Skip to content
  • Ben Hutchings's avatar
    Import Debian changes 4.9.6-3 · 1671795b
    Ben Hutchings authored and Sophie Brun's avatar Sophie Brun committed
    linux (4.9.6-3) unstable; urgency=medium
    
      * btree,musb,st_sensors: Ignore ABI changes (fixes FTBFS on armel,armhf)
    
    linux (4.9.6-2) unstable; urgency=medium
    
      * linux-cpupower: Use dh-exec architecture filtering for x86-specific files
        (fixes FTBFS on !x86)
    
    linux (4.9.6-1) unstable; urgency=medium
    
      * New upstream stable update:
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3
        - iio: common: st_sensors: fix channel data parsing
        - [mips] staging: octeon: Call SET_NETDEV_DEV()
        - ALSA: hda - Fix up GPIO for ASUS ROG Ranger
        - ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
        - ALSA: usb-audio: Fix irq/process data synchronization
        - fscrypt: fix renaming and linking special files
        - [hppa/parisc] Add line-break when printing segfault info
        - [hppa/parisc] Mark cr16 clocksource unstable on SMP systems
        - HID: sensor-hub: Move the memset to sensor_hub_get_feature()
        - mac80211: initialize fast-xmit 'info' later
        - asm-prototypes: Clear any CPP defines before declaring the functions
        - [x86] drm/i915: Fix oopses in the overlay code due to i915_gem_active
          stuff
        - [x86] drm/i915: Fix oops in overlay due to frontbuffer tracking
        - [x86] drm/i915: Force VDD off on the new power seqeuencer before
          starting to use it
        - [x86] drm/i915: Initialize overlay->last_flip properly
        - [x86] KVM: reset MMU on KVM_SET_VCPU_EVENTS
        - [armhf] usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
        - [armhf] usb: musb: dsps: implement clear_ep_rxintr() callback
        - usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
        - usb: gadgetfs: restrict upper bound on device configuration size
        - USB: gadgetfs: fix unbounded memory allocation bug
        - USB: gadgetfs: fix use-after-free bug
        - USB: gadgetfs: fix checks of wTotalLength in config descriptors
        - USB: fix problems with duplicate endpoint addresses
        - usb: gadget: composite: Test get_alt() presence instead of set_alt()
        - [arm64, armhf] usb: dwc3: core: avoid Overflow events
        - usb: xhci: fix possible wild pointer
        - [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
        - xhci: free xhci virtual devices with leaf nodes first
        - usb: xhci: fix return value of xhci_setup_device()
        - usb: host: xhci: Fix possible wild pointer when handling abort command
        - xhci: Handle command completion and timeout race
        - usb: xhci: hold lock over xhci_abort_cmd_ring()
        - USB: serial: omninet: fix NULL-derefs at open and disconnect
        - USB: serial: quatech2: fix sleep-while-atomic in close
        - USB: serial: pl2303: fix NULL-deref at open
        - USB: serial: keyspan_pda: verify endpoints at probe
        - USB: serial: spcp8x5: fix NULL-deref at open
        - USB: serial: io_ti: fix NULL-deref at open
        - USB: serial: io_ti: fix another NULL-deref at open
        - USB: serial: io_ti: fix I/O after disconnect
        - USB: serial: iuu_phoenix: fix NULL-deref at open
        - USB: serial: garmin_gps: fix memory leak on failed URB submit
        - USB: serial: ti_usb_3410_5052: fix NULL-deref at open
        - USB: serial: io_edgeport: fix NULL-deref at open
        - USB: serial: oti6858: fix NULL-deref at open
        - USB: serial: cyberjack: fix NULL-deref at open
        - USB: serial: kobil_sct: fix NULL-deref in write
        - USB: serial: mos7840: fix NULL-deref at open
        - USB: serial: mos7720: fix NULL-deref at open
        - USB: serial: mos7720: fix use-after-free on probe errors
        - USB: serial: mos7720: fix parport use-after-free on probe errors
        - USB: serial: mos7720: fix parallel probe
        - usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
        - xhci: Use delayed_work instead of timer for command timeout
        - xhci: Fix race related to abort operation
        - [armhf] usb: musb: Fix trying to free already-free IRQ 4
        - usb: hub: Move hub_port_disable() to fix warning if PM is disabled
        - usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
        - ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
        - USB: serial: kl5kusb105: abort on open exception path
        - usb: gadget: Fix second argument of percpu_ida_alloc()
        - usb: gadget: fix request length error for isoc transfer
        - [armhf] dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host
          support
        - dibusb: fix possible memory leak in dibusb_rc_query()
        - USB: serial: io_ti: bind to interface after fw download
        - [x86] mei: move write cb to completion on credentials failures
        - iio: accel: st_accel: fix LIS3LV02 reading and scaling
        - [arm64, armhf] usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
        - [arm64, armhf] usb: dwc3: ep0: explicitly call
          dwc3_ep0_prepare_one_trb()
        - [arm64, armhf] usb: dwc3: gadget: always unmap EP0 requests
        - [x86] drm/i915/dp: add lane_count check in intel_dp_check_link_status
        - [x86] drm/i915: tune down the fast link training vs boot fail
        - mac80211: fix tid_agg_rx NULL dereference
        - nl80211: Use different attrs for BSSID and random MAC addr in scan req
        - ath10k: fix failure to send NULL func frame for 10.4
        - ath10k: use the right length of "background"
        - efi/efivar_ssdt_load: Don't return success on allocation failure
        - debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
        - [x86] prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
        - [x86] cpu: Probe CPUID leaf 6 even when cpuid_level == 6
        - [x86] platform/x86: fujitsu-laptop: use brightness_set_blocking for
          LED-setting callbacks
        - hwmon: (amc6821) sign extension temperature
        - hwmon: (ds620) Fix overflows seen when writing temperature limits
        - [armhf] hwmon: (g762) Fix overflows and crash seen when writing limit
          attributes
        - hwmon: (lm90) fix temp1_max_alarm attribute
        - Input: synaptics-rmi4 - unlock on error
        - [armhf] clk: ti: dra7: fix "failed to lookup clock node
          gmac_gmii_ref_clk_div" boot message
        - [amd64] iommu/amd: Missing error code in amd_iommu_init_device()
        - [amd64] iommu/amd: Fix the left value check of cmd buffer
        - [x86] iommu/vt-d: Fix pasid table size encoding
        - [x86] iommu/vt-d: Flush old iommu caches for kdump when the device gets
          context mapped
        - [x86] ASoC: cht_bsw_rt5645: Fix leftover kmalloc
        - [x86] ASoC: Intel: Skylake: Fix a shift wrapping bug
        - scsi: mvsas: fix command_active typo
        - target/iscsi: Fix double free in lio_target_tiqn_addtpg()
        - sbp-target: Fix second argument of percpu_ida_alloc()
        - relay: check array offset before using it
        - PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
        - PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
        - genirq/affinity: Fix node generation from cpumask
        - mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
        - docs-rst: fix LaTeX \DURole renewcommand with Sphinx 1.3+
        - mm: khugepaged: close use-after-free race during shmem collapsing
        - mm: khugepaged: fix radix tree node leak in shmem collapse error path
        - mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
        - [s390x] crypto: unlock on error in prng_tdes_read()
        - [arm64] crypto: sha2-ce - fix for big endian
        - [arm64] crypto: ghash-ce - fix for big endian
        - [arm64] crypto: aes-ccm-ce: fix for big endian
        - [arm64] crypto: sha1-ce - fix for big endian
        - [arm64] crypto: aes-xts-ce: fix for big endian
        - [arm64] crypto: aes-ce - fix for big endian
        - md: MD_RECOVERY_NEEDED is set for mddev->recovery
        - md: fix refcount problem on mddev when stopping array.
        - f2fs: remove percpu_count due to performance regression
        - f2fs: hide a maybe-uninitialized warning
        - PCI: Add Mellanox device IDs
        - PCI: Convert broken INTx masking quirks from HEADER to FINAL
        - PCI: Convert Mellanox broken INTx quirks to be for listed devices only
        - PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
        - PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
        - [powerpc/powerpc64,ppc64*] pci/rpadlpar: Fix device reference leaks
        - [s390x] topology: always use s390 specific sched_domain_topology_level
        - [s390x] pci: fix dma address calculation in map_sg
        - drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
        - [x86] drm/i915: disable PSR by default on HSW/BDW
        - [x86] drm/i915/gen9: unconditionally apply the memory bandwidth WA
        - [x86] drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
        - xfs: don't call xfs_sb_quota_from_disk twice
        - xfs: check return value of _trans_reserve_quota_nblks
        - xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
        - xfs: don't BUG() on mixed direct and mapped I/O
        - xfs: provide helper for counting extents from if_bytes
        - xfs: check minimum block size for CRC filesystems
        - xfs: fix unbalanced inode reclaim flush locking
        - xfs: new inode extent list lookup helpers
        - xfs: factor rmap btree size into the indlen calculations
        - xfs: always succeed when deduping zero bytes
        - xfs: remove prev argument to xfs_bmapi_reserve_delalloc
        - xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
        - xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
        - xfs: clean up cow fork reservation and tag inodes correctly
        - xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
        - xfs: pass post-eof speculative prealloc blocks to bmapi
        - xfs: Move AGI buffer type setting to xfs_read_agi
        - xfs: pass state not whichfork to trace_xfs_extlist
        - xfs: handle cow fork in xfs_bmap_trace_exlist
        - xfs: forbid AG btrees with level == 0
        - xfs: check for bogus values in btree block headers
        - xfs: complain if we don't get nextents bmap records
        - xfs: don't crash if reading a directory results in an unexpected hole
        - xfs: error out if trying to add attrs and anextents > 0
        - xfs: don't allow di_size with high bit set
        - xfs: don't cap maximum dedupe request length
        - xfs: ignore leaf attr ichdr.count in verifier during log replay
        - xfs: use GPF_NOFS when allocating btree cursors
        - xfs: fix double-cleanup when CUI recovery fails
        - xfs: use the actual AG length when reserving blocks
        - xfs: fix crash and data corruption due to removal of busy COW extents
        - xfs: fix max_retries _show and _store functions
        - clocksource/dummy_timer: Move hotplug callback after the real timers
        - tick/broadcast: Prevent NULL pointer dereference
        - Revert "rtlwifi: Fix enter/exit power_save"
        - Revert "usb: gadget: composite: always set ep->mult to a sensible value"
        - usb: gadget: composite: always set ep->mult to a sensible value
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
        - net: vrf: Fix NAT within a VRF
        - net: vrf: Drop conntrack data after pass through VRF device on Tx
        - sctp: sctp_transport_lookup_process should rcu_read_unlock when transport
          is null
        - inet: fix IP(V6)_RECVORIGDSTADDR for udp sockets
        - ipv6: handle -EFAULT from skb_copy_bits
        - net, sched: fix soft lockup in tc_classify
        - [arm64, armhf] net: stmmac: Fix race between stmmac_drv_probe and
          stmmac_open
        - net/sched: cls_flower: Fix missing addr_type in classify
        - net/mlx5: Check FW limitations on log_max_qp before setting it
        - net/mlx5: Cancel recovery work in remove flow
        - net/mlx5: Avoid shadowing numa_node
        - net/mlx5: Mask destination mac value in ethtool steering rules
        - net/mlx5: Prevent setting multicast macs for VFs
        - net/mlx5e: Don't sync netdev state when not registered
        - net/mlx5e: Disable netdev after close
        - rtnl: stats - add missing netlink message size checks
        - net: fix incorrect original ingress device index in PKTINFO
        - net: ipv4: dst for local input routes should use l3mdev if relevant
        - drop_monitor: add missing call to genlmsg_end
        - drop_monitor: consider inserted data in genlmsg_end
        - flow_dissector: Update pptp handling to avoid null pointer deref.
        - igmp: Make igmp group member RFC 3376 compliant
        - ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
        - net: vrf: Add missing Rx counters
        - [x86] bpf: change back to orig prog on too many passes
        - [armhf] net: dsa: bcm_sf2: Do not clobber b53_switch_ops
        - [armhf] net: dsa: bcm_sf2: Utilize nested MDIO read/write
        - r8152: split rtl8152_suspend function
        - r8152: fix rx issue for runtime suspend
        - [armhf] net: dsa: Ensure validity of dst->ds[0]
        - net: add the AF_QIPCRTR entries to family name tables
        - gro: Enter slow-path if there is no tailroom
        - gro: use min_t() in skb_gro_reset_offset()
        - gro: Disable frag0 optimization on IPv6 ext headers
        - net/mlx5e: Remove WARN_ONCE from adaptive moderation code
        - net: ipv4: Fix multipath selection with vrf
        - net: vrf: do not allow table id 0
        - HID: hid-cypress: validate length of report
        - ALSA: firewire-tascam: Fix to handle error from initialization of stream
          data
        - [powerpc] Fix build warning on 32-bit PPC
        - [arm64] dts: mt8173: Fix auxadc node
        - [arm64] dts: bcm2837-rpi-3-b: remove incorrect pwr LED
        - [arm64] dts: bcm2835: Fix bcm2837 compatible string
        - svcrdma: Clear xpt_bc_xps in xprt_setup_rdma_bc() error exit arm
        - [armhf] OMAP5: Fix mpuss_early_init
        - [armhf] OMAP5: Fix build for PM code
        - [armhf] OMAP4+: Fix bad fallthrough for cpuidle
        - [armhf] omap2+: am437x: rollback to use omap3_gptimer_timer_init()
        - [armel/marvell, armhf] spi: mvebu: fix baudrate calculation for armada
          variant
        - ALSA: usb-audio: Add a quirk for Plantronics BT600
        - [x86] drm/i915/gen9: Fix PCODE polling during CDCLK change notification
        - rtlwifi: Fix enter/exit power_save
        - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
        - Input: xpad - use correct product id for x360w controllers
        - Input: i8042 - add Pegatron touchpad to noloop table
        - [armhf] regulator: axp20x: Fix axp809 ldo_io registration error on cold
          boot
        - [arm64, armhf] drm/tegra: dpaux: Fix error handling
        - [arm64, armhf] drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
        - drm/savage: dereferencing an error pointer
        - zram: revalidate disk under init_lock
        - zram: support BDI_CAP_STABLE_WRITES
        - dax: fix deadlock with DAX 4k holes
        - mm: pmd dirty emulation in page fault handler
        - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
        - ocfs2: fix crash caused by stale lvb with fsdlm plugin
        - mm, memcg: fix the active list aging for lowmem requests when memcg is
          enabled
        - mm: support anonymous stable page
        - mm/slab.c: fix SLAB freelist randomization duplicate entries
          (CVE-2017-5546)
        - mm/hugetlb.c: fix reservation race when freeing surplus pages
        - [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
        - KVM: eventfd: fix NULL deref irqbypass consumer
        - jump_labels: API for flushing deferred jump label updates
        - [x86] KVM: flush pending lapic jump label updates on module unload
        - [x86] KVM: fix NULL deref in vcpu_scan_ioapic
        - [x86] KVM: add Align16 instruction flag
        - [x86] KVM: add asm_safe wrapper
        - [x86] KVM: emulate FXSAVE and FXRSTOR
        - [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
        - efi/libstub/arm*: Pass latest memory map to the kernel
        - [x86] efi: Prune invalid memory map entries and fix boot regression
        - [x86] efi: Don't allocate memmap through memblock after mm_init()
          (Closes: #851928)
        - nl80211: fix sched scan netlink socket owner destruction
        - gpio: Move freeing of GPIO hogs before numbing of the device
        - xfs: Timely free truncated dirty pages
        - bridge: netfilter: Fix dropping packets that moving through bridge
          interface
        - [x86] cpu/AMD: Clean up cpu_llc_id assignment per topology feature
        - [x86] bugs: Separate AMD E400 erratum and C1E bug
        - [x86] CPU/AMD: Fix Bulldozer topology
        - wusbcore: Fix one more crypto-on-the-stack bug
        - [armhf] usb: musb: fix runtime PM in debugfs
        - USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
        - USB: serial: ch341: fix initial modem-control state
        - USB: serial: ch341: fix resume after reset
        - USB: serial: ch341: fix open error handling
        - USB: serial: ch341: fix control-message error handling
        - USB: serial: ch341: fix open and resume after B0
        - i2c: print correct device invalid address
        - i2c: fix kernel memory disclosure in dev interface
        - fix a fencepost error in pipe_advance() (CVE-2017-5550)
        - xhci: fix deadlock at host remove by running watchdog correctly
        - btrfs: fix crash when tracepoint arguments are freed by wq callbacks
        - ASoC: hdmi-codec: use unsigned type to structure members with bit-field
        - Revert "tty: serial: 8250: add CON_CONSDEV to flags"
        - pid: fix lockdep deadlock warning due to ucount_lock
        - mnt: Protect the mountpoint hashtable with mount_lock
        - drivers: char: mem: Fix thinkos in kmem address checks
        - [armhf] dmaengine: omap-dma: Fix dynamic lch_map allocation
        - virtio_blk: avoid DMA to stack for the sense buffer
        - orinoco: Use shash instead of ahash for MIC calculations
        - sysrq: attach sysrq handler correctly for 32-bit kernel
        - [arm64, armhf] extcon: return error code on failure
        - Clearing FIFOs in RS485 emulation mode causes subsequent transmits to
          break
        - sysctl: Drop reference added by grab_header in proc_sys_readdir
          (CVE-2016-9191)
        - [s390x] net/af_iucv: don't use paged skbs for TX on HiperSockets
        - [x86] drm/i915/gen9: Fix PCODE polling timeout in stable backport
        - drm: Clean up planes in atomic commit helper failure path
        - drm/radeon: update smc firmware selection for SI
        - drm/radeon: drop verde dpm quirks
        - [x86] drm/amdgpu: update si kicker smc firmware
        - [x86] drm/amdgpu: drop verde dpm quirks
        - USB: serial: ch341: fix modem-control and B0 handling
        - net/mlx5: Only cancel recovery work when cleaning up device
        - i2c: piix4: Avoid race conditions with IMC
        - [x86] cpu: Fix bootup crashes by sanitizing the argument of the
          'clearcpuid=' command-line option
        - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
        - btrfs: fix locking when we put back a delayed ref that's too new
        - btrfs: fix error handling when run_delayed_extent_op fails
        - NFS: fix typo in parameter description
        - pNFS: Fix race in pnfs_wait_on_layoutreturn
        - NFS: Fix a performance regression in readdir
        - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
        - [armhf] i2c: mux: pca954x: fix i2c mux selection caching
        - [x86] drm/i915/gen9: Fix PCODE polling during SAGV disabling
        - drm: avoid uninitialized timestamp use in wait_vblank
        - [arm64, armhf] drm/panel: simple: Check against num_timings when setting
          preferred for timing
        - [x86] drm/i915: Move the min_pixclk[] handling to the end of readout
        - drm: Initialise drm_mm.head_node.allocated
        - block: Change extern inline to static inline
        - block: cfq_cpd_alloc() should use @GFP
        - [x86] ACPI / APEI: Fix NMI notification handling
        - [x86] powercap/intel_rapl: fix and tidy up error handling
        - iw_cxgb4: Fix error return code in c4iw_rdev_open()
        - [arm64, armhf] power: supply: bq27xxx_battery: Fix register map for
          BQ27510 and BQ27520
        - blk-mq: Always schedule hctx->next_cpu
        - [powerpc] mm: Correct process and partition table max size
        - [powerpc*] ibmebus: Fix further device reference leaks
        - [powerpc*] ibmebus: Fix device reference leaks in sysfs interface
        - [powerpc*] powernv: Don't warn on PE init if unfreeze is unsupported
        - [arm64] hugetlb: fix the wrong address for several functions
        - [arm64] hugetlb: remove the wrong pmd check in find_num_contig()
        - [arm64] hugetlb: fix the wrong return value for
          huge_ptep_set_access_flags
        https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6
        - IB/core: Release allocated memory in cache setup failure
        - IB/rxe: Increase max number of completions to 32k
        - IB/rxe: avoid putting a large struct rxe_qp on stack
        - IB/mlx5: Avoid system crash when enabling many VFs
        - IB/mlx5: Fix reported max SGE calculation
        - IB/mlx5: Assign SRQ type earlier
        - IB/mlx5: Wait for all async command completions to complete
        - IB/mlx4: Set traffic class in AH
        - IB/mlx4: Fix out-of-range array index in destroy qp flow
        - IB/mlx4: Handle well-known-gid in mad_demux processing
        - IB/mlx4: Fix port query for 56Gb Ethernet links
        - IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
        - IB/mlx4: Check if GRH is available before using it
        - IB/IPoIB: Remove can't use GFP_NOIO warning
        - perf trace: Use the syscall raw_syscalls:sys_enter timestamp
        - perf mem: Fix --all-user/--all-kernel options
        - perf trace: Check if MAP_32BIT is defined (again)
        - perf diff: Do not overwrite valid build id
        - perf callchain: Fixup help/config for no-unwinding
        - perf scripting: Avoid leaking the scripting_context variable
        - perf jit: Enable jitdump support without dwarf
        - [armhf] dts: bcm283x: fix typo in mailbox address
        - [armhf] dts: imx6q-cm-fx6: fix fec pinctrl
        - [armhf] dts: omap3: Add DTS for Logic PD SOM-LV 37xx Dev Kit
        - tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
        - [x86] PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
        - rcu: Narrow early boot window of illegal synchronous grace periods
        - sunrpc: don't call sleeping functions from the notifier block callbacks
        - svcrpc: don't leak contexts on PROC_DESTROY
        - libnvdimm, namespace: fix pmem namespace leak, delete when size set to
          zero
        - fuse: clear FR_PENDING flag when moving requests out of pending queue
        - fuse: fix time_to_jiffies nsec sanity check
        - PCI: Enumerate switches below PCI-to-PCIe bridges
        - HID: corsair: fix DMA buffers on stack (CVE-2017-5547)
        - HID: corsair: fix control-transfer error handling
        - mmc: sdhci-acpi: Only powered up enabled acpi child devices
        - ieee802154: atusb: do not use the stack for buffers to make them DMA able
          (CVE-2017-5548)
        - [s390x] KVM: do not expose random data via facility bitmap
        - [armhf,arm64] KVM: vgic: Fix deadlock on error handling
        - [powerpc*] icp-opal: Fix missing KVM case and harden replay
        - [powerpc*] perf: Fix PM_BRU_CMPL event code for power9
        - [powerpc*] ptrace: Preserve previous fprs/vsrs on short regset write
        - [powerpc*] ptrace: Preserve previous TM fprs/vsrs on short regset write
        - [powerpc*] Ignore reserved field in DCSR and PVR reads and writes
        - [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
        - qla2xxx: Fix crash due to null pointer access
        - mac80211: implement multicast forwarding on fast-RX path
        - ubifs: Fix journal replay wrt. xattr nodes
        - [armhf] clocksource/exynos_mct: Clear interrupt when cpu is shut down
        - svcrdma: avoid duplicate dma unmapping during error recovery
        - ceph: fix bad endianness handling in parse_reply_info_extra
        - [armhf] dts: OMAP5 / DRA7: indicate that SATA port 0 is available.
        - [arm64] avoid returning from bad_mode
        - [arm64] ptrace: Preserve previous registers for short regset write
        - [arm64] ptrace: Avoid uninitialised struct padding in fpr_set()
        - [arm64] ptrace: Reject attempts to set incomplete hardware breakpoint
          fields
        - Input: ALPS - fix TrackStick support for SS5 hardware
        - libceph: ceph_x_encrypt_buflen() takes in_len
        - libceph: old_key in process_one_ticket() is redundant
        - libceph: introduce ceph_x_encrypt_offset()
        - libceph: introduce ceph_crypt() for in-place en/decryption
          (CVE-2016-10153)
        - libceph: rename and align ceph_x_authorizer::reply_buf
        - libceph: tweak calcu_signature() a little
        - libceph: switch ceph_x_encrypt() to ceph_crypt()
        - libceph: switch ceph_x_decrypt() to ceph_crypt()
        - libceph: remove now unused ceph_*{en,de}crypt*() functions
        - [armhf] dts: Add an empty chosen node to top level DTSI
        - [armel,armhf] 8613/1: Fix the uaccess crash on PB11MPCore
        - ceph: fix scheduler warning due to nested blocking
        - ceph: fix ceph_get_caps() interruption
        - ceph: fix endianness of getattr mask in ceph_d_revalidate
        - ceph: fix endianness bug in frag_tree_split_cmp
        - libceph: make sure ceph_aes_crypt() IV is aligned
        - xprtrdma: Make FRWR send queue entry accounting more accurate
        - xprtrdma: Squelch "max send, max recv" messages at connect time
        - [arm64] mm: avoid name clash in __page_to_voff()
        - [arm64] Fix swiotlb fallback allocation
        - swiotlb: Convert swiotlb_force from int to enum
        - swiotlb: Add swiotlb=noforce debug option
        - scsi: ses: Fix SAS device detection in enclosure
        - scsi: mpt3sas: fix hang on ata passthrough commands
        - [armhf] PM / devfreq: exynos-bus: Fix the wrong return value
        - PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL
        - mtd: spi-nor: Off by one in cqspi_setup_flash()
        - mtd: spi-nor: Fix some error codes in cqspi_setup_flash()
        - [x86] ite-cir: initialize use_demodulator before using it
        - [armhf] dmaengine: pl330: Fix runtime PM support for terminated transfers
        - [armhf] soc: ti: wkup_m3_ipc: Fix error return code in wkup_m3_ipc_probe()
        - libceph: uninline ceph_crypto_key_destroy()
        - libceph: stop allocating a new cipher on every crypto request
    
      [ Ben Hutchings ]
      * [armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler
        support (Closes: #851481)
      * nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533)
      * ath9k: fix NULL pointer dereference (Closes: #851621)
      * cfg80211,memcg,power: Avoid ABI changes
      * bq27xxx_battery,cpuhp,libceph,orinoco,xhci: Ignore ABI changes
      * linux-image: Increase minimum version of initramfs-tools (Closes: #808038)
      * [x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
        (Closes: #778249)
      * [arm64] Enable ARCH_MESON and related drivers (Closes: #852132)
      * [arm64] dts: meson-gx: Add firmware reserved memory zones
      * [x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
      * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
        (Closes: #851916)
      * [arm64] video/fbdev: Change FB from module to built-in
      * [arm64,armhf] video/fbdev: Enable FB_EFI (Closes: #851778)
      * fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
      * [rt] genpatch.py: Verify tag and tarball signatures
      * fbdev: color map copying bounds checking (CVE-2016-8405)
      * [armhf,arm64] drm/vc4: Fix an integer overflow in temporary allocation
        layout. (CVE-2017-5576)
      * [armhf,arm64] drm/vc4: Return -EINVAL on the overflow checks failing.
        (CVE-2017-5577)
      * [arm64] ptrace: Avoid ABI change in 4.9.6
      * [arm64] Enable ARM64_ACPI_PARKING_PROTOCOL, ARCH_THUNDER, GPIO_PL061,
        GPIO_XGENE, ARM_SMMU, ARM_SMMU_V3, PCI_HOST_THUNDER_PEM, and
        PCI_HOST_THUNDER_ECAM; PINCTRL_AMD as built-in; SATA_AHCI_SEATTLE,
        HW_RANDOM_XGENE, HW_RANDOM_CAVIUM, CPUFREQ_DT, K3_DMA, GPIO_XGENE_SB,
        SENSORS_XGENE, I2C_THUNDERX, KEYBOARD_GPIO, TI_ST, THUNDER_NIC_PF,
        THUNDER_NIC_VF (Closes: #852493), THUNDER_NIC_BGX, THUNDER_NIC_RGX,
        MDIO_THUNDER, MDIO_XGENE, SPI_THUNDERX, and SND_SOC_APQ8016_SBC as
        modules (thanks to Riku Voipio)
    
      [ Roger Shimizu ]
      * [armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL)
      * drivers/input: Enable TOUCHSCREEN_GOODIX as module (Closes: #851821).
      * [mips/octeon] hwmon: Enable SENSORS_ADM1031 as module (Closes: #851963).
        Thanks to James Cowgill.
      * nbd: fix 64-bit division.
    1671795b