/amd/display: Only enable audio if speaker allocation exists - drm/amd/display: Increase size of audios array - [x86] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN - mac80211: don't warn about CW params when not using them - allocate_flower_entry: should check for null deref - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 - drm: silence variable 'conn' set but not used - [s390x] qdio: add sanity checks to the fast-requeue path - ALSA: compress: Fix regression on compressed capture streams - ALSA: compress: Prevent bypasses of set_params - ALSA: compress: Don't allow paritial drain operations on capture streams - ALSA: compress: Be more restrictive about when a drain is allowed - perf tools: Fix proper buffer size for feature processing - perf probe: Avoid calling freeing routine multiple times for same pointer - drbd: dynamically allocate shash descriptor - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() - nvme: fix multipath crash when ANA is deactivated - scsi: megaraid_sas: fix panic on loading firmware crashdump - [ppc64el] scsi: ibmvfc: fix WARN_ON during event pool release - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG - test_firmware: fix a memory leak bug - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop - perf/core: Fix creating kernel counters for PMUs that override event->cpu - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value - HID: sony: Fix race condition between rumble and device remove. - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset - ALSA: usb-audio: fix a memory leak bug - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices - hwmon: (nct7802) Fix wrong detection of in4 presence - [x86] drm/i915: Fix wrong escape clock divisor init for GLK - ALSA: firewire: fix a memory leak bug - ALSA: hiface: fix multiple memory leak bugs - ALSA: hda - Don't override global PCM hw info flag - [x86] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) - mac80211: don't WARN on short WMM parameters from AP - dax: dax_layout_busy_page() should not unmap cow pages - SMB3: Fix deadlock in validate negotiate hits reconnect - smb3: send CAP_DFS capability during session setup - NFSv4: Fix an Oops in nfs4_do_setattr - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU - mwifiex: fix 802.11n/WPA detection - iwlwifi: don't unmap as page memory that was mapped as single - iwlwifi: mvm: fix an out-of-bound access - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Uwe Kleine-König ] * [armhf] Add support for all i.MX6 variants. * rtc-s35390a: backport fix to make hwclock able to read the time (Closes: #932845) . [ Ben Hutchings ] * [rt] Update to 4.19.59-rt24: - Fix build failure after "genirq: Prevent use-after-free and work list corruption": + Update "genirq: Do not invoke the affinity callback via a workqueue on RT" + kthread: add a global worker thread. + genirq: Do not invoke the affinity callback via a workqueue on RT + genirq: Handle missing work_struct in irq_set_affinity_notifier() - Update "irqwork: push most work into softirq context" to resolve conflict with "irq_work: Do not raise an IPI when queueing work on the local CPU" - Drop "random: avoid preempt_disable()ed section" - arm: imx6: cpuidle: Use raw_spinlock_t - rcu: Don't allow to change rcu_normal_after_boot on RT - sched/core: Drop a preempt_disable_rt() statement - timers: Redo the notification of canceling timers on -RT - Fix futex regression in 4.19.21: + Revert "futex: Ensure lock/unlock symetry versus pi_lock and hash bucket lock" + Revert "futex: Fix bug on when a requeued RT task times out" + Revert "rtmutex: Handle the various new futex race conditions" + Revert "futex: workaround migrate_disable/enable in different context" + futex: Make the futex_hash_bucket lock raw + futex: Delay deallocation of pi_state - mm/zswap: Do not disable preemption in zswap_frontswap_store() * Bump ABI to 6 linux (4.19.37-6) unstable; urgency=high . [ John Paul Adrian Glaubitz ] * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap . [ Salvatore Bonaccorso ] * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux (4.19.37-5+deb10u2) buster-security; urgency=high . [ Romain Perier ] * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233) * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817) * nfc: Ensure presence of required attributes in the deactivate_target handler (CVE-2019-12984) * binder: fix race between munmap() and direct reclaim (CVE-2019-1999) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: switch IP ID generator to siphash (CVE-2019-10638) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) . [ Salvatore Bonaccorso ] * [x86] cpufeatures: Carve out CQM features retrieval * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) * [amd64] entry: Use JMP instead of JMPQ * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * Documentation: Add section about CPU vulnerabilities for Spectre * Documentation: Add swapgs description to the Spectre v1 documentation . [ Ben Hutchings ] * [x86] cpufeatures: Avoid ABI change for swapgs mitigations: - Move swapgs feature bits to existing scattered words - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered features word" * inet: Avoid ABI change for IP ID hash change linux (4.19.37-5+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports; no further changes required . linux (4.19.37-5+deb10u2) buster-security; urgency=high . [ Romain Perier ] * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233) * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817) * nfc: Ensure presence of required attributes in the deactivate_target handler (CVE-2019-12984) * binder: fix race between munmap() and direct reclaim (CVE-2019-1999) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: switch IP ID generator to siphash (CVE-2019-10638) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) . [ Salvatore Bonaccorso ] * [x86] cpufeatures: Carve out CQM features retrieval * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) * [amd64] entry: Use JMP instead of JMPQ * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * Documentation: Add section about CPU vulnerabilities for Spectre * Documentation: Add swapgs description to the Spectre v1 documentation . [ Ben Hutchings ] * [x86] cpufeatures: Avoid ABI change for swapgs mitigations: - Move swapgs feature bits to existing scattered words - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered features word" * inet: Avoid ABI change for IP ID hash change . linux (4.19.37-5+deb10u1) buster-security; urgency=high . * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) . linux (4.19.37-5) unstable; urgency=medium . [ Romain Perier ] * [sparc64] Fix device naming inconsistency between sunhv_console and sunhv_reg (Closes: #926539) . [ Ben Hutchings ] * tcp: Avoid ABI change for DoS fixes (Closes: #930743) * Add ABI reference for 4.19.0-5 linux (4.19.37-5+deb10u1) buster-security; urgency=high . * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) linux-latest (105+deb10u1) buster; urgency=medium . * Update to 4.19.0-6 linux-signed-amd64 (4.19.67+2) buster; urgency=medium . * Sign kernel from linux 4.19.67-2 . [ Salvatore Bonaccorso ] * dm: disable DISCARD if the underlying storage no longer supports it (Closes: #934331) * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (CVE-2019-15538) . [ Ben Hutchings ] * KVM: Ignore ABI changes * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) * [ppc64el] Avoid ABI change for disabling TM * netfilter: conntrack: Use consistent ct id hash calculation (fixes regression in 4.19.44) . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-amd64 (4.19.67+1) buster; urgency=medium . * Sign kernel from linux 4.19.67-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38 - netfilter: nft_compat: use refcnt_t type for nft_xt reference count - netfilter: nft_compat: make lists per netns - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nft_compat: destroy function must not have side effects - netfilter: nf_tables: warn when expr implements only one of activate/deactivate - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nft_compat: don't use refcount_inc on newly allocated entry - netfilter: nft_compat: use .release_ops and remove list of extension - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - net/ibmvnic: Fix RTNL deadlock during device reset - net: mvpp2: fix validate for PPv2.1 - ext4: fix some error pointer dereferences - tipc: handle the err returned from cmd header function - loop: do not print warn message if partition scan is successful - [armhf,arm64] drm/rockchip: fix for mailbox read validation. - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock - ipvs: fix warning on unused variable - [ppc64el] vdso32: fix CLOCK_MONOTONIC on PPC64 - [armhf,arm64] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new DSA framework - cifs: fix memory leak in SMB2_read - cifs: do not attempt cifs operation on smb2+ rename error - tracing: Fix a memory leak by early error exit in trace_pid_write() - zram: pass down the bvec we need to read into in the work struct - trace: Fix preempt_enable_no_resched() abuse - IB/rdmavt: Fix frwr memory registration - RDMA/mlx5: Do not allow the user to write to the clock page - sched/numa: Fix a possible divide-by-zero - ceph: only use d_name directly when parent is locked - ceph: ensure d_name stability in ceph_dentry_hash() - ceph: fix ci->i_head_snapc leak - nfsd: Don't release the callback slot unless it was actually held - sunrpc: don't mark uninitialised items as VALID. - [x86] perf/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters - Input: synaptics-rmi4 - write config register values to the right offset - [armhf] 8857/1: efi: enable CP15 DMB instructions before cleaning the cache - [ppc64el] mm/radix: Make Radix require HUGETLB_PAGE - [arm*] drm/vc4: Fix memory leak during gpu reset. - [x86] Revert "drm/i915/fbdev: Actually configure untiled displays" - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice - slip: make slhc_free() silently accept an error pointer - [x86] intel_th: gth: Fix an off-by-one in output unassigning - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference - workqueue: Try to catch flush_work() without INIT_WORK(). - sched/deadline: Correctly handle active 0-lag timers - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON - fm10k: Fix a potential NULL pointer dereference - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable - tipc: check link name with right length in tipc_nl_compat_link_set - net: netrom: Fix error cleanup path of nr_proto_init - net/rds: Check address length before reading address family - rxrpc: fix race condition in rxrpc_input_packet() - [x86] retpolines: Raise limit for generating indirect calls from switch-case - [x86] retpolines: Disable switch jump tables when retpolines are enabled - mm: Fix warning in insert_pfn() - [x86] fpu: Don't export __kernel_fpu_{begin,end}() - ipv4: add sanity checks in ipv4_link_failure() - ipv4: set the tcp_min_rtt_wlen range from 0 to one day - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: exchange of 8K and 1M pool - net/rose: fix unbound loop in rose_loopback_timer() - [armhf,arm64] net: stmmac: move stmmac_check_ether_addr() to driver probe - team: fix possible recursive locking when add slaves - [arm64] net: hns: Fix WARNING when hns modules installed - net/mlx5e: Fix the max MTU check in case of XDP - net/mlx5e: Fix use-after-free after xdp_return_frame https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.39 - selinux: use kernel linux/socket.h for genheaders and mdp - Revert "ACPICA: Clear status of GPEs before enabling them" - [arm*] dts: bcm283x: Fix hdmi hpd gpio pull - [s390x] limit brk randomization to 32MB - net: ieee802154: fix a potential NULL pointer dereference - ieee802154: hwsim: propagate genlmsg_reply return code - [armhf,arm64] net: stmmac: don't set own bit too early for jumbo frames - qlcnic: Avoid potential NULL pointer dereference - xsk: fix umem memory leak on cleanup - netfilter: nft_set_rbtree: check for inactive element after flag mismatch - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies - netfilter: ip6t_srh: fix NULL pointer dereferences - [s390x] qeth: fix race when initializing the IP address table - [armhf] imx51: fix a leaked reference by adding missing of_node_put - [arm64] KVM: Reset the PMU in preemptible context - [armhf,arm64] KVM: vgic-its: Take the srcu lock when writing to guest memory - [armhf,arm64] KVM: vgic-its: Take the srcu lock when parsing the memslots - [x86] usb: dwc3: pci: add support for Comet Lake PCH ID - usb: gadget: net2280: Fix overrun of OUT messages - usb: gadget: net2280: Fix net2280_dequeue() - [x86] i2c: i801: Add support for Intel Comet Lake - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference - staging: rtl8712: uninitialized memory in read_bbreg_hdl() - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc - [arm64] net: macb: Add null check for PCLK and HCLK - net/sched: don't dereference a->goto_chain to read the chain index - [armhf] dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi - [armhf,arm64] drm/tegra: hub: Fix dereference before check - NFS: Fix a typo in nfs_init_timeout_values() - drm: Fix drm_release() and device unplug - [arm64] drm/meson: Fix invalid pointer in meson_drv_unbind() - [arm64] drm/meson: Uninstall IRQ handler - scsi: mpt3sas: Fix kernel panic during expander reset - scsi: aacraid: Insure we don't access PCIe space during AER/EEH - scsi: qla4xxx: fix a potential NULL pointer dereference - leds: trigger: netdev: fix refcnt leak on interface rename - [x86] realmode: Don't leak the trampoline kernel address - usb: u132-hcd: fix resource leak - ceph: fix use-after-free on symlink traversal - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi- element RSCN - [x86] mm: Don't exceed the valid physical address space - libata: fix using DMA buffers on stack - gpio: of: Fix of_gpiochip_add() error path - nvme-multipath: relax ANA state check - perf machine: Update kernel map address and re-order properly - [x86] iommu/amd: Reserve exclusion range in iova-domain - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK - leds: trigger: netdev: use memcpy in device_name_store https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.40 - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation - ipv6: A few fixes on dereferencing rt->from - ipv6: fix races in ip6_dst_destroy() - ipv6/flowlabel: wait rcu grace period before put_pid() - ipv6: invert flowlabel sharing check in process and user mode - l2ip: fix possible use-after-free - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() - [armhf] net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc - net: phy: marvell: Fix buffer overrun with stats counters - rxrpc: Fix net namespace cleanup - sctp: avoid running the sctp state machine recursively - packet: validate msg_namelen in send directly - bnxt_en: Improve multicast address setup logic. - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). - [x86] KVM: Whitelist port 0x7e for pre-incrementing %rip - [x86] KVM: nVMX: Fix size checks in vmx_set_nested_state - ALSA: line6: use dynamic buffers - ath10k: Drop WARN_ON()s that always trigger during system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.41 - iwlwifi: fix driver operation for 5350 - mwifiex: Make resume actually do something useful again on SDIO cards - mac80211: don't attempt to rename ERR_PTR() debugfs dirs - [armhf] i2c: imx: correct the method of getting private data in notifier_call - i2c: Remove unnecessary call to irq_find_mapping - i2c: Clear client->irq in i2c_device_remove - i2c: Allow recovery of the initial IRQ by an I2C client device. - i2c: Prevent runtime suspend of adapter when Host Notify is required - [x86] ALSA: hda/realtek - Add new Dell platform for headset mode - [x86] ALSA: hda/realtek - Fixed Dell AIO speaker noise - [x86] ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR - USB: yurex: Fix protection fault after device removal - USB: w1 ds2490: Fix bug caused by improper use of altsetting array - USB: dummy-hcd: Fix failure to give back unlinked URBs - usb: usbip: fix isoc packet num validation in get_pipe - USB: core: Fix unterminated string returned by usb_string() - USB: core: Fix bug caused by duplicate interface PM usage counter - nvme-loop: init nvmet_ctrl fatal_err_work when allocate - [arm64] dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay - HID: logitech: check the return value of create_singlethread_workqueue - HID: debug: fix race condition with between rdesc_show() and device removal - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured - batman-adv: Reduce claim hash refcnt only for removed entry - batman-adv: Reduce tt_local hash refcnt only for removed entry - batman-adv: Reduce tt_global hash refcnt only for removed entry - batman-adv: fix warning in function batadv_v_elp_get_throughput - [armhf] dts: rockchip: Fix gpu opp node names for rk3288 - [arm64] reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev - igb: Fix WARN_ONCE on runtime suspend - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands - bonding: show full hw address in sysfs for slave entries - [armhf,arm64] net: stmmac: use correct DMA buffer size in the RX descriptor - [armhf,arm64] net: stmmac: ratelimit RX error logs - [armhf,arm64] net: stmmac: don't stop NAPI processing when dropping a packet - [armhf,arm64] net: stmmac: don't overwrite discard_frame status - [armhf,arm64] net: stmmac: fix dropping of multi-descriptor RX frames - [armhf,arm64] net: stmmac: don't log oversized frames - jffs2: fix use-after-free on symlink traversal - debugfs: fix use-after-free on symlink traversal - [armhf] mfd: twl-core: Disable IRQ while suspended - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx - HID: input: add mapping for Assistant key - vfio/pci: use correct format characters - scsi: core: add new RDAC LENOVO/DE_Series device - [x86] scsi: storvsc: Fix calculation of sub-channel count - [arm64] fix wrong check of on_sdei_stack in nmi context - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver - [arm64] net: hns: Fix probabilistic memory overwrite when HNS driver initialized - [arm64] net: hns: fix ICMP6 neighbor solicitation messages discard problem - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled - libcxgb: fix incorrect ppmax calculation - [x86] KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow - hugetlbfs: fix memory leak for resv_map - fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock - [armel] orion: don't use using 64-bit DMA masks - block: pass no-op callback to INIT_WORK(). - [x86] perf/amd: Update generic hardware cache events for Family 17h - Bluetooth: btusb: request wake pin with NOAUTOEN - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state - [arm64] clk: qcom: Add missing freq for usb30_master_clk on 8998 - scsi: RDMA/srpt: Fix a credit leak for aborted commands - [x86] ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" - [x86] platform: intel_pmc_core: Fix PCH IP name - [x86] platform: intel_pmc_core: Handle CFL regmap properly - IB/core: Unregister notifier before freeing MAD security - IB/core: Fix potential memory leak while creating MAD agents - IB/core: Destroy QP if XRC QP fails - selinux: avoid silent denials in permissive mode under RCU walk - selinux: never allow relabeling on context mounts - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode - [ppc64el] mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search - [x86] mce: Improve error message when kernel cannot recover, p2 - [x86] clk: Add system specific quirk to mark clocks as critical - [x86] mm/KASLR: Fix the size of the direct mapping section - [x86] mm: Fix a crash with kmemleak_scan() - [x86] mm/tlb: Revert "x86/mm: Align TLB invalidation info" - media: v4l2: i2c: ov7670: Fix PLL bypass register values https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.42 - [armhf,arm64] net: stmmac: Use bfsize1 in ndesc_init_rx_desc - [x86] Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() - ASoC: hdmi-codec: fix S/PDIF DAI - ASoC:soc-pcm:fix a codec fixup issue in TDM case - [x86] ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform - [arm64] clk: meson-gxbb: round the vdec dividers to closest - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol - [armhf] drm/omap: hdmi4_cec: Fix CEC clock handling for PM - IB/hfi1: Eliminate opcode tests on mr deref - IB/hfi1: Fix the allocation of RSM table - [x86] perf/intel: Fix handling of wakeup_events for multi-entry PEBS - [x86] perf/intel: Initialize TFA MSR - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() - drm/amd/display: fix cursor black issue - objtool: Add rewind_stack_do_exit() to the noreturn list - slab: fix a crash by reading /proc/slab_allocators - [armhf,arm64] drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind - virtio_pci: fix a NULL pointer reference in vp_del_vqs - [x86] RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove - [arm64] RDMA/hns: Fix bug that caused srq creation to fail - scsi: csiostor: fix missing data copy in csio_scsi_err_handler() - [x86] ASoC: Intel: kbl: fix wrong number of channels - virtio-blk: limit number of hw queues by nr_cpu_ids - nvme-fc: correct csn initialization and increments on error - [x86] platform: pmc_atom: Drop __initconst on dmi table - perf/core: Fix perf_event_disable_inatomic() race - [x86] iommu/amd: Set exclusion range correctly - genirq: Prevent use-after-free and work list corruption - usb: dwc3: Fix default lpm_nyet_threshold value - USB: serial: f81232: fix interrupt worker not stop - USB: cdc-acm: fix unthrottle races - usb-storage: Set virt_boundary_mask to avoid SG overflows - [x86] intel_th: pci: Add Comet Lake support - [arm64] cpufreq: armada-37xx: fix frequency calculation for opp - scsi: lpfc: change snprintf to scnprintf for possible overflow - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines - scsi: qla2xxx: Fix device staying in blocked state - UAS: fix alignment of scatter/gather segments - [x86] ASoC: Intel: avoid Oops if DMA setup fails - locking/futex: Allow low-level atomic operations to return -EAGAIN - [arm64] futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.43 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44 - bfq: update internal depth state when queue depth changes - [x86] platform: sony-laptop: Fix unintentional fall-through - [x86] platform: thinkpad_acpi: Disable Bluetooth for some machines - [x86] platform: dell-laptop: fix rfkill functionality - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails - kernfs: fix barrier usage in __kernfs_new_node() - [x86] virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace - USB: serial: fix unthrottle races - acpi/nfit: Always dump _DSM output payload - libnvdimm/namespace: Fix a potential NULL pointer dereference - HID: input: add mapping for Expose/Overview key - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys - HID: input: add mapping for "Toggle Display" key - libnvdimm/btt: Fix a kmemdup failure check - [s390x] dasd: Fix capacity calculation for large volumes - mac80211: fix unaligned access in mesh table hash function - mac80211: Increase MAX_MSG_LEN - cfg80211: Handle WMM rules in regulatory domain intersection - mac80211: fix memory accounting with A-MSDU aggregation - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands - libnvdimm/pmem: fix a possible OOB access when read and write pmem - [s390x] 3270: fix lockdep false positive on view->lock - drm/amd/display: extending AUX SW Timeout - mISDN: Check address length before reading address family - vxge: fix return of a free'd memblock on a failed dma mapping - qede: fix write to free'd pointer error and double free of ptp - afs: Unlock pages for __pagevec_release() - drm/amd/display: If one stream full updates, full update all planes - [s390x] pkey: add one more argument space for debug feature entry - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T - [x86] KVM: fix spectrev1 gadgets - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in tracing - tools lib traceevent: Fix missing equality check for strcmp - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash - scsi: aic7xxx: fix EISA support - mm: fix inactive list balancing between NUMA nodes and cgroups - init: initialize jump labels before command line option parsing - ipvs: do not schedule icmp errors from tunnels - netfilter: ctnetlink: don't use conntrack/expect object addresses as id - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook() - [s390x] ctcm: fix ctcm_new_device error return code - [armhf,arm64] drm/sun4i: Set device driver data at bind time for use in unbind - [armhf,arm64] drm/sun4i: Fix component unbinding and component master deletion - netfilter: fix nf_l4proto_log_invalid to log invalid packets - [armhf] gpu: ipu-v3: dp: fix CSC handling - [armhf] drm/imx: don't skip DP channel disable for background plane - [armhf,arm64] drm/sun4i: Unbind components before releasing DRM and memory - Input: synaptics-rmi4 - fix possible double free - [arm64] RDMA/hns: Bugfix for mapping user db - mm/memory_hotplug.c: drop memory device reference after find_memory_block() - [ppc64el] smp: Fix NMI IPI timeout - [ppc64el] smp: Fix NMI IPI xmon timeout - [armhf,arm64] net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode - mm/memory.c: fix modifying of page protection by insert_pfn() - usb: typec: Fix unchecked return value - netfilter: nf_tables: use-after-free in dynamic operations - netfilter: nf_tables: add missing ->release_ops() in error path of newrule() (Closes: #934168) - net: fec: manage ahb clock in runtime pm - net: strparser: partially revert "strparser: Call skb_unclone conditionally" - NFC: nci: Add some bounds checking in nci_hci_cmd_received() - nfc: nci: Potential off by one in ->pipes[] array - [x86] kprobes: Avoid kretprobe recursion bug - mwl8k: Fix rate_idx underflow - rtlwifi: rtl8723ae: Fix missing break in switch statement - bonding: fix arp_validate toggling in active-backup mode - bridge: Fix error path for kobject_init_and_add() - ipv4: Fix raw socket lookup for local traffic - net: dsa: Fix error cleanup path in dsa_init_module - [armhf] net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering - [arm64] net: macb: Change interrupt and napi enable order in open - packet: Fix error path in packet_init - selinux: do not report error on connect(AF_UNSPEC) - vlan: disable SIOCSHWTSTAMP in container - vrf: sit mtu should not be updated when vrf netdev is the link - tuntap: fix dividing by zero in ebpf queue selection - tuntap: synchronize through tfiles array instead of tun->numqueues - isdn: bas_gigaset: use usb_fill_int_urb() properly - tipc: fix hanging clients using poll with EPOLLOUT flag - [ppc64el] book3s/64: check for NULL pointer in pgd_alloc() - [ppc64el] powernv/idle: Restore IAMR after idle - [x86] PCI: hv: Fix a memory leak in hv_eject_device_work() - [x86] PCI: hv: Add hv_pci_remove_slots() when we unload the driver - [x86] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.45 - locking/rwsem: Prevent decrement of reader count before increment - [x86] speculation/mds: Revert CPU buffer clear on double fault exit - [x86] speculation/mds: Improve CPU buffer clear documentation - objtool: Fix function fallthrough detection - [arm64] dts: rockchip: Disable DCMDs on RK3399's eMMC controller. - [armhf] dts: exynos: Fix interrupt for shared EINTs on Exynos5260 - [armhf] dts: exynos: Fix audio (microphone) routing on Odroid XU3 - [arm64] mmc: sdhci-of-arasan: Add DTS property to disable DCMDs. - [armhf] exynos: Fix a leaked reference by adding missing of_node_put - [armhf] power: supply: axp288_charger: Fix unchecked return value - [armhf,arm64] power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the blacklist - [arm64] mmap: Ensure file offset is treated as unsigned - [arm64] arch_timer: Ensure counter register reads occur with seqlock held - [arm64] compat: Reduce address limit - [arm64] Clear OSDLR_EL1 on CPU boot - [arm64] Save and restore OSDLR_EL1 across suspend/resume - [x96] sched: Save [ER]FLAGS on context switch - crypto: salsa20 - don't access already-freed walk.iv - crypto: chacha20poly1305 - set cra_name correctly - [x86] crypto: ccp - Do not free psp_master when PLATFORM_INIT fails - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode - crypto: skcipher - don't WARN on unprocessed data after slow walk step - crypto: crct10dif-generic - fix use via crypto_shash_digest() - [x86] crypto: crct10dif-pcl - fix use via crypto_shash_digest() - [arm64] crypto: gcm-aes-ce - fix no-NEON fallback code - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" - [armhf,arm64] crypto: aes-neonbs - don't access already-freed walk.iv - mmc: core: Fix tag set memory leak - ALSA: line6: toneport: Fix broken usage of timer for delayed execution - ALSA: usb-audio: Fix a memory leak bug - ALSA: hda/hdmi - Read the pin sense from register when repolling - ALSA: hda/hdmi - Consider eld_valid when reporting jack event - ALSA: hda/realtek - EAPD turn on later - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) - [armhf,arm64] ASoC: max98090: Fix restore of DAPM Muxes - ASoC: codec: hdac_hdmi add device_link to card device - [arm64] bpf: remove prefetch insn in xadd mapping - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses - mm/hugetlb.c: don't put_page in lock of hugetlb_lock - hugetlb: use same fault hash key for shared and private mappings - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget - userfaultfd: use RCU to free the task struct when fork fails - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler - jbd2: check superblock mapped prior to committing - ext4: make sanity check in mballoc more strict - ext4: ignore e_value_offs for xattrs with value-in-ea-inode - ext4: avoid drop reference to iloc.bh twice - ext4: fix use-after-free race with debug_want_extra_isize - ext4: actually request zeroing of inode table after grow - ext4: fix ext4_show_options for file systems w/o journal - btrfs: Check the first key and level for cached extent buffer - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages fails - Btrfs: send, flush dellaloc in order to avoid data loss - Btrfs: do not start a transaction during fiemap - Btrfs: do not start a transaction at iterate_extent_inodes() - bcache: fix a race between cache register and cacheset unregister - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() - ipmi:ssif: compare block number correctly for multi-part return messages - crypto: ccm - fix incompatibility between "ccm" and "ccm_base" - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount - ext4: fix data corruption caused by overlapping unaligned and aligned IO - ext4: fix use-after-free in dx_release() - ext4: avoid panic during forced reboot due to aborted journal - [x86] ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) - ALSA: hda/realtek - Fixup headphone noise via runtime suspend - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug - jbd2: fix potential double free - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes - [x86] KVM: lapic: Busy wait for timer to expire when using hv_timer - xen/pvh: set xen_domain_type to HVM in xen_pvh_init - libnvdimm/namespace: Fix label tracking error - iov_iter: optimize page_copy_sane() - pstore: Centralize init/exit routines - pstore: Allocate compression during late_initcall() - pstore: Refactor compression initialization - ext4: don't update s_rev_level if not required https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.46 - ipv6: fix src addr routing with the exception table - ipv6: prevent possible fib6 leaks - net: Always descend into dsa/ - net: avoid weird emergency message - net/mlx4_core: Change the error print to info print - net: test nouarg before dereferencing zerocopy pointers - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions - nfp: flower: add rcu locks when accessing netdev for tunnels - ppp: deflate: Fix possible crash in deflate_init - rtnetlink: always put IFLA_LINK for links with a link-netnsid - tipc: switch order of device registration to fix a crash - vsock/virtio: free packets during the socket release - vsock/virtio: Initialize core virtio vsock before registering the driver - net/mlx5: Imply MLXFW in mlx5_core - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled - stm class: Fix channel free in stm output free path - stm class: Fix channel bitmap on 32-bit systems - brd: re-enable __GFP_HIGHMEM in brd_insert_page() - proc: prevent changes to overridden credentials - Revert "MD: fix lock contention for flush bios" - md: batch flush requests. - md: add mddev->pers to avoid potential NULL pointer dereference - dcache: sort the freeing-without-RCU-delay mess for good. - [x86] intel_th: msu: Fix single mode with IOMMU - p54: drop device reference count if fails to enable device - of: fix clang -Wunsequenced for be32_to_cpu() - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - [armhf] phy: ti-pipe3: fix missing bit-wise or operator when assigning val - NFS4: Fix v4.0 client state corruption when mount - PNFS fallback to MDS if no deviceid found - [arm64] clk: hi3660: Mark clk_gate_ufs_subsys as critical - [armhf,arm64] clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider - [arm64] clk: rockchip: fix wrong clock definitions for rk3328 - udlfb: delete the unused parameter for dlfb_handle_damage - udlfb: fix sleeping inside spinlock - udlfb: introduce a rendering mutex - fuse: fix writepages on 32bit - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate - ovl: fix missing upper fs freeze protection on copy up for ioctl - [armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 - ceph: flush dirty inodes before proceeding with remount - [amd64] Add gap to int3 to allow for call emulation - [amd64] Allow breakpoints to emulate call instructions - [amd64] ftrace: Emulate call function while updating in breakpoint handler - tracing: Fix partial reading of trace event's id file - [armhf,arm64] memory: tegra: Fix integer overflow on tick value calculation - [x86] perf intel-pt: Fix instructions sampling rate - [x86] perf intel-pt: Fix improved sample timestamp - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken - PCI: Mark Atheros AR9462 to avoid bus reset - PCI: Init PCIe feature bits for managed host bridge alloc - PCI/AER: Change pci_aer_init() stub to return void - PCI: Factor out pcie_retrain_link() function - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum - dm cache metadata: Fix loading discard bitset - dm zoned: Fix zone report handling - dm delay: fix a crash when invalid device is specified - dm integrity: correctly calculate the size of metadata area - dm mpath: always free attached_handler_name in parse_path() - fuse: Add FOPEN_STREAM to use stream_open() - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module - vti4: ipip tunnel deregistration fixes. - xfrm: clean up xfrm protocol checks - esp4: add length check for UDP encapsulation - xfrm: Honor original L3 slave device in xfrmi policy lookup - xfrm4: Fix uninitialized memory read in _decode_session4 - [armhf,arm64] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0) - securityfs: fix use-after-free on symlink traversal - apparmorfs: fix use-after-free on symlink traversal - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored - [x86] kvm: hyper-v: deal with buggy TLB flush requests from WS2012 - mac80211: Fix kernel panic due to use of txq after free - net: ieee802154: fix missing checks for regmap_update_bits - [armhf,arm64] KVM: Ensure vcpu target is unset on reset failure - bpf: Fix preempt_enable_no_resched() abuse - qmi_wwan: new Wistron, ZTE and D-Link devices - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb() - sched/cpufreq: Fix kobject memleak - [x86] mm/mem_encrypt: Disable all instrumentation for early SME setup - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour - perf bench numa: Add define for RUSAGE_THREAD if not present - [x86] perf/intel: Fix race in intel_pmu_disable_event() - md/raid: raid5 preserve the writeback action after the parity check - driver core: Postpone DMA tear-down until after devres release for probe failure - bpf: relax inode permission check for retrieving bpf program - bpf: add map_lookup_elem_sys_only for lookups from syscall side - bpf, lru: avoid messing with eviction heuristics upon syscall lookup https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.47 - [x86] Hide the int3_emulate_call/jmp functions from UML - ext4: do not delete unlinked inode from orphan list on failed truncate - ext4: wait for outstanding dio during truncate in nojournal mode - f2fs: Fix use of number of devices - [x86] KVM: fix return value for reserved EFER - bio: fix improper use of smp_mb__before_atomic() - sbitmap: fix improper use of smp_mb__before_atomic() - Revert "scsi: sd: Keep disk read-only when re-reading partition" - [ppc64el] crypto: vmx - CTR: always increment IV as quadword - [arm*] mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem - [arm*] mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead - [arm64] kernel: kaslr: reduce module randomization range to 2 GB - [arm64] iommu: handle non-remapped addresses in ->mmap and ->get_sgtable - gfs2: Fix sign extension bug in gfs2_update_stats - btrfs: don't double unlock on error in btrfs_punch_hole - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path - Btrfs: avoid fallback to transaction commit during fsync of files with holes - Btrfs: fix race between ranged fsync and writeback of adjacent ranges - btrfs: sysfs: Fix error path kobject memory leak - btrfs: sysfs: don't leak memory when failing add fsid - udlfb: fix some inconsistent NULL checking - fbdev: fix divide error in fb_var_to_videomode - NFSv4.2 fix unnecessary retry in nfs4_copy_file_range - NFSv4.1 fix incorrect return value in copy_file_range - bpf: add bpf_jit_limit knob to restrict unpriv allocations - [arm64] errata: Add workaround for Cortex-A76 erratum #1463225 - btrfs: honor path->skip_locking in backref code - ovl: relax WARN_ON() for overlapping layers use case - fbdev: fix WARNING in __alloc_pages_nodemask bug - media: cpia2: Fix use-after-free in cpia2_exit - media: serial_ir: Fix use-after-free in serial_ir_init_module - media: vb2: add waiting_in_dqbuf flag - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit - bpf: devmap: fix use-after-free Read in __dev_map_entry_free - batman-adv: mcast: fix multicast tt/tvlv worker locking - at76c50x-usb: Don't register led_trigger if usb_register_driver failed - acct_on(): don't mess with freeze protection - gfs2: Fix lru_count going negative - cxgb4: Fix error path in cxgb4_init_module - NFS: make nfs_match_client killable - IB/hfi1: Fix WQ_MEM_RECLAIM warning - gfs2: Fix occasional glock use-after-free - mmc: core: Verify SD bus width - [arm64] dmaengine: tegra210-dma: free dma controller in remove() - net: ena: gcc 8: fix compilation warning - [x86] hv_netvsc: fix race that may miss tx queue wakeup - Bluetooth: Ignore CC events not matching the last HCI command - [x86] ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE - [armhf,arm64] usb: dwc2: gadget: Increase descriptors count for ISOC's - [armhf,arm64] usb: dwc3: move synchronize_irq() out of the spinlock protected block - ASoC: hdmi-codec: unlock the device on startup errors - [ppc64el] perf: Return accordingly on invalid chip-id in - [ppc64el] boot: Fix missing check of lseek() return value - [ppc64el] perf: Fix loop exit condition in nest_imc_event_init - [armhf] ASoC: imx: fix fiq dependencies - [amd64] spi: pxa2xx: fix SCR (divisor) calculation - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() - drm/nouveau/bar/nv50: ensure BAR is mapped - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals - [ppc64el] watchdog: Use hrtimers for per-CPU heartbeat - sched/cpufreq: Fix kobject memleak - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() - scsi: qla2xxx: Fix hardirq-unsafe locking - [x86] modules: Avoid breaking W^X while loading modules - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve - btrfs: fix panic during relocation after ENOSPC before writeback happens - btrfs: Don't panic when we can't find a root key - iwlwifi: pcie: don't crash on invalid RX interrupt - scsi: qedi: Abort ep termination if offload not scheduled - [s390x] kexec_file: Fix detection of text segment in ELF loader - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs - w1: fix the resume command API - [s390x] qeth: address type mismatch warning - [armhf,arm64] dmaengine: pl330: _stop: clear interrupt status - mac80211/cfg80211: update bss channel on channel switch - mwifiex: prevent an array overflow - rsi: Fix NULL pointer dereference in kmalloc - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE - nvme-rdma: fix a NULL deref when an admin connect times out - [armhf,arm64] crypto: sun4i-ss - Fix invalid calculation of hash end - bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set - bcache: return error immediately in bch_journal_replay() - bcache: fix failure in journal relplay - bcache: add failure check to run_cache_set() for journal replay - bcache: avoid clang -Wunintialized warning - RDMA/cma: Consider scope_id while binding to ipv6 ll address - vfio-ccw: Do not call flush_workqueue while holding the spinlock - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev - [x86] mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions - Bluetooth: hci_qca: Give enough time to ROME controller to bootup. - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version - [armhf] pinctrl: samsung: fix leaked of_node references - [armhf] clk: rockchip: undo several noc and special clocks as critical on rk3288 - [arm64] perf/arm-cci: Remove broken race mitigation - media: au0828: stop video streaming only when last user stops - audit: fix a memory leak bug - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() - media: pvrusb2: Prevent a buffer overflow - block: fix use-after-free on gendisk - [ppc64el] numa: improve control of topology updates - [ppc64el] Fix booting large kernels with STRICT_KERNEL_RWX - random: fix CRNG initialization when random.trust_cpu=1 - random: add a spinlock_t to struct batched_entropy - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock - sched/core: Check quota and period overflow at usec to nsec conversion - sched/rt: Check integer overflow at usec to nsec conversion - sched/core: Handle overflow in cpu_shares_write_u64 - [arm*] staging: vc04_services: handle kzalloc failure - [arm64] drm/msm: a5xx: fix possible object reference leak - irq_work: Do not raise an IPI when queueing work on the local CPU - [x86] thunderbolt: Take domain lock in switch sysfs attribute callbacks - [s390x] qeth: handle error from qeth_update_from_chp_desc() - USB: core: Don't unbind interfaces following device reset failure - [amd64] irq: Limit IST stack overflow check to #DB stack - [armhf] drm: etnaviv: avoid DMA API warning when importing buffers - [armhf,arm64] phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode - i40e: Able to add up to 16 MAC filters on an untrusted VF - i40e: don't allow changes to HW VLAN stripping on active port VLANs - ACPI/IORT: Reject platform device creation on NUMA node mapping failure - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure - [x86] perf/msr: Add Icelake support - [x86] perf/intel/rapl: Add Icelake support - [x86] perf/intel/cstate: Add Icelake support - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses - scsi: libsas: Do discovery on empty PHY to update PHY info - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers - [armhf,arm64] mmc_spi: add a status check for spi_sync_locked - drm/amdgpu: fix old fence check in amdgpu_fence_emit - PM / core: Propagate dev->power.wakeup_path when no callbacks - [armhf] clk: rockchip: Fix video codec clocks on rk3288 - [armhf] clk: rockchip: Make rkpwm a critical clock on rk3288 - [s390x] zcrypt: initialize variables before_use - [x86] microcode: Fix the ancient deprecated microcode loading method - [s390x] mm: silence compiler warning when compiling without CONFIG_PGSTE - [s390x] cio: fix cio_irb declaration - qmi_wwan: Add quirk for Quectel dynamic config - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR - rtlwifi: fix a potential NULL pointer dereference - mwifiex: Fix mem leak in mwifiex_tm_cmd - brcmfmac: fix missing checks for kmemdup - b43: shut up clang -Wuninitialized variable warning - brcmfmac: convert dev_init_lock mutex to completion - brcmfmac: fix WARNING during USB disconnect in case of unempty psq - brcmfmac: fix race during disconnect when USB completion is in progress - brcmfmac: fix Oops when bringing up interface during USB disconnect - [arm64] rtc: xgene: fix possible race condition - rtlwifi: fix potential NULL pointer dereference - scsi: ufs: Fix regulator load and icc-level configuration - scsi: ufs: Avoid configuring regulator with undefined voltage range - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext - [x86] uaccess, signal: Fix AC=1 bloat - [amd64] ia32: Fix ia32_restore_sigcontext() AC leak - [x86] uaccess: Fix up the fixup - chardev: add additional check for minor range overlap - [arm64] RDMA/hns: Fix bad endianess of port_pd variable - HID: core: move Usage Page concatenation to Main item - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put - cxgb3/l2t: Fix undefined behaviour - HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent - [armhf] spi: tegra114: reset controller on probe - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. - [armhf] media: wl128x: prevent two potential buffer overflows - media: gspca: Kill URBs on USB device disconnect - efifb: Omit memory map check on legacy boot - [x86] thunderbolt: property: Fix a missing check of kzalloc - [x86] thunderbolt: Fix to check the return value of kmemdup - timekeeping: Force upper bound for setting CLOCK_REALTIME - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check - virtio_console: initialize vtermno value for ports - tty: ipwireless: fix missing checks for ioremap - overflow: Fix -Wtype-limits compilation warnings - [x86] mce: Fix machine_check_poll() tests for error types - rcutorture: Fix cleanup path for invalid torture_type strings - [x86] mce: Handle varying MCA bank counts - rcuperf: Fix cleanup path for invalid perf_type strings - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown - scsi: qla4xxx: avoid freeing unallocated dma memory - scsi: lpfc: avoid uninitialized variable warning - selinux: avoid uninitialized variable warning - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies - dmaengine: tegra210-adma: use devm_clk_*() helpers - [armhf] hwrng: omap - Set default quality - [x86] thunderbolt: Fix to check return value of ida_simple_get - [x86] thunderbolt: Fix to check for kmemdup failure - drm/amd/display: fix releasing planes when exiting odm - [x86] thunderbolt: property: Fix a NULL pointer dereference - e1000e: Disable runtime PM on CNP+ - igb: Exclude device from suspend direct complete optimization - media: dvbsky: Avoid leaking dvb frontend - drm/amd/display: Fix Divide by 0 in memory calculations - drm/amd/display: Set stream->mode_changed when connectors change - scsi: ufs: fix a missing check of devm_reset_control_get - media: gspca: do not resubmit URBs when streaming has stopped - media: go7007: avoid clang frame overflow warning with KASAN - scsi: lpfc: Fix FDMI manufacturer attribute value - scsi: lpfc: Fix fc4type information for FDMI - media: saa7146: avoid high stack usage with clang - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers - [armhf] drm/omap: dsi: Fix PM for display blank with paired dss_pll calls - [armhf] spi: imx: stop buffer overflow in RX FIFO flush - spi: Fix zero length xfer bug - [armhf] ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM - drm/drv: Hold ref on parent device during drm_device lifetime - drm: Wake up next in drm_read() chain if we are forced to putback the event - [s390x] vfio-ccw: Prevent quiesce function going into an infinite loop - NFS: Fix a double unlock from nfs_match,get_client https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.48 - bonding/802.3ad: fix slave link initialization transition states - cxgb4: offload VLAN flows regardless of VLAN ethtype - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address - ipv6: Fix redirect with VRF - llc: fix skb leak in llc_build_and_send_ui_pkt() - [armhf,arm64] net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT - net-gro: fix use-after-free read in napi_gro_frags() - [armhf,arm64] net: mvneta: Fix err code path of probe - [armhf,arm64] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value - net: phy: marvell10g: report if the PHY fails to boot firmware - net: sched: don't use tc_action->order during action dump - [armhf,arm64] net: stmmac: fix reset gpio free missing - usbnet: fix kernel crash after disconnect - net/mlx5: Avoid double free in fs init error unwinding path - tipc: Avoid copying bytes beyond the supplied data - net/mlx5: Allocate root ns memory using kzalloc to match kfree - net/mlx5e: Disable rxhash when CQE compress is enabled - [armhf,arm64] net: stmmac: dma channel control register need to be init first - bnxt_en: Fix aggregation buffer leak under OOM condition. - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually - include/linux/compiler*.h: define asm_volatile_goto - compiler.h: give up __compiletime_assert_fallback() - jump_label: move 'asm goto' support test to Kconfig - tipc: fix modprobe tipc failed after switch order of device registration https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.49 - include/linux/bitops.h: sanitize rotate primitives - xhci: update bounce buffer with correct sg num - xhci: Use %zu for printing size_t type - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() - usb: xhci: avoid null pointer deref when bos field is NULL - usbip: usbip_host: fix BUG: sleeping function called from invalid context - usbip: usbip_host: fix stub_dev lock context imbalance regression - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor - USB: sisusbvga: fix oops in error path of sisusb_probe - USB: Add LPM quirk for Surface Dock GigE adapter - USB: rio500: refuse more than one device at a time - USB: rio500: fix memory leak in close after disconnect - media: usb: siano: Fix general protection fault in smsusb - media: usb: siano: Fix false-positive "uninitialized variable" warning - media: smsusb: better handle optional alignment - brcmfmac: fix NULL pointer derefence during USB disconnect - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) - tracing: Avoid memory leak in predicate_parse() - Btrfs: fix wrong ctime and mtime of a directory after log replay - Btrfs: fix race updating log root item during fsync - Btrfs: fix fsync not persisting changed attributes of a directory - Btrfs: incremental send, fix file corruption when no-holes feature is enabled - [s390x] crypto: fix gcm-aes-s390 selftest failures - [s390x] crypto: fix possible sleep during spinlock aquired - [ppc64el] KVM: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts - [ppc64el] perf: Fix MMCRA corruption by bhrb_filter - ALSA: line6: Assure canceling delayed work at disconnection - ALSA: hda/realtek - Set default power save node to 0 - [s390x] KVM: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID - drm/nouveau/i2c: Disable i2c bus access after ->fini() - [arm64] tty: serial: msm_serial: Fix XON/XOFF - memcg: make it work on sparse non-0-node systems - kernel/signal.c: trace_signal_deliver when signal_group_exit - [arm64] Fix the arm64_personality() syscall wrapper redirection - vt/fbcon: deinitialize resources in visual_init() after failed memory allocation - [arm*] staging: vc04_services: prevent integer overflow in create_pagelist() - [x86] staging: wlan-ng: fix adapter initialization failure - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM - Revert "lockd: Show pid of lockd for remote locks" - [armhf,arm64] drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY clock initialization - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz - [armhf,arm64] drm/rockchip: shutdown drm subsystem on shutdown - drm/lease: Make sure implicit planes are leased - [x86] ftrace: Do not call function graph from dynamic trampolines - [x86] ftrace: Set trampoline pages as executable - [x86] kprobes: Set instruction page as executable - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized variable warning") - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.50 - ethtool: fix potential userspace buffer overflow - Fix memory leak in sctp_process_init - ipv4: not do cache for local delivery if bc_forwarding is enabled - ipv6: fix the check before getting the cookie in rt6_get_cookie - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit - [armhf] net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query - [armhf,arm64] net: mvpp2: Use strscpy to handle stat strings - net: rds: fix memory leak in rds_ib_flush_mr_pool - net: sfp: read eeprom in maximum 16 byte increments - packet: unconditionally free po->rollover - pktgen: do not sleep with the thread lock held. - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl - rcu: locking and unlocking need to always be at least barriers - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled - fuse: fallocate: fix return with locked inode - pstore: Remove needless lock during console writes - pstore: Convert buf_lock to semaphore - pstore: Set tfm to NULL on free_buf_for_compression - pstore/ram: Run without kernel crash dump region - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume - [s390x] mm: fix address space detection in exception handling - xen-blkfront: switch kcalloc to kvcalloc for large array allocation - [ppc64el] genwqe: Prevent an integer overflow in the ioctl - test_firmware: Use correct snprintf() limit - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels - [arm64] drm/msm: fix fb references in async update - drm: add non-desktop quirk for Valve HMDs - drm: add non-desktop quirks to Sensics and OSVR headsets. - drm/amdgpu/psp: move psp version specific function pointers to early_init - drm/radeon: prefer lower reference dividers - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in - [x86] drm/i915: Fix I915_EXEC_RING_MASK - [x86] drm/i915/fbc: disable framebuffer compression on GeminiLake - [x86] drm/i915: Maintain consistent documentation subsection ordering - drm: don't block fb changes for async plane updates - [x86] drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack - TTY: serial_core, add ->install - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled - ethtool: check the return value of get_regs_len https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.51 - fs/fat/file.c: issue flush after the writeback of FAT - sysctl: return -EINVAL if val violates minmax - ipc: prevent lockup on alloc_msg and free_msg - [armhf] prevent tracing IPI_CPU_BACKTRACE - hugetlbfs: on restore reserve error path retain subpool reservation - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails - initramfs: free initrd memory if opening /initrd.image fails - mm/cma.c: fix the bitmap status to show failed allocation reason - mm: page_mkclean vs MADV_DONTNEED race - mm/cma_debug.c: fix the break condition in cma_maxchunk_get() - mm/slab.c: fix an infinite loop in leaks_show() - kernel/sys.c: prctl: fix false positive in validate_prctl_map() - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER - [x86] mfd: intel-lpss: Set the device in reset state when init - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration - [armhf] mfd: twl6040: Fix device init errors for ACCCTL register - [x86] perf/intel: Allow PEBS multi-entry in watermark mode - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change - [arm64] drm/bridge: adv7511: Fix low refresh rate selection - objtool: Don't use ignore flag for fake jumps - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks - bpf: fix undefined behavior in narrow load handling - [arm64] pwm: meson: Use the spin-lock only to protect register modifications - ntp: Allow TAI-UTC offset to be set to zero - f2fs: fix to avoid panic in do_recover_data() - f2fs: fix to avoid panic in f2fs_inplace_write_data() - f2fs: fix to avoid panic in f2fs_remove_inode_page() - f2fs: fix to do sanity check on free nid - f2fs: fix to clear dirty inode in error path of f2fs_iget() - f2fs: fix to avoid panic in dec_valid_block_count() - f2fs: fix to use inline space only if inline_xattr is enable - f2fs: fix to do sanity check on valid block count of segment - f2fs: fix to do checksum even if inode page is uptodate - percpu: remove spurious lock dependency between percpu and sched - configfs: fix possible use-after-free in configfs_register_group - [armhf,arm64] PCI: dwc: Free MSI in dw_pcie_host_init() error path - [armhf,arm64] PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi() - ovl: do not generate duplicate fsnotify events for "fake" path - mmc: mmci: Prevent polling for busy detection in IRQ context - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast - netfilter: nf_conntrack_h323: restore boundary check correctness - [mips*] Make sure dt memory regions are valid - netfilter: nf_tables: fix base chain stat rcu_dereference usage - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values - watchdog: fix compile time error of pretimeout governors - blk-mq: move cancel of requeue_work into blk_mq_release - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly - nvme-pci: unquiesce admin queue on shutdown - nvme-pci: shutdown on timeout during deletion - netfilter: nf_flow_table: check ttl value in flow offload data path - netfilter: nf_flow_table: fix netdev refcnt leak - ALSA: hda - Register irq handler after the chip initialization - nvmem: core: fix read buffer in place - [armhf,arm64] nvmem: sunxi_sid: Support SID on A83T and H5 - fuse: retrieve: cap requested size to negotiated max_write - nfsd: allow fh_want_write to be called twice - nfsd: avoid uninitialized variable warning - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING" - [armhf,arm64] iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel - [x86] net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending - [x86] PCI: Fix PCI IRQ routing table memory leak - i40e: Queues are reserved despite "Invalid argument" error - platform/chrome: cros_ec_proto: check for NULL transfer function - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 - [armhf] soc: rockchip: Set the proper PWM for rk3288 - [armhf] dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove paths - drm/amd/display: Use plane->color_space for dpp if specified - [armhf] OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it - [x86] platform: intel_pmc_ipc: adding error handling - [arm64] net: hns3: return 0 and print warning when hit duplicate MAC - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags - [x86] video: hgafb: fix potential NULL pointer dereference - block, bfq: increase idling for weight-raised queues - [arm64] PCI: xilinx: Check for __get_free_pages() failure - ice: Add missing case in print_link_msg for printing flow control - [x86] dmaengine: idma64: Use actual device for DMA transfers - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa - pwm: Fix deadlock warning when removing PWM device - [armhf] exynos: Fix undefined instruction during Exynos5422 resume - [x86] usb: typec: fusb302: Check vconn is off when we start toggling - soc: renesas: Identify R-Car M3-W ES1.3 - percpu: do not search past bitmap when allocating an area - ovl: check the capability before cred overridden - ovl: support stacked SEEK_HOLE/SEEK_DATA - [arm*] drm/vc4: fix fb references in async update - ALSA: seq: Cover unsubscribe_port() in list_mutex https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.52 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.53 - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled - HID: multitouch: handle faulty Elo touch device - HID: wacom: Don't set tool type until we're in range - HID: wacom: Don't report anything prior to the tool entering range - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary - ALSA: oxfw: allow PCM capture for Stanton SCS.1m - ALSA: hda/realtek - Update headset mode for ALC256 - ALSA: firewire-motu: fix destruction of data for isochronous resources - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() - mm/vmscan.c: fix trying to reclaim unevictable LRU page - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO - ptrace: restore smp_rmb() in __ptrace_may_access() - [armhf,arm64] iommu/arm-smmu: Avoid constant zero in TLBI writes - bcache: fix stack corruption by PRECEDING_KEY() - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() - [x86] drm/i915/sdvo: Implement proper HDMI audio support for SDVO - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var - f2fs: fix to avoid accessing xattr across the boundary - scsi: qedi: remove memset/memcpy to nfunc and use func instead (CVE-2019-15090) - scsi: qedi: remove set but not used variables 'cdev' and 'udev' - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show - scsi: lpfc: add check for loss of ndlp when sending RRQ - [arm64] mm: Inhibit huge-vmap with ptdump - nvme: fix srcu locking on error return in nvme_get_ns_from_disk - nvme: remove the ifdef around nvme_nvm_ioctl - nvme: merge nvme_ns_ioctl into nvme_ioctl - nvme: release namespace SRCU protection before performing controller ioctls - nvme: fix memory leak for power latency tolerance - [x86] platform: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table - [x86] platform: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table - scsi: bnx2fc: fix incorrect cast to u64 on shift operation - libnvdimm: Fix compilation warnings with W=1 - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts - usbnet: ipheth: fix racing condition - [armhf,arm64] KVM: Move cc/it checks under hyp's Makefile to avoid instrumentation - [x86] KVM: pmu: mask the result of rdpmc according to the width of the counters - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() - [armhf,arm64] usb: dwc2: Fix DMA cache alignment issues - [armhf,arm64] usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. - USB: usb-storage: Add new ID to ums-realtek - USB: serial: pl2303: add Allied Telesis VT-Kit3 - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode - USB: serial: option: add Telit 0x1260 and 0x1261 compositions - timekeeping: Repair ktime_get_coarse*() granularity - [x86] microcode, cpuhotplug: Add a microcode loader CPU hotplug callback - [x86] mm/KASLR: Compute the size of the vmemmap section properly - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled - drm/edid: abstract override/firmware EDID retrieval - drm: add fallback override/firmware EDID modes workaround - [armhf] rtc: pcf8523: don't return invalid date when battery is low https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.54 - ax25: fix inconsistent lock state in ax25_destroy_timer - be2net: Fix number of Rx queues used for flow hashing - [x86] hv_netvsc: Set probe mode to sync - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero - lapb: fixed leak of control-blocks. - neigh: fix use-after-free read in pneigh_get_next - net: openvswitch: do not free vport if register_netdevice() is failed. - sctp: Free cookie before we memdup a new one - tipc: purge deferredq list for each grp member in tipc_group_delete - vsock/virtio: set SOCK_DONE on peer shutdown - net/mlx5: Avoid reloading already removed devices - [armhf,arm64] net: mvpp2: prs: Fix parser range for VID filtering - [armhf,arm64] net: mvpp2: prs: Use the correct helpers when removing all VID filters - [arm*] Staging: vc04_services: Fix a couple error codes - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints - netfilter: nf_queue: fix reinject verdict handling - ipvs: Fix use-after-free in ip_vs_in - [armhf] clk: ti: clkctrl: Fix clkdm_clk handling - [ppc64el] powernv: Return for invalid IMC domain - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() - mISDN: make sure device name is NUL terminated - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor - perf/ring_buffer: Fix exposing a temporarily decreased data_head - perf/ring_buffer: Add ordering to rb->nest increment - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data - [armhf,arm64] net: stmmac: update rx tail pointer register to fix rx dma hang issue. - ACPI/PCI: PM: Add missing wakeup.flags.valid checks - [armhf] drm/etnaviv: lock MMU while dumping core - net: aquantia: tx clean budget logic error - net: aquantia: fix LRO with FCS error - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr - ALSA: hda - Force polling mode on CNL for fixing codec communication - configfs: Fix use-after-free when accessing sd->s_dentry - perf data: Fix 'strncat may truncate' build failure with recent gcc - perf namespace: Protect reading thread's namespace - [s390x] perf record: Fix s390 missing module symbol and warning for non-root users - xenbus: Avoid deadlock during suspend due to open transactions - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token list - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu - [arm64] fix syscall_fn_t type - [arm64] use the correct function type in SYSCALL_DEFINE0 - [arm64] use the correct function type for __arm64_sys_ni_syscall - net: phylink: ensure consistent phy interface mode - net: phy: dp83867: Set up RGMII TX delay - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask - scsi: scsi_dh_alua: Fix possible null-ptr-deref - scsi: libsas: delete sas port if expander discover failed - ocfs2: fix error path kobject memory leak - coredump: fix race condition between collapse_huge_page() and core dumping - Abort file_remove_privs() for non-reg. files https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.55 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.56 - tracing: Silence GCC 9 array bounds warning - objtool: Support per-function rodata sections - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls - ovl: make i_ino consistent with st_ino in more cases - ovl: detect overlapping layers - ovl: don't fail with disconnected lower NFS - ovl: fix bogus -Wmaybe-unitialized warning - [s390x] jump_label: Use "jdd" constraint on gcc9 - [s390x] ap: rework assembler functions to use unions for in/out register variables - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning - mmc: core: API to temporarily disable retuning for SDIO CRC errors - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() - mmc: core: Prevent processing SDIO IRQs when the card is suspended - scsi: ufs: Avoid runtime suspend possibly being blocked forever - [armhf,arm64] usb: chipidea: udc: workaround for endpoint conflict issue - xhci: detect USB 3.2 capable host controllers correctly - usb: xhci: Don't try to recover an endpoint if port is in error state. - IB/hfi1: Validate fault injection opcode user input - IB/hfi1: Silence txreq allocation warnings - [x86] Input: synaptics - enable SMBus on ThinkPad E480 and E580 - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD - [x86] Input: silead - add MSSL0017 to acpi_device_id - apparmor: fix PROFILE_MEDIATES for untrusted input - apparmor: enforce nullbyte at end of tag string - brcmfmac: sdio: Disable auto-tuning around commands expected to fail - brcmfmac: sdio: Don't tune while the card is off - parport: Fix mem leak in parport_register_dev_model - IB/rdmavt: Fix alloc_qpn() WARN_ON() - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value - IB/hfi1: Validate page aligned for a given virtual address - [mips*] uprobes: remove set but not used variable 'epc' - [armhf,arm64] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 - [arm64] net: hns: Fix loopback test failed at copper ports - mdesc: fix a missing-check bug in get_vdev_port_node_info() - [arm64] drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times - [arm64] drm/arm/hdlcd: Actually validate CRTC modes - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance - nvmet: fix data_len to 0 for bdev-backed write_zeroes - scsi: ufs: Check that space was properly alloced in copy_query_response - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event - hwmon: (core) add thermal sensors only if dev->of_node is present - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages - nvme: Fix u32 overflow in the number of namespace list calculation - btrfs: start readahead also in seed devices - [armhf] can: flexcan: fix timeout when set small bitrate - can: purge socket error queue on sock destruct - [ppc64el] bpf: use unsigned division instruction for 64-bit operations - [armhf] imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX - [armhf] dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values - [armhf] dts: am57xx-idk: Remove support for voltage switching for SD card - [arm64] sve: should not depend on - [arm64] ssbd: explicitly depend on - [x86] drm/vmwgfx: Use the backdoor port if the HB port is not available - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (CVE-2019-9506) - Bluetooth: Fix regression with minimum encryption key size alignment - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write - cfg80211: fix memory leak of wiphy device name - mac80211: drop robust management frames from unknown TA - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices - mac80211: handle deauthentication/disassociation from TDLS peer - nl80211: fix station_info pertid memory leak - mac80211: Do not use stack memory with scatterlist for GMAC - [x86] resctrl: Don't stop walking closids when a locksetup group is found https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.57 - perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul - perf help: Remove needless use of strncpy() - perf header: Fix unchecked usage of strncpy() - [arm64] Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS - IB/hfi1: Close PSM sdma_progress sleep window - 9p/xen: fix check for xenbus_read error in front_probe - 9p: Use a slab for allocating requests - 9p: embed fcall in req to round down buffer allocs - 9p: add a per-client fcall kmem_cache - 9p: rename p9_free_req() function - 9p: Add refcount to p9_req_t - 9p/rdma: do not disconnect on down_interruptible EAGAIN - 9p: Rename req to rreq in trans_fd - 9p: acl: fix uninitialized iattr access - 9p/rdma: remove useless check in cm_event_handler - 9p: p9dirent_read: check network-provided name length - 9p: potential NULL dereference - 9p/trans_fd: abort p9_read_work if req status changed - 9p/trans_fd: put worker reqs on destroy - net/9p: include trans_common.h to fix missing prototype warning. - qmi_wwan: Fix out-of-bounds read - [armhf,arm64] Revert "usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup" - [armhf,arm64] usb: dwc3: gadget: combine unaligned and zero flags - [armhf,arm64] usb: dwc3: gadget: track number of TRBs per request - [armhf,arm64] usb: dwc3: gadget: use num_trbs when skipping TRBs on ->dequeue() - [armhf,arm64] usb: dwc3: gadget: extract dwc3_gadget_ep_skip_trbs() - [armhf,arm64] usb: dwc3: gadget: introduce cancelled_list - [armhf,arm64] usb: dwc3: gadget: move requests to cancelled_list - [armhf,arm64] usb: dwc3: gadget: remove wait_end_transfer - [armhf,arm64] usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup - fs/proc/array.c: allow reporting eip/esp for all coredumping threads - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask - fs/binfmt_flat.c: make load_flat_shared_library() work - [armhf] clk: socfpga: stratix10: fix divider entry for the emac clocks - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn - dm log writes: make sure super sector log updates are written in order - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() - [x86] speculation: Allow guests to use SSBD even if host does not - [x86] microcode: Fix the microcode load on CPU hotplug for real - [x86] resctrl: Prevent possible overrun during bitmap operations - [x86] KVM: mmu: Allocate PAE root array when using SVM's 32-bit NPT - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O - cpu/speculation: Warn on unsupported mitigations= parameter - SUNRPC: Clean up initialisation of the struct rpc_rqst - [mips*] irqchip/mips-gic: Use the correct local interrupt map registers - eeprom: at24: fix unexpected timeout under high load - af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET - bonding: Always enable vlan tx offload - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop - net/packet: fix memory leak in packet_set_ring() - net: remove duplicate fetch in sock_getsockopt - [armhf,arm64] net: stmmac: fixed new system time seconds value calculation - [armhf,arm64] net: stmmac: set IC bit when transmitting frames with HW timestamp - sctp: change to hold sk after auth shkey is created successfully - team: Always enable vlan tx offload - tipc: change to use register_pernet_device - tipc: check msg->req data len in tipc_nl_compat_bearer_disable - tun: wake up waitqueues after IFF_UP is set - bpf: simplify definition of BPF_FIB_LOOKUP related flags - bpf: lpm_trie: check left child of last leftmost node for NULL - bpf: fix nested bpf tracepoints with per-cpu data - bpf: fix unconnected udp hooks - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err - [arm64] futex: Avoid copying out uninitialised stack in failed cmpxchg() - [arm64] bpf: use more scalable stadd over ldxr / stxr loop in xadd - futex: Update comments and docs about return values of arch futex code - RDMA: Directly cast the sockaddr union to sockaddr - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb - [armhf,arm64] usb: dwc3: Reset num_trbs after skipping - [arm64] insn: Fix ldadd instruction encoding https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.58 - Bluetooth: Fix faulty expression for minimum encryption key size check - block: Fix a NULL pointer dereference in generic_make_request() - md/raid0: Do not bypass blocking queue entered for raid0 bios - netfilter: nf_flow_table: ignore DF bit setting - netfilter: nft_flow_offload: set liberal tracking mode for tcp - netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family - ASoC: soc-pcm: BE dai needs prepare when pause release after resume - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master - [armhf,arm64] ASoC: max98090: remove 24-bit format support if RJ is 0 - [x86] CPU: Add more Icelake model numbers - ALSA: hdac: fix memory release for SST and SOF drivers - scsi: hpsa: correct ioaccel2 chaining - [x86] drm: panel-orientation-quirks: Add quirk for GPD pocket2 - [x86] drm: panel-orientation-quirks: Add quirk for GPD MicroPC - [x86] platform: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi - [x86] platform: intel-vbtn: Report switch events when event wakes device - [x86] platform: mlx-platform: Fix parent device in i2c-mux-reg device registration - i2c: pca-platform: Fix GPIO lookup code - cpuset: restore sanity to cpuset_cpus_allowed_fallback() - mm/mlock.c: change count_mm_mlocked_page_nr return type - tracing: avoid build warning with HAVE_NOP_MCOUNT - module: Fix livepatch/ftrace module text permissions race - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper() - [x86] drm/i915/dmc: protect against reading random memory - crypto: user - prevent operating on larval algorithms - crypto: cryptd - Fix skcipher instance memory leak - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages - ALSA: line6: Fix write on zero-sized buffer - ALSA: usb-audio: fix sign unintended sign extension on left shifts - [x86] ALSA: hda/realtek: Add quirks for several Clevo notebook barebones - [x86] ALSA: hda/realtek - Change front mic location for Lenovo M710q - lib/mpi: Fix karactx leak in mpi_powm - fs/userfaultfd.c: disable irqs for fault_pending and event locks - tracing/snapshot: Resize spare buffer if size changed - [armhf] dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node - drm/amd/powerplay: use hardware fan control if no powerplay fan table - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE - [armhf] drm/etnaviv: add missing failure path to destroy suballoc - [armhf] drm/imx: notify drm core before sending event during crtc disable - drm/imx: only send event on crtc disable if kept disabled - [x86] ftrace: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() - mm/vmscan.c: prevent useless kswapd loops - btrfs: Ensure replaced device doesn't have pending chunk allocation - tty: rocket: fix incorrect forward declaration of 'rp_init()' - net/smc: move unhash before release of clcsock - drm/fb-helper: generic: Don't take module ref for fbcon - f2fs: don't access node/meta inode mapping after iput - mac80211: mesh: fix missing unlock on error in table_path_del() - scsi: tcmu: fix use after free - [amd64] boot/compressed: Do not corrupt EDX on EFER.LME=1 setting - [arm64] net: hns: Fixes the missing put_device in positive leg for roce reset - ALSA: hda: Initialize power_state field properly - rds: Fix warning. - ip6: fix skb leak in ip6frag_expire_frag_queue() - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments - [arm64] net: hns: fix unsigned comparison to less than zero - bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K - netfilter: ipv6: nf_defrag: accept duplicate fragments again - [x86] KVM: degrade WARN to pr_warn_ratelimited - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC - nfsd: Fix overflow causing non-working mounts on 1 TB machines - svcrdma: Ignore source port when computing DRC hash - [mips*] Fix bounds check virt_addr_valid - [mips*] Add missing EHB in mtc0 -> mfc0 sequence. - [arm64] dmaengine: qcom: bam_dma: Fix completed descriptors count - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.59 - [x86] Input: elantech - enable middle button support on 2 ThinkPads - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() - bpf: sockmap, fix use after free from sleep in psock backlog workqueue - mac80211: mesh: fix RCU warning - mac80211: free peer keys before vif down in mesh - iwlwifi: Fix double-free problems in iwl_req_fw_callback() - can: af_can: Fix error path of can_init() - net: phy: rename Asix Electronics PHY driver - [armhf] dts: am335x phytec boards: Fix cd-gpios active level - [s390x] boot: disable address-of-packed-member warning - [x86] drm/vmwgfx: Honor the sg list segment size limitation - [x86] drm/vmwgfx: fix a warning due to missing dma_parms - [armhf] Input: imx_keypad - make sure keyboard can always wake up system - [armhf,arm64] KVM: vgic: Fix kvm_device leak in vgic_its_destroy - mac80211: only warn once on chanctx_conf being NULL - mac80211: do not start any work during reconfigure flow - bpf, devmap: Fix premature entry free on destroying map - bpf, devmap: Add missing bulk queue free - bpf, devmap: Add missing RCU read lock on flush - [amd64] bpf: fix stack layout of JITed bpf code - qmi_wwan: add support for QMAP padding in the RX path - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode - qmi_wwan: extend permitted QMAP mux_id value range - mmc: core: complete HS400 before checking status - md: fix for divide error in status_resync - bnx2x: Check if transceiver implements DDM before access - drm: return -EFAULT if copy_to_user() fails - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL - net: lio_core: fix potential sign-extension overflow on large shift - scsi: qedi: Check targetname while finding boot target information - quota: fix a problem about transfer quota - [armhf,arm64] net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() - NFS4: Only set creation opendata if O_CREAT - net :sunrpc :clnt :Fix xps refcount imbalance on the error path - fscrypt: don't set policy for a dead directory - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length - media: stv0297: fix frequency range limit - ALSA: usb-audio: Fix parse of UAC2 Extension Units - ALSA: hda/realtek - Headphone Mic can't record after S3 - block, bfq: NULL out the bic when it's no longer valid - [arm64] perf pmu: Fix uncore PMU alias list for ARM64 - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() - [x86] tls: Fix possible spectre-v1 in do_get_thread_area() - USB: serial: ftdi_sio: add ID for isodebug v1 - USB: serial: option: add support for GosunCn ME3630 RNDIS mode - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" - p54usb: Fix race between disconnect and firmware loading - usb: gadget: ether: Fix race between gether_disconnect and rx_submit - [armhf,arm64] usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() - [x86] drivers/usb/typec/tps6598x.c: fix portinfo width - [x86] drivers/usb/typec/tps6598x.c: fix 4CC cmd write - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt - HID: Add another Primax PIXART OEM mouse quirk - binder: fix memory leak in error path - carl9170: fix misuse of device driver API - [x86] VMCI: Fix integer overflow in VMCI handle arrays - staging: rtl8712: reduce stack usage, again https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.60 - Revert "e1000e: fix cyclic resets at link up with active tx" - e1000e: start network tx queue only when link is up - [x86] Input: synaptics - enable SMBUS on T480 thinkpad trackpad - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT - firmware: improve LSM/IMA security behaviour - [armhf,arm64] irqchip/gic-v3-its: Fix command queue pointer comparison bug - [armhf] clk: ti: clkctrl: Fix returning uninitialized data - [amd64,arm64] efi/bgrt: Drop BGRT status field reserved bits check - perf/core: Fix perf_sample_regs_user() mm check - [armhf] omap2: remove incorrect __init annotation - afs: Fix uninitialised spinlock afs_volume::cb_break_lock - [x86] apic: Fix integer overflow on 10 bit left shift of cpu_khz - be2net: fix link failure after ethtool offline test - ppp: mppe: Add softdep to arc4 - sis900: fix TX completion - [armhf] dts: imx6ul: fix PWM[1-4] interrupts - [armhf] pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order - dm table: don't copy from a NULL pointer in realloc_argv() - dm verity: use message limit for data block corruption message - [amd64] boot: Fix crash if kernel image crosses page table boundary - [amd64] boot: Add missing fixup_pointer() for next_early_pgt access - HID: chicony: add another quirk for PixArt mouse - HID: multitouch: Add pointstick support for ALPS Touchpad - cpu/hotplug: Fix out-of-bounds read when setting fail state - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL - genirq: Delay deactivation in free_irq() - genirq: Fix misleading synchronize_irq() documentation - genirq: Add optional hardware synchronization for shutdown - [x86] ioapic: Implement irq_get_irqchip_state() callback - [x86] irq: Handle spurious interrupt after shutdown gracefully - [x86] irq: Seperate unused system vectors from spurious entry again - [s390x] fix stfle zero padding - [s390x] qdio: (re-)initialize tiqdio list entries - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues() - regmap-irq: do not write mask register if mask_base is zero - drm/udl: introduce a macro to convert dev to udl. - drm/udl: Replace drm_dev_unref with drm_dev_put - drm/udl: move to embedding drm device inside udl device. - [i386] entry: Fix ENDPROC of common_spurious https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.61 - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path - wil6210: fix potential out-of-bounds read - ath10k: Do not send probe response template for mesh - ath9k: Check for errors when reading SREV register - ath6kl: add some bounds checking - ath10k: add peer id check in ath10k_peer_find_by_id - wil6210: fix spurious interrupts in 3-msi - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection - regmap: debugfs: Fix memory leak in regmap_debugfs_init - batman-adv: fix for leaked TVLV handler. - media: dvb: usb: fix use after free in dvb_usb_device_exit - media: marvell-ccic: fix DMA s/g desc number calculation - media: media_device_enum_links32: clean a reserved field - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries - qed: Set the doorbell address correctly - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig - af_key: fix leaks in key_pol_get_resp and dump_sp. - xfrm: Fix xfrm sel prefix length validation - fscrypt: clean up some BUG_ON()s in block encryption/decryption - perf annotate TUI browser: Do not use member from variable within its own initialization - media: mc-device.c: don't memset __user pointer contents - media: saa7164: fix remove_proc_entry warning - net: phy: Check against net_device being NULL - tua6100: Avoid build warnings. - batman-adv: Fix duplicated OGMs on NETDEV_UP - [armhf] media: wl128x: Fix some error handling in fm_v4l2_init_video_device() - [arm64] net: hns3: set ops to null when unregister ad_dev - cpupower : frequency-set -r option misses the last cpu in related cpu list - [armhf,arm64] net: stmmac: dwmac4: fix flow control issue - [armhf,arm64] net: stmmac: modify default value of tx-frames - [arm64] crypto: inside-secure - do not rely on the hardware last bit for result descriptors - [s390x] qdio: handle PENDING state for QEBSM devices - net: sfp: add mutex to prevent concurrent state checks - ipset: Fix memory accounting for hash types on resize - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode - [s390x] perf report: Fix OOM error in TUI mode on s390 - [arm64] irqchip/meson-gpio: Add support for Meson-G12A SoC - media: uvcvideo: Fix access to uninitialized fields on probe error - iommu: Fix a leak in iommu_insert_resv_region - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4 - [armhf] gpio: omap: ensure irq is enabled before wakeup - regmap: fix bulk writes on paged registers - bpf: silence warning messages in core - selinux: fix empty write to keycreate file - [x86] cpu: Add Ice Lake NNPI to Intel family - [arm64] ASoC: meson: axg-tdm: fix sample clock inversion - rcu: Force inlining of rcu_read_lock() - [x86] cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS - qed: iWARP - Fix tc for MPA ll2 connection - [arm64] net: hns3: fix for skb leak when doing selftest - block: null_blk: fix race condition for null_del_dev - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration - xfrm: fix sa selector validation - sched/core: Add __sched tag for io_schedule() - sched/fair: Fix "runnable_avg_yN_inv" not used warnings - [x86] perf/intel/uncore: Handle invalid event coding for free-running counter - [x86] atomic: Fix smp_mb__{before,after}_atomic() - perf evsel: Make perf_evsel__name() accept a NULL argument - vhost_net: disable zerocopy by default - ipoib: correcly show a VF hardware address - [x86] cacheinfo: Fix a -Wtype-limits warning - blk-iolatency: only account submitted bios - ACPICA: Clear status of GPEs on first direct enable - EDAC/sysfs: Fix memory leak when creating a csrow object - nvme: fix possible io failures when removing multipathed ns - nvme-pci: properly report state change failure in nvme_reset_work - nvme-pci: set the errno on ctrl state change error - lightnvm: pblk: fix freeing of merged pages - [arm64] Do not enable IRQs for ct_user_exit - ipsec: select crypto ciphers for xfrm_algo - ipvs: defer hook registration to avoid leaks - media: i2c: fix warning same module names - ntp: Limit TAI-UTC offset - timer_list: Guard procfs specific code - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0 - media: hdpvr: fix locking and a missing msleep - [armhf] net: stmmac: sun8i: force select external PHY when no internal one - rtlwifi: rtl8192cu: fix error handle when usb probe failed - mt7601u: do not schedule rx_tasklet when the device has been disconnected - mt7601u: fix possible memory leak when the device is disconnected - ipvs: fix tinfo memory leak in start_sync_thread - ath10k: add missing error handling - ath10k: fix PCIE device wake up failed - perf tools: Increase MAX_NR_CPUS and MAX_CACHES - [x86] ASoC: Intel: hdac_hdmi: Set ops to NULL on remove - libata: don't request sense data on !ZAC ATA devices - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch timer - xsk: Properly terminate assignment in xskq_produce_flush_desc - rslib: Fix decoding of shortened codes - rslib: Fix handling of of caller provided syndrome - ixgbe: Check DDM existence in transceiver before access - crypto: serpent - mark __serpent_setkey_sbox noinline - wil6210: drop old event after wmi_call timeout - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec - bcache: check CACHE_SET_IO_DISABLE in allocator code - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() - bcache: acquire bch_register_lock later in cached_dev_free() - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() - bcache: fix potential deadlock in cached_def_free() - [arm64] net: hns3: fix a -Wformat-nonliteral compile warning - [arm64] net: hns3: add some error checking in hclge_tm module - ath10k: destroy sdio workqueue while remove sdio module - [armhf,arm64] net: mvpp2: prs: Don't override the sign bit in SRAM parser shift - igb: clear out skb->tstamp after reading the txtime - iwlwifi: mvm: Drop large non sta frames - perf stat: Make metric event lookup more robust - perf stat: Fix group lookup for metric group - bnx2x: Prevent ptp_task to be rescheduled indefinitely - net: usb: asix: init MAC address buffers - rxrpc: Fix oops in tracepoint - bpf, libbpf, smatch: Fix potential NULL pointer dereference - bonding: validate ip header before check IPPROTO_IGMP - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants - [ppc64el] tools: bpftool: Fix json dump crash on powerpc - Bluetooth: hci_bcsp: Fix memory leak in rx_skb - Bluetooth: Add new 13d3:3491 QCA_ROME device - Bluetooth: Add new 13d3:3501 QCA_ROME device - Bluetooth: 6lowpan: search for destination address in all peers - [ppc64el] perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 - Bluetooth: Check state in l2cap_disconnect_rsp - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() - Bluetooth: validate BLE connection interval updates - gtp: fix suspicious RCU usage - gtp: fix Illegal context switch in RCU read-side critical section. - gtp: fix use-after-free in gtp_encap_destroy() - gtp: fix use-after-free in gtp_newlink() - [armel/marvell,armhf] net: mvmdio: defer probe of orion-mdio if a clock is not ready - iavf: fix dereference of null rx_buffer pointer - floppy: fix out-of-bounds read in next_valid_format - floppy: fix invalid pointer dereference in drive_name - xen: let alloc_xenballooned_pages() fail if not enough memory free - scsi: core: Fix race on creating sense cache - scsi: megaraid_sas: Fix calculation of target ID - crypto: ghash - fix unaligned memory access in ghash_setkey() - [x86] crypto: ccp - Validate the the error value used to index error messages - [arm64] crypto: sha1-ce - correct digest for empty data in finup - [arm64] crypto: sha2-ce - correct digest for empty data in finup - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm - [x86] crypto: ccp - memset structure fields to zero before reuse - [x86] crypto: ccp/gcm - use const time tag comparison. - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" - bcache: Revert "bcache: fix high CPU occupancy during journal" - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" - bcache: ignore read-ahead request failure on backing device - bcache: fix mistaken sysfs entry for io_error counter - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread - Input: alps - don't handle ALPS cs19 trackpoint-only device - [x86] Input: synaptics - whitelist Lenovo T580 SMBus intertouch - Input: alps - fix a mismatch between a condition check and its comment - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages - [arm64] tegra: Update Jetson TX1 GPU regulator timings - iwlwifi: pcie: don't service an interrupt that was masked - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices - NFSv4: Handle the special Linux file open access mode - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error - pNFS: Fix a typo in pnfs_update_layout - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE - ASoC: dapm: Adapt for debugfs API change - raid5-cache: Need to do start() part job after adding journal device - ALSA: seq: Break too long mutex context in the write loop - [x86] ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 - media: videobuf2-dma-sg: Prevent size from overflowing - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed - [arm64] tegra: Fix AGIC register range - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes. - kconfig: fix missing choice values in auto.conf - drm/nouveau/i2c: Enable i2c pads & busses during preinit - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs - dm zoned: fix zone state management race - xen/events: fix binding user event channels to cpus - 9p/xen: Add cleanup path in p9_trans_xen_init - 9p/virtio: Add cleanup path in p9_virtio_init - [x86] boot: Fix memory leak in default_get_smp_config() - [x86] perf/intel: Fix spurious NMI on fixed counter - [x86] perf/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs - [x86] perf/amd/uncore: Set the thread mask for F17h L3 PMCs - drm/edid: parse CEA blocks embedded in DisplayID - [x86] intel_th: pci: Add Ice Lake NNPI support - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() - PCI: Do not poll for PME if the device is in D3cold - [arm64] PCI: qcom: Ensure that PERST is asserted for at least 100 ms - Btrfs: fix data loss after inode eviction, renaming it, and fsync it - Btrfs: fix fsync not persisting dentry deletions due to inode evictions - Btrfs: add missing inode version, ctime and mtime updates when punching hole - IB/mlx5: Report correctly tag matching rendezvous capability - HID: wacom: generic: only switch the mode on devices with LEDs - HID: wacom: generic: Correct pad syncing - HID: wacom: correct touch resolution x/y typo - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields - coda: pass the host file in vma->vm_file on mmap - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures - xfs: fix pagecache truncation prior to reflink - xfs: flush removing page cache in xfs_reflink_remap_prep - xfs: don't overflow xattr listent buffer - xfs: rename m_inotbt_nores to m_finobt_nores - xfs: don't ever put nlink > 0 inodes on the unlinked list - xfs: reserve blocks for ifree transaction during log recovery - xfs: fix reporting supported extra file attributes for statx() - xfs: serialize unaligned dio writes against all other dio writes - xfs: abort unaligned nowait directio early - [ppc64el] watchpoint: Restore NV GPRs while returning from exception - [ppc64el] powernv/npu: Fix reference leak - [ppc64el] pseries: Fix oops in hotplug memory notifier - [arm64] mmc: sdhci-msm: fix mutex while in spinlock - eCryptfs: fix a couple type promotion bugs - [x86] intel_th: msu: Fix single mode with disabled IOMMU - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug - usb: Handle USB3 remote wakeup for LPM enabled devices correctly - blk-throttle: fix zero wait time for iops throttled group - blk-iolatency: clear use_delay when io.latency is set to zero - blkcg: update blkcg_print_stat() to handle larger outputs - [armel/marvell,armhf] net: mvmdio: allow up to four clocks to be specified for orion-mdio - dm bufio: fix deadlock with loop device https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.62 - bnx2x: Prevent load reordering in tx completion processing - [x86] hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() - igmp: fix memory leak in igmpv3_del_delrec() - ipv4: don't set IPv6 only flags to IPv4 addresses - ipv6: rt6_check should return NULL if 'from' is NULL - ipv6: Unlink sibling route in case of failure - [armhf,arm64] net: dsa: mv88e6xxx: wait after reset deactivation - net: make skb_dst_force return true when dst is refcounted - net: neigh: fix multiple neigh timer scheduling - net: openvswitch: fix csum updates for MPLS actions - net: phy: sfp: hwmon: Fix scaling of RX power - [armhf,arm64] net: stmmac: Re-work the queue selection for TSO packets - nfc: fix potential illegal memory access - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b - rxrpc: Fix send on a connected, but unbound socket - sctp: fix error handling on stream scheduler initialization - [x86] sky2: Disable MSI on ASUS P6T - tcp: be more careful in tcp_fragment() - tcp: fix tcp_set_congestion_control() use from bpf hook - tcp: Reset bytes_acked and bytes_received when disconnecting - vrf: make sure skb->data contains ip header to make routing - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn - macsec: fix use-after-free of skb during RX - macsec: fix checksumming after decryption - netrom: fix a memory leak in nr_rx_frame() - netrom: hold sock when setting skb->destructor - net_sched: unset TCQ_F_CAN_BYPASS when adding filters - sctp: not bind the socket in sctp_connect - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query - net: bridge: don't cache ether dest pointer on input - net: bridge: stp: don't cache eth dest pointer before skb pull - dma-buf: balance refcount inbalance - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc - perf/core: Fix exclusive events' grouping - perf/core: Fix race between close() and fork() - ext4: don't allow any modifications to an immutable file - ext4: enforce the immutable flag on open files - mm: add filemap_fdatawait_range_keep_errors() - jbd2: introduce jbd2_inode dirty range scoping - ext4: use jbd2_inode dirty range scoping - ext4: allow directory holes - [x86] KVM: nVMX: do not use dangling shadow VMCS after guest reset - [x86] KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested - mm: vmscan: scan anonymous pages on file refaults - net: sched: verify that q!=NULL before setting q->flags https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.63 - [x86] hvsock: fix epollout hang from race condition - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe - [x86] staging: vt6656: use meaningful error code during buffer allocation - usb: core: hub: Disable hub-initiated U1/U2 - [armhf,arm64] pinctrl: rockchip: fix leaked of_node references - drm/amd/display: Fill prescale_params->scale for RGB565 - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE - drm/amd/display: Disable ABM before destroy ABM struct - drm/amdkfd: Fix a potential memory leak - drm/amdkfd: Fix sdma queue map issue - drm/edid: Fix a missing-check bug in drm_load_edid_firmware() - PCI: Return error if cannot probe VF - [armhf,arm64] gpu: host1x: Increase maximum DMA segment size - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry - drm/crc-debugfs: Also sprinkle irqrestore over early exits - memstick: Fix error cleanup path of memstick_init - [arm64] tty: serial: msm_serial: avoid system lockup condition - serial: 8250: Fix TX interrupt handling condition - drm/amd/display: Always allocate initial connector state state - drm/virtio: Add memory barriers for capset cache. - drm/amd/display: fix compilation error - [ppc64el] pseries/mobility: prevent cpu hotplug during DT update - [armhf,arm64] drm/rockchip: Properly adjust to a true clock in adjusted_mode - [armhf] serial: imx: fix locking in set_termios() - tty: serial_core: Set port active bit in uart_port_activate - usb: gadget: Zero ffs_io_data - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs - [arm64] drm/msm: Depopulate platform on probe failure - [arm64] PCI: xilinx-nwl: Fix Multi MSI data programming - iio: iio-utils: Fix possible incorrect mask calculation - [ppc64el] cacheflush: fix variable set but not used - [ppc64el] xmon: Fix disabling tracing while in xmon - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc - mfd: core: Set fwnode for created devices - [arm64] mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk - mm/swap: fix release_pages() when releasing devmap pages - RDMA/i40iw: Set queue pair state when being queried - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE - [ppc64el] mm: Handle page table allocation failures - IB/ipoib: Add child to parent list only if device initialized - [arm64] assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS - perf stat: Fix use-after-freed pointer detected by the smatch tool - perf top: Fix potential NULL pointer dereference detected by the smatch tool - perf session: Fix potential NULL pointer dereference found by the smatch tool - perf annotate: Fix dereferencing freed memory found by the smatch tool - perf hists browser: Fix potential NULL pointer dereference found by the smatch tool - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM - [armhf] PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h - block: init flush rq ref count to 1 - f2fs: avoid out-of-range memory access - mailbox: handle failed named mailbox channel request - dlm: check if workqueues are NULL before flushing/destroying - [ppc64el] eeh: Handle hugepages in ioremap space - block/bio-integrity: fix a memory leak bug - 9p: pass the correct prototype to read_cache_page - mm/gup.c: mark undo_dev_pagemap as __maybe_unused - mm/gup.c: remove some BUG_ONs from get_gate_page() - memcg, fsnotify: no oom-kill for remote memcg charging - mm/mmu_notifier: use hlist_add_head_rcu() - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup - proc: use down_read_killable mmap_sem for /proc/pid/pagemap - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs - proc: use down_read_killable mmap_sem for /proc/pid/map_files - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() - proc: use down_read_killable mmap_sem for /proc/pid/maps - locking/lockdep: Fix lock used or unused stats error - mm: use down_read_killable for locking mmap_sem in access_remote_vm - locking/lockdep: Hide unused 'class' variable - usb: wusbcore: fix unbalanced get/put cluster_id - [x86] usb: pci-quirks: Correct AMD PLL quirk detection - btrfs: inode: Don't compress if NODATASUM or NODATACOW set - [x86] sysfb_efi: Add quirks for some devices with swapped width and height - [x86] speculation/mds: Apply more accurate check on hypervisor platform - binder: prevent transactions to context manager from its own process. - fpga-manager: altera-ps-spi: Fix build error - [x86] mei: me: add mule creek canyon (EHL) device ids - [x86] hpet: Fix division by zero in hpet_time_div() - ALSA: ac97: Fix double free of ac97_codec_device - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 - ALSA: hda - Add a conexant codec entry to let mute led work - [ppc64el] xive: Fix loop exit-condition in xive_find_target_in_mask() - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() - access: avoid the RCU grace period for the temporary subjective credentials https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.64 - [x86] hv_sock: Add support for delayed close - vsock: correct removal of socket from the list - NFS: Fix dentry revalidation on NFSv4 lookup - NFS: Refactor nfs_lookup_revalidate() - NFSv4: Fix lookup revalidate of regular files - [armhf,arm64] usb: dwc2: Disable all EP's on disconnect - [armhf,arm64] usb: dwc2: Fix disable all EP's on disconnect - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ (Closes: #904385). - binder: fix possible UAF when freeing buffer - ISDN: hfcsusb: checking idx of ep configuration - media: au0828: fix null dereference in error path - ath10k: Change the warning message string - media: cpia2_usb: first wake up, then free in disconnect - media: pvrusb2: use a different format for warnings - NFS: Cleanup if nfs_match_client is interrupted - media: radio-raremono: change devm_k*alloc to k*alloc - [x86] iommu/vt-d: Don't queue_iova() if there is no flush queue - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop (CVE-2019-3900) - vhost: vsock: add weight support - vhost: scsi: add weight support (CVE-2019-3900) - sched/fair: Don't free p->numa_faults with concurrent readers - sched/fair: Use RCU accessors consistently for ->numa_group - /proc//cmdline: remove all the special cases - /proc//cmdline: add back the setproctitle() special case - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl - Fix allyesconfig output. - ceph: hold i_ceph_lock when removing caps for freeing inode - block, scsi: Change the preempt-only flag into a counter - scsi: core: Avoid that a kernel warning appears during system resume - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.65 - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200 - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend - ftrace: Enable trampoline when rec count returns back to one - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset - [arm64] dts: rockchip: fix isp iommu clocks and power domain - kernel/module.c: Only return -EEXIST for modules that have finished loading - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1 - fs/adfs: super: fix use-after-free bug - btrfs: fix minimum number of chunk errors for DUP - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit() - cifs: Fix a race condition with cifs_echo_request - ceph: fix improper use of smp_mb__before_atomic() - ceph: return -ERANGE if virtual xattr value didn't fit in buffer - ACPI: blacklist: fix clang warning for unused DMI table - [s390x] scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized - perf version: Fix segfault due to missing OPT_END() - [x86] kvm: avoid constant-conversion warning - ACPI: fix false-positive -Wuninitialized warning - be2net: Signal that the device cannot transmit during reconfiguration - [x86] apic: Silence -Wtype-limits compiler warnings - mm/cma.c: fail if fixed declaration can't be honored - lib/test_overflow.c: avoid tainting the kernel and fix wrap size - lib/test_string.c: avoid masking memset16/32/64 failures - coda: add error handling for fget - coda: fix build using bare-metal toolchain - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings - ipc/mqueue.c: only perform resource calculation if user valid - [x86] xen/pv: Fix a boot up hang revealed by int3 self test - [x86] kvm: Don't call kvm_spurious_fault() from .fixup - [x86] paravirt: Fix callee-saved function ELF sizes - [x86] boot: Remove multiple copy of static function sanitize_boot_params() - drm/nouveau: fix memory leak in nouveau_conn_reset() - kconfig: Clear "written" flag to avoid data loss - Btrfs: fix incremental send failure after deduplication - Btrfs: fix race leading to fs corruption after transaction abort - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC - [arm64] mmc: meson-mx-sdio: Fix misuse of GENMASK macro - gpiolib: fix incorrect IRQ requesting of an active-low lineevent - IB/hfi1: Fix Spectre v1 vulnerability - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly - selinux: fix memory leak in policydb_init() - ALSA: hda: Fix 1-minute detection delay when i915 module is not available (Closes: #931507) - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker - [s390x] dasd: fix endless loop after read unit address configuration - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier - [arm64] compat: Allow single-byte watchpoints on all addresses - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} - nbd: replace kill_bdev() with __invalidate_device() again - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() - IB/mlx5: Fix unreg_umr to ignore the mkey state - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache - IB/mlx5: Fix clean_mr() to work in the expected order - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification - IB/hfi1: Check for error on call to alloc_rsm_map_table - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping - eeprom: at24: make spd world-readable again - objtool: Support GCC 9 cold subfunction naming scheme - gcc-9: properly declare the {pv,hv}clock_page storage - [x86] vdso: Prevent segfaults due to hoisted vclock reads - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.66 - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure - gcc-9: don't warn about uninitialized variable - driver core: Establish order of operations for device_add and device_del via bitflag - drivers/base: Introduce kill_device() - libnvdimm/bus: Prevent duplicate device_unregister() calls - libnvdimm/region: Register badblocks before namespaces - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock - HID: wacom: fix bit shift for Cintiq Companion 2 - HID: Add quirk for HP X1200 PIXART OEM mouse - IB: directly cast the sockaddr union to aockaddr - atm: iphase: Fix Spectre v1 vulnerability - bnx2x: Disable multi-cos feature. - ife: error out when nla attributes are empty - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 - ip6_tunnel: fix possible use-after-free on xmit - ipip: validate header length in ipip_tunnel_xmit - [armhf,arm64] mvpp2: fix panic on module removal - [armhf,arm64] mvpp2: refactor MTU change code - net: bridge: delete local fdb on device init failure - net: bridge: mcast: don't delete permanent entries when fast leave is enabled - net: fix ifindex collision during namespace removal - net/mlx5e: always initialize frag->last_in_page - net/mlx5: Use reversed order when unregister devices - net: phylink: Fix flow control for fixed-link - net: sched: Fix a possible null-pointer dereference in dequeue_func() - net sched: update vlan action for batched events operations - net: sched: use temporary variable for actions indexes - net/smc: do not schedule tx_work in SMC_CLOSED state - tipc: compat: allow tipc commands without arguments - tun: mark small packets as owned by the tap sock - net/mlx5: Fix modify_cq_in alignment - net/mlx5e: Prevent encap flow counter update async to user query - r8169: don't use MSI before RTL8168d - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling - cgroup: Call cgroup_release() before __exit_signal() - cgroup: Implement css_task_iter_skip() - cgroup: Include dying leaders with live threads in PROCS iterations - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed - cgroup: Fix css_task_iter_advance_css_set() cset skip condition - [arm*] spi: bcm2835: Fix 3-wire mode if DMA is enabled https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.67 - [x86] crypto: ccp - Fix oops by properly managing allocated structures - [x86] crypto: ccp - Add support for valid authsize values less than 16 - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext - usb: usbfs: fix double-free of usb memory upon submiturb error - usb: iowarrior: fix deadlock on disconnect - sound: fix a memory leak bug - [arm64,mips*/octeon] mmc: cavium: Set the correct dma max segment size for mmc_host - [arm64,mips*/octeon] mmc: cavium: Add the missing dma unmap when the dma has finished. - loop: set PF_MEMALLOC_NOIO for the worker thread - Input: usbtouchscreen - initialize PM mutex before using it - [x86] Input: elantech - enable SMBus on new (2018+) systems - [x86] Input: synaptics - enable RMI mode for HP Spectre X360 - [x86] mm: Check for pfn instead of page in vmalloc_sync_one() - [x86] mm: Sync also unmappings in vmalloc_sync_all() - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() - [s390x] perf annotate: Fix s390 gap between kernel end and module start - perf db-export: Fix thread__exec_comm() - [s390x] perf record: Fix module size on s390 - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS - gfs2: gfs2_walk_metadata fix - usb: yurex: Fix use-after-free in yurex_delete - [x86] usb: typec: tcpm: free log buf memory when remove debug file - [x86] usb: typec: tcpm: remove tcpm dir if no children - [x86] usb: typec: tcpm: Add NULL check before dereferencing config - [x86] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests - can: peak_usb: fix potential double kfree_skb() - netfilter: nfnetlink: avoid deadlock due to synchronous request_module - [s390x] vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn - netfilter: Fix rpfilter dropping vrf packets by mistake - netfilter: conntrack: always store window size un-scaled - netfilter: nft_hash: fix symhash with modulus one - drm/amd/display: Wait for backlight programming completion in set backlight level - drm/amd/display: use encoder's engine id to find matched free audio device - drm/amd/display: Fix dc_create failure handling and 666 color depths - drm/amd/display: Only enable audio if speaker allocation exists - drm/amd/display: Increase size of audios array - [x86] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN - mac80211: don't warn about CW params when not using them - allocate_flower_entry: should check for null deref - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 - drm: silence variable 'conn' set but not used - [s390x] qdio: add sanity checks to the fast-requeue path - ALSA: compress: Fix regression on compressed capture streams - ALSA: compress: Prevent bypasses of set_params - ALSA: compress: Don't allow paritial drain operations on capture streams - ALSA: compress: Be more restrictive about when a drain is allowed - perf tools: Fix proper buffer size for feature processing - perf probe: Avoid calling freeing routine multiple times for same pointer - drbd: dynamically allocate shash descriptor - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() - nvme: fix multipath crash when ANA is deactivated - scsi: megaraid_sas: fix panic on loading firmware crashdump - [ppc64el] scsi: ibmvfc: fix WARN_ON during event pool release - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG - test_firmware: fix a memory leak bug - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop - perf/core: Fix creating kernel counters for PMUs that override event->cpu - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value - HID: sony: Fix race condition between rumble and device remove. - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset - ALSA: usb-audio: fix a memory leak bug - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices - hwmon: (nct7802) Fix wrong detection of in4 presence - [x86] drm/i915: Fix wrong escape clock divisor init for GLK - ALSA: firewire: fix a memory leak bug - ALSA: hiface: fix multiple memory leak bugs - ALSA: hda - Don't override global PCM hw info flag - [x86] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) - mac80211: don't WARN on short WMM parameters from AP - dax: dax_layout_busy_page() should not unmap cow pages - SMB3: Fix deadlock in validate negotiate hits reconnect - smb3: send CAP_DFS capability during session setup - NFSv4: Fix an Oops in nfs4_do_setattr - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU - mwifiex: fix 802.11n/WPA detection - iwlwifi: don't unmap as page memory that was mapped as single - iwlwifi: mvm: fix an out-of-bound access - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Uwe Kleine-König ] * [armhf] Add support for all i.MX6 variants. * rtc-s35390a: backport fix to make hwclock able to read the time (Closes: #932845) . [ Ben Hutchings ] * [rt] Update to 4.19.59-rt24: - Fix build failure after "genirq: Prevent use-after-free and work list corruption": + Update "genirq: Do not invoke the affinity callback via a workqueue on RT" + kthread: add a global worker thread. + genirq: Do not invoke the affinity callback via a workqueue on RT + genirq: Handle missing work_struct in irq_set_affinity_notifier() - Update "irqwork: push most work into softirq context" to resolve conflict with "irq_work: Do not raise an IPI when queueing work on the local CPU" - Drop "random: avoid preempt_disable()ed section" - arm: imx6: cpuidle: Use raw_spinlock_t - rcu: Don't allow to change rcu_normal_after_boot on RT - sched/core: Drop a preempt_disable_rt() statement - timers: Redo the notification of canceling timers on -RT - Fix futex regression in 4.19.21: + Revert "futex: Ensure lock/unlock symetry versus pi_lock and hash bucket lock" + Revert "futex: Fix bug on when a requeued RT task times out" + Revert "rtmutex: Handle the various new futex race conditions" + Revert "futex: workaround migrate_disable/enable in different context" + futex: Make the futex_hash_bucket lock raw + futex: Delay deallocation of pi_state - mm/zswap: Do not disable preemption in zswap_frontswap_store() * Bump ABI to 6 linux-signed-amd64 (4.19.37+6) unstable; urgency=high . * Sign kernel from linux 4.19.37-6 . [ John Paul Adrian Glaubitz ] * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap . [ Salvatore Bonaccorso ] * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-amd64 (4.19.37+5+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u2 . [ Romain Perier ] * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233) * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817) * nfc: Ensure presence of required attributes in the deactivate_target handler (CVE-2019-12984) * binder: fix race between munmap() and direct reclaim (CVE-2019-1999) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: switch IP ID generator to siphash (CVE-2019-10638) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) . [ Salvatore Bonaccorso ] * [x86] cpufeatures: Carve out CQM features retrieval * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) * [amd64] entry: Use JMP instead of JMPQ * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * Documentation: Add section about CPU vulnerabilities for Spectre * Documentation: Add swapgs description to the Spectre v1 documentation . [ Ben Hutchings ] * [x86] cpufeatures: Avoid ABI change for swapgs mitigations: - Move swapgs feature bits to existing scattered words - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered features word" * inet: Avoid ABI change for IP ID hash change linux-signed-amd64 (4.19.37+5+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.37-5+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-amd64 (4.19.37+5+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u1 . * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) linux-signed-arm64 (4.19.67+2) buster; urgency=medium . * Sign kernel from linux 4.19.67-2 . [ Salvatore Bonaccorso ] * dm: disable DISCARD if the underlying storage no longer supports it (Closes: #934331) * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (CVE-2019-15538) . [ Ben Hutchings ] * KVM: Ignore ABI changes * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) * [ppc64el] Avoid ABI change for disabling TM * netfilter: conntrack: Use consistent ct id hash calculation (fixes regression in 4.19.44) . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-arm64 (4.19.67+1) buster; urgency=medium . * Sign kernel from linux 4.19.67-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38 - netfilter: nft_compat: use refcnt_t type for nft_xt reference count - netfilter: nft_compat: make lists per netns - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nft_compat: destroy function must not have side effects - netfilter: nf_tables: warn when expr implements only one of activate/deactivate - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nft_compat: don't use refcount_inc on newly allocated entry - netfilter: nft_compat: use .release_ops and remove list of extension - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - net/ibmvnic: Fix RTNL deadlock during device reset - net: mvpp2: fix validate for PPv2.1 - ext4: fix some error pointer dereferences - tipc: handle the err returned from cmd header function - loop: do not print warn message if partition scan is successful - [armhf,arm64] drm/rockchip: fix for mailbox read validation. - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock - ipvs: fix warning on unused variable - [ppc64el] vdso32: fix CLOCK_MONOTONIC on PPC64 - [armhf,arm64] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new DSA framework - cifs: fix memory leak in SMB2_read - cifs: do not attempt cifs operation on smb2+ rename error - tracing: Fix a memory leak by early error exit in trace_pid_write() - zram: pass down the bvec we need to read into in the work struct - trace: Fix preempt_enable_no_resched() abuse - IB/rdmavt: Fix frwr memory registration - RDMA/mlx5: Do not allow the user to write to the clock page - sched/numa: Fix a possible divide-by-zero - ceph: only use d_name directly when parent is locked - ceph: ensure d_name stability in ceph_dentry_hash() - ceph: fix ci->i_head_snapc leak - nfsd: Don't release the callback slot unless it was actually held - sunrpc: don't mark uninitialised items as VALID. - [x86] perf/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters - Input: synaptics-rmi4 - write config register values to the right offset - [armhf] 8857/1: efi: enable CP15 DMB instructions before cleaning the cache - [ppc64el] mm/radix: Make Radix require HUGETLB_PAGE - [arm*] drm/vc4: Fix memory leak during gpu reset. - [x86] Revert "drm/i915/fbdev: Actually configure untiled displays" - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice - slip: make slhc_free() silently accept an error pointer - [x86] intel_th: gth: Fix an off-by-one in output unassigning - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference - workqueue: Try to catch flush_work() without INIT_WORK(). - sched/deadline: Correctly handle active 0-lag timers - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON - fm10k: Fix a potential NULL pointer dereference - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable - tipc: check link name with right length in tipc_nl_compat_link_set - net: netrom: Fix error cleanup path of nr_proto_init - net/rds: Check address length before reading address family - rxrpc: fix race condition in rxrpc_input_packet() - [x86] retpolines: Raise limit for generating indirect calls from switch-case - [x86] retpolines: Disable switch jump tables when retpolines are enabled - mm: Fix warning in insert_pfn() - [x86] fpu: Don't export __kernel_fpu_{begin,end}() - ipv4: add sanity checks in ipv4_link_failure() - ipv4: set the tcp_min_rtt_wlen range from 0 to one day - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: exchange of 8K and 1M pool - net/rose: fix unbound loop in rose_loopback_timer() - [armhf,arm64] net: stmmac: move stmmac_check_ether_addr() to driver probe - team: fix possible recursive locking when add slaves - [arm64] net: hns: Fix WARNING when hns modules installed - net/mlx5e: Fix the max MTU check in case of XDP - net/mlx5e: Fix use-after-free after xdp_return_frame https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.39 - selinux: use kernel linux/socket.h for genheaders and mdp - Revert "ACPICA: Clear status of GPEs before enabling them" - [arm*] dts: bcm283x: Fix hdmi hpd gpio pull - [s390x] limit brk randomization to 32MB - net: ieee802154: fix a potential NULL pointer dereference - ieee802154: hwsim: propagate genlmsg_reply return code - [armhf,arm64] net: stmmac: don't set own bit too early for jumbo frames - qlcnic: Avoid potential NULL pointer dereference - xsk: fix umem memory leak on cleanup - netfilter: nft_set_rbtree: check for inactive element after flag mismatch - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies - netfilter: ip6t_srh: fix NULL pointer dereferences - [s390x] qeth: fix race when initializing the IP address table - [armhf] imx51: fix a leaked reference by adding missing of_node_put - [arm64] KVM: Reset the PMU in preemptible context - [armhf,arm64] KVM: vgic-its: Take the srcu lock when writing to guest memory - [armhf,arm64] KVM: vgic-its: Take the srcu lock when parsing the memslots - [x86] usb: dwc3: pci: add support for Comet Lake PCH ID - usb: gadget: net2280: Fix overrun of OUT messages - usb: gadget: net2280: Fix net2280_dequeue() - [x86] i2c: i801: Add support for Intel Comet Lake - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference - staging: rtl8712: uninitialized memory in read_bbreg_hdl() - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc - [arm64] net: macb: Add null check for PCLK and HCLK - net/sched: don't dereference a->goto_chain to read the chain index - [armhf] dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi - [armhf,arm64] drm/tegra: hub: Fix dereference before check - NFS: Fix a typo in nfs_init_timeout_values() - drm: Fix drm_release() and device unplug - [arm64] drm/meson: Fix invalid pointer in meson_drv_unbind() - [arm64] drm/meson: Uninstall IRQ handler - scsi: mpt3sas: Fix kernel panic during expander reset - scsi: aacraid: Insure we don't access PCIe space during AER/EEH - scsi: qla4xxx: fix a potential NULL pointer dereference - leds: trigger: netdev: fix refcnt leak on interface rename - [x86] realmode: Don't leak the trampoline kernel address - usb: u132-hcd: fix resource leak - ceph: fix use-after-free on symlink traversal - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi- element RSCN - [x86] mm: Don't exceed the valid physical address space - libata: fix using DMA buffers on stack - gpio: of: Fix of_gpiochip_add() error path - nvme-multipath: relax ANA state check - perf machine: Update kernel map address and re-order properly - [x86] iommu/amd: Reserve exclusion range in iova-domain - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK - leds: trigger: netdev: use memcpy in device_name_store https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.40 - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation - ipv6: A few fixes on dereferencing rt->from - ipv6: fix races in ip6_dst_destroy() - ipv6/flowlabel: wait rcu grace period before put_pid() - ipv6: invert flowlabel sharing check in process and user mode - l2ip: fix possible use-after-free - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() - [armhf] net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc - net: phy: marvell: Fix buffer overrun with stats counters - rxrpc: Fix net namespace cleanup - sctp: avoid running the sctp state machine recursively - packet: validate msg_namelen in send directly - bnxt_en: Improve multicast address setup logic. - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). - [x86] KVM: Whitelist port 0x7e for pre-incrementing %rip - [x86] KVM: nVMX: Fix size checks in vmx_set_nested_state - ALSA: line6: use dynamic buffers - ath10k: Drop WARN_ON()s that always trigger during system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.41 - iwlwifi: fix driver operation for 5350 - mwifiex: Make resume actually do something useful again on SDIO cards - mac80211: don't attempt to rename ERR_PTR() debugfs dirs - [armhf] i2c: imx: correct the method of getting private data in notifier_call - i2c: Remove unnecessary call to irq_find_mapping - i2c: Clear client->irq in i2c_device_remove - i2c: Allow recovery of the initial IRQ by an I2C client device. - i2c: Prevent runtime suspend of adapter when Host Notify is required - [x86] ALSA: hda/realtek - Add new Dell platform for headset mode - [x86] ALSA: hda/realtek - Fixed Dell AIO speaker noise - [x86] ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR - USB: yurex: Fix protection fault after device removal - USB: w1 ds2490: Fix bug caused by improper use of altsetting array - USB: dummy-hcd: Fix failure to give back unlinked URBs - usb: usbip: fix isoc packet num validation in get_pipe - USB: core: Fix unterminated string returned by usb_string() - USB: core: Fix bug caused by duplicate interface PM usage counter - nvme-loop: init nvmet_ctrl fatal_err_work when allocate - [arm64] dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay - HID: logitech: check the return value of create_singlethread_workqueue - HID: debug: fix race condition with between rdesc_show() and device removal - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured - batman-adv: Reduce claim hash refcnt only for removed entry - batman-adv: Reduce tt_local hash refcnt only for removed entry - batman-adv: Reduce tt_global hash refcnt only for removed entry - batman-adv: fix warning in function batadv_v_elp_get_throughput - [armhf] dts: rockchip: Fix gpu opp node names for rk3288 - [arm64] reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev - igb: Fix WARN_ONCE on runtime suspend - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands - bonding: show full hw address in sysfs for slave entries - [armhf,arm64] net: stmmac: use correct DMA buffer size in the RX descriptor - [armhf,arm64] net: stmmac: ratelimit RX error logs - [armhf,arm64] net: stmmac: don't stop NAPI processing when dropping a packet - [armhf,arm64] net: stmmac: don't overwrite discard_frame status - [armhf,arm64] net: stmmac: fix dropping of multi-descriptor RX frames - [armhf,arm64] net: stmmac: don't log oversized frames - jffs2: fix use-after-free on symlink traversal - debugfs: fix use-after-free on symlink traversal - [armhf] mfd: twl-core: Disable IRQ while suspended - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx - HID: input: add mapping for Assistant key - vfio/pci: use correct format characters - scsi: core: add new RDAC LENOVO/DE_Series device - [x86] scsi: storvsc: Fix calculation of sub-channel count - [arm64] fix wrong check of on_sdei_stack in nmi context - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver - [arm64] net: hns: Fix probabilistic memory overwrite when HNS driver initialized - [arm64] net: hns: fix ICMP6 neighbor solicitation messages discard problem - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled - libcxgb: fix incorrect ppmax calculation - [x86] KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow - hugetlbfs: fix memory leak for resv_map - fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock - [armel] orion: don't use using 64-bit DMA masks - block: pass no-op callback to INIT_WORK(). - [x86] perf/amd: Update generic hardware cache events for Family 17h - Bluetooth: btusb: request wake pin with NOAUTOEN - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state - [arm64] clk: qcom: Add missing freq for usb30_master_clk on 8998 - scsi: RDMA/srpt: Fix a credit leak for aborted commands - [x86] ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" - [x86] platform: intel_pmc_core: Fix PCH IP name - [x86] platform: intel_pmc_core: Handle CFL regmap properly - IB/core: Unregister notifier before freeing MAD security - IB/core: Fix potential memory leak while creating MAD agents - IB/core: Destroy QP if XRC QP fails - selinux: avoid silent denials in permissive mode under RCU walk - selinux: never allow relabeling on context mounts - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode - [ppc64el] mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search - [x86] mce: Improve error message when kernel cannot recover, p2 - [x86] clk: Add system specific quirk to mark clocks as critical - [x86] mm/KASLR: Fix the size of the direct mapping section - [x86] mm: Fix a crash with kmemleak_scan() - [x86] mm/tlb: Revert "x86/mm: Align TLB invalidation info" - media: v4l2: i2c: ov7670: Fix PLL bypass register values https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.42 - [armhf,arm64] net: stmmac: Use bfsize1 in ndesc_init_rx_desc - [x86] Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() - ASoC: hdmi-codec: fix S/PDIF DAI - ASoC:soc-pcm:fix a codec fixup issue in TDM case - [x86] ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform - [arm64] clk: meson-gxbb: round the vdec dividers to closest - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol - [armhf] drm/omap: hdmi4_cec: Fix CEC clock handling for PM - IB/hfi1: Eliminate opcode tests on mr deref - IB/hfi1: Fix the allocation of RSM table - [x86] perf/intel: Fix handling of wakeup_events for multi-entry PEBS - [x86] perf/intel: Initialize TFA MSR - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() - drm/amd/display: fix cursor black issue - objtool: Add rewind_stack_do_exit() to the noreturn list - slab: fix a crash by reading /proc/slab_allocators - [armhf,arm64] drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind - virtio_pci: fix a NULL pointer reference in vp_del_vqs - [x86] RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove - [arm64] RDMA/hns: Fix bug that caused srq creation to fail - scsi: csiostor: fix missing data copy in csio_scsi_err_handler() - [x86] ASoC: Intel: kbl: fix wrong number of channels - virtio-blk: limit number of hw queues by nr_cpu_ids - nvme-fc: correct csn initialization and increments on error - [x86] platform: pmc_atom: Drop __initconst on dmi table - perf/core: Fix perf_event_disable_inatomic() race - [x86] iommu/amd: Set exclusion range correctly - genirq: Prevent use-after-free and work list corruption - usb: dwc3: Fix default lpm_nyet_threshold value - USB: serial: f81232: fix interrupt worker not stop - USB: cdc-acm: fix unthrottle races - usb-storage: Set virt_boundary_mask to avoid SG overflows - [x86] intel_th: pci: Add Comet Lake support - [arm64] cpufreq: armada-37xx: fix frequency calculation for opp - scsi: lpfc: change snprintf to scnprintf for possible overflow - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines - scsi: qla2xxx: Fix device staying in blocked state - UAS: fix alignment of scatter/gather segments - [x86] ASoC: Intel: avoid Oops if DMA setup fails - locking/futex: Allow low-level atomic operations to return -EAGAIN - [arm64] futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.43 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44 - bfq: update internal depth state when queue depth changes - [x86] platform: sony-laptop: Fix unintentional fall-through - [x86] platform: thinkpad_acpi: Disable Bluetooth for some machines - [x86] platform: dell-laptop: fix rfkill functionality - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails - kernfs: fix barrier usage in __kernfs_new_node() - [x86] virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace - USB: serial: fix unthrottle races - acpi/nfit: Always dump _DSM output payload - libnvdimm/namespace: Fix a potential NULL pointer dereference - HID: input: add mapping for Expose/Overview key - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys - HID: input: add mapping for "Toggle Display" key - libnvdimm/btt: Fix a kmemdup failure check - [s390x] dasd: Fix capacity calculation for large volumes - mac80211: fix unaligned access in mesh table hash function - mac80211: Increase MAX_MSG_LEN - cfg80211: Handle WMM rules in regulatory domain intersection - mac80211: fix memory accounting with A-MSDU aggregation - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands - libnvdimm/pmem: fix a possible OOB access when read and write pmem - [s390x] 3270: fix lockdep false positive on view->lock - drm/amd/display: extending AUX SW Timeout - mISDN: Check address length before reading address family - vxge: fix return of a free'd memblock on a failed dma mapping - qede: fix write to free'd pointer error and double free of ptp - afs: Unlock pages for __pagevec_release() - drm/amd/display: If one stream full updates, full update all planes - [s390x] pkey: add one more argument space for debug feature entry - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T - [x86] KVM: fix spectrev1 gadgets - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in tracing - tools lib traceevent: Fix missing equality check for strcmp - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash - scsi: aic7xxx: fix EISA support - mm: fix inactive list balancing between NUMA nodes and cgroups - init: initialize jump labels before command line option parsing - ipvs: do not schedule icmp errors from tunnels - netfilter: ctnetlink: don't use conntrack/expect object addresses as id - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook() - [s390x] ctcm: fix ctcm_new_device error return code - [armhf,arm64] drm/sun4i: Set device driver data at bind time for use in unbind - [armhf,arm64] drm/sun4i: Fix component unbinding and component master deletion - netfilter: fix nf_l4proto_log_invalid to log invalid packets - [armhf] gpu: ipu-v3: dp: fix CSC handling - [armhf] drm/imx: don't skip DP channel disable for background plane - [armhf,arm64] drm/sun4i: Unbind components before releasing DRM and memory - Input: synaptics-rmi4 - fix possible double free - [arm64] RDMA/hns: Bugfix for mapping user db - mm/memory_hotplug.c: drop memory device reference after find_memory_block() - [ppc64el] smp: Fix NMI IPI timeout - [ppc64el] smp: Fix NMI IPI xmon timeout - [armhf,arm64] net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode - mm/memory.c: fix modifying of page protection by insert_pfn() - usb: typec: Fix unchecked return value - netfilter: nf_tables: use-after-free in dynamic operations - netfilter: nf_tables: add missing ->release_ops() in error path of newrule() (Closes: #934168) - net: fec: manage ahb clock in runtime pm - net: strparser: partially revert "strparser: Call skb_unclone conditionally" - NFC: nci: Add some bounds checking in nci_hci_cmd_received() - nfc: nci: Potential off by one in ->pipes[] array - [x86] kprobes: Avoid kretprobe recursion bug - mwl8k: Fix rate_idx underflow - rtlwifi: rtl8723ae: Fix missing break in switch statement - bonding: fix arp_validate toggling in active-backup mode - bridge: Fix error path for kobject_init_and_add() - ipv4: Fix raw socket lookup for local traffic - net: dsa: Fix error cleanup path in dsa_init_module - [armhf] net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering - [arm64] net: macb: Change interrupt and napi enable order in open - packet: Fix error path in packet_init - selinux: do not report error on connect(AF_UNSPEC) - vlan: disable SIOCSHWTSTAMP in container - vrf: sit mtu should not be updated when vrf netdev is the link - tuntap: fix dividing by zero in ebpf queue selection - tuntap: synchronize through tfiles array instead of tun->numqueues - isdn: bas_gigaset: use usb_fill_int_urb() properly - tipc: fix hanging clients using poll with EPOLLOUT flag - [ppc64el] book3s/64: check for NULL pointer in pgd_alloc() - [ppc64el] powernv/idle: Restore IAMR after idle - [x86] PCI: hv: Fix a memory leak in hv_eject_device_work() - [x86] PCI: hv: Add hv_pci_remove_slots() when we unload the driver - [x86] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.45 - locking/rwsem: Prevent decrement of reader count before increment - [x86] speculation/mds: Revert CPU buffer clear on double fault exit - [x86] speculation/mds: Improve CPU buffer clear documentation - objtool: Fix function fallthrough detection - [arm64] dts: rockchip: Disable DCMDs on RK3399's eMMC controller. - [armhf] dts: exynos: Fix interrupt for shared EINTs on Exynos5260 - [armhf] dts: exynos: Fix audio (microphone) routing on Odroid XU3 - [arm64] mmc: sdhci-of-arasan: Add DTS property to disable DCMDs. - [armhf] exynos: Fix a leaked reference by adding missing of_node_put - [armhf] power: supply: axp288_charger: Fix unchecked return value - [armhf,arm64] power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the blacklist - [arm64] mmap: Ensure file offset is treated as unsigned - [arm64] arch_timer: Ensure counter register reads occur with seqlock held - [arm64] compat: Reduce address limit - [arm64] Clear OSDLR_EL1 on CPU boot - [arm64] Save and restore OSDLR_EL1 across suspend/resume - [x96] sched: Save [ER]FLAGS on context switch - crypto: salsa20 - don't access already-freed walk.iv - crypto: chacha20poly1305 - set cra_name correctly - [x86] crypto: ccp - Do not free psp_master when PLATFORM_INIT fails - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode - crypto: skcipher - don't WARN on unprocessed data after slow walk step - crypto: crct10dif-generic - fix use via crypto_shash_digest() - [x86] crypto: crct10dif-pcl - fix use via crypto_shash_digest() - [arm64] crypto: gcm-aes-ce - fix no-NEON fallback code - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" - [armhf,arm64] crypto: aes-neonbs - don't access already-freed walk.iv - mmc: core: Fix tag set memory leak - ALSA: line6: toneport: Fix broken usage of timer for delayed execution - ALSA: usb-audio: Fix a memory leak bug - ALSA: hda/hdmi - Read the pin sense from register when repolling - ALSA: hda/hdmi - Consider eld_valid when reporting jack event - ALSA: hda/realtek - EAPD turn on later - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) - [armhf,arm64] ASoC: max98090: Fix restore of DAPM Muxes - ASoC: codec: hdac_hdmi add device_link to card device - [arm64] bpf: remove prefetch insn in xadd mapping - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses - mm/hugetlb.c: don't put_page in lock of hugetlb_lock - hugetlb: use same fault hash key for shared and private mappings - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget - userfaultfd: use RCU to free the task struct when fork fails - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler - jbd2: check superblock mapped prior to committing - ext4: make sanity check in mballoc more strict - ext4: ignore e_value_offs for xattrs with value-in-ea-inode - ext4: avoid drop reference to iloc.bh twice - ext4: fix use-after-free race with debug_want_extra_isize - ext4: actually request zeroing of inode table after grow - ext4: fix ext4_show_options for file systems w/o journal - btrfs: Check the first key and level for cached extent buffer - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages fails - Btrfs: send, flush dellaloc in order to avoid data loss - Btrfs: do not start a transaction during fiemap - Btrfs: do not start a transaction at iterate_extent_inodes() - bcache: fix a race between cache register and cacheset unregister - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() - ipmi:ssif: compare block number correctly for multi-part return messages - crypto: ccm - fix incompatibility between "ccm" and "ccm_base" - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount - ext4: fix data corruption caused by overlapping unaligned and aligned IO - ext4: fix use-after-free in dx_release() - ext4: avoid panic during forced reboot due to aborted journal - [x86] ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) - ALSA: hda/realtek - Fixup headphone noise via runtime suspend - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug - jbd2: fix potential double free - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes - [x86] KVM: lapic: Busy wait for timer to expire when using hv_timer - xen/pvh: set xen_domain_type to HVM in xen_pvh_init - libnvdimm/namespace: Fix label tracking error - iov_iter: optimize page_copy_sane() - pstore: Centralize init/exit routines - pstore: Allocate compression during late_initcall() - pstore: Refactor compression initialization - ext4: don't update s_rev_level if not required https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.46 - ipv6: fix src addr routing with the exception table - ipv6: prevent possible fib6 leaks - net: Always descend into dsa/ - net: avoid weird emergency message - net/mlx4_core: Change the error print to info print - net: test nouarg before dereferencing zerocopy pointers - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions - nfp: flower: add rcu locks when accessing netdev for tunnels - ppp: deflate: Fix possible crash in deflate_init - rtnetlink: always put IFLA_LINK for links with a link-netnsid - tipc: switch order of device registration to fix a crash - vsock/virtio: free packets during the socket release - vsock/virtio: Initialize core virtio vsock before registering the driver - net/mlx5: Imply MLXFW in mlx5_core - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled - stm class: Fix channel free in stm output free path - stm class: Fix channel bitmap on 32-bit systems - brd: re-enable __GFP_HIGHMEM in brd_insert_page() - proc: prevent changes to overridden credentials - Revert "MD: fix lock contention for flush bios" - md: batch flush requests. - md: add mddev->pers to avoid potential NULL pointer dereference - dcache: sort the freeing-without-RCU-delay mess for good. - [x86] intel_th: msu: Fix single mode with IOMMU - p54: drop device reference count if fails to enable device - of: fix clang -Wunsequenced for be32_to_cpu() - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - [armhf] phy: ti-pipe3: fix missing bit-wise or operator when assigning val - NFS4: Fix v4.0 client state corruption when mount - PNFS fallback to MDS if no deviceid found - [arm64] clk: hi3660: Mark clk_gate_ufs_subsys as critical - [armhf,arm64] clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider - [arm64] clk: rockchip: fix wrong clock definitions for rk3328 - udlfb: delete the unused parameter for dlfb_handle_damage - udlfb: fix sleeping inside spinlock - udlfb: introduce a rendering mutex - fuse: fix writepages on 32bit - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate - ovl: fix missing upper fs freeze protection on copy up for ioctl - [armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 - ceph: flush dirty inodes before proceeding with remount - [amd64] Add gap to int3 to allow for call emulation - [amd64] Allow breakpoints to emulate call instructions - [amd64] ftrace: Emulate call function while updating in breakpoint handler - tracing: Fix partial reading of trace event's id file - [armhf,arm64] memory: tegra: Fix integer overflow on tick value calculation - [x86] perf intel-pt: Fix instructions sampling rate - [x86] perf intel-pt: Fix improved sample timestamp - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken - PCI: Mark Atheros AR9462 to avoid bus reset - PCI: Init PCIe feature bits for managed host bridge alloc - PCI/AER: Change pci_aer_init() stub to return void - PCI: Factor out pcie_retrain_link() function - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum - dm cache metadata: Fix loading discard bitset - dm zoned: Fix zone report handling - dm delay: fix a crash when invalid device is specified - dm integrity: correctly calculate the size of metadata area - dm mpath: always free attached_handler_name in parse_path() - fuse: Add FOPEN_STREAM to use stream_open() - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module - vti4: ipip tunnel deregistration fixes. - xfrm: clean up xfrm protocol checks - esp4: add length check for UDP encapsulation - xfrm: Honor original L3 slave device in xfrmi policy lookup - xfrm4: Fix uninitialized memory read in _decode_session4 - [armhf,arm64] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0) - securityfs: fix use-after-free on symlink traversal - apparmorfs: fix use-after-free on symlink traversal - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored - [x86] kvm: hyper-v: deal with buggy TLB flush requests from WS2012 - mac80211: Fix kernel panic due to use of txq after free - net: ieee802154: fix missing checks for regmap_update_bits - [armhf,arm64] KVM: Ensure vcpu target is unset on reset failure - bpf: Fix preempt_enable_no_resched() abuse - qmi_wwan: new Wistron, ZTE and D-Link devices - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb() - sched/cpufreq: Fix kobject memleak - [x86] mm/mem_encrypt: Disable all instrumentation for early SME setup - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour - perf bench numa: Add define for RUSAGE_THREAD if not present - [x86] perf/intel: Fix race in intel_pmu_disable_event() - md/raid: raid5 preserve the writeback action after the parity check - driver core: Postpone DMA tear-down until after devres release for probe failure - bpf: relax inode permission check for retrieving bpf program - bpf: add map_lookup_elem_sys_only for lookups from syscall side - bpf, lru: avoid messing with eviction heuristics upon syscall lookup https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.47 - [x86] Hide the int3_emulate_call/jmp functions from UML - ext4: do not delete unlinked inode from orphan list on failed truncate - ext4: wait for outstanding dio during truncate in nojournal mode - f2fs: Fix use of number of devices - [x86] KVM: fix return value for reserved EFER - bio: fix improper use of smp_mb__before_atomic() - sbitmap: fix improper use of smp_mb__before_atomic() - Revert "scsi: sd: Keep disk read-only when re-reading partition" - [ppc64el] crypto: vmx - CTR: always increment IV as quadword - [arm*] mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem - [arm*] mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead - [arm64] kernel: kaslr: reduce module randomization range to 2 GB - [arm64] iommu: handle non-remapped addresses in ->mmap and ->get_sgtable - gfs2: Fix sign extension bug in gfs2_update_stats - btrfs: don't double unlock on error in btrfs_punch_hole - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path - Btrfs: avoid fallback to transaction commit during fsync of files with holes - Btrfs: fix race between ranged fsync and writeback of adjacent ranges - btrfs: sysfs: Fix error path kobject memory leak - btrfs: sysfs: don't leak memory when failing add fsid - udlfb: fix some inconsistent NULL checking - fbdev: fix divide error in fb_var_to_videomode - NFSv4.2 fix unnecessary retry in nfs4_copy_file_range - NFSv4.1 fix incorrect return value in copy_file_range - bpf: add bpf_jit_limit knob to restrict unpriv allocations - [arm64] errata: Add workaround for Cortex-A76 erratum #1463225 - btrfs: honor path->skip_locking in backref code - ovl: relax WARN_ON() for overlapping layers use case - fbdev: fix WARNING in __alloc_pages_nodemask bug - media: cpia2: Fix use-after-free in cpia2_exit - media: serial_ir: Fix use-after-free in serial_ir_init_module - media: vb2: add waiting_in_dqbuf flag - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit - bpf: devmap: fix use-after-free Read in __dev_map_entry_free - batman-adv: mcast: fix multicast tt/tvlv worker locking - at76c50x-usb: Don't register led_trigger if usb_register_driver failed - acct_on(): don't mess with freeze protection - gfs2: Fix lru_count going negative - cxgb4: Fix error path in cxgb4_init_module - NFS: make nfs_match_client killable - IB/hfi1: Fix WQ_MEM_RECLAIM warning - gfs2: Fix occasional glock use-after-free - mmc: core: Verify SD bus width - [arm64] dmaengine: tegra210-dma: free dma controller in remove() - net: ena: gcc 8: fix compilation warning - [x86] hv_netvsc: fix race that may miss tx queue wakeup - Bluetooth: Ignore CC events not matching the last HCI command - [x86] ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE - [armhf,arm64] usb: dwc2: gadget: Increase descriptors count for ISOC's - [armhf,arm64] usb: dwc3: move synchronize_irq() out of the spinlock protected block - ASoC: hdmi-codec: unlock the device on startup errors - [ppc64el] perf: Return accordingly on invalid chip-id in - [ppc64el] boot: Fix missing check of lseek() return value - [ppc64el] perf: Fix loop exit condition in nest_imc_event_init - [armhf] ASoC: imx: fix fiq dependencies - [amd64] spi: pxa2xx: fix SCR (divisor) calculation - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() - drm/nouveau/bar/nv50: ensure BAR is mapped - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals - [ppc64el] watchdog: Use hrtimers for per-CPU heartbeat - sched/cpufreq: Fix kobject memleak - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() - scsi: qla2xxx: Fix hardirq-unsafe locking - [x86] modules: Avoid breaking W^X while loading modules - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve - btrfs: fix panic during relocation after ENOSPC before writeback happens - btrfs: Don't panic when we can't find a root key - iwlwifi: pcie: don't crash on invalid RX interrupt - scsi: qedi: Abort ep termination if offload not scheduled - [s390x] kexec_file: Fix detection of text segment in ELF loader - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs - w1: fix the resume command API - [s390x] qeth: address type mismatch warning - [armhf,arm64] dmaengine: pl330: _stop: clear interrupt status - mac80211/cfg80211: update bss channel on channel switch - mwifiex: prevent an array overflow - rsi: Fix NULL pointer dereference in kmalloc - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE - nvme-rdma: fix a NULL deref when an admin connect times out - [armhf,arm64] crypto: sun4i-ss - Fix invalid calculation of hash end - bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set - bcache: return error immediately in bch_journal_replay() - bcache: fix failure in journal relplay - bcache: add failure check to run_cache_set() for journal replay - bcache: avoid clang -Wunintialized warning - RDMA/cma: Consider scope_id while binding to ipv6 ll address - vfio-ccw: Do not call flush_workqueue while holding the spinlock - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev - [x86] mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions - Bluetooth: hci_qca: Give enough time to ROME controller to bootup. - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version - [armhf] pinctrl: samsung: fix leaked of_node references - [armhf] clk: rockchip: undo several noc and special clocks as critical on rk3288 - [arm64] perf/arm-cci: Remove broken race mitigation - media: au0828: stop video streaming only when last user stops - audit: fix a memory leak bug - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() - media: pvrusb2: Prevent a buffer overflow - block: fix use-after-free on gendisk - [ppc64el] numa: improve control of topology updates - [ppc64el] Fix booting large kernels with STRICT_KERNEL_RWX - random: fix CRNG initialization when random.trust_cpu=1 - random: add a spinlock_t to struct batched_entropy - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock - sched/core: Check quota and period overflow at usec to nsec conversion - sched/rt: Check integer overflow at usec to nsec conversion - sched/core: Handle overflow in cpu_shares_write_u64 - [arm*] staging: vc04_services: handle kzalloc failure - [arm64] drm/msm: a5xx: fix possible object reference leak - irq_work: Do not raise an IPI when queueing work on the local CPU - [x86] thunderbolt: Take domain lock in switch sysfs attribute callbacks - [s390x] qeth: handle error from qeth_update_from_chp_desc() - USB: core: Don't unbind interfaces following device reset failure - [amd64] irq: Limit IST stack overflow check to #DB stack - [armhf] drm: etnaviv: avoid DMA API warning when importing buffers - [armhf,arm64] phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode - i40e: Able to add up to 16 MAC filters on an untrusted VF - i40e: don't allow changes to HW VLAN stripping on active port VLANs - ACPI/IORT: Reject platform device creation on NUMA node mapping failure - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure - [x86] perf/msr: Add Icelake support - [x86] perf/intel/rapl: Add Icelake support - [x86] perf/intel/cstate: Add Icelake support - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses - scsi: libsas: Do discovery on empty PHY to update PHY info - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers - [armhf,arm64] mmc_spi: add a status check for spi_sync_locked - drm/amdgpu: fix old fence check in amdgpu_fence_emit - PM / core: Propagate dev->power.wakeup_path when no callbacks - [armhf] clk: rockchip: Fix video codec clocks on rk3288 - [armhf] clk: rockchip: Make rkpwm a critical clock on rk3288 - [s390x] zcrypt: initialize variables before_use - [x86] microcode: Fix the ancient deprecated microcode loading method - [s390x] mm: silence compiler warning when compiling without CONFIG_PGSTE - [s390x] cio: fix cio_irb declaration - qmi_wwan: Add quirk for Quectel dynamic config - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR - rtlwifi: fix a potential NULL pointer dereference - mwifiex: Fix mem leak in mwifiex_tm_cmd - brcmfmac: fix missing checks for kmemdup - b43: shut up clang -Wuninitialized variable warning - brcmfmac: convert dev_init_lock mutex to completion - brcmfmac: fix WARNING during USB disconnect in case of unempty psq - brcmfmac: fix race during disconnect when USB completion is in progress - brcmfmac: fix Oops when bringing up interface during USB disconnect - [arm64] rtc: xgene: fix possible race condition - rtlwifi: fix potential NULL pointer dereference - scsi: ufs: Fix regulator load and icc-level configuration - scsi: ufs: Avoid configuring regulator with undefined voltage range - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext - [x86] uaccess, signal: Fix AC=1 bloat - [amd64] ia32: Fix ia32_restore_sigcontext() AC leak - [x86] uaccess: Fix up the fixup - chardev: add additional check for minor range overlap - [arm64] RDMA/hns: Fix bad endianess of port_pd variable - HID: core: move Usage Page concatenation to Main item - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put - cxgb3/l2t: Fix undefined behaviour - HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent - [armhf] spi: tegra114: reset controller on probe - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. - [armhf] media: wl128x: prevent two potential buffer overflows - media: gspca: Kill URBs on USB device disconnect - efifb: Omit memory map check on legacy boot - [x86] thunderbolt: property: Fix a missing check of kzalloc - [x86] thunderbolt: Fix to check the return value of kmemdup - timekeeping: Force upper bound for setting CLOCK_REALTIME - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check - virtio_console: initialize vtermno value for ports - tty: ipwireless: fix missing checks for ioremap - overflow: Fix -Wtype-limits compilation warnings - [x86] mce: Fix machine_check_poll() tests for error types - rcutorture: Fix cleanup path for invalid torture_type strings - [x86] mce: Handle varying MCA bank counts - rcuperf: Fix cleanup path for invalid perf_type strings - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown - scsi: qla4xxx: avoid freeing unallocated dma memory - scsi: lpfc: avoid uninitialized variable warning - selinux: avoid uninitialized variable warning - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies - dmaengine: tegra210-adma: use devm_clk_*() helpers - [armhf] hwrng: omap - Set default quality - [x86] thunderbolt: Fix to check return value of ida_simple_get - [x86] thunderbolt: Fix to check for kmemdup failure - drm/amd/display: fix releasing planes when exiting odm - [x86] thunderbolt: property: Fix a NULL pointer dereference - e1000e: Disable runtime PM on CNP+ - igb: Exclude device from suspend direct complete optimization - media: dvbsky: Avoid leaking dvb frontend - drm/amd/display: Fix Divide by 0 in memory calculations - drm/amd/display: Set stream->mode_changed when connectors change - scsi: ufs: fix a missing check of devm_reset_control_get - media: gspca: do not resubmit URBs when streaming has stopped - media: go7007: avoid clang frame overflow warning with KASAN - scsi: lpfc: Fix FDMI manufacturer attribute value - scsi: lpfc: Fix fc4type information for FDMI - media: saa7146: avoid high stack usage with clang - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers - [armhf] drm/omap: dsi: Fix PM for display blank with paired dss_pll calls - [armhf] spi: imx: stop buffer overflow in RX FIFO flush - spi: Fix zero length xfer bug - [armhf] ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM - drm/drv: Hold ref on parent device during drm_device lifetime - drm: Wake up next in drm_read() chain if we are forced to putback the event - [s390x] vfio-ccw: Prevent quiesce function going into an infinite loop - NFS: Fix a double unlock from nfs_match,get_client https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.48 - bonding/802.3ad: fix slave link initialization transition states - cxgb4: offload VLAN flows regardless of VLAN ethtype - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address - ipv6: Fix redirect with VRF - llc: fix skb leak in llc_build_and_send_ui_pkt() - [armhf,arm64] net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT - net-gro: fix use-after-free read in napi_gro_frags() - [armhf,arm64] net: mvneta: Fix err code path of probe - [armhf,arm64] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value - net: phy: marvell10g: report if the PHY fails to boot firmware - net: sched: don't use tc_action->order during action dump - [armhf,arm64] net: stmmac: fix reset gpio free missing - usbnet: fix kernel crash after disconnect - net/mlx5: Avoid double free in fs init error unwinding path - tipc: Avoid copying bytes beyond the supplied data - net/mlx5: Allocate root ns memory using kzalloc to match kfree - net/mlx5e: Disable rxhash when CQE compress is enabled - [armhf,arm64] net: stmmac: dma channel control register need to be init first - bnxt_en: Fix aggregation buffer leak under OOM condition. - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually - include/linux/compiler*.h: define asm_volatile_goto - compiler.h: give up __compiletime_assert_fallback() - jump_label: move 'asm goto' support test to Kconfig - tipc: fix modprobe tipc failed after switch order of device registration https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.49 - include/linux/bitops.h: sanitize rotate primitives - xhci: update bounce buffer with correct sg num - xhci: Use %zu for printing size_t type - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() - usb: xhci: avoid null pointer deref when bos field is NULL - usbip: usbip_host: fix BUG: sleeping function called from invalid context - usbip: usbip_host: fix stub_dev lock context imbalance regression - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor - USB: sisusbvga: fix oops in error path of sisusb_probe - USB: Add LPM quirk for Surface Dock GigE adapter - USB: rio500: refuse more than one device at a time - USB: rio500: fix memory leak in close after disconnect - media: usb: siano: Fix general protection fault in smsusb - media: usb: siano: Fix false-positive "uninitialized variable" warning - media: smsusb: better handle optional alignment - brcmfmac: fix NULL pointer derefence during USB disconnect - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) - tracing: Avoid memory leak in predicate_parse() - Btrfs: fix wrong ctime and mtime of a directory after log replay - Btrfs: fix race updating log root item during fsync - Btrfs: fix fsync not persisting changed attributes of a directory - Btrfs: incremental send, fix file corruption when no-holes feature is enabled - [s390x] crypto: fix gcm-aes-s390 selftest failures - [s390x] crypto: fix possible sleep during spinlock aquired - [ppc64el] KVM: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts - [ppc64el] perf: Fix MMCRA corruption by bhrb_filter - ALSA: line6: Assure canceling delayed work at disconnection - ALSA: hda/realtek - Set default power save node to 0 - [s390x] KVM: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID - drm/nouveau/i2c: Disable i2c bus access after ->fini() - [arm64] tty: serial: msm_serial: Fix XON/XOFF - memcg: make it work on sparse non-0-node systems - kernel/signal.c: trace_signal_deliver when signal_group_exit - [arm64] Fix the arm64_personality() syscall wrapper redirection - vt/fbcon: deinitialize resources in visual_init() after failed memory allocation - [arm*] staging: vc04_services: prevent integer overflow in create_pagelist() - [x86] staging: wlan-ng: fix adapter initialization failure - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM - Revert "lockd: Show pid of lockd for remote locks" - [armhf,arm64] drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY clock initialization - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz - [armhf,arm64] drm/rockchip: shutdown drm subsystem on shutdown - drm/lease: Make sure implicit planes are leased - [x86] ftrace: Do not call function graph from dynamic trampolines - [x86] ftrace: Set trampoline pages as executable - [x86] kprobes: Set instruction page as executable - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized variable warning") - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.50 - ethtool: fix potential userspace buffer overflow - Fix memory leak in sctp_process_init - ipv4: not do cache for local delivery if bc_forwarding is enabled - ipv6: fix the check before getting the cookie in rt6_get_cookie - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit - [armhf] net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query - [armhf,arm64] net: mvpp2: Use strscpy to handle stat strings - net: rds: fix memory leak in rds_ib_flush_mr_pool - net: sfp: read eeprom in maximum 16 byte increments - packet: unconditionally free po->rollover - pktgen: do not sleep with the thread lock held. - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl - rcu: locking and unlocking need to always be at least barriers - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled - fuse: fallocate: fix return with locked inode - pstore: Remove needless lock during console writes - pstore: Convert buf_lock to semaphore - pstore: Set tfm to NULL on free_buf_for_compression - pstore/ram: Run without kernel crash dump region - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume - [s390x] mm: fix address space detection in exception handling - xen-blkfront: switch kcalloc to kvcalloc for large array allocation - [ppc64el] genwqe: Prevent an integer overflow in the ioctl - test_firmware: Use correct snprintf() limit - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels - [arm64] drm/msm: fix fb references in async update - drm: add non-desktop quirk for Valve HMDs - drm: add non-desktop quirks to Sensics and OSVR headsets. - drm/amdgpu/psp: move psp version specific function pointers to early_init - drm/radeon: prefer lower reference dividers - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in - [x86] drm/i915: Fix I915_EXEC_RING_MASK - [x86] drm/i915/fbc: disable framebuffer compression on GeminiLake - [x86] drm/i915: Maintain consistent documentation subsection ordering - drm: don't block fb changes for async plane updates - [x86] drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack - TTY: serial_core, add ->install - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled - ethtool: check the return value of get_regs_len https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.51 - fs/fat/file.c: issue flush after the writeback of FAT - sysctl: return -EINVAL if val violates minmax - ipc: prevent lockup on alloc_msg and free_msg - [armhf] prevent tracing IPI_CPU_BACKTRACE - hugetlbfs: on restore reserve error path retain subpool reservation - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails - initramfs: free initrd memory if opening /initrd.image fails - mm/cma.c: fix the bitmap status to show failed allocation reason - mm: page_mkclean vs MADV_DONTNEED race - mm/cma_debug.c: fix the break condition in cma_maxchunk_get() - mm/slab.c: fix an infinite loop in leaks_show() - kernel/sys.c: prctl: fix false positive in validate_prctl_map() - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER - [x86] mfd: intel-lpss: Set the device in reset state when init - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration - [armhf] mfd: twl6040: Fix device init errors for ACCCTL register - [x86] perf/intel: Allow PEBS multi-entry in watermark mode - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change - [arm64] drm/bridge: adv7511: Fix low refresh rate selection - objtool: Don't use ignore flag for fake jumps - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks - bpf: fix undefined behavior in narrow load handling - [arm64] pwm: meson: Use the spin-lock only to protect register modifications - ntp: Allow TAI-UTC offset to be set to zero - f2fs: fix to avoid panic in do_recover_data() - f2fs: fix to avoid panic in f2fs_inplace_write_data() - f2fs: fix to avoid panic in f2fs_remove_inode_page() - f2fs: fix to do sanity check on free nid - f2fs: fix to clear dirty inode in error path of f2fs_iget() - f2fs: fix to avoid panic in dec_valid_block_count() - f2fs: fix to use inline space only if inline_xattr is enable - f2fs: fix to do sanity check on valid block count of segment - f2fs: fix to do checksum even if inode page is uptodate - percpu: remove spurious lock dependency between percpu and sched - configfs: fix possible use-after-free in configfs_register_group - [armhf,arm64] PCI: dwc: Free MSI in dw_pcie_host_init() error path - [armhf,arm64] PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi() - ovl: do not generate duplicate fsnotify events for "fake" path - mmc: mmci: Prevent polling for busy detection in IRQ context - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast - netfilter: nf_conntrack_h323: restore boundary check correctness - [mips*] Make sure dt memory regions are valid - netfilter: nf_tables: fix base chain stat rcu_dereference usage - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values - watchdog: fix compile time error of pretimeout governors - blk-mq: move cancel of requeue_work into blk_mq_release - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly - nvme-pci: unquiesce admin queue on shutdown - nvme-pci: shutdown on timeout during deletion - netfilter: nf_flow_table: check ttl value in flow offload data path - netfilter: nf_flow_table: fix netdev refcnt leak - ALSA: hda - Register irq handler after the chip initialization - nvmem: core: fix read buffer in place - [armhf,arm64] nvmem: sunxi_sid: Support SID on A83T and H5 - fuse: retrieve: cap requested size to negotiated max_write - nfsd: allow fh_want_write to be called twice - nfsd: avoid uninitialized variable warning - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING" - [armhf,arm64] iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel - [x86] net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending - [x86] PCI: Fix PCI IRQ routing table memory leak - i40e: Queues are reserved despite "Invalid argument" error - platform/chrome: cros_ec_proto: check for NULL transfer function - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 - [armhf] soc: rockchip: Set the proper PWM for rk3288 - [armhf] dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove paths - drm/amd/display: Use plane->color_space for dpp if specified - [armhf] OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it - [x86] platform: intel_pmc_ipc: adding error handling - [arm64] net: hns3: return 0 and print warning when hit duplicate MAC - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags - [x86] video: hgafb: fix potential NULL pointer dereference - block, bfq: increase idling for weight-raised queues - [arm64] PCI: xilinx: Check for __get_free_pages() failure - ice: Add missing case in print_link_msg for printing flow control - [x86] dmaengine: idma64: Use actual device for DMA transfers - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa - pwm: Fix deadlock warning when removing PWM device - [armhf] exynos: Fix undefined instruction during Exynos5422 resume - [x86] usb: typec: fusb302: Check vconn is off when we start toggling - soc: renesas: Identify R-Car M3-W ES1.3 - percpu: do not search past bitmap when allocating an area - ovl: check the capability before cred overridden - ovl: support stacked SEEK_HOLE/SEEK_DATA - [arm*] drm/vc4: fix fb references in async update - ALSA: seq: Cover unsubscribe_port() in list_mutex https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.52 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.53 - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled - HID: multitouch: handle faulty Elo touch device - HID: wacom: Don't set tool type until we're in range - HID: wacom: Don't report anything prior to the tool entering range - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary - ALSA: oxfw: allow PCM capture for Stanton SCS.1m - ALSA: hda/realtek - Update headset mode for ALC256 - ALSA: firewire-motu: fix destruction of data for isochronous resources - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() - mm/vmscan.c: fix trying to reclaim unevictable LRU page - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO - ptrace: restore smp_rmb() in __ptrace_may_access() - [armhf,arm64] iommu/arm-smmu: Avoid constant zero in TLBI writes - bcache: fix stack corruption by PRECEDING_KEY() - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() - [x86] drm/i915/sdvo: Implement proper HDMI audio support for SDVO - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var - f2fs: fix to avoid accessing xattr across the boundary - scsi: qedi: remove memset/memcpy to nfunc and use func instead (CVE-2019-15090) - scsi: qedi: remove set but not used variables 'cdev' and 'udev' - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show - scsi: lpfc: add check for loss of ndlp when sending RRQ - [arm64] mm: Inhibit huge-vmap with ptdump - nvme: fix srcu locking on error return in nvme_get_ns_from_disk - nvme: remove the ifdef around nvme_nvm_ioctl - nvme: merge nvme_ns_ioctl into nvme_ioctl - nvme: release namespace SRCU protection before performing controller ioctls - nvme: fix memory leak for power latency tolerance - [x86] platform: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table - [x86] platform: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table - scsi: bnx2fc: fix incorrect cast to u64 on shift operation - libnvdimm: Fix compilation warnings with W=1 - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts - usbnet: ipheth: fix racing condition - [armhf,arm64] KVM: Move cc/it checks under hyp's Makefile to avoid instrumentation - [x86] KVM: pmu: mask the result of rdpmc according to the width of the counters - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() - [armhf,arm64] usb: dwc2: Fix DMA cache alignment issues - [armhf,arm64] usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. - USB: usb-storage: Add new ID to ums-realtek - USB: serial: pl2303: add Allied Telesis VT-Kit3 - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode - USB: serial: option: add Telit 0x1260 and 0x1261 compositions - timekeeping: Repair ktime_get_coarse*() granularity - [x86] microcode, cpuhotplug: Add a microcode loader CPU hotplug callback - [x86] mm/KASLR: Compute the size of the vmemmap section properly - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled - drm/edid: abstract override/firmware EDID retrieval - drm: add fallback override/firmware EDID modes workaround - [armhf] rtc: pcf8523: don't return invalid date when battery is low https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.54 - ax25: fix inconsistent lock state in ax25_destroy_timer - be2net: Fix number of Rx queues used for flow hashing - [x86] hv_netvsc: Set probe mode to sync - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero - lapb: fixed leak of control-blocks. - neigh: fix use-after-free read in pneigh_get_next - net: openvswitch: do not free vport if register_netdevice() is failed. - sctp: Free cookie before we memdup a new one - tipc: purge deferredq list for each grp member in tipc_group_delete - vsock/virtio: set SOCK_DONE on peer shutdown - net/mlx5: Avoid reloading already removed devices - [armhf,arm64] net: mvpp2: prs: Fix parser range for VID filtering - [armhf,arm64] net: mvpp2: prs: Use the correct helpers when removing all VID filters - [arm*] Staging: vc04_services: Fix a couple error codes - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints - netfilter: nf_queue: fix reinject verdict handling - ipvs: Fix use-after-free in ip_vs_in - [armhf] clk: ti: clkctrl: Fix clkdm_clk handling - [ppc64el] powernv: Return for invalid IMC domain - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() - mISDN: make sure device name is NUL terminated - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor - perf/ring_buffer: Fix exposing a temporarily decreased data_head - perf/ring_buffer: Add ordering to rb->nest increment - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data - [armhf,arm64] net: stmmac: update rx tail pointer register to fix rx dma hang issue. - ACPI/PCI: PM: Add missing wakeup.flags.valid checks - [armhf] drm/etnaviv: lock MMU while dumping core - net: aquantia: tx clean budget logic error - net: aquantia: fix LRO with FCS error - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr - ALSA: hda - Force polling mode on CNL for fixing codec communication - configfs: Fix use-after-free when accessing sd->s_dentry - perf data: Fix 'strncat may truncate' build failure with recent gcc - perf namespace: Protect reading thread's namespace - [s390x] perf record: Fix s390 missing module symbol and warning for non-root users - xenbus: Avoid deadlock during suspend due to open transactions - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token list - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu - [arm64] fix syscall_fn_t type - [arm64] use the correct function type in SYSCALL_DEFINE0 - [arm64] use the correct function type for __arm64_sys_ni_syscall - net: phylink: ensure consistent phy interface mode - net: phy: dp83867: Set up RGMII TX delay - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask - scsi: scsi_dh_alua: Fix possible null-ptr-deref - scsi: libsas: delete sas port if expander discover failed - ocfs2: fix error path kobject memory leak - coredump: fix race condition between collapse_huge_page() and core dumping - Abort file_remove_privs() for non-reg. files https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.55 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.56 - tracing: Silence GCC 9 array bounds warning - objtool: Support per-function rodata sections - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls - ovl: make i_ino consistent with st_ino in more cases - ovl: detect overlapping layers - ovl: don't fail with disconnected lower NFS - ovl: fix bogus -Wmaybe-unitialized warning - [s390x] jump_label: Use "jdd" constraint on gcc9 - [s390x] ap: rework assembler functions to use unions for in/out register variables - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning - mmc: core: API to temporarily disable retuning for SDIO CRC errors - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() - mmc: core: Prevent processing SDIO IRQs when the card is suspended - scsi: ufs: Avoid runtime suspend possibly being blocked forever - [armhf,arm64] usb: chipidea: udc: workaround for endpoint conflict issue - xhci: detect USB 3.2 capable host controllers correctly - usb: xhci: Don't try to recover an endpoint if port is in error state. - IB/hfi1: Validate fault injection opcode user input - IB/hfi1: Silence txreq allocation warnings - [x86] Input: synaptics - enable SMBus on ThinkPad E480 and E580 - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD - [x86] Input: silead - add MSSL0017 to acpi_device_id - apparmor: fix PROFILE_MEDIATES for untrusted input - apparmor: enforce nullbyte at end of tag string - brcmfmac: sdio: Disable auto-tuning around commands expected to fail - brcmfmac: sdio: Don't tune while the card is off - parport: Fix mem leak in parport_register_dev_model - IB/rdmavt: Fix alloc_qpn() WARN_ON() - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value - IB/hfi1: Validate page aligned for a given virtual address - [mips*] uprobes: remove set but not used variable 'epc' - [armhf,arm64] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 - [arm64] net: hns: Fix loopback test failed at copper ports - mdesc: fix a missing-check bug in get_vdev_port_node_info() - [arm64] drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times - [arm64] drm/arm/hdlcd: Actually validate CRTC modes - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance - nvmet: fix data_len to 0 for bdev-backed write_zeroes - scsi: ufs: Check that space was properly alloced in copy_query_response - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event - hwmon: (core) add thermal sensors only if dev->of_node is present - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages - nvme: Fix u32 overflow in the number of namespace list calculation - btrfs: start readahead also in seed devices - [armhf] can: flexcan: fix timeout when set small bitrate - can: purge socket error queue on sock destruct - [ppc64el] bpf: use unsigned division instruction for 64-bit operations - [armhf] imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX - [armhf] dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values - [armhf] dts: am57xx-idk: Remove support for voltage switching for SD card - [arm64] sve: should not depend on - [arm64] ssbd: explicitly depend on - [x86] drm/vmwgfx: Use the backdoor port if the HB port is not available - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (CVE-2019-9506) - Bluetooth: Fix regression with minimum encryption key size alignment - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write - cfg80211: fix memory leak of wiphy device name - mac80211: drop robust management frames from unknown TA - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices - mac80211: handle deauthentication/disassociation from TDLS peer - nl80211: fix station_info pertid memory leak - mac80211: Do not use stack memory with scatterlist for GMAC - [x86] resctrl: Don't stop walking closids when a locksetup group is found https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.57 - perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul - perf help: Remove needless use of strncpy() - perf header: Fix unchecked usage of strncpy() - [arm64] Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS - IB/hfi1: Close PSM sdma_progress sleep window - 9p/xen: fix check for xenbus_read error in front_probe - 9p: Use a slab for allocating requests - 9p: embed fcall in req to round down buffer allocs - 9p: add a per-client fcall kmem_cache - 9p: rename p9_free_req() function - 9p: Add refcount to p9_req_t - 9p/rdma: do not disconnect on down_interruptible EAGAIN - 9p: Rename req to rreq in trans_fd - 9p: acl: fix uninitialized iattr access - 9p/rdma: remove useless check in cm_event_handler - 9p: p9dirent_read: check network-provided name length - 9p: potential NULL dereference - 9p/trans_fd: abort p9_read_work if req status changed - 9p/trans_fd: put worker reqs on destroy - net/9p: include trans_common.h to fix missing prototype warning. - qmi_wwan: Fix out-of-bounds read - [armhf,arm64] Revert "usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup" - [armhf,arm64] usb: dwc3: gadget: combine unaligned and zero flags - [armhf,arm64] usb: dwc3: gadget: track number of TRBs per request - [armhf,arm64] usb: dwc3: gadget: use num_trbs when skipping TRBs on ->dequeue() - [armhf,arm64] usb: dwc3: gadget: extract dwc3_gadget_ep_skip_trbs() - [armhf,arm64] usb: dwc3: gadget: introduce cancelled_list - [armhf,arm64] usb: dwc3: gadget: move requests to cancelled_list - [armhf,arm64] usb: dwc3: gadget: remove wait_end_transfer - [armhf,arm64] usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup - fs/proc/array.c: allow reporting eip/esp for all coredumping threads - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask - fs/binfmt_flat.c: make load_flat_shared_library() work - [armhf] clk: socfpga: stratix10: fix divider entry for the emac clocks - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn - dm log writes: make sure super sector log updates are written in order - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() - [x86] speculation: Allow guests to use SSBD even if host does not - [x86] microcode: Fix the microcode load on CPU hotplug for real - [x86] resctrl: Prevent possible overrun during bitmap operations - [x86] KVM: mmu: Allocate PAE root array when using SVM's 32-bit NPT - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O - cpu/speculation: Warn on unsupported mitigations= parameter - SUNRPC: Clean up initialisation of the struct rpc_rqst - [mips*] irqchip/mips-gic: Use the correct local interrupt map registers - eeprom: at24: fix unexpected timeout under high load - af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET - bonding: Always enable vlan tx offload - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop - net/packet: fix memory leak in packet_set_ring() - net: remove duplicate fetch in sock_getsockopt - [armhf,arm64] net: stmmac: fixed new system time seconds value calculation - [armhf,arm64] net: stmmac: set IC bit when transmitting frames with HW timestamp - sctp: change to hold sk after auth shkey is created successfully - team: Always enable vlan tx offload - tipc: change to use register_pernet_device - tipc: check msg->req data len in tipc_nl_compat_bearer_disable - tun: wake up waitqueues after IFF_UP is set - bpf: simplify definition of BPF_FIB_LOOKUP related flags - bpf: lpm_trie: check left child of last leftmost node for NULL - bpf: fix nested bpf tracepoints with per-cpu data - bpf: fix unconnected udp hooks - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err - [arm64] futex: Avoid copying out uninitialised stack in failed cmpxchg() - [arm64] bpf: use more scalable stadd over ldxr / stxr loop in xadd - futex: Update comments and docs about return values of arch futex code - RDMA: Directly cast the sockaddr union to sockaddr - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb - [armhf,arm64] usb: dwc3: Reset num_trbs after skipping - [arm64] insn: Fix ldadd instruction encoding https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.58 - Bluetooth: Fix faulty expression for minimum encryption key size check - block: Fix a NULL pointer dereference in generic_make_request() - md/raid0: Do not bypass blocking queue entered for raid0 bios - netfilter: nf_flow_table: ignore DF bit setting - netfilter: nft_flow_offload: set liberal tracking mode for tcp - netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family - ASoC: soc-pcm: BE dai needs prepare when pause release after resume - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master - [armhf,arm64] ASoC: max98090: remove 24-bit format support if RJ is 0 - [x86] CPU: Add more Icelake model numbers - ALSA: hdac: fix memory release for SST and SOF drivers - scsi: hpsa: correct ioaccel2 chaining - [x86] drm: panel-orientation-quirks: Add quirk for GPD pocket2 - [x86] drm: panel-orientation-quirks: Add quirk for GPD MicroPC - [x86] platform: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi - [x86] platform: intel-vbtn: Report switch events when event wakes device - [x86] platform: mlx-platform: Fix parent device in i2c-mux-reg device registration - i2c: pca-platform: Fix GPIO lookup code - cpuset: restore sanity to cpuset_cpus_allowed_fallback() - mm/mlock.c: change count_mm_mlocked_page_nr return type - tracing: avoid build warning with HAVE_NOP_MCOUNT - module: Fix livepatch/ftrace module text permissions race - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper() - [x86] drm/i915/dmc: protect against reading random memory - crypto: user - prevent operating on larval algorithms - crypto: cryptd - Fix skcipher instance memory leak - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages - ALSA: line6: Fix write on zero-sized buffer - ALSA: usb-audio: fix sign unintended sign extension on left shifts - [x86] ALSA: hda/realtek: Add quirks for several Clevo notebook barebones - [x86] ALSA: hda/realtek - Change front mic location for Lenovo M710q - lib/mpi: Fix karactx leak in mpi_powm - fs/userfaultfd.c: disable irqs for fault_pending and event locks - tracing/snapshot: Resize spare buffer if size changed - [armhf] dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node - drm/amd/powerplay: use hardware fan control if no powerplay fan table - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE - [armhf] drm/etnaviv: add missing failure path to destroy suballoc - [armhf] drm/imx: notify drm core before sending event during crtc disable - drm/imx: only send event on crtc disable if kept disabled - [x86] ftrace: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() - mm/vmscan.c: prevent useless kswapd loops - btrfs: Ensure replaced device doesn't have pending chunk allocation - tty: rocket: fix incorrect forward declaration of 'rp_init()' - net/smc: move unhash before release of clcsock - drm/fb-helper: generic: Don't take module ref for fbcon - f2fs: don't access node/meta inode mapping after iput - mac80211: mesh: fix missing unlock on error in table_path_del() - scsi: tcmu: fix use after free - [amd64] boot/compressed: Do not corrupt EDX on EFER.LME=1 setting - [arm64] net: hns: Fixes the missing put_device in positive leg for roce reset - ALSA: hda: Initialize power_state field properly - rds: Fix warning. - ip6: fix skb leak in ip6frag_expire_frag_queue() - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments - [arm64] net: hns: fix unsigned comparison to less than zero - bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K - netfilter: ipv6: nf_defrag: accept duplicate fragments again - [x86] KVM: degrade WARN to pr_warn_ratelimited - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC - nfsd: Fix overflow causing non-working mounts on 1 TB machines - svcrdma: Ignore source port when computing DRC hash - [mips*] Fix bounds check virt_addr_valid - [mips*] Add missing EHB in mtc0 -> mfc0 sequence. - [arm64] dmaengine: qcom: bam_dma: Fix completed descriptors count - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.59 - [x86] Input: elantech - enable middle button support on 2 ThinkPads - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() - bpf: sockmap, fix use after free from sleep in psock backlog workqueue - mac80211: mesh: fix RCU warning - mac80211: free peer keys before vif down in mesh - iwlwifi: Fix double-free problems in iwl_req_fw_callback() - can: af_can: Fix error path of can_init() - net: phy: rename Asix Electronics PHY driver - [armhf] dts: am335x phytec boards: Fix cd-gpios active level - [s390x] boot: disable address-of-packed-member warning - [x86] drm/vmwgfx: Honor the sg list segment size limitation - [x86] drm/vmwgfx: fix a warning due to missing dma_parms - [armhf] Input: imx_keypad - make sure keyboard can always wake up system - [armhf,arm64] KVM: vgic: Fix kvm_device leak in vgic_its_destroy - mac80211: only warn once on chanctx_conf being NULL - mac80211: do not start any work during reconfigure flow - bpf, devmap: Fix premature entry free on destroying map - bpf, devmap: Add missing bulk queue free - bpf, devmap: Add missing RCU read lock on flush - [amd64] bpf: fix stack layout of JITed bpf code - qmi_wwan: add support for QMAP padding in the RX path - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode - qmi_wwan: extend permitted QMAP mux_id value range - mmc: core: complete HS400 before checking status - md: fix for divide error in status_resync - bnx2x: Check if transceiver implements DDM before access - drm: return -EFAULT if copy_to_user() fails - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL - net: lio_core: fix potential sign-extension overflow on large shift - scsi: qedi: Check targetname while finding boot target information - quota: fix a problem about transfer quota - [armhf,arm64] net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() - NFS4: Only set creation opendata if O_CREAT - net :sunrpc :clnt :Fix xps refcount imbalance on the error path - fscrypt: don't set policy for a dead directory - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length - media: stv0297: fix frequency range limit - ALSA: usb-audio: Fix parse of UAC2 Extension Units - ALSA: hda/realtek - Headphone Mic can't record after S3 - block, bfq: NULL out the bic when it's no longer valid - [arm64] perf pmu: Fix uncore PMU alias list for ARM64 - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() - [x86] tls: Fix possible spectre-v1 in do_get_thread_area() - USB: serial: ftdi_sio: add ID for isodebug v1 - USB: serial: option: add support for GosunCn ME3630 RNDIS mode - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" - p54usb: Fix race between disconnect and firmware loading - usb: gadget: ether: Fix race between gether_disconnect and rx_submit - [armhf,arm64] usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() - [x86] drivers/usb/typec/tps6598x.c: fix portinfo width - [x86] drivers/usb/typec/tps6598x.c: fix 4CC cmd write - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt - HID: Add another Primax PIXART OEM mouse quirk - binder: fix memory leak in error path - carl9170: fix misuse of device driver API - [x86] VMCI: Fix integer overflow in VMCI handle arrays - staging: rtl8712: reduce stack usage, again https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.60 - Revert "e1000e: fix cyclic resets at link up with active tx" - e1000e: start network tx queue only when link is up - [x86] Input: synaptics - enable SMBUS on T480 thinkpad trackpad - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT - firmware: improve LSM/IMA security behaviour - [armhf,arm64] irqchip/gic-v3-its: Fix command queue pointer comparison bug - [armhf] clk: ti: clkctrl: Fix returning uninitialized data - [amd64,arm64] efi/bgrt: Drop BGRT status field reserved bits check - perf/core: Fix perf_sample_regs_user() mm check - [armhf] omap2: remove incorrect __init annotation - afs: Fix uninitialised spinlock afs_volume::cb_break_lock - [x86] apic: Fix integer overflow on 10 bit left shift of cpu_khz - be2net: fix link failure after ethtool offline test - ppp: mppe: Add softdep to arc4 - sis900: fix TX completion - [armhf] dts: imx6ul: fix PWM[1-4] interrupts - [armhf] pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order - dm table: don't copy from a NULL pointer in realloc_argv() - dm verity: use message limit for data block corruption message - [amd64] boot: Fix crash if kernel image crosses page table boundary - [amd64] boot: Add missing fixup_pointer() for next_early_pgt access - HID: chicony: add another quirk for PixArt mouse - HID: multitouch: Add pointstick support for ALPS Touchpad - cpu/hotplug: Fix out-of-bounds read when setting fail state - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL - genirq: Delay deactivation in free_irq() - genirq: Fix misleading synchronize_irq() documentation - genirq: Add optional hardware synchronization for shutdown - [x86] ioapic: Implement irq_get_irqchip_state() callback - [x86] irq: Handle spurious interrupt after shutdown gracefully - [x86] irq: Seperate unused system vectors from spurious entry again - [s390x] fix stfle zero padding - [s390x] qdio: (re-)initialize tiqdio list entries - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues() - regmap-irq: do not write mask register if mask_base is zero - drm/udl: introduce a macro to convert dev to udl. - drm/udl: Replace drm_dev_unref with drm_dev_put - drm/udl: move to embedding drm device inside udl device. - [i386] entry: Fix ENDPROC of common_spurious https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.61 - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path - wil6210: fix potential out-of-bounds read - ath10k: Do not send probe response template for mesh - ath9k: Check for errors when reading SREV register - ath6kl: add some bounds checking - ath10k: add peer id check in ath10k_peer_find_by_id - wil6210: fix spurious interrupts in 3-msi - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection - regmap: debugfs: Fix memory leak in regmap_debugfs_init - batman-adv: fix for leaked TVLV handler. - media: dvb: usb: fix use after free in dvb_usb_device_exit - media: marvell-ccic: fix DMA s/g desc number calculation - media: media_device_enum_links32: clean a reserved field - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries - qed: Set the doorbell address correctly - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig - af_key: fix leaks in key_pol_get_resp and dump_sp. - xfrm: Fix xfrm sel prefix length validation - fscrypt: clean up some BUG_ON()s in block encryption/decryption - perf annotate TUI browser: Do not use member from variable within its own initialization - media: mc-device.c: don't memset __user pointer contents - media: saa7164: fix remove_proc_entry warning - net: phy: Check against net_device being NULL - tua6100: Avoid build warnings. - batman-adv: Fix duplicated OGMs on NETDEV_UP - [armhf] media: wl128x: Fix some error handling in fm_v4l2_init_video_device() - [arm64] net: hns3: set ops to null when unregister ad_dev - cpupower : frequency-set -r option misses the last cpu in related cpu list - [armhf,arm64] net: stmmac: dwmac4: fix flow control issue - [armhf,arm64] net: stmmac: modify default value of tx-frames - [arm64] crypto: inside-secure - do not rely on the hardware last bit for result descriptors - [s390x] qdio: handle PENDING state for QEBSM devices - net: sfp: add mutex to prevent concurrent state checks - ipset: Fix memory accounting for hash types on resize - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode - [s390x] perf report: Fix OOM error in TUI mode on s390 - [arm64] irqchip/meson-gpio: Add support for Meson-G12A SoC - media: uvcvideo: Fix access to uninitialized fields on probe error - iommu: Fix a leak in iommu_insert_resv_region - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4 - [armhf] gpio: omap: ensure irq is enabled before wakeup - regmap: fix bulk writes on paged registers - bpf: silence warning messages in core - selinux: fix empty write to keycreate file - [x86] cpu: Add Ice Lake NNPI to Intel family - [arm64] ASoC: meson: axg-tdm: fix sample clock inversion - rcu: Force inlining of rcu_read_lock() - [x86] cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS - qed: iWARP - Fix tc for MPA ll2 connection - [arm64] net: hns3: fix for skb leak when doing selftest - block: null_blk: fix race condition for null_del_dev - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration - xfrm: fix sa selector validation - sched/core: Add __sched tag for io_schedule() - sched/fair: Fix "runnable_avg_yN_inv" not used warnings - [x86] perf/intel/uncore: Handle invalid event coding for free-running counter - [x86] atomic: Fix smp_mb__{before,after}_atomic() - perf evsel: Make perf_evsel__name() accept a NULL argument - vhost_net: disable zerocopy by default - ipoib: correcly show a VF hardware address - [x86] cacheinfo: Fix a -Wtype-limits warning - blk-iolatency: only account submitted bios - ACPICA: Clear status of GPEs on first direct enable - EDAC/sysfs: Fix memory leak when creating a csrow object - nvme: fix possible io failures when removing multipathed ns - nvme-pci: properly report state change failure in nvme_reset_work - nvme-pci: set the errno on ctrl state change error - lightnvm: pblk: fix freeing of merged pages - [arm64] Do not enable IRQs for ct_user_exit - ipsec: select crypto ciphers for xfrm_algo - ipvs: defer hook registration to avoid leaks - media: i2c: fix warning same module names - ntp: Limit TAI-UTC offset - timer_list: Guard procfs specific code - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0 - media: hdpvr: fix locking and a missing msleep - [armhf] net: stmmac: sun8i: force select external PHY when no internal one - rtlwifi: rtl8192cu: fix error handle when usb probe failed - mt7601u: do not schedule rx_tasklet when the device has been disconnected - mt7601u: fix possible memory leak when the device is disconnected - ipvs: fix tinfo memory leak in start_sync_thread - ath10k: add missing error handling - ath10k: fix PCIE device wake up failed - perf tools: Increase MAX_NR_CPUS and MAX_CACHES - [x86] ASoC: Intel: hdac_hdmi: Set ops to NULL on remove - libata: don't request sense data on !ZAC ATA devices - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch timer - xsk: Properly terminate assignment in xskq_produce_flush_desc - rslib: Fix decoding of shortened codes - rslib: Fix handling of of caller provided syndrome - ixgbe: Check DDM existence in transceiver before access - crypto: serpent - mark __serpent_setkey_sbox noinline - wil6210: drop old event after wmi_call timeout - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec - bcache: check CACHE_SET_IO_DISABLE in allocator code - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() - bcache: acquire bch_register_lock later in cached_dev_free() - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() - bcache: fix potential deadlock in cached_def_free() - [arm64] net: hns3: fix a -Wformat-nonliteral compile warning - [arm64] net: hns3: add some error checking in hclge_tm module - ath10k: destroy sdio workqueue while remove sdio module - [armhf,arm64] net: mvpp2: prs: Don't override the sign bit in SRAM parser shift - igb: clear out skb->tstamp after reading the txtime - iwlwifi: mvm: Drop large non sta frames - perf stat: Make metric event lookup more robust - perf stat: Fix group lookup for metric group - bnx2x: Prevent ptp_task to be rescheduled indefinitely - net: usb: asix: init MAC address buffers - rxrpc: Fix oops in tracepoint - bpf, libbpf, smatch: Fix potential NULL pointer dereference - bonding: validate ip header before check IPPROTO_IGMP - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants - [ppc64el] tools: bpftool: Fix json dump crash on powerpc - Bluetooth: hci_bcsp: Fix memory leak in rx_skb - Bluetooth: Add new 13d3:3491 QCA_ROME device - Bluetooth: Add new 13d3:3501 QCA_ROME device - Bluetooth: 6lowpan: search for destination address in all peers - [ppc64el] perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 - Bluetooth: Check state in l2cap_disconnect_rsp - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() - Bluetooth: validate BLE connection interval updates - gtp: fix suspicious RCU usage - gtp: fix Illegal context switch in RCU read-side critical section. - gtp: fix use-after-free in gtp_encap_destroy() - gtp: fix use-after-free in gtp_newlink() - [armel/marvell,armhf] net: mvmdio: defer probe of orion-mdio if a clock is not ready - iavf: fix dereference of null rx_buffer pointer - floppy: fix out-of-bounds read in next_valid_format - floppy: fix invalid pointer dereference in drive_name - xen: let alloc_xenballooned_pages() fail if not enough memory free - scsi: core: Fix race on creating sense cache - scsi: megaraid_sas: Fix calculation of target ID - crypto: ghash - fix unaligned memory access in ghash_setkey() - [x86] crypto: ccp - Validate the the error value used to index error messages - [arm64] crypto: sha1-ce - correct digest for empty data in finup - [arm64] crypto: sha2-ce - correct digest for empty data in finup - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm - [x86] crypto: ccp - memset structure fields to zero before reuse - [x86] crypto: ccp/gcm - use const time tag comparison. - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" - bcache: Revert "bcache: fix high CPU occupancy during journal" - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" - bcache: ignore read-ahead request failure on backing device - bcache: fix mistaken sysfs entry for io_error counter - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread - Input: alps - don't handle ALPS cs19 trackpoint-only device - [x86] Input: synaptics - whitelist Lenovo T580 SMBus intertouch - Input: alps - fix a mismatch between a condition check and its comment - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages - [arm64] tegra: Update Jetson TX1 GPU regulator timings - iwlwifi: pcie: don't service an interrupt that was masked - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices - NFSv4: Handle the special Linux file open access mode - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error - pNFS: Fix a typo in pnfs_update_layout - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE - ASoC: dapm: Adapt for debugfs API change - raid5-cache: Need to do start() part job after adding journal device - ALSA: seq: Break too long mutex context in the write loop - [x86] ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 - media: videobuf2-dma-sg: Prevent size from overflowing - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed - [arm64] tegra: Fix AGIC register range - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes. - kconfig: fix missing choice values in auto.conf - drm/nouveau/i2c: Enable i2c pads & busses during preinit - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs - dm zoned: fix zone state management race - xen/events: fix binding user event channels to cpus - 9p/xen: Add cleanup path in p9_trans_xen_init - 9p/virtio: Add cleanup path in p9_virtio_init - [x86] boot: Fix memory leak in default_get_smp_config() - [x86] perf/intel: Fix spurious NMI on fixed counter - [x86] perf/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs - [x86] perf/amd/uncore: Set the thread mask for F17h L3 PMCs - drm/edid: parse CEA blocks embedded in DisplayID - [x86] intel_th: pci: Add Ice Lake NNPI support - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() - PCI: Do not poll for PME if the device is in D3cold - [arm64] PCI: qcom: Ensure that PERST is asserted for at least 100 ms - Btrfs: fix data loss after inode eviction, renaming it, and fsync it - Btrfs: fix fsync not persisting dentry deletions due to inode evictions - Btrfs: add missing inode version, ctime and mtime updates when punching hole - IB/mlx5: Report correctly tag matching rendezvous capability - HID: wacom: generic: only switch the mode on devices with LEDs - HID: wacom: generic: Correct pad syncing - HID: wacom: correct touch resolution x/y typo - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields - coda: pass the host file in vma->vm_file on mmap - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures - xfs: fix pagecache truncation prior to reflink - xfs: flush removing page cache in xfs_reflink_remap_prep - xfs: don't overflow xattr listent buffer - xfs: rename m_inotbt_nores to m_finobt_nores - xfs: don't ever put nlink > 0 inodes on the unlinked list - xfs: reserve blocks for ifree transaction during log recovery - xfs: fix reporting supported extra file attributes for statx() - xfs: serialize unaligned dio writes against all other dio writes - xfs: abort unaligned nowait directio early - [ppc64el] watchpoint: Restore NV GPRs while returning from exception - [ppc64el] powernv/npu: Fix reference leak - [ppc64el] pseries: Fix oops in hotplug memory notifier - [arm64] mmc: sdhci-msm: fix mutex while in spinlock - eCryptfs: fix a couple type promotion bugs - [x86] intel_th: msu: Fix single mode with disabled IOMMU - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug - usb: Handle USB3 remote wakeup for LPM enabled devices correctly - blk-throttle: fix zero wait time for iops throttled group - blk-iolatency: clear use_delay when io.latency is set to zero - blkcg: update blkcg_print_stat() to handle larger outputs - [armel/marvell,armhf] net: mvmdio: allow up to four clocks to be specified for orion-mdio - dm bufio: fix deadlock with loop device https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.62 - bnx2x: Prevent load reordering in tx completion processing - [x86] hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() - igmp: fix memory leak in igmpv3_del_delrec() - ipv4: don't set IPv6 only flags to IPv4 addresses - ipv6: rt6_check should return NULL if 'from' is NULL - ipv6: Unlink sibling route in case of failure - [armhf,arm64] net: dsa: mv88e6xxx: wait after reset deactivation - net: make skb_dst_force return true when dst is refcounted - net: neigh: fix multiple neigh timer scheduling - net: openvswitch: fix csum updates for MPLS actions - net: phy: sfp: hwmon: Fix scaling of RX power - [armhf,arm64] net: stmmac: Re-work the queue selection for TSO packets - nfc: fix potential illegal memory access - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b - rxrpc: Fix send on a connected, but unbound socket - sctp: fix error handling on stream scheduler initialization - [x86] sky2: Disable MSI on ASUS P6T - tcp: be more careful in tcp_fragment() - tcp: fix tcp_set_congestion_control() use from bpf hook - tcp: Reset bytes_acked and bytes_received when disconnecting - vrf: make sure skb->data contains ip header to make routing - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn - macsec: fix use-after-free of skb during RX - macsec: fix checksumming after decryption - netrom: fix a memory leak in nr_rx_frame() - netrom: hold sock when setting skb->destructor - net_sched: unset TCQ_F_CAN_BYPASS when adding filters - sctp: not bind the socket in sctp_connect - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query - net: bridge: don't cache ether dest pointer on input - net: bridge: stp: don't cache eth dest pointer before skb pull - dma-buf: balance refcount inbalance - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc - perf/core: Fix exclusive events' grouping - perf/core: Fix race between close() and fork() - ext4: don't allow any modifications to an immutable file - ext4: enforce the immutable flag on open files - mm: add filemap_fdatawait_range_keep_errors() - jbd2: introduce jbd2_inode dirty range scoping - ext4: use jbd2_inode dirty range scoping - ext4: allow directory holes - [x86] KVM: nVMX: do not use dangling shadow VMCS after guest reset - [x86] KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested - mm: vmscan: scan anonymous pages on file refaults - net: sched: verify that q!=NULL before setting q->flags https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.63 - [x86] hvsock: fix epollout hang from race condition - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe - [x86] staging: vt6656: use meaningful error code during buffer allocation - usb: core: hub: Disable hub-initiated U1/U2 - [armhf,arm64] pinctrl: rockchip: fix leaked of_node references - drm/amd/display: Fill prescale_params->scale for RGB565 - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE - drm/amd/display: Disable ABM before destroy ABM struct - drm/amdkfd: Fix a potential memory leak - drm/amdkfd: Fix sdma queue map issue - drm/edid: Fix a missing-check bug in drm_load_edid_firmware() - PCI: Return error if cannot probe VF - [armhf,arm64] gpu: host1x: Increase maximum DMA segment size - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry - drm/crc-debugfs: Also sprinkle irqrestore over early exits - memstick: Fix error cleanup path of memstick_init - [arm64] tty: serial: msm_serial: avoid system lockup condition - serial: 8250: Fix TX interrupt handling condition - drm/amd/display: Always allocate initial connector state state - drm/virtio: Add memory barriers for capset cache. - drm/amd/display: fix compilation error - [ppc64el] pseries/mobility: prevent cpu hotplug during DT update - [armhf,arm64] drm/rockchip: Properly adjust to a true clock in adjusted_mode - [armhf] serial: imx: fix locking in set_termios() - tty: serial_core: Set port active bit in uart_port_activate - usb: gadget: Zero ffs_io_data - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs - [arm64] drm/msm: Depopulate platform on probe failure - [arm64] PCI: xilinx-nwl: Fix Multi MSI data programming - iio: iio-utils: Fix possible incorrect mask calculation - [ppc64el] cacheflush: fix variable set but not used - [ppc64el] xmon: Fix disabling tracing while in xmon - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc - mfd: core: Set fwnode for created devices - [arm64] mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk - mm/swap: fix release_pages() when releasing devmap pages - RDMA/i40iw: Set queue pair state when being queried - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE - [ppc64el] mm: Handle page table allocation failures - IB/ipoib: Add child to parent list only if device initialized - [arm64] assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS - perf stat: Fix use-after-freed pointer detected by the smatch tool - perf top: Fix potential NULL pointer dereference detected by the smatch tool - perf session: Fix potential NULL pointer dereference found by the smatch tool - perf annotate: Fix dereferencing freed memory found by the smatch tool - perf hists browser: Fix potential NULL pointer dereference found by the smatch tool - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM - [armhf] PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h - block: init flush rq ref count to 1 - f2fs: avoid out-of-range memory access - mailbox: handle failed named mailbox channel request - dlm: check if workqueues are NULL before flushing/destroying - [ppc64el] eeh: Handle hugepages in ioremap space - block/bio-integrity: fix a memory leak bug - 9p: pass the correct prototype to read_cache_page - mm/gup.c: mark undo_dev_pagemap as __maybe_unused - mm/gup.c: remove some BUG_ONs from get_gate_page() - memcg, fsnotify: no oom-kill for remote memcg charging - mm/mmu_notifier: use hlist_add_head_rcu() - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup - proc: use down_read_killable mmap_sem for /proc/pid/pagemap - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs - proc: use down_read_killable mmap_sem for /proc/pid/map_files - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() - proc: use down_read_killable mmap_sem for /proc/pid/maps - locking/lockdep: Fix lock used or unused stats error - mm: use down_read_killable for locking mmap_sem in access_remote_vm - locking/lockdep: Hide unused 'class' variable - usb: wusbcore: fix unbalanced get/put cluster_id - [x86] usb: pci-quirks: Correct AMD PLL quirk detection - btrfs: inode: Don't compress if NODATASUM or NODATACOW set - [x86] sysfb_efi: Add quirks for some devices with swapped width and height - [x86] speculation/mds: Apply more accurate check on hypervisor platform - binder: prevent transactions to context manager from its own process. - fpga-manager: altera-ps-spi: Fix build error - [x86] mei: me: add mule creek canyon (EHL) device ids - [x86] hpet: Fix division by zero in hpet_time_div() - ALSA: ac97: Fix double free of ac97_codec_device - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 - ALSA: hda - Add a conexant codec entry to let mute led work - [ppc64el] xive: Fix loop exit-condition in xive_find_target_in_mask() - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() - access: avoid the RCU grace period for the temporary subjective credentials https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.64 - [x86] hv_sock: Add support for delayed close - vsock: correct removal of socket from the list - NFS: Fix dentry revalidation on NFSv4 lookup - NFS: Refactor nfs_lookup_revalidate() - NFSv4: Fix lookup revalidate of regular files - [armhf,arm64] usb: dwc2: Disable all EP's on disconnect - [armhf,arm64] usb: dwc2: Fix disable all EP's on disconnect - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ (Closes: #904385). - binder: fix possible UAF when freeing buffer - ISDN: hfcsusb: checking idx of ep configuration - media: au0828: fix null dereference in error path - ath10k: Change the warning message string - media: cpia2_usb: first wake up, then free in disconnect - media: pvrusb2: use a different format for warnings - NFS: Cleanup if nfs_match_client is interrupted - media: radio-raremono: change devm_k*alloc to k*alloc - [x86] iommu/vt-d: Don't queue_iova() if there is no flush queue - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop (CVE-2019-3900) - vhost: vsock: add weight support - vhost: scsi: add weight support (CVE-2019-3900) - sched/fair: Don't free p->numa_faults with concurrent readers - sched/fair: Use RCU accessors consistently for ->numa_group - /proc//cmdline: remove all the special cases - /proc//cmdline: add back the setproctitle() special case - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl - Fix allyesconfig output. - ceph: hold i_ceph_lock when removing caps for freeing inode - block, scsi: Change the preempt-only flag into a counter - scsi: core: Avoid that a kernel warning appears during system resume - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.65 - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200 - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend - ftrace: Enable trampoline when rec count returns back to one - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset - [arm64] dts: rockchip: fix isp iommu clocks and power domain - kernel/module.c: Only return -EEXIST for modules that have finished loading - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1 - fs/adfs: super: fix use-after-free bug - btrfs: fix minimum number of chunk errors for DUP - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit() - cifs: Fix a race condition with cifs_echo_request - ceph: fix improper use of smp_mb__before_atomic() - ceph: return -ERANGE if virtual xattr value didn't fit in buffer - ACPI: blacklist: fix clang warning for unused DMI table - [s390x] scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized - perf version: Fix segfault due to missing OPT_END() - [x86] kvm: avoid constant-conversion warning - ACPI: fix false-positive -Wuninitialized warning - be2net: Signal that the device cannot transmit during reconfiguration - [x86] apic: Silence -Wtype-limits compiler warnings - mm/cma.c: fail if fixed declaration can't be honored - lib/test_overflow.c: avoid tainting the kernel and fix wrap size - lib/test_string.c: avoid masking memset16/32/64 failures - coda: add error handling for fget - coda: fix build using bare-metal toolchain - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings - ipc/mqueue.c: only perform resource calculation if user valid - [x86] xen/pv: Fix a boot up hang revealed by int3 self test - [x86] kvm: Don't call kvm_spurious_fault() from .fixup - [x86] paravirt: Fix callee-saved function ELF sizes - [x86] boot: Remove multiple copy of static function sanitize_boot_params() - drm/nouveau: fix memory leak in nouveau_conn_reset() - kconfig: Clear "written" flag to avoid data loss - Btrfs: fix incremental send failure after deduplication - Btrfs: fix race leading to fs corruption after transaction abort - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC - [arm64] mmc: meson-mx-sdio: Fix misuse of GENMASK macro - gpiolib: fix incorrect IRQ requesting of an active-low lineevent - IB/hfi1: Fix Spectre v1 vulnerability - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly - selinux: fix memory leak in policydb_init() - ALSA: hda: Fix 1-minute detection delay when i915 module is not available (Closes: #931507) - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker - [s390x] dasd: fix endless loop after read unit address configuration - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier - [arm64] compat: Allow single-byte watchpoints on all addresses - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} - nbd: replace kill_bdev() with __invalidate_device() again - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() - IB/mlx5: Fix unreg_umr to ignore the mkey state - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache - IB/mlx5: Fix clean_mr() to work in the expected order - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification - IB/hfi1: Check for error on call to alloc_rsm_map_table - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping - eeprom: at24: make spd world-readable again - objtool: Support GCC 9 cold subfunction naming scheme - gcc-9: properly declare the {pv,hv}clock_page storage - [x86] vdso: Prevent segfaults due to hoisted vclock reads - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.66 - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure - gcc-9: don't warn about uninitialized variable - driver core: Establish order of operations for device_add and device_del via bitflag - drivers/base: Introduce kill_device() - libnvdimm/bus: Prevent duplicate device_unregister() calls - libnvdimm/region: Register badblocks before namespaces - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock - HID: wacom: fix bit shift for Cintiq Companion 2 - HID: Add quirk for HP X1200 PIXART OEM mouse - IB: directly cast the sockaddr union to aockaddr - atm: iphase: Fix Spectre v1 vulnerability - bnx2x: Disable multi-cos feature. - ife: error out when nla attributes are empty - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 - ip6_tunnel: fix possible use-after-free on xmit - ipip: validate header length in ipip_tunnel_xmit - [armhf,arm64] mvpp2: fix panic on module removal - [armhf,arm64] mvpp2: refactor MTU change code - net: bridge: delete local fdb on device init failure - net: bridge: mcast: don't delete permanent entries when fast leave is enabled - net: fix ifindex collision during namespace removal - net/mlx5e: always initialize frag->last_in_page - net/mlx5: Use reversed order when unregister devices - net: phylink: Fix flow control for fixed-link - net: sched: Fix a possible null-pointer dereference in dequeue_func() - net sched: update vlan action for batched events operations - net: sched: use temporary variable for actions indexes - net/smc: do not schedule tx_work in SMC_CLOSED state - tipc: compat: allow tipc commands without arguments - tun: mark small packets as owned by the tap sock - net/mlx5: Fix modify_cq_in alignment - net/mlx5e: Prevent encap flow counter update async to user query - r8169: don't use MSI before RTL8168d - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling - cgroup: Call cgroup_release() before __exit_signal() - cgroup: Implement css_task_iter_skip() - cgroup: Include dying leaders with live threads in PROCS iterations - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed - cgroup: Fix css_task_iter_advance_css_set() cset skip condition - [arm*] spi: bcm2835: Fix 3-wire mode if DMA is enabled https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.67 - [x86] crypto: ccp - Fix oops by properly managing allocated structures - [x86] crypto: ccp - Add support for valid authsize values less than 16 - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext - usb: usbfs: fix double-free of usb memory upon submiturb error - usb: iowarrior: fix deadlock on disconnect - sound: fix a memory leak bug - [arm64,mips*/octeon] mmc: cavium: Set the correct dma max segment size for mmc_host - [arm64,mips*/octeon] mmc: cavium: Add the missing dma unmap when the dma has finished. - loop: set PF_MEMALLOC_NOIO for the worker thread - Input: usbtouchscreen - initialize PM mutex before using it - [x86] Input: elantech - enable SMBus on new (2018+) systems - [x86] Input: synaptics - enable RMI mode for HP Spectre X360 - [x86] mm: Check for pfn instead of page in vmalloc_sync_one() - [x86] mm: Sync also unmappings in vmalloc_sync_all() - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() - [s390x] perf annotate: Fix s390 gap between kernel end and module start - perf db-export: Fix thread__exec_comm() - [s390x] perf record: Fix module size on s390 - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS - gfs2: gfs2_walk_metadata fix - usb: yurex: Fix use-after-free in yurex_delete - [x86] usb: typec: tcpm: free log buf memory when remove debug file - [x86] usb: typec: tcpm: remove tcpm dir if no children - [x86] usb: typec: tcpm: Add NULL check before dereferencing config - [x86] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests - can: peak_usb: fix potential double kfree_skb() - netfilter: nfnetlink: avoid deadlock due to synchronous request_module - [s390x] vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn - netfilter: Fix rpfilter dropping vrf packets by mistake - netfilter: conntrack: always store window size un-scaled - netfilter: nft_hash: fix symhash with modulus one - drm/amd/display: Wait for backlight programming completion in set backlight level - drm/amd/display: use encoder's engine id to find matched free audio device - drm/amd/display: Fix dc_create failure handling and 666 color depths - drm/amd/display: Only enable audio if speaker allocation exists - drm/amd/display: Increase size of audios array - [x86] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN - mac80211: don't warn about CW params when not using them - allocate_flower_entry: should check for null deref - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 - drm: silence variable 'conn' set but not used - [s390x] qdio: add sanity checks to the fast-requeue path - ALSA: compress: Fix regression on compressed capture streams - ALSA: compress: Prevent bypasses of set_params - ALSA: compress: Don't allow paritial drain operations on capture streams - ALSA: compress: Be more restrictive about when a drain is allowed - perf tools: Fix proper buffer size for feature processing - perf probe: Avoid calling freeing routine multiple times for same pointer - drbd: dynamically allocate shash descriptor - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() - nvme: fix multipath crash when ANA is deactivated - scsi: megaraid_sas: fix panic on loading firmware crashdump - [ppc64el] scsi: ibmvfc: fix WARN_ON during event pool release - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG - test_firmware: fix a memory leak bug - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop - perf/core: Fix creating kernel counters for PMUs that override event->cpu - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value - HID: sony: Fix race condition between rumble and device remove. - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset - ALSA: usb-audio: fix a memory leak bug - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices - hwmon: (nct7802) Fix wrong detection of in4 presence - [x86] drm/i915: Fix wrong escape clock divisor init for GLK - ALSA: firewire: fix a memory leak bug - ALSA: hiface: fix multiple memory leak bugs - ALSA: hda - Don't override global PCM hw info flag - [x86] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) - mac80211: don't WARN on short WMM parameters from AP - dax: dax_layout_busy_page() should not unmap cow pages - SMB3: Fix deadlock in validate negotiate hits reconnect - smb3: send CAP_DFS capability during session setup - NFSv4: Fix an Oops in nfs4_do_setattr - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU - mwifiex: fix 802.11n/WPA detection - iwlwifi: don't unmap as page memory that was mapped as single - iwlwifi: mvm: fix an out-of-bound access - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Uwe Kleine-König ] * [armhf] Add support for all i.MX6 variants. * rtc-s35390a: backport fix to make hwclock able to read the time (Closes: #932845) . [ Ben Hutchings ] * [rt] Update to 4.19.59-rt24: - Fix build failure after "genirq: Prevent use-after-free and work list corruption": + Update "genirq: Do not invoke the affinity callback via a workqueue on RT" + kthread: add a global worker thread. + genirq: Do not invoke the affinity callback via a workqueue on RT + genirq: Handle missing work_struct in irq_set_affinity_notifier() - Update "irqwork: push most work into softirq context" to resolve conflict with "irq_work: Do not raise an IPI when queueing work on the local CPU" - Drop "random: avoid preempt_disable()ed section" - arm: imx6: cpuidle: Use raw_spinlock_t - rcu: Don't allow to change rcu_normal_after_boot on RT - sched/core: Drop a preempt_disable_rt() statement - timers: Redo the notification of canceling timers on -RT - Fix futex regression in 4.19.21: + Revert "futex: Ensure lock/unlock symetry versus pi_lock and hash bucket lock" + Revert "futex: Fix bug on when a requeued RT task times out" + Revert "rtmutex: Handle the various new futex race conditions" + Revert "futex: workaround migrate_disable/enable in different context" + futex: Make the futex_hash_bucket lock raw + futex: Delay deallocation of pi_state - mm/zswap: Do not disable preemption in zswap_frontswap_store() * Bump ABI to 6 linux-signed-arm64 (4.19.37+6) unstable; urgency=high . * Sign kernel from linux 4.19.37-6 . [ John Paul Adrian Glaubitz ] * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap . [ Salvatore Bonaccorso ] * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-arm64 (4.19.37+5+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u2 . [ Romain Perier ] * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233) * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817) * nfc: Ensure presence of required attributes in the deactivate_target handler (CVE-2019-12984) * binder: fix race between munmap() and direct reclaim (CVE-2019-1999) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: switch IP ID generator to siphash (CVE-2019-10638) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) . [ Salvatore Bonaccorso ] * [x86] cpufeatures: Carve out CQM features retrieval * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) * [amd64] entry: Use JMP instead of JMPQ * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * Documentation: Add section about CPU vulnerabilities for Spectre * Documentation: Add swapgs description to the Spectre v1 documentation . [ Ben Hutchings ] * [x86] cpufeatures: Avoid ABI change for swapgs mitigations: - Move swapgs feature bits to existing scattered words - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered features word" * inet: Avoid ABI change for IP ID hash change linux-signed-arm64 (4.19.37+5+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.37-5+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-arm64 (4.19.37+5+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u1 . * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) linux-signed-i386 (4.19.67+2) buster; urgency=medium . * Sign kernel from linux 4.19.67-2 . [ Salvatore Bonaccorso ] * dm: disable DISCARD if the underlying storage no longer supports it (Closes: #934331) * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (CVE-2019-15538) . [ Ben Hutchings ] * KVM: Ignore ABI changes * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) * [ppc64el] Avoid ABI change for disabling TM * netfilter: conntrack: Use consistent ct id hash calculation (fixes regression in 4.19.44) . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-i386 (4.19.67+1) buster; urgency=medium . * Sign kernel from linux 4.19.67-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38 - netfilter: nft_compat: use refcnt_t type for nft_xt reference count - netfilter: nft_compat: make lists per netns - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nft_compat: destroy function must not have side effects - netfilter: nf_tables: warn when expr implements only one of activate/deactivate - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nft_compat: don't use refcount_inc on newly allocated entry - netfilter: nft_compat: use .release_ops and remove list of extension - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - net/ibmvnic: Fix RTNL deadlock during device reset - net: mvpp2: fix validate for PPv2.1 - ext4: fix some error pointer dereferences - tipc: handle the err returned from cmd header function - loop: do not print warn message if partition scan is successful - [armhf,arm64] drm/rockchip: fix for mailbox read validation. - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock - ipvs: fix warning on unused variable - [ppc64el] vdso32: fix CLOCK_MONOTONIC on PPC64 - [armhf,arm64] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new DSA framework - cifs: fix memory leak in SMB2_read - cifs: do not attempt cifs operation on smb2+ rename error - tracing: Fix a memory leak by early error exit in trace_pid_write() - zram: pass down the bvec we need to read into in the work struct - trace: Fix preempt_enable_no_resched() abuse - IB/rdmavt: Fix frwr memory registration - RDMA/mlx5: Do not allow the user to write to the clock page - sched/numa: Fix a possible divide-by-zero - ceph: only use d_name directly when parent is locked - ceph: ensure d_name stability in ceph_dentry_hash() - ceph: fix ci->i_head_snapc leak - nfsd: Don't release the callback slot unless it was actually held - sunrpc: don't mark uninitialised items as VALID. - [x86] perf/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters - Input: synaptics-rmi4 - write config register values to the right offset - [armhf] 8857/1: efi: enable CP15 DMB instructions before cleaning the cache - [ppc64el] mm/radix: Make Radix require HUGETLB_PAGE - [arm*] drm/vc4: Fix memory leak during gpu reset. - [x86] Revert "drm/i915/fbdev: Actually configure untiled displays" - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice - slip: make slhc_free() silently accept an error pointer - [x86] intel_th: gth: Fix an off-by-one in output unassigning - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference - workqueue: Try to catch flush_work() without INIT_WORK(). - sched/deadline: Correctly handle active 0-lag timers - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON - fm10k: Fix a potential NULL pointer dereference - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable - tipc: check link name with right length in tipc_nl_compat_link_set - net: netrom: Fix error cleanup path of nr_proto_init - net/rds: Check address length before reading address family - rxrpc: fix race condition in rxrpc_input_packet() - [x86] retpolines: Raise limit for generating indirect calls from switch-case - [x86] retpolines: Disable switch jump tables when retpolines are enabled - mm: Fix warning in insert_pfn() - [x86] fpu: Don't export __kernel_fpu_{begin,end}() - ipv4: add sanity checks in ipv4_link_failure() - ipv4: set the tcp_min_rtt_wlen range from 0 to one day - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: exchange of 8K and 1M pool - net/rose: fix unbound loop in rose_loopback_timer() - [armhf,arm64] net: stmmac: move stmmac_check_ether_addr() to driver probe - team: fix possible recursive locking when add slaves - [arm64] net: hns: Fix WARNING when hns modules installed - net/mlx5e: Fix the max MTU check in case of XDP - net/mlx5e: Fix use-after-free after xdp_return_frame https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.39 - selinux: use kernel linux/socket.h for genheaders and mdp - Revert "ACPICA: Clear status of GPEs before enabling them" - [arm*] dts: bcm283x: Fix hdmi hpd gpio pull - [s390x] limit brk randomization to 32MB - net: ieee802154: fix a potential NULL pointer dereference - ieee802154: hwsim: propagate genlmsg_reply return code - [armhf,arm64] net: stmmac: don't set own bit too early for jumbo frames - qlcnic: Avoid potential NULL pointer dereference - xsk: fix umem memory leak on cleanup - netfilter: nft_set_rbtree: check for inactive element after flag mismatch - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies - netfilter: ip6t_srh: fix NULL pointer dereferences - [s390x] qeth: fix race when initializing the IP address table - [armhf] imx51: fix a leaked reference by adding missing of_node_put - [arm64] KVM: Reset the PMU in preemptible context - [armhf,arm64] KVM: vgic-its: Take the srcu lock when writing to guest memory - [armhf,arm64] KVM: vgic-its: Take the srcu lock when parsing the memslots - [x86] usb: dwc3: pci: add support for Comet Lake PCH ID - usb: gadget: net2280: Fix overrun of OUT messages - usb: gadget: net2280: Fix net2280_dequeue() - [x86] i2c: i801: Add support for Intel Comet Lake - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference - staging: rtl8712: uninitialized memory in read_bbreg_hdl() - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc - [arm64] net: macb: Add null check for PCLK and HCLK - net/sched: don't dereference a->goto_chain to read the chain index - [armhf] dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi - [armhf,arm64] drm/tegra: hub: Fix dereference before check - NFS: Fix a typo in nfs_init_timeout_values() - drm: Fix drm_release() and device unplug - [arm64] drm/meson: Fix invalid pointer in meson_drv_unbind() - [arm64] drm/meson: Uninstall IRQ handler - scsi: mpt3sas: Fix kernel panic during expander reset - scsi: aacraid: Insure we don't access PCIe space during AER/EEH - scsi: qla4xxx: fix a potential NULL pointer dereference - leds: trigger: netdev: fix refcnt leak on interface rename - [x86] realmode: Don't leak the trampoline kernel address - usb: u132-hcd: fix resource leak - ceph: fix use-after-free on symlink traversal - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi- element RSCN - [x86] mm: Don't exceed the valid physical address space - libata: fix using DMA buffers on stack - gpio: of: Fix of_gpiochip_add() error path - nvme-multipath: relax ANA state check - perf machine: Update kernel map address and re-order properly - [x86] iommu/amd: Reserve exclusion range in iova-domain - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK - leds: trigger: netdev: use memcpy in device_name_store https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.40 - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation - ipv6: A few fixes on dereferencing rt->from - ipv6: fix races in ip6_dst_destroy() - ipv6/flowlabel: wait rcu grace period before put_pid() - ipv6: invert flowlabel sharing check in process and user mode - l2ip: fix possible use-after-free - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() - [armhf] net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc - net: phy: marvell: Fix buffer overrun with stats counters - rxrpc: Fix net namespace cleanup - sctp: avoid running the sctp state machine recursively - packet: validate msg_namelen in send directly - bnxt_en: Improve multicast address setup logic. - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). - [x86] KVM: Whitelist port 0x7e for pre-incrementing %rip - [x86] KVM: nVMX: Fix size checks in vmx_set_nested_state - ALSA: line6: use dynamic buffers - ath10k: Drop WARN_ON()s that always trigger during system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.41 - iwlwifi: fix driver operation for 5350 - mwifiex: Make resume actually do something useful again on SDIO cards - mac80211: don't attempt to rename ERR_PTR() debugfs dirs - [armhf] i2c: imx: correct the method of getting private data in notifier_call - i2c: Remove unnecessary call to irq_find_mapping - i2c: Clear client->irq in i2c_device_remove - i2c: Allow recovery of the initial IRQ by an I2C client device. - i2c: Prevent runtime suspend of adapter when Host Notify is required - [x86] ALSA: hda/realtek - Add new Dell platform for headset mode - [x86] ALSA: hda/realtek - Fixed Dell AIO speaker noise - [x86] ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR - USB: yurex: Fix protection fault after device removal - USB: w1 ds2490: Fix bug caused by improper use of altsetting array - USB: dummy-hcd: Fix failure to give back unlinked URBs - usb: usbip: fix isoc packet num validation in get_pipe - USB: core: Fix unterminated string returned by usb_string() - USB: core: Fix bug caused by duplicate interface PM usage counter - nvme-loop: init nvmet_ctrl fatal_err_work when allocate - [arm64] dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay - HID: logitech: check the return value of create_singlethread_workqueue - HID: debug: fix race condition with between rdesc_show() and device removal - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured - batman-adv: Reduce claim hash refcnt only for removed entry - batman-adv: Reduce tt_local hash refcnt only for removed entry - batman-adv: Reduce tt_global hash refcnt only for removed entry - batman-adv: fix warning in function batadv_v_elp_get_throughput - [armhf] dts: rockchip: Fix gpu opp node names for rk3288 - [arm64] reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev - igb: Fix WARN_ONCE on runtime suspend - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands - bonding: show full hw address in sysfs for slave entries - [armhf,arm64] net: stmmac: use correct DMA buffer size in the RX descriptor - [armhf,arm64] net: stmmac: ratelimit RX error logs - [armhf,arm64] net: stmmac: don't stop NAPI processing when dropping a packet - [armhf,arm64] net: stmmac: don't overwrite discard_frame status - [armhf,arm64] net: stmmac: fix dropping of multi-descriptor RX frames - [armhf,arm64] net: stmmac: don't log oversized frames - jffs2: fix use-after-free on symlink traversal - debugfs: fix use-after-free on symlink traversal - [armhf] mfd: twl-core: Disable IRQ while suspended - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx - HID: input: add mapping for Assistant key - vfio/pci: use correct format characters - scsi: core: add new RDAC LENOVO/DE_Series device - [x86] scsi: storvsc: Fix calculation of sub-channel count - [arm64] fix wrong check of on_sdei_stack in nmi context - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver - [arm64] net: hns: Fix probabilistic memory overwrite when HNS driver initialized - [arm64] net: hns: fix ICMP6 neighbor solicitation messages discard problem - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled - libcxgb: fix incorrect ppmax calculation - [x86] KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow - hugetlbfs: fix memory leak for resv_map - fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock - [armel] orion: don't use using 64-bit DMA masks - block: pass no-op callback to INIT_WORK(). - [x86] perf/amd: Update generic hardware cache events for Family 17h - Bluetooth: btusb: request wake pin with NOAUTOEN - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state - [arm64] clk: qcom: Add missing freq for usb30_master_clk on 8998 - scsi: RDMA/srpt: Fix a credit leak for aborted commands - [x86] ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" - [x86] platform: intel_pmc_core: Fix PCH IP name - [x86] platform: intel_pmc_core: Handle CFL regmap properly - IB/core: Unregister notifier before freeing MAD security - IB/core: Fix potential memory leak while creating MAD agents - IB/core: Destroy QP if XRC QP fails - selinux: avoid silent denials in permissive mode under RCU walk - selinux: never allow relabeling on context mounts - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode - [ppc64el] mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search - [x86] mce: Improve error message when kernel cannot recover, p2 - [x86] clk: Add system specific quirk to mark clocks as critical - [x86] mm/KASLR: Fix the size of the direct mapping section - [x86] mm: Fix a crash with kmemleak_scan() - [x86] mm/tlb: Revert "x86/mm: Align TLB invalidation info" - media: v4l2: i2c: ov7670: Fix PLL bypass register values https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.42 - [armhf,arm64] net: stmmac: Use bfsize1 in ndesc_init_rx_desc - [x86] Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() - ASoC: hdmi-codec: fix S/PDIF DAI - ASoC:soc-pcm:fix a codec fixup issue in TDM case - [x86] ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform - [arm64] clk: meson-gxbb: round the vdec dividers to closest - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol - [armhf] drm/omap: hdmi4_cec: Fix CEC clock handling for PM - IB/hfi1: Eliminate opcode tests on mr deref - IB/hfi1: Fix the allocation of RSM table - [x86] perf/intel: Fix handling of wakeup_events for multi-entry PEBS - [x86] perf/intel: Initialize TFA MSR - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() - drm/amd/display: fix cursor black issue - objtool: Add rewind_stack_do_exit() to the noreturn list - slab: fix a crash by reading /proc/slab_allocators - [armhf,arm64] drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind - virtio_pci: fix a NULL pointer reference in vp_del_vqs - [x86] RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove - [arm64] RDMA/hns: Fix bug that caused srq creation to fail - scsi: csiostor: fix missing data copy in csio_scsi_err_handler() - [x86] ASoC: Intel: kbl: fix wrong number of channels - virtio-blk: limit number of hw queues by nr_cpu_ids - nvme-fc: correct csn initialization and increments on error - [x86] platform: pmc_atom: Drop __initconst on dmi table - perf/core: Fix perf_event_disable_inatomic() race - [x86] iommu/amd: Set exclusion range correctly - genirq: Prevent use-after-free and work list corruption - usb: dwc3: Fix default lpm_nyet_threshold value - USB: serial: f81232: fix interrupt worker not stop - USB: cdc-acm: fix unthrottle races - usb-storage: Set virt_boundary_mask to avoid SG overflows - [x86] intel_th: pci: Add Comet Lake support - [arm64] cpufreq: armada-37xx: fix frequency calculation for opp - scsi: lpfc: change snprintf to scnprintf for possible overflow - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines - scsi: qla2xxx: Fix device staying in blocked state - UAS: fix alignment of scatter/gather segments - [x86] ASoC: Intel: avoid Oops if DMA setup fails - locking/futex: Allow low-level atomic operations to return -EAGAIN - [arm64] futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.43 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44 - bfq: update internal depth state when queue depth changes - [x86] platform: sony-laptop: Fix unintentional fall-through - [x86] platform: thinkpad_acpi: Disable Bluetooth for some machines - [x86] platform: dell-laptop: fix rfkill functionality - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails - kernfs: fix barrier usage in __kernfs_new_node() - [x86] virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace - USB: serial: fix unthrottle races - acpi/nfit: Always dump _DSM output payload - libnvdimm/namespace: Fix a potential NULL pointer dereference - HID: input: add mapping for Expose/Overview key - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys - HID: input: add mapping for "Toggle Display" key - libnvdimm/btt: Fix a kmemdup failure check - [s390x] dasd: Fix capacity calculation for large volumes - mac80211: fix unaligned access in mesh table hash function - mac80211: Increase MAX_MSG_LEN - cfg80211: Handle WMM rules in regulatory domain intersection - mac80211: fix memory accounting with A-MSDU aggregation - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands - libnvdimm/pmem: fix a possible OOB access when read and write pmem - [s390x] 3270: fix lockdep false positive on view->lock - drm/amd/display: extending AUX SW Timeout - mISDN: Check address length before reading address family - vxge: fix return of a free'd memblock on a failed dma mapping - qede: fix write to free'd pointer error and double free of ptp - afs: Unlock pages for __pagevec_release() - drm/amd/display: If one stream full updates, full update all planes - [s390x] pkey: add one more argument space for debug feature entry - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T - [x86] KVM: fix spectrev1 gadgets - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in tracing - tools lib traceevent: Fix missing equality check for strcmp - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash - scsi: aic7xxx: fix EISA support - mm: fix inactive list balancing between NUMA nodes and cgroups - init: initialize jump labels before command line option parsing - ipvs: do not schedule icmp errors from tunnels - netfilter: ctnetlink: don't use conntrack/expect object addresses as id - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook() - [s390x] ctcm: fix ctcm_new_device error return code - [armhf,arm64] drm/sun4i: Set device driver data at bind time for use in unbind - [armhf,arm64] drm/sun4i: Fix component unbinding and component master deletion - netfilter: fix nf_l4proto_log_invalid to log invalid packets - [armhf] gpu: ipu-v3: dp: fix CSC handling - [armhf] drm/imx: don't skip DP channel disable for background plane - [armhf,arm64] drm/sun4i: Unbind components before releasing DRM and memory - Input: synaptics-rmi4 - fix possible double free - [arm64] RDMA/hns: Bugfix for mapping user db - mm/memory_hotplug.c: drop memory device reference after find_memory_block() - [ppc64el] smp: Fix NMI IPI timeout - [ppc64el] smp: Fix NMI IPI xmon timeout - [armhf,arm64] net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode - mm/memory.c: fix modifying of page protection by insert_pfn() - usb: typec: Fix unchecked return value - netfilter: nf_tables: use-after-free in dynamic operations - netfilter: nf_tables: add missing ->release_ops() in error path of newrule() (Closes: #934168) - net: fec: manage ahb clock in runtime pm - net: strparser: partially revert "strparser: Call skb_unclone conditionally" - NFC: nci: Add some bounds checking in nci_hci_cmd_received() - nfc: nci: Potential off by one in ->pipes[] array - [x86] kprobes: Avoid kretprobe recursion bug - mwl8k: Fix rate_idx underflow - rtlwifi: rtl8723ae: Fix missing break in switch statement - bonding: fix arp_validate toggling in active-backup mode - bridge: Fix error path for kobject_init_and_add() - ipv4: Fix raw socket lookup for local traffic - net: dsa: Fix error cleanup path in dsa_init_module - [armhf] net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering - [arm64] net: macb: Change interrupt and napi enable order in open - packet: Fix error path in packet_init - selinux: do not report error on connect(AF_UNSPEC) - vlan: disable SIOCSHWTSTAMP in container - vrf: sit mtu should not be updated when vrf netdev is the link - tuntap: fix dividing by zero in ebpf queue selection - tuntap: synchronize through tfiles array instead of tun->numqueues - isdn: bas_gigaset: use usb_fill_int_urb() properly - tipc: fix hanging clients using poll with EPOLLOUT flag - [ppc64el] book3s/64: check for NULL pointer in pgd_alloc() - [ppc64el] powernv/idle: Restore IAMR after idle - [x86] PCI: hv: Fix a memory leak in hv_eject_device_work() - [x86] PCI: hv: Add hv_pci_remove_slots() when we unload the driver - [x86] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.45 - locking/rwsem: Prevent decrement of reader count before increment - [x86] speculation/mds: Revert CPU buffer clear on double fault exit - [x86] speculation/mds: Improve CPU buffer clear documentation - objtool: Fix function fallthrough detection - [arm64] dts: rockchip: Disable DCMDs on RK3399's eMMC controller. - [armhf] dts: exynos: Fix interrupt for shared EINTs on Exynos5260 - [armhf] dts: exynos: Fix audio (microphone) routing on Odroid XU3 - [arm64] mmc: sdhci-of-arasan: Add DTS property to disable DCMDs. - [armhf] exynos: Fix a leaked reference by adding missing of_node_put - [armhf] power: supply: axp288_charger: Fix unchecked return value - [armhf,arm64] power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the blacklist - [arm64] mmap: Ensure file offset is treated as unsigned - [arm64] arch_timer: Ensure counter register reads occur with seqlock held - [arm64] compat: Reduce address limit - [arm64] Clear OSDLR_EL1 on CPU boot - [arm64] Save and restore OSDLR_EL1 across suspend/resume - [x96] sched: Save [ER]FLAGS on context switch - crypto: salsa20 - don't access already-freed walk.iv - crypto: chacha20poly1305 - set cra_name correctly - [x86] crypto: ccp - Do not free psp_master when PLATFORM_INIT fails - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode - crypto: skcipher - don't WARN on unprocessed data after slow walk step - crypto: crct10dif-generic - fix use via crypto_shash_digest() - [x86] crypto: crct10dif-pcl - fix use via crypto_shash_digest() - [arm64] crypto: gcm-aes-ce - fix no-NEON fallback code - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" - [armhf,arm64] crypto: aes-neonbs - don't access already-freed walk.iv - mmc: core: Fix tag set memory leak - ALSA: line6: toneport: Fix broken usage of timer for delayed execution - ALSA: usb-audio: Fix a memory leak bug - ALSA: hda/hdmi - Read the pin sense from register when repolling - ALSA: hda/hdmi - Consider eld_valid when reporting jack event - ALSA: hda/realtek - EAPD turn on later - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) - [armhf,arm64] ASoC: max98090: Fix restore of DAPM Muxes - ASoC: codec: hdac_hdmi add device_link to card device - [arm64] bpf: remove prefetch insn in xadd mapping - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses - mm/hugetlb.c: don't put_page in lock of hugetlb_lock - hugetlb: use same fault hash key for shared and private mappings - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget - userfaultfd: use RCU to free the task struct when fork fails - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler - jbd2: check superblock mapped prior to committing - ext4: make sanity check in mballoc more strict - ext4: ignore e_value_offs for xattrs with value-in-ea-inode - ext4: avoid drop reference to iloc.bh twice - ext4: fix use-after-free race with debug_want_extra_isize - ext4: actually request zeroing of inode table after grow - ext4: fix ext4_show_options for file systems w/o journal - btrfs: Check the first key and level for cached extent buffer - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages fails - Btrfs: send, flush dellaloc in order to avoid data loss - Btrfs: do not start a transaction during fiemap - Btrfs: do not start a transaction at iterate_extent_inodes() - bcache: fix a race between cache register and cacheset unregister - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() - ipmi:ssif: compare block number correctly for multi-part return messages - crypto: ccm - fix incompatibility between "ccm" and "ccm_base" - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount - ext4: fix data corruption caused by overlapping unaligned and aligned IO - ext4: fix use-after-free in dx_release() - ext4: avoid panic during forced reboot due to aborted journal - [x86] ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) - ALSA: hda/realtek - Fixup headphone noise via runtime suspend - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug - jbd2: fix potential double free - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes - [x86] KVM: lapic: Busy wait for timer to expire when using hv_timer - xen/pvh: set xen_domain_type to HVM in xen_pvh_init - libnvdimm/namespace: Fix label tracking error - iov_iter: optimize page_copy_sane() - pstore: Centralize init/exit routines - pstore: Allocate compression during late_initcall() - pstore: Refactor compression initialization - ext4: don't update s_rev_level if not required https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.46 - ipv6: fix src addr routing with the exception table - ipv6: prevent possible fib6 leaks - net: Always descend into dsa/ - net: avoid weird emergency message - net/mlx4_core: Change the error print to info print - net: test nouarg before dereferencing zerocopy pointers - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions - nfp: flower: add rcu locks when accessing netdev for tunnels - ppp: deflate: Fix possible crash in deflate_init - rtnetlink: always put IFLA_LINK for links with a link-netnsid - tipc: switch order of device registration to fix a crash - vsock/virtio: free packets during the socket release - vsock/virtio: Initialize core virtio vsock before registering the driver - net/mlx5: Imply MLXFW in mlx5_core - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled - stm class: Fix channel free in stm output free path - stm class: Fix channel bitmap on 32-bit systems - brd: re-enable __GFP_HIGHMEM in brd_insert_page() - proc: prevent changes to overridden credentials - Revert "MD: fix lock contention for flush bios" - md: batch flush requests. - md: add mddev->pers to avoid potential NULL pointer dereference - dcache: sort the freeing-without-RCU-delay mess for good. - [x86] intel_th: msu: Fix single mode with IOMMU - p54: drop device reference count if fails to enable device - of: fix clang -Wunsequenced for be32_to_cpu() - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - [armhf] phy: ti-pipe3: fix missing bit-wise or operator when assigning val - NFS4: Fix v4.0 client state corruption when mount - PNFS fallback to MDS if no deviceid found - [arm64] clk: hi3660: Mark clk_gate_ufs_subsys as critical - [armhf,arm64] clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider - [arm64] clk: rockchip: fix wrong clock definitions for rk3328 - udlfb: delete the unused parameter for dlfb_handle_damage - udlfb: fix sleeping inside spinlock - udlfb: introduce a rendering mutex - fuse: fix writepages on 32bit - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate - ovl: fix missing upper fs freeze protection on copy up for ioctl - [armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 - ceph: flush dirty inodes before proceeding with remount - [amd64] Add gap to int3 to allow for call emulation - [amd64] Allow breakpoints to emulate call instructions - [amd64] ftrace: Emulate call function while updating in breakpoint handler - tracing: Fix partial reading of trace event's id file - [armhf,arm64] memory: tegra: Fix integer overflow on tick value calculation - [x86] perf intel-pt: Fix instructions sampling rate - [x86] perf intel-pt: Fix improved sample timestamp - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken - PCI: Mark Atheros AR9462 to avoid bus reset - PCI: Init PCIe feature bits for managed host bridge alloc - PCI/AER: Change pci_aer_init() stub to return void - PCI: Factor out pcie_retrain_link() function - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum - dm cache metadata: Fix loading discard bitset - dm zoned: Fix zone report handling - dm delay: fix a crash when invalid device is specified - dm integrity: correctly calculate the size of metadata area - dm mpath: always free attached_handler_name in parse_path() - fuse: Add FOPEN_STREAM to use stream_open() - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module - vti4: ipip tunnel deregistration fixes. - xfrm: clean up xfrm protocol checks - esp4: add length check for UDP encapsulation - xfrm: Honor original L3 slave device in xfrmi policy lookup - xfrm4: Fix uninitialized memory read in _decode_session4 - [armhf,arm64] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0) - securityfs: fix use-after-free on symlink traversal - apparmorfs: fix use-after-free on symlink traversal - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored - [x86] kvm: hyper-v: deal with buggy TLB flush requests from WS2012 - mac80211: Fix kernel panic due to use of txq after free - net: ieee802154: fix missing checks for regmap_update_bits - [armhf,arm64] KVM: Ensure vcpu target is unset on reset failure - bpf: Fix preempt_enable_no_resched() abuse - qmi_wwan: new Wistron, ZTE and D-Link devices - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb() - sched/cpufreq: Fix kobject memleak - [x86] mm/mem_encrypt: Disable all instrumentation for early SME setup - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour - perf bench numa: Add define for RUSAGE_THREAD if not present - [x86] perf/intel: Fix race in intel_pmu_disable_event() - md/raid: raid5 preserve the writeback action after the parity check - driver core: Postpone DMA tear-down until after devres release for probe failure - bpf: relax inode permission check for retrieving bpf program - bpf: add map_lookup_elem_sys_only for lookups from syscall side - bpf, lru: avoid messing with eviction heuristics upon syscall lookup https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.47 - [x86] Hide the int3_emulate_call/jmp functions from UML - ext4: do not delete unlinked inode from orphan list on failed truncate - ext4: wait for outstanding dio during truncate in nojournal mode - f2fs: Fix use of number of devices - [x86] KVM: fix return value for reserved EFER - bio: fix improper use of smp_mb__before_atomic() - sbitmap: fix improper use of smp_mb__before_atomic() - Revert "scsi: sd: Keep disk read-only when re-reading partition" - [ppc64el] crypto: vmx - CTR: always increment IV as quadword - [arm*] mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem - [arm*] mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead - [arm64] kernel: kaslr: reduce module randomization range to 2 GB - [arm64] iommu: handle non-remapped addresses in ->mmap and ->get_sgtable - gfs2: Fix sign extension bug in gfs2_update_stats - btrfs: don't double unlock on error in btrfs_punch_hole - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path - Btrfs: avoid fallback to transaction commit during fsync of files with holes - Btrfs: fix race between ranged fsync and writeback of adjacent ranges - btrfs: sysfs: Fix error path kobject memory leak - btrfs: sysfs: don't leak memory when failing add fsid - udlfb: fix some inconsistent NULL checking - fbdev: fix divide error in fb_var_to_videomode - NFSv4.2 fix unnecessary retry in nfs4_copy_file_range - NFSv4.1 fix incorrect return value in copy_file_range - bpf: add bpf_jit_limit knob to restrict unpriv allocations - [arm64] errata: Add workaround for Cortex-A76 erratum #1463225 - btrfs: honor path->skip_locking in backref code - ovl: relax WARN_ON() for overlapping layers use case - fbdev: fix WARNING in __alloc_pages_nodemask bug - media: cpia2: Fix use-after-free in cpia2_exit - media: serial_ir: Fix use-after-free in serial_ir_init_module - media: vb2: add waiting_in_dqbuf flag - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit - bpf: devmap: fix use-after-free Read in __dev_map_entry_free - batman-adv: mcast: fix multicast tt/tvlv worker locking - at76c50x-usb: Don't register led_trigger if usb_register_driver failed - acct_on(): don't mess with freeze protection - gfs2: Fix lru_count going negative - cxgb4: Fix error path in cxgb4_init_module - NFS: make nfs_match_client killable - IB/hfi1: Fix WQ_MEM_RECLAIM warning - gfs2: Fix occasional glock use-after-free - mmc: core: Verify SD bus width - [arm64] dmaengine: tegra210-dma: free dma controller in remove() - net: ena: gcc 8: fix compilation warning - [x86] hv_netvsc: fix race that may miss tx queue wakeup - Bluetooth: Ignore CC events not matching the last HCI command - [x86] ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE - [armhf,arm64] usb: dwc2: gadget: Increase descriptors count for ISOC's - [armhf,arm64] usb: dwc3: move synchronize_irq() out of the spinlock protected block - ASoC: hdmi-codec: unlock the device on startup errors - [ppc64el] perf: Return accordingly on invalid chip-id in - [ppc64el] boot: Fix missing check of lseek() return value - [ppc64el] perf: Fix loop exit condition in nest_imc_event_init - [armhf] ASoC: imx: fix fiq dependencies - [amd64] spi: pxa2xx: fix SCR (divisor) calculation - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() - drm/nouveau/bar/nv50: ensure BAR is mapped - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals - [ppc64el] watchdog: Use hrtimers for per-CPU heartbeat - sched/cpufreq: Fix kobject memleak - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() - scsi: qla2xxx: Fix hardirq-unsafe locking - [x86] modules: Avoid breaking W^X while loading modules - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve - btrfs: fix panic during relocation after ENOSPC before writeback happens - btrfs: Don't panic when we can't find a root key - iwlwifi: pcie: don't crash on invalid RX interrupt - scsi: qedi: Abort ep termination if offload not scheduled - [s390x] kexec_file: Fix detection of text segment in ELF loader - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs - w1: fix the resume command API - [s390x] qeth: address type mismatch warning - [armhf,arm64] dmaengine: pl330: _stop: clear interrupt status - mac80211/cfg80211: update bss channel on channel switch - mwifiex: prevent an array overflow - rsi: Fix NULL pointer dereference in kmalloc - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE - nvme-rdma: fix a NULL deref when an admin connect times out - [armhf,arm64] crypto: sun4i-ss - Fix invalid calculation of hash end - bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set - bcache: return error immediately in bch_journal_replay() - bcache: fix failure in journal relplay - bcache: add failure check to run_cache_set() for journal replay - bcache: avoid clang -Wunintialized warning - RDMA/cma: Consider scope_id while binding to ipv6 ll address - vfio-ccw: Do not call flush_workqueue while holding the spinlock - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev - [x86] mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions - Bluetooth: hci_qca: Give enough time to ROME controller to bootup. - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version - [armhf] pinctrl: samsung: fix leaked of_node references - [armhf] clk: rockchip: undo several noc and special clocks as critical on rk3288 - [arm64] perf/arm-cci: Remove broken race mitigation - media: au0828: stop video streaming only when last user stops - audit: fix a memory leak bug - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() - media: pvrusb2: Prevent a buffer overflow - block: fix use-after-free on gendisk - [ppc64el] numa: improve control of topology updates - [ppc64el] Fix booting large kernels with STRICT_KERNEL_RWX - random: fix CRNG initialization when random.trust_cpu=1 - random: add a spinlock_t to struct batched_entropy - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock - sched/core: Check quota and period overflow at usec to nsec conversion - sched/rt: Check integer overflow at usec to nsec conversion - sched/core: Handle overflow in cpu_shares_write_u64 - [arm*] staging: vc04_services: handle kzalloc failure - [arm64] drm/msm: a5xx: fix possible object reference leak - irq_work: Do not raise an IPI when queueing work on the local CPU - [x86] thunderbolt: Take domain lock in switch sysfs attribute callbacks - [s390x] qeth: handle error from qeth_update_from_chp_desc() - USB: core: Don't unbind interfaces following device reset failure - [amd64] irq: Limit IST stack overflow check to #DB stack - [armhf] drm: etnaviv: avoid DMA API warning when importing buffers - [armhf,arm64] phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode - i40e: Able to add up to 16 MAC filters on an untrusted VF - i40e: don't allow changes to HW VLAN stripping on active port VLANs - ACPI/IORT: Reject platform device creation on NUMA node mapping failure - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure - [x86] perf/msr: Add Icelake support - [x86] perf/intel/rapl: Add Icelake support - [x86] perf/intel/cstate: Add Icelake support - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses - scsi: libsas: Do discovery on empty PHY to update PHY info - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers - [armhf,arm64] mmc_spi: add a status check for spi_sync_locked - drm/amdgpu: fix old fence check in amdgpu_fence_emit - PM / core: Propagate dev->power.wakeup_path when no callbacks - [armhf] clk: rockchip: Fix video codec clocks on rk3288 - [armhf] clk: rockchip: Make rkpwm a critical clock on rk3288 - [s390x] zcrypt: initialize variables before_use - [x86] microcode: Fix the ancient deprecated microcode loading method - [s390x] mm: silence compiler warning when compiling without CONFIG_PGSTE - [s390x] cio: fix cio_irb declaration - qmi_wwan: Add quirk for Quectel dynamic config - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR - rtlwifi: fix a potential NULL pointer dereference - mwifiex: Fix mem leak in mwifiex_tm_cmd - brcmfmac: fix missing checks for kmemdup - b43: shut up clang -Wuninitialized variable warning - brcmfmac: convert dev_init_lock mutex to completion - brcmfmac: fix WARNING during USB disconnect in case of unempty psq - brcmfmac: fix race during disconnect when USB completion is in progress - brcmfmac: fix Oops when bringing up interface during USB disconnect - [arm64] rtc: xgene: fix possible race condition - rtlwifi: fix potential NULL pointer dereference - scsi: ufs: Fix regulator load and icc-level configuration - scsi: ufs: Avoid configuring regulator with undefined voltage range - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext - [x86] uaccess, signal: Fix AC=1 bloat - [amd64] ia32: Fix ia32_restore_sigcontext() AC leak - [x86] uaccess: Fix up the fixup - chardev: add additional check for minor range overlap - [arm64] RDMA/hns: Fix bad endianess of port_pd variable - HID: core: move Usage Page concatenation to Main item - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put - cxgb3/l2t: Fix undefined behaviour - HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent - [armhf] spi: tegra114: reset controller on probe - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. - [armhf] media: wl128x: prevent two potential buffer overflows - media: gspca: Kill URBs on USB device disconnect - efifb: Omit memory map check on legacy boot - [x86] thunderbolt: property: Fix a missing check of kzalloc - [x86] thunderbolt: Fix to check the return value of kmemdup - timekeeping: Force upper bound for setting CLOCK_REALTIME - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check - virtio_console: initialize vtermno value for ports - tty: ipwireless: fix missing checks for ioremap - overflow: Fix -Wtype-limits compilation warnings - [x86] mce: Fix machine_check_poll() tests for error types - rcutorture: Fix cleanup path for invalid torture_type strings - [x86] mce: Handle varying MCA bank counts - rcuperf: Fix cleanup path for invalid perf_type strings - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown - scsi: qla4xxx: avoid freeing unallocated dma memory - scsi: lpfc: avoid uninitialized variable warning - selinux: avoid uninitialized variable warning - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies - dmaengine: tegra210-adma: use devm_clk_*() helpers - [armhf] hwrng: omap - Set default quality - [x86] thunderbolt: Fix to check return value of ida_simple_get - [x86] thunderbolt: Fix to check for kmemdup failure - drm/amd/display: fix releasing planes when exiting odm - [x86] thunderbolt: property: Fix a NULL pointer dereference - e1000e: Disable runtime PM on CNP+ - igb: Exclude device from suspend direct complete optimization - media: dvbsky: Avoid leaking dvb frontend - drm/amd/display: Fix Divide by 0 in memory calculations - drm/amd/display: Set stream->mode_changed when connectors change - scsi: ufs: fix a missing check of devm_reset_control_get - media: gspca: do not resubmit URBs when streaming has stopped - media: go7007: avoid clang frame overflow warning with KASAN - scsi: lpfc: Fix FDMI manufacturer attribute value - scsi: lpfc: Fix fc4type information for FDMI - media: saa7146: avoid high stack usage with clang - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers - [armhf] drm/omap: dsi: Fix PM for display blank with paired dss_pll calls - [armhf] spi: imx: stop buffer overflow in RX FIFO flush - spi: Fix zero length xfer bug - [armhf] ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM - drm/drv: Hold ref on parent device during drm_device lifetime - drm: Wake up next in drm_read() chain if we are forced to putback the event - [s390x] vfio-ccw: Prevent quiesce function going into an infinite loop - NFS: Fix a double unlock from nfs_match,get_client https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.48 - bonding/802.3ad: fix slave link initialization transition states - cxgb4: offload VLAN flows regardless of VLAN ethtype - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address - ipv6: Fix redirect with VRF - llc: fix skb leak in llc_build_and_send_ui_pkt() - [armhf,arm64] net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT - net-gro: fix use-after-free read in napi_gro_frags() - [armhf,arm64] net: mvneta: Fix err code path of probe - [armhf,arm64] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value - net: phy: marvell10g: report if the PHY fails to boot firmware - net: sched: don't use tc_action->order during action dump - [armhf,arm64] net: stmmac: fix reset gpio free missing - usbnet: fix kernel crash after disconnect - net/mlx5: Avoid double free in fs init error unwinding path - tipc: Avoid copying bytes beyond the supplied data - net/mlx5: Allocate root ns memory using kzalloc to match kfree - net/mlx5e: Disable rxhash when CQE compress is enabled - [armhf,arm64] net: stmmac: dma channel control register need to be init first - bnxt_en: Fix aggregation buffer leak under OOM condition. - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually - include/linux/compiler*.h: define asm_volatile_goto - compiler.h: give up __compiletime_assert_fallback() - jump_label: move 'asm goto' support test to Kconfig - tipc: fix modprobe tipc failed after switch order of device registration https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.49 - include/linux/bitops.h: sanitize rotate primitives - xhci: update bounce buffer with correct sg num - xhci: Use %zu for printing size_t type - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() - usb: xhci: avoid null pointer deref when bos field is NULL - usbip: usbip_host: fix BUG: sleeping function called from invalid context - usbip: usbip_host: fix stub_dev lock context imbalance regression - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor - USB: sisusbvga: fix oops in error path of sisusb_probe - USB: Add LPM quirk for Surface Dock GigE adapter - USB: rio500: refuse more than one device at a time - USB: rio500: fix memory leak in close after disconnect - media: usb: siano: Fix general protection fault in smsusb - media: usb: siano: Fix false-positive "uninitialized variable" warning - media: smsusb: better handle optional alignment - brcmfmac: fix NULL pointer derefence during USB disconnect - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) - tracing: Avoid memory leak in predicate_parse() - Btrfs: fix wrong ctime and mtime of a directory after log replay - Btrfs: fix race updating log root item during fsync - Btrfs: fix fsync not persisting changed attributes of a directory - Btrfs: incremental send, fix file corruption when no-holes feature is enabled - [s390x] crypto: fix gcm-aes-s390 selftest failures - [s390x] crypto: fix possible sleep during spinlock aquired - [ppc64el] KVM: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts - [ppc64el] perf: Fix MMCRA corruption by bhrb_filter - ALSA: line6: Assure canceling delayed work at disconnection - ALSA: hda/realtek - Set default power save node to 0 - [s390x] KVM: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID - drm/nouveau/i2c: Disable i2c bus access after ->fini() - [arm64] tty: serial: msm_serial: Fix XON/XOFF - memcg: make it work on sparse non-0-node systems - kernel/signal.c: trace_signal_deliver when signal_group_exit - [arm64] Fix the arm64_personality() syscall wrapper redirection - vt/fbcon: deinitialize resources in visual_init() after failed memory allocation - [arm*] staging: vc04_services: prevent integer overflow in create_pagelist() - [x86] staging: wlan-ng: fix adapter initialization failure - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM - Revert "lockd: Show pid of lockd for remote locks" - [armhf,arm64] drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY clock initialization - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz - [armhf,arm64] drm/rockchip: shutdown drm subsystem on shutdown - drm/lease: Make sure implicit planes are leased - [x86] ftrace: Do not call function graph from dynamic trampolines - [x86] ftrace: Set trampoline pages as executable - [x86] kprobes: Set instruction page as executable - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized variable warning") - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.50 - ethtool: fix potential userspace buffer overflow - Fix memory leak in sctp_process_init - ipv4: not do cache for local delivery if bc_forwarding is enabled - ipv6: fix the check before getting the cookie in rt6_get_cookie - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit - [armhf] net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query - [armhf,arm64] net: mvpp2: Use strscpy to handle stat strings - net: rds: fix memory leak in rds_ib_flush_mr_pool - net: sfp: read eeprom in maximum 16 byte increments - packet: unconditionally free po->rollover - pktgen: do not sleep with the thread lock held. - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl - rcu: locking and unlocking need to always be at least barriers - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled - fuse: fallocate: fix return with locked inode - pstore: Remove needless lock during console writes - pstore: Convert buf_lock to semaphore - pstore: Set tfm to NULL on free_buf_for_compression - pstore/ram: Run without kernel crash dump region - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume - [s390x] mm: fix address space detection in exception handling - xen-blkfront: switch kcalloc to kvcalloc for large array allocation - [ppc64el] genwqe: Prevent an integer overflow in the ioctl - test_firmware: Use correct snprintf() limit - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels - [arm64] drm/msm: fix fb references in async update - drm: add non-desktop quirk for Valve HMDs - drm: add non-desktop quirks to Sensics and OSVR headsets. - drm/amdgpu/psp: move psp version specific function pointers to early_init - drm/radeon: prefer lower reference dividers - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in - [x86] drm/i915: Fix I915_EXEC_RING_MASK - [x86] drm/i915/fbc: disable framebuffer compression on GeminiLake - [x86] drm/i915: Maintain consistent documentation subsection ordering - drm: don't block fb changes for async plane updates - [x86] drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack - TTY: serial_core, add ->install - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled - ethtool: check the return value of get_regs_len https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.51 - fs/fat/file.c: issue flush after the writeback of FAT - sysctl: return -EINVAL if val violates minmax - ipc: prevent lockup on alloc_msg and free_msg - [armhf] prevent tracing IPI_CPU_BACKTRACE - hugetlbfs: on restore reserve error path retain subpool reservation - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails - initramfs: free initrd memory if opening /initrd.image fails - mm/cma.c: fix the bitmap status to show failed allocation reason - mm: page_mkclean vs MADV_DONTNEED race - mm/cma_debug.c: fix the break condition in cma_maxchunk_get() - mm/slab.c: fix an infinite loop in leaks_show() - kernel/sys.c: prctl: fix false positive in validate_prctl_map() - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER - [x86] mfd: intel-lpss: Set the device in reset state when init - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration - [armhf] mfd: twl6040: Fix device init errors for ACCCTL register - [x86] perf/intel: Allow PEBS multi-entry in watermark mode - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change - [arm64] drm/bridge: adv7511: Fix low refresh rate selection - objtool: Don't use ignore flag for fake jumps - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks - bpf: fix undefined behavior in narrow load handling - [arm64] pwm: meson: Use the spin-lock only to protect register modifications - ntp: Allow TAI-UTC offset to be set to zero - f2fs: fix to avoid panic in do_recover_data() - f2fs: fix to avoid panic in f2fs_inplace_write_data() - f2fs: fix to avoid panic in f2fs_remove_inode_page() - f2fs: fix to do sanity check on free nid - f2fs: fix to clear dirty inode in error path of f2fs_iget() - f2fs: fix to avoid panic in dec_valid_block_count() - f2fs: fix to use inline space only if inline_xattr is enable - f2fs: fix to do sanity check on valid block count of segment - f2fs: fix to do checksum even if inode page is uptodate - percpu: remove spurious lock dependency between percpu and sched - configfs: fix possible use-after-free in configfs_register_group - [armhf,arm64] PCI: dwc: Free MSI in dw_pcie_host_init() error path - [armhf,arm64] PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi() - ovl: do not generate duplicate fsnotify events for "fake" path - mmc: mmci: Prevent polling for busy detection in IRQ context - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast - netfilter: nf_conntrack_h323: restore boundary check correctness - [mips*] Make sure dt memory regions are valid - netfilter: nf_tables: fix base chain stat rcu_dereference usage - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values - watchdog: fix compile time error of pretimeout governors - blk-mq: move cancel of requeue_work into blk_mq_release - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly - nvme-pci: unquiesce admin queue on shutdown - nvme-pci: shutdown on timeout during deletion - netfilter: nf_flow_table: check ttl value in flow offload data path - netfilter: nf_flow_table: fix netdev refcnt leak - ALSA: hda - Register irq handler after the chip initialization - nvmem: core: fix read buffer in place - [armhf,arm64] nvmem: sunxi_sid: Support SID on A83T and H5 - fuse: retrieve: cap requested size to negotiated max_write - nfsd: allow fh_want_write to be called twice - nfsd: avoid uninitialized variable warning - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING" - [armhf,arm64] iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel - [x86] net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending - [x86] PCI: Fix PCI IRQ routing table memory leak - i40e: Queues are reserved despite "Invalid argument" error - platform/chrome: cros_ec_proto: check for NULL transfer function - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 - [armhf] soc: rockchip: Set the proper PWM for rk3288 - [armhf] dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove paths - drm/amd/display: Use plane->color_space for dpp if specified - [armhf] OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it - [x86] platform: intel_pmc_ipc: adding error handling - [arm64] net: hns3: return 0 and print warning when hit duplicate MAC - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags - [x86] video: hgafb: fix potential NULL pointer dereference - block, bfq: increase idling for weight-raised queues - [arm64] PCI: xilinx: Check for __get_free_pages() failure - ice: Add missing case in print_link_msg for printing flow control - [x86] dmaengine: idma64: Use actual device for DMA transfers - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa - pwm: Fix deadlock warning when removing PWM device - [armhf] exynos: Fix undefined instruction during Exynos5422 resume - [x86] usb: typec: fusb302: Check vconn is off when we start toggling - soc: renesas: Identify R-Car M3-W ES1.3 - percpu: do not search past bitmap when allocating an area - ovl: check the capability before cred overridden - ovl: support stacked SEEK_HOLE/SEEK_DATA - [arm*] drm/vc4: fix fb references in async update - ALSA: seq: Cover unsubscribe_port() in list_mutex https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.52 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.53 - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled - HID: multitouch: handle faulty Elo touch device - HID: wacom: Don't set tool type until we're in range - HID: wacom: Don't report anything prior to the tool entering range - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary - ALSA: oxfw: allow PCM capture for Stanton SCS.1m - ALSA: hda/realtek - Update headset mode for ALC256 - ALSA: firewire-motu: fix destruction of data for isochronous resources - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() - mm/vmscan.c: fix trying to reclaim unevictable LRU page - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO - ptrace: restore smp_rmb() in __ptrace_may_access() - [armhf,arm64] iommu/arm-smmu: Avoid constant zero in TLBI writes - bcache: fix stack corruption by PRECEDING_KEY() - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() - [x86] drm/i915/sdvo: Implement proper HDMI audio support for SDVO - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var - f2fs: fix to avoid accessing xattr across the boundary - scsi: qedi: remove memset/memcpy to nfunc and use func instead (CVE-2019-15090) - scsi: qedi: remove set but not used variables 'cdev' and 'udev' - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show - scsi: lpfc: add check for loss of ndlp when sending RRQ - [arm64] mm: Inhibit huge-vmap with ptdump - nvme: fix srcu locking on error return in nvme_get_ns_from_disk - nvme: remove the ifdef around nvme_nvm_ioctl - nvme: merge nvme_ns_ioctl into nvme_ioctl - nvme: release namespace SRCU protection before performing controller ioctls - nvme: fix memory leak for power latency tolerance - [x86] platform: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table - [x86] platform: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table - scsi: bnx2fc: fix incorrect cast to u64 on shift operation - libnvdimm: Fix compilation warnings with W=1 - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts - usbnet: ipheth: fix racing condition - [armhf,arm64] KVM: Move cc/it checks under hyp's Makefile to avoid instrumentation - [x86] KVM: pmu: mask the result of rdpmc according to the width of the counters - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() - [armhf,arm64] usb: dwc2: Fix DMA cache alignment issues - [armhf,arm64] usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. - USB: usb-storage: Add new ID to ums-realtek - USB: serial: pl2303: add Allied Telesis VT-Kit3 - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode - USB: serial: option: add Telit 0x1260 and 0x1261 compositions - timekeeping: Repair ktime_get_coarse*() granularity - [x86] microcode, cpuhotplug: Add a microcode loader CPU hotplug callback - [x86] mm/KASLR: Compute the size of the vmemmap section properly - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled - drm/edid: abstract override/firmware EDID retrieval - drm: add fallback override/firmware EDID modes workaround - [armhf] rtc: pcf8523: don't return invalid date when battery is low https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.54 - ax25: fix inconsistent lock state in ax25_destroy_timer - be2net: Fix number of Rx queues used for flow hashing - [x86] hv_netvsc: Set probe mode to sync - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero - lapb: fixed leak of control-blocks. - neigh: fix use-after-free read in pneigh_get_next - net: openvswitch: do not free vport if register_netdevice() is failed. - sctp: Free cookie before we memdup a new one - tipc: purge deferredq list for each grp member in tipc_group_delete - vsock/virtio: set SOCK_DONE on peer shutdown - net/mlx5: Avoid reloading already removed devices - [armhf,arm64] net: mvpp2: prs: Fix parser range for VID filtering - [armhf,arm64] net: mvpp2: prs: Use the correct helpers when removing all VID filters - [arm*] Staging: vc04_services: Fix a couple error codes - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints - netfilter: nf_queue: fix reinject verdict handling - ipvs: Fix use-after-free in ip_vs_in - [armhf] clk: ti: clkctrl: Fix clkdm_clk handling - [ppc64el] powernv: Return for invalid IMC domain - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() - mISDN: make sure device name is NUL terminated - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor - perf/ring_buffer: Fix exposing a temporarily decreased data_head - perf/ring_buffer: Add ordering to rb->nest increment - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data - [armhf,arm64] net: stmmac: update rx tail pointer register to fix rx dma hang issue. - ACPI/PCI: PM: Add missing wakeup.flags.valid checks - [armhf] drm/etnaviv: lock MMU while dumping core - net: aquantia: tx clean budget logic error - net: aquantia: fix LRO with FCS error - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr - ALSA: hda - Force polling mode on CNL for fixing codec communication - configfs: Fix use-after-free when accessing sd->s_dentry - perf data: Fix 'strncat may truncate' build failure with recent gcc - perf namespace: Protect reading thread's namespace - [s390x] perf record: Fix s390 missing module symbol and warning for non-root users - xenbus: Avoid deadlock during suspend due to open transactions - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token list - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu - [arm64] fix syscall_fn_t type - [arm64] use the correct function type in SYSCALL_DEFINE0 - [arm64] use the correct function type for __arm64_sys_ni_syscall - net: phylink: ensure consistent phy interface mode - net: phy: dp83867: Set up RGMII TX delay - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask - scsi: scsi_dh_alua: Fix possible null-ptr-deref - scsi: libsas: delete sas port if expander discover failed - ocfs2: fix error path kobject memory leak - coredump: fix race condition between collapse_huge_page() and core dumping - Abort file_remove_privs() for non-reg. files https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.55 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.56 - tracing: Silence GCC 9 array bounds warning - objtool: Support per-function rodata sections - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls - ovl: make i_ino consistent with st_ino in more cases - ovl: detect overlapping layers - ovl: don't fail with disconnected lower NFS - ovl: fix bogus -Wmaybe-unitialized warning - [s390x] jump_label: Use "jdd" constraint on gcc9 - [s390x] ap: rework assembler functions to use unions for in/out register variables - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning - mmc: core: API to temporarily disable retuning for SDIO CRC errors - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() - mmc: core: Prevent processing SDIO IRQs when the card is suspended - scsi: ufs: Avoid runtime suspend possibly being blocked forever - [armhf,arm64] usb: chipidea: udc: workaround for endpoint conflict issue - xhci: detect USB 3.2 capable host controllers correctly - usb: xhci: Don't try to recover an endpoint if port is in error state. - IB/hfi1: Validate fault injection opcode user input - IB/hfi1: Silence txreq allocation warnings - [x86] Input: synaptics - enable SMBus on ThinkPad E480 and E580 - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD - [x86] Input: silead - add MSSL0017 to acpi_device_id - apparmor: fix PROFILE_MEDIATES for untrusted input - apparmor: enforce nullbyte at end of tag string - brcmfmac: sdio: Disable auto-tuning around commands expected to fail - brcmfmac: sdio: Don't tune while the card is off - parport: Fix mem leak in parport_register_dev_model - IB/rdmavt: Fix alloc_qpn() WARN_ON() - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value - IB/hfi1: Validate page aligned for a given virtual address - [mips*] uprobes: remove set but not used variable 'epc' - [armhf,arm64] net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 - [arm64] net: hns: Fix loopback test failed at copper ports - mdesc: fix a missing-check bug in get_vdev_port_node_info() - [arm64] drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times - [arm64] drm/arm/hdlcd: Actually validate CRTC modes - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance - nvmet: fix data_len to 0 for bdev-backed write_zeroes - scsi: ufs: Check that space was properly alloced in copy_query_response - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event - hwmon: (core) add thermal sensors only if dev->of_node is present - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages - nvme: Fix u32 overflow in the number of namespace list calculation - btrfs: start readahead also in seed devices - [armhf] can: flexcan: fix timeout when set small bitrate - can: purge socket error queue on sock destruct - [ppc64el] bpf: use unsigned division instruction for 64-bit operations - [armhf] imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX - [armhf] dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values - [armhf] dts: am57xx-idk: Remove support for voltage switching for SD card - [arm64] sve: should not depend on - [arm64] ssbd: explicitly depend on - [x86] drm/vmwgfx: Use the backdoor port if the HB port is not available - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (CVE-2019-9506) - Bluetooth: Fix regression with minimum encryption key size alignment - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write - cfg80211: fix memory leak of wiphy device name - mac80211: drop robust management frames from unknown TA - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices - mac80211: handle deauthentication/disassociation from TDLS peer - nl80211: fix station_info pertid memory leak - mac80211: Do not use stack memory with scatterlist for GMAC - [x86] resctrl: Don't stop walking closids when a locksetup group is found https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.57 - perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul - perf help: Remove needless use of strncpy() - perf header: Fix unchecked usage of strncpy() - [arm64] Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS - IB/hfi1: Close PSM sdma_progress sleep window - 9p/xen: fix check for xenbus_read error in front_probe - 9p: Use a slab for allocating requests - 9p: embed fcall in req to round down buffer allocs - 9p: add a per-client fcall kmem_cache - 9p: rename p9_free_req() function - 9p: Add refcount to p9_req_t - 9p/rdma: do not disconnect on down_interruptible EAGAIN - 9p: Rename req to rreq in trans_fd - 9p: acl: fix uninitialized iattr access - 9p/rdma: remove useless check in cm_event_handler - 9p: p9dirent_read: check network-provided name length - 9p: potential NULL dereference - 9p/trans_fd: abort p9_read_work if req status changed - 9p/trans_fd: put worker reqs on destroy - net/9p: include trans_common.h to fix missing prototype warning. - qmi_wwan: Fix out-of-bounds read - [armhf,arm64] Revert "usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup" - [armhf,arm64] usb: dwc3: gadget: combine unaligned and zero flags - [armhf,arm64] usb: dwc3: gadget: track number of TRBs per request - [armhf,arm64] usb: dwc3: gadget: use num_trbs when skipping TRBs on ->dequeue() - [armhf,arm64] usb: dwc3: gadget: extract dwc3_gadget_ep_skip_trbs() - [armhf,arm64] usb: dwc3: gadget: introduce cancelled_list - [armhf,arm64] usb: dwc3: gadget: move requests to cancelled_list - [armhf,arm64] usb: dwc3: gadget: remove wait_end_transfer - [armhf,arm64] usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup - fs/proc/array.c: allow reporting eip/esp for all coredumping threads - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask - fs/binfmt_flat.c: make load_flat_shared_library() work - [armhf] clk: socfpga: stratix10: fix divider entry for the emac clocks - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn - dm log writes: make sure super sector log updates are written in order - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() - [x86] speculation: Allow guests to use SSBD even if host does not - [x86] microcode: Fix the microcode load on CPU hotplug for real - [x86] resctrl: Prevent possible overrun during bitmap operations - [x86] KVM: mmu: Allocate PAE root array when using SVM's 32-bit NPT - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O - cpu/speculation: Warn on unsupported mitigations= parameter - SUNRPC: Clean up initialisation of the struct rpc_rqst - [mips*] irqchip/mips-gic: Use the correct local interrupt map registers - eeprom: at24: fix unexpected timeout under high load - af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET - bonding: Always enable vlan tx offload - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop - net/packet: fix memory leak in packet_set_ring() - net: remove duplicate fetch in sock_getsockopt - [armhf,arm64] net: stmmac: fixed new system time seconds value calculation - [armhf,arm64] net: stmmac: set IC bit when transmitting frames with HW timestamp - sctp: change to hold sk after auth shkey is created successfully - team: Always enable vlan tx offload - tipc: change to use register_pernet_device - tipc: check msg->req data len in tipc_nl_compat_bearer_disable - tun: wake up waitqueues after IFF_UP is set - bpf: simplify definition of BPF_FIB_LOOKUP related flags - bpf: lpm_trie: check left child of last leftmost node for NULL - bpf: fix nested bpf tracepoints with per-cpu data - bpf: fix unconnected udp hooks - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err - [arm64] futex: Avoid copying out uninitialised stack in failed cmpxchg() - [arm64] bpf: use more scalable stadd over ldxr / stxr loop in xadd - futex: Update comments and docs about return values of arch futex code - RDMA: Directly cast the sockaddr union to sockaddr - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb - [armhf,arm64] usb: dwc3: Reset num_trbs after skipping - [arm64] insn: Fix ldadd instruction encoding https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.58 - Bluetooth: Fix faulty expression for minimum encryption key size check - block: Fix a NULL pointer dereference in generic_make_request() - md/raid0: Do not bypass blocking queue entered for raid0 bios - netfilter: nf_flow_table: ignore DF bit setting - netfilter: nft_flow_offload: set liberal tracking mode for tcp - netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family - ASoC: soc-pcm: BE dai needs prepare when pause release after resume - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master - [armhf,arm64] ASoC: max98090: remove 24-bit format support if RJ is 0 - [x86] CPU: Add more Icelake model numbers - ALSA: hdac: fix memory release for SST and SOF drivers - scsi: hpsa: correct ioaccel2 chaining - [x86] drm: panel-orientation-quirks: Add quirk for GPD pocket2 - [x86] drm: panel-orientation-quirks: Add quirk for GPD MicroPC - [x86] platform: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi - [x86] platform: intel-vbtn: Report switch events when event wakes device - [x86] platform: mlx-platform: Fix parent device in i2c-mux-reg device registration - i2c: pca-platform: Fix GPIO lookup code - cpuset: restore sanity to cpuset_cpus_allowed_fallback() - mm/mlock.c: change count_mm_mlocked_page_nr return type - tracing: avoid build warning with HAVE_NOP_MCOUNT - module: Fix livepatch/ftrace module text permissions race - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper() - [x86] drm/i915/dmc: protect against reading random memory - crypto: user - prevent operating on larval algorithms - crypto: cryptd - Fix skcipher instance memory leak - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages - ALSA: line6: Fix write on zero-sized buffer - ALSA: usb-audio: fix sign unintended sign extension on left shifts - [x86] ALSA: hda/realtek: Add quirks for several Clevo notebook barebones - [x86] ALSA: hda/realtek - Change front mic location for Lenovo M710q - lib/mpi: Fix karactx leak in mpi_powm - fs/userfaultfd.c: disable irqs for fault_pending and event locks - tracing/snapshot: Resize spare buffer if size changed - [armhf] dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node - drm/amd/powerplay: use hardware fan control if no powerplay fan table - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE - [armhf] drm/etnaviv: add missing failure path to destroy suballoc - [armhf] drm/imx: notify drm core before sending event during crtc disable - drm/imx: only send event on crtc disable if kept disabled - [x86] ftrace: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() - mm/vmscan.c: prevent useless kswapd loops - btrfs: Ensure replaced device doesn't have pending chunk allocation - tty: rocket: fix incorrect forward declaration of 'rp_init()' - net/smc: move unhash before release of clcsock - drm/fb-helper: generic: Don't take module ref for fbcon - f2fs: don't access node/meta inode mapping after iput - mac80211: mesh: fix missing unlock on error in table_path_del() - scsi: tcmu: fix use after free - [amd64] boot/compressed: Do not corrupt EDX on EFER.LME=1 setting - [arm64] net: hns: Fixes the missing put_device in positive leg for roce reset - ALSA: hda: Initialize power_state field properly - rds: Fix warning. - ip6: fix skb leak in ip6frag_expire_frag_queue() - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments - [arm64] net: hns: fix unsigned comparison to less than zero - bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K - netfilter: ipv6: nf_defrag: accept duplicate fragments again - [x86] KVM: degrade WARN to pr_warn_ratelimited - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC - nfsd: Fix overflow causing non-working mounts on 1 TB machines - svcrdma: Ignore source port when computing DRC hash - [mips*] Fix bounds check virt_addr_valid - [mips*] Add missing EHB in mtc0 -> mfc0 sequence. - [arm64] dmaengine: qcom: bam_dma: Fix completed descriptors count - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.59 - [x86] Input: elantech - enable middle button support on 2 ThinkPads - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() - bpf: sockmap, fix use after free from sleep in psock backlog workqueue - mac80211: mesh: fix RCU warning - mac80211: free peer keys before vif down in mesh - iwlwifi: Fix double-free problems in iwl_req_fw_callback() - can: af_can: Fix error path of can_init() - net: phy: rename Asix Electronics PHY driver - [armhf] dts: am335x phytec boards: Fix cd-gpios active level - [s390x] boot: disable address-of-packed-member warning - [x86] drm/vmwgfx: Honor the sg list segment size limitation - [x86] drm/vmwgfx: fix a warning due to missing dma_parms - [armhf] Input: imx_keypad - make sure keyboard can always wake up system - [armhf,arm64] KVM: vgic: Fix kvm_device leak in vgic_its_destroy - mac80211: only warn once on chanctx_conf being NULL - mac80211: do not start any work during reconfigure flow - bpf, devmap: Fix premature entry free on destroying map - bpf, devmap: Add missing bulk queue free - bpf, devmap: Add missing RCU read lock on flush - [amd64] bpf: fix stack layout of JITed bpf code - qmi_wwan: add support for QMAP padding in the RX path - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode - qmi_wwan: extend permitted QMAP mux_id value range - mmc: core: complete HS400 before checking status - md: fix for divide error in status_resync - bnx2x: Check if transceiver implements DDM before access - drm: return -EFAULT if copy_to_user() fails - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL - net: lio_core: fix potential sign-extension overflow on large shift - scsi: qedi: Check targetname while finding boot target information - quota: fix a problem about transfer quota - [armhf,arm64] net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() - NFS4: Only set creation opendata if O_CREAT - net :sunrpc :clnt :Fix xps refcount imbalance on the error path - fscrypt: don't set policy for a dead directory - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length - media: stv0297: fix frequency range limit - ALSA: usb-audio: Fix parse of UAC2 Extension Units - ALSA: hda/realtek - Headphone Mic can't record after S3 - block, bfq: NULL out the bic when it's no longer valid - [arm64] perf pmu: Fix uncore PMU alias list for ARM64 - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() - [x86] tls: Fix possible spectre-v1 in do_get_thread_area() - USB: serial: ftdi_sio: add ID for isodebug v1 - USB: serial: option: add support for GosunCn ME3630 RNDIS mode - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" - p54usb: Fix race between disconnect and firmware loading - usb: gadget: ether: Fix race between gether_disconnect and rx_submit - [armhf,arm64] usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() - [x86] drivers/usb/typec/tps6598x.c: fix portinfo width - [x86] drivers/usb/typec/tps6598x.c: fix 4CC cmd write - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt - HID: Add another Primax PIXART OEM mouse quirk - binder: fix memory leak in error path - carl9170: fix misuse of device driver API - [x86] VMCI: Fix integer overflow in VMCI handle arrays - staging: rtl8712: reduce stack usage, again https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.60 - Revert "e1000e: fix cyclic resets at link up with active tx" - e1000e: start network tx queue only when link is up - [x86] Input: synaptics - enable SMBUS on T480 thinkpad trackpad - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT - firmware: improve LSM/IMA security behaviour - [armhf,arm64] irqchip/gic-v3-its: Fix command queue pointer comparison bug - [armhf] clk: ti: clkctrl: Fix returning uninitialized data - [amd64,arm64] efi/bgrt: Drop BGRT status field reserved bits check - perf/core: Fix perf_sample_regs_user() mm check - [armhf] omap2: remove incorrect __init annotation - afs: Fix uninitialised spinlock afs_volume::cb_break_lock - [x86] apic: Fix integer overflow on 10 bit left shift of cpu_khz - be2net: fix link failure after ethtool offline test - ppp: mppe: Add softdep to arc4 - sis900: fix TX completion - [armhf] dts: imx6ul: fix PWM[1-4] interrupts - [armhf] pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order - dm table: don't copy from a NULL pointer in realloc_argv() - dm verity: use message limit for data block corruption message - [amd64] boot: Fix crash if kernel image crosses page table boundary - [amd64] boot: Add missing fixup_pointer() for next_early_pgt access - HID: chicony: add another quirk for PixArt mouse - HID: multitouch: Add pointstick support for ALPS Touchpad - cpu/hotplug: Fix out-of-bounds read when setting fail state - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL - genirq: Delay deactivation in free_irq() - genirq: Fix misleading synchronize_irq() documentation - genirq: Add optional hardware synchronization for shutdown - [x86] ioapic: Implement irq_get_irqchip_state() callback - [x86] irq: Handle spurious interrupt after shutdown gracefully - [x86] irq: Seperate unused system vectors from spurious entry again - [s390x] fix stfle zero padding - [s390x] qdio: (re-)initialize tiqdio list entries - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues() - regmap-irq: do not write mask register if mask_base is zero - drm/udl: introduce a macro to convert dev to udl. - drm/udl: Replace drm_dev_unref with drm_dev_put - drm/udl: move to embedding drm device inside udl device. - [i386] entry: Fix ENDPROC of common_spurious https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.61 - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path - wil6210: fix potential out-of-bounds read - ath10k: Do not send probe response template for mesh - ath9k: Check for errors when reading SREV register - ath6kl: add some bounds checking - ath10k: add peer id check in ath10k_peer_find_by_id - wil6210: fix spurious interrupts in 3-msi - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection - regmap: debugfs: Fix memory leak in regmap_debugfs_init - batman-adv: fix for leaked TVLV handler. - media: dvb: usb: fix use after free in dvb_usb_device_exit - media: marvell-ccic: fix DMA s/g desc number calculation - media: media_device_enum_links32: clean a reserved field - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries - qed: Set the doorbell address correctly - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig - af_key: fix leaks in key_pol_get_resp and dump_sp. - xfrm: Fix xfrm sel prefix length validation - fscrypt: clean up some BUG_ON()s in block encryption/decryption - perf annotate TUI browser: Do not use member from variable within its own initialization - media: mc-device.c: don't memset __user pointer contents - media: saa7164: fix remove_proc_entry warning - net: phy: Check against net_device being NULL - tua6100: Avoid build warnings. - batman-adv: Fix duplicated OGMs on NETDEV_UP - [armhf] media: wl128x: Fix some error handling in fm_v4l2_init_video_device() - [arm64] net: hns3: set ops to null when unregister ad_dev - cpupower : frequency-set -r option misses the last cpu in related cpu list - [armhf,arm64] net: stmmac: dwmac4: fix flow control issue - [armhf,arm64] net: stmmac: modify default value of tx-frames - [arm64] crypto: inside-secure - do not rely on the hardware last bit for result descriptors - [s390x] qdio: handle PENDING state for QEBSM devices - net: sfp: add mutex to prevent concurrent state checks - ipset: Fix memory accounting for hash types on resize - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode - [s390x] perf report: Fix OOM error in TUI mode on s390 - [arm64] irqchip/meson-gpio: Add support for Meson-G12A SoC - media: uvcvideo: Fix access to uninitialized fields on probe error - iommu: Fix a leak in iommu_insert_resv_region - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4 - [armhf] gpio: omap: ensure irq is enabled before wakeup - regmap: fix bulk writes on paged registers - bpf: silence warning messages in core - selinux: fix empty write to keycreate file - [x86] cpu: Add Ice Lake NNPI to Intel family - [arm64] ASoC: meson: axg-tdm: fix sample clock inversion - rcu: Force inlining of rcu_read_lock() - [x86] cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS - qed: iWARP - Fix tc for MPA ll2 connection - [arm64] net: hns3: fix for skb leak when doing selftest - block: null_blk: fix race condition for null_del_dev - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration - xfrm: fix sa selector validation - sched/core: Add __sched tag for io_schedule() - sched/fair: Fix "runnable_avg_yN_inv" not used warnings - [x86] perf/intel/uncore: Handle invalid event coding for free-running counter - [x86] atomic: Fix smp_mb__{before,after}_atomic() - perf evsel: Make perf_evsel__name() accept a NULL argument - vhost_net: disable zerocopy by default - ipoib: correcly show a VF hardware address - [x86] cacheinfo: Fix a -Wtype-limits warning - blk-iolatency: only account submitted bios - ACPICA: Clear status of GPEs on first direct enable - EDAC/sysfs: Fix memory leak when creating a csrow object - nvme: fix possible io failures when removing multipathed ns - nvme-pci: properly report state change failure in nvme_reset_work - nvme-pci: set the errno on ctrl state change error - lightnvm: pblk: fix freeing of merged pages - [arm64] Do not enable IRQs for ct_user_exit - ipsec: select crypto ciphers for xfrm_algo - ipvs: defer hook registration to avoid leaks - media: i2c: fix warning same module names - ntp: Limit TAI-UTC offset - timer_list: Guard procfs specific code - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0 - media: hdpvr: fix locking and a missing msleep - [armhf] net: stmmac: sun8i: force select external PHY when no internal one - rtlwifi: rtl8192cu: fix error handle when usb probe failed - mt7601u: do not schedule rx_tasklet when the device has been disconnected - mt7601u: fix possible memory leak when the device is disconnected - ipvs: fix tinfo memory leak in start_sync_thread - ath10k: add missing error handling - ath10k: fix PCIE device wake up failed - perf tools: Increase MAX_NR_CPUS and MAX_CACHES - [x86] ASoC: Intel: hdac_hdmi: Set ops to NULL on remove - libata: don't request sense data on !ZAC ATA devices - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch timer - xsk: Properly terminate assignment in xskq_produce_flush_desc - rslib: Fix decoding of shortened codes - rslib: Fix handling of of caller provided syndrome - ixgbe: Check DDM existence in transceiver before access - crypto: serpent - mark __serpent_setkey_sbox noinline - wil6210: drop old event after wmi_call timeout - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec - bcache: check CACHE_SET_IO_DISABLE in allocator code - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() - bcache: acquire bch_register_lock later in cached_dev_free() - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() - bcache: fix potential deadlock in cached_def_free() - [arm64] net: hns3: fix a -Wformat-nonliteral compile warning - [arm64] net: hns3: add some error checking in hclge_tm module - ath10k: destroy sdio workqueue while remove sdio module - [armhf,arm64] net: mvpp2: prs: Don't override the sign bit in SRAM parser shift - igb: clear out skb->tstamp after reading the txtime - iwlwifi: mvm: Drop large non sta frames - perf stat: Make metric event lookup more robust - perf stat: Fix group lookup for metric group - bnx2x: Prevent ptp_task to be rescheduled indefinitely - net: usb: asix: init MAC address buffers - rxrpc: Fix oops in tracepoint - bpf, libbpf, smatch: Fix potential NULL pointer dereference - bonding: validate ip header before check IPPROTO_IGMP - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants - [ppc64el] tools: bpftool: Fix json dump crash on powerpc - Bluetooth: hci_bcsp: Fix memory leak in rx_skb - Bluetooth: Add new 13d3:3491 QCA_ROME device - Bluetooth: Add new 13d3:3501 QCA_ROME device - Bluetooth: 6lowpan: search for destination address in all peers - [ppc64el] perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 - Bluetooth: Check state in l2cap_disconnect_rsp - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() - Bluetooth: validate BLE connection interval updates - gtp: fix suspicious RCU usage - gtp: fix Illegal context switch in RCU read-side critical section. - gtp: fix use-after-free in gtp_encap_destroy() - gtp: fix use-after-free in gtp_newlink() - [armel/marvell,armhf] net: mvmdio: defer probe of orion-mdio if a clock is not ready - iavf: fix dereference of null rx_buffer pointer - floppy: fix out-of-bounds read in next_valid_format - floppy: fix invalid pointer dereference in drive_name - xen: let alloc_xenballooned_pages() fail if not enough memory free - scsi: core: Fix race on creating sense cache - scsi: megaraid_sas: Fix calculation of target ID - crypto: ghash - fix unaligned memory access in ghash_setkey() - [x86] crypto: ccp - Validate the the error value used to index error messages - [arm64] crypto: sha1-ce - correct digest for empty data in finup - [arm64] crypto: sha2-ce - correct digest for empty data in finup - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm - [x86] crypto: ccp - memset structure fields to zero before reuse - [x86] crypto: ccp/gcm - use const time tag comparison. - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" - bcache: Revert "bcache: fix high CPU occupancy during journal" - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" - bcache: ignore read-ahead request failure on backing device - bcache: fix mistaken sysfs entry for io_error counter - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread - Input: alps - don't handle ALPS cs19 trackpoint-only device - [x86] Input: synaptics - whitelist Lenovo T580 SMBus intertouch - Input: alps - fix a mismatch between a condition check and its comment - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages - [arm64] tegra: Update Jetson TX1 GPU regulator timings - iwlwifi: pcie: don't service an interrupt that was masked - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices - NFSv4: Handle the special Linux file open access mode - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error - pNFS: Fix a typo in pnfs_update_layout - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE - ASoC: dapm: Adapt for debugfs API change - raid5-cache: Need to do start() part job after adding journal device - ALSA: seq: Break too long mutex context in the write loop - [x86] ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 - media: videobuf2-dma-sg: Prevent size from overflowing - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed - [arm64] tegra: Fix AGIC register range - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes. - kconfig: fix missing choice values in auto.conf - drm/nouveau/i2c: Enable i2c pads & busses during preinit - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs - dm zoned: fix zone state management race - xen/events: fix binding user event channels to cpus - 9p/xen: Add cleanup path in p9_trans_xen_init - 9p/virtio: Add cleanup path in p9_virtio_init - [x86] boot: Fix memory leak in default_get_smp_config() - [x86] perf/intel: Fix spurious NMI on fixed counter - [x86] perf/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs - [x86] perf/amd/uncore: Set the thread mask for F17h L3 PMCs - drm/edid: parse CEA blocks embedded in DisplayID - [x86] intel_th: pci: Add Ice Lake NNPI support - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() - PCI: Do not poll for PME if the device is in D3cold - [arm64] PCI: qcom: Ensure that PERST is asserted for at least 100 ms - Btrfs: fix data loss after inode eviction, renaming it, and fsync it - Btrfs: fix fsync not persisting dentry deletions due to inode evictions - Btrfs: add missing inode version, ctime and mtime updates when punching hole - IB/mlx5: Report correctly tag matching rendezvous capability - HID: wacom: generic: only switch the mode on devices with LEDs - HID: wacom: generic: Correct pad syncing - HID: wacom: correct touch resolution x/y typo - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields - coda: pass the host file in vma->vm_file on mmap - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures - xfs: fix pagecache truncation prior to reflink - xfs: flush removing page cache in xfs_reflink_remap_prep - xfs: don't overflow xattr listent buffer - xfs: rename m_inotbt_nores to m_finobt_nores - xfs: don't ever put nlink > 0 inodes on the unlinked list - xfs: reserve blocks for ifree transaction during log recovery - xfs: fix reporting supported extra file attributes for statx() - xfs: serialize unaligned dio writes against all other dio writes - xfs: abort unaligned nowait directio early - [ppc64el] watchpoint: Restore NV GPRs while returning from exception - [ppc64el] powernv/npu: Fix reference leak - [ppc64el] pseries: Fix oops in hotplug memory notifier - [arm64] mmc: sdhci-msm: fix mutex while in spinlock - eCryptfs: fix a couple type promotion bugs - [x86] intel_th: msu: Fix single mode with disabled IOMMU - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug - usb: Handle USB3 remote wakeup for LPM enabled devices correctly - blk-throttle: fix zero wait time for iops throttled group - blk-iolatency: clear use_delay when io.latency is set to zero - blkcg: update blkcg_print_stat() to handle larger outputs - [armel/marvell,armhf] net: mvmdio: allow up to four clocks to be specified for orion-mdio - dm bufio: fix deadlock with loop device https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.62 - bnx2x: Prevent load reordering in tx completion processing - [x86] hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() - igmp: fix memory leak in igmpv3_del_delrec() - ipv4: don't set IPv6 only flags to IPv4 addresses - ipv6: rt6_check should return NULL if 'from' is NULL - ipv6: Unlink sibling route in case of failure - [armhf,arm64] net: dsa: mv88e6xxx: wait after reset deactivation - net: make skb_dst_force return true when dst is refcounted - net: neigh: fix multiple neigh timer scheduling - net: openvswitch: fix csum updates for MPLS actions - net: phy: sfp: hwmon: Fix scaling of RX power - [armhf,arm64] net: stmmac: Re-work the queue selection for TSO packets - nfc: fix potential illegal memory access - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b - rxrpc: Fix send on a connected, but unbound socket - sctp: fix error handling on stream scheduler initialization - [x86] sky2: Disable MSI on ASUS P6T - tcp: be more careful in tcp_fragment() - tcp: fix tcp_set_congestion_control() use from bpf hook - tcp: Reset bytes_acked and bytes_received when disconnecting - vrf: make sure skb->data contains ip header to make routing - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn - macsec: fix use-after-free of skb during RX - macsec: fix checksumming after decryption - netrom: fix a memory leak in nr_rx_frame() - netrom: hold sock when setting skb->destructor - net_sched: unset TCQ_F_CAN_BYPASS when adding filters - sctp: not bind the socket in sctp_connect - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query - net: bridge: don't cache ether dest pointer on input - net: bridge: stp: don't cache eth dest pointer before skb pull - dma-buf: balance refcount inbalance - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc - perf/core: Fix exclusive events' grouping - perf/core: Fix race between close() and fork() - ext4: don't allow any modifications to an immutable file - ext4: enforce the immutable flag on open files - mm: add filemap_fdatawait_range_keep_errors() - jbd2: introduce jbd2_inode dirty range scoping - ext4: use jbd2_inode dirty range scoping - ext4: allow directory holes - [x86] KVM: nVMX: do not use dangling shadow VMCS after guest reset - [x86] KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested - mm: vmscan: scan anonymous pages on file refaults - net: sched: verify that q!=NULL before setting q->flags https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.63 - [x86] hvsock: fix epollout hang from race condition - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe - [x86] staging: vt6656: use meaningful error code during buffer allocation - usb: core: hub: Disable hub-initiated U1/U2 - [armhf,arm64] pinctrl: rockchip: fix leaked of_node references - drm/amd/display: Fill prescale_params->scale for RGB565 - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE - drm/amd/display: Disable ABM before destroy ABM struct - drm/amdkfd: Fix a potential memory leak - drm/amdkfd: Fix sdma queue map issue - drm/edid: Fix a missing-check bug in drm_load_edid_firmware() - PCI: Return error if cannot probe VF - [armhf,arm64] gpu: host1x: Increase maximum DMA segment size - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry - drm/crc-debugfs: Also sprinkle irqrestore over early exits - memstick: Fix error cleanup path of memstick_init - [arm64] tty: serial: msm_serial: avoid system lockup condition - serial: 8250: Fix TX interrupt handling condition - drm/amd/display: Always allocate initial connector state state - drm/virtio: Add memory barriers for capset cache. - drm/amd/display: fix compilation error - [ppc64el] pseries/mobility: prevent cpu hotplug during DT update - [armhf,arm64] drm/rockchip: Properly adjust to a true clock in adjusted_mode - [armhf] serial: imx: fix locking in set_termios() - tty: serial_core: Set port active bit in uart_port_activate - usb: gadget: Zero ffs_io_data - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs - [arm64] drm/msm: Depopulate platform on probe failure - [arm64] PCI: xilinx-nwl: Fix Multi MSI data programming - iio: iio-utils: Fix possible incorrect mask calculation - [ppc64el] cacheflush: fix variable set but not used - [ppc64el] xmon: Fix disabling tracing while in xmon - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc - mfd: core: Set fwnode for created devices - [arm64] mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk - mm/swap: fix release_pages() when releasing devmap pages - RDMA/i40iw: Set queue pair state when being queried - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE - [ppc64el] mm: Handle page table allocation failures - IB/ipoib: Add child to parent list only if device initialized - [arm64] assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS - perf stat: Fix use-after-freed pointer detected by the smatch tool - perf top: Fix potential NULL pointer dereference detected by the smatch tool - perf session: Fix potential NULL pointer dereference found by the smatch tool - perf annotate: Fix dereferencing freed memory found by the smatch tool - perf hists browser: Fix potential NULL pointer dereference found by the smatch tool - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM - [armhf] PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h - block: init flush rq ref count to 1 - f2fs: avoid out-of-range memory access - mailbox: handle failed named mailbox channel request - dlm: check if workqueues are NULL before flushing/destroying - [ppc64el] eeh: Handle hugepages in ioremap space - block/bio-integrity: fix a memory leak bug - 9p: pass the correct prototype to read_cache_page - mm/gup.c: mark undo_dev_pagemap as __maybe_unused - mm/gup.c: remove some BUG_ONs from get_gate_page() - memcg, fsnotify: no oom-kill for remote memcg charging - mm/mmu_notifier: use hlist_add_head_rcu() - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup - proc: use down_read_killable mmap_sem for /proc/pid/pagemap - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs - proc: use down_read_killable mmap_sem for /proc/pid/map_files - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() - proc: use down_read_killable mmap_sem for /proc/pid/maps - locking/lockdep: Fix lock used or unused stats error - mm: use down_read_killable for locking mmap_sem in access_remote_vm - locking/lockdep: Hide unused 'class' variable - usb: wusbcore: fix unbalanced get/put cluster_id - [x86] usb: pci-quirks: Correct AMD PLL quirk detection - btrfs: inode: Don't compress if NODATASUM or NODATACOW set - [x86] sysfb_efi: Add quirks for some devices with swapped width and height - [x86] speculation/mds: Apply more accurate check on hypervisor platform - binder: prevent transactions to context manager from its own process. - fpga-manager: altera-ps-spi: Fix build error - [x86] mei: me: add mule creek canyon (EHL) device ids - [x86] hpet: Fix division by zero in hpet_time_div() - ALSA: ac97: Fix double free of ac97_codec_device - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 - ALSA: hda - Add a conexant codec entry to let mute led work - [ppc64el] xive: Fix loop exit-condition in xive_find_target_in_mask() - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() - access: avoid the RCU grace period for the temporary subjective credentials https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.64 - [x86] hv_sock: Add support for delayed close - vsock: correct removal of socket from the list - NFS: Fix dentry revalidation on NFSv4 lookup - NFS: Refactor nfs_lookup_revalidate() - NFSv4: Fix lookup revalidate of regular files - [armhf,arm64] usb: dwc2: Disable all EP's on disconnect - [armhf,arm64] usb: dwc2: Fix disable all EP's on disconnect - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ (Closes: #904385). - binder: fix possible UAF when freeing buffer - ISDN: hfcsusb: checking idx of ep configuration - media: au0828: fix null dereference in error path - ath10k: Change the warning message string - media: cpia2_usb: first wake up, then free in disconnect - media: pvrusb2: use a different format for warnings - NFS: Cleanup if nfs_match_client is interrupted - media: radio-raremono: change devm_k*alloc to k*alloc - [x86] iommu/vt-d: Don't queue_iova() if there is no flush queue - vhost: introduce vhost_exceeds_weight() - vhost_net: fix possible infinite loop (CVE-2019-3900) - vhost: vsock: add weight support - vhost: scsi: add weight support (CVE-2019-3900) - sched/fair: Don't free p->numa_faults with concurrent readers - sched/fair: Use RCU accessors consistently for ->numa_group - /proc//cmdline: remove all the special cases - /proc//cmdline: add back the setproctitle() special case - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl - Fix allyesconfig output. - ceph: hold i_ceph_lock when removing caps for freeing inode - block, scsi: Change the preempt-only flag into a counter - scsi: core: Avoid that a kernel warning appears during system resume - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.65 - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200 - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend - ftrace: Enable trampoline when rec count returns back to one - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset - [arm64] dts: rockchip: fix isp iommu clocks and power domain - kernel/module.c: Only return -EEXIST for modules that have finished loading - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1 - fs/adfs: super: fix use-after-free bug - btrfs: fix minimum number of chunk errors for DUP - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit() - cifs: Fix a race condition with cifs_echo_request - ceph: fix improper use of smp_mb__before_atomic() - ceph: return -ERANGE if virtual xattr value didn't fit in buffer - ACPI: blacklist: fix clang warning for unused DMI table - [s390x] scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized - perf version: Fix segfault due to missing OPT_END() - [x86] kvm: avoid constant-conversion warning - ACPI: fix false-positive -Wuninitialized warning - be2net: Signal that the device cannot transmit during reconfiguration - [x86] apic: Silence -Wtype-limits compiler warnings - mm/cma.c: fail if fixed declaration can't be honored - lib/test_overflow.c: avoid tainting the kernel and fix wrap size - lib/test_string.c: avoid masking memset16/32/64 failures - coda: add error handling for fget - coda: fix build using bare-metal toolchain - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings - ipc/mqueue.c: only perform resource calculation if user valid - [x86] xen/pv: Fix a boot up hang revealed by int3 self test - [x86] kvm: Don't call kvm_spurious_fault() from .fixup - [x86] paravirt: Fix callee-saved function ELF sizes - [x86] boot: Remove multiple copy of static function sanitize_boot_params() - drm/nouveau: fix memory leak in nouveau_conn_reset() - kconfig: Clear "written" flag to avoid data loss - Btrfs: fix incremental send failure after deduplication - Btrfs: fix race leading to fs corruption after transaction abort - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC - [arm64] mmc: meson-mx-sdio: Fix misuse of GENMASK macro - gpiolib: fix incorrect IRQ requesting of an active-low lineevent - IB/hfi1: Fix Spectre v1 vulnerability - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly - selinux: fix memory leak in policydb_init() - ALSA: hda: Fix 1-minute detection delay when i915 module is not available (Closes: #931507) - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker - [s390x] dasd: fix endless loop after read unit address configuration - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier - [arm64] compat: Allow single-byte watchpoints on all addresses - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} - nbd: replace kill_bdev() with __invalidate_device() again - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() - IB/mlx5: Fix unreg_umr to ignore the mkey state - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache - IB/mlx5: Fix clean_mr() to work in the expected order - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification - IB/hfi1: Check for error on call to alloc_rsm_map_table - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping - eeprom: at24: make spd world-readable again - objtool: Support GCC 9 cold subfunction naming scheme - gcc-9: properly declare the {pv,hv}clock_page storage - [x86] vdso: Prevent segfaults due to hoisted vclock reads - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.66 - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure - gcc-9: don't warn about uninitialized variable - driver core: Establish order of operations for device_add and device_del via bitflag - drivers/base: Introduce kill_device() - libnvdimm/bus: Prevent duplicate device_unregister() calls - libnvdimm/region: Register badblocks before namespaces - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock - HID: wacom: fix bit shift for Cintiq Companion 2 - HID: Add quirk for HP X1200 PIXART OEM mouse - IB: directly cast the sockaddr union to aockaddr - atm: iphase: Fix Spectre v1 vulnerability - bnx2x: Disable multi-cos feature. - ife: error out when nla attributes are empty - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 - ip6_tunnel: fix possible use-after-free on xmit - ipip: validate header length in ipip_tunnel_xmit - [armhf,arm64] mvpp2: fix panic on module removal - [armhf,arm64] mvpp2: refactor MTU change code - net: bridge: delete local fdb on device init failure - net: bridge: mcast: don't delete permanent entries when fast leave is enabled - net: fix ifindex collision during namespace removal - net/mlx5e: always initialize frag->last_in_page - net/mlx5: Use reversed order when unregister devices - net: phylink: Fix flow control for fixed-link - net: sched: Fix a possible null-pointer dereference in dequeue_func() - net sched: update vlan action for batched events operations - net: sched: use temporary variable for actions indexes - net/smc: do not schedule tx_work in SMC_CLOSED state - tipc: compat: allow tipc commands without arguments - tun: mark small packets as owned by the tap sock - net/mlx5: Fix modify_cq_in alignment - net/mlx5e: Prevent encap flow counter update async to user query - r8169: don't use MSI before RTL8168d - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling - cgroup: Call cgroup_release() before __exit_signal() - cgroup: Implement css_task_iter_skip() - cgroup: Include dying leaders with live threads in PROCS iterations - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed - cgroup: Fix css_task_iter_advance_css_set() cset skip condition - [arm*] spi: bcm2835: Fix 3-wire mode if DMA is enabled https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.67 - [x86] crypto: ccp - Fix oops by properly managing allocated structures - [x86] crypto: ccp - Add support for valid authsize values less than 16 - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext - usb: usbfs: fix double-free of usb memory upon submiturb error - usb: iowarrior: fix deadlock on disconnect - sound: fix a memory leak bug - [arm64,mips*/octeon] mmc: cavium: Set the correct dma max segment size for mmc_host - [arm64,mips*/octeon] mmc: cavium: Add the missing dma unmap when the dma has finished. - loop: set PF_MEMALLOC_NOIO for the worker thread - Input: usbtouchscreen - initialize PM mutex before using it - [x86] Input: elantech - enable SMBus on new (2018+) systems - [x86] Input: synaptics - enable RMI mode for HP Spectre X360 - [x86] mm: Check for pfn instead of page in vmalloc_sync_one() - [x86] mm: Sync also unmappings in vmalloc_sync_all() - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() - [s390x] perf annotate: Fix s390 gap between kernel end and module start - perf db-export: Fix thread__exec_comm() - [s390x] perf record: Fix module size on s390 - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS - gfs2: gfs2_walk_metadata fix - usb: yurex: Fix use-after-free in yurex_delete - [x86] usb: typec: tcpm: free log buf memory when remove debug file - [x86] usb: typec: tcpm: remove tcpm dir if no children - [x86] usb: typec: tcpm: Add NULL check before dereferencing config - [x86] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests - can: peak_usb: fix potential double kfree_skb() - netfilter: nfnetlink: avoid deadlock due to synchronous request_module - [s390x] vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn - netfilter: Fix rpfilter dropping vrf packets by mistake - netfilter: conntrack: always store window size un-scaled - netfilter: nft_hash: fix symhash with modulus one - drm/amd/display: Wait for backlight programming completion in set backlight level - drm/amd/display: use encoder's engine id to find matched free audio device - drm/amd/display: Fix dc_create failure handling and 666 color depths - drm/amd/display: Only enable audio if speaker allocation exists - drm/amd/display: Increase size of audios array - [x86] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN - mac80211: don't warn about CW params when not using them - allocate_flower_entry: should check for null deref - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 - drm: silence variable 'conn' set but not used - [s390x] qdio: add sanity checks to the fast-requeue path - ALSA: compress: Fix regression on compressed capture streams - ALSA: compress: Prevent bypasses of set_params - ALSA: compress: Don't allow paritial drain operations on capture streams - ALSA: compress: Be more restrictive about when a drain is allowed - perf tools: Fix proper buffer size for feature processing - perf probe: Avoid calling freeing routine multiple times for same pointer - drbd: dynamically allocate shash descriptor - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() - nvme: fix multipath crash when ANA is deactivated - scsi: megaraid_sas: fix panic on loading firmware crashdump - [ppc64el] scsi: ibmvfc: fix WARN_ON during event pool release - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG - test_firmware: fix a memory leak bug - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop - perf/core: Fix creating kernel counters for PMUs that override event->cpu - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value - HID: sony: Fix race condition between rumble and device remove. - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset - ALSA: usb-audio: fix a memory leak bug - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices - hwmon: (nct7802) Fix wrong detection of in4 presence - [x86] drm/i915: Fix wrong escape clock divisor init for GLK - ALSA: firewire: fix a memory leak bug - ALSA: hiface: fix multiple memory leak bugs - ALSA: hda - Don't override global PCM hw info flag - [x86] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) - mac80211: don't WARN on short WMM parameters from AP - dax: dax_layout_busy_page() should not unmap cow pages - SMB3: Fix deadlock in validate negotiate hits reconnect - smb3: send CAP_DFS capability during session setup - NFSv4: Fix an Oops in nfs4_do_setattr - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU - mwifiex: fix 802.11n/WPA detection - iwlwifi: don't unmap as page memory that was mapped as single - iwlwifi: mvm: fix an out-of-bound access - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Uwe Kleine-König ] * [armhf] Add support for all i.MX6 variants. * rtc-s35390a: backport fix to make hwclock able to read the time (Closes: #932845) . [ Ben Hutchings ] * [rt] Update to 4.19.59-rt24: - Fix build failure after "genirq: Prevent use-after-free and work list corruption": + Update "genirq: Do not invoke the affinity callback via a workqueue on RT" + kthread: add a global worker thread. + genirq: Do not invoke the affinity callback via a workqueue on RT + genirq: Handle missing work_struct in irq_set_affinity_notifier() - Update "irqwork: push most work into softirq context" to resolve conflict with "irq_work: Do not raise an IPI when queueing work on the local CPU" - Drop "random: avoid preempt_disable()ed section" - arm: imx6: cpuidle: Use raw_spinlock_t - rcu: Don't allow to change rcu_normal_after_boot on RT - sched/core: Drop a preempt_disable_rt() statement - timers: Redo the notification of canceling timers on -RT - Fix futex regression in 4.19.21: + Revert "futex: Ensure lock/unlock symetry versus pi_lock and hash bucket lock" + Revert "futex: Fix bug on when a requeued RT task times out" + Revert "rtmutex: Handle the various new futex race conditions" + Revert "futex: workaround migrate_disable/enable in different context" + futex: Make the futex_hash_bucket lock raw + futex: Delay deallocation of pi_state - mm/zswap: Do not disable preemption in zswap_frontswap_store() * Bump ABI to 6 linux-signed-i386 (4.19.37+6) unstable; urgency=high . * Sign kernel from linux 4.19.37-6 . [ John Paul Adrian Glaubitz ] * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap . [ Salvatore Bonaccorso ] * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) . [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list . [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. linux-signed-i386 (4.19.37+5+deb10u2) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u2 . [ Romain Perier ] * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233) * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817) * nfc: Ensure presence of required attributes in the deactivate_target handler (CVE-2019-12984) * binder: fix race between munmap() and direct reclaim (CVE-2019-1999) * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) * Input: gtco - bounds check collection indent level (CVE-2019-13631) * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283) * inet: switch IP ID generator to siphash (CVE-2019-10638) * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284) * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207) * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) . [ Salvatore Bonaccorso ] * [x86] cpufeatures: Carve out CQM features retrieval * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) * [amd64] entry: Use JMP instead of JMPQ * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * Documentation: Add section about CPU vulnerabilities for Spectre * Documentation: Add swapgs description to the Spectre v1 documentation . [ Ben Hutchings ] * [x86] cpufeatures: Avoid ABI change for swapgs mitigations: - Move swapgs feature bits to existing scattered words - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered features word" * inet: Avoid ABI change for IP ID hash change linux-signed-i386 (4.19.37+5+deb10u2~bpo9+1) stretch-backports; urgency=medium . * Sign kernel from linux 4.19.37-5+deb10u2~bpo9+1 . * Rebuild for stretch-backports; no further changes required linux-signed-i386 (4.19.37+5+deb10u1) buster-security; urgency=high . * Sign kernel from linux 4.19.37-5+deb10u1 . * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) mapproxy (1.11.0-3+deb10u1) buster; urgency=medium . * Update branch in gbp.conf & Vcs-Git URL. * Add upstream patch to fix WMS Capabilties with Python 3.7. (closes: #935887) mariadb-10.3 (1:10.3.17-0+deb10u1) buster; urgency=high . * SECURITY UPDATE: New upstream version 10.3.17. Includes fixes for the following security vulnerabilities: - CVE-2019-2737 - CVE-2019-2739 - CVE-2019-2740 - CVE-2019-2758 - CVE-2019-2805 * Upstream release 10.3.16 fixed segfaults when database 'information_schema' is accessed (Closes: #931801) * Multiple Gitlab-CI/Salsa-CI improvements * Update libmariadb3 symbols to match MariaDB Connector C 3.1 API * Add Lintian override for new test binary wsrep_check_version * Make libzstd dependency versioned as RocksDB need at least 1.3.3 * Rename 'mariadbcheck' to 'mariadb-check' as upstream is doing in 10.4 * Improve cross building (Closes: #930314) - Perform a native build of import_executables first. - cross.patch: Fix missing include in cmake/systemd.cmake. - Build-Depends: libreadline-gplv2-dev:native for the native pass. - Forward IMPORT_EXECUTABLES to the cross build pass. mariadb-10.3 (1:10.3.16-1) unstable; urgency=medium . [ Otto Kekäläinen ] * New upstream version 10.3.16 * Make libzstd dependency versioned as RocksDB need at least 1.3.3. This fixes build errors across different build environments. * Update Gitlab CI for better quality control and long-term maintenance. . [ Helmut Grohne ] * Improve cross building (Closes: #930314) mariadb-10.3 (1:10.3.15-2) unstable; urgency=medium . [ Julien Muchembled ] * Fixup RocksDB test on s390x, not available there . [ Otto Kekäläinen ] * Purge deleted translations from debian/po * Rename 'mariadbcheck' to 'mariadb-check' as upstream is doing in 10.4 musescore (2.3.2+dfsg2-7~deb10u1) buster; urgency=high . * Rebuild 2.3.2+dfsg2-7 for buster-updates (cf. #931040) . musescore (2.3.2+dfsg2-7) unstable; urgency=high . * Disable webkit functionality (Closes: #931021) ncbi-tools6 (6.1.20170106+dfsg1-0+deb10u2) buster; urgency=medium . * debian/ncbi-data.NEWS: Note UniVec removal, which turned out to have a bigger impact than anticipated. * debian/tests/run-unit-test: Explicitly point vecscreen at UniVec_Core. (See #935424.) . ncbi-tools6 (6.1.20170106+dfsg1-0+deb10u1) buster; urgency=medium . * Belatedly repackage without data/UniVec.*, some portions of which turned out to be non-free (with copyright held by Invitrogen Corporation, which requires a license for commercial use thereof). * debian/copyright: - Cover previously overlooked third-party code (all DFSG-free). - Update authors and dates for debian/*. - Set Files-Excluded to reflect repackaging. * debian/rules: Introduce NCBI_VERSION_SHLIB, with +dfsg1 stripped off. * debian/test/run-unit-test: Substitute UniVec_Core for UniVec. * debian/watch: Reflect usage of +dfsg1. * make/makeshlb.unx: NCBI_VERSION -> NCBI_VERSION_SHLIB. * Temporarily revert ncbi-cn3d splitout to expedite the above fixes. ncbi-tools6 (6.1.20170106+dfsg1-0+deb10u1) buster; urgency=medium . * Belatedly repackage without data/UniVec.*, some portions of which turned out to be non-free (with copyright held by Invitrogen Corporation, which requires a license for commercial use thereof). * debian/copyright: - Cover previously overlooked third-party code (all DFSG-free). - Update authors and dates for debian/*. - Set Files-Excluded to reflect repackaging. * debian/rules: Introduce NCBI_VERSION_SHLIB, with +dfsg1 stripped off. * debian/test/run-unit-test: Substitute UniVec_Core for UniVec. * debian/watch: Reflect usage of +dfsg1. * make/makeshlb.unx: NCBI_VERSION -> NCBI_VERSION_SHLIB. * Temporarily revert ncbi-cn3d splitout to expedite the above fixes. ncbi-tools6 (6.1.20170106+dfsg1-0+deb9u1) stretch; urgency=medium . * Belatedly repackage without data/UniVec.*, some portions of which turned out to be non-free (with copyright held by Invitrogen Corporation, which requires a license for commercial use thereof). * debian/copyright: - Cover previously overlooked third-party code (all DFSG-free). - Update authors and dates for debian/*. - Set Files-Excluded to reflect repackaging. * debian/rules: Introduce NCBI_VERSION_SHLIB, with +dfsg1 stripped off. * debian/watch: Reflect usage of +dfsg1. * make/makeshlb.unx: NCBI_VERSION -> NCBI_VERSION_SHLIB. * Temporarily revert ncbi-cn3d splitout to expedite the above fixes. ncurses (6.1+20181013-2+deb10u1) buster; urgency=medium . * Drop "rep" from xterm-new and derived terminfo descriptions (Closes: #933053). netdata (1.12.0-1+deb10u1) buster; urgency=medium . [ Lennart Weller ] * Add patch to remove Google Analytics from generated docs . [ Daniel Baumann ] * Removing currently usless depends on bash as it's still an essential package. * Adding missing GPL-3-only license stanza in copyright file. * Opting out by default from sending anonymous statistics (phone home). * Downgrading nodejs depends in netdata-plugins-nodejs to recommends as not all architectures have nodejs at the moment. . [ Federico Ceratto ] * Add patch to remove Sign In button newsboat (2.13-1+deb10u1) buster; urgency=medium . [ Nikos Tsipinakis ] * Patch use after free in itemlist (Closes: #898559) nextcloud-desktop (2.5.1-3+deb10u1) buster; urgency=medium . * Make nextcloud-desktop-cmd depend on nextcloud-desktop-common. Thanks to Calogero Lo Leggio (Closes: #932108) nginx (1.14.2-2+deb10u1) buster-security; urgency=high . * Backport upstream fixes for 3 CVEs (Closes: #935037) Those fixes affect Nginx HTTP/2 implementation, which might cause excessive memory consumption and CPU usage. (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516). node-lodash (4.17.11+dfsg-2+deb10u1) buster; urgency=medium . * Team upload * Fix prototype pollution (Closes: #933079, CVE-2019-10744) node-mixin-deep (1.1.3-3+deb10u1) buster; urgency=medium . * Team upload * Fix prototype pollution (Closes: #932500, CVE-2019-10746) nss (2:3.42.1-1+deb10u1) buster; urgency=medium . * Fixes for CVE-2019-11719, CVE-2019-11727 and CVE-2019-11729 (in unstable these were addressed via the 2:3.45-1 upload to unstable) nx-libs (2:3.5.99.19-3+deb10u1) buster; urgency=medium . * Patch backport of upstream's memleak-hunt... * debian/patches: + Add 0012_xkb-initialize-tsyms.patch + Add 0013_Screen.c-correctly-free-stuff-in-nxagentCloseScreen.patch + Add 0014_Screen.c-Fix-make-sure-RRCloseScreen-is-being-called.patch + Add 0015_Keyboard.c-nullify-freed-pointers.patch + Add 0017_Fix-memleaks-Free-devPrivates-of-devices-on-shutdown.patch + Add 0018_Screen.c-fix-another-memory-leak.patch + Add 0019_mi-miinitext.c-fix-memleaks-remove-double-glx-initia.patch + Add 0023_glxext.c-fix-another-memory-leak.patch + Add 0026_glyph.c-fix-a-read-beyond-end-of-heap-buffer.patch + Add 0027_Keyboard.c-fix-three-memory-leaks.patch + Add 0028_Quarks.c-add-missing.patch + Add 0029_dix-dispatch-fix-a-small-memory-leak.patch + Add 0030_fb-fix-memory-leak-in-fbOverlayFinishScreenInit.patch + Add 0031_render-Propagate-allocation-failure-from-createSourc.patch + Add 0032_NXrender-fix-another-memleak.patch + Add 0033_Screen.c-fix-two-memleaks.patch + Add 0034_Screen.c-fix-two-more-memleaks-of-visuals.patch + Add 0036_os-access.c-add-missing.patch + Add 0038_NXdixfonts.c-fix-index-out-of-bounds.patch + Add 0041_compext-Png.c-Nullify-after-free.patch + Add 0042_mi-miexpose.c-add-missing-free.patch + Add 0049_xkb-fix-what-looks-to-be-a-copy-paste-error-with-fir.patch + Add 0050_Keyboard.c-fix-another-cppcheck-finding.patch open-infrastructure-compute-tools (20190301-lts2-1~deb10u1) buster; urgency=medium . * Uploading to buster. * Merging upstream version 20190301-lts2: - Fix start of container by altering the systemd service file. This fix workarounds a missing/wrong condition in the start script which leads to systemd-nspawn beeing called twice. The seconds call to systemd-nspawn fails because the container is already running. Systemd then killed the container. open-vm-tools (2:10.3.10-1+deb10u1) buster; urgency=medium . * [efb4df1] Fix guest OS reporting for Debian/Buster. Without this fix, open-vm-tools report other4xLinux64Guest instead of Debian/Buster. Reason is the output of lsb_release, which outputs: $ lsb_release -sd Debian GNU/Linux 10 (buster) But the code in open-vm-tools expects '10.'. Thanks to Oliver Kurth (Closes: #934005) * [2308b74] Updating gbp.conf for buster. openjdk-11 (11.0.4+11-1~deb10u1) buster-security; urgency=medium . * Rebuild for Buster openjdk-11 (11.0.4+11-1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. openjdk-11 (11.0.4+10-1) unstable; urgency=medium . * OpenJDK 11.0.4+10 build (early access). * Add riscv64 support for zero (Ed Nevill). * Fix build dependencies for Ubuntu precise builds. * Fix dependency generation on the libjpeg runtime. Closes: #927965. * Drop dependency on transitional libgl1-mesa-glx package. Closes: #930611. openjdk-11 (11.0.4+9-1) unstable; urgency=medium . * OpenJDK 11.0.4+9 build (early access). * Add another break for libequinox-osgi-java (<< 3.9.1). Closes: #931115. openjdk-11 (11.0.4+8-1) unstable; urgency=medium . * OpenJDK 11.0.4+8 build (early access). * Apply patch for JDK-8225716. openjdk-11 (11.0.4+6-1) experimental; urgency=medium . * OpenJDK 11.0.4+6 build (early access). openjdk-11 (11.0.4+4+really11.0.3+7-2) unstable; urgency=medium . * Team upload. * Refresh and rework the following patches to address FTBFS on i386: - hotspot-disable-exec-shield-workaround - workaround_expand_exec_shield_cs_limit openjdk-11 (11.0.4+4+really11.0.3+7-1) unstable; urgency=medium . * Team upload. * Revert upstream sources to GA release 11.0.3+7. * Disable workaround_expand_exec_shield_cs_limit.diff and hotspot-disable-exec-shield-workaround.diff patches * No longer try to install jspawnhelper. openjdk-11 (11.0.4+4-1) unstable; urgency=medium . * OpenJDK 11.0.4+4 build (early access). * Configure with --with-version-pre='ea' for upstream tags which are not upstream releases (has to be set manually). Not enabled during the buster freeze. * Allow to skip the bootcycle build (DEB_BUILD_OPTIONS=nobootcycle). * Add a watch file (Paul Wise). * Print some information about the host configuration before starting the build. openjdk-11 (11.0.4+2-1) unstable; urgency=medium . * OpenJDK 11.0.4+2 build. * Fix src.zip symlink. Closes: #928369. * Tighten dependency on ca-certificates-java. Closes: #914860. * Refresh patches. openjdk-11 (11.0.4+1-1) unstable; urgency=medium . * OpenJDK 11.0.4+1 build. openldap (2.4.47+dfsg-3+deb10u1) buster; urgency=medium . * Fix slapd to restrict rootDN proxyauthz to its own databases (CVE-2019-13057) (ITS#9038) (Closes: #932997) * Fix slapd to enforce sasl_ssf ACL statement on every connection (CVE-2019-13565) (ITS#9052) (Closes: #932998) * Fix slapo-rwm to not free original filter when rewritten filter is invalid (ITS#8964) (Closes: #934277, LP: #1838370) openldap (2.4.47+dfsg-3+deb10u1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. * Revert "Fix build with Heimdal 7.2.0" as stretch contains a lower version of heimdal. . openldap (2.4.47+dfsg-3+deb10u1) buster; urgency=medium . * Fix slapd to restrict rootDN proxyauthz to its own databases (CVE-2019-13057) (ITS#9038) (Closes: #932997) * Fix slapd to enforce sasl_ssf ACL statement on every connection (CVE-2019-13565) (ITS#9052) (Closes: #932998) * Fix slapo-rwm to not free original filter when rewritten filter is invalid (ITS#8964) (Closes: #934277, LP: #1838370) osinfo-db (0.20181120-1+deb10u1) buster; urgency=medium . * debian/patches/debian9-update.patch: Fix the URL's to download the iso files and point to the latest point release (9.9.0) * debian/patches/debian10-Add-info.patch: Add information about the debian buster/10 release (Closes: #935551) * d/p/debian-preseed-Fix-typo-in-config-s-name.patch: Fix the name of the parameter used to set the fullname when generating a preseed file, the documentation explicitly talks about "user-realname" but the profile was using "user-fullname" (the debconf parameter name) by mistake osmpbf (1.3.3-11+deb10u1) buster; urgency=medium . * Update branch in gbp.conf & Vcs-Git URL. * Rebuild with protobuf 3.6.1. (closes: #935990) pam-u2f (1.0.7-1+deb10u1) buster; urgency=high . * Backport multiple security fixes + Fix insecure debug file handling CVE-2019-12209. (Closes: #930021) + Fix debug file descriptor leak CVE-2019-12210. (Closes: #930023) + Fix a non-critical buffer out-of-bounds access. (Closes: #930047) . * Backport a reliability fix pam-u2f could previously segfault following a failure to allocate a buffer. pango1.0 (1.42.4-7~deb10u1) buster-security; urgency=medium . * Team upload * Rebuild for buster-security * d/gbp.conf: Set upstream branch to upstream/1.42.x * d/gbp.conf: Set packaging branch to debian/buster . pango1.0 (1.42.4-7) unstable; urgency=medium . * Team upload * d/p/bidi-Be-safer-against-bad-input.patch: Fix heap overflow when acting on malformed UTF-8. (Closes: #933860; CVE-2019-1010238) passwordsafe (1.06+dfsg-1+deb10u1) buster; urgency=medium . * Don't install localization files under an extra subdirectory. Closes: 932626 patch (2.7.6-3+deb10u1) buster-security; urgency=high . * Fix CVE-2019-13636: mishandled following of symlinks (closes: #932401). * Fix CVE-2019-13638: shell command injection. * Fix CVE-2018-1000156 regression, temporary file leak on failed ed-style patches (closes: #933140). piuparts (1.0.0+deb10u1) buster; urgency=medium . * Happy 26th birthday, Debian! And many thanks to all the contributors! . [ Andreas Beckmann ] * piuparts.py: - Add '--max-command-output-size' option to allow overriding the default of 8 MB for debugging runs. - Run pre_remove scripts before computing packages to be removed. - Fix spurious failure to remove packages with names ending with '+'. * piuparts-slave.py: - Generate separate tarball names for --merged-usr chroots. * detect_well_known_errors.py: - process untestable logs. * Makefile: use gzip -n for reproducibility. * piuparts.conf, distros.conf: Update for buster release. * custom-scripts: some updates for buster. If custom-scripts are used, it's probably better to use piuparts from bpo. . [ Holger Levsen ] * Cherry-picking the above. postgresql-11 (11.5-1+deb10u1) buster-security; urgency=high . * New upstream security release. + Fixes regression in ALTER TABLE on multiple columns. (Closes: #932247) . + No longer picks "UCT" as timezone spelling. (Closes: #929953) . + Require schema qualification to cast to a temporary type when using functional cast syntax (Noah Misch) . We have long required invocations of temporary functions to explicitly specify the temporary schema, that is pg_temp.func_name(args). Require this as well for casting to temporary types using functional notation, for example pg_temp.type_name(arg). Otherwise it's possible to capture a function call using a temporary object, allowing privilege escalation in much the same ways that we blocked in CVE-2007-2138. (CVE-2019-10208) . + Fix execution of hashed subplans that require cross-type comparison (Tom Lane, Andreas Seltenreich) . Hashed subplans used the outer query's original comparison operator to compare entries of the hash table. This is the wrong thing if that operator is cross-type, since all the hash table entries will be of the subquery's output type. For the set of hashable cross-type operators in core PostgreSQL, this mistake seems nearly harmless on 64-bit machines, but it can result in crashes or perhaps unauthorized disclosure of server memory on 32-bit machines. Extensions might provide hashable cross-type operators that create larger risks. (CVE-2019-10209) postgresql-11 (11.5-1) unstable; urgency=medium . * New upstream version. . + Fixes regression in ALTER TABLE on multiple columns. (Closes: #932247) . + No longer picks "UCT" as timezone spelling. (Closes: #929953) . + Require schema qualification to cast to a temporary type when using functional cast syntax (Noah Misch) . We have long required invocations of temporary functions to explicitly specify the temporary schema, that is pg_temp.func_name(args). Require this as well for casting to temporary types using functional notation, for example pg_temp.type_name(arg). Otherwise it's possible to capture a function call using a temporary object, allowing privilege escalation in much the same ways that we blocked in CVE-2007-2138. (CVE-2019-10208) . + Fix execution of hashed subplans that require cross-type comparison (Tom Lane, Andreas Seltenreich) . Hashed subplans used the outer query's original comparison operator to compare entries of the hash table. This is the wrong thing if that operator is cross-type, since all the hash table entries will be of the subquery's output type. For the set of hashable cross-type operators in core PostgreSQL, this mistake seems nearly harmless on 64-bit machines, but it can result in crashes or perhaps unauthorized disclosure of server memory on 32-bit machines. Extensions might provide hashable cross-type operators that create larger risks. (CVE-2019-10209) . * debian/pycompat: Obsolete, remove. * debian/patches: Add missing patch documentation. * debian/rules: Use /usr/share/dpkg/pkg-info.mk and vendor.mk for --with-extra-version. * debian/*.symbols: Add Build-Depends-Package information. * debian/tests: Also run regression tests. * debian/tests/control: Add fakeroot to dependencies. postgresql-common (200+deb10u2) buster; urgency=high . DATA LOSS WARNING: pg_upgradecluster from postgresql-common 200, 200+deb10u1, 201, and 202 will corrupt the data_directory setting when used *twice* to upgrade a cluster (e.g. 9.6 -> 10 -> 11). This update fixes the original problem, and also heals affected clusters on the next upgrade. No additional steps are required. . https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931635 . * pg_upgradecluster: Don't accidentally set (the wrong!) data_directory in postgresql.auto.conf. (Closes: #931635) * PgCommon.pm: Ignore data_directory when set in postgresql.auto.conf. * pg_upgradecluster: Delete data_directory from postgresql.auto.conf in new cluster. proftpd-dfsg (1.3.6-4+deb10u1) buster-security; urgency=medium . * Add patch from upstream to address Bug#932453: CVE-2019-12815. pulseaudio (12.2-4+deb10u1) buster; urgency=medium . * Pick upstream patch fixing mute state restoring (Closes: #913102) * Add gbp config for buster branch puppet-module-cinder (13.1.0-3+deb10u1) buster; urgency=medium . * Add missing Ceph patch: Do_not_attempt_to_write_in_etc_init.patch. python-autobahn (17.10.1+dfsg1-3+deb10u1) buster; urgency=medium . * Fix (build-)dependency on pyqrcode instead of qrcode (Closes: #931612). python-django (1:1.11.23-1~deb10u1) buster-security; urgency=high . * New upstream security release. . - CVE-2019-14232: Denial-of-service possibility in django.utils.text.Truncator . If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable. . The regular expressions used by Truncator have been simplified in order to avoid potential backtracking issues. As a consequence, trailing punctuation may now at times be included in the truncated output. . - CVE-2019-14233: Denial-of-service possibility in strip_tags() . Due to the behavior of the underlying HTMLParser, django.utils.html.strip_tags() would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities. The strip_tags() method is used to implement the corresponding striptags template filter, which was thus also vulnerable. . strip_tags() now avoids recursive calls to HTMLParser when progress removing tags, but necessarily incomplete HTML entities, stops being made. . Remember that absolutely NO guarantee is provided about the results of strip_tags() being HTML safe. So NEVER mark safe the result of a strip_tags() call without escaping it first, for example with django.utils.html.escape(). . - CVE-2019-14234: SQL injection possibility in key and index lookups for JSONField/HStoreField . Key and index lookups for django.contrib.postgres.fields.JSONField and key lookups for django.contrib.postgres.fields.HStoreField were subject to SQL injection, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet.filter(). . - CVE-2019-14235: Potential memory exhaustion in django.utils.encoding.uri_to_iri() . If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to excessive recursion when re-percent-encoding invalid UTF-8 octet sequences. . uri_to_iri() now avoids recursion when re-percent-encoding invalid UTF-8 octet sequences. python-django (1:1.11.22-1) unstable; urgency=medium . * New upstream security release. (Closes: #931316) python-django (1:1.11.22-1~deb10u1) buster-security; urgency=high . * No-change update for buster-security. * Update debian/gbp.conf for new debian/buster branch. raspi3-firmware (1.20190215-1+deb10u1) buster; urgency=medium . * Add support for bcm2837-rpi-cm3-io3.dtb (as generated by the Linux kernel build system) aka. bcm2710-rpi-cm3.dtb (as expected by the bootloader), designed to work for: - Raspberry Pi Compute Module 3 (CM3); - Raspberry Pi Compute Module 3 Lite (CM3L); - Raspberry Pi Compute Module IO Board V3. With many thanks to Charles Fendt for the tests (Closes: #932158). * The DTB addition in the linux source package is tracked in #932157. redis (5:5.0.3-4+deb10u1) buster-security; urgency=high . * CVE-2019-10192: Fix two heap buffer overflows in the Hyperloglog functionality. (Closes: #931625) * CVE-2019-10193: Fix a stack buffer overflow vulnerability in the Hyperloglog functionality. (Closes: #931625) reportbug (7.5.3~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Re-enable submitting stretch-pu requests. * Rebuild for buster. . reportbug (7.5.3) unstable; urgency=medium . * debian/control - replace emacs* Suggests with emacs-bin-common; Closes: #925422 - bump Standards-Version to 4.4.0 (no changes needed) - add sensible-utils dep, patch by Nis Martensen * reportbug/debbugs.py - when handling ftp.d.o, dont look up package information if the package doesnt exist, fixing a crash; Closes: #923631 - fix a crash with stable version lookup, patch by Nis Martensen; Closes: #935602 * bin/reportbug - remove debug code when handling list-cc-me, patch by Josh Triplett * reportbug/utils.py - update release names, following Buster releases, patch by Nicolas Braud-Santoni; Closes: #932524, #931609 - recognize versioned Provides; patch by Nis Martensen; Closes: #934472 * man/reportbug.1 - add default for --draftpath; patch by laokz ruby-airbrussh (1.3.1-2+deb10u1) buster; urgency=medium . * d/p/utf8-encoding.patch: don't throw exception on invalid UTF-8 SSH output ruby-mini-magick (4.9.2-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Don't allow remote shell execution (CVE-2019-13574) (Closes: #931932) sdl-image1.2 (1.2.12-10+deb10u1) buster; urgency=medium . * Non-maintainer upload. * CVE-2019-5058: Fix CVE-2018-3977.patch from previous upload: check should be done for y, not ty (Closes: #932755). * CVE-2019-5052: integer overflow and subsequent buffer overflow in IMG_pcx.c. * CVE-2019-7635: heap buffer overflow in Blit1to4 (IMG_bmp.c). * CVE-2019-12216, CVE-2019-12217, CVE-2019-12218, CVE-2019-12219, CVE-2019-12220, CVE-2019-12221, CVE-2019-12222, CVE-2019-5051: OOB R/W in IMG_LoadPCX_RW (IMG_pcx.c). sendmail (8.15.2-14~deb10u1) buster; urgency=medium . * QA upload. * Rebuild for buster. . sendmail (8.15.2-14) unstable; urgency=medium . * QA upload. * sendmail-bin.prerm: Stop sendmail before removing the alternatives. * sendmail-bin.postinst: Let start-stop-daemon match on pidfile and executable. (Closes: #932598) . sendmail (8.15.2-13) unstable; urgency=medium . * QA upload. * initscript: Let start-stop-daemon match on pidfile and executable. (Closes: #932598, LP: #1822866) sendmail (8.15.2-13) unstable; urgency=medium . * QA upload. * initscript: Let start-stop-daemon match on pidfile and executable. (Closes: #932598, LP: #1822866) slirp4netns (0.2.3-1) buster; urgency=medium . * New upstream releases: - 0.2.2: check sscanf result when emulating ident, CVE-2019-9824 - 0.2.3: Fixes heap overflow in included libslirp, Closes: #933742, CVE-2019-14378 squid (4.6-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Denial of Service issue in cachemgr.cgi (CVE-2019-12854) * Denial of Service issue in HTTP Basic Authentication processing (CVE-2019-12529) * Denial of Service issue in HTTP Digest Authentication processing (CVE-2019-12525) * Heap Overflow issue in HTTP Basic Authentication processing (CVE-2019-12527) * Multiple Cross-Site Scripting issues in cachemgr.cgi (CVE-2019-13345) (Closes: #931478) subversion (1.10.4-1+deb10u1) buster-security; urgency=high . * Backport security fixes from upstream: + CVE-2018-11782: Remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev'. + CVE-2018-0203: Remote unauthenticated denial-of-service in Subversion svnserve. systemd (241-7~deb10u1) buster; urgency=medium . * Rebuild for buster . systemd (241-7) unstable; urgency=medium . [ Michael Biebl ] * network: Fix failure to bring up interface with Linux kernel 5.2. Backport two patches from systemd master in order to fix a bug with 5.2 kernels where the network interface fails to come up with the following error: "enp3s0: Could not bring up interface: Invalid argument" (Closes: #931636) * Use /usr/sbin/nologin as nologin shell. In Debian the nologin shell is installed in /usr/sbin, not /sbin. (Closes: #931850) . [ Mert Dirik ] * 40-systemd: Don't fail if SysV init script uses set -u and $1 is unset (Closes: #931719) . systemd (241-6) unstable; urgency=medium . * ask-password: Prevent buffer overflow when reading from keyring. Fixes a possible memory corruption that causes systemd-cryptsetup to crash either when a single large password is used or when multiple passwords have already been pushed to the keyring. (Closes: #929726) * Clarify documentation regarding %h/%u/%U specifiers. Make it clear, that setting "User=" has no effect on those specifiers. Also ensure that "%h" is actually resolved to "/root" for the system manager instance as documented in the systemd.unit man page. (Closes: #927911) * network: Behave more gracefully when IPv6 has been disabled. Ignore any configured IPv6 settings when IPv6 has been disabled in the kernel via sysctl. Instead of failing completely, continue and log a warning instead. (Closes: #929469) systemd (241-6) unstable; urgency=medium . * ask-password: Prevent buffer overflow when reading from keyring. Fixes a possible memory corruption that causes systemd-cryptsetup to crash either when a single large password is used or when multiple passwords have already been pushed to the keyring. (Closes: #929726) * Clarify documentation regarding %h/%u/%U specifiers. Make it clear, that setting "User=" has no effect on those specifiers. Also ensure that "%h" is actually resolved to "/root" for the system manager instance as documented in the systemd.unit man page. (Closes: #927911) * network: Behave more gracefully when IPv6 has been disabled. Ignore any configured IPv6 settings when IPv6 has been disabled in the kernel via sysctl. Instead of failing completely, continue and log a warning instead. (Closes: #929469) thunderbird (1:60.8.0-1~deb10u1) buster-security; urgency=medium . [ Carsten Schoenert ] * Rebuild for buster-security thunderbird (1:60.8.0-1~deb9u1) stretch-security; urgency=medium . [ Carsten Schoenert ] * Rebuild for stretch-security tzdata (2019b-0+deb10u1) buster; urgency=medium . * New upstream version, affecting the following past and future timestamps: - Brazil has canceled DST and will stay on standard time indefinitely. - Predictions for Morocco now go through 2087 instead of 2037. - Palestine's 2019 spring transition was 03-29 at 00:00, not 03-30 at 01:00. Guess future transitions to be March's last Friday at 00:00. - Many corrections to historical Hong Kong transitions from 1941 to 1947. tzdata (2019b-0+deb9u1) stretch; urgency=medium . * New upstream version, affecting the following past and future timestamps: - Brazil has canceled DST and will stay on standard time indefinitely. - Predictions for Morocco now go through 2087 instead of 2037. - Palestine's 2019 spring transition was 03-29 at 00:00, not 03-30 at 01:00. Guess future transitions to be March's last Friday at 00:00. - Many corrections to historical Hong Kong transitions from 1941 to 1947. unzip (6.0-23+deb10u1) buster; urgency=medium . * Apply three patches by Mark Adler to fix CVE-2019-13232. - Fix bug in undefer_input() that misplaced the input state. - Detect and reject a zip bomb using overlapped entries. Bug discovered by David Fifield. Closes: #931433. - Do not raise a zip bomb alert for a misplaced central directory. Reported by Peter Green. Closes: #932404. usb.ids (2019.07.27-0+deb10u1) buster; urgency=medium . * New upstream version. vlc (3.0.8-0+deb10u1) buster-security; urgency=high . * New upstream release. - Fix a buffer overflow in the MKV demuxer (CVE-2019-14970) - Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962) - Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438) - Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776) - Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778) - Fix a use after free in the ASF demuxer (CVE-2019-14533) - Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602) (Closes: #932131) - Fix a null dereference in the ASF demuxer (CVE-2019-14534) - Fix a division by zero in the CAF demuxer (CVE-2019-14498) - Fix a division by zero in the ASF demuxer (CVE-2019-14535) - Fix a division by zero when playing DVDs. (Closes: #929491, #923017, #932182) * debian/control: Bump libebml-dev B-D according to configure check changes. * debian/patches: Revert modplug version bump. We use the libopenmpt compat layer anyway. vlc (3.0.8-0+deb9u1) stretch-security; urgency=high . * New upstream release. - Fix a buffer overflow in the MKV demuxer (CVE-2019-14970) - Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962) - Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438) - Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776) - Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778) - Fix a use after free in the ASF demuxer (CVE-2019-14533) - Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602) (Closes: #932131) - Fix a null dereference in the ASF demuxer (CVE-2019-14534) - Fix a division by zero in the CAF demuxer (CVE-2019-14498) - Fix a division by zero in the ASF demuxer (CVE-2019-14535) - Fix a division by zero when playing DVDs. (Closes: #929491, #923017, #932182) * debian/patches: - Revert modplug version bump. We use the libopenmpt compat layer anyway. - Revert libebml version bump. libebml has been fixed separately. vlc (3.0.7.1-3) unstable; urgency=medium . * debian/patches: Apply upstream patch to fix SIGFPE when playing DVDs. (Closes: #929491, #923017, #932182) vlc (3.0.7.1-2) unstable; urgency=medium . * debian/: Remove obsolete maintscripts. * debian/control: - Remove obsolete transitional package. - Remove obsolete Breaks+Replaces. - Bump Standards-Version. * debian/patches: Apply upstream patches to - unbreak rendering in subsvtt. - fix integer underflows in mp4. (CVE-2019-13602) (Closes: #932131) vlc (3.0.7.1-1) unstable; urgency=medium . * New upstream release. warzone2100 (3.2.1-3+deb10u1) buster; urgency=medium . * Team upload. * Move the package to salsa.debian.org. * Fix segmentation fault upon multiplayer "Start Hosting Game" Thanks to Phil Morrell for the report and Bernhard Übelacker for the patch. (Closes: #930942) webkit2gtk (2.24.3-1~deb10u1) buster; urgency=medium . * Rebuild for buster. . webkit2gtk (2.24.3-1) unstable; urgency=medium . * New upstream release (Closes: #929749). * debian/control: + Recommend gstreamer1.0-libav. This package allows the user to play most internet videos (Closes: #870814). . webkit2gtk (2.24.2-2) unstable; urgency=high . * The WebKitGTK security advisory WSA-2019-0003 lists the following security fixes in the latest versions of WebKitGTK+: + CVE-2019-8571, CVE-2019-8583, CVE-2019-8586, CVE-2019-8594, CVE-2019-8609, CVE-2019-8611, CVE-2019-8622 and CVE-2019-8623 (fixed in 2.24.0). + CVE-2019-6237, CVE-2019-8584, CVE-2019-8587, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8610 and CVE-2019-8619 (fixed in 2.24.1). + CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615 (fixed in 2.24.2). * Use the CLoop Javascript interpreter in i386 and stop telling gcc to use SSE2 instructions (Closes: #930935). + debian/rules: - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using -msse2 -mfpmath=sse. + debian/patches/dont-detect-sse2.patch: - Don't check for SSE2 support. + debian/NEWS: - Remove item about the requirement to have an SSE2-capable CPU. webkit2gtk (2.24.3-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . webkit2gtk (2.24.3-1) unstable; urgency=medium . * New upstream release (Closes: #929749). * debian/control: + Recommend gstreamer1.0-libav. This package allows the user to play most internet videos (Closes: #870814). . webkit2gtk (2.24.2-2) unstable; urgency=high . * The WebKitGTK security advisory WSA-2019-0003 lists the following security fixes in the latest versions of WebKitGTK+: + CVE-2019-8571, CVE-2019-8583, CVE-2019-8586, CVE-2019-8594, CVE-2019-8609, CVE-2019-8611, CVE-2019-8622 and CVE-2019-8623 (fixed in 2.24.0). + CVE-2019-6237, CVE-2019-8584, CVE-2019-8587, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8610 and CVE-2019-8619 (fixed in 2.24.1). + CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615 (fixed in 2.24.2). * Use the CLoop Javascript interpreter in i386 and stop telling gcc to use SSE2 instructions (Closes: #930935). + debian/rules: - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using -msse2 -mfpmath=sse. + debian/patches/dont-detect-sse2.patch: - Don't check for SSE2 support. + debian/NEWS: - Remove item about the requirement to have an SSE2-capable CPU. webkit2gtk (2.24.3-1~bpo9+1) stretch-backports-sloppy; urgency=medium . * Rebuild for stretch-backports-sloppy. * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependency on libwoff-dev, this is not available in this Debian release. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Don't depend on libopenjp2-7-dev. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. . webkit2gtk (2.24.3-1) unstable; urgency=medium . * New upstream release (Closes: #929749). * debian/control: + Recommend gstreamer1.0-libav. This package allows the user to play most internet videos (Closes: #870814). . webkit2gtk (2.24.2-2) unstable; urgency=high . * The WebKitGTK security advisory WSA-2019-0003 lists the following security fixes in the latest versions of WebKitGTK+: + CVE-2019-8571, CVE-2019-8583, CVE-2019-8586, CVE-2019-8594, CVE-2019-8609, CVE-2019-8611, CVE-2019-8622 and CVE-2019-8623 (fixed in 2.24.0). + CVE-2019-6237, CVE-2019-8584, CVE-2019-8587, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8610 and CVE-2019-8619 (fixed in 2.24.1). + CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615 (fixed in 2.24.2). * Use the CLoop Javascript interpreter in i386 and stop telling gcc to use SSE2 instructions (Closes: #930935). + debian/rules: - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using -msse2 -mfpmath=sse. + debian/patches/dont-detect-sse2.patch: - Don't check for SSE2 support. + debian/NEWS: - Remove item about the requirement to have an SSE2-capable CPU. webkit2gtk (2.24.2-2) unstable; urgency=high . * The WebKitGTK security advisory WSA-2019-0003 lists the following security fixes in the latest versions of WebKitGTK+: + CVE-2019-8571, CVE-2019-8583, CVE-2019-8586, CVE-2019-8594, CVE-2019-8609, CVE-2019-8611, CVE-2019-8622 and CVE-2019-8623 (fixed in 2.24.0). + CVE-2019-6237, CVE-2019-8584, CVE-2019-8587, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8610 and CVE-2019-8619 (fixed in 2.24.1). + CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615 (fixed in 2.24.2). * Use the CLoop Javascript interpreter in i386 and stop telling gcc to use SSE2 instructions (Closes: #930935). + debian/rules: - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using -msse2 -mfpmath=sse. + debian/patches/dont-detect-sse2.patch: - Don't check for SSE2 support. + debian/NEWS: - Remove item about the requirement to have an SSE2-capable CPU. win32-loader (0.9.4+deb10u2) buster; urgency=medium . * Fix stable FTBFS through enforcing LC_ALL=POSIX . win32-loader (0.9.4+deb10u1) buster; urgency=medium . * Rebuild in stable to embed the latest debian-archive-keyring (Closes: #933829) win32-loader (0.9.4+deb10u1) buster; urgency=medium . * Rebuild in stable to embed the latest debian-archive-keyring (Closes: #933829) xymon (4.3.28-5+deb10u1) buster; urgency=high . * Apply minimal upstream security patch to fix several (server-only) vulnerabilities reported upstream by Graham Rymer: + CVE-2019-13451: service overflows histlogfn in history.c. + CVE-2019-13452: service overflows histlogfn in reportlog.c. + CVE-2019-13273: srdb overflows dbfn in csvinfo.c. + CVE-2019-13274: reflected XSS in csvinfo.c. + CVE-2019-13455: htmlquoted(hostname) overflows msgline in acknowledge.c. + CVE-2019-13484: htmlquoted(xymondreq) overflows errtxt appfeed.c. + CVE-2019-13485: hostname overflows selfurl in history.c. + CVE-2019-13486: htmlquoted(xymondreq) overflows errtxt in svcstatus.c. + Closes: #935470 * Include hostname validation regression fixes from 4.3.30, too. yubikey-personalization (1.19.3-3+deb10u1) buster; urgency=medium . * Backport security improvements from v1.20.0 * debian/control: Add missing Break+Replaces on libyubikey-udev Closes: #931081 z3 (4.4.1-1~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. . z3 (4.4.1-1) unstable; urgency=medium . [ Gianfranco Costamagna ] * Team Upload * Upload to unstable . [ Andreas Beckmann ] * Do not set the SONAME of libz3java.so to libz3.so.4. (Closes: #842892) . z3 (4.4.1-0.5~exp1) experimental; urgency=medium . * Package moved to salsa (Closes: #926939) * Standards-Version updated to 4.2.1 * Fix priority-extra-is-replaced-by-priority-optional warning * Moved under the llvm umbrella z3 (4.4.1-1~deb9u1) stretch; urgency=medium . * Non-maintainer upload. * Rebuild for stretch. . z3 (4.4.1-1~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. . z3 (4.4.1-1) unstable; urgency=medium . [ Gianfranco Costamagna ] * Team Upload * Upload to unstable . [ Andreas Beckmann ] * Do not set the SONAME of libz3java.so to libz3.so.4. (Closes: #842892) . z3 (4.4.1-0.5~exp1) experimental; urgency=medium . * Package moved to salsa (Closes: #926939) * Standards-Version updated to 4.2.1 * Fix priority-extra-is-replaced-by-priority-optional warning * Moved under the llvm umbrella z3 (4.4.1-0.5~exp1) experimental; urgency=medium . * Package moved to salsa (Closes: #926939) * Standards-Version updated to 4.2.1 * Fix priority-extra-is-replaced-by-priority-optional warning * Moved under the llvm umbrella zeromq3 (4.3.1-4+deb10u1) buster-security; urgency=high . [ Luca Boccassi ] * Fix CVE-2019-13132: application metadata not parsed correctly when using CURVE. ========================================= Sat, 06 Jul 2019 - Debian 10.0 released =========================================